Function at 0x10014700
Capabilities:
Check if file exists
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10081ad7
mov eax, dword fs:[0]
push eax
sub esp, 0x250
mov eax, dword [0x100ac1c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 0x250], edi
push dword [edi + 8]
call fcn.10029730
push dword [edi + 0x10]
push dword [edi + 0xc]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.10029380
add esp, 0x14
mov dword [ebp - 4], 0
push dword [ebp - 0x24c]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1001478b
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x24c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jmp 0x1001520c
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.100503b0
mov eax, dword [edi + 0x58]
sub eax, 0x10
push eax
call fcn.10007d10
add esp, 0x10
lea esi, [eax + 0x10]
mov dword [ebp - 0x25c], esi
mov byte [ebp - 4], 3
cmp dword [0x100ab01c], 0
je 0x100148b4
push str.GetNativeSystemInfo
push 0x10089d34
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100148aa
xorps xmm0, xmm0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x23c]
push ecx
movups xmmword [ebp - 0x23c], xmm0
movups xmmword [ebp - 0x22c], xmm0
call eax
mov ax, word [ebp - 0x23c]
cmp ax, 9
je 0x100148a0
cmp ax, 6
je 0x100148a0
cmp ax, 0xc
je 0x100148a0
push str.IsWow64Process2
push 0x10089e64
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x254], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
test edi, edi
je 0x10014891
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
test eax, eax
je 0x10014891
mov edi, dword [ebp - 0x250]
xor eax, eax
mov ecx, 0xaa64
cmp word [ebp - 0x254], cx
sete al
mov dword [0x100ad988], eax
jmp 0x100148aa
mov edi, dword [ebp - 0x250]
xor eax, eax
mov dword [0x100ad988], eax
jmp 0x100148aa
mov dword [0x100ad988], 1
mov dword [0x100ab01c], 0
xor eax, eax
cmp dword [0x100ad988], eax
setne al
lea eax, [eax*4 + 0x50]
push dword [eax + edi]
lea eax, [ebp - 0x218]
push dword [ebp - 0x24c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
or edi, 0xffffffff
test eax, eax
je 0x100149cd
cmp dword [0x100ab020], 0
je 0x100149c0
push str.ntdll.dll
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x254], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x248], eax
test eax, eax
je 0x100149b6
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001497c
lea ecx, [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x240]
push ecx
lea ecx, [ebp - 0x258]
push ecx
call eax
movzx eax, word [ebp - 0x244]
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x254], 1
push dword [ebp - 0x248]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x254], 0
je 0x100149b6
mov eax, dword [ebp - 0x258]
cmp eax, 6
jne 0x100149a7
cmp dword [ebp - 0x240], 4
je 0x100149ac
jmp 0x100149b6
cmp eax, 0xa
jb 0x100149b6
mov dword [0x100ad98c], 1
mov dword [0x100ab020], 0
cmp dword [0x100ad98c], 0
jne 0x10014b88
mov eax, dword [ebp - 0x250]
lea ecx, [esi - 0x10]
mov dword [ebp - 0x240], ecx
mov edx, dword [eax + 0x4c]
lea eax, [edx - 0x10]
mov dword [ebp - 0x248], eax
cmp eax, ecx
je 0x10014a4e
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x10014a39
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x10014a39
push dword [ebp - 0x248]
call fcn.10007d10
add esp, 4
mov dword [ebp - 0x248], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x10014a2e
mov esi, dword [ebp - 0x240]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x248]
lea esi, [eax + 0x10]
mov dword [ebp - 0x25c], esi
jmp 0x10014a4e
push dword [edx - 0xc]
lea ecx, [ebp - 0x25c]
push edx
call fcn.1000ffb0
mov esi, dword [ebp - 0x25c]
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.100503b0
add esp, 0xc
cmp dword [0x100ab01c], 0
je 0x10014b5a
push str.GetNativeSystemInfo
push 0x10089d34
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10014b50
xorps xmm0, xmm0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x23c]
push ecx
movups xmmword [ebp - 0x23c], xmm0
movups xmmword [ebp - 0x22c], xmm0
call eax
mov ax, word [ebp - 0x23c]
cmp ax, 9
je 0x10014b46
cmp ax, 6
je 0x10014b46
cmp ax, 0xc
je 0x10014b46
push str.IsWow64Process2
push 0x10089e64
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x240], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x258], eax
test eax, eax
je 0x10014b3d
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x258]
test eax, eax
je 0x10014b3d
xor eax, eax
mov ecx, 0xaa64
cmp word [ebp - 0x240], cx
sete al
mov dword [0x100ad988], eax
jmp 0x10014b50
xor eax, eax
mov dword [0x100ad988], eax
jmp 0x10014b50
mov dword [0x100ad988], 1
mov dword [0x100ab01c], 0
mov ecx, dword [ebp - 0x250]
xor eax, eax
cmp dword [0x100ad988], eax
setne al
lea eax, [eax*4 + 0x44]
push dword [eax + ecx]
lea eax, [ebp - 0x218]
push dword [ebp - 0x24c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
push esi
push str.drive_name___s__szDrivePath___s_
call fcn.100136e0
add esp, 0xc
cmp dword [esi - 0xc], 0
jne 0x10014bc3
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x10014bbe
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x100151f4
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], 0
push eax
push esi
call fcn.100157c0
add esp, 8
test eax, eax
js 0x10014c4e
cmp dword [ebp - 0x240], 0
je 0x10014c4e
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], 0
push eax
push esi
call fcn.100156d0
add esp, 8
test eax, eax
js 0x10014c4e
cmp dword [ebp - 0x240], 0
je 0x10014c4e
lea eax, [ebp - 0x234]
push eax
push esi
call fcn.10015520
add esp, 8
test eax, eax
js 0x10014c4e
cmp dword [ebp - 0x230], 4
jne 0x10014c4e
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x10014c49
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x100151f4
call fcn.100085e0
mov ecx, eax
test ecx, ecx
je 0x10015233
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x244], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x244]
push str.drv_start
call fcn.100079e0
test al, al
jne 0x10014c97
push 9
push str.drv_start
lea ecx, [ebp - 0x244]
call fcn.1000ffb0
mov byte [ebp - 4], 9
mov ecx, dword [0x100ad994]
test ecx, ecx
jne 0x10014d01
push 0x100ab044
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100ad994], 0
jne 0x10014cf0
push 0xc
call fcn.1004771c
add esp, 4
mov dword [ebp - 0x248], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x10014cda
mov ecx, eax
call fcn.100220e0
jmp 0x10014cdc
xor eax, eax
mov byte [ebp - 4], 9
xor edx, edx
lea ecx, [ebp - 0x248]
lock or dword [ecx], edx
mov dword [0x100ad994], eax
push 0x100ab044
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100ad994]
push 0
push dword [ebp - 0x250]
lea eax, [ebp - 0x244]
push eax
call fcn.100227f0
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x244]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10014d36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x10014dcf
lea eax, [ebp - 0x218]
push eax
push str.CComputerZLockHelper_drivepath_s_is_not_fail
call fcn.100136e0
add esp, 8
lea ecx, [ebp - 0x240]
push str.drv_other
call fcn.10003cf0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x240]
push 0
push dword [ebp - 0x250]
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x240]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10014daf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x10014dca
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x100151f4
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], 0
push eax
push esi
call fcn.100157c0
add esp, 8
test eax, eax
js 0x10014dfa
cmp dword [ebp - 0x240], 0
jne 0x10014faf
call fcn.100085e0
mov ecx, eax
test ecx, ecx
je 0x1001523d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x244], eax
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x244]
call fcn.100079e0
test al, al
jne 0x10014e62
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10014e40
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x244]
call fcn.1000ffb0
mov byte [ebp - 4], 0x11
mov edi, dword [ebp - 0x244]
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x10014e82
mov dword [ebp - 0x254], eax
jmp 0x10014f18
mov ecx, dword [0x100ad9b8]
test ecx, ecx
jne 0x10014ee8
push 0x100ab068
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100ad9b8], 0
jne 0x10014ed7
push 4
call fcn.1004771c
add esp, 4
mov dword [ebp - 0x248], eax
mov byte [ebp - 4], 0x12
test eax, eax
je 0x10014ec1
mov ecx, eax
call fcn.10013a50
jmp 0x10014ec3
xor eax, eax
mov byte [ebp - 4], 0x11
xor edx, edx
lea ecx, [ebp - 0x248]
lock or dword [ecx], edx
mov dword [0x100ad9b8], eax
push 0x100ab068
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100ad9b8]
push edi
call fcn.10013b50
test eax, eax
jne 0x10014efa
mov dword [ebp - 0x254], eax
jmp 0x10014f18
push 0
push 0
push edi
push 1
push esi
push esi
call fcn.100155f0
xor ecx, ecx
add esp, 0x18
test eax, eax
setns cl
mov dword [ebp - 0x254], ecx
mov byte [ebp - 4], 3
lea edx, [edi - 0x10]
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10014f36
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x254], 0
jne 0x10014faf
push str.drv_fails
lea ecx, [ebp - 0x240]
call fcn.10003cf0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x240]
push 0
push dword [ebp - 0x250]
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x240]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10014f8f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x10014faa
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x100151f4
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], 0
push eax
push esi
call fcn.100156d0
add esp, 8
test eax, eax
js 0x10014fd6
cmp dword [ebp - 0x240], 0
jne 0x10015055
push 0
push esi
call fcn.100153c0
add esp, 8
test eax, eax
jns 0x10015055
push str.drv_fails
lea ecx, [ebp - 0x240]
call fcn.10003cf0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x240]
push 0
push dword [ebp - 0x250]
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x240]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10015035
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x10015050
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x100151f4
lea eax, [ebp - 0x234]
push eax
push esi
call fcn.10015520
add esp, 8
test eax, eax
js 0x10015072
cmp dword [ebp - 0x230], 4
je 0x100150f1
push 0
push esi
call fcn.100158a0
add esp, 8
test eax, eax
jns 0x100150f1
push str.drv_fails
lea ecx, [ebp - 0x240]
call fcn.10003cf0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x240]
push 0
push dword [ebp - 0x250]
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x240]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100150d1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100150ec
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x100151f4
call fcn.100085e0
mov ecx, eax
test ecx, ecx
je 0x10015247
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x244], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x244]
push str.drv_succ
call fcn.100079e0
test al, al
jne 0x1001513a
push 8
push str.drv_succ
lea ecx, [ebp - 0x244]
call fcn.1000ffb0
mov byte [ebp - 4], 0x21
mov ecx, dword [0x100ad994]
test ecx, ecx
jne 0x100151a4
push 0x100ab044
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100ad994], 0
jne 0x10015193
push 0xc
call fcn.1004771c
add esp, 4
mov dword [ebp - 0x248], eax
mov byte [ebp - 4], 0x22
test eax, eax
je 0x1001517d
mov ecx, eax
call fcn.100220e0
jmp 0x1001517f
xor eax, eax
mov byte [ebp - 4], 0x21
xor edx, edx
lea ecx, [ebp - 0x248]
lock or dword [ecx], edx
mov dword [0x100ad994], eax
push 0x100ab044
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100ad994]
push 0
push dword [ebp - 0x250]
lea eax, [ebp - 0x244]
push eax
call fcn.100227f0
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x244]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100151d9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100151f4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x24c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x10015216
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10047acb
mov esp, ebp
pop ebp
ret 4
push 0x80004005
call fcn.100079c0
push 0x80004005
call fcn.100079c0
push 0x80004005
call fcn.100079c0
int3