Function at 0x10016db0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a82e5
mov eax, dword fs:[0]
push eax
sub esp, 0xf4
mov eax, dword [0x100db774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 4], 0
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xfc], 0
call fcn.10002dd0
mov ecx, eax
test ecx, ecx
je 0x100173d6
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0xfc], 1
call fcn.10002dd0
mov ecx, eax
test ecx, ecx
je 0x100173e0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0xf4], esi
or edi, 0xffffffff
mov dword [ebp - 4], 1
cmp dword [ebp - 0xdc], 0
je 0x1001739f
cmp dword [ebp - 0xf0], 0
je 0x1001739f
push ecx
mov dword [ebp - 0xe0], esp
call fcn.10002dd0
mov ecx, eax
test ecx, ecx
je 0x100173ea
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0xe0]
add eax, 0x10
mov dword [ecx], eax
push dword [ebp - 0xdc]
mov byte [ebp - 4], 2
call fcn.10003930
test al, al
jne 0x10016ef1
mov edx, dword [ebp - 0xdc]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xdc], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016ed1
sub ecx, dword [ebp - 0xdc]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0xe0]
push edx
call fcn.10002a80
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 1
push eax
call fcn.10014f90
add esp, 8
mov edx, dword [eax]
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 3
mov dword [ebp - 0xe0], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x10016f82
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x10016f6d
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x10016f6d
push dword [ebp - 0xdc]
call fcn.10002800
add esp, 4
mov dword [ebp - 0xdc], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x10016f62
mov esi, dword [ebp - 0xe0]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0xdc]
lea esi, [eax + 0x10]
mov dword [ebp - 0xf4], esi
jmp 0x10016f82
push dword [edx - 0xc]
lea ecx, [ebp - 0xf4]
push edx
call fcn.10002a80
mov esi, dword [ebp - 0xf4]
mov edx, dword [ebp - 0xe4]
mov eax, edi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016fa3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1001739f
push esi
call fcn.1005d3b0
add esp, 4
test eax, eax
jne 0x1001713a
cmp dword [ebp - 0xe8], eax
je 0x1001739f
push 0x42
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.10075330
push 0x21
lea eax, [ebp - 0x54]
push eax
push esi
call fcn.1005da10
add esp, 0x18
call fcn.10002dd0
mov ecx, eax
test ecx, ecx
je 0x100173f4
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdc], eax
push str.45476F8083D74AC28A2DA8ED399737B7
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 4
call fcn.10003930
test al, al
jne 0x10017031
push 0x20
push str.45476F8083D74AC28A2DA8ED399737B7
lea ecx, [ebp - 0xdc]
call fcn.10002a80
mov byte [ebp - 4], 5
call fcn.10002dd0
mov ecx, eax
test ecx, ecx
je 0x100173fe
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe0], eax
push dword [ebp - 0xe8]
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 6
call fcn.10003930
test al, al
jne 0x100170a0
mov edx, dword [ebp - 0xe8]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xe4], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10017080
sub ecx, dword [ebp - 0xe4]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xe0]
call fcn.10002a80
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.10067940
mov edx, dword [ebp - 0xe0]
add esp, 0xc
mov byte [ebp - 4], 5
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100170e2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xdc]
mov eax, edi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10017103
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0xec]
call fcn.10085a3a
mov edx, dword [ebp - 0xec]
add esp, 8
add edx, 0xfffffff0
test eax, eax
mov eax, edi
jne 0x1001738d
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001713a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xdc], eax
test eax, eax
je 0x1001739f
mov ecx, dword [ebp - 0xf0]
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10017164
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
lea edi, [eax*4]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xd8]
push edi
push eax
call fcn.1000df50
add esp, 0x10
push 0
push 0
push edi
push dword [ebp - 0xd8]
mov edi, dword [ebp - 0xec]
push edi
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0xe4], ecx
test eax, eax
jne 0x10017244
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1001723e
push 0
push 0
push 0
push 0
push edi
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea eax, [ebp - 0xd4]
push 0x80
push eax
lea eax, [ebp - 0xd8]
push edi
push eax
call fcn.1000df50
add esp, 0x10
push 0
push 0
push edi
push dword [ebp - 0xd8]
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x10017244
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
jne 0x10017408
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 8
call fcn.10013570
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xa
cmp eax, ecx
je 0x1001727e
push eax
call fcn.100788b6
add esp, 4
push dword [ebp - 0xe8]
push dword [ebp - 0xdc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
mov dword [ebp - 0xe4], edi
test edi, edi
je 0x1001737b
mov ecx, dword [ebx]
mov edx, 1
sub edx, dword [ecx - 4]
mov ecx, dword [ecx - 8]
sub ecx, 0x104
or ecx, edx
jge 0x100172c3
push 0x104
mov ecx, ebx
call fcn.10002990
mov ecx, dword [ebx]
cmp dword [ecx - 8], 0x104
jl 0x10017427
mov dword [ecx - 0xc], 0x104
xor edx, edx
mov eax, dword [ebx]
push 0x104
push ecx
push dword [ebp - 0xf8]
mov word [eax + 0x208], dx
call edi
mov edi, eax
mov eax, dword [ebx]
test eax, eax
jne 0x100172fe
xor ecx, ecx
jmp 0x10017314
push dword [eax - 8]
push eax
call fcn.1007c7db
mov ecx, eax
add esp, 8
test ecx, ecx
js 0x10017427
mov eax, dword [ebx]
cmp ecx, dword [eax - 8]
jg 0x10017427
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebx]
mov word [eax + ecx*2], dx
test edi, edi
jle 0x1001737b
inc edi
mov ecx, ebx
push edi
push edi
call fcn.1000c780
push eax
push dword [ebp - 0xf8]
call dword [ebp - 0xe4]
mov eax, dword [ebx]
test eax, eax
jne 0x1001734f
xor ecx, ecx
jmp 0x10017365
push dword [eax - 8]
push eax
call fcn.1007c7db
mov ecx, eax
add esp, 8
test ecx, ecx
js 0x10017427
mov eax, dword [ebx]
cmp ecx, dword [eax - 8]
jg 0x10017427
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebx]
mov word [eax + ecx*2], dx
mov edx, dword [ebp - 0xe8]
add edx, 0xfffffff0
mov byte [ebp - 4], 1
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001739f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x100173b8
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100693bc
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10001a70
push 0x80004005
call fcn.10001a70
push 0x80004005
call fcn.10001a70
push 0x80004005
call fcn.10001a70
push 0x80004005
call fcn.10001a70
push 0x80
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0xd8]
call fcn.1000dfd0
add esp, 0xc
call fcn.1000ed90
push 0x80070057
call fcn.10001a70
int3