Function at 0xde3620
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00dd3ec0
add esp, 0xc
cmp ecx, 0x71ca
jle 0xde3651
pushf
stc
xchg edi, edx
xchg edi, edx
popf
jno 0xde364c
mov esi, esi
jg 0xde3651
mov ebp, 0x6db166b0
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x6a
mov byte [ebp - 0xd], 0x6e
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x10], al
mov byte [ebp - 0xc], al
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xb], 0x42
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x4f
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0xe], 0x62
mov esp, esp
inc ebx
dec ebx
jg 0xde36aa
je 0xde36a3
jnp 0xde36a5
jle 0xde36aa
jmp 0x5e6863a5
mov bl, byte [ebp - 0x1c]
mov dl, byte [ebp - 0x17]
mov cl, byte [ebp - 0x12]
mov al, byte [ebp - 0xd]
dec bl
dec dl
mov byte [ebp - 0x1c], bl
mov bl, byte [ebp - 0x1b]
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x11]
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xc]
dec bl
dec dl
mov byte [ebp - 0x1b], bl
mov bl, byte [ebp - 0x1a]
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
dec bl
dec dl
mov byte [ebp - 0x1a], bl
mov bl, byte [ebp - 0x19]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0x14]
dec al
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xf]
mov byte [ebp - 0xb], al
mov al, byte [ebp - 0x18]
dec bl
dec dl
dec cl
dec al
mov byte [ebp - 0x19], bl
mov bl, byte [ebp - 0x13]
mov byte [ebp - 0x14], dl
mov byte [ebp - 0xf], cl
mov byte [ebp - 0x18], al
mov dl, byte [ebp - 0xe]
dec bl
dec dl
mov byte [ebp - 0x13], bl
mov byte [ebp - 0xe], dl
test edi, 0x2bf4
jbe 0xde375f
pushf
add edx, 0x7b0b
sub edx, 0x7b0b
cmp esp, 0x6574
popf
ja 0xde375a
jb 0xde375c
ja 0xde375f
mov ebx, 0xa6ce8
add byte [ebp + 0x5f0975c0], al
call fcn.00de41d0
test eax, eax
jne 0xde3771
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
std
cld
jge 0xde3789
jo 0xde3777
lea esi, [esi]
lea edx, [edx + 0x73c9]
lea edx, [edx - 0x73c9]
jl 0xde3789
mov edi, 0xe44d8dfa
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.00dd41c0
push 0x13
lea edx, [ebp - 0x1c]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.00dd3ec0
add esp, 0xc
cmp edi, esi
not eax
not eax
or edi, 0
test dword [esp + 0x10], edi
je 0xde37be
xchg esp, esp
jno 0xde37bb
jne 0xde37be
mov eax, 0xb75f685
test esi, esi
jne 0xde37cd
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
jno 0xde37cf
cmp ebx, 0x5028
lea esp, [esp]
jbe 0xde37ed
pushf
shl esp, 0
cmp ebx, dword [esp]
popf
jns 0xde37e6
jnp 0xde37e8
jmp 0xde37ea
ja 0xde37ed
xor eax, 0x859de856
add byte [eax], al
push esi
call fcn.00debd90
push 0x13
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00dd3ec0
add esp, 0x10
jae 0xde3805
jg 0xde3823
pushf
jnp 0xde380b
xor edi, dword [esp]
xor edi, dword [esp]
popf
lea edi, [edi + 0x171b]
lea edi, [edi - 0x171b]
nop
jle 0xde3823
xor dword [eax - 0x39924e9a], 0xc648e445
inc ebp
jmp 0xef23fe97
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x6a
mov byte [ebp - 0xd], 0x6e
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x10], al
mov byte [ebp - 0xc], al
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x4f
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0xe], 0x62
nop
ror ebx, 2
rol ebx, 2
jne 0xde388a
jno 0xde3878
jnp 0xde387a
lea eax, [eax + 0x185a]
lea eax, [eax - 0x185a]
je 0xde388a
mov ecx, 0xe4558a79
mov dl, byte [ebp - 0x1c]
mov cl, byte [ebp - 0x17]
mov al, byte [ebp - 0x12]
mov bl, byte [ebp - 0xd]
dec dl
dec cl
mov byte [ebp - 0x1c], dl
mov dl, byte [ebp - 0x1b]
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0xc]
dec dl
dec cl
mov byte [ebp - 0x1b], dl
mov dl, byte [ebp - 0x1a]
dec al
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x10]
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0xb]
dec dl
dec cl
mov byte [ebp - 0x1a], dl
mov dl, byte [ebp - 0x19]
dec al
mov byte [ebp - 0x15], cl
mov cl, byte [ebp - 0x14]
dec bl
mov byte [ebp - 0x10], al
mov al, byte [ebp - 0xf]
mov byte [ebp - 0xb], bl
mov bl, byte [ebp - 0x18]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x19], dl
mov dl, byte [ebp - 0x13]
mov byte [ebp - 0x14], cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0x18], bl
mov cl, byte [ebp - 0xe]
dec dl
dec cl
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], cl
xor ebx, esi
xor ebx, esi
xchg esi, eax
xchg esi, eax
cmp esp, 0x200f
jo 0xde3928
jne 0xde3938
pushf
je 0xde392e
add esp, 0
popf
jle 0xde3935
je 0xde3938
add eax, 0xdc5c00a1
add byte [ebp - 0x74d58b40], al
in al, 0x83
out dx, al
add cl, al
rcr byte [ecx + eax*8], 0xc0
add al, 0xc1
call 0x7fe5b052
add byte [ebx], bh
mov eax, dword [0xdc5c00]
test eax, eax
je 0xde396b
mov esp, esp
sub esi, 0
rol eax, 0x1c
rol eax, 4
shr eax, 0
ja 0xde3958
jg 0xde3953
jnp 0xde3955
jbe 0xde3958
add eax, 0x5c00158b
fadd qword [eax]
mov edx, dword [0xdc5c00]
lea ecx, [ebp - 0x1c]
push ecx
push edx
call fcn.00dd41c0
mov dword [ebp - 4], eax
xor ecx, dword [esp]
xor ecx, dword [esp]
je 0xde3973
xchg edi, edi
jo 0xde397f
jmp 0xde3979
jp 0xde397b
jno 0xde397f
mov ebp, 0x8d136a6b
inc ebp
in al, 0x6a
add byte [eax - 0x18], dl
xor al, 5
invalid
push 0x13
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.00dd3ec0
add esp, 0xc
jmp 0xde3991
js 0xde3993
jne 0xde39a1
lea esp, [esp]
jno 0xde399a
jp 0xde399c
jnp 0xde399e
je 0xde39a1
jmp 0x86da7f30
mov eax, dword [ebp - 4]
test eax, eax
je 0xde39d3
cmp esp, 0x39c8
xor ebx, 0x1baa
xor ebx, 0x1baa
dec esi
inc esi
jns 0xde39c8
xchg ecx, ebx
xchg ecx, ebx
jo 0xde39c4
js 0xde39c8
add eax, 0x51c88bf9
mov ecx, eax
push ecx
call fcn.00debd90
add esp, 4
cmp esp, 0x68f5
cmp ebx, dword [esp]
not edi
not edi
jbe 0xde39e2
jg 0xde39e9
jge 0xde39e6
jle 0xde39e9
add eax, 0x8b10558b
inc ebp
or al, 0x8b
dec ebp
or byte [edx + 0x50], dl
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push edx
push eax
push ecx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc