Function at 0x498360
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c4
mov eax, dword [0x5c0290]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push 0x104
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov dword [ebp - 0x3b0], 0x31595247
mov dword [ebp - 0x3ac], 0x75385349
mov dword [ebp - 0x3a8], 0x6745424a
mov dword [ebp - 0x3a4], 0x7455534d
mov dword [ebp - 0x3a0], 0x75734344
mov dword [ebp - 0x39c], 0x38776844
mov dword [ebp - 0x398], 0x366c7764
mov dword [ebp - 0x394], 0x62494750
mov dword [ebp - 0x390], 0x34594248
mov dword [ebp - 0x38c], 0x4a516845
mov dword [ebp - 0x388], 0x37514149
mov dword [ebp - 0x384], 0x73526748
mov dword [ebp - 0x380], 0x57737a41
mov dword [ebp - 0x37c], 0x3351675a
mov dword [ebp - 0x378], 0x436b4347
mov dword [ebp - 0x374], 0x39736a45
mov dword [ebp - 0x370], 0x6c344362
mov dword [ebp - 0x36c], 0x6e77694d
mov dword [ebp - 0x368], 0x46455444
mov dword [ebp - 0x364], 0x37743344
mov dword [ebp - 0x360], 0x7738674c
mov dword [ebp - 0x35c], 0x6a6b4848
mov dword [ebp - 0x358], 0x7030524c
mov dword [ebp - 0x354], 0x79647949
mov dword [ebp - 0x350], 0x61776a49
mov dword [ebp - 0x34c], 0x7759474a
mov dword [ebp - 0x348], 0x5a387a49
mov dword [ebp - 0x344], 0x5177514b
mov dword [ebp - 0x340], 0x3345784b
mov dword [ebp - 0x33c], 0x74675448
mov dword [ebp - 0x338], 0x77777941
mov dword [ebp - 0x334], 0x48556e66
mov dword [ebp - 0x330], 0x41676a47
mov dword [ebp - 0x32c], 0x6f41774e
mov dword [ebp - 0x328], 0x3863514a
mov dword [ebp - 0x324], 0x68775266
mov dword [ebp - 0x320], 0x35704241
mov dword [ebp - 0x31c], 0x6659514e
mov dword [ebp - 0x318], 0x54673250
mov dword [ebp - 0x314], 0x36307a49
mov dword [ebp - 0x310], 0x634d414e
mov dword [ebp - 0x30c], 0x6b497741
mov dword [ebp - 0x308], 0x685a414b
mov dword [ebp - 0x304], 0x5a677941
mov dword [ebp - 0x300], 0x7a6b7847
mov dword [ebp - 0x2fc], 0x79704464
mov dword [ebp - 0x2f8], 0x3767514f
mov dword [ebp - 0x2f4], 0x64555159
mov dword [ebp - 0x2f0], 0x516f5247
mov dword [ebp - 0x2ec], 0x5338424e
mov dword [ebp - 0x2e8], 0x4d597763
mov dword [ebp - 0x2e4], 0x6e6b535a
mov dword [ebp - 0x2e0], 0x2f59674c
mov dword [ebp - 0x2dc], 0x6b384347
mov dword [ebp - 0x2d8], 0x54383359
mov dword [ebp - 0x2d4], 0x79316e63
mov dword [ebp - 0x2d0], 0x41515163
mov dword [ebp - 0x2cc], 0x7659434c
mov dword [ebp - 0x2c8], 0x43346965
mov dword [ebp - 0x2c4], 0x42775442
mov dword [ebp - 0x2c0], 0x6359444e
mov dword [ebp - 0x2bc], 0x506f6e4a
mov dword [ebp - 0x2b8], 0x6b41324c
mov dword [ebp - 0x2b4], 0x5a6b414b
mov dword [ebp - 0x2b0], 0x68634842
mov dword [ebp - 0x2ac], 0x6a674248
mov dword [ebp - 0x2a8], 0x56385245
mov dword [ebp - 0x2a4], 0x78595361
mov dword [ebp - 0x2a0], 0x3138574a
mov dword [ebp - 0x29c], 0x61497944
mov dword [ebp - 0x298], 0x6b494246
mov dword [ebp - 0x294], 0x3035424d
mov dword [ebp - 0x290], 0x56516d4d
mov dword [ebp - 0x28c], 0x2b516850
mov dword [ebp - 0x288], 0x346b7a47
sub esp, 0xc
mov dword [ebp - 0x284], 0x5534684a
mov ecx, esp
mov dword [ebp - 0x280], 0x6e305844
mov dword [ebp - 0x27c], 0x75496d45
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x278], 0x7270544c
mov dword [ebp - 0x274], 0x42497763
mov dword [ebp - 0x270], 0x32304141
mov dword [ebp - 0x26c], 0x4c346947
mov dword [ebp - 0x268], 0x5973434c
mov dword [ebp - 0x264], 0x4b45434a
mov dword [ebp - 0x260], 0x746b7959
mov dword [ebp - 0x25c], 0x7a6c4344
mov dword [ebp - 0x258], 0x72597963
mov dword [ebp - 0x254], 0x6a465450
mov dword [ebp - 0x250], 0x44307a47
mov dword [ebp - 0x24c], 0x70387944
mov dword [ebp - 0x248], 0x67523249
mov dword [ebp - 0x244], 0x62636849
mov dword [ebp - 0x240], 0x57307a50
mov dword [ebp - 0x23c], 0x54385247
mov dword [ebp - 0x238], 0x41305349
mov dword [ebp - 0x234], 0x68774261
mov dword [ebp - 0x230], 0x386c4149
mov dword [ebp - 0x22c], 0x66555261
mov dword [ebp - 0x228], 0x59734166
mov dword [ebp - 0x224], 0x446b424e
mov dword [ebp - 0x220], 0x65416841
mov dword [ebp - 0x21c], 0x3755694b
mov dword [ebp - 0x218], 0x66595346
mov dword [ebp - 0x214], 0x41635348
mov dword [ebp - 0x210], 0x72454141
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
push dword [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x3b0]
push eax
push 0
call fcn.004660a0
lea eax, [ebp - 0x3c4]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
sar eax, 1
je 0x498887
push ecx
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x3b4]
call fcn.004672d0
push eax
lea eax, [ebp - 0x3b8]
push eax
call fcn.004b8610
add esp, 0xc
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov edx, dword [ebp - 0x3b8]
test eax, eax
setne bl
add edx, 0xfffffff0
or esi, 0xffffffff
mov eax, esi
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x498845
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3b4]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x498862
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x3c4]
test ecx, ecx
je 0x498875
push ecx
call fcn.0053c1e0
add esp, 4
mov ecx, dword [ebp - 4]
mov al, bl
pop esi
xor ecx, ebp
pop ebx
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
push str.invalid_vector_T__subscript
call fcn.0053af06
int3