Function at 0xde5560
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00dd3ec0
add esp, 0xc
jb 0xde557b
jge 0xde558e
pushf
ror ebx, 6
ror ebx, 0x1a
popf
xchg ebx, edi
xchg ebx, edi
jl 0xde558e
add eax, 0x66b065b2
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 9], 0x42
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 8], 0
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0xa], al
shl esp, 0
jmp 0xde55d6
jae 0xde55f1
pushf
mov eax, eax
call 0xde55e1
add esp, 4
jbe 0xde55e6
jnp 0xde55e8
popf
jp 0xde55ec
jb 0xde55ee
jb 0xde55f1
ljmp 0xed5d:0x8ae8458a
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 9]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xd]
mov byte [ebp - 9], cl
mov cl, byte [ebp - 0x16]
dec al
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0x14]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
shl eax, 0
ror eax, 0x12
rol eax, 0x12
jno 0xde5682
xchg ebx, ebx
jo 0xde5682
mov ebx, 0xeb49e8d6
invalid
call fcn.00de41d0
mov edi, eax
test edi, edi
jne 0xde5696
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
shl esp, 0
xchg esi, edx
xchg esi, edx
add edx, 0
jle 0xde56ba
pushf
xchg esi, eax
xchg esi, eax
add ecx, dword [esp]
sub ecx, dword [esp]
or eax, 0
popf
xchg esi, esi
jp 0xde56b5
jmp 0xde56b7
jg 0xde56ba
mov edi, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push edi
call fcn.00dd41c0
push 0x11
lea edx, [ebp - 0x18]
mov edi, eax
push 0
push edx
mov dword [ebp - 4], edi
call fcn.00dd3ec0
add esp, 0xc
mov ecx, ecx
add esi, 0
jns 0xde56f4
pushf
ror ecx, 0
cmp esp, 0x3851
ja 0xde56ed
popf
jae 0xde56f1
js 0xde56f4
mov ecx, 0xb75ff85
test edi, edi
jne 0xde5703
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
sub esp, 0
jns 0xde571c
pushf
or ebx, 0
sub eax, 0
ror eax, 0
popf
xchg ebx, ebx
lea edi, [edi]
js 0xde571c
ljmp 0x6be8:0x50fc458b
mov eax, dword [ebp - 4]
push eax
call fcn.00debd90
push 0x11
lea ecx, [ebp - 0x18]
push 0
push ecx
call fcn.00dd3ec0
add esp, 0x10
push esi
pop esi
sub esp, 0
jnp 0xde5748
xchg esi, eax
xchg esi, eax
je 0xde5740
xchg edx, esi
xchg edx, esi
jp 0xde5748
call 0xb1440a43
mov cl, 0x6d
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 9], 0x58
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 8], 0
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0xa], al
jno 0xde578d
jle 0xde578f
lea ecx, [ecx]
shr esp, 0
jns 0xde57a1
jle 0xde5798
jmp 0xde579a
mov ecx, ecx
ja 0xde579e
js 0xde57a1
mov edx, 0x8ae8458a
pop ebp
in eax, dx
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 9]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xd]
mov byte [ebp - 9], cl
mov cl, byte [ebp - 0x16]
dec al
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0x14]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
jl 0xde5823
jp 0xde5825
jne 0xde5827
lea ebx, [ebx]
jp 0xde5836
xchg edi, eax
xchg edi, eax
jo 0xde582f
xchg ebx, ebx
jne 0xde5833
jnp 0xde5836
mov esp, 0xdc5c00a1
add byte [ebp - 0x7cda8b40], al
out dx, al
add byte [eax + 0xd], dh
mov eax, dword [0xdc5c00]
test eax, eax
je 0xde5864
sub esi, 0
jo 0xde5851
pushf
ja 0xde5848
jle 0xde584a
popf
jae 0xde584e
jno 0xde5851
sub eax, 0xdc5c00a1
add byte [ebp + 0x5052e855], cl
mov eax, dword [0xdc5c00]
lea edx, [ebp - 0x18]
push edx
push eax
call fcn.00dd41c0
mov ebx, eax
jmp 0xde5867
mov ebx, dword [ebp + 8]
push ecx
add ecx, 0x506
ror ecx, 0x1f
pop ecx
jl 0xde587e
js 0xde5876
xchg edi, edi
jae 0xde587a
jge 0xde587e
mov edi, 0x8d116a58
dec ebp
call 0xe92f58f1
xor eax, 0x83fffee6
les ecx, [ebx + ecx*4]
div byte [ebx + 7]
push 0x11
lea ecx, [ebp - 0x18]
push 0
push ecx
call fcn.00dd3ec0
add esp, 0xc
mov esi, esi
jae 0xde5899
jne 0xde5894
je 0xde5896
jb 0xde5899
mov ebp, 0x2b74db85
test ebx, ebx
je 0xde58c8
lea edx, [edx + 0x578e]
sub edx, 0x578e
jl 0xde58bf
pushf
xor esi, dword [esp + 0x10]
xor esi, dword [esp + 0x10]
jb 0xde58b7
clc
popf
jg 0xde58bc
jge 0xde58bf
sub eax, 0x64cbe853
add byte [eax], al
push ebx
call fcn.00debd90
add esp, 4
test esi, edx
xchg edi, edi
lea esp, [esp]
test esp, 0x3fb7
jns 0xde58eb
pushf
not ebx
not ebx
jbe 0xde58df
popf
lea esp, [esp]
jmp 0xde58e6
xchg ebx, ebx
js 0xde58eb
mov edi, 0x5208558b
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4