Function at 0x50734f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1bc
mov eax, 0x66d3a6
call fcn.006457b0
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x28]
mov word [ebp - 0x27], 0x7265
xor ebx, ebx
mov byte [ebp - 0x28], 0x4b
push eax
mov word [ebp - 0x20], 0x642e
mov word [ebp - 0x1d], 0x6c
mov dword [ebp - 0x24], 0x32336c65
mov byte [ebp - 0x25], 0x6e
mov byte [ebp - 0x1e], 0x6c
mov dword [ebp - 0x52], 0x74737269
mov word [ebp - 0x5b], 0x6f72
mov word [ebp - 0x55], 0x3233
mov word [ebp - 0x58], 0x7365
mov byte [ebp - 0x4e], bl
mov byte [ebp - 0x56], 0x73
mov byte [ebp - 0x5c], 0x50
mov byte [ebp - 0x53], 0x46
mov byte [ebp - 0x59], 0x63
mov word [ebp - 0x64], 0x74
mov dword [ebp - 0x6d], 0x73736563
mov dword [ebp - 0x69], 0x654e3233
mov word [ebp - 0x70], 0x7250
mov byte [ebp - 0x6e], 0x6f
mov byte [ebp - 0x65], 0x78
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x5073fa
xor al, al
jmp 0x5075be
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x28]
push eax
call esi
push eax
call edi
mov dword [ebp - 0x1c4], eax
test eax, eax
je 0x5073f3
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 0x736f6c43
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x78], 0x656c64
push eax
mov dword [ebp - 0x7c], 0x6e614865
call esi
push eax
call edi
mov ebx, eax
mov dword [ebp - 0x1c8], ebx
test ebx, ebx
je 0x5073f3
xor eax, eax
mov dword [ebp - 0x84], 0xf
mov esi, eax
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x98], al
push eax
push 2
mov dword [ebp - 4], eax
call fcn.00508951
mov edi, eax
pop ecx
pop ecx
cmp edi, 0xffffffff
jne 0x507481
push 0
push 1
lea ecx, [ebp - 0x98]
call fcn.0041814b
jmp 0x5073f3
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], pe_nt_image_headers32
push eax
push edi
call dword [ebp - 0x14]
test eax, eax
jne 0x50749f
push edi
call ebx
jmp 0x50746d
mov dword [ebp - 0x31], 0x45434956
xor ebx, ebx
mov dword [ebp - 0x37], 0x53584f42
mov word [ebp - 0x2d], 0x2e
mov word [ebp - 0x33], 0x5245
mov byte [ebp - 0x38], 0x56
mov word [ebp - 0x48], 0x4256
mov word [ebp - 0x43], 0x4152
mov word [ebp - 0x40], 0x2e
mov word [ebp - 0x45], 0x5458
mov byte [ebp - 0x41], 0x59
mov byte [ebp - 0x46], 0x4f
movsx eax, byte [ebp + ebx - 0x19c]
push eax
call fcn.00651382
mov byte [ebp + ebx - 0x19c], al
inc ebx
pop ecx
cmp ebx, 0x104
jl 0x5074df
lea eax, [ebp - 0x19c]
push eax
call fcn.00417720
pop ecx
push eax
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x98]
call fcn.004183e9
lea eax, [ebp - 0x18]
mov dword [ebp - 0x17], 0x455845
push eax
xor ebx, ebx
mov byte [ebp - 0x18], 0x2e
call fcn.00417720
pop ecx
push eax
push ebx
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x98]
call fcn.004184ef
test eax, eax
je 0x50758a
lea eax, [ebp - 0x38]
push eax
call fcn.00417720
pop ecx
push eax
push ebx
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x98]
call fcn.004184ef
test eax, eax
jne 0x50756a
inc esi
lea eax, [ebp - 0x48]
push eax
call fcn.00417720
pop ecx
push eax
push ebx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x98]
call fcn.004184ef
test eax, eax
jne 0x50758a
inc esi
lea eax, [ebp - 0x1c0]
push eax
push edi
call dword [ebp - 0x1c4]
test eax, eax
jne 0x5074df
push edi
call dword [ebp - 0x1c8]
cmp esi, 1
lea ecx, [ebp - 0x98]
push 0
push 1
setg bl
call fcn.0041814b
mov al, bl
call fcn.0064575a
ret