Function at 0xc6bbb0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x9daa49
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1ac
push esi
mov eax, ecx
push edi
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 4], 2
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0x18
mov dword [ebp - 0xd0], 1
lea eax, [ebp + 8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00cb5a60
mov byte [ebp - 4], 3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x164]
call fcn.00c40180
add esp, 0x18
mov byte [ebp - 4], 4
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 5
xor edx, edx
mov byte [ebp - 0x5c], 0xd4
mov esi, 0xf
mov byte [ebp - 0x5b], 0x9a
mov byte [ebp - 0x5a], 0xb1
mov byte [ebp - 0x59], 0xff
mov byte [ebp - 0x58], 0xb2
mov byte [ebp - 0x57], 0xf2
mov byte [ebp - 0x56], 0x93
mov byte [ebp - 0x55], 0xa1
mov byte [ebp - 0x54], 0x9b
mov byte [ebp - 0x53], 0xa2
mov byte [ebp - 0x52], 0x9a
mov byte [ebp - 0x51], 0xf0
mov byte [ebp - 0x50], 0x95
mov byte [ebp - 0x4f], 0x9a
mov byte [ebp - 0x4e], 0xe8
mov byte [ebp - 0x4d], 0xe0
mov byte [ebp - 0x4c], 0x9c
mov byte [ebp - 0x4b], pe_nt_image_headers32
mov byte [ebp - 0x4a], 0xf1
mov byte [ebp - 0x49], 0xf3
mov byte [ebp - 0x48], 0xfb
mov byte [ebp - 0x47], 0xf1
mov byte [ebp - 0x46], 0xfd
mov byte [ebp - 0x45], 0xf1
mov byte [ebp - 0x44], 0x8f
mov byte [ebp - 0x43], 0x8c
mov byte [ebp - 0x42], 0xf5
mov byte [ebp - 0x41], 0xf0
mov byte [ebp - 0x40], 0xfa
mov byte [ebp - 0x3f], 0x89
mov byte [ebp - 0x3e], 0x8d
mov byte [ebp - 0x3d], 0x84
mov byte [ebp - 0x3c], 0xf2
mov byte [ebp - 0x3b], 0xb6
mov byte [ebp - 0x3a], 0xcc
mov byte [ebp - 0x39], 0xeb
mov al, byte [ebp - 0x5c]
mov dword [ebp - 0x18], edx
nop dword [eax]
mov al, byte [ebp + edx - 0x5c]
mov ecx, edx
and ecx, esi
mov byte [ebp - 0xd], al
cmp ecx, esi
mov eax, 0x1f697bf
mov edx, 0x4b850294
cmovae ecx, esi
shl ecx, 2
call fcn.00d4cd00
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx - 0x41]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x5c], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x24
jb 0xc6bcf0
lea eax, [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 1
mov dword [ebp - 0x14], eax
call fcn.00d1024e
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0x6c]
push eax
call fcn.00cbc530
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00cb9320
add esp, 0xc
mov dword [ebp - 0x70], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5c]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc6bd70
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
add eax, ecx
lea ecx, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00cc29f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1b8]
call fcn.00cc2ab0
mov esi, eax
test esi, esi
je 0xc6bdac
lock inc dword [esi + 0x20]
lea ecx, [ebp - 0x78]
call fcn.00cb6f10
mov dword [ebp - 0x78], esi
mov byte [ebp - 4], 8
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 8
mov ecx, eax
call fcn.00cb2e60
mov byte [ebp - 4], 0xd
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x14], eax
lea edi, [eax + 4]
mov dword [eax], 0
mov dword [ebp - 0x60], edi
lea esi, [edi + 8]
mov ecx, dword [ebp - 0x68]
mov dword [esi + 4], ecx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
push esi
call fcn.00cbc530
push esi
mov dword [edi], eax
call fcn.00cb9320
add esp, 8
mov dword [edi + 4], eax
mov byte [ebp - 4], 0x10
mov edi, dword [ebp - 0x78]
test edi, edi
je 0xc6be1f
lock inc dword [edi + 0x20]
mov esi, dword [ebp - 0x14]
mov ecx, esi
call fcn.00cb6f10
mov dword [esi], edi
mov byte [ebp - 4], 0x11
sub esp, 0x18
lea eax, [ebp - 0x164]
mov dword [ebp - 0x60], esp
mov ecx, esp
push eax
call fcn.00cb5a60
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x9c]
call fcn.00c6ad80
add esp, 0x2c
mov byte [ebp - 4], 0x13
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x98]
mov ecx, edi
mov esi, dword [ebp - 0x9c]
sub ecx, esi
imul ecx
mov dword [ebp - 0x18], 0
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0xc6c116
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x1c], eax
cmp dword [esi + eax + 0x10], 0xc
jb 0xc6c0e8
mov byte [ebp - 0x29], 0x44
xor edx, edx
mov byte [ebp - 0x28], 0x7d
mov byte [ebp - 0x27], 0x50
mov byte [ebp - 0x26], 0xb
mov byte [ebp - 0x25], 0x44
mov byte [ebp - 0x24], 7
mov byte [ebp - 0x23], 0x6d
mov byte [ebp - 0x22], 0x5f
mov byte [ebp - 0x21], 0x69
mov byte [ebp - 0x20], 0x55
mov byte [ebp - 0x1f], 0x6a
mov byte [ebp - 0x1e], 6
mov byte [ebp - 0x1d], 0x35
mov al, byte [ebp - 0x29]
mov dword [ebp - 0x14], edx
nop dword [eax]
mov al, byte [ebp + edx - 0x29]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0xf
mov edx, 0x8f8c4c04
cmovae ecx, eax
mov eax, 0xc9c2f82d
shl ecx, 2
call fcn.00d4cd00
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x2d]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x29], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 0xd
jb 0xc6bee0
sub esp, 0x18
lea ecx, [ebp - 0x29]
mov edx, esp
mov dword [ebp - 0x60], esp
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0xc6bf45
sub ecx, esi
lea eax, [ebp - 0x29]
push ecx
push eax
mov ecx, edx
call fcn.00c36f00
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov eax, dword [ebp - 0x9c]
mov ecx, esp
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0xd4], esp
push eax
call fcn.00cb5a60
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x134]
call fcn.00c40b60
add esp, 0x30
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x14c]
mov eax, dword [eax]
add eax, 0x18
push eax
call fcn.00cb5a60
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x134]
call fcn.00cb7ac0
cmp dword [ebp - 0x13c], 0
je 0xc6c0c7
xorps xmm0, xmm0
mov dword [ebp - 0xa4], 0
movups xmmword [ebp - 0xb4], xmm0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0xf
mov byte [ebp - 0xb4], 0
mov byte [ebp - 4], 0x19
sub esp, 0x18
lea edx, [ebp - 0x14c]
mov byte [ebp - 0xd], 1
mov ecx, esp
mov dword [ebp - 0xd8], esp
lea esi, [ebp - 0xb4]
call fcn.00c369f0
mov byte [ebp - 4], 0x1a
sub esp, 0x18
lea eax, [ebp + 0x20]
mov dword [ebp - 0xdc], esp
mov ecx, esp
push eax
call fcn.00cb5a60
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x19
mov ecx, esi
mov dl, byte [ebp - 0xd]
call fcn.00c5c180
add esp, 0x30
test al, al
je 0xc6c06e
mov eax, dword [ebp - 0x34]
mov ecx, esi
push ecx
cmp eax, dword [ebp - 0x30]
je 0xc6c065
mov ecx, eax
call fcn.00cb5a60
add dword [ebp - 0x34], 0x18
jmp 0xc6c06e
push eax
lea ecx, [ebp - 0x38]
call fcn.00cc36d0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xa0]
cmp ecx, 0x10
jb 0xc6c0ac
mov edx, dword [ebp - 0xb4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0xc6c0a2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xc6c437
push ecx
push edx
call fcn.00d116c1
add esp, 8
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0xf
mov byte [ebp - 0xb4], 0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x14c]
call fcn.00c36c70
mov edi, dword [ebp - 0x98]
mov esi, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
inc ecx
add eax, 0x18
mov dword [ebp - 0x18], ecx
mov ecx, edi
mov dword [ebp - 0x1c], eax
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [ebp - 0x18]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jae 0xc6c116
mov eax, dword [ebp - 0x1c]
jmp 0xc6be92
mov ecx, dword [ebp - 0x34]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x38]
imul ecx
mov dword [ebp - 0x14], 0
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0xc6c3d6
xor edi, edi
nop dword [eax]
xorps xmm0, xmm0
mov dword [ebp - 0xbc], 0
movups xmmword [ebp - 0xcc], xmm0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0xb8], 0xf
mov word [ebp - 0xcc], 0x2d
mov byte [ebp - 4], 0x1c
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x7c], 0xf
mov word [ebp - 0x90], 0x2d
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x38]
add edx, edi
mov ecx, dword [edx + 0x14]
mov eax, dword [edx + 0x10]
cmp ecx, 0x10
jb 0xc6c1c3
add eax, dword [edx]
jmp 0xc6c1ca
add eax, edx
cmp ecx, 0x10
jb 0xc6c1cc
mov edx, dword [edx]
sub esp, 0x18
lea ecx, [ebp - 0x90]
mov dword [ebp - 0xdc], esp
mov esi, esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp edx, eax
jne 0xc6c200
xor eax, eax
mov dword [esi + 0x14], 7
mov word [esi], ax
jmp 0xc6c214
mov ecx, eax
sub ecx, edx
push ecx
push eax
push edx
mov ecx, esi
call fcn.00cc15e0
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0x1d
mov edx, ecx
lea ecx, [ebp - 0xcc]
call fcn.00c6b310
add esp, 0x18
test al, al
je 0xc6c304
mov esi, dword [ebp - 0x38]
lea eax, [ebp - 0x128]
mov dword [ebp - 0xd8], eax
lea ecx, [ebp - 0x128]
lea eax, [ebp - 0x90]
add esi, edi
push eax
call fcn.00cb5a60
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x110]
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0x110]
lea eax, [ebp - 0xcc]
push eax
call fcn.00cb5a60
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0xf8]
push esi
mov ecx, eax
mov dword [ebp - 0x60], eax
call fcn.00cb5a60
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x128]
mov esi, dword [ebp - 0x64]
push ecx
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0xc6c2b1
mov ecx, eax
call fcn.00ccb2b0
add dword [esi + 4], 0x48
jmp 0xc6c2b9
push eax
mov ecx, esi
call fcn.00cc2230
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x29
mov ecx, eax
call fcn.00c36c70
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x110]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x2c
mov ecx, eax
call fcn.00c36c70
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x128]
mov dword [ebp - 0xe0], eax
mov byte [ebp - 4], 0x1d
mov ecx, eax
call fcn.00c36c70
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0x10
jb 0xc6c33f
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0xc6c335
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xc6c437
push ecx
push edx
call fcn.00d116c1
add esp, 8
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xb8]
cmp ecx, 0x10
jb 0xc6c392
mov edx, dword [ebp - 0xcc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0xc6c388
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xc6c437
push ecx
push edx
call fcn.00d116c1
add esp, 8
mov ecx, dword [ebp - 0x34]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x38]
add edi, 0x18
mov esi, dword [ebp - 0x14]
imul ecx
inc esi
mov dword [ebp - 0xbc], 0
sar edx, 2
mov eax, edx
mov dword [ebp - 0xb8], 0xf
shr eax, 0x1f
add eax, edx
mov byte [ebp - 0xcc], 0
mov dword [ebp - 0x14], esi
cmp esi, eax
jb 0xc6c140
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x9c]
call fcn.00cb7ac0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x78]
call fcn.00cb2aa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x38]
call fcn.00cb7ac0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x164]
call fcn.00c36c70
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.00c36c70
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x20]
call fcn.00c36c70
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00d2cbc0
int3