Function at 0xc2dd2a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0xc0af88], 1
je 0xc2dd63
mov ecx, ecx
or edx, 0
jb 0xc2dd59
pushf
add edx, 0
jno 0xc2dd4a
mov edx, edx
cmp edi, dword [esp + 0xc]
popf
jge 0xc2dd54
lea ebx, [ebx]
jae 0xc2dd59
add eax, 0xc0af88a1
add byte [ecx + 0x38ebfc45], cl
mov eax, dword [0xc0af88]
mov dword [ebp - 4], eax
jmp 0xc2dd9b
xor edi, esi
xor edi, esi
cmp eax, ebx
jnp 0xc2dd94
pushf
and ebx, 0xffffffff
jb 0xc2dd72
call 0xc2dd77
lea esp, [esp + 4]
not eax
not eax
popf
lea edx, [edx]
jb 0xc2dd85
lea eax, [eax + 0x2ce7]
lea eax, [eax - 0x2ce7]
jp 0xc2dd94
mov esp, 0xde9c033
add al, byte [eax]
add byte [ebp + 0x5c85240c], al
and al, 0xc
xor eax, eax
jmp 0xc2dfa8
test dword [esp], ecx
test dword [esp + 0xc], ebx
shl esp, 0
rol ebx, 0x16
rol ebx, 0xa
jns 0xc2ddb2
xchg esp, esp
js 0xc2ddb2
mov eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.00c20cf3
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00c10fe8
add esp, 0xc
xchg esi, esi
and ecx, ecx
lea ebx, [ebx + 0x79e9]
lea ebx, [ebx - 0x79e9]
shr eax, 0
jle 0xc2ddf9
pushf
call 0xc2ddea
lea esp, [esp + 4]
popf
jo 0xc2ddf2
mov ecx, ecx
jb 0xc2ddf6
jg 0xc2ddf9
mov esi, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
cmp esp, 0xf55
inc edx
dec edx
std
cld
je 0xc2de4e
pushf
lea eax, [eax]
xchg esp, esp
jp 0xc2de41
ror edi, 0xd
rol edi, 0xd
popf
lea edi, [edi]
jne 0xc2de4e
xor eax, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
ror esp, 0
mov ebx, ebx
js 0xc2dec4
jbe 0xc2debf
jns 0xc2dec4
xor eax, 0x3d8312a1
mov al, 0xab
rol byte [eax], 0
cmp dword [0xc0abb0], 0
je 0xc2df11
call 0xc2ded2
lea esp, [esp + 4]
shr esp, 0
add esi, dword [esp]
sub esi, dword [esp]
cld
jb 0xc2defe
pushf
shl esp, 0
ja 0xc2dee9
cmp edx, edi
popf
lea ebx, [ebx + 0x5a7]
lea ebx, [ebx - 0x5a7]
jbe 0xc2defb
jae 0xc2defe
mov esp, 0x50e8458d
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0xc0abb0]
push ecx
call fcn.00c172c8
mov dword [ebp - 8], eax
xchg esp, esp
lea ebx, [ebx + 0x5eb]
lea ebx, [ebx - 0x5eb]
jmp 0xc2df21
push ebx
pop ebx
jg 0xc2df31
pushf
rol esp, 0
popf
jo 0xc2df2e
jle 0xc2df31
sub eax, 0x6a0d6a
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00c10fe8
add esp, 0xc
rol esp, 0
jnp 0xc2df46
je 0xc2df5d
pushf
add ebx, dword [esp]
sub ebx, dword [esp]
xor esp, 0
popf
nop
ja 0xc2df58
mov esp, esp
jne 0xc2df5d
mov eax, 0xf87d83
cmp dword [ebp - 8], 0
je 0xc2df86
mov esp, esp
ror edx, 0
add esp, 0
xchg edi, edi
jbe 0xc2df7a
jge 0xc2df71
jnp 0xc2df73
jb 0xc2df75
mov eax, eax
ja 0xc2df7a
mov ebx, 0x50f8458b
mov eax, dword [ebp - 8]
push eax
call fcn.00c20cf3
add esp, 4
push edi
pop edi
stc
je 0xc2dfa1
jae 0xc2df8d
jae 0xc2df8f
lea ebx, [ebx]
lea ebx, [ebx + 0x5ca2]
lea ebx, [ebx - 0x5ca2]
jne 0xc2dfa1
cmp dword [edx + 0x51084d8b], 0x5ffc55ff
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4