Function at 0x1004c4e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x38
mov eax, dword [0x10070264]
xor eax, esp
mov dword [esp + 0x34], eax
mov dword [esp], ecx
mov byte [esp + 0x30], 0
mov dword [esp + 0x2c], 0x7a7a7238
mov dword [esp + 0x28], 0x24257a73
mov dword [esp + 0x24], 0x7864737d
mov eax, dword [esp]
lea eax, [esp + 0x24]
push eax
call fcn.1004a030
mov ebx, 0x6f152eda
jmp 0x1004c540
mov edx, 0xc1528810
cmp dword [0x10070bac], 0xa
cmovl ebx, edx
setl dl
xor cl, dl
cmovne ebx, eax
nop dword [eax]
cmp ebx, 0x3fc8eaf0
jle 0x1004c5a0
cmp ebx, 0x61005daa
jle 0x1004c5f0
cmp ebx, 0x73242cff
jg 0x1004c68a
cmp ebx, 0x61005dab
je 0x1004c766
cmp ebx, 0x68d529cc
je 0x1004c774
cmp ebx, 0x6f152eda
jne 0x1004c540
mov ebx, 0x9c652190
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
jmp 0x1004c540
cmp ebx, 0xa7cdcd08
jle 0x1004c650
cmp ebx, 0xc152880f
jg 0x1004c6b8
cmp ebx, 0xa7cdcd09
je 0x1004c7a9
cmp ebx, 0xb2d71a72
je 0x1004c7d8
cmp ebx, 0xb6270941
jne 0x1004c540
mov ebx, 0xa7cdcd09
jmp 0x1004c540
cmp ebx, 0x52d76336
jle 0x1004c722
cmp ebx, 0x52d76337
je 0x1004c7e4
cmp ebx, 0x56748ede
je 0x1004c7ee
cmp ebx, 0x5c5424e6
jne 0x1004c540
mov eax, dword [0x10070ba8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
mov eax, 0xa1a86c5a
mov ebx, 0xc1528810
mov edx, 0xa1a86c5a
cmp ecx, 0xffffffff
sete cl
je 0x1004c52b
jmp 0x1004c526
cmp ebx, 0x9c65218f
jle 0x1004c744
cmp ebx, 0x9c652190
je 0x1004c81e
cmp ebx, 0xa1a86c5a
je 0x1004c856
cmp ebx, 0xa5a2ef88
jne 0x1004c540
mov ebx, 0xb6270941
jmp 0x1004c540
cmp ebx, 0x73242d00
je 0x1004c860
cmp ebx, 0x74593e89
je 0x1004c86a
cmp ebx, 0x7fa715ee
jne 0x1004c540
mov ebx, 0xb6270941
jmp 0x1004c540
cmp ebx, 0xc1528810
je 0x1004c89e
cmp ebx, 0xbe4668b
je 0x1004c8a8
cmp ebx, 0x213d323e
jne 0x1004c540
mov edx, dword [0x10070ba8]
mov eax, dword [0x10070bac]
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov ebx, 0x4135bde5
mov edx, 0x4135bde5
jne 0x1004c711
mov edx, 0x95b11c81
cmp ecx, 0xffffffff
cmovne ebx, edx
cmp eax, 0xa
cmovge ebx, edx
jmp 0x1004c540
cmp ebx, 0x3fc8eaf1
je 0x1004c8f2
cmp ebx, 0x4135bde5
jne 0x1004c95c
mov ebx, 0xa5a2ef88
jmp 0x1004c540
cmp ebx, 0x947167c7
je 0x1004c90e
cmp ebx, 0x95b11c81
jne 0x1004c540
mov ebx, 0x213d323e
jmp 0x1004c540
mov ebx, 0xbe4668b
mov edi, dword [esp + 4]
jmp 0x1004c540
mov eax, dword [0x10070ba8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
mov eax, 0x213d323e
mov ebx, 0x95b11c81
mov edx, 0x213d323e
cmp ecx, 0xffffffff
sete cl
je 0x1004c52b
mov edx, 0x95b11c81
jmp 0x1004c52b
mov eax, dword [0x10070ba8]
lea ecx, [eax + 1]
imul ecx, eax
mov ebp, ecx
xor ebp, 0xfffffffe
mov eax, 0x5c5424e6
mov ebx, 0xc1528810
mov edx, 0x5c5424e6
test ebp, ecx
sete cl
je 0x1004c52b
jmp 0x1004c526
mov ebx, 0x68d529cc
xor edi, edi
jmp 0x1004c540
mov ebx, 0x947167c7
jmp 0x1004c540
mov eax, dword [0x10070ba8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
mov eax, 0x947167c7
mov ebx, 0x52d76337
mov edx, 0x947167c7
cmp ecx, 0xffffffff
sete cl
jne 0x1004c940
jmp 0x1004c945
movups xmm0, xmmword [str.Qsb_yrczsP]
movups xmmword [esp + 0x10], xmm0
mov dword [esp + 0x1f], 0x41737b
mov eax, dword [esp]
lea eax, [esp + 0x10]
push eax
call fcn.1004a030
mov ebx, 0xb2d71a72
test esi, esi
je 0x1004c540
mov ebx, 0x56748ede
jmp 0x1004c540
mov ebx, 0x43a3b310
jmp 0x1004c540
mov ebx, 0x3fc8eaf1
jmp 0x1004c540
mov eax, dword [0x10070ba8]
lea ecx, [eax + 1]
imul ecx, eax
mov ebp, ecx
xor ebp, 0xfffffffe
mov eax, 0xbe4668b
mov ebx, 0x61005dab
mov edx, 0xbe4668b
test ebp, ecx
sete cl
je 0x1004c52b
mov edx, 0x61005dab
jmp 0x1004c52b
mov ebx, 0x5c5424e6
jmp 0x1004c540
mov edx, dword [0x10070ba8]
mov eax, dword [0x10070bac]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov ebx, 0x7fa715ee
mov edx, 0x7fa715ee
jne 0x1004c8dd
mov edx, 0x61005dab
cmp ecx, 0xffffffff
cmovne ebx, edx
cmp eax, 0xa
mov edi, dword [esp + 4]
cmovge ebx, edx
jmp 0x1004c540
push dword [esp + 8]
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 4], eax
mov ebx, 0x74593e89
jmp 0x1004c540
lea eax, [esp + 0x10]
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov eax, dword [0x10070ba8]
lea ecx, [eax + 1]
imul ecx, eax
mov ebp, ecx
xor ebp, 0xfffffffe
mov eax, 0x73242d00
mov ebx, 0x52d76337
mov edx, 0x73242d00
test ebp, ecx
sete cl
je 0x1004c945
mov edx, 0x52d76337
cmp dword [0x10070bac], 0xa
cmovl ebx, edx
setl dl
xor dl, cl
cmovne ebx, eax
jmp 0x1004c540
cmp ebx, 0x43a3b310
jne 0x1004c540
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.1005429d
mov eax, edi
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret