Function at 0xdcf970
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x11
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00dd3ec0
add esp, 0xc
jp 0xdcf98b
nop
jns 0xdcf98e
xchg esi, edx
xchg esi, edx
je 0xdcf9a6
pushf
nop
lea esp, [esp]
cmp edx, edi
rol esp, 0
popf
jmp 0xdcf9a3
jne 0xdcf9a6
mov ebx, 0x76b166b0
mov al, 0x66
mov cl, 0x76
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x52
mov byte [ebp - 0x18], cl
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x73
mov byte [ebp - 0x15], 0x7a
mov byte [ebp - 0x14], 0x57
mov byte [ebp - 0x13], 0x62
mov byte [ebp - 0x12], 0x6d
mov byte [ebp - 0x11], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0xc], 0
xor edi, 0x2274
xor edi, 0x2274
jge 0xdcfa08
lea eax, [eax + 0x5758]
lea eax, [eax - 0x5758]
ja 0xdcfa05
jl 0xdcfa08
mov ebp, 0x8ae44d8a
inc ebp
jmp 0x8bcb579c
mov cl, byte [ebp - 0x1c]
mov al, byte [ebp - 0x17]
mov bl, byte [ebp - 0x12]
mov dl, byte [ebp - 0xd]
dec cl
dec al
mov byte [ebp - 0x1c], cl
mov cl, byte [ebp - 0x1b]
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x16]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0x11]
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x1a]
dec cl
dec al
mov byte [ebp - 0x1b], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0x19]
mov byte [ebp - 0x1a], dl
mov dl, byte [ebp - 0x14]
dec cl
dec al
mov byte [ebp - 0x15], cl
mov cl, byte [ebp - 0xf]
dec bl
mov byte [ebp - 0x10], al
mov al, byte [ebp - 0x18]
dec dl
mov byte [ebp - 0x19], bl
mov bl, byte [ebp - 0x13]
mov byte [ebp - 0x14], dl
mov dl, byte [ebp - 0xe]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0xf], cl
mov byte [ebp - 0x18], al
mov byte [ebp - 0x13], bl
mov byte [ebp - 0xe], dl
xor ebx, dword [esp + 4]
xor ebx, dword [esp + 4]
jb 0xdcfa9b
jge 0xdcfa94
jmp 0xdcfa96
jb 0xdcfa98
jae 0xdcfa9b
mov ecx, 0x18080e8
add byte [ecx - 0x3f7a03bb], cl
call fcn.00de7b20
mov dword [ebp - 4], eax
test eax, eax
jne 0xdcfab5
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
lea edx, [edx + 0x5ebe]
lea edx, [edx - 0x5ebe]
cmp edi, dword [esp]
jne 0xdcfacd
mov esi, esi
jne 0xdcfaca
je 0xdcfacd
lcall 0xe850, 0x51e44d8d
jmp 0x6adcfb1e
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.00dd41c0
push 0x11
lea edx, [ebp - 0x1c]
mov edi, eax
push 0
push edx
mov dword [ebp - 8], edi
call fcn.00dd3ec0
add esp, 0xc
test edi, edi
jne 0xdcfafe
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
shl ebx, 0
xchg ebx, ecx
xchg ebx, ecx
jp 0xdcfb2c
pushf
xor esi, 0
cmp edi, 0x2334
xor esi, 0xbb9
xor esi, 0xbb9
call 0xdcfb23
add esp, 4
popf
nop
jnp 0xdcfb2c
mov esi, 0xc25ee857
add dword [eax], eax
push edi
call fcn.00debd90
push 0x11
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00dd3ec0
add esp, 0x10
call 0xdcfb47
add esp, 4
shl esp, 0
jp 0xdcfb4f
test eax, edi
jns 0xdcfb5c
mov edx, edx
je 0xdcfb57
xchg ebx, ebx
js 0xdcfb5c
mov eax, 0x76b166b0
mov al, 0x66
mov cl, 0x76
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x52
mov byte [ebp - 0x18], cl
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x73
mov byte [ebp - 0x15], 0x7a
mov byte [ebp - 0x14], 0x57
mov byte [ebp - 0x13], 0x62
mov byte [ebp - 0x12], 0x6d
mov byte [ebp - 0x11], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
jnp 0xdcfba1
dec edx
inc edx
ja 0xdcfbad
js 0xdcfba7
mov edi, edi
jbe 0xdcfbad
mov ecx, 0xe4558aaf
mov dl, byte [ebp - 0x1c]
mov cl, byte [ebp - 0x17]
mov al, byte [ebp - 0x12]
mov bl, byte [ebp - 0xd]
dec dl
dec cl
mov byte [ebp - 0x1c], dl
mov dl, byte [ebp - 0x1b]
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0x1a]
dec dl
dec cl
mov byte [ebp - 0x1b], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x19]
mov byte [ebp - 0x1a], bl
mov bl, byte [ebp - 0x14]
dec dl
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
dec al
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0x18]
dec bl
mov byte [ebp - 0x19], al
mov al, byte [ebp - 0x13]
mov byte [ebp - 0x14], bl
mov bl, byte [ebp - 0xe]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0x18], cl
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], bl
shl ecx, 0
xchg esp, esp
inc edi
dec edi
jbe 0xdcfc4f
pushf
and edi, edi
test esp, 0x51d9
mov esp, esp
xchg esi, esi
popf
mov edx, edx
js 0xdcfc4a
jbe 0xdcfc4c
ja 0xdcfc4f
ljmp 0xf4:0x8300c4c1
rol esp, 0
xor esp, 0
jae 0xdcfc57
jge 0xdcfc69
pushf
shl esp, 0
jns 0xdcfc60
popf
xchg esi, esi
mov eax, eax
jl 0xdcfc69
mov edx, 0x8be44d8d
push ebp
cld
lea ecx, [ebp - 0x1c]
mov edx, dword [ebp - 4]
push ecx
push edx
call fcn.00dd41c0
mov esi, eax
xor ecx, eax
xor ecx, eax
jo 0xdcfc7e
jo 0xdcfc9f
pushf
add eax, 0xe12
sub eax, 0xe12
popf
jae 0xdcfc90
lea edi, [edi + 0x76a2]
lea edi, [edi - 0x76a2]
jno 0xdcfc9f
mov edx, 0x458d116a
in al, 0x6a
add byte [eax - 0x18], dl
adc al, 0x42
add byte [eax], al
push 0x11
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00dd3ec0
add esp, 0xc
push edi
add edi, 0x6b8b
ror edi, 0x1e
pop edi
je 0xdcfcc0
nop
jne 0xdcfcc0
ljmp 0xdaf7:0x2c74f685
test esi, esi
je 0xdcfcf0
neg edx
neg edx
or ecx, ecx
jnp 0xdcfce7
pushf
push eax
add eax, 0x34fb
ror eax, 0x1d
pop eax
and edx, edx
jb 0xdcfcdc
xor ebx, ecx
xor ebx, ecx
popf
jo 0xdcfce4
jp 0xdcfce7
mov ebx, 0xc0a3e856
add dword [eax], eax
push esi
call fcn.00debd90
add esp, 4
sub esi, 0
jb 0xdcfcf5
jp 0xdcfcff
xchg esi, edx
xchg esi, edx
jnp 0xdcfcff
mov eax, 0x1c4d8bcd
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x14]
push ecx
mov ecx, dword [ebp + 0x10]
push edx
mov edx, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18