Function at 0x40987b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
pop ebx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
call dword [eax - 0x3a]
test dword [ecx], eax
clc
invalid
push dword [edx - 0x3a]
test dword [edx], eax
clc
invalid
jmp [edi - 0x3a]
test dword [ebx], eax
clc
invalid
jmp dword [ebx - 0x3a]
test dword [eax + edi*8], eax
invalid
jmp dword [ebp - 0x3a]
test dword [0x73fffff8], eax
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push eax
xor eax, 0xdf5a
and eax, 0x120ca
add eax, 0xe96
jmp 0x4098ec
pop eax
push edx
push ecx
add esp, 4
sub edx, 0xe636
add edx, 0x64dd
add edx, 0xc8b0
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push edi
push esi
add esp, 4
call 0x4099b2
add byte [eax + edx*2 + 0x4c], cl
cmp dh, byte [edi + eax*2]
xor al, byte [ebx + 0x4f]
add esp, 4
pop edi
push esi
push edi
add esp, 4
add esi, 0x17593
pop esi
push ecx
add ecx, 0x1787d
xor ecx, 0x12d3c
pop ecx
push esi
and esi, 0x1321e
call 0x4099e5
add byte [ebp + 0x41], cl
aaa
inc edi
xor al, 0x4a
inc esi
cmp al, 0x83
les eax, [esi + ebx*2]
push esi
jmp 0x4099ef
add esi, 0x119fb
pop esi
push ecx
push esi
add esp, 4
xor ecx, 0x60e3
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ebx
sub ebx, 0x30db
call method.._AUmarshaler__1__make_marshaler_impl_winrt__YAHPAUtype___abi_UIUnknown_Foundation_Windows_winrt__X_23_PAPAX_Z_.virtual_28
add byte [ebp + ecx*2 + 0x34], cl
dec ebx
dec ebp
inc ebx
xor al, 0x43
dec esi
add esp, 4
add ebx, 0xaa45
pop ebx
push edi
push ebx
add esp, 4
and edi, 0x16f6e
add edi, 0xf694
pop edi
cmp dword [ebp - 0x14d4], 0
jne 0x409a74
mov dword [ebp - 0x2e0], 0
jmp 0x409d30
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ebx
or ebx, 0x12e54
and ebx, 0x154b9
or ebx, 0x2f76
sub ebx, 0x12d21
pop ebx
push edi
push edi
add esp, 4
and edi, 0x57e5
xor edi, 0x14677
add edi, 0xb553
pop edi
cmp dword [ebp - 0xc20], 0
jne 0x409ad0
invalid
mov dword [ebp - 0x2e0], 0
jmp 0x409d30
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edi
and edi, 0x8c6e
add edi, 0x262f
add edi, 0x1526f
add edi, 0x90b2
pop edi
push ebx
push edi
add esp, 4
and ebx, 0xc8de
sub ebx, 0xa981
or ebx, 0x2885
pop ebx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ecx
and ecx, 0x8c69
sub ecx, 0x798
or ecx, 0x12a1b
call 0x409b5b
add byte [esp + esi], bh
dec eax
inc eax
aas
inc eax
add esp, 4
pop ecx
push edi
add edi, 0x4db6
jmp 0x409b6c
pop edi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push eax
call 0x409bd7
add byte [ebx + 0x3c], al
dec ecx
inc ebp
xor al, 0x4e
cmp dh, byte [edx]
dec edx
add esp, 4
add eax, 0x4525
pop eax
push esi
push ecx
add esp, 4
sub esi, 0x1ff6
and esi, 0x13678
or esi, 0x12498
pop esi
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x409c1c
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x409c7f
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x409b3b
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x409b3b
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x409c69
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x409c73
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x409cc8
push ebx
push ecx
add esp, 4
add ebx, 0x52bc
jmp 0x409c98
pop ebx
push eax
add eax, 0x73c8
pop eax
push eax
and eax, 0x4ed3
call 0x409cb6
add byte [ebx], dh
inc ebp
inc edx
xor eax, 0x4c444e4a
add esp, 4
pop eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x409d30
push edi
xor edi, 0xf46c
jmp 0x409cd5
or edi, 0x1793d
sub edi, 0x145d
pop edi
push ecx
push ecx
add esp, 4
or ecx, 0x814d
pop ecx
push edi
push edx
add esp, 4
sub edi, 0x150cc
pop edi
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x409d26
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x409adc
mov dword [ebp - 0x2e0], 0
push edi
or edi, 0xe5c
xor edi, 0x10827
add edi, 0x10c2c
pop edi
push edi
jmp 0x409d4d
sub edi, 0x4ac9
pop edi
push edx
or edx, 0x6565
add edx, 0xc68f
pop edx
cmp dword [ebp - 0x2e0], 0
jne 0x40a67b
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push edx
push edi
add esp, 4
add edx, 0x16ca1
pop edx
push edi
push ecx
add esp, 4
jmp 0x409e21
call fcn.00409e30
add byte [ebx], dh
inc ebp
inc ebp
inc edi
dec ebx
cmp cl, byte [edi + 0x41]
aaa