Function at 0x1004b2f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
mov eax, dword [0x10070264]
xor eax, esp
mov dword [esp + 0x30], eax
mov dword [esp], ecx
mov eax, 0x120d259b
jmp 0x1004b320
cmp dword [0x10070b94], 0xa
cmovl eax, edi
setl dh
xor dh, dl
cmovne eax, ecx
nop
cmp eax, 0xfdc40618
jg 0x1004b3a0
cmp eax, 0xd94a7b87
jg 0x1004b3e0
cmp eax, 0xb2f8d0e2
jle 0x1004b44b
cmp eax, 0xb2f8d0e3
je 0x1004b4f5
cmp eax, 0xc2ef1d26
je 0x1004b4ff
cmp eax, 0xd6de8683
jne 0x1004b320
mov eax, dword [0x10070b90]
mov ecx, dword [0x10070b94]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x5828ee54
mov edi, 0x5828ee54
je 0x1004b698
jmp 0x1004b69d
cmp eax, 0x21b9c310
jg 0x1004b420
cmp eax, 0xfe45814
jle 0x1004b485
cmp eax, 0xfe45815
je 0x1004b567
cmp eax, 0x120d259b
je 0x1004b5c1
cmp eax, 0x18762f71
jne 0x1004b320
mov eax, 0xb2f8d0e3
xor ebp, ebp
jmp 0x1004b320
cmp eax, 0xefbb66e2
jle 0x1004b4b5
cmp eax, 0xefbb66e3
je 0x1004b5f5
cmp eax, 0xfd1784aa
je 0x1004b62d
cmp eax, 0xfd8b83d4
jne 0x1004b320
mov eax, 0xefbb66e3
mov ebp, dword [esp + 4]
jmp 0x1004b320
cmp eax, 0x4b73578b
jle 0x1004b4d5
cmp eax, 0x4b73578c
je 0x1004b637
cmp eax, 0x7afdf0a5
jne 0x1004b6c6
mov eax, 0xd94a7b88
jmp 0x1004b320
cmp eax, 0x82facbfe
je 0x1004b65e
cmp eax, 0x90d51533
jne 0x1004b320
mov eax, dword [0x10070b90]
lea edx, [eax + 1]
imul edx, eax
mov ebx, edx
xor ebx, 0xfffffffe
mov ecx, 0xefbb66e3
mov eax, 0xfd8b83d4
mov edi, 0xefbb66e3
jmp 0x1004b618
cmp eax, 0xfdc40619
je 0x1004b668
cmp eax, 0x152f7d1
jne 0x1004b320
lea eax, [esp + 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 4], eax
mov eax, 0x90d51533
jmp 0x1004b320
cmp eax, 0xd94a7b88
je 0x1004b6ae
cmp eax, 0xdae78091
jne 0x1004b320
mov eax, 0x7afdf0a5
jmp 0x1004b320
cmp eax, 0x21b9c311
je 0x1004b6bc
cmp eax, 0x2cd0e616
jne 0x1004b320
mov eax, 0xfe45815
jmp 0x1004b320
mov eax, 0xdae78091
jmp 0x1004b320
mov dword [esp + 0x20], 0x7864737d
mov dword [esp + 0x24], 0x24257a73
mov dword [esp + 0x28], 0x7a7a7238
mov byte [esp + 0x2c], 0
lea eax, [esp + 0x20]
mov dword [esp + 8], eax
mov eax, dword [0x10070b90]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov ecx, 0x2cd0e616
mov eax, 0x4b73578c
mov edi, 0x2cd0e616
cmp edx, 0xffffffff
sete dl
je 0x1004b550
mov edi, 0x4b73578c
cmp dword [0x10070b94], 0xa
cmovl eax, edi
setl dh
xor dl, dh
cmovne eax, ecx
jmp 0x1004b320
mov eax, dword [esp]
push dword [esp + 8]
call fcn.1004a030
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
mov byte [esp + 0x1c], 0
mov dword [esp + 0x18], 0x576f6477
mov dword [esp + 0x14], 0x64747f5a
mov dword [esp + 0x10], 0x7277795a
mov eax, dword [esp]
lea eax, [esp + 0x10]
push eax
call fcn.1004a030
mov eax, 0x18762f71
test esi, esi
je 0x1004b320
mov eax, 0x152f7d1
jmp 0x1004b320
mov eax, dword [0x10070b90]
lea edx, [eax + 1]
imul edx, eax
mov ebx, edx
xor ebx, 0xfffffffe
mov ecx, 0xc2ef1d26
mov eax, 0x4b73578c
mov edi, 0xc2ef1d26
test ebx, edx
sete dl
je 0x1004b30c
mov edi, 0x4b73578c
jmp 0x1004b30c
mov ebp, dword [esp + 4]
mov eax, dword [0x10070b90]
lea edx, [eax + 1]
imul edx, eax
mov ebx, edx
xor ebx, 0xfffffffe
mov ecx, 0x21b9c311
mov eax, 0xfd8b83d4
mov edi, 0x21b9c311
test ebx, edx
sete dl
je 0x1004b30c
mov edi, 0xfd8b83d4
jmp 0x1004b30c
mov eax, 0x7afdf0a5
jmp 0x1004b320
mov byte [esp + 0x2c], 0
mov dword [esp + 0x28], 0x7a7a7238
mov dword [esp + 0x24], 0x24257a73
mov dword [esp + 0x20], 0x7864737d
mov eax, 0xc2ef1d26
jmp 0x1004b320
mov eax, 0xd6de8683
jmp 0x1004b320
mov eax, dword [0x10070b90]
mov ecx, dword [0x10070b94]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xd6de8683
mov edi, 0xd6de8683
jne 0x1004b69d
mov edi, 0x82facbfe
cmp edx, 0xffffffff
cmovne eax, edi
cmp ecx, 0xa
cmovge eax, edi
jmp 0x1004b320
mov dword [esp + 0xc], ebp
mov eax, 0xfdc40619
jmp 0x1004b320
mov eax, 0xfd1784aa
jmp 0x1004b320
cmp eax, 0x5828ee54
jne 0x1004b320
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.1005429d
mov eax, esi
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret