Function at 0xc2cea6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00c26c69
add esp, 0xc
jae 0xc2cec1
js 0xc2ced3
pushf
xor ecx, esi
xor ecx, esi
cmc
popf
jl 0xc2cece
lea ecx, [ecx]
jns 0xc2ced3
xor eax, 0x44e845c6
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xf], 0x66
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0xc], 0
mov esp, esp
rol ebx, 0x1a
rol ebx, 6
sub eax, 0
or edx, 0
jle 0xc2cf33
pushf
xchg esi, ecx
xchg esi, ecx
xchg edx, edx
rol edx, 0x11
rol edx, 0xf
add esp, 0
popf
jns 0xc2cf2c
jae 0xc2cf2e
jne 0xc2cf30
jg 0xc2cf33
mov ebp, 0x80e84d8a
jmp 0xe910573d
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
ror esi, 0
add edx, dword [esp]
sub edx, dword [esp]
jle 0xc2cfa6
lea ecx, [ecx + 0x5221]
lea ecx, [ecx - 0x5221]
jge 0xc2cfd7
pushf
xor esi, dword [esp]
xor esi, dword [esp]
call 0xc2cfc1
add esp, 4
cmp esi, dword [esp]
test dword [esp], ebx
popf
xchg ecx, edx
xchg ecx, edx
jns 0xc2cfd2
xchg ecx, ecx
jl 0xc2cfd7
jmp 0xffa61ec3
call fcn.00c1b32a
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0xc2cfec
xor eax, eax
jmp 0xc2d1ea
add esp, 0
ja 0xc2cff1
shr edi, 0
test edx, 0x59e8
jg 0xc2d009
pushf
ror esp, 0
cmc
popf
xchg esp, esp
jle 0xc2d009
add eax, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.00c3172f
mov dword [ebp - 4], eax
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00c26c69
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0xc2d036
xor eax, eax
jmp 0xc2d1ea
jns 0xc2d038
jns 0xc2d044
jmp 0xc2d03c
jge 0xc2d03e
je 0xc2d040
js 0xc2d044
mov edx, 0xfc4d8b5e
mov ecx, dword [ebp - 4]
push ecx
call fcn.00c1bfd4
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00c26c69
add esp, 0xc
shl edx, 0
xchg esp, esp
js 0xc2d071
jle 0xc2d069
jl 0xc2d06b
jp 0xc2d06d
jns 0xc2d071
call 0xe90896ef
inc esp
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xf], 0x66
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
call 0xc2d0aa
add esp, 4
jg 0xc2d0b4
jo 0xc2d0b1
jle 0xc2d0b4
mov edx, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
jmp 0xc2d040
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
jmp 0xc2d11e
jno 0xc2d120
jb 0xc2d12f
mov ebx, ebx
lea esi, [esi]
xchg ecx, ecx
lea esp, [esp]
jae 0xc2d12f
mov esp, 0xd43d835e
xchg ecx, eax
rol byte [eax], 0
cmp dword [0xc091d4], 0
je 0xc2d15e
ja 0xc2d13a
sub ecx, 0
ror esi, 0x10
rol esi, 0x10
jg 0xc2d14b
lea ecx, [ecx]
jle 0xc2d14b
call 0xe9085ee7
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0xc091d4]
push ecx
call fcn.00c3172f
mov dword [ebp - 0x1c], eax
jo 0xc2d160
jne 0xc2d16c
je 0xc2d164
jg 0xc2d166
jp 0xc2d168
je 0xc2d16c
add eax, 0x6a0d6ac9
add byte [ebp - 0x17ad17ab], cl
invalid
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00c26c69
add esp, 0xc
cmp ecx, 0x7ae8
cmp esi, dword [esp + 0xc]
jno 0xc2d18f
ja 0xc2d18a
jo 0xc2d18f
xor dword [eax - 0x78], 0xe47d83
cmp dword [ebp - 0x1c], 0
je 0xc2d1d1
add ebx, dword [esp]
sub ebx, dword [esp]
test dword [esp + 0x10], ecx
jp 0xc2d1a1
jl 0xc2d1a3
jo 0xc2d1c5
pushf
dec edi
inc edi
jl 0xc2d1ab
cmp esp, 0x1216
popf
jbe 0xc2d1b5
lea edx, [edx + 0x3cc2]
lea edx, [edx - 0x3cc2]
nop
jno 0xc2d1c5
mov ebp, 0x50e4458b
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00c1bfd4
add esp, 4
lea esp, [esp]
jne 0xc2d1db
jmp 0xc2d1d8
je 0xc2d1db
xor eax, 0x51104d8b
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc