Function at 0x5818e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
jmp 0x58152d
pop esi
push ebx
or ebx, 0xe34e
call 0x581545
add byte [ebx + 0x3a], cl
dec ebp
dec edx
inc ebp
inc edx
cmp dword ds:[ebx], edi
inc esi
add esp, 4
pop ebx
push ecx
push ebx
add esp, 4
jmp 0x581557
pop ecx
push edi
sub edi, 0x49f8
pop edi
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0x658]
mov dword [ebp - 0xb48], ecx
push esi
xor esi, 0x11d17
call 0x581588
add byte [esi + 0x3d], al
inc edx
dec ebp
cmp al, 0x38
add esp, 4
pop esi
push eax
push ebx
add esp, 4
call 0x58159d
add byte [esi], dh
xor edi, dword [eax]
dec esp
dec esi
xor al, byte [ebx - 0x3f7efb3c]
mov dl, 0x17
add dword [eax], eax
pop eax
mov dword [ebp - 0x122c], 0xffffffff
push esi
push edi
add esp, 4
or esi, 0xa339
pop esi
push eax
add eax, 0x162d7
sub eax, 0x165c0
add eax, 0x17964
pop eax
push esi
push eax
add esp, 4
and esi, 0x85d2
add esi, 0x422f
pop esi
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x260], edx
jmp 0x581600
mov eax, dword [ebp - 0x260]
add eax, 1
mov dword [ebp - 0x260], eax
push ecx
push ecx
add esp, 4
add ecx, 0xd444
pop ecx
push edx
xor edx, 0x8eda
jmp 0x58161b
call 0x581628
add byte [edi + 0x3c], al
aas
cmp byte ss:[edi], dh
inc eax
add esp, 4
add edx, 0x81f8
pop edx
mov ecx, dword [ebp - 0x260]
sub ecx, dword [ebp - 0x238]
cmp ecx, 0xffffffff
jb 0x58167a
push ecx
or ecx, 0x9cf6
and ecx, 0x18393
sub ecx, 0x9864
xor ecx, 0x8af7
pop ecx
push esi
push esi
add esp, 4
add esi, 0xc820
xor esi, 0xd1f
add esi, 0x35f3
pop esi
jmp 0x581876
mov dword [ebp - 0x6a0], 7
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x60c], edx
push ecx
push edi
add esp, 4
sub ecx, 0x1d38
and ecx, 0xc3cb
add ecx, 0xbeb4
xor ecx, 0x519e
pop ecx
push edx
push eax
add esp, 4
sub edx, 0x13160
pop edx
push eax
add eax, 0x13278
pop eax
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x6a4], 0
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0xb48]
jne 0x5816f7
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], edx
jmp 0x581828
cmp dword [ebp - 0x6a0], 0
jle 0x58181c
push edi
add edi, 0x15c2
pop edi
push edi
push eax
add esp, 4
or edi, 0x15809
call 0x581726
add byte [0x3b3c5038], bh
aas
add esp, 4
and edi, 0x28c1
xor edi, 0xe64c
pop edi
mov eax, dword [ebp - 0x60c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x610]
movzx eax, byte [edx]
cmp ecx, eax
je 0x5817b8
push edi
add edi, 0x10c11
or edi, 0x12dd6
add edi, 0x36b3
pop edi
push ecx
call 0x58176e
add byte [ebx + 0x44], cl
inc ebx
cmp byte [0xc4834f3e], bh
add al, 0x59
push edi
push edi
add esp, 4
and edi, 0xa4ce
pop edi
mov ecx, dword [ebp - 0x60c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x610]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x5817a0
mov dword [ebp - 0xb4c], 1
jmp 0x5817aa
mov dword [ebp - 0xb4c], 0xffffffff
mov edx, dword [ebp - 0xb4c]
mov dword [ebp - 0x6a4], edx
jmp 0x58181c
push edx
and edx, 0x140d2
jmp 0x5817c7
sub edx, 0xfb3a
pop edx
push esi
push esi
add esp, 4
jmp 0x5817d8
xor esi, 0x60a9
xor esi, 0x228c
jmp 0x5817e9
pop esi
mov eax, dword [ebp - 0x6a0]
sub eax, 1
mov dword [ebp - 0x6a0], eax
mov ecx, dword [ebp - 0x60c]
add ecx, 1
mov dword [ebp - 0x60c], ecx
mov edx, dword [ebp - 0x610]
add edx, 1
mov dword [ebp - 0x610], edx
jmp 0x5816f7
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], eax
cmp dword [ebp - 0xb50], 0
jne 0x581871
push ebx
and ebx, 0x14799
pop ebx
push edi
push ecx
add esp, 4
xor edi, 0x14c05
xor edi, 0x10312
and edi, 0xfcf5
pop edi
push eax
push edx
add esp, 4
xor eax, 0x83a
add eax, 0x1223e
pop eax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x614], ecx
jmp 0x5818b2
jmp 0x5815f1
push ecx
push esi
add esp, 4
jmp 0x581881
and ecx, 0x12f38
pop ecx
push ecx
call 0x581898
add byte [edx], dh
cmp edi, dword [edx]
push eax
dec ecx
xor edi, dword [eax]
inc ebx
add esp, 4
add ecx, 0xf089
add ecx, 0x2438
pop ecx
mov dword [ebp - 0x614], 0
push eax
push ecx
add esp, 4
sub eax, 0x4b3a
call 0x5818cb
add byte [edi], dh
xor esi, dword [edx]
dec esi
inc ecx
inc edi
inc edi
add esp, 4
add eax, 0x19f9
call 0x5818e0
add byte [ecx], bh
cmp byte [eax + 0x39], cl
xor al, 0x43
add esp, 4
pop eax
mov byte [ebp - 0x494], 0x45
mov byte [ebp - 0x493], 0x78
mov byte [ebp - 0x492], 0x69
mov byte [ebp - 0x491], 0x74
mov byte [ebp - 0x490], 0x50
mov byte [ebp - 0x48f], 0x72
mov byte [ebp - 0x48e], 0x6f
mov byte [ebp - 0x48d], 0x63
mov byte [ebp - 0x48c], 0x65
mov byte [ebp - 0x48b], 0x73
mov byte [ebp - 0x48a], 0x73
mov byte [ebp - 0x489], 0
push eax
jmp 0x581941
or eax, 0x92d0
pop eax
push eax
sub eax, 0x6eba
pop eax
push edi
add edi, 0x103cb
xor edi, 0xa8a2
xor edi, 0x878f
or edi, 0x2ca6
pop edi
mov edx, 0x6b
mov word [ebp - 0xc50], dx
mov eax, 0x65
mov word [ebp - 0xc4e], ax
mov ecx, 0x72
mov word [ebp - 0xc4c], cx
mov edx, 0x6e
mov word [ebp - 0xc4a], dx
mov eax, 0x65
mov word [ebp - 0xc48], ax
mov ecx, 0x6c
mov word [ebp - 0xc46], cx
mov edx, 0x33
mov word [ebp - 0xc44], dx
mov eax, 0x32
mov word [ebp - 0xc42], ax
mov ecx, 0x2e
mov word [ebp - 0xc40], cx
mov edx, 0x64
mov word [ebp - 0xc3e], dx
mov eax, 0x6c
mov word [ebp - 0xc3c], ax
mov ecx, 0x6c
mov word [ebp - 0xc3a], cx
xor edx, edx
mov word [ebp - 0xc38], dx
push edi
push ebx
add esp, 4
call 0x581a16
add byte [esi + 0x34], cl
aas
dec ecx
dec ebp
add esp, 4
or edi, 0x467a
jmp 0x581a26
or edi, 0xd3e0
pop edi
push edi
or edi, 0xe715
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0xe28], eax
mov ecx, dword [ebp - 0xe28]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xe2c], edx
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0xb54], eax
push eax
and eax, 0x6ba8
pop eax
push edx
push ebx
add esp, 4
and edx, 0x5aa
sub edx, 0xbd98
pop edx
push edx
push edx
add esp, 4
xor edx, 0x4125
or edx, 0xe9bd
and edx, 0x8eec
pop edx
cmp dword [ebp - 0xb54], 0
jne 0x581aa6
mov dword [ebp - 0x188], 0
jmp 0x581d4d
mov ecx, dword [ebp - 0xb54]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x6b0], eax
push edi
push ecx
add esp, 4
xor edi, 0x117f4
pop edi
push edi
or edi, 0xa93f
add edi, 0x12b13
call 0x581ae0
add byte [ecx], bh
dec edx
inc edx
aaa
dec edx
cmp al, 0x4a
aaa
xor eax, 0x8104c483
iretd
push edi
or edi, 0x75a7
jmp 0x581d5a
sub edi, 0x7a6d
pop edi
push ecx