Function at 0x10016d70
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a96d5
mov eax, dword fs:[0]
push eax
sub esp, 0xf4
mov eax, dword [0x100db55c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 4], 0
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xfc], 0
call fcn.10002b70
mov ecx, eax
test ecx, ecx
je 0x10017396
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0xfc], 1
call fcn.10002b70
mov ecx, eax
test ecx, ecx
je 0x100173a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0xf4], esi
or edi, 0xffffffff
mov dword [ebp - 4], 1
cmp dword [ebp - 0xdc], 0
je 0x1001735f
cmp dword [ebp - 0xf0], 0
je 0x1001735f
push ecx
mov dword [ebp - 0xe0], esp
call fcn.10002b70
mov ecx, eax
test ecx, ecx
je 0x100173aa
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0xe0]
add eax, 0x10
mov dword [ecx], eax
push dword [ebp - 0xdc]
mov byte [ebp - 4], 2
call fcn.100036d0
test al, al
jne 0x10016eb1
mov edx, dword [ebp - 0xdc]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xdc], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016e91
sub ecx, dword [ebp - 0xdc]
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0xe0]
push edx
call fcn.10002820
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 1
push eax
call fcn.10014d30
add esp, 8
mov edx, dword [eax]
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 3
mov dword [ebp - 0xe0], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0xdc], eax
cmp eax, ecx
je 0x10016f42
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x10016f2d
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x10016f2d
push dword [ebp - 0xdc]
call fcn.100025a0
add esp, 4
mov dword [ebp - 0xdc], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x10016f22
mov esi, dword [ebp - 0xe0]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0xdc]
lea esi, [eax + 0x10]
mov dword [ebp - 0xf4], esi
jmp 0x10016f42
push dword [edx - 0xc]
lea ecx, [ebp - 0xf4]
push edx
call fcn.10002820
mov esi, dword [ebp - 0xf4]
mov edx, dword [ebp - 0xe4]
mov eax, edi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016f63
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1001735f
push esi
call fcn.1005e7a0
add esp, 4
test eax, eax
jne 0x100170fa
cmp dword [ebp - 0xe8], eax
je 0x1001735f
push 0x42
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.10076710
push 0x21
lea eax, [ebp - 0x54]
push eax
push esi
call fcn.1005ee00
add esp, 0x18
call fcn.10002b70
mov ecx, eax
test ecx, ecx
je 0x100173b4
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdc], eax
push str.45476F8083D74AC28A2DA8ED399737B7
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 4
call fcn.100036d0
test al, al
jne 0x10016ff1
push 0x20
push str.45476F8083D74AC28A2DA8ED399737B7
lea ecx, [ebp - 0xdc]
call fcn.10002820
mov byte [ebp - 4], 5
call fcn.10002b70
mov ecx, eax
test ecx, ecx
je 0x100173be
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe0], eax
push dword [ebp - 0xe8]
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 6
call fcn.100036d0
test al, al
jne 0x10017060
mov edx, dword [ebp - 0xe8]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xe4], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10017040
sub ecx, dword [ebp - 0xe4]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xe0]
call fcn.10002820
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.10068d30
mov edx, dword [ebp - 0xe0]
add esp, 0xc
mov byte [ebp - 4], 5
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100170a2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xdc]
mov eax, edi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100170c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0xec]
call fcn.10086e0a
mov edx, dword [ebp - 0xec]
add esp, 8
add edx, 0xfffffff0
test eax, eax
mov eax, edi
jne 0x1001734d
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100170fa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xdc], eax
test eax, eax
je 0x1001735f
mov ecx, dword [ebp - 0xf0]
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10017124
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
lea edi, [eax*4]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xd8]
push edi
push eax
call fcn.1000dcf0
add esp, 0x10
push 0
push 0
push edi
push dword [ebp - 0xd8]
mov edi, dword [ebp - 0xec]
push edi
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0xe4], ecx
test eax, eax
jne 0x10017204
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x100171fe
push 0
push 0
push 0
push 0
push edi
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea eax, [ebp - 0xd4]
push 0x80
push eax
lea eax, [ebp - 0xd8]
push edi
push eax
call fcn.1000dcf0
add esp, 0x10
push 0
push 0
push edi
push dword [ebp - 0xd8]
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
jmp 0x10017204
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
jne 0x100173c8
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 8
call fcn.10013330
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xa
cmp eax, ecx
je 0x1001723e
push eax
call fcn.10079c86
add esp, 4
push dword [ebp - 0xe8]
push dword [ebp - 0xdc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
mov dword [ebp - 0xe4], edi
test edi, edi
je 0x1001733b
mov ecx, dword [ebx]
mov edx, 1
sub edx, dword [ecx - 4]
mov ecx, dword [ecx - 8]
sub ecx, 0x104
or ecx, edx
jge 0x10017283
push 0x104
mov ecx, ebx
call fcn.10002730
mov ecx, dword [ebx]
cmp dword [ecx - 8], 0x104
jl 0x100173e7
mov dword [ecx - 0xc], 0x104
xor edx, edx
mov eax, dword [ebx]
push 0x104
push ecx
push dword [ebp - 0xf8]
mov word [eax + 0x208], dx
call edi
mov edi, eax
mov eax, dword [ebx]
test eax, eax
jne 0x100172be
xor ecx, ecx
jmp 0x100172d4
push dword [eax - 8]
push eax
call fcn.1007dbae
mov ecx, eax
add esp, 8
test ecx, ecx
js 0x100173e7
mov eax, dword [ebx]
cmp ecx, dword [eax - 8]
jg 0x100173e7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebx]
mov word [eax + ecx*2], dx
test edi, edi
jle 0x1001733b
inc edi
mov ecx, ebx
push edi
push edi
call fcn.1000c520
push eax
push dword [ebp - 0xf8]
call dword [ebp - 0xe4]
mov eax, dword [ebx]
test eax, eax
jne 0x1001730f
xor ecx, ecx
jmp 0x10017325
push dword [eax - 8]
push eax
call fcn.1007dbae
mov ecx, eax
add esp, 8
test ecx, ecx
js 0x100173e7
mov eax, dword [ebx]
cmp ecx, dword [eax - 8]
jg 0x100173e7
mov dword [eax - 0xc], ecx
xor edx, edx
mov eax, dword [ebx]
mov word [eax + ecx*2], dx
mov edx, dword [ebp - 0xe8]
add edx, 0xfffffff0
mov byte [ebp - 4], 1
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001735f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x10017378
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1006a7ac
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10001810
push 0x80004005
call fcn.10001810
push 0x80004005
call fcn.10001810
push 0x80004005
call fcn.10001810
push 0x80004005
call fcn.10001810
push 0x80
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0xd8]
call fcn.1000dd70
add esp, 0xc
call fcn.1000eb30
push 0x80070057
call fcn.10001810
int3