Function at 0x199ac0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1f8
mov esi, dword [esp + 0x210]
mov byte [esp + 0x44], 0
mov dword [esp + 0x40], 0x31303030
mov dword [esp + 0x3c], 0x30303030
mov byte [esp + 0x94], 0
mov dword [esp + 0x90], 0x45544143
mov dword [esp + 0x8c], 0x49544e45
mov dword [esp + 0x88], 0x48545541
mov byte [esp + 0x38], 0
mov dword [esp + 0x34], 0x68747561
push esi
call fcn.001a8670
add esp, 4
mov edi, eax
push esi
call fcn.001a8680
add esp, 4
mov esi, 0x3d
test eax, eax
je 0x199cc5
push 0x7518a0
push edi
call fcn.004f8da0
add esp, 8
test eax, eax
je 0x199cc5
movzx ecx, byte [eax + 7]
lea edx, [esp + 0xb8]
test ecx, ecx
je 0x199b9a
cmp ecx, 0x22
je 0x199b9a
xor edx, edx
nop dword [eax]
mov byte [esp + edx + 0xb8], cl
cmp edx, 0x3e
je 0x199b8d
movzx ecx, byte [eax + edx + 8]
inc edx
cmp ecx, 0x22
je 0x199b92
test ecx, ecx
jne 0x199b70
jmp 0x199b92
mov edx, 0x3f
add edx, esp
add edx, 0xb8
mov byte [edx], 0
push 0x7518a8
push edi
call fcn.004f8da0
add esp, 8
lea edx, [esp + 0x178]
test eax, eax
je 0x199bfa
movzx ecx, byte [eax + 7]
test ecx, ecx
je 0x199bfa
cmp ecx, 0x22
je 0x199bfa
xor edx, edx
nop word cs:[eax + eax]
mov byte [esp + edx + 0x178], cl
cmp edx, 0x7e
je 0x199bed
movzx ecx, byte [eax + edx + 8]
inc edx
cmp ecx, 0x22
je 0x199bf2
test ecx, ecx
jne 0x199bd0
jmp 0x199bf2
mov edx, 0x7f
add edx, esp
add edx, 0x178
mov byte [edx], 0
push 0x7518b0
push edi
call fcn.004f8da0
add esp, 8
test eax, eax
je 0x199cc5
movzx ecx, byte [eax + 0xa]
lea edx, [esp + 0xf8]
test ecx, ecx
je 0x199c5a
cmp ecx, 0x2c
je 0x199c5a
xor edx, edx
nop dword [eax]
mov byte [esp + edx + 0xf8], cl
cmp edx, 0x3e
je 0x199c4d
movzx ecx, byte [eax + edx + 0xb]
inc edx
cmp ecx, 0x2c
je 0x199c52
test ecx, ecx
jne 0x199c30
jmp 0x199c52
mov edx, 0x3f
add edx, esp
add edx, 0xf8
mov byte [edx], 0
push 0x7518bb
push edi
call fcn.004f8da0
add esp, 8
test eax, eax
je 0x199cc5
movzx edx, byte [eax + 5]
xor ecx, ecx
test edx, edx
je 0x199ca2
cmp edx, 0x22
je 0x199ca2
xor ecx, ecx
mov byte [esp + ecx + 0x138], dl
cmp ecx, 0x3e
je 0x199c9d
movzx edx, byte [eax + ecx + 6]
inc ecx
cmp edx, 0x22
je 0x199ca2
test edx, edx
jne 0x199c80
jmp 0x199ca2
mov ecx, 0x3f
mov byte [esp + ecx + 0x138], 0
lea eax, [esp + 0xf8]
push 9
push 0x7517a2
push eax
call fcn.004f8d78
add esp, 0xc
test eax, eax
je 0x199cd2
mov eax, esi
add esp, 0x1f8
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x10], 0
lea eax, [esp + 0x138]
push 0x7517b2
push 0xe7
push eax
call fcn.001773f0
add esp, 0xc
test eax, eax
je 0x19a635
mov edi, eax
lea eax, [esp + 0x10]
push eax
push 0x75183e
push edi
call fcn.004fb450
add esp, 0xc
test eax, eax
je 0x19a63f
mov ebx, eax
xor ebp, ebp
nop dword [eax]
push 0x751840
push ebx
call fcn.0018ccd0
add esp, 8
mov ecx, 1
test eax, eax
jne 0x199d70
push 0x751845
push ebx
call fcn.0018ccd0
add esp, 8
mov ecx, 2
test eax, eax
jne 0x199d70
push 0x7518c1
push ebx
call fcn.0018ccd0
add esp, 8
mov ecx, 4
test eax, eax
je 0x199d72
nop word cs:[eax + eax]
or ebp, ecx
lea eax, [esp + 0x10]
push eax
push 0x75183e
push 0
call fcn.004fb450
add esp, 0xc
mov ebx, eax
test eax, eax
jne 0x199d20
push 0x7517b2
push 0xf7
push edi
call fcn.001775a0
add esp, 0xc
mov eax, ebp
test al, 1
je 0x199cc5
lea eax, [esp + 0x97]
push 0x21
push eax
push dword [esp + 0x214]
call fcn.00186190
add esp, 0xc
mov esi, eax
test eax, eax
jne 0x199cc5
push dword [0x88fb8c]
call fcn.001d4e00
add esp, 4
mov esi, 0x1b
test eax, eax
je 0x199cc5
mov edi, eax
mov ebx, dword [esp + 0x214]
push ebx
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push ebx
push edi
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push edi
call fcn.001d4e90
add esp, 0xc
lea ebx, [esp + 0x178]
push ebx
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push ebx
push edi
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push edi
call fcn.001d4e90
add esp, 0xc
mov ebx, dword [esp + 0x218]
push ebx
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push ebx
push edi
call fcn.001d4e90
add esp, 0xc
mov ebx, esp
push ebx
push edi
call fcn.001d4eb0
add esp, 8
push dword [0x88fb8c]
call fcn.001d4e00
add esp, 4
test eax, eax
je 0x199cc5
push 0x10
push ebx
push eax
mov edi, eax
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push edi
call fcn.001d4e90
add esp, 0xc
lea ebx, [esp + 0xb8]
push ebx
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push ebx
push edi
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push edi
call fcn.001d4e90
add esp, 0xc
lea ebx, [esp + 0x97]
push ebx
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push ebx
push edi
call fcn.001d4e90
add esp, 0xc
mov eax, esp
push eax
push edi
call fcn.001d4eb0
add esp, 8
movzx eax, byte [esp]
push eax
push 0x7517ad
push 3
lea eax, [esp + 0x1c]
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x12]
movzx ecx, byte [esp + 1]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x14]
movzx ecx, byte [esp + 2]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x16]
movzx ecx, byte [esp + 3]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x18]
movzx ecx, byte [esp + 4]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x1a]
movzx ecx, byte [esp + 5]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x1c]
movzx ecx, byte [esp + 6]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x1e]
movzx ecx, byte [esp + 7]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x20]
movzx ecx, byte [esp + 8]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x22]
movzx ecx, byte [esp + 9]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x24]
movzx ecx, byte [esp + 0xa]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x26]
movzx ecx, byte [esp + 0xb]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x28]
movzx ecx, byte [esp + 0xc]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x2a]
movzx ecx, byte [esp + 0xd]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x2c]
movzx ecx, byte [esp + 0xe]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x2e]
movzx ecx, byte [esp + 0xf]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
mov eax, dword [esp + 0x20c]
mov eax, dword [eax + 0x18]
push 0
push dword [eax + 0x38]
push dword [esp + 0x224]
call fcn.0019c170
add esp, 0xc
test eax, eax
je 0x199cc5
mov edi, eax
mov eax, dword [0x88fb8c]
push eax
call fcn.001d4e00
add esp, 4
test eax, eax
je 0x19a657
mov ebx, eax
lea ebp, [esp + 0x88]
push ebp
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push ebp
push ebx
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push ebx
call fcn.001d4e90
add esp, 0xc
push edi
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push edi
push ebx
call fcn.001d4e90
add esp, 0xc
mov eax, esp
push eax
push ebx
call fcn.001d4eb0
add esp, 8
movzx eax, byte [esp]
lea ecx, [esp + 0x46]
push eax
push 0x7517ad
push 3
push ecx
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x48]
movzx ecx, byte [esp + 1]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x4a]
movzx ecx, byte [esp + 2]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x4c]
movzx ecx, byte [esp + 3]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x4e]
movzx ecx, byte [esp + 4]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x50]
movzx ecx, byte [esp + 5]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x52]
movzx ecx, byte [esp + 6]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x54]
movzx ecx, byte [esp + 7]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x56]
movzx ecx, byte [esp + 8]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x58]
movzx ecx, byte [esp + 9]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x5a]
movzx ecx, byte [esp + 0xa]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x5c]
movzx ecx, byte [esp + 0xb]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x5e]
movzx ecx, byte [esp + 0xc]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x60]
movzx ecx, byte [esp + 0xd]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x62]
movzx ecx, byte [esp + 0xe]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x64]
movzx ecx, byte [esp + 0xf]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
push dword [0x88fb8c]
call fcn.001d4e00
add esp, 4
test eax, eax
je 0x19a663
push 0x20
lea ecx, [esp + 0x14]
push ecx
push eax
mov ebp, eax
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push ebp
call fcn.001d4e90
add esp, 0xc
lea ebx, [esp + 0xb8]
push ebx
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push ebx
push ebp
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push ebp
call fcn.001d4e90
add esp, 0xc
lea ebx, [esp + 0x3c]
push ebx
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push ebx
push ebp
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push ebp
call fcn.001d4e90
add esp, 0xc
mov ebx, edi
lea edi, [esp + 0x97]
push edi
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push edi
push ebp
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push ebp
call fcn.001d4e90
add esp, 0xc
lea edi, [esp + 0x34]
push edi
call fcn.004f8b98
add esp, 4
push eax
call fcn.00197840
add esp, 4
push eax
push edi
push ebp
call fcn.001d4e90
add esp, 0xc
push 1
push 0x7517ab
push ebp
call fcn.001d4e90
add esp, 0xc
push 0x20
lea eax, [esp + 0x4a]
push eax
push ebp
call fcn.001d4e90
add esp, 0xc
mov eax, esp
push eax
push ebp
call fcn.001d4eb0
add esp, 8
movzx eax, byte [esp]
lea ebp, [esp + 0x67]
push eax
push 0x7517ad
push 3
push ebp
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x69]
movzx ecx, byte [esp + 1]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x6b]
movzx ecx, byte [esp + 2]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x6d]
movzx ecx, byte [esp + 3]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x6f]
movzx ecx, byte [esp + 4]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x71]
movzx ecx, byte [esp + 5]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x73]
movzx ecx, byte [esp + 6]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x75]
movzx ecx, byte [esp + 7]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x77]
movzx ecx, byte [esp + 8]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x79]
movzx ecx, byte [esp + 9]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x7b]
movzx ecx, byte [esp + 0xa]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x7d]
movzx ecx, byte [esp + 0xb]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x7f]
movzx ecx, byte [esp + 0xc]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x81]
movzx ecx, byte [esp + 0xd]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x83]
movzx ecx, byte [esp + 0xe]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
lea eax, [esp + 0x85]
movzx ecx, byte [esp + 0xf]
push ecx
push 0x7517ad
push 3
push eax
call fcn.0017c960
add esp, 0x10
push edi
push ebp
mov edi, ebx
push ebx
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0xa7]
push eax
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x190]
push eax
push dword [esp + 0x230]
push 0x7517c1
call fcn.0017caa0
add esp, 0x24
mov ebx, eax
push 0x7517b2
push 0x1e1
push edi
call fcn.001775a0
add esp, 0xc
test ebx, ebx
je 0x199cc5
push ebx
call fcn.004f8b98
add esp, 4
push 0x1b89d0
push eax
push ebx
push dword [esp + 0x22c]
call fcn.001a8630
add esp, 0x10
xor esi, esi
jmp 0x199cc5
mov esi, 0x1b
jmp 0x199cc5
push 0x7517b2
push 0xf7
push edi
call fcn.001775a0
add esp, 0xc
jmp 0x199cc5
push 0x7517b2
push 0x1ae
jmp 0x19a649
push 0x7517b2
push 0x1c0
jmp 0x19a649