Function at 0x1000528f
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push 0x44
mov eax, 0x10080a93
call fcn.1005b38d
mov dword [ebp - 0x50], ecx
mov edx, 0x1009a434
lea ecx, [ebp - 0x4c]
call fcn.10005229
xor ebx, ebx
lea ecx, [ebp - 0x48]
mov edx, 0x1009a424
mov dword [ebp - 4], ebx
call fcn.10005229
mov edx, 0x1009a444
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x44]
call fcn.10005229
mov edx, 0x1009a454
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.10005229
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x40]
cmp dword [eax - 0xc], ebx
jne 0x10005337
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
call fcn.10006622
push str.__x86_
lea ecx, [ebp - 0x3c]
call fcn.10006677
push ebx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x40]
push dword [ebp - 0x3c]
call fcn.1000635b
test eax, eax
js 0x10005328
push 0x100a57dd
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x40]
call fcn.1000640f
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.10001e00
mov dword [ebp - 0x1d], 0x6d6f7268
mov dword [ebp - 0x34], 0x435c656c
mov word [ebp - 0x16], 0x6578
mov word [ebp - 0x22], 0x6f69
mov dword [ebp - 0x26], 0x74616369
mov word [ebp - 0x1f], 0x635c
mov dword [ebp - 0x2a], 0x6c707041
mov dword [ebp - 0x38], 0x676f6f47
mov word [ebp - 0x19], 0x2e65
mov byte [ebp - 0x17], 0x65
mov word [ebp - 0x2d], 0x656d
mov byte [ebp - 0x2b], 0x5c
mov byte [ebp - 0x20], 0x6e
mov word [ebp - 0x30], 0x7268
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x2e], 0x6f
call fcn.10001e63
push eax
lea ecx, [ebp - 0x3c]
call fcn.10007eec
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x44]
cmp dword [eax - 4], 1
jle 0x100053ba
push dword [eax - 0xc]
lea ecx, [ebp - 0x44]
call fcn.10007f38
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x38]
push ecx
push eax
lea eax, [ebp - 0x3c]
push 0x100a6c20
push eax
call fcn.100096bf
add esp, 0xc
lea ecx, [ebp - 0x44]
call fcn.10006851
mov esi, dword [ebp - 0x3c]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push esi
call edi
test eax, eax
jne 0x100054a9
mov eax, dword [ebp - 0x40]
cmp dword [eax - 4], 1
jle 0x10005403
push dword [eax - 0xc]
lea ecx, [ebp - 0x40]
call fcn.10007f38
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x38]
push ecx
push eax
lea eax, [ebp - 0x3c]
push 0x100a6c20
push eax
call fcn.100096bf
add esp, 0xc
lea ecx, [ebp - 0x40]
call fcn.10006851
mov esi, dword [ebp - 0x3c]
push esi
call edi
test eax, eax
jne 0x100054a9
mov eax, dword [ebp - 0x4c]
cmp dword [eax - 4], 1
jle 0x10005442
push dword [eax - 0xc]
lea ecx, [ebp - 0x4c]
call fcn.10007f38
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x38]
push ecx
push eax
lea eax, [ebp - 0x3c]
push 0x100a6c20
push eax
call fcn.100096bf
add esp, 0xc
lea ecx, [ebp - 0x4c]
call fcn.10006851
mov esi, dword [ebp - 0x3c]
push esi
call edi
test eax, eax
jne 0x100054a9
mov eax, dword [ebp - 0x48]
cmp dword [eax - 4], 1
jle 0x10005481
push dword [eax - 0xc]
lea ecx, [ebp - 0x48]
call fcn.10007f38
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x38]
push ecx
push eax
lea eax, [ebp - 0x3c]
push 0x100a6c20
push eax
call fcn.100096bf
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.10006851
mov esi, dword [ebp - 0x3c]
push esi
call edi
test eax, eax
je 0x100054bc
push esi
push 0x100a6b28
push dword [ebp - 0x50]
call fcn.100096bf
add esp, 0xc
mov bl, 1
lea ecx, [esi - 0x10]
call fcn.10001e00
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.10001e00
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.10001e00
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.10001e00
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.10001e00
mov al, bl
call fcn.1005b348
ret