Function at 0x10006d078
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov dword [rax + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r13, qword [rsp + 0xb0]
mov rbp, rcx
xor ecx, ecx
lea esi, [rcx + 4]
mov qword [r13], rcx
mov dword [rax - 0x40], ecx
mov dword [rax - 0x3c], ecx
mov r12d, ecx
mov dword [rax + 0x38], ecx
mov edi, ecx
cmp dword [r9], esi
jne 0x10006d0c7
mov r12d, dword [r8]
mov dword [rax + 0x38], r12d
mov rbx, qword [rsp + 0xa0]
mov edx, 0x2d
mov r9d, 0x2013
lea r8d, [rdx - 2]
mov eax, Ordinal_254
mov r11d, 0x2212
lea r10d, [r9 + 1]
cmp r8w, word [rbx]
jne 0x10006d0f9
lea r15d, [rdx - 0x2c]
jmp 0x10006d141
cmp dx, word [rbx]
je 0x10006d124
cmp r9w, word [rbx]
je 0x10006d124
cmp r10w, word [rbx]
je 0x10006d124
cmp r11w, word [rbx]
je 0x10006d124
cmp ax, word [rbx]
je 0x10006d124
mov r15d, ecx
mov r12d, ecx
mov dword [rsp + 0xb0], ecx
jmp 0x10006d12d
mov r15d, 2
add rbx, r15
mov eax, Ordinal_36
cmp ax, word [rbx]
je 0x10006d141
mov eax, 9
cmp ax, word [rbx]
jne 0x10006d147
add rbx, 2
jmp 0x10006d12d
mov eax, Ordinal_65
mov r14d, esi
cmp ax, word [rbx]
jne 0x10006d1a3
add rbx, 2
lea esi, [rax - 0x3d]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10006d174
and eax, 0x10
test al, al
je 0x10006d2bc
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rbx
call fcn.10003135c
mov edi, eax
test eax, eax
je 0x10006d196
mov r8d, eax
mov edx, 0x7af0138
jmp 0x10006d404
mov r14d, 8
mov al, 1
jmp 0x10006d2bf
cmp r8w, word [rbx]
je 0x10006d1d7
cmp dx, word [rbx]
je 0x10006d1d7
cmp r9w, word [rbx]
je 0x10006d1d7
cmp r10w, word [rbx]
je 0x10006d1d7
cmp r11w, word [rbx]
je 0x10006d1d7
mov eax, Ordinal_254
cmp ax, word [rbx]
je 0x10006d1d7
movzx ecx, word [rbx]
call qword [sym.imp.msvcrt.dll_iswdigit]
test eax, eax
je 0x10006d223
lea rdx, [rsp + 0xa0]
mov rcx, rbx
call fcn.1000b585c
test eax, eax
jne 0x10006d223
mov eax, r15d
sub eax, 1
je 0x10006d216
sub eax, 1
je 0x10006d205
mov r12d, dword [rsp + 0xa0]
jmp 0x10006d2bc
mov eax, dword [rsp + 0xa0]
not eax
and r12d, eax
jmp 0x10006d2bc
or r12d, dword [rsp + 0xa0]
jmp 0x10006d2bc
xor r8d, r8d
cmp r15d, 2
lea r9, [rsp + 0xb0]
mov rdx, rbx
mov rcx, rbp
sete r8b
call fcn.10006bb8c
test eax, eax
je 0x10006d2b4
mov esi, 0x5c
mov rcx, rbx
jmp 0x10006d260
mov ecx, Ordinal_113
cmp cx, word [rax + 2]
jne 0x10006d25c
inc edi
lea rcx, [rax + 2]
mov edx, esi
call qword [sym.imp.msvcrt.dll_wcschr]
test rax, rax
jne 0x10006d24f
cmp r15d, 1
je 0x10006d27a
lea esi, [rax + 1]
test edi, edi
je 0x10006d27f
mov esi, 7
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
cmp rcx, 0x61a8000
jb 0x10006d2a6
mov edi, 0x80070216
mov edx, 0x7f20138
jmp 0x10006d3ba
mov r12d, dword [rsp + 0xb0]
lea r14d, [rcx + rcx]
jmp 0x10006d2bf
mov r12d, dword [rsp + 0xb0]
mov al, dil
mov rcx, qword [rsp + 0x98]
cmp dword [rcx], 0
je 0x10006d2fe
cmp esi, dword [rcx]
je 0x10006d2fe
cmp esi, 1
jne 0x10006d2e1
cmp dword [rcx], 7
jne 0x10006d2eb
mov esi, 7
jmp 0x10006d358
cmp esi, 7
jne 0x10006d2eb
cmp dword [rcx], 1
je 0x10006d358
mov r8d, 0x8007000d
mov edx, 0x8060138
mov edi, r8d
jmp 0x10006d3bd
cmp esi, 3
jne 0x10006d353
test al, al
jne 0x10006d399
mov rbp, qword [rsp + 0xa8]
lea r9d, [rsi + 5]
mov rdx, r13
mov r8, rbp
mov rcx, rbx
call sub.certcli.dll_Ordinal_223
test eax, eax
je 0x10006d420
lea r9d, [rsi + 4]
mov r8, rbp
mov rdx, r13
mov rcx, rbx
call sub.certcli.dll_Ordinal_223
mov edi, eax
test eax, eax
je 0x10006d420
mov r8d, eax
mov edx, 0x8130138
jmp 0x10006d3bd
cmp esi, 7
jne 0x10006d399
mov rbp, qword [rsp + 0xa8]
mov r9, qword [rsp + 0x90]
mov r8d, dword [rsp + 0x88]
mov rdx, rbx
mov ecx, r15d
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], r13
call fcn.10006cd2c
mov edi, eax
test eax, eax
je 0x10006d420
mov r8d, eax
mov edx, 0x8210138
jmp 0x10006d3bd
mov edx, r14d
xor ecx, ecx
mov edi, r14d
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [r13], rax
test rax, rax
jne 0x10006d3c4
mov edi, 0x8007000e
mov edx, 0x8290138
mov r8d, edi
xor r9d, r9d
xor ecx, ecx
jmp 0x10006d40a
mov rbp, qword [rsp + 0xa8]
mov dword [rbp], r14d
cmp esi, 4
jne 0x10006d3de
mov rax, qword [r13]
mov dword [rax], r12d
jmp 0x10006d420
cmp esi, 3
jne 0x10006d3f1
mov rcx, qword [r13]
mov rax, qword [rsp + 0x38]
mov qword [rcx], rax
jmp 0x10006d420
test r15d, r15d
je 0x10006d411
mov r8d, 0x8007000d
mov edx, 0x83d0138
mov edi, r8d
xor r9d, r9d
mov rcx, rbx
call fcn.1000b51b8
jmp 0x10006d445
mov rcx, qword [r13]
mov r8, rbx
mov rdx, rdi
call fcn.10005f390
mov r9, qword [rsp + 0x98]
mov dword [r9], esi
cmp dword [0x10011bd04], 0
je 0x10006d443
mov r8d, dword [rbp]
mov rdx, qword [r13]
xor ecx, ecx
call fcn.1000afa70
xor edi, edi
mov eax, edi
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret