Function at 0x408901
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0x126cc
jmp 0x4083f7
sub ebx, 0x9da3
pop ebx
mov ecx, dword [ebp - 0x43c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x440], edx
push esi
sub esi, 0x149c1
or esi, 0x821d
or esi, 0x13766
pop esi
push edi
push ecx
add esp, 4
and edi, 0xaa9b
add edi, 0x17b44
sub edi, 0x146b2
or edi, 0xc34d
pop edi
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x408492
push edx
push ecx
add esp, 4
and edx, 0x16aee
jmp 0x408464
pop edx
push esi
call 0x408476
add byte [edx], bh
inc esi
cmp esi, dword [esi + eax*2]
inc edi
cmp al, 0x3b
cmp byte [ecx], bh
add esp, 4
sub esi, 0x14fa1
xor esi, 0x9b59
pop esi
mov dword [ebp - 0x74], 0
jmp 0x40881e
push ebx
xor ebx, 0x14895
pop ebx
push ecx
push eax
add esp, 4
jmp 0x4084a7
call 0x4084b3
add byte [esi], dh
dec edx
xor ecx, dword [ebp + 0x48]
dec eax
add esp, 4
and ecx, 0xffd9
jmp 0x4084c3
pop ecx
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x40851d
push ecx
xor ecx, 0x953f
and ecx, 0x15c2e
pop ecx
push esi
add esi, 0x4c49
call 0x408500
add byte [edx], dh
dec eax
dec eax
inc esi
inc ecx
push eax
add esp, 4
pop esi
push ebx
sub ebx, 0x471d
jmp 0x408510
pop ebx
mov dword [ebp - 0x74], 0
jmp 0x40881e
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0xb0], ecx
push edx
and edx, 0xae4b
or edx, 0x182e0
add edx, 0x719f
and edx, 0x15884
add dword [eax], eax
pop edx
push edx
push eax
add esp, 4
add edx, 0x2bd3
or edx, 0x67fc
and edx, 0x127e6
pop edx
lea edx, [ebp - 0x2b0]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x25c], ecx
push edi
push edi
add esp, 4
or edi, 0xa695
pop edi
push eax
call 0x408591
add byte [0x4d324e4b], dh
dec ebp
xor eax, 0x4c4833b
sub eax, 0x7346
or eax, 0x4456
jmp 0x4085a7
pop eax
xor edx, edx
mov word [ebp - 0x48], dx
xor eax, eax
mov word [ebp - 0x20], ax
push ecx
add ecx, 0x16692
xor ecx, 0x148c9
xor ecx, 0x3bf4
and ecx, 0x69a8
pop ecx
push ecx
push ebx
add esp, 4
and ecx, 0xa51f
sub ecx, 0xf4ef
and ecx, 0x12282
pop ecx
mov ecx, dword [ebp - 0x25c]
mov dx, word [ecx]
mov word [ebp - 0x1d6], dx
mov eax, dword [ebp - 0x25c]
add eax, 2
mov dword [ebp - 0x25c], eax
mov cx, word [ebp - 0x1d6]
mov word [ebp - 0x48], cx
push esi
or esi, 0x4ae7
call 0x408627
add byte [edi], bh
xor esi, dword [esi]
inc eax
dec esi
inc edx
inc esi
push eax
dec esi
add esp, 4
call 0x408638
add byte [0x423a4c42], dh
cmp dword [edi], edi
dec esi
add esp, 4
xor esi, 0x8624
pop esi
mov edx, dword [ebp - 0x260]
mov ax, word [edx]
mov word [ebp - 0x1e0], ax
mov ecx, dword [ebp - 0x260]
add ecx, 2
mov dword [ebp - 0x260], ecx
mov dx, word [ebp - 0x1e0]
mov word [ebp - 0x20], dx
push edi
push eax
add esp, 4
and edi, 0x6871
jmp 0x40867f
sub edi, 0xbd7a
pop edi
push esi
push edi
add esp, 4
sub esi, 0x17403
add byte [ecx + 0xa97aee], al
add byte [ecx + 0x1053be6], al
add byte [esi + 0xf], bl
mov bh, 0x45
loopne 0x408628
invalid
jne 0x4086bb
movzx ecx, word [ebp - 0x48]
movzx edx, word [ebp - 0x20]
sub ecx, edx
mov dword [ebp - 0x334], ecx
jmp 0x40873e
movzx eax, word [ebp - 0x48]
movzx ecx, word [ebp - 0x20]
cmp eax, ecx
je 0x4085b4
movzx edx, word [ebp - 0x48]
xor edx, 0x20
movzx eax, word [ebp - 0x20]
cmp edx, eax
je 0x4085b4
push edx
push esi
add esp, 4
or edx, 0x128f9
pop edx
push ecx
push edi
add esp, 4
and ecx, 0x7d80
pop ecx
push edi
add edi, 0x367
xor edi, 0x12d65
jmp 0x408709
or edi, 0xf874
pop edi
movzx ecx, word [ebp - 0x48]
movzx edx, word [ebp - 0x20]
cmp ecx, edx
jge 0x408728
mov dword [ebp - 0x330], 0xffffffff
jmp 0x408732
mov dword [ebp - 0x330], 1
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jne 0x408787
push eax
xor eax, 0x14902
jmp 0x408754
jmp 0x40875c
sub eax, 0x5b94
pop eax
push ecx
and ecx, 0x45c8
xor ecx, 0x112f3
pop ecx
push esi
add esi, 0x150e9
pop esi
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0x74], ecx
jmp 0x40881e
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx]
mov dword [ebp - 0xb0], eax
push eax
or eax, 0x1459d
pop eax
push edx
push edx
add esp, 4
sub edx, 0xd5b9
and edx, 0x12677
call 0x4087bd
add byte [0x4b394147], dh
xor al, 0x46
cmp esi, dword [0x8104c483]
ret 0x8a7d
cmp dword [ebp - 0x74], 0
jne 0x4094b9
push esi
push eax
add esp, 4
call 0x40883b
add byte [edi], dh
dec edi
dec eax
inc esi
push eax
aaa
xor eax, 0x8104c483
into
cld
push ebx
add dword [eax], eax
jmp 0x40884d
pop esi
push esi
push ebx
add esp, 4
xor esi, 0x12cf3
pop esi
mov eax, 0x6b
mov word [ebp - 0x3a0], ax
mov ecx, 0x65
mov word [ebp - 0x39e], cx
mov edx, 0x72
mov word [ebp - 0x39c], dx
mov eax, 0x6e
mov word [ebp - 0x39a], ax
mov ecx, 0x65
mov word [ebp - 0x398], cx
mov edx, 0x6c
mov word [ebp - 0x396], dx
mov eax, 0x33
mov word [ebp - 0x394], ax
mov ecx, 0x32
mov word [ebp - 0x392], cx
mov edx, 0x2e
mov word [ebp - 0x390], dx
mov eax, 0x64
mov word [ebp - 0x38e], ax
mov ecx, 0x6c
mov word [ebp - 0x38c], cx
mov edx, 0x6c
mov word [ebp - 0x38a], dx
xor eax, eax
mov word [ebp - 0x388], ax
push ecx
call 0x408901
add byte [edx], bh
inc edi
dec esi
cmp eax, 0x83424138
les eax, [ebx + ebp*8]
pop es
cmp al, byte [ecx + 0x4f]
inc edi
inc esi
aas
dec ebp
pop ecx
push ebx
or ebx, 0xa858
jmp 0x40891e
sub ebx, 0x55c
pop ebx
mov byte [ebp - 0x174], 0x4c
mov byte [ebp - 0x173], 0x6f
mov byte [ebp - 0x172], 0x61
mov byte [ebp - 0x171], 0x64
mov byte [ebp - 0x170], 0x4c
mov byte [ebp - 0x16f], 0x69
mov byte [ebp - 0x16e], 0x62
mov byte [ebp - 0x16d], 0x72
mov byte [ebp - 0x16c], 0x61
mov byte [ebp - 0x16b], 0x72
mov byte [ebp - 0x16a], 0x79
mov byte [ebp - 0x169], 0x57
mov byte [ebp - 0x168], 0
push edx
xor edx, 0x10689
jmp 0x40898e
call 0x40899b
add byte [eax + 0x3d], al
xor eax, dword [edx + 0x43]
inc edi
inc eax
add esp, 4
pop edx
push ebx
push edx
add esp, 4
add ebx, 0x4e22
jmp 0x4089b1
pop ebx
push edi
jmp 0x4089b9
xor edi, 0x1376a
xor edi, 0xd28f
pop edi
push esi
push ebx
add esp, 4
and esi, 0x10a00
xor esi, 0x1efe
pop esi
push eax
push esi
add esp, 4
xor eax, 0xf9ca
pop eax
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x444], ecx
push edi
push esi
add esp, 4
add edi, 0x16929
xor edi, 0x11244
pop edi
push edi
or edi, 0xf893
pop edi
push ebx
push eax
add esp, 4
jmp 0x408a16
pop ebx
push edx
push edi
add esp, 4
sub edx, 0x1bb6
pop edx
mov edx, dword [ebp - 0x444]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x448], eax
push ebx
or ebx, 0x1457
pop ebx
push edx
push edi
add esp, 4
sub edx, 0xf3ea
and edx, 0x1ca7
pop edx
push esi
push ebx
add esp, 4
or esi, 0xce5c
sub esi, 0x1201d
and esi, 0x150d4
pop esi
mov ecx, dword [ebp - 0x448]
mov dword [ebp - 0x338], ecx
cmp dword [ebp - 0x338], 0
jne 0x408aba
push ecx
push eax
add esp, 4
jmp 0x408a87
call 0x408a96
add byte [eax + 0x4e], cl
xor eax, 0x3b4d4149
dec esi
add esp, 4
call 0x408aa7
add byte [ebp + esi + 0x47], al
dec esi
inc eax
aaa
push eax
cmp al, 0x83
les eax, [ecx + ebx*2]
mov dword [ebp - 0xd0], 0
jmp 0x408e4f
push ecx
push eax
add esp, 4
xor ecx, 0x9b6e
sub ecx, 0xf87b
and ecx, 0x183c5
pop ecx
push ebx
add ebx, 0x97f2
pop ebx
push edi
push ebx
add esp, 4
add edi, 0x3631
sub edi, 0x11977
pop edi
mov edx, dword [ebp - 0x338]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x270], ecx
cmp dword [ebp - 0x270], 0
jne 0x408b48
push ebx
push esi
add esp, 4
call 0x408b1a
add byte [ecx], bh
inc esp
cmp byte [edi], bh
cmp dword [esi], esi
xor eax, 0x4c48337
sub ebx, 0x46a9
pop ebx
push ebx
xor ebx, 0xcdb1
jmp 0x408b30
pop ebx
push ecx
or ecx, 0x14e00
pop ecx
mov dword [ebp - 0xd0], 0
jmp 0x408e4f
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0xbc], edx
push ecx
push ecx
add esp, 4
sub ecx, 0x1798e
and ecx, 0x58ee
or ecx, 0x10c90
sub ecx, 0x176e6
pop ecx
push ecx
add ecx, 0x7f31
sub ecx, 0xbde
or ecx, 0x9833
pop ecx
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x268], edx
push edx
push esi
add esp, 4
call 0x408bb6
add byte [ebx + 0x3a], al
aaa
xor al, 0x49
dec ebx
aas
push eax
add esp, 4
xor edx, 0x6a20
call 0x408bcf
add byte [ebx], dh
cmp dh, byte [edx]
push eax
dec ebx
inc esp
xor esi, dword [esi + ecx*2]
add esp, 4
pop edx
xor eax, eax
mov word [ebp - 0x4c], ax
xor ecx, ecx
mov word [ebp - 0x24], cx
push edi
push ebx
add esp, 4
xor edi, 0x17c5a
add edi, 0x11d97
add edi, 0x11f76
or edi, 0x17b12
pop edi
push ebx
push edx
add esp, 4
and ebx, 0x6d29
jmp 0x408c10
pop ebx
mov edx, dword [ebp - 0x268]
mov ax, word [edx]
invalid
invalid
test dword [eax], ebp
invalid
invalid