Function at 0x100242c0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x63c
mov eax, dword [0x100b0380]
xor eax, esp
mov dword [esp + 0x638], eax
push ebx
push esi
push edi
push 0x208
xor ebx, ebx
lea ecx, [esp + 0x16]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x1c], ax
call fcn.1007dcf0
add esp, 0xc
push 0x208
lea eax, [esp + 0x436]
xor edx, edx
push ebx
push eax
mov word [esp + 0x43c], dx
call fcn.1007dcf0
add esp, 0xc
push 0x208
lea edx, [esp + 0x226]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0x22c], cx
call fcn.1007dcf0
lea eax, [esp + 0x43c]
add esp, 0xc
push eax
mov ecx, 0x104
call fcn.10039e20
add esp, 4
test eax, eax
je 0x1002467f
mov dword [esp + 0xc], ebx
cmp dword [str.netmon360netctrl.dll], ebx
je 0x1002466e
mov esi, 0x100d9380
xor edi, edi
lea ecx, [ecx]
push 0x20a
lea ecx, [esp + 0x14]
push 0
push ecx
call fcn.1007dcf0
add esp, 0xc
push 0x104
lea edx, [esp + 0x434]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.10079a14
mov ecx, dword [esi]
add esp, 0xc
push ecx
lea edx, [esp + 0x14]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x10024461
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
jne 0x10024427
lea ecx, [esp + 0x10]
test ecx, ecx
je 0x10024439
mov edx, ecx
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x10024439
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.10076c50
add esp, 4
test eax, eax
je 0x10024400
lea eax, [esp + 0x10]
push eax
mov eax, 0x100e4788
call fcn.100770b0
test eax, eax
jne 0x1002440d
lea eax, [esp + 0x10]
call fcn.10071800
test eax, eax
je 0x10024439
lea ecx, [esp + 0x10]
push ecx
call esi
test eax, eax
jne 0x10024427
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x10024439
mov ecx, dword [edi + 0x100d9384]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
jmp 0x10024461
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x100d9234]
mov edx, dword [str.v_ds_dr_dd_d]
push eax
push 0x1e6
push ecx
push edx
xor ecx, ecx
call fcn.1002d3f0
add esp, 0x14
test ebx, ebx
je 0x1002464b
mov edi, dword [edi + 0x100d9384]
mov ecx, edi
mov eax, str.InstallEx64
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10024496
test dl, dl
je 0x10024492
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10024496
add eax, 2
add ecx, 2
test dl, dl
jne 0x10024476
xor eax, eax
jmp 0x1002449b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100244a6
call ebx
jmp 0x1002464b
mov ecx, edi
mov eax, str.InstallDriverFor360SafeSetup
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100244d0
test dl, dl
je 0x100244cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100244d0
add eax, 2
add ecx, 2
test dl, dl
jne 0x100244b0
xor eax, eax
jmp 0x100244d5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100244e0
call ebx
jmp 0x1002464b
mov ecx, edi
mov eax, str.DllRegisterServer
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10024507
test dl, dl
je 0x10024503
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10024507
add eax, 2
add ecx, 2
test dl, dl
jne 0x100244e7
xor eax, eax
jmp 0x1002450c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10024572
push 0x104
lea eax, [esp + 0x434]
push eax
lea ecx, [esp + 0x228]
push ecx
call fcn.10079a14
add esp, 0xc
push str.deepscanZhuDongFangYu.exe
lea edx, [esp + 0x224]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x10024649
lea eax, [esp + 0x220]
call fcn.10025aa0
test eax, eax
je 0x10024649
mov edx, str._Install
lea ecx, [esp + 0x220]
call fcn.100241e0
jmp 0x10024649
mov ecx, edi
mov eax, str.SetupInstall
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100245a0
test dl, dl
je 0x1002459c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100245a0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10024580
xor eax, eax
jmp 0x100245a5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100245b0
call ebx
jmp 0x1002464b
mov ecx, edi
mov eax, str.InstallEx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100245d7
test dl, dl
je 0x100245d3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100245d7
add eax, 2
add ecx, 2
test dl, dl
jne 0x100245b7
xor eax, eax
jmp 0x100245dc
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100245e4
call ebx
jmp 0x1002464b
mov ecx, edi
mov eax, str.InstallCall
jmp 0x100245f0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10024610
test dl, dl
je 0x1002460c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10024610
add eax, 2
add ecx, 2
test dl, dl
jne 0x100245f0
xor eax, eax
jmp 0x10024615
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10024649
mov ecx, edi
mov eax, str.ReloadSelfProtectRule
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10024640
test dl, dl
je 0x1002463c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10024640
add eax, 2
add ecx, 2
test dl, dl
jne 0x10024620
xor eax, eax
jmp 0x10024645
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1002464b
call ebx
mov edi, dword [esp + 0xc]
inc edi
mov dword [esp + 0xc], edi
lea edi, [edi + edi*2]
add edi, edi
add edi, edi
cmp dword [edi + 0x100d9380], 0
lea esi, [edi + 0x100d9380]
jne 0x10024370
mov edx, str._Start
lea ecx, [esp + 0x220]
call fcn.100241e0
mov ecx, dword [esp + 0x644]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.10079a05
mov esp, ebp
pop ebp
ret