Function at 0x10017ef0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10082398
mov eax, dword fs:[0]
push eax
sub esp, 0x2e4
mov eax, dword [0x100ac1c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x250], ecx
mov esi, dword [ebp + 8]
mov dword [ebp - 0x248], esi
push dword [esi + 8]
call fcn.10029730
push dword [esi + 0x10]
push dword [esi + 0xc]
push eax
lea eax, [ebp - 0x258]
push eax
call fcn.10029380
add esp, 0x14
mov dword [ebp - 4], 0
push dword [ebp - 0x258]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x10018873
mov eax, dword [esi + 0x40]
lea edi, [esi + 0x40]
mov dword [ebp - 0x254], edi
cmp dword [eax - 0xc], 0
je 0x10018873
mov eax, dword [esi + 0x3c]
cmp dword [eax - 0xc], 0
je 0x10018873
call fcn.10028830
test eax, eax
jne 0x10018873
lea eax, [ebp - 0x234]
push eax
push dword [edi]
call fcn.10015520
add esp, 8
xor ebx, ebx
test eax, eax
js 0x10017fb7
cmp dword [ebp - 0x230], 4
sete bl
mov ecx, dword [ebp - 0x250]
push edi
mov dword [ebp - 0x24c], ebx
call fcn.10017d00
mov dword [ebp - 0x238], eax
test ebx, ebx
je 0x10017fdb
test eax, eax
jne 0x10018873
push str.svc_start
lea ecx, [ebp - 0x240]
call fcn.10003cf0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x240]
push 0
push esi
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x240]
call fcn.100054b0
cmp dword [esi + 0x38], 0
je 0x10018043
push edi
call fcn.10027430
add esp, 4
test eax, eax
jne 0x10018043
push str.svc_qg
lea ecx, [ebp - 0x240]
call fcn.10003cf0
mov byte [ebp - 4], 2
push 0
push esi
jmp 0x10018851
lea eax, [ebp - 0x244]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 3
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov bl, al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x244]
call fcn.10005c10
test bl, bl
je 0x100180e4
lea eax, [ebp - 0x244]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f0]
mov edi, dword [eax]
call fcn.100049d0
mov esi, eax
mov byte [ebp - 4], 5
push str.bIsRunning:
push esi
call fcn.10006d00
mov ebx, dword [ebp - 0x24c]
add esp, 8
mov ecx, esi
push ebx
call fcn.10006b30
mov eax, dword [edi]
mov ecx, edi
push esi
call dword [eax + 8]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f0]
call fcn.10006f00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x244]
call fcn.10005c10
mov esi, dword [ebp - 0x248]
jmp 0x100180ea
mov ebx, dword [ebp - 0x24c]
test ebx, ebx
jne 0x1001875e
push 0x208
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.100503b0
add esp, 0xc
lea eax, [ebp - 0x218]
push dword [esi + 0x3c]
push dword [ebp - 0x258]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x10018668
mov ecx, dword [0x100ad9b8]
test ecx, ecx
jne 0x10018197
push 0x100ab068
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100ad9b8], ebx
jne 0x10018186
push 4
call fcn.1004771c
add esp, 4
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 7
test eax, eax
je 0x10018170
mov ecx, eax
call fcn.10013a50
jmp 0x10018172
xor eax, eax
mov byte [ebp - 4], 0
xor edx, edx
lea ecx, [ebp - 0x238]
lock or dword [ecx], edx
mov dword [0x100ad9b8], eax
push 0x100ab068
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100ad9b8]
lea eax, [ebp - 0x218]
push eax
call fcn.10013b50
test eax, eax
je 0x10018668
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov bl, al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
test bl, bl
je 0x1001824c
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2f0]
mov edi, dword [eax]
call fcn.100049d0
mov esi, eax
mov byte [ebp - 4], 0xf
push str.stAppData.bSensitive:
push esi
call fcn.10006d00
mov eax, dword [ebp - 0x248]
add esp, 8
mov ecx, esi
push dword [eax + 0x34]
call fcn.10006b30
mov eax, dword [edi]
mov ecx, edi
push esi
call dword [eax + 8]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2f0]
call fcn.10006f00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
mov esi, dword [ebp - 0x248]
cmp dword [esi + 0x34], 0
lea ebx, [esi + 0x40]
je 0x10018529
push ebx
call fcn.10026ee0
add esp, 4
test eax, eax
jne 0x10018529
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x11
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov bl, al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
test bl, bl
je 0x100182fb
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2f0]
mov edi, dword [eax]
call fcn.100049d0
mov esi, eax
mov byte [ebp - 4], 0x13
push str.check_rescue
push esi
call fcn.10006d00
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 8]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2f0]
call fcn.10006f00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
mov esi, dword [ebp - 0x248]
mov eax, dword [ebp - 0x250]
mov ecx, dword [eax]
test ecx, ecx
je 0x10018585
push esi
call fcn.100098f0
test eax, eax
je 0x10018585
push str.svc_force
lea ecx, [ebp - 0x240]
call fcn.10003cf0
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x240]
push 0
push esi
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x240]
call fcn.100054b0
mov ecx, dword [0x100ad990]
test ecx, ecx
jne 0x100183b8
push 0x100ab028
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100ad990], 0
jne 0x100183a7
push 0x18
call fcn.1004771c
add esp, 4
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 0x16
test eax, eax
je 0x10018391
mov ecx, eax
call fcn.10013c40
jmp 0x10018393
xor eax, eax
mov byte [ebp - 4], 0
xor edx, edx
lea ecx, [ebp - 0x238]
lock or dword [ecx], edx
mov dword [0x100ad990], eax
push 0x100ab028
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100ad990]
lea eax, [ebp - 0x24c]
push eax
call fcn.10013e30
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x24c]
test eax, eax
je 0x100188b6
push eax
push dword [esi]
call fcn.10057865
add esp, 8
test eax, eax
jne 0x10018483
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x18
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov bl, al
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x23c]
call fcn.10005c10
test bl, bl
je 0x10018474
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2f0]
mov edi, dword [eax]
call fcn.100049d0
mov esi, eax
mov byte [ebp - 4], 0x1a
push str.current_product__no_stop
push esi
call fcn.10006d00
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 8]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2f0]
call fcn.10006f00
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x23c]
call fcn.10005c10
mov eax, dword [ebp - 0x250]
push 0
mov ecx, dword [eax]
call fcn.1000ffa0
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x1c
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov bl, al
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x23c]
call fcn.10005c10
test bl, bl
je 0x1001850e
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2f0]
mov edi, dword [eax]
call fcn.100049d0
mov esi, eax
mov byte [ebp - 4], 0x1e
push str.rescue_svc
push esi
call fcn.10006d00
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 8]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2f0]
call fcn.10006f00
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x23c]
call fcn.10005c10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24c]
call fcn.100054b0
mov esi, dword [ebp - 0x248]
mov ebx, dword [ebp - 0x254]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x10018873
push 0x1008ab74
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10018555
push 0x10089d54
call eax
mov ecx, dword [ebp - 0x250]
push ebx
call fcn.10017d00
lea ecx, [ebp - 0x240]
test eax, eax
je 0x10018652
push str.svc_succ
call fcn.10003cf0
mov byte [ebp - 4], 0x25
push 0
push esi
jmp 0x10018851
push str.svc_safe
lea ecx, [ebp - 0x240]
call fcn.10003cf0
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x240]
push 0
push esi
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x240]
call fcn.100054b0
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x21
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov bl, al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
test bl, bl
je 0x10018873
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2f0]
mov edi, dword [eax]
call fcn.100049d0
mov esi, eax
mov byte [ebp - 4], 0x23
push str.no_rescue_svc
push esi
call fcn.10006d00
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 8]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2f0]
call fcn.10006f00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
jmp 0x10018873
push str.svc_fails
call fcn.10003cf0
mov byte [ebp - 4], 0x26
push 0
push esi
jmp 0x10018851
push str.svc_other
lea ecx, [ebp - 0x240]
call fcn.10003cf0
mov byte [ebp - 4], 8
lea eax, [ebp - 0x240]
push 0
push esi
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x240]
call fcn.100054b0
lea eax, [ebp - 0x218]
push eax
push str.CInstallSvc_svcpath___s_is_not_exist
call fcn.100136e0
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 0xc
mov byte [ebp - 4], 9
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov bl, al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
test bl, bl
je 0x10018873
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2f0]
mov edi, dword [eax]
call fcn.100049d0
mov esi, eax
mov byte [ebp - 4], 0xb
push str.CInstallSvc_svcpath_
push esi
call fcn.10006d00
lea eax, [ebp - 0x218]
push eax
push esi
call fcn.100027f0
push str.is_not_exist
push esi
call fcn.10006d00
mov eax, dword [edi]
add esp, 0x18
mov ecx, edi
push esi
call dword [eax + 8]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2f0]
call fcn.10006f00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
jmp 0x10018873
cmp dword [ebp - 0x238], 0
jne 0x10018873
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x27
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov bl, al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
test bl, bl
je 0x1001880f
lea eax, [ebp - 0x23c]
push eax
call fcn.10024780
add esp, 4
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x2f0]
mov ebx, dword [eax]
call fcn.100049d0
mov edi, eax
mov byte [ebp - 4], 0x29
push str.SetAutoRun:
push edi
call fcn.10006d00
mov edx, dword [ebp - 0x254]
mov esi, 0x1008a000
mov edx, dword [edx]
test edx, edx
cmovne esi, edx
push esi
push edi
call fcn.100027f0
mov eax, dword [ebx]
add esp, 0x10
mov ecx, ebx
push edi
call dword [eax + 8]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x2f0]
call fcn.10006f00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x23c]
call fcn.10005c10
push dword [ebp - 0x254]
mov ecx, dword [ebp - 0x250]
call fcn.100188d0
lea ecx, [ebp - 0x240]
test eax, eax
je 0x1001883a
push str.svc_succ
call fcn.10003cf0
mov byte [ebp - 4], 0x2b
jmp 0x10018848
push str.svc_fails
call fcn.10003cf0
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x248]
push 0
push eax
lea eax, [ebp - 0x240]
push eax
call fcn.100084a0
mov ecx, eax
call fcn.100227f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x240]
call fcn.100054b0
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov edx, dword [ebp - 0x258]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10018898
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10047acb
mov esp, ebp
pop ebp
ret 4
push 0x80004005
call fcn.100079c0
int3