Function at 0x5182dc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x4dc77c
call 0x575ad8
sub esp, 0x34
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov esi, ecx
cmp edi, ebx
je 0x518310
mov eax, dword [esi + 0x54]
cmp eax, edi
je 0x51867b
mov ecx, dword [0x5233a8]
cmp dword [ecx + 0x198], ebx
je 0x518318
push 1
pop eax
jmp 0x51867d
cmp eax, ebx
je 0x51834c
mov ecx, dword [esi + 4]
push ebx
push eax
call 0x58bc2c
mov ecx, dword [esi + 4]
push ebx
push edi
mov dword [ebp - 0x18], eax
call 0x58bc2c
cmp eax, dword [ebp - 0x18]
je 0x51834c
cmp dword [ebp + 0xc], ebx
je 0x51834c
mov eax, dword [esi + 0x54]
lea ecx, [esi + 0x5c]
add eax, 0xc
push eax
call 0x58b68e
mov ecx, dword [esi + 0x54]
cmp ecx, ebx
je 0x518358
mov eax, dword [ecx]
call dword [eax + 0x20]
mov dword [esi + 0x54], edi
lea edi, [esi + 0x10]
mov ecx, edi
call fcn.00517aeb
mov eax, dword [esi + 0x54]
add eax, 0xc
push eax
lea eax, [ebp + 0xc]
push 0x5150c4
push eax
call 0x58d49f
mov eax, dword [eax]
push ebx
push ebx
push ebx
push eax
mov eax, dword [0x5233a8]
mov dword [ebp - 4], ebx
lea ecx, [eax + 0x6b8]
call 0x54cda7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call 0x58d196
mov ecx, dword [esi + 0x54]
cmp dword [ecx + 0x1b4], ebx
jne 0x5183af
call fcn.0051c0f2
mov ecx, dword [esi + 0x54]
push edi
mov dword [esi + 0x4c], ecx
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [esi + 0x54]
push edi
call fcn.0051a980
push ecx
mov edi, esp
mov dword [ebp + 0xc], esp
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push 0x5150b0
call 0x58d204
mov ecx, dword [esi + 0x54]
push edi
add ecx, 0x1a8
call 0x54d20a
mov ecx, dword [esi + 0x54]
lea eax, [ebp - 0x10]
push eax
call fcn.0051c398
push 7
push ecx
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov dword [ebp - 4], 1
mov byte [ebp - 0x40], 0
mov byte [ebp - 0x3f], 0x2a
mov byte [ebp - 0x3e], 0x27
mov byte [ebp - 0x3d], 0x54
mov byte [ebp - 0x3c], 0x62
mov byte [ebp - 0x3b], 0x73
mov byte [ebp - 0x3a], 0x72
mov byte [ebp - 0x39], 0x77
mov byte [ebp - 0x38], 0x27
mov byte [ebp - 0x37], 0x41
mov byte [ebp - 0x36], 0x66
mov byte [ebp - 0x35], 0x64
mov byte [ebp - 0x34], 0x73
mov byte [ebp - 0x33], 0x68
mov byte [ebp - 0x32], 0x75
mov byte [ebp - 0x31], 0x7e
mov byte [ebp - 0x30], 0x27
mov byte [ebp - 0x2f], 0x30
mov byte [ebp - 0x2e], 0x29
mov byte [ebp - 0x2d], 0x37
mov byte [ebp - 0x2c], 0x27
mov byte [ebp - 0x2b], 0x53
mov byte [ebp - 0x2a], 0x75
mov byte [ebp - 0x29], 0x6e
mov byte [ebp - 0x28], 0x66
mov byte [ebp - 0x27], 0x6b
mov byte [ebp - 0x26], 0x27
mov byte [ebp - 0x25], 0x51
mov byte [ebp - 0x24], 0x62
mov byte [ebp - 0x23], 0x75
mov byte [ebp - 0x22], 0x74
mov byte [ebp - 0x21], 0x6e
mov byte [ebp - 0x20], 0x68
mov byte [ebp - 0x1f], 0x69
mov byte [ebp - 0x1e], bl
call 0x58d204
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.005188a4
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 2
call 0x58d5ae
push dword [ebp - 0x10]
lea ecx, [esi + 0x10]
call 0x590784
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push 0x5150a4
call 0x58d204
mov ecx, dword [esi + 0x54]
call fcn.0051bdb3
mov edi, eax
cmp edi, ebx
je 0x51858f
mov eax, dword [esi + 0x54]
mov ecx, dword [eax + 4]
cmp ecx, 0x9b
je 0x5184f6
cmp ecx, 0x82
jne 0x518500
mov dword [eax + 0x2e8], 1
mov eax, dword [0x51e79c]
mov dword [ebp + 8], eax
push dword [edi + 8]
mov eax, dword [esi + 0x54]
mov byte [ebp - 4], 3
push dword [eax + 0xc]
lea eax, [ebp + 8]
push 0x514fec
push eax
call 0x589ae1
add esp, 0xc
mov ecx, esp
mov dword [ebp + 0xc], esp
push 0x523280
call 0x58d204
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
mov byte [ebp - 4], 4
call 0x58cf0b
push ecx
add edi, 0xc
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edi
mov byte [ebp - 4], 5
call 0x58cf0b
mov ecx, dword [esi + 0x54]
mov byte [ebp - 4], 3
call fcn.0051bd29
mov eax, dword [esi + 0x54]
mov ecx, dword [eax + 4]
cmp ecx, 0x9b
je 0x51857d
cmp ecx, 0x82
jne 0x518583
mov dword [eax + 0x2e8], ebx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 2
call 0x58d196
call fcn.004d5109
cmp eax, ebx
mov dword [ebp + 0xc], ebx
je 0x5185a7
push dword [eax + 0x1c]
call dword [0x4e55c8]
mov dword [ebp + 0xc], eax
push dword [esi + 0x2c]
call dword [fcn.004e5600]
cmp eax, ebx
jne 0x5185c8
cmp dword [esi + 0x58], ebx
jne 0x5185c8
cmp dword [ebp + 0xc], ebx
jne 0x5185c8
push 5
lea ecx, [esi + 0x10]
call 0x5908a0
mov eax, dword [esi + 0x54]
mov edi, dword [eax + 0x18]
cmp edi, ebx
je 0x5185e7
mov eax, edi
mov edi, dword [edi]
mov ecx, dword [eax + 8]
cmp ecx, ebx
je 0x5185ce
mov eax, dword [ecx]
push dword [ecx + 0xc]
call dword [eax + 0x14]
jmp 0x5185ce
push dword [esi + 0x2c]
mov edi, dword [fcn.004e56f4]
call edi
test eax, eax
je 0x518663
mov eax, dword [esi + 0x54]
mov eax, dword [eax + 0x1b8]
cmp eax, ebx
je 0x518617
push dword [eax + 0x1c]
call edi
test eax, eax
je 0x518617
mov eax, dword [esi + 0x54]
mov ecx, dword [eax + 0x1b8]
jmp 0x51864a
lea eax, [esi + 0x10]
cmp eax, ebx
jne 0x518622
xor eax, eax
jmp 0x518625
mov eax, dword [eax + 0x1c]
push ebx
push eax
push dword [esi + 0x2c]
call dword [0x4e56ec]
push eax
call 0x58dc8f
cmp eax, ebx
je 0x51864f
mov ecx, dword [esi + 0x54]
cmp dword [ebp + 0xc], ebx
mov dword [ecx + 0x1b8], eax
jne 0x51864f
mov ecx, eax
call 0x590909
mov ecx, dword [esi + 0x54]
mov eax, dword [ecx]
call dword [eax + 0x2c]
push 1
push ebx
push dword [esi + 0x2c]
call dword [fcn.004e56b4]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call 0x58d196
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call 0x58d196
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 8