Function at 0x10813508
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Get file version info

Disassembly:
push 0x240
mov eax, 0x1084bd08
call fcn.1081e8e7
mov ebx, dword [ebp + 0xc]
and dword [ebp - 0x240], 0
push dword [ebp + 8]
and dword [ebp - 4], 0
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x108140fd
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov esi, eax
test esi, esi
je 0x108140fd
push esi
call fcn.1081e304
pop ecx
mov edi, eax
push edi
push esi
push dword [ebp - 0x18]
push dword [ebp + 8]
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x108140e6
mov dword [ebp - 0x1a0], 0x6b555246
mov dword [ebp - 0x19c], 0x3330434b
mov dword [ebp - 0x198], 0x714d7850
mov dword [ebp - 0x194], 0x626f534f
mov dword [ebp - 0x190], 0x3834444b
mov dword [ebp - 0x18c], 0x7a646e45
mov dword [ebp - 0x188], 0x36745865
mov dword [ebp - 0x184], 0x39746965
mov dword [ebp - 0x180], 0x37634144
mov dword [ebp - 0x17c], 0x736f694e
mov dword [ebp - 0x178], 0x47496a4b
mov dword [ebp - 0x174], 0x71597a50
mov dword [ebp - 0x170], 0x746f544d
mov dword [ebp - 0x16c], 0x58734849
mov dword [ebp - 0x168], 0x466b784d
mov dword [ebp - 0x164], 0x71466749
mov dword [ebp - 0x160], 0x4a67544c
mov dword [ebp - 0x15c], 0x764d6866
mov dword [ebp - 0x158], 0x51416959
mov dword [ebp - 0x154], 0x716c4862
mov dword [ebp - 0x150], 0x6649774f
mov dword [ebp - 0x14c], 0x38347945
mov dword [ebp - 0x148], 0x7a516a4c
mov dword [ebp - 0x144], 0x3273674a
mov dword [ebp - 0x140], 0x6d747761
mov dword [ebp - 0x13c], 0x65735144
mov dword [ebp - 0x138], 0x4f677847
mov dword [ebp - 0x134], 0x36305350
mov dword [ebp - 0x130], 0x2f52534d
mov dword [ebp - 0x12c], 0x364d4141
mov dword [ebp - 0x128], 0x47775341
mov dword [ebp - 0x124], 0x58556e59
mov dword [ebp - 0x120], 0x62307a4d
mov dword [ebp - 0x11c], 0x4759794d
mov dword [ebp - 0x118], 0x706f7744
mov dword [ebp - 0x114], 0x33426a64
mov dword [ebp - 0x110], 0x61677947
mov dword [ebp - 0x10c], 0x5949434e
mov dword [ebp - 0x108], 0x75675246
mov dword [ebp - 0x104], 0x65384443
mov dword [ebp - 0x100], 0x56345250
mov dword [ebp - 0xfc], 0x7077794c
mov dword [ebp - 0xf8], 0x4c417861
mov dword [ebp - 0xf4], 0x49454159
mov dword [ebp - 0xf0], 0x526f444e
mov dword [ebp - 0xec], 0x684d5465
mov dword [ebp - 0xe8], 0x51514845
mov dword [ebp - 0xe4], 0x3668774f
mov dword [ebp - 0xe0], 0x2b786a50
mov dword [ebp - 0xdc], 0x5530794b
mov dword [ebp - 0xd8], 0x6b4a4349
mov dword [ebp - 0xd4], 0x68746844
mov dword [ebp - 0xd0], 0x75397a50
mov dword [ebp - 0xcc], 0x3534544c
mov dword [ebp - 0xc8], 0x586b694b
mov dword [ebp - 0xc4], 0x4c514849
mov dword [ebp - 0xc0], 0x66415149
mov dword [ebp - 0xbc], 0x3349774c
mov dword [ebp - 0xb8], 0x52556a4b
mov dword [ebp - 0xb4], 0x58634143
mov dword [ebp - 0xb0], 0x685a5442
mov dword [ebp - 0xac], 0x666b3250
mov dword [ebp - 0xa8], 0x624d6846
mov dword [ebp - 0xa4], 0x72707a49
mov dword [ebp - 0xa0], 0x6a356d66
mov dword [ebp - 0x9c], 0x31306841
mov dword [ebp - 0x98], 0x6a737a45
mov dword [ebp - 0x94], 0x4c774446
mov dword [ebp - 0x90], 0x414d5249
mov dword [ebp - 0x8c], 0x58304850
mov dword [ebp - 0x88], 0x68396e65
mov dword [ebp - 0x84], 0x68777846
mov dword [ebp - 0x80], 0x68674446
mov dword [ebp - 0x7c], 0x306f6a59
mov dword [ebp - 0x78], 0x556b7849
mov dword [ebp - 0x74], 0x32556849
mov dword [ebp - 0x70], 0x644d434d
mov dword [ebp - 0x6c], 0x31634144
mov dword [ebp - 0x68], 0x77514341
mov dword [ebp - 0x64], 0x6a77524e
mov dword [ebp - 0x60], 0x4449424b
lea eax, [ebp - 0x14]
mov dword [ebp - 0x5c], 0x70465446
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x58], 0x4e495362
push eax
xor eax, eax
mov dword [ebp - 0x54], 0x5463775a
push eax
sub esp, 0xc
mov dword [ebp - 0x50], 0x7167434c
mov ecx, esp
mov dword [ebp - 0x4c], 0x77426e66
mov dword [ebp - 0x48], 0x75346941
mov dword [ebp - 0x44], 0x4c384249
push dword [ebp - 0x24]
mov dword [ebp - 0x40], 0x51456d50
mov dword [ebp - 0x3c], 0x596b514c
mov dword [ebp - 0x38], 0x46513342
mov dword [ebp - 0x34], 0x7378684b
mov dword [ebp - 0x30], 0x41595447
mov dword [ebp - 0x2c], 0x76444141
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.1080f5af
lea eax, [ebp - 0x24c]
push eax
call fcn.1081269c
add esp, 0x10
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov byte [ebp - 4], cl
mov dword [ebp - 0x240], ecx
mov ecx, eax
call fcn.1081bfbf
push eax
push edi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x10813939
cmp dword [ebp - 0x14], 0
mov byte [ebp - 0x1d], 1
jne 0x1081393d
mov byte [ebp - 0x1d], 0
and dword [ebp - 4], 0
lea ecx, [ebp - 0x24c]
call fcn.1081be41
cmp byte [ebp - 0x1d], 0
jne 0x10813d4d
mov dword [ebp - 0x1a4], 0x6b555246
mov dword [ebp - 0x1a0], 0x3330434b
mov dword [ebp - 0x19c], 0x714d7850
mov dword [ebp - 0x198], 0x626f534f
mov dword [ebp - 0x194], 0x3834444b
mov dword [ebp - 0x190], 0x33646e45
mov dword [ebp - 0x18c], 0x364a5865
mov dword [ebp - 0x188], 0x766b6e66
mov dword [ebp - 0x184], 0x37634144
mov dword [ebp - 0x180], 0x736f694e
mov dword [ebp - 0x17c], 0x47496a4b
mov dword [ebp - 0x178], 0x71597a50
mov dword [ebp - 0x174], 0x746f544d
mov dword [ebp - 0x170], 0x47677949
mov dword [ebp - 0x16c], 0x71746745
mov dword [ebp - 0x168], 0x476f434a
mov dword [ebp - 0x164], 0x2b686841
mov dword [ebp - 0x160], 0x55597949
mov dword [ebp - 0x15c], 0x52347841
mov dword [ebp - 0x158], 0x75776762
mov dword [ebp - 0x154], 0x67457849
mov dword [ebp - 0x150], 0x4f51544f
mov dword [ebp - 0x14c], 0x7a466a4e
mov dword [ebp - 0x148], 0x51554342
mov dword [ebp - 0x144], 0x4c675743
mov dword [ebp - 0x140], 0x66385849
mov dword [ebp - 0x13c], 0x4c49484d
mov dword [ebp - 0x138], 0x44305448
mov dword [ebp - 0x134], 0x6259544d
mov dword [ebp - 0x130], 0x49676a4f
mov dword [ebp - 0x12c], 0x71494448
mov dword [ebp - 0x128], 0x574d414e
mov dword [ebp - 0x124], 0x37563242
mov dword [ebp - 0x120], 0x57637a4a
mov dword [ebp - 0x11c], 0x6445474e
mov dword [ebp - 0x118], 0x50554448
mov dword [ebp - 0x114], 0x7a6b4343
mov dword [ebp - 0x110], 0x37425845
mov dword [ebp - 0x10c], 0x34305442
mov dword [ebp - 0x108], 0x79385843
mov dword [ebp - 0x104], 0x6c41784c
mov dword [ebp - 0x100], 0x7642484e
mov dword [ebp - 0xfc], 0x6f596a4f
mov dword [ebp - 0xf8], 0x32594159
mov dword [ebp - 0xf4], 0x57677763
mov dword [ebp - 0xf0], 0x30384449
mov dword [ebp - 0xec], 0x3470784b
mov dword [ebp - 0xe8], 0x6a67334f
mov dword [ebp - 0xe4], 0x54633241
mov dword [ebp - 0xe0], 0x73424162
mov dword [ebp - 0xdc], 0x484d6a43
mov dword [ebp - 0xd8], 0x7363424f
mov dword [ebp - 0xd4], 0x3142474b
mov dword [ebp - 0xd0], 0x4163684a
mov dword [ebp - 0xcc], 0x6b497864
mov dword [ebp - 0xc8], 0x79746749
mov dword [ebp - 0xc4], 0x49455841
mov dword [ebp - 0xc0], 0x47414441
mov dword [ebp - 0xbc], 0x75346a46
mov dword [ebp - 0xb8], 0x76565343
mov dword [ebp - 0xb4], 0x67646a43
mov dword [ebp - 0xb0], 0x68676941
mov dword [ebp - 0xac], 0x7a426745
mov dword [ebp - 0xa8], 0x49776749
mov dword [ebp - 0xa4], 0x65594443
mov dword [ebp - 0xa0], 0x65555147
mov dword [ebp - 0x9c], 0x6338774b
mov dword [ebp - 0x98], 0x69554142
mov dword [ebp - 0x94], 0x3646524e
mov dword [ebp - 0x90], 0x77385443
mov dword [ebp - 0x8c], 0x664d334f
mov dword [ebp - 0x88], 0x4b493348
mov dword [ebp - 0x84], 0x71595448
mov dword [ebp - 0x80], 0x7177794e
mov dword [ebp - 0x7c], 0x48304343
mov dword [ebp - 0x78], 0x424d4265
mov dword [ebp - 0x74], 0x6b63484b
mov dword [ebp - 0x70], 0x666f5243
mov dword [ebp - 0x6c], 0x77595147
mov dword [ebp - 0x68], 0x5163434e
mov dword [ebp - 0x64], 0x6a4e6a4f
lea eax, [ebp - 0x14]
mov dword [ebp - 0x60], 0x33774261
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x5c], 0x42675843
push eax
xor eax, eax
mov dword [ebp - 0x58], 0x67554365
push eax
sub esp, 0xc
mov dword [ebp - 0x54], 0x6e426a4b
mov ecx, esp
mov dword [ebp - 0x50], 0x2f495141
mov dword [ebp - 0x4c], 0x3974534c
mov dword [ebp - 0x48], 0x3538694a
push dword [ebp - 0x24]
mov dword [ebp - 0x44], 0x76634161
mov dword [ebp - 0x40], 0x66304850
mov dword [ebp - 0x3c], 0x6e457745
mov dword [ebp - 0x38], 0x496b7964
mov dword [ebp - 0x34], 0x55734249
mov dword [ebp - 0x30], 0x44734341
mov dword [ebp - 0x2c], 0x41414141
mov word [ebp - 0x28], 0x7738
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp - 0x26]
push eax
lea eax, [ebp - 0x1a4]
push eax
call fcn.1080f5af
lea eax, [ebp - 0x24c]
push eax
call fcn.1081269c
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x240], 2
call fcn.1081bfbf
push eax
push edi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x10813d34
cmp dword [ebp - 0x14], 0
mov byte [ebp - 0x1d], 1
jne 0x10813d38
mov byte [ebp - 0x1d], 0
and dword [ebp - 4], 0
lea ecx, [ebp - 0x24c]
call fcn.1081be41
cmp byte [ebp - 0x1d], 0
je 0x10813d5f
push dword [ebp - 0x14]
mov ecx, ebx
push dword [ebp - 0x1c]
call fcn.10818af6
jmp 0x108140e6
lea eax, [ebp - 0x14]
mov dword [ebp - 0x23c], 0x2f345246
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x238], 0x37456750
push eax
xor eax, eax
mov dword [ebp - 0x234], 0x79595747
push eax
sub esp, 0xc
mov dword [ebp - 0x230], 0x4b6f6a43
mov ecx, esp
mov dword [ebp - 0x22c], 0x6b73534a
mov dword [ebp - 0x228], 0x59594849
mov dword [ebp - 0x224], 0x70735465
push dword [ebp - 0x24]
mov dword [ebp - 0x220], 0x30397750
mov dword [ebp - 0x21c], 0x6d4d7748
mov dword [ebp - 0x218], 0x516f5362
mov dword [ebp - 0x214], 0x6b685141
mov dword [ebp - 0x210], 0x3049424e
mov dword [ebp - 0x20c], 0x724d7748
mov dword [ebp - 0x208], 0x725a485a
mov dword [ebp - 0x204], 0x6830414b
mov dword [ebp - 0x200], 0x424d6743
mov dword [ebp - 0x1fc], 0x61637841
mov dword [ebp - 0x1f8], 0x43304849
mov dword [ebp - 0x1f4], 0x71416750
mov dword [ebp - 0x1f0], 0x73455359
mov dword [ebp - 0x1ec], 0x4a595250
mov dword [ebp - 0x1e8], 0x65494461
mov dword [ebp - 0x1e4], 0x4f77324f
mov dword [ebp - 0x1e0], 0x6f387a46
mov dword [ebp - 0x1dc], 0x70635244
mov dword [ebp - 0x1d8], 0x6a6b7966
mov dword [ebp - 0x1d4], 0x38646a4c
mov dword [ebp - 0x1d0], 0x344e5250
mov dword [ebp - 0x1cc], 0x2b30424b
mov dword [ebp - 0x1c8], 0x32515362
mov dword [ebp - 0x1c4], 0x5a385344
mov dword [ebp - 0x1c0], 0x776b434b
mov dword [ebp - 0x1bc], 0x79526a50
mov dword [ebp - 0x1b8], 0x6859584f
mov dword [ebp - 0x1b4], 0x2b495246
mov dword [ebp - 0x1b0], 0x77455842
mov dword [ebp - 0x1ac], 0x41414141
mov word [ebp - 0x1a8], 0x7761
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp - 0x1a6]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.1080f5af
lea eax, [ebp - 0x24c]
push eax
call fcn.1081269c
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x240], 4
call fcn.1081bfbf
push eax
push edi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x10813f3d
cmp dword [ebp - 0x14], 0
jne 0x10813f41
mov byte [ebp - 0x24], 0
and dword [ebp - 4], 0
lea ecx, [ebp - 0x24c]
call fcn.1081be41
cmp byte [ebp - 0x24], 0
je 0x108140e6
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx], 0xfeef04bd
jne 0x108140e6
movzx eax, word [ecx + 0xc]
push eax
movzx eax, word [ecx + 0xe]
push eax
movzx eax, word [ecx + 8]
push eax
movzx eax, word [ecx + 0xa]
push eax
xor eax, eax
mov dword [ebp - 0x214], 0x2b4a4362
push eax
sub esp, 0xc
mov dword [ebp - 0x210], 0x33427966
mov ecx, esp
mov dword [ebp - 0x20c], 0x74465466
mov dword [ebp - 0x208], 0x6a744363
mov dword [ebp - 0x204], 0x33415341
push dword [ebp - 0x24]
mov dword [ebp - 0x200], 0x4e454844
mov dword [ebp - 0x1fc], 0x42677765
mov dword [ebp - 0x1f8], 0x2f77674f
mov dword [ebp - 0x1f4], 0x4251524a
mov dword [ebp - 0x1f0], 0x31554346
mov dword [ebp - 0x1ec], 0x41414143
mov dword [ebp - 0x1e8], 0x68647a41
mov dword [ebp - 0x1e4], 0x7870444d
mov dword [ebp - 0x1e0], 0x3255794e
mov dword [ebp - 0x1dc], 0x51736d44
mov dword [ebp - 0x1d8], 0x77704142
mov dword [ebp - 0x1d4], 0x796f784c
mov dword [ebp - 0x1d0], 0x556b334f
mov dword [ebp - 0x1cc], 0x7541325a
mov dword [ebp - 0x1c8], 0x30356a61
mov dword [ebp - 0x1c4], 0x62596848
mov dword [ebp - 0x1c0], 0x51634145
mov dword [ebp - 0x1bc], 0x54775244
mov dword [ebp - 0x1b8], 0x2f425349
mov dword [ebp - 0x1b4], 0x376f7749
mov dword [ebp - 0x1b0], 0x4141674e
mov word [ebp - 0x1ac], 0x4541
mov byte [ebp - 0x1aa], 0x45
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp - 0x1a9]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.1080f5af
lea eax, [ebp - 0x24c]
push eax
call fcn.1081269c
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1081bfbf
push eax
push ebx
call fcn.1081204a
add esp, 0x18
lea ecx, [ebp - 0x24c]
call fcn.1081be41
cmp dword [ebp - 0x18], 0
je 0x108140f6
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.1081e30d
pop ecx
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.1081689e
call fcn.1081e891
ret