Function at 0x4278cc
Capabilities:
Check if file exists

Disassembly:
push 0x668
mov eax, 0x46c9c8
call fcn.0042dc0b
mov esi, ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x66c], eax
test eax, eax
je 0x427b67
xor ecx, ecx
cmp cx, word [eax]
je 0x427b67
lea edi, [esi + 8]
push edi
mov dword [ebp - 0x674], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor ebx, ebx
inc ebx
mov byte [ebp - 0x670], bl
and dword [ebp - 4], 0
cmp dword [esi + 4], 0
jne 0x427b29
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0042f1f0
push 0x10
lea eax, [ebp - 0x668]
mov dword [ebp - 0x664], ebx
push eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x668], 0x208
push eax
lea eax, [ebp - 0x664]
push eax
push str.Install_Dir
push str.SOFTWAREMcAfeePlatform
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00427672
add esp, 0x28
test eax, eax
jne 0x427996
cmp dword [ebp - 0x664], ebx
jne 0x427996
push str.core_vtploader_x86.dll
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0043660d
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [ebp - 0x65c], 2
test eax, eax
jne 0x427ac2
push 0x208
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.0042f1f0
add esp, 0xc
lea eax, [ebp - 0x420]
push 0x208
push eax
push 0x400000
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x427ac2
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.0042f1f0
add esp, 0xc
lea eax, [ebp - 0x628]
push 0
push eax
push 0x104
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov byte [ebp - 0x660], 0
lea eax, [ebp - 0x628]
push dword [ebp - 0x660]
push eax
lea eax, [ebp - 0x640]
push eax
call fcn.0042520f
mov byte [ebp - 0x660], 0
lea eax, [ebp - 0x658]
push dword [ebp - 0x660]
mov byte [ebp - 4], bl
push str._vtploader_x86.dll
push eax
call fcn.0042520f
add esp, 0x18
lea ecx, [ebp - 0x640]
mov byte [ebp - 4], 2
call fcn.0041c44b
lea eax, [ebp - 0x658]
push eax
lea ecx, [ebp - 0x640]
call fcn.004139f6
lea ecx, [ebp - 0x658]
call fcn.00403f00
cmp dword [ebp - 0x62c], 8
lea eax, [ebp - 0x640]
cmovae eax, dword [ebp - 0x640]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00436682
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x640]
call fcn.00403f00
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x427b46
push 0x4942dc
push dword [0x478b50]
lea eax, [ebp - 0x218]
push 0x49207c
push 0x4920a0
push dword [0x478b54]
push eax
call fcn.004268a9
add esp, 0x18
test eax, eax
je 0x427b23
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esi], eax
test eax, eax
je 0x427b23
push str.ValidateModule
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 4], eax
cmp dword [esi + 4], 0
je 0x427b4b
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [ebp - 0x66c]
mov eax, dword [esi + 4]
xor bl, bl
mov byte [ebp - 0x670], bl
call eax
pop ecx
jmp 0x427b4e
push 2
pop eax
jmp 0x427b54
push 5
pop eax
mov dword [ebp - 0x65c], eax
test bl, bl
je 0x427b6a
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x65c]
jmp 0x427b6a
push 0x57
pop eax
call fcn.0042dbb5
ret 4