Function at 0x1001e8d0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10086a22
mov eax, dword fs:[0]
push eax
sub esp, 0x254
mov eax, dword [0x100bc1b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov dword [ebp - 0x258], esi
push dword [esi]
push str.kHelper_enter_app_s
call fcn.1000b130
push dword [esi + 8]
call fcn.10038450
push dword [esi + 0x10]
push dword [esi + 0xc]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.100381a0
add esp, 0x1c
mov dword [ebp - 4], 0
push dword [ebp - 0x254]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1001e97a
push dword [ebp - 0x254]
push str.kHelper_rootdir_s_is_not_exist
call fcn.1000b130
add esp, 8
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x254]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jmp 0x1001f34f
mov eax, dword [esi + 0x4c]
cmp dword [eax - 0xc], 0
jne 0x1001e992
push str.kHelper_drivename_empty
call fcn.1000b130
add esp, 4
jmp 0x1001e95a
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x244], 0
push ecx
push eax
call fcn.1001f980
add esp, 8
test eax, eax
js 0x1001ea13
cmp dword [ebp - 0x244], 0
je 0x1001ea13
lea eax, [ebp - 0x244]
mov dword [ebp - 0x244], 0
push eax
push dword [esi + 0x4c]
call fcn.1001f890
add esp, 8
test eax, eax
js 0x1001ea13
cmp dword [ebp - 0x244], 0
je 0x1001ea13
lea eax, [ebp - 0x234]
push eax
push dword [esi + 0x4c]
call fcn.1001f6e0
add esp, 8
test eax, eax
js 0x1001ea13
cmp dword [ebp - 0x230], 4
jne 0x1001ea13
push str.kHelper_drive_ok
call fcn.1000b130
add esp, 4
jmp 0x1001e95a
mov eax, dword [0x100bdee8]
test al, 1
jne 0x1001ea36
or eax, 1
mov dword [0x100bdee8], eax
mov byte [ebp - 4], 4
mov dword [0x100bdee4], 0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
mov byte [ebp - 0x23d], 0
push eax
call fcn.10039eb9
mov byte [ebp - 4], 5
lea eax, [ebp - 0x248]
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x23d]
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x260]
push eax
push 0x1001e180
push 0x100bdee4
call fcn.1003ab81
add esp, 0x10
test eax, eax
je 0x1001f39a
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
push eax
call fcn.10039ef3
add esp, 4
call fcn.1000b580
mov ecx, eax
test ecx, ecx
je 0x1001f3d1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24c]
push 0x100bdeec
call fcn.1001e690
test al, al
jne 0x1001eb00
mov ecx, 0x100bdeec
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001eae0
sub ecx, edx
sar ecx, 1
push ecx
push 0x100bdeec
lea ecx, [ebp - 0x24c]
call fcn.10012540
mov byte [ebp - 4], 8
mov ecx, dword [0x100bd5c0]
test ecx, ecx
jne 0x1001eb73
push 0x100b203c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100bd5c0], 0
jne 0x1001eb5a
push 0x1c
call fcn.10053309
mov edi, eax
add esp, 4
mov dword [ebp - 0x250], edi
mov byte [ebp - 4], 9
test edi, edi
je 0x1001eb4e
lea ecx, [edi + 4]
mov dword [edi], vtable._BaseModule::CCriticalSection.0
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x1001eb50
xor edi, edi
mov byte [ebp - 4], 8
mov dword [0x100bd5c0], edi
push 0x100b203c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100bd5c0]
test ecx, ecx
jne 0x1001eb73
xor eax, eax
jmp 0x1001ebcf
mov eax, dword [0x100bd5bc]
test eax, eax
jne 0x1001ebcf
mov eax, dword [ecx]
push ecx
call dword [eax]
cmp dword [0x100bd5bc], 0
jne 0x1001ebbf
push 0xc
call fcn.10053309
add esp, 4
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x1001ebad
mov ecx, eax
call fcn.10031240
mov ecx, eax
jmp 0x1001ebaf
xor ecx, ecx
mov byte [ebp - 4], 8
xchg dword [ebp - 0x244], eax
mov dword [0x100bd5bc], ecx
mov eax, dword [0x100bd5c0]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [0x100bd5bc]
push 0
push esi
lea ecx, [ebp - 0x24c]
push ecx
mov ecx, eax
call fcn.10031b80
mov byte [ebp - 4], 0
or edi, 0xffffffff
mov edx, dword [ebp - 0x24c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001ec04
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.100592a0
add esp, 0xc
cmp dword [0x100b2070], 0
je 0x1001ed10
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001ed06
xorps xmm0, xmm0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x23c]
push ecx
movups xmmword [ebp - 0x23c], xmm0
movups xmmword [ebp - 0x22c], xmm0
call eax
mov ax, word [ebp - 0x23c]
cmp ax, 9
je 0x1001ecfc
cmp ax, 6
je 0x1001ecfc
cmp ax, 0xc
je 0x1001ecfc
push str.IsWow64Process2
push 0x1008ff00
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x244], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x250], eax
test eax, eax
je 0x1001ecf3
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x250]
test eax, eax
je 0x1001ecf3
xor eax, eax
mov ecx, 0xaa64
cmp word [ebp - 0x244], cx
sete al
mov dword [0x100bdee0], eax
jmp 0x1001ed06
xor eax, eax
mov dword [0x100bdee0], eax
jmp 0x1001ed06
mov dword [0x100bdee0], 1
mov dword [0x100b2070], 0
xor eax, eax
cmp dword [0x100bdee0], eax
setne al
lea eax, [eax*4 + 0x44]
push dword [eax + esi]
lea eax, [ebp - 0x218]
push dword [ebp - 0x254]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1001edb4
lea eax, [ebp - 0x218]
push eax
push str.kHelper_drivepath_s_is_not_fail
call fcn.1000b130
add esp, 8
lea ecx, [ebp - 0x23d]
call fcn.1001e3c0
push eax
lea ecx, [ebp - 0x244]
call fcn.10007b40
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x244]
push 0
push esi
push eax
call fcn.1001e7c0
mov ecx, eax
call fcn.10031b80
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp - 0x244]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001edaf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x1001f337
lea eax, [ebp - 0x244]
mov dword [ebp - 0x244], 0
push eax
push dword [esi + 0x4c]
call fcn.1001f980
add esp, 8
test eax, eax
js 0x1001ede1
cmp dword [ebp - 0x244], 0
jne 0x1001f013
call fcn.1000b580
mov ecx, eax
test ecx, ecx
je 0x1001f3db
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x24c]
call fcn.1001e690
test al, al
jne 0x1001ee45
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001ee23
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x24c]
call fcn.10012540
mov byte [ebp - 4], 0x10
mov esi, dword [ebp - 0x24c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1001ee65
mov dword [ebp - 0x244], eax
jmp 0x1001ef7f
mov ecx, dword [0x100bdedc]
test ecx, ecx
jne 0x1001eed7
push 0x100b2058
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100bdedc], 0
jne 0x1001eebe
push 0x1c
call fcn.10053309
add esp, 4
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 0x11
test eax, eax
je 0x1001eeb3
lea ecx, [eax + 4]
mov dword [eax], vtable._BaseModule::CCriticalSection.0
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x250]
jmp 0x1001eeb5
xor eax, eax
mov byte [ebp - 4], 0x10
mov dword [0x100bdedc], eax
push 0x100b2058
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100bdedc]
test ecx, ecx
jne 0x1001eed7
xor eax, eax
jmp 0x1001ef33
mov eax, dword [0x100bded8]
test eax, eax
jne 0x1001ef33
mov eax, dword [ecx]
push ecx
call dword [eax]
cmp dword [0x100bded8], 0
jne 0x1001ef23
push 4
call fcn.10053309
add esp, 4
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 0x12
test eax, eax
je 0x1001ef11
mov ecx, eax
call fcn.10016050
mov ecx, eax
jmp 0x1001ef13
xor ecx, ecx
mov byte [ebp - 4], 0x10
xchg dword [ebp - 0x250], eax
mov dword [0x100bded8], ecx
mov eax, dword [0x100bdedc]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [0x100bded8]
push esi
mov ecx, eax
call fcn.10016070
test eax, eax
jne 0x1001ef58
push str.check_sign_fail
call fcn.1000b130
add esp, 4
mov dword [ebp - 0x244], 0
jmp 0x1001ef7f
mov eax, dword [ebp - 0x258]
push 0
push 0
push esi
mov eax, dword [eax + 0x4c]
push 1
push eax
push eax
call fcn.1001f7b0
xor ecx, ecx
add esp, 0x18
test eax, eax
setns cl
mov dword [ebp - 0x244], ecx
mov byte [ebp - 4], 0
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x1001ef9a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x244], 0
jne 0x1001f00d
push str.kHelper_install_fail
call fcn.1000b130
add esp, 4
lea ecx, [ebp - 0x23d]
call fcn.1001e5a0
push eax
lea ecx, [ebp - 0x244]
call fcn.10007b40
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x244]
mov esi, dword [ebp - 0x258]
push 0
push esi
push eax
call fcn.1001e7c0
mov ecx, eax
call fcn.10031b80
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp - 0x244]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001f008
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x1001f337
mov esi, dword [ebp - 0x258]
lea eax, [ebp - 0x244]
mov dword [ebp - 0x244], 0
push eax
push dword [esi + 0x4c]
call fcn.1001f890
add esp, 8
test eax, eax
js 0x1001f03c
cmp dword [ebp - 0x244], 0
jne 0x1001f0b1
push 0
push dword [esi + 0x4c]
call fcn.1001f580
add esp, 8
test eax, eax
jns 0x1001f0b1
push str.kHelper_Enable_fail
call fcn.1000b130
add esp, 4
lea ecx, [ebp - 0x23d]
call fcn.1001e2d0
push eax
lea ecx, [ebp - 0x244]
call fcn.10007b40
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x244]
push 0
push esi
push eax
call fcn.1001e7c0
mov ecx, eax
call fcn.10031b80
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp - 0x244]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001f0ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x1001f337
lea eax, [ebp - 0x234]
push eax
push dword [esi + 0x4c]
call fcn.1001f6e0
add esp, 8
test eax, eax
js 0x1001f0d0
cmp dword [ebp - 0x230], 4
je 0x1001f145
push 0
push dword [esi + 0x4c]
call fcn.1001fa60
add esp, 8
test eax, eax
jns 0x1001f145
push str.kHelper_StartPlusWaiting_fail
call fcn.1000b130
add esp, 4
lea ecx, [ebp - 0x23d]
call fcn.1001e4b0
push eax
lea ecx, [ebp - 0x244]
call fcn.10007b40
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x244]
push 0
push esi
push eax
call fcn.1001e7c0
mov ecx, eax
call fcn.10031b80
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp - 0x244]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001f140
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x1001f337
mov eax, dword [0x100bdf88]
test al, 1
jne 0x1001f168
or eax, 1
mov dword [0x100bdf88], eax
mov byte [ebp - 4], 0x1d
mov dword [0x100bdf84], 0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
mov byte [ebp - 0x23d], 0
push eax
call fcn.10039eb9
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x248]
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x23d]
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x260]
push eax
push 0x1001dc40
push 0x100bdf84
call fcn.1003ab81
add esp, 0x10
test eax, eax
je 0x1001f385
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
push eax
call fcn.10039ef3
add esp, 4
call fcn.1000b580
mov ecx, eax
test ecx, ecx
je 0x1001f3e5
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x24c]
push 0x100bdf8c
call fcn.1001e690
test al, al
jne 0x1001f230
mov ecx, 0x100bdf8c
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001f210
sub ecx, edx
sar ecx, 1
push ecx
push 0x100bdf8c
lea ecx, [ebp - 0x24c]
call fcn.10012540
mov byte [ebp - 4], 0x21
mov ecx, dword [0x100bd5c0]
test ecx, ecx
jne 0x1001f2a9
push 0x100b203c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100bd5c0], 0
jne 0x1001f290
push 0x1c
call fcn.10053309
mov esi, eax
add esp, 4
mov dword [ebp - 0x250], esi
mov byte [ebp - 4], 0x22
test esi, esi
je 0x1001f27e
lea ecx, [esi + 4]
mov dword [esi], vtable._BaseModule::CCriticalSection.0
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x1001f280
xor esi, esi
mov byte [ebp - 4], 0x21
mov dword [0x100bd5c0], esi
mov esi, dword [ebp - 0x258]
push 0x100b203c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100bd5c0]
test ecx, ecx
jne 0x1001f2a9
xor eax, eax
jmp 0x1001f305
mov eax, dword [0x100bd5bc]
test eax, eax
jne 0x1001f305
mov eax, dword [ecx]
push ecx
call dword [eax]
cmp dword [0x100bd5bc], 0
jne 0x1001f2f5
push 0xc
call fcn.10053309
add esp, 4
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 0x23
test eax, eax
je 0x1001f2e3
mov ecx, eax
call fcn.10031240
mov ecx, eax
jmp 0x1001f2e5
xor ecx, ecx
mov byte [ebp - 4], 0x21
xchg dword [ebp - 0x250], eax
mov dword [0x100bd5bc], ecx
mov eax, dword [0x100bd5c0]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [0x100bd5bc]
push 0
push esi
lea ecx, [ebp - 0x24c]
push ecx
mov ecx, eax
call fcn.10031b80
mov byte [ebp - 4], 0
mov eax, edi
mov edx, dword [ebp - 0x24c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001f337
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x254]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x1001f359
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [esi]
push str.kHelper_end_app_s
call fcn.1000b130
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100536aa
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 0x248]
push eax
call fcn.10039f14
add esp, 4
test al, al
je 0x1001f413
jmp 0x1001f3ef
lea eax, [ebp - 0x248]
push eax
call fcn.10039f14
add esp, 4
test al, al
je 0x1001f413
sub esp, 8
lea eax, [ebp - 0x248]
mov ecx, esp
mov dword [ebp - 0x250], esp
push eax
call fcn.10008970
mov byte [ebp - 4], 6
mov byte [ebp - 4], 5
call fcn.10015930
push 0x80004005
call fcn.1000b090
push 0x80004005
call fcn.1000b090
push 0x80004005
call fcn.1000b090
sub esp, 8
lea eax, [ebp - 0x248]
mov ecx, esp
mov dword [ebp - 0x250], esp
push eax
call fcn.10008970
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0x1e
call fcn.10015930
call fcn.1003ab99
int3