Function at 0xde1020
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x13
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00dd3ec0
add esp, 0xc
cmp ecx, dword [esp + 8]
nop
js 0xde1055
pushf
and edx, 0xffffffff
jbe 0xde1047
or ecx, 0
popf
jmp 0xde104e
jne 0xde1050
jns 0xde1052
jns 0xde1055
mov eax, 0x6db166b0
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x65
mov byte [ebp - 0xe], 0x6a
mov byte [ebp - 9], 0x6e
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xc], al
mov byte [ebp - 8], al
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xd], cl
mov byte [ebp - 7], 0x58
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], 0x4f
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x47
mov byte [ebp - 0xa], 0x62
and ecx, ecx
std
cld
mov esi, esi
lea edi, [edi]
jb 0xde10c3
pushf
lea ecx, [ecx + 0xc30]
lea ecx, [ecx - 0xc30]
sub esp, 0
popf
jb 0xde10be
lea eax, [eax]
jae 0xde10c3
mov esi, 0x8ae85d8a
push ebp
in eax, dx
mov bl, byte [ebp - 0x18]
mov dl, byte [ebp - 0x13]
mov cl, byte [ebp - 0xe]
mov al, byte [ebp - 9]
dec bl
dec dl
mov byte [ebp - 0x18], bl
mov bl, byte [ebp - 0x17]
dec cl
mov byte [ebp - 0x13], dl
mov dl, byte [ebp - 0x12]
dec al
mov byte [ebp - 0xe], cl
mov cl, byte [ebp - 0xd]
mov byte [ebp - 9], al
mov al, byte [ebp - 8]
dec bl
dec dl
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x16]
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x11]
dec al
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 0xc]
mov byte [ebp - 8], al
mov al, byte [ebp - 7]
dec bl
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x15]
dec cl
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0x10]
dec al
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0xb]
mov byte [ebp - 7], al
mov al, byte [ebp - 0x14]
dec bl
dec dl
dec cl
dec al
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xf]
mov byte [ebp - 0x10], dl
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], al
mov dl, byte [ebp - 0xa]
dec bl
dec dl
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xa], dl
lea esp, [esp]
lea ebx, [ebx + 0x3ec5]
lea ebx, [ebx - 0x3ec5]
cmc
xchg edi, edi
jb 0xde1173
nop
xchg edi, esi
xchg edi, esi
jae 0xde116e
jnp 0xde1170
jae 0xde1173
mov eax, 0x3058e8
add byte [ebp + 0x5f0975c0], al
call fcn.00de41d0
test eax, eax
jne 0xde1185
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
inc esi
dec esi
jns 0xde1189
test edi, ebx
inc edx
dec edx
jo 0xde119f
pushf
je 0xde1193
popf
jne 0xde1197
jle 0xde1199
lea esp, [esp]
jno 0xde119f
mov edx, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.00dd41c0
push 0x13
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 4], esi
call fcn.00dd3ec0
add esp, 0xc
xor eax, 0x38ac
xor eax, 0x38ac
std
cld
lea edx, [edx + 0x11fa]
lea edx, [edx - 0x11fa]
lea ebx, [ebx + 0x7a41]
lea ebx, [ebx - 0x7a41]
jg 0xde11ed
js 0xde11e6
lea esp, [esp]
jle 0xde11ed
add eax, 0x75f68500
or esi, dword [ebx]
rcr byte [edi + 0x5e], 0x5b
test esi, esi
jne 0xde11fc
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
or eax, 0
cmc
jl 0xde1213
pushf
jno 0xde1206
jg 0xde1208
popf
jb 0xde120c
jno 0xde120e
jnp 0xde1210
jge 0xde1213
mov ebp, 0xab77e856
add byte [eax], al
push esi
call fcn.00debd90
push 0x13
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00dd3ec0
add esp, 0x10
mov eax, eax
rol esi, 4
rol esi, 0x1c
jns 0xde1233
jae 0xde123c
xchg edx, eax
xchg edx, eax
jae 0xde1239
jb 0xde123c
mov edx, 0x6db166b0
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x65
mov byte [ebp - 0xe], 0x6a
mov byte [ebp - 9], 0x6e
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xc], al
mov byte [ebp - 8], al
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xd], cl
mov byte [ebp - 7], 0x42
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], 0x4f
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x47
mov byte [ebp - 0xa], 0x62
jnp 0xde1288
call 0xde128d
lea esp, [esp + 4]
jno 0xde1298
jne 0xde1295
jo 0xde1298
add eax, 0x8ae8558a
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 9]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x17]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0xd]
mov byte [ebp - 9], bl
mov bl, byte [ebp - 8]
dec dl
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x11]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xc]
mov byte [ebp - 8], bl
mov bl, byte [ebp - 7]
dec dl
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
mov byte [ebp - 7], bl
mov bl, byte [ebp - 0x14]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov cl, byte [ebp - 0xa]
dec dl
dec cl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
mov esp, esp
je 0xde132c
jae 0xde1336
lea esp, [esp]
jle 0xde1333
jb 0xde1336
ljmp 0x8500:0xdc5c00a1
mov eax, dword [0xdc5c00]
test eax, eax
je 0xde1366
lea edx, [edx]
test edx, eax
xchg esp, esp
jl 0xde1352
jbe 0xde1349
js 0xde134b
jo 0xde134d
lea ecx, [ecx]
jge 0xde1352
or dword [ebx - 0x23a3ffeb], 0xe84d8d00
mov edx, dword [0xdc5c00]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.00dd41c0
mov esi, eax
jmp 0xde1369
mov esi, dword [ebp + 0x10]
or esp, 0
and edi, 0xffffffff
jp 0xde1371
inc edx
dec edx
jg 0xde138a
js 0xde1377
lea ecx, [ecx + 0xdc1]
lea ecx, [ecx - 0xdc1]
lea esp, [esp]
jle 0xde138a
mov esp, 0x8d136ae7
inc ebp
call 0xe92e13fd
sub dword [ebx], ebp
invalid
push 0x13
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.00dd3ec0
add esp, 0xc
mov edx, edx
jns 0xde13b2
pushf
lea edx, [edx]
jns 0xde13a4
xor esp, 0
lea edi, [edi]
popf
lea ebx, [ebx]
xchg ecx, ecx
js 0xde13b2
jmp 0x26530a3b
test esi, esi
je 0xde13db
jl 0xde13b8
std
cld
lea esp, [esp]
je 0xde13d2
jmp 0xde13c1
lea edi, [edi + 0x15ae]
lea edi, [edi - 0x15ae]
mov edx, edx
jne 0xde13d2
xor eax, 0xa9b8e856
add byte [eax], al
push esi
call fcn.00debd90
add esp, 4
jge 0xde13dd
nop
not edi
not edi
jge 0xde13ee
pushf
stc
popf
jo 0xde13eb
jl 0xde13ee
add eax, 0x8b104d8b
push ebp
or al, 0x8b
inc ebp
or byte [ecx + 0x52], dl
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc