Function at 0x10016c00
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a9555
mov eax, dword fs:[0]
push eax
sub esp, 0xf4
mov eax, dword [0x100db3fc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 4], 0
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xfc], 0
call fcn.100029d0
mov ecx, eax
test ecx, ecx
je 0x10017226
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0xfc], 1
call fcn.100029d0
mov ecx, eax
test ecx, ecx
je 0x10017230
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0xf4], esi
or edi, 0xffffffff
mov dword [ebp - 4], 1
cmp dword [ebp - 0xdc], 0
je 0x100171ef
cmp dword [ebp - 0xf0], 0
je 0x100171ef
push ecx
mov dword [ebp - 0xe0], esp
call fcn.100029d0
mov ecx, eax
test ecx, ecx
je 0x1001723a
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0xe0]
add eax, 0x10
mov dword [ecx], eax
push dword [ebp - 0xdc]
mov byte [ebp - 4], 2
call fcn.10003540
test al, al
jne 0x10016d41
mov edx, dword [ebp - 0xdc]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xdc], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016d21
sub ecx, dword [ebp - 0xdc]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0xe0]
push edx
call fcn.10002680
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 1
push eax
call fcn.10014bb0
add esp, 8
mov edx, dword [eax]
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 3
mov dword [ebp - 0xe0], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x10016dd2
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x10016dbd
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x10016dbd
push dword [ebp - 0xdc]
call fcn.10002400
add esp, 4
mov dword [ebp - 0xdc], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x10016db2
mov esi, dword [ebp - 0xe0]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0xdc]
lea esi, [eax + 0x10]
mov dword [ebp - 0xf4], esi
jmp 0x10016dd2
push dword [edx - 0xc]
lea ecx, [ebp - 0xf4]
push edx
call fcn.10002680
mov esi, dword [ebp - 0xf4]
mov edx, dword [ebp - 0xe4]
mov eax, edi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016df3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x100171ef
push esi
call fcn.1005e600
add esp, 4
test eax, eax
jne 0x10016f8a
cmp dword [ebp - 0xe8], eax
je 0x100171ef
push 0x42
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.10076570
push 0x21
lea eax, [ebp - 0x54]
push eax
push esi
call fcn.1005ec60
add esp, 0x18
call fcn.100029d0
mov ecx, eax
test ecx, ecx
je 0x10017244
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdc], eax
push str.45476F8083D74AC28A2DA8ED399737B7
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 4
call fcn.10003540
test al, al
jne 0x10016e81
push 0x20
push str.45476F8083D74AC28A2DA8ED399737B7
lea ecx, [ebp - 0xdc]
call fcn.10002680
mov byte [ebp - 4], 5
call fcn.100029d0
mov ecx, eax
test ecx, ecx
je 0x1001724e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe0], eax
push dword [ebp - 0xe8]
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 6
call fcn.10003540
test al, al
jne 0x10016ef0
mov edx, dword [ebp - 0xe8]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xe4], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016ed0
sub ecx, dword [ebp - 0xe4]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xe0]
call fcn.10002680
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.10068b90
mov edx, dword [ebp - 0xe0]
add esp, 0xc
mov byte [ebp - 4], 5
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016f32
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xdc]
mov eax, edi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016f53
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0xec]
call fcn.10086c6a
mov edx, dword [ebp - 0xec]
add esp, 8
add edx, 0xfffffff0
test eax, eax
mov eax, edi
jne 0x100171dd
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016f8a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xdc], eax
test eax, eax
je 0x100171ef
mov ecx, dword [ebp - 0xf0]
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016fb4
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
lea edi, [eax*4]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xd8]
push edi
push eax
call fcn.1000db60
add esp, 0x10
push 0
push 0
push edi
push dword [ebp - 0xd8]
mov edi, dword [ebp - 0xec]
push edi
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0xe4], ecx
test eax, eax
jne 0x10017094
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1001708e
push 0
push 0
push 0
push 0
push edi
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea eax, [ebp - 0xd4]
push 0x80
push eax
lea eax, [ebp - 0xd8]
push edi
push eax
call fcn.1000db60
add esp, 0x10
push 0
push 0
push edi
push dword [ebp - 0xd8]
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x10017094
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
jne 0x10017258
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 8
call fcn.100131a0
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xa
cmp eax, ecx
je 0x100170ce
push eax
call fcn.10079ae6
add esp, 4
push dword [ebp - 0xe8]
push dword [ebp - 0xdc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
mov dword [ebp - 0xe4], edi
test edi, edi
je 0x100171cb
mov ecx, dword [ebx]
mov edx, 1
sub edx, dword [ecx - 4]
mov ecx, dword [ecx - 8]
sub ecx, 0x104
or ecx, edx
jge 0x10017113
push 0x104
mov ecx, ebx
call fcn.10002590
mov ecx, dword [ebx]
cmp dword [ecx - 8], 0x104
jl 0x10017277
mov dword [ecx - 0xc], 0x104
xor edx, edx
mov eax, dword [ebx]
push 0x104
push ecx
push dword [ebp - 0xf8]
mov word [eax + 0x208], dx
call edi
mov edi, eax
mov eax, dword [ebx]
test eax, eax
jne 0x1001714e
xor ecx, ecx
jmp 0x10017164
push dword [eax - 8]
push eax
call fcn.1007da0b
mov ecx, eax
add esp, 8
test ecx, ecx
js 0x10017277
mov eax, dword [ebx]
cmp ecx, dword [eax - 8]
jg 0x10017277
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebx]
mov word [eax + ecx*2], dx
test edi, edi
jle 0x100171cb
inc edi
mov ecx, ebx
push edi
push edi
call fcn.1000c390
push eax
push dword [ebp - 0xf8]
call dword [ebp - 0xe4]
mov eax, dword [ebx]
test eax, eax
jne 0x1001719f
xor ecx, ecx
jmp 0x100171b5
push dword [eax - 8]
push eax
call fcn.1007da0b
mov ecx, eax
add esp, 8
test ecx, ecx
js 0x10017277
mov eax, dword [ebx]
cmp ecx, dword [eax - 8]
jg 0x10017277
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebx]
mov word [eax + ecx*2], dx
mov edx, dword [ebp - 0xe8]
add edx, 0xfffffff0
mov byte [ebp - 4], 1
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100171ef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x10017208
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1006a60c
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10001670
push 0x80004005
call fcn.10001670
push 0x80004005
call fcn.10001670
push 0x80004005
call fcn.10001670
push 0x80004005
call fcn.10001670
push 0x80
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0xd8]
call fcn.1000dbe0
add esp, 0xc
call fcn.1000e9a0
push 0x80070057
call fcn.10001670
int3