Function at 0x5de1a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005dd030
add esp, 0xc
test ebx, 0x566f
cmp esp, 0x155c
je 0x5de1db
pushf
neg esi
neg esi
and esi, 0xffffffff
jb 0x5de1d2
jle 0x5de1d4
popf
lea ecx, [ecx]
jne 0x5de1db
xor dword [eax - 0x17ba399a], 0xe9458853
mov al, 0x66
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x50
mov byte [ebp - 0x14], 0x71
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0x11], 0x4c
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x7a
mov byte [ebp - 0xe], 0x46
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x42
mov byte [ebp - 0xb], 0
jne 0x5de214
mov esp, esp
shr edi, 0
xor eax, dword [esp + 0x10]
xor eax, dword [esp + 0x10]
jp 0x5de234
lea esi, [esi + 0x15b5]
lea esi, [esi - 0x15b5]
xchg esi, eax
xchg esi, eax
jnp 0x5de234
mov esi, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0xc]
dec al
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x10]
dec cl
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0xf]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0x15], al
mov byte [ebp - 0x10], bl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0xf], cl
and edx, edx
push esi
pop esi
rol esp, 0
jb 0x5de2a5
jae 0x5de2ae
jle 0x5de2a9
jp 0x5de2ab
jb 0x5de2ae
jmp 0xa8b09a
call 0x5e2d80
mov ecx, eax
test ecx, ecx
mov dword [ebp - 4], ecx
jne 0x5de2ca
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
lea eax, [eax + 0x4e1b]
sub eax, 0x4e1b
jno 0x5de2d7
cmc
xor ebx, 0
jno 0x5de2ed
pushf
ja 0x5de2e1
xchg ebx, ebx
nop
popf
jo 0x5de2e8
jg 0x5de2ea
jo 0x5de2ed
lcall 0xe851, 0x52e8558d
sbb dword [edx - 0x7750000], esi
lea edx, [ebp - 0x18]
push edx
push ecx
call fcn.005e9510
mov edi, eax
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
mov dword [ebp - 8], edi
call fcn.005dd030
add esp, 0xc
test edi, edi
jne 0x5de31e
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
jns 0x5de320
jb 0x5de344
pushf
or eax, 0
and esi, esi
jg 0x5de32b
cmp esi, 0x7a61
popf
lea eax, [eax + 0x7a44]
lea eax, [eax - 0x7a44]
jne 0x5de341
jae 0x5de344
mov ecx, 0x23c6e857
add dword [eax], eax
push edi
call fcn.005f0710
push 0xe
lea ecx, [ebp - 0x18]
push 0
push ecx
call fcn.005dd030
add esp, 0x10
xor esi, 0
jne 0x5de366
mov esp, esp
jle 0x5de363
je 0x5de366
xor dword [eax - 0x17ba399a], 0xe9458853
mov al, 0x66
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x50
mov byte [ebp - 0x14], 0x71
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0x11], 0x4c
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x7a
mov byte [ebp - 0xe], 0x46
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x58
mov byte [ebp - 0xb], 0
jmp 0x5de39f
rol edi, 0
je 0x5de3ae
jg 0x5de3a6
jno 0x5de3a8
jne 0x5de3aa
jne 0x5de3ae
mov ecx, 0xe85d8abc
mov bl, byte [ebp - 0x18]
mov dl, byte [ebp - 0x13]
mov cl, byte [ebp - 0xe]
mov al, byte [ebp - 0x17]
dec bl
dec dl
mov byte [ebp - 0x18], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0x13], dl
mov dl, byte [ebp - 0xd]
dec al
mov byte [ebp - 0xe], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec dl
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0xf]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
clc
clc
jno 0x5de41a
je 0x5de41c
jae 0x5de428
lea esp, [esp]
mov ecx, ecx
jb 0x5de428
mov esi, 0xe783811d
call dword [edi + 0xcc8397]
and edi, 0xffffffff
xchg edi, eax
xchg edi, eax
or esp, 0
je 0x5de43d
xchg edi, edi
jae 0x5de436
lea esp, [esp]
jne 0x5de43d
xor eax, 0xfc458b41
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x18]
push edx
push eax
call fcn.005e9510
mov edi, eax
or esp, 0
jnp 0x5de451
and eax, 0xffffffff
jb 0x5de463
jmp 0x5de458
jnp 0x5de45a
jbe 0x5de45c
lea esp, [esp]
jae 0x5de463
mov esi, 0x8d0e6ae8
dec ebp
call 0xe8aee4d6
shr bl, 0xff
inc dword [ebx - 0x117cf33c]
add byte [ebp + 0x3082474], al
add al, 0x24
push 0xe
lea ecx, [ebp - 0x18]
push 0
push ecx
call fcn.005dd030
add esp, 0xc
sub esi, 0
test dword [esp + 8], esi
add eax, dword [esp]
sub eax, dword [esp]
or esp, 0
jle 0x5de49c
pushf
xor ebx, ecx
xor ebx, ecx
popf
lea eax, [eax + 0x60ec]
lea eax, [eax - 0x60ec]
jg 0x5de49c
mov esp, 0x1874ff85
test edi, edi
je 0x5de4b8
js 0x5de4a2
jle 0x5de4af
lea eax, [eax]
js 0x5de4a8
jle 0x5de4aa
jns 0x5de4ac
jg 0x5de4af
sub eax, 0x225be857
add dword [eax], eax
push edi
call fcn.005f0710
add esp, 4
xchg esp, esp
xchg ecx, eax
xchg ecx, eax
ja 0x5de4d3
xchg esp, esp
jmp 0x5de4c2
lea ebx, [ebx + 0x1fba]
lea ebx, [ebx - 0x1fba]
xchg esi, esi
jbe 0x5de4d3
or dword [ebx + 0x458b1855], 0x104d8b14
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
push edx
mov edx, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14