Function at 0x430480
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f0de1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xdc
push esi
mov dword [ebp - 0x10], ecx
mov ecx, 0x524a5a
call fcn.004c6bbd
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x770]
add ecx, 0xc
call fcn.0040b7d0
movzx ecx, al
test ecx, ecx
jne 0x43058c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x770]
add eax, 0xc
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x774
call fcn.00407eb0
push ecx
mov ecx, esp
mov dword [ebp - 0x88], esp
mov edx, dword [ebp - 0x10]
add edx, 0x774
push edx
call fcn.00406000
lea eax, [ebp - 0xe8]
push eax
call fcn.0040d2e0
add esp, 8
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0
push 0
lea ecx, [ebp - 0xe8]
call fcn.004309f0
mov cl, byte [eax]
movzx edx, cl
push edx
call fcn.0040f340
add esp, 4
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x780], eax
mov dword [ecx + 0x784], edx
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x7a8], 0
je 0x430575
mov ecx, dword [ebp - 0x10]
add ecx, 0x774
call fcn.004084d0
push eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x7a8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a8]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.00402610
jmp 0x43098e
mov byte [ebp - 0x28], 0x47
mov byte [ebp - 0x27], 0x65
mov byte [ebp - 0x26], 0x6d
mov byte [ebp - 0x25], 0x69
mov byte [ebp - 0x24], 0x6e
mov byte [ebp - 0x23], 0x69
mov byte [ebp - 0x22], 0x42
mov byte [ebp - 0x21], 0x72
mov byte [ebp - 0x20], 0x6f
mov byte [ebp - 0x1f], 0x77
mov byte [ebp - 0x1e], 0x73
mov byte [ebp - 0x1d], 0x65
mov byte [ebp - 0x1c], 0x72
mov byte [ebp - 0x1b], 0
push ecx
mov esi, esp
mov dword [ebp - 0x90], esp
lea ecx, [ebp - 0x39]
call fcn.004063b0
push eax
lea eax, [ebp - 0x1a]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0xc0]
call fcn.00406b20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xa0]
call fcn.00406c60
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x74], ecx
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x74]
call fcn.00415e30
push eax
mov ecx, esi
call fcn.00406060
lea edx, [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x10]
call fcn.0042e050
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa0]
call fcn.00407900
lea ecx, [ebp - 0x14]
call fcn.0040b7d0
movzx eax, al
test eax, eax
jne 0x430721
lea ecx, [ebp - 0x14]
call fcn.004084d0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x430721
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x10]
add ecx, 0x774
call fcn.00407eb0
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x794], 0
jl 0x4306bb
jg 0x43069b
mov ecx, dword [ebp - 0x40]
cmp dword [ecx + 0x790], 0x164da440
jbe 0x4306bb
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x790]
mov eax, dword [eax + 0x794]
mov dword [edx + 0x780], ecx
mov dword [edx + 0x784], eax
jmp 0x4306d9
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x788]
mov edx, dword [edx + 0x78c]
mov dword [ecx + 0x780], eax
mov dword [ecx + 0x784], edx
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x7a8], 0
je 0x43070d
mov ecx, dword [ebp - 0x10]
add ecx, 0x774
call fcn.004084d0
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0x10]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00407640
jmp 0x43098e
lea ecx, [ebp - 0x18]
push ecx
call fcn.0040f4f0
add esp, 4
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x44]
cmp dword [eax + 0x794], 0
jl 0x430876
jg 0x43075c
mov ecx, dword [ebp - 0x44]
cmp dword [ecx + 0x790], 0x164da440
jbe 0x430876
mov edx, 0x44
mov word [ebp - 0x6c], dx
mov eax, 0x3a
mov word [ebp - 0x6a], ax
mov ecx, 0x5c
mov word [ebp - 0x68], cx
mov edx, 0x50
mov word [ebp - 0x66], dx
mov eax, 0x72
mov word [ebp - 0x64], ax
mov ecx, 0x6f
mov word [ebp - 0x62], cx
mov edx, 0x67
mov word [ebp - 0x60], dx
mov eax, 0x72
mov word [ebp - 0x5e], ax
mov ecx, 0x61
mov word [ebp - 0x5c], cx
mov edx, 0x6d
mov word [ebp - 0x5a], dx
mov eax, 0x20
mov word [ebp - 0x58], ax
mov ecx, 0x46
mov word [ebp - 0x56], cx
mov edx, 0x69
mov word [ebp - 0x54], dx
mov eax, 0x6c
mov word [ebp - 0x52], ax
mov ecx, 0x65
mov word [ebp - 0x50], cx
mov edx, 0x73
mov word [ebp - 0x4e], dx
mov eax, 0x5c
mov word [ebp - 0x4c], ax
xor ecx, ecx
mov word [ebp - 0x4a], cx
lea ecx, [ebp - 0x3a]
call fcn.004063b0
push eax
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0xc8]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0xac]
call fcn.00406d10
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x7c]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x18]
call fcn.00407f70
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xac]
call fcn.00407960
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x790]
mov edx, dword [edx + 0x794]
mov dword [ecx + 0x780], eax
mov dword [ecx + 0x784], edx
jmp 0x430894
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x788]
mov ecx, dword [ecx + 0x78c]
mov dword [eax + 0x780], edx
mov dword [eax + 0x784], ecx
mov byte [ebp - 0x38], 0x47
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x36], 0x6d
mov byte [ebp - 0x35], 0x69
mov byte [ebp - 0x34], 0x6e
mov byte [ebp - 0x33], 0x69
mov byte [ebp - 0x32], 0x42
mov byte [ebp - 0x31], 0x72
mov byte [ebp - 0x30], 0x6f
mov byte [ebp - 0x2f], 0x77
mov byte [ebp - 0x2e], 0x73
mov byte [ebp - 0x2d], 0x65
mov byte [ebp - 0x2c], 0x72
mov byte [ebp - 0x2b], 0
lea ecx, [ebp - 0x3b]
call fcn.004063b0
push eax
lea edx, [ebp - 0x2a]
push edx
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0xb8]
call fcn.00406c60
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x84], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x84]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x18]
call fcn.004089f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb8]
call fcn.00407900
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x10]
add ecx, 0x774
call fcn.00407eb0
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x7a8], 0
je 0x430973
mov ecx, dword [ebp - 0x10]
add ecx, 0x774
call fcn.004084d0
push eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x7a8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a8]
mov edx, dword [eax + 0x2c]
call edx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00407640
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00407640
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret