Function at 0x10051120
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x40
mov eax, dword [0x10070264]
xor eax, esp
mov dword [esp + 0x3c], eax
mov dword [esp], ecx
mov byte [esp + 0x38], 0
mov dword [esp + 0x34], 0x7a7a7238
mov dword [esp + 0x30], 0x24257a73
mov dword [esp + 0x2c], 0x7864737d
mov eax, dword [esp]
lea esi, [esp + 0x2c]
push esi
call fcn.1004a030
mov dword [esp + 4], esi
mov eax, 0x3a175928
jmp 0x10051180
cmp dword [0x10070c1c], 0xa
cmovl eax, ebx
setl dh
xor dl, dh
cmovne eax, ecx
nop dword [eax]
cmp eax, 0x29761a0f
jle 0x100511d0
cmp eax, 0x37d296d3
jg 0x10051260
cmp eax, 0x31796348
jle 0x100512cb
cmp eax, 0x31796349
je 0x100513b1
cmp eax, 0x320a496e
je 0x100513e5
cmp eax, 0x369082bc
jne 0x10051180
mov eax, 0x31796349
mov esi, dword [esp + 0x10]
jmp 0x10051180
cmp eax, 0xbe87ff57
jg 0x100512a0
cmp eax, 0x9120a7a0
jle 0x10051325
cmp eax, 0x9120a7a1
je 0x100513ef
cmp eax, 0x93a98b63
je 0x100513f9
cmp eax, 0x97f82bba
jne 0x10051180
push dword [esp + 4]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
movups xmm0, xmmword [str.QsbUcddsxbR]
movups xmmword [esp + 0x14], xmm0
movsd xmm0, qword [0x1006789d]
movsd qword [esp + 0x21], xmm0
lea eax, [esp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [0x10070c18]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov ecx, 0x1a580d3b
mov eax, 0x29761a10
mov ebx, 0x1a580d3b
jmp 0x1005137c
cmp eax, 0x574404b5
jle 0x10051347
cmp eax, 0x574404b6
je 0x10051430
cmp eax, 0x7e0cb776
je 0x10051476
cmp eax, 0x7f1c0f51
jne 0x10051180
lea eax, [esp + 0x14]
mov dword [esp + 0xc], eax
mov eax, 0xd07faf11
jmp 0x10051180
cmp eax, 0x9da8742
jg 0x10051391
cmp eax, 0xd07faf11
je 0x10051480
cmp eax, 0xe5869b58
jne 0x10051500
mov eax, 0xbe87ff58
jmp 0x10051180
cmp eax, 0x29761a10
je 0x10051499
cmp eax, 0x2d236b07
jne 0x10051180
mov eax, dword [0x10070c18]
mov ecx, dword [0x10070c1c]
lea edx, [eax + 1]
imul edx, eax
mov ebx, edx
xor ebx, 0xfffffffe
test ebx, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x7e0cb776
mov ebp, 0x7e0cb776
jne 0x10051315
mov ebp, 0x9120a7a1
test ebx, edx
cmovne eax, ebp
cmp ecx, 0xa
cmovge eax, ebp
jmp 0x10051180
cmp eax, 0x855382b1
je 0x100514c9
cmp eax, 0x8f0838ce
jne 0x10051180
mov eax, 0x37d296d4
xor esi, esi
jmp 0x10051180
cmp eax, 0x37d296d4
je 0x100514ec
cmp eax, 0x3a175928
jne 0x10051180
mov eax, dword [0x10070c18]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov ecx, 0x97f82bba
mov eax, 0x29761a10
mov ebx, 0x97f82bba
test ebp, edx
sete dl
je 0x1005116a
mov ebx, 0x29761a10
jmp 0x1005116a
cmp eax, 0x9da8743
je 0x100514f6
cmp eax, 0x1a580d3b
jne 0x10051180
mov eax, 0x855382b1
jmp 0x10051180
mov eax, dword [0x10070c18]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov ecx, 0x93a98b63
mov eax, 0x9da8743
mov ebx, 0x93a98b63
test ebp, edx
sete dl
je 0x1005116a
mov ebx, 0x9da8743
jmp 0x1005116a
mov eax, 0xe5869b58
jmp 0x10051180
mov eax, 0x2d236b07
jmp 0x10051180
mov eax, dword [0x10070c18]
mov ecx, dword [0x10070c1c]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x320a496e
mov ebx, 0x320a496e
jne 0x10051465
mov ebx, 0x9da8743
jmp 0x10051465
mov eax, dword [0x10070c18]
mov ecx, dword [0x10070c1c]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x2d236b07
mov ebx, 0x2d236b07
jne 0x10051465
mov ebx, 0x9120a7a1
cmp edx, 0xffffffff
cmovne eax, ebx
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x10051180
mov eax, 0x31796349
jmp 0x10051180
push dword [esp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x10], eax
mov eax, 0x369082bc
jmp 0x10051180
push dword [esp + 4]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
movsd xmm0, qword [0x1006789d]
movsd qword [esp + 0x21], xmm0
movups xmm0, xmmword [str.QsbUcddsxbR]
movups xmmword [esp + 0x14], xmm0
mov eax, 0x97f82bba
jmp 0x10051180
mov eax, dword [esp]
push dword [esp + 8]
call fcn.1004a030
mov eax, 0x8f0838ce
test edi, edi
je 0x10051180
mov eax, 0x7f1c0f51
jmp 0x10051180
mov eax, 0x574404b6
jmp 0x10051180
mov eax, 0x93a98b63
jmp 0x10051180
cmp eax, 0xbe87ff58
jne 0x10051180
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.1005429d
mov eax, esi
add esp, 0x40
pop esi
pop edi
pop ebx
pop ebp
ret