Function at 0x518027
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
mov dword [ebp - 4], 0
push 0xc
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.0052b4cd
add esp, 0xc
lea ebx, [ebx + 0x5a3b]
sub ebx, 0x5a3b
jno 0x518070
pushf
xor edi, dword [esp + 4]
xor edi, dword [esp + 4]
cmp esp, 0x5b6b
popf
js 0x518069
jge 0x51806b
jb 0x51806d
jo 0x518070
add eax, 0x47ec45c6
mov byte [ebp - 0x14], 0x47
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x42
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x6f
mov byte [ebp - 9], 0
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0x11], 0x65
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xb], 0x78
cmp esi, dword [esp]
jp 0x5180c3
pushf
or eax, eax
lea eax, [eax]
rol edi, 1
ror edi, 1
popf
lea esp, [esp]
lea esi, [esi + 0x4064]
lea esi, [esi - 0x4064]
jnp 0x5180c3
mov esp, 0x80ec4d8a
jmp 0xec9f08cd
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
call fcn.00520551
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x518138
xor eax, eax
jmp 0x518362
jnp 0x51813a
mov esi, esi
nop
js 0x518144
jns 0x518141
jns 0x518144
xor eax, 0x50ec458d
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.005132bc
mov dword [ebp - 0x18], eax
push 0xc
push 0
lea edx, [ebp - 0x14]
push edx
call fcn.0052b4cd
add esp, 0xc
xor edi, dword [esp + 0x10]
xor edi, dword [esp + 0x10]
sub esp, 0
xchg ecx, ebx
xchg ecx, ebx
jp 0x518193
pushf
jb 0x518179
lea edx, [edx + 0x52dc]
sub edx, 0x52dc
add ecx, 0
popf
js 0x51818c
lea ebx, [ebx]
jb 0x518190
jnp 0x518193
add dword [ebx + 0x7500e87d], 0xe9c03307
ret 1
cmp dword [ebp - 0x18], 0
jne 0x5181a0
xor eax, eax
jmp 0x518362
shr esp, 0
jno 0x5181b2
pushf
test dword [esp], edi
popf
nop
jle 0x5181af
jo 0x5181b2
mov ecx, 0x50e8458b
mov eax, dword [ebp - 0x18]
push eax
call fcn.00508f45
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x14]
push ecx
call fcn.0052b4cd
add esp, 0xc
xor eax, 0
xchg edi, eax
xchg edi, eax
jb 0x5181e6
pushf
cmp ecx, dword [esp]
sub ecx, 0
popf
jl 0x5181e1
jbe 0x5181e3
jae 0x5181e6
add eax, 0x47ec45c6
mov byte [ebp - 0x14], 0x47
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x6f
mov byte [ebp - 9], 0
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0x11], 0x65
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xb], 0x78
sub esp, 0
not esi
not esi
cmp edi, esi
jle 0x51822d
jge 0x518223
jp 0x518225
xchg esp, esp
jp 0x518229
jg 0x51822d
sub eax, 0xec558a55
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
call 0x518291
add esp, 4
sub eax, 0
je 0x5182a1
xchg edi, eax
xchg edi, eax
jl 0x51829d
jne 0x5182a1
mov ebx, 0xfc7d8321
add byte [edi + ebx + 0x4b], dh
cmp dword [ebp - 4], 0
je 0x5182c6
dec ebx
inc ebx
rol edx, 0
jl 0x5182b6
xchg esi, esi
jb 0x5182b2
jge 0x5182b6
lcall 0x8b51, 0xec4d8d7a
push ebp
cld
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.005132bc
mov dword [ebp - 8], eax
cmp ebx, 0x444d
jno 0x5182e3
pushf
rol ecx, 0x1b
ror ecx, 0x1b
jl 0x5182d8
popf
nop
lea esp, [esp]
jmp 0x5182e0
jo 0x5182e3
add eax, 0x6a0c6a
push 0xc
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.0052b4cd
add esp, 0xc
ror esi, 0x19
rol esi, 0x19
je 0x518301
jp 0x5182fd
jne 0x518301
mov edx, 0xf87d83f7
add byte [eax + eax*2 - 0x73], dh
cmp byte [eax], 0x2a
add byte [eax], al
cmp dword [ebp - 8], 0
je 0x518347
lea eax, [eax + 0x2a38]
sub eax, 0x2a38
xor edi, 0x564c
xor edi, 0x564c
jnp 0x51833b
pushf
xor esi, dword [esp + 8]
xor esi, dword [esp + 8]
cmp ebx, 0x7e52
mov eax, eax
popf
jns 0x518336
mov esp, esp
jp 0x51833b
add eax, 0x51f84d8b
mov ecx, dword [ebp - 8]
push ecx
call fcn.00508f45
add esp, 4
lea ebx, [ebx]
shl esp, 0
jle 0x518357
mov esp, esp
jp 0x518352
jg 0x518357
sub eax, 0x558b6867
or al, 0x52
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8