Function at 0x10051a40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x38
mov dword [esp + 0xc], ecx
mov eax, dword [0x10070264]
xor eax, esp
mov dword [esp + 0x34], eax
mov ebp, 0x933f5775
lea ebx, [esp + 0x24]
lea edi, [esp + 0x18]
jmp 0x10051a80
cmp dword [0x10070c24], 0xa
cmovl ebp, edx
setl dl
xor dl, cl
cmovne ebp, eax
nop word [eax + eax]
cmp ebp, 0x94b9602
jle 0x10051ad0
cmp ebp, 0x4359f522
jg 0x10051b30
cmp ebp, 0x1842563b
jle 0x10051bea
cmp ebp, 0x1842563c
je 0x10051cf3
cmp ebp, 0x236812a0
je 0x10051cfd
cmp ebp, 0x2968f03f
jne 0x10051a80
mov ebp, 0x9d596d2e
jmp 0x10051a80
cmp ebp, 0xc185c4dc
jle 0x10051bb0
cmp ebp, 0x770445
jle 0x10051c37
cmp ebp, 0x770446
je 0x10051d4b
cmp ebp, 0x1cf675c
je 0x10051d55
cmp ebp, 0x8376a5c
jne 0x10051a80
cmp byte [esp + 3], 0
mov ebp, 0x2968f03f
jne 0x10051a80
mov ebp, 0x94b9603
jmp 0x10051a80
cmp ebp, 0x595759be
jle 0x10051c59
cmp ebp, 0x595759bf
je 0x10051d5f
cmp ebp, 0x632259ee
je 0x10051d69
cmp ebp, 0x6959d231
jne 0x10051a80
mov edx, dword [0x10070c20]
mov eax, dword [0x10070c24]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov ebp, 0xbc8469c
mov edx, 0xbc8469c
jne 0x10051b95
mov edx, 0x770446
cmp ecx, 0xffffffff
cmovne ebp, edx
cmp eax, 0xa
cmovge ebp, edx
jmp 0x10051a80
cmp ebp, 0xa275ca01
jg 0x10051ca6
cmp ebp, 0x933f5775
je 0x10051dbd
cmp ebp, 0x9d596d2e
jne 0x10051e9c
mov ebp, 0xff800849
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 8], eax
jmp 0x10051a80
cmp ebp, 0x94b9603
je 0x10051df6
cmp ebp, 0xbc8469c
jne 0x10051a80
mov eax, dword [0x10070c20]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
mov eax, 0x595759bf
mov ebp, 0x770446
mov edx, 0x595759bf
cmp ecx, 0xffffffff
sete cl
je 0x10051a65
mov edx, 0x770446
jmp 0x10051a65
cmp ebp, 0xc185c4dd
je 0x10051e08
cmp ebp, 0xff800849
jne 0x10051a80
mov ebp, 0x6959d231
jmp 0x10051a80
cmp ebp, 0x4359f523
je 0x10051e12
cmp ebp, 0x4a2af4a5
jne 0x10051a80
mov eax, dword [0x10070c20]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
mov eax, 0xc185c4dd
mov ebp, 0x1cf675c
mov edx, 0xc185c4dd
cmp ecx, 0xffffffff
sete cl
je 0x10051a65
mov edx, 0x1cf675c
jmp 0x10051a65
cmp ebp, 0xa275ca02
je 0x10051e24
cmp ebp, 0xa35d1896
jne 0x10051a80
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
mov dword [esp + 0x20], 0x41737a
mov dword [esp + 0x1c], 0x7f507362
mov dword [esp + 0x18], 0x77736455
mov eax, dword [esp + 4]
push edi
call fcn.1004a030
mov ebp, 0xa275ca02
jmp 0x10051a80
mov ebp, 0x6959d231
jmp 0x10051a80
mov edi, ebx
mov ebx, esi
mov eax, dword [0x10070c20]
lea ecx, [eax + 1]
imul ecx, eax
mov esi, ecx
xor esi, 0xfffffffe
mov eax, 0xa275ca02
mov ebp, 0xa35d1896
mov edx, 0xa275ca02
test esi, ecx
sete cl
je 0x10051d2c
mov edx, 0xa35d1896
cmp dword [0x10070c24], 0xa
cmovl ebp, edx
setl dl
xor cl, dl
cmovne ebp, eax
mov esi, ebx
mov ebx, edi
lea edi, [esp + 0x18]
jmp 0x10051a80
mov ebp, 0xbc8469c
jmp 0x10051a80
mov ebp, 0x4a2af4a5
jmp 0x10051a80
mov ebp, 0x4359f523
jmp 0x10051a80
mov dword [esp + 0x10], esi
mov edi, ebx
mov edx, dword [0x10070c20]
mov eax, dword [0x10070c24]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebp, 0x4a2af4a5
mov esi, 0x4a2af4a5
jne 0x10051da3
mov esi, 0x1cf675c
test edx, ecx
cmovne ebp, esi
cmp eax, 0xa
cmovge ebp, esi
mov ebx, edi
lea edi, [esp + 0x18]
mov esi, dword [esp + 0x10]
jmp 0x10051a80
mov eax, dword [esp + 0xc]
mov dword [esp + 4], eax
mov byte [esp + 0x30], 0
mov dword [esp + 0x2c], 0x7a7a7238
mov dword [esp + 0x28], 0x24257a73
mov dword [esp + 0x24], 0x7864737d
mov eax, dword [esp + 4]
push ebx
call fcn.1004a030
mov ebp, 0x236812a0
jmp 0x10051a80
mov ebp, 0x632259ee
mov dword [esp + 8], 0
jmp 0x10051a80
mov ebp, 0x1842563c
jmp 0x10051a80
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov ebp, 0x95203b9b
jmp 0x10051a80
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
mov dword [esp + 0x20], 0x41737a
mov dword [esp + 0x1c], 0x7f507362
mov dword [esp + 0x18], 0x77736455
mov eax, dword [esp + 4]
push edi
call fcn.1004a030
mov edx, dword [0x10070c20]
mov eax, dword [0x10070c24]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov ebp, 0x8376a5c
mov edx, 0x8376a5c
jne 0x10051e84
mov edx, 0xa35d1896
cmp ecx, 0xffffffff
cmovne ebp, edx
cmp eax, 0xa
cmovge ebp, edx
test esi, esi
setne byte [esp + 3]
jmp 0x10051a80
cmp ebp, 0x95203b9b
jne 0x10051a80
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.1005429d
mov eax, esi
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret