Function at 0x10004b99
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push 0x44
mov eax, 0x1006bd0a
call fcn.10053b4c
mov dword [ebp - 0x50], ecx
mov edx, 0x1008ba8c
lea ecx, [ebp - 0x4c]
call fcn.10004b36
xor ebx, ebx
mov edx, 0x1008ba7c
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
call fcn.10004b36
mov edx, 0x1008ba9c
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.10004b36
mov edx, 0x1008baac
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10004b36
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x40]
cmp dword [eax - 0xc], ebx
jne 0x10004c41
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.100060ed
push str.__x86_
lea ecx, [ebp - 0x3c]
call fcn.1000608b
push ebx
mov byte [ebp - 4], 4
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x40]
call fcn.100063b8
test eax, eax
js 0x10004c32
push 0x1009231d
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x40]
call fcn.100061f7
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.10001821
push 0x1009d2a8
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x1d], 0x6d6f7268
mov dword [ebp - 0x34], 0x435c656c
mov word [ebp - 0x16], 0x6578
mov word [ebp - 0x22], 0x6f69
mov dword [ebp - 0x26], 0x74616369
mov word [ebp - 0x1f], 0x635c
mov dword [ebp - 0x2a], 0x6c707041
mov dword [ebp - 0x38], 0x676f6f47
mov word [ebp - 0x19], 0x2e65
mov byte [ebp - 0x17], 0x65
mov word [ebp - 0x2d], 0x656d
mov byte [ebp - 0x2b], 0x5c
mov byte [ebp - 0x20], 0x6e
mov word [ebp - 0x30], 0x7268
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x2e], 0x6f
call fcn.100072a8
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x44]
cmp dword [eax - 4], 1
jle 0x10004cc3
push dword [eax - 0xc]
lea ecx, [ebp - 0x44]
call fcn.10007363
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x38]
push ecx
push eax
lea eax, [ebp - 0x3c]
push str._s_s
push eax
call fcn.10009163
add esp, 0xc
lea ecx, [ebp - 0x44]
call fcn.10006669
mov esi, dword [ebp - 0x3c]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push esi
call edi
test eax, eax
jne 0x10004db2
mov eax, dword [ebp - 0x40]
cmp dword [eax - 4], 1
jle 0x10004d0c
push dword [eax - 0xc]
lea ecx, [ebp - 0x40]
call fcn.10007363
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x38]
push ecx
push eax
lea eax, [ebp - 0x3c]
push str._s_s
push eax
call fcn.10009163
add esp, 0xc
lea ecx, [ebp - 0x40]
call fcn.10006669
mov esi, dword [ebp - 0x3c]
push esi
call edi
test eax, eax
jne 0x10004db2
mov eax, dword [ebp - 0x4c]
cmp dword [eax - 4], 1
jle 0x10004d4b
push dword [eax - 0xc]
lea ecx, [ebp - 0x4c]
call fcn.10007363
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x38]
push ecx
push eax
lea eax, [ebp - 0x3c]
push str._s_s
push eax
call fcn.10009163
add esp, 0xc
lea ecx, [ebp - 0x4c]
call fcn.10006669
mov esi, dword [ebp - 0x3c]
push esi
call edi
test eax, eax
jne 0x10004db2
mov eax, dword [ebp - 0x48]
cmp dword [eax - 4], 1
jle 0x10004d8a
push dword [eax - 0xc]
lea ecx, [ebp - 0x48]
call fcn.10007363
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x38]
push ecx
push eax
lea eax, [ebp - 0x3c]
push str._s_s
push eax
call fcn.10009163
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.10006669
mov esi, dword [ebp - 0x3c]
push esi
call edi
test eax, eax
je 0x10004dc5
push esi
push 0x10092414
push dword [ebp - 0x50]
call fcn.10009163
add esp, 0xc
mov bl, 1
lea ecx, [esi - 0x10]
call fcn.10001821
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.10001821
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.10001821
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.10001821
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.10001821
mov al, bl
call fcn.10053b0a
ret