Function at 0x4828d0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Get file version info

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e4
mov eax, dword [0x5c0290]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov dword [ebp - 0xc], 0
push dword [ebp + 8]
mov dword [ebp - 0x1d8], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x483480
lea eax, [ebp - 0xc]
push eax
push dword [ebp + 8]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov edi, eax
test edi, edi
je 0x483480
push edi
call fcn.0053ac46
add esp, 4
mov esi, eax
push esi
push edi
push dword [ebp - 0xc]
push dword [ebp + 8]
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x483467
lea eax, [ebp - 8]
mov dword [ebp - 0xd0], 0x67595147
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0xcc], 0x76515349
push eax
sub esp, 0xc
mov dword [ebp - 0xc8], 0x6c55524c
mov ecx, esp
mov dword [ebp - 0xc4], 0x504d4350
mov dword [ebp - 0xc0], 0x6d6b4349
lea eax, [ebp - 0x12]
mov dword [ebp - 0xbc], 0x78745847
mov dword [ebp - 0xb8], 0x38785863
mov dword [ebp - 0xb4], 0x6d525462
mov dword [ebp - 0xb0], 0x676b4146
mov dword [ebp - 0xac], 0x336b534c
mov dword [ebp - 0xa8], 0x4345694a
mov dword [ebp - 0xa4], 0x79386a4e
mov dword [ebp - 0xa0], 0x69777a49
mov dword [ebp - 0x9c], 0x4951584f
mov dword [ebp - 0x98], 0x37704449
mov dword [ebp - 0x94], 0x786b484e
mov dword [ebp - 0x90], 0x38564442
mov dword [ebp - 0x8c], 0x6c6b7762
mov dword [ebp - 0x88], 0x6b464747
mov dword [ebp - 0x84], 0x4f516e64
mov dword [ebp - 0x80], 0x366f7763
mov dword [ebp - 0x7c], 0x5634445a
mov dword [ebp - 0x78], 0x41677a50
mov dword [ebp - 0x74], 0x44634242
mov dword [ebp - 0x70], 0x5441774c
mov dword [ebp - 0x6c], 0x54306e41
mov dword [ebp - 0x68], 0x46414143
mov dword [ebp - 0x64], 0x544d794d
mov dword [ebp - 0x60], 0x464d6842
mov dword [ebp - 0x5c], 0x64347843
mov dword [ebp - 0x58], 0x4445474b
mov dword [ebp - 0x54], 0x37515445
mov dword [ebp - 0x50], 0x43457a47
mov dword [ebp - 0x4c], 0x49514348
mov dword [ebp - 0x48], 0x72637946
mov dword [ebp - 0x44], 0x56496942
mov dword [ebp - 0x40], 0x4251684a
mov dword [ebp - 0x3c], 0x4849524b
mov dword [ebp - 0x38], 0x6e704365
mov dword [ebp - 0x34], 0x5845414a
mov dword [ebp - 0x30], 0x64597944
mov dword [ebp - 0x2c], 0x46417942
mov dword [ebp - 0x28], 0x38636766
mov dword [ebp - 0x24], 0x42777a5a
mov dword [ebp - 0x20], 0x394a674b
mov dword [ebp - 0x1c], 0x6451674c
mov dword [ebp - 0x18], 0x41414141
mov word [ebp - 0x14], 0x7759
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
push dword [ebp - 0xc]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0
call fcn.004660a0
lea eax, [ebp - 0x1e4]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
sar eax, 1
je 0x4834ae
push ecx
push esi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x482b31
cmp dword [ebp - 8], 0
je 0x482b31
mov bl, 1
jmp 0x482b33
xor bl, bl
lea ecx, [ebp - 0x1e4]
call fcn.00467b80
test bl, bl
je 0x482b58
push dword [ebp - 8]
mov ecx, dword [ebp - 0x1d8]
push dword [ebp - 0x10]
call fcn.00469090
jmp 0x483467
mov dword [ebp - 0x1d0], 0x67595147
mov dword [ebp - 0x1cc], 0x76515349
mov dword [ebp - 0x1c8], 0x6c55524c
mov dword [ebp - 0x1c4], 0x504d4350
mov dword [ebp - 0x1c0], 0x6d6b4349
mov dword [ebp - 0x1bc], 0x31745847
mov dword [ebp - 0x1b8], 0x38565863
mov dword [ebp - 0x1b4], 0x30595761
mov dword [ebp - 0x1b0], 0x676b4146
mov dword [ebp - 0x1ac], 0x336b534c
mov dword [ebp - 0x1a8], 0x4345694a
mov dword [ebp - 0x1a4], 0x79386a4e
mov dword [ebp - 0x1a0], 0x69777a49
mov dword [ebp - 0x19c], 0x33516959
mov dword [ebp - 0x198], 0x5930584a
mov dword [ebp - 0x194], 0x794a444c
mov dword [ebp - 0x190], 0x59347746
mov dword [ebp - 0x18c], 0x5573684b
mov dword [ebp - 0x188], 0x424d6842
mov dword [ebp - 0x184], 0x476b5141
mov dword [ebp - 0x180], 0x35594244
mov dword [ebp - 0x17c], 0x70414142
mov dword [ebp - 0x178], 0x5a414448
mov dword [ebp - 0x174], 0x776c4350
mov dword [ebp - 0x170], 0x38317965
mov dword [ebp - 0x16c], 0x706b5350
mov dword [ebp - 0x168], 0x4a346743
mov dword [ebp - 0x164], 0x474d5350
mov dword [ebp - 0x160], 0x33677766
mov dword [ebp - 0x15c], 0x46307a47
mov dword [ebp - 0x158], 0x59634148
mov dword [ebp - 0x154], 0x4a556a45
mov dword [ebp - 0x150], 0x39425241
mov dword [ebp - 0x14c], 0x6c554859
mov dword [ebp - 0x148], 0x3573784b
mov dword [ebp - 0x144], 0x6e777746
mov dword [ebp - 0x140], 0x546f414e
mov dword [ebp - 0x13c], 0x46414461
mov dword [ebp - 0x138], 0x6952524f
mov dword [ebp - 0x134], 0x4938524b
mov dword [ebp - 0x130], 0x646f6a41
mov dword [ebp - 0x12c], 0x33494350
mov dword [ebp - 0x128], 0x6351474f
mov dword [ebp - 0x124], 0x7a784450
mov dword [ebp - 0x120], 0x34644166
mov dword [ebp - 0x11c], 0x77637745
mov dword [ebp - 0x118], 0x5a637a4f
mov dword [ebp - 0x114], 0x7a34784e
mov dword [ebp - 0x110], 0x68347741
mov dword [ebp - 0x10c], 0x556f7841
mov dword [ebp - 0x108], 0x34774148
mov dword [ebp - 0x104], 0x4863515a
mov dword [ebp - 0x100], 0x384a5342
mov dword [ebp - 0xfc], 0x63346e47
mov dword [ebp - 0xf8], 0x7a777a65
mov dword [ebp - 0xf4], 0x71383343
mov dword [ebp - 0xf0], 0x30746745
mov dword [ebp - 0xec], 0x45775444
mov dword [ebp - 0xe8], 0x2f467a46
mov dword [ebp - 0xe4], 0x62516e45
mov dword [ebp - 0xe0], 0x7a4d4242
mov dword [ebp - 0xdc], 0x45637a46
mov dword [ebp - 0xd8], 0x71734448
mov dword [ebp - 0xd4], 0x2f527949
mov dword [ebp - 0xd0], 0x2b67444b
mov dword [ebp - 0xcc], 0x546b4149
mov dword [ebp - 0xc8], 0x37396948
mov dword [ebp - 0xc4], 0x6b52424e
mov dword [ebp - 0xc0], 0x306f525a
mov dword [ebp - 0xbc], 0x4a774363
mov dword [ebp - 0xb8], 0x6c55774a
mov dword [ebp - 0xb4], 0x4973535a
mov dword [ebp - 0xb0], 0x46455747
mov dword [ebp - 0xac], 0x77515246
mov dword [ebp - 0xa8], 0x62776866
mov dword [ebp - 0xa4], 0x334d4461
mov dword [ebp - 0xa0], 0x2b4a6946
mov dword [ebp - 0x9c], 0x4d637a4c
mov dword [ebp - 0x98], 0x43636a43
mov dword [ebp - 0x94], 0x706f6843
mov dword [ebp - 0x90], 0x35414443
lea eax, [ebp - 8]
mov dword [ebp - 0x8c], 0x5245534b
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x88], 0x4a594765
push eax
push 0
sub esp, 0xc
mov dword [ebp - 0x84], 0x75677945
mov ecx, esp
mov dword [ebp - 0x80], 0x46677849
mov dword [ebp - 0x7c], 0x63555143
lea eax, [ebp - 0x11]
mov dword [ebp - 0x78], 0x35597864
mov dword [ebp - 0x74], 0x75355348
mov dword [ebp - 0x70], 0x4245474a
mov dword [ebp - 0x6c], 0x3339784b
mov dword [ebp - 0x68], 0x36777846
mov dword [ebp - 0x64], 0x7a4d694e
mov dword [ebp - 0x60], 0x6a497765
mov dword [ebp - 0x5c], 0x66416e45
mov dword [ebp - 0x58], 0x764d514a
mov dword [ebp - 0x54], 0x64345448
mov dword [ebp - 0x50], 0x63674763
mov dword [ebp - 0x4c], 0x454d3243
mov dword [ebp - 0x48], 0x49414166
mov dword [ebp - 0x44], 0x7a594147
mov dword [ebp - 0x40], 0x78345263
mov dword [ebp - 0x3c], 0x50556850
mov dword [ebp - 0x38], 0x32517a63
mov dword [ebp - 0x34], 0x6e456a4b
mov dword [ebp - 0x30], 0x37306864
mov dword [ebp - 0x2c], 0x686f484d
mov dword [ebp - 0x28], 0x61416963
mov dword [ebp - 0x24], 0x7845524e
mov dword [ebp - 0x20], 0x5167534b
mov dword [ebp - 0x1c], 0x41635344
mov dword [ebp - 0x18], 0x41416763
mov word [ebp - 0x14], 0x5341
mov byte [ebp - 0x12], 0x51
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
push dword [ebp - 0xc]
push eax
lea eax, [ebp - 0x1d0]
push eax
push 0
call fcn.004660a0
lea eax, [ebp - 0x1e4]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, eax
call fcn.0046bf80
push eax
push esi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x482fca
cmp dword [ebp - 8], 0
je 0x482fca
mov bl, 1
jmp 0x482fcc
xor bl, bl
lea ecx, [ebp - 0x1e4]
call fcn.00467b80
test bl, bl
je 0x482ff1
push dword [ebp - 8]
mov ecx, dword [ebp - 0x1d8]
push dword [ebp - 0x10]
call fcn.00469090
jmp 0x483467
lea eax, [ebp - 8]
mov dword [ebp - 0x70], 0x6a4d5347
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x6c], 0x45346843
push eax
push 0
sub esp, 0xc
mov dword [ebp - 0x68], 0x4455674c
mov ecx, esp
mov dword [ebp - 0x64], 0x756b7747
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x60], 0x2f357a4b
lea edx, [ebp - 0x11]
mov dword [ebp - 0x5c], 0x66495150
push eax
push edx
lea edi, [ebp - 0x70]
mov dword [ebp - 0x58], 0x674d7949
push edi
mov dword [ebp - 0x54], 0x7a594144
mov dword [ebp - 0x50], 0x2f4a4466
mov dword [ebp - 0x4c], 0x33674443
mov dword [ebp - 0x48], 0x386f414e
mov dword [ebp - 0x44], 0x58674244
mov dword [ebp - 0x40], 0x75634445
mov dword [ebp - 0x3c], 0x32744743
mov dword [ebp - 0x38], 0x6d635148
mov dword [ebp - 0x34], 0x4b347a44
mov dword [ebp - 0x30], 0x30386845
mov dword [ebp - 0x2c], 0x7a516748
mov dword [ebp - 0x28], 0x34674250
mov dword [ebp - 0x24], 0x6d4d4146
mov dword [ebp - 0x20], 0x6838684a
mov dword [ebp - 0x1c], 0x4e776966
mov dword [ebp - 0x18], 0x41416763
mov word [ebp - 0x14], 0x4541
mov byte [ebp - 0x12], 0x49
call fcn.004676d0
lea eax, [ebp - 0x1e4]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, eax
call fcn.0046bf80
push eax
push esi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x4830ea
cmp dword [ebp - 8], 0
je 0x4830ea
mov bl, 1
jmp 0x4830ec
xor bl, bl
lea ecx, [ebp - 0x1e4]
call fcn.00467b80
test bl, bl
je 0x483467
mov ecx, dword [ebp - 0x10]
cmp dword [ecx], 0xfeef04bd
jne 0x483467
mov dword [ebp - 0x164], 0x36464459
mov dword [ebp - 0x160], 0x766c6964
mov dword [ebp - 0x15c], 0x69647a62
mov dword [ebp - 0x158], 0x7a495364
mov dword [ebp - 0x154], 0x6a346a47
mov dword [ebp - 0x150], 0x61554163
mov dword [ebp - 0x14c], 0x6c633344
mov dword [ebp - 0x148], 0x66637a4f
mov dword [ebp - 0x144], 0x5745444a
mov dword [ebp - 0x140], 0x6459774d
mov dword [ebp - 0x13c], 0x6c513244
mov dword [ebp - 0x138], 0x71386849
mov dword [ebp - 0x134], 0x31465748
mov dword [ebp - 0x130], 0x706f675a
mov dword [ebp - 0x12c], 0x39773347
mov dword [ebp - 0x128], 0x4d774348
mov dword [ebp - 0x124], 0x316f674a
mov dword [ebp - 0x120], 0x6c517743
mov dword [ebp - 0x11c], 0x2f38474a
mov dword [ebp - 0x118], 0x7a39584e
mov dword [ebp - 0x114], 0x67416963
mov dword [ebp - 0x110], 0x70345341
mov dword [ebp - 0x10c], 0x6b676a48
mov dword [ebp - 0x108], 0x45594842
mov dword [ebp - 0x104], 0x6830334e
mov dword [ebp - 0x100], 0x4338414a
mov dword [ebp - 0xfc], 0x71676d44
mov dword [ebp - 0xf8], 0x3330684f
mov dword [ebp - 0xf4], 0x51496a43
mov dword [ebp - 0xf0], 0x33773345
mov dword [ebp - 0xec], 0x484d794d
mov dword [ebp - 0xe8], 0x7a564150
mov dword [ebp - 0xe4], 0x56634142
mov dword [ebp - 0xe0], 0x6b736945
mov dword [ebp - 0xdc], 0x57304247
mov dword [ebp - 0xd8], 0x5034524b
mov dword [ebp - 0xd4], 0x32517743
mov dword [ebp - 0xd0], 0x64515448
mov dword [ebp - 0xcc], 0x6134684b
mov dword [ebp - 0xc8], 0x6c345344
mov dword [ebp - 0xc4], 0x36454146
mov dword [ebp - 0xc0], 0x5a303342
mov dword [ebp - 0xbc], 0x6a51794f
mov dword [ebp - 0xb8], 0x7246434e
mov dword [ebp - 0xb4], 0x76307759
mov dword [ebp - 0xb0], 0x7a77784e
mov dword [ebp - 0xac], 0x6567414a
mov dword [ebp - 0xa8], 0x7577434c
mov dword [ebp - 0xa4], 0x66344149
mov dword [ebp - 0xa0], 0x74637a41
mov dword [ebp - 0x9c], 0x684e6a4d
mov dword [ebp - 0x98], 0x7a645241
mov dword [ebp - 0x94], 0x62494147
mov dword [ebp - 0x90], 0x2b346e4d
mov dword [ebp - 0x8c], 0x726f434f
mov dword [ebp - 0x88], 0x6951534b
mov dword [ebp - 0x84], 0x42777944
mov dword [ebp - 0x80], 0x47417941
mov dword [ebp - 0x7c], 0x7230514b
mov dword [ebp - 0x78], 0x7a6c6745
mov dword [ebp - 0x74], 0x6c496a46
mov dword [ebp - 0x70], 0x316b4847
mov dword [ebp - 0x6c], 0x56457842
mov dword [ebp - 0x68], 0x32566748
mov dword [ebp - 0x64], 0x6f55444a
mov dword [ebp - 0x60], 0x30456a49
mov dword [ebp - 0x5c], 0x31395346
mov dword [ebp - 0x58], 0x44774350
mov dword [ebp - 0x54], 0x64453248
mov dword [ebp - 0x50], 0x41516e47
mov dword [ebp - 0x4c], 0x394d474e
mov dword [ebp - 0x48], 0x3545774b
mov dword [ebp - 0x44], 0x35527965
mov dword [ebp - 0x40], 0x384d6a47
mov dword [ebp - 0x3c], 0x76496d65
mov dword [ebp - 0x38], 0x3859574e
mov dword [ebp - 0x34], 0x444d3341
mov dword [ebp - 0x30], 0x79677a49
mov dword [ebp - 0x2c], 0x71397846
mov dword [ebp - 0x28], 0x72306e4f
mov dword [ebp - 0x24], 0x3767484c
movzx eax, word [ecx + 0xc]
lea edx, [ebp - 0x14]
push eax
movzx eax, word [ecx + 0xe]
lea edi, [ebp - 0x164]
push eax
movzx eax, word [ecx + 8]
push eax
movzx eax, word [ecx + 0xa]
push eax
push 0
sub esp, 0xc
mov dword [ebp - 0x20], 0x73676842
mov ecx, esp
mov dword [ebp - 0x1c], 0x41597965
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x18], 0x74444141
push eax
push edx
push edi
call fcn.004676d0
lea eax, [ebp - 0x1e4]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, eax
call fcn.0046bf80
push eax
push dword [ebp - 0x1d8]
call fcn.004be710
add esp, 0x18
lea ecx, [ebp - 0x1e4]
call fcn.00467b80
cmp dword [ebp - 0xc], 0
je 0x483477
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call fcn.0053c676
add esp, 4
mov edx, dword [ebp + 8]
or ecx, 0xffffffff
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48349d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
push str.invalid_vector_T__subscript
call fcn.0053af06
int3