Function at 0xc1bbff
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.00c26c69
add esp, 0xc
or ecx, 0
push edx
pop edx
jne 0xc1bc1f
jbe 0xc1bc21
jno 0xc1bc40
pushf
xor ecx, dword [esp]
xor ecx, dword [esp]
or esp, 0
mov edi, edi
rol edi, 0
popf
xchg ebx, esi
xchg ebx, esi
xchg esp, esp
mov eax, eax
jo 0xc1bc40
xor eax, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x42
jno 0xc1bc7a
dec ecx
inc ecx
jp 0xc1bc89
xchg edi, esi
xchg edi, esi
jno 0xc1bc84
jmp 0xc1bc86
jnp 0xc1bc89
add eax, 0x80e44d8a
jmp 0xe50f4493
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
cmp eax, dword [esp + 8]
shr esp, 0
ror edi, 0x10
rol edi, 0x10
test dword [esp + 0x10], edx
jnp 0xc1bd13
jbe 0xc1bd0f
jp 0xc1bd13
mov edx, 0xf612e8cb
invalid
call fcn.00c1b32a
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0xc1bd28
xor eax, eax
jmp 0xc1bfa7
sub esp, 0
test esi, edi
shl ecx, 0
jle 0xc1bd37
jmp 0xc1bd34
jg 0xc1bd37
ljmp 0x458b:0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00c3172f
mov dword [ebp - 4], eax
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00c26c69
add esp, 0xc
push edi
pop edi
jnp 0xc1bd5b
jp 0xc1bd5d
ja 0xc1bd6a
nop
jb 0xc1bd62
je 0xc1bd64
xchg esp, esp
jbe 0xc1bd6a
mov ecx, 0xfc7d8386
add byte [ebp + 7], dh
cmp dword [ebp - 4], 0
jne 0xc1bd77
xor eax, eax
jmp 0xc1bfa7
dec ebx
inc ebx
test dword [esp + 8], ecx
and ecx, 0xffffffff
jl 0xc1bd82
jl 0xc1bd9a
pushf
add esi, 0
jbe 0xc1bd8b
call 0xc1bd90
add esp, 4
popf
jae 0xc1bd97
jge 0xc1bd9a
xor eax, 0x52fc558b
mov edx, dword [ebp - 4]
push edx
call fcn.00c1bfd4
add esp, 4
shl esp, 0
and esp, 0xffffffff
sub esp, 0
and edx, edx
jae 0xc1bdc4
pushf
test dword [esp], edx
jno 0xc1bdba
test dword [esp], ecx
popf
jbe 0xc1bdc1
jb 0xc1bdc4
mov esp, 0x6a0e6a
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.00c26c69
add esp, 0xc
xor edx, dword [esp]
xor edx, dword [esp]
dec ebx
inc ebx
jnp 0xc1bde6
mov edi, edi
jo 0xc1bde2
jp 0xc1bde6
mov esi, 0xe445c6fe
dec eax
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
xor esp, 0
ror edx, 0
or eax, 0
ja 0xc1be3f
jns 0xc1be2b
xchg ecx, ecx
jg 0xc1be2f
lea ecx, [ecx + 0x279c]
lea ecx, [ecx - 0x279c]
jbe 0xc1be3f
mov edi, 0xe44d8acb
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
xchg ebx, eax
xchg ebx, eax
cmp esi, dword [esp]
test ebx, 0x4da5
cmp esi, 0x2eb1
je 0xc1bee6
pushf
add esi, 0x3eb1
sub esi, 0x3eb1
sub esp, 0
test edx, 0x39be
rol ebx, 0
popf
jne 0xc1bee1
xchg esp, esp
jne 0xc1bee6
call 0x9295fc6d
rol byte [eax], 0
cmp dword [0xc091d4], 0
je 0xc1bf1b
jo 0xc1bef1
xchg esi, esi
je 0xc1bf09
pushf
rol edi, 7
ror edi, 7
xor eax, dword [esp]
xor eax, dword [esp]
popf
nop
jne 0xc1bf09
mov edx, 0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0xc091d4]
push eax
call fcn.00c3172f
mov dword [ebp - 0xc], eax
jne 0xc1bf1d
jge 0xc1bf1f
jbe 0xc1bf27
jne 0xc1bf23
ja 0xc1bf27
add eax, 0x6a0e6a54
add byte [ebp - 0x17ae1bb3], cl
xor eax, 0x830000ad
les ecx, [ebx + edi*2]
add byte [ebx + 0x11], dh
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00c26c69
add esp, 0xc
jnp 0xc1bf39
jae 0xc1bf4c
pushf
jo 0xc1bf3f
xchg esi, esi
popf
lea esi, [esi]
jno 0xc1bf47
jo 0xc1bf49
jb 0xc1bf4c
ljmp 0x3174:0xf47d83
cmp dword [ebp - 0xc], 0
je 0xc1bf83
cmc
xchg ecx, ecx
stc
jo 0xc1bf77
pushf
call 0xc1bf5f
add esp, 4
lea ebx, [ebx + 0x6f76]
lea ebx, [ebx - 0x6f76]
inc ebx
dec ebx
popf
jae 0xc1bf74
jno 0xc1bf77
xor eax, 0x52f4558b
mov edx, dword [ebp - 0xc]
push edx
call fcn.00c1bfd4
add esp, 4
test eax, 0x3bb8
cld
jns 0xc1bf8b
ror esi, 0xa
rol esi, 0xa
jns 0xc1bfa0
pushf
jbe 0xc1bf97
mov esi, esi
popf
jp 0xc1bf9d
js 0xc1bfa0
xor eax, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4