Function at 0x5f0f71
Capabilities:
Check if file exists

Disassembly:
push 0x668
mov eax, 0x6555e7
call fcn.006096cc
mov esi, ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x66c], eax
test eax, eax
je 0x5f1214
xor ecx, ecx
cmp cx, word [eax]
je 0x5f1214
lea edi, [esi + 8]
push edi
mov dword [ebp - 0x674], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor ebx, ebx
inc ebx
mov byte [ebp - 0x670], bl
and dword [ebp - 4], 0
cmp dword [esi + 4], 0
jne 0x5f11ce
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0060a8e0
push 0x10
lea eax, [ebp - 0x668]
mov dword [ebp - 0x664], ebx
push eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x668], 0x208
push eax
lea eax, [ebp - 0x664]
push eax
push str.Install_Dir
push str.SOFTWAREMcAfeePlatform
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004627c0
add esp, 0x28
test eax, eax
jne 0x5f103b
cmp dword [ebp - 0x664], ebx
jne 0x5f103b
push str.core_vtploader_x86.dll
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0060e249
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [ebp - 0x65c], 2
test eax, eax
jne 0x5f1167
push 0x208
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.0060a8e0
add esp, 0xc
lea eax, [ebp - 0x420]
push 0x208
push eax
push 0x400000
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x5f1167
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.0060a8e0
add esp, 0xc
lea eax, [ebp - 0x628]
push 0
push eax
push 0x104
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov byte [ebp - 0x660], 0
lea eax, [ebp - 0x628]
push dword [ebp - 0x660]
push eax
lea eax, [ebp - 0x640]
push eax
call fcn.005ee376
mov byte [ebp - 0x660], 0
lea eax, [ebp - 0x658]
push dword [ebp - 0x660]
mov byte [ebp - 4], bl
push str._vtploader_x86.dll
push eax
call fcn.005ee376
add esp, 0x18
lea ecx, [ebp - 0x640]
mov byte [ebp - 4], 2
call fcn.005f121f
lea eax, [ebp - 0x658]
push eax
lea ecx, [ebp - 0x640]
call fcn.005ee829
lea ecx, [ebp - 0x658]
call fcn.0042f900
cmp dword [ebp - 0x62c], 8
lea eax, [ebp - 0x640]
cmovae eax, dword [ebp - 0x640]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0060e2d8
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x640]
call fcn.0042f900
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x5f11f3
push 0x6e1cbc
push dword [0x67fdcc]
lea eax, [ebp - 0x218]
push 0x6d32d8
push 0x6d32fc
push dword [0x67fdd0]
push eax
call fcn.005efaeb
add esp, 0x18
test eax, eax
je 0x5f11c8
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esi], eax
test eax, eax
je 0x5f11c8
push str.ValidateModule
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 4], eax
cmp dword [esi + 4], 0
je 0x5f11f8
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [esi + 4]
xor bl, bl
push dword [ebp - 0x66c]
mov ecx, esi
mov byte [ebp - 0x670], bl
call dword [0x659730]
call esi
pop ecx
jmp 0x5f11fb
push 2
pop eax
jmp 0x5f1201
push 5
pop eax
mov dword [ebp - 0x65c], eax
test bl, bl
je 0x5f1217
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x65c]
jmp 0x5f1217
push 0x57
pop eax
call fcn.0060968a
ret 4