Function at 0xc1b63a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x11
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.00c26c69
add esp, 0xc
xchg esp, esp
not esi
not esi
clc
xor ecx, dword [esp]
xor ecx, dword [esp]
jg 0xc1b673
pushf
stc
shl esp, 0
popf
xchg ecx, ecx
jb 0xc1b66e
xchg edi, edi
jle 0xc1b673
add eax, 0x53e045c6
mov byte [ebp - 0x20], 0x53
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1e], 0x68
mov byte [ebp - 0x1d], 0x52
mov byte [ebp - 0x1c], 0x76
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x7a
mov byte [ebp - 0x18], 0x57
mov byte [ebp - 0x17], 0x62
mov byte [ebp - 0x16], 0x6d
mov byte [ebp - 0x15], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x46
mov byte [ebp - 0x12], 0x79
mov byte [ebp - 0x11], 0x42
mov byte [ebp - 0x10], 0
inc ecx
dec ecx
js 0xc1b6c6
js 0xc1b6bd
nop
xchg esp, esp
jns 0xc1b6c2
jns 0xc1b6c6
mov edi, 0xe04d8ae6
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0x1d]
sub dl, 1
mov byte [ebp - 0x1d], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
jge 0xc1b753
lea eax, [eax]
xchg ebx, edi
xchg ebx, edi
jge 0xc1b767
pushf
jle 0xc1b75f
popf
lea esp, [esp]
jl 0xc1b767
mov ecx, 0x844e8
add byte [ecx + 0x7d83f845], cl
clc
add byte [ebp + 0xa], dh
call 0xc1bfb0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0xc1b77f
mov eax, 1
jmp 0xc1b9c7
xchg esp, esp
je 0xc1b792
pushf
jo 0xc1b787
xchg ebx, ebx
popf
xchg esp, esp
lea eax, [eax]
jne 0xc1b792
call 0x53a20d23
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00c3172f
mov dword [ebp - 4], eax
push 0x11
push 0
lea ecx, [ebp - 0x20]
push ecx
call fcn.00c26c69
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0xc1b7c2
mov eax, 1
jmp 0xc1b9c7
add esp, 0
mov edx, edx
je 0xc1b7d0
mov esp, esp
ja 0xc1b7cd
jne 0xc1b7d0
call 0x53be0d5f
mov edx, dword [ebp - 4]
push edx
call fcn.00c1bfd4
add esp, 4
push 0x11
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.00c26c69
add esp, 0xc
cld
xor edi, 0
xor esi, dword [esp + 8]
xor esi, dword [esp + 8]
jl 0xc1b7ff
mov ecx, ecx
jge 0xc1b7ff
mov esp, 0x53e045c6
mov byte [ebp - 0x20], 0x53
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1e], 0x68
mov byte [ebp - 0x1d], 0x52
mov byte [ebp - 0x1c], 0x76
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x7a
mov byte [ebp - 0x18], 0x57
mov byte [ebp - 0x17], 0x62
mov byte [ebp - 0x16], 0x6d
mov byte [ebp - 0x15], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x46
mov byte [ebp - 0x12], 0x79
mov byte [ebp - 0x11], 0x58
mov byte [ebp - 0x10], 0
ror esp, 0
jne 0xc1b848
jne 0xc1b85a
pushf
js 0xc1b84e
ror esp, 0
xchg edx, eax
xchg edx, eax
popf
mov esp, esp
je 0xc1b85a
sub eax, 0x80e04d8a
jmp 0xe10f4064
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0x1d]
sub dl, 1
mov byte [ebp - 0x1d], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
jne 0xc1b8e7
add esi, 0x6c7a
sub esi, 0x6c7a
nop
jo 0xc1b90d
pushf
jbe 0xc1b8fa
popf
js 0xc1b8fe
lea eax, [eax + 0x2916]
lea eax, [eax - 0x2916]
jno 0xc1b90d
add dword [ebx + 0x7400f87d], 0x33007326
je 0xc1b93c
cmp dword [ebp - 8], 0
je 0xc1b939
jae 0xc1b915
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
jp 0xc1b929
or al, 0x33
je 0xc1b940
or al, 0x7a
or cl, byte [ebp + 0x78ff8b3f]
add byte [ebx + 2], bh
lea edi, [edi]
mov edi, edi
js 0xc1b925
jnp 0xc1b929
mov esp, 0xe0558d65
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00c3172f
mov dword [ebp - 0xc], eax
nop
jbe 0xc1b93c
jns 0xc1b943
mov ebx, ebx
js 0xc1b943
add eax, 0x6a116a
push 0x11
push 0
lea ecx, [ebp - 0x20]
push ecx
call fcn.00c26c69
add esp, 0xc
jns 0xc1b955
xchg ecx, eax
xchg ecx, eax
test dword [esp + 8], ecx
ja 0xc1b96d
pushf
ja 0xc1b961
shr esi, 0
popf
js 0xc1b968
lea esi, [esi]
jbe 0xc1b96d
sub eax, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0xc1b998
cmp eax, dword [esp]
jnp 0xc1b98c
pushf
jbe 0xc1b97c
dec edi
inc edi
inc eax
dec eax
rol esp, 0
popf
je 0xc1b987
jo 0xc1b989
jp 0xc1b98c
call 0x53b60f1b
mov edx, dword [ebp - 0xc]
push edx
call fcn.00c1bfd4
add esp, 4
jbe 0xc1b99a
jnp 0xc1b99c
shr edx, 0
ror edi, 0
jo 0xc1b9ac
xchg ecx, ecx
ja 0xc1b9a8
jno 0xc1b9ac
mov edx, 0x1c458b8c
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18