Function at 0x100006850
Capabilities:
Check if file exists
Print debug messages

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x8c0
mov rax, qword [0x10000b110]
xor rax, rsp
mov qword [rsp + 0x8b0], rax
mov eax, dword [0x100003ae4]
xor ebp, ebp
mov edi, ecx
mov dword [rsp + 0x70], ecx
lea rcx, [r11 - 0x848]
mov r15, rdx
mov dword [rcx], eax
mov al, byte [0x100003ae8]
mov qword [rsp + 0x98], rdx
mov byte [rcx + 4], al
xor eax, eax
lea r12d, [rbp + 1]
lea rcx, [r11 - 0x836]
xor edx, edx
mov r8d, 0x7fe
mov ebx, ebp
mov r13d, ebp
mov dword [rsp + 0x78], ebp
mov r14b, r12b
mov dword [rsp + 0xa5], eax
mov word [rsp + 0xa9], ax
mov byte [rsp + 0xab], al
mov qword [r11 - 0x860], rbp
mov word [rsp + 0xb0], bp
call sub.msvcrt.dll_memset
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapSetInformation]
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
cmp eax, ebp
je 0x100006930
lea r8, [0x100003aec]
lea edx, [rbp + 0xc]
lea rcx, [rsp + 0xa0]
mov r9d, eax
call fcn.1000046a8
xor ecx, ecx
jmp 0x10000696c
lea rdx, [rsp + 0xa0]
mov ecx, r12d
call qword [sym.imp.msvcrt.dll_setlocale]
lea rdx, [rsp + 0xa0]
mov ecx, 3
call qword [sym.imp.msvcrt.dll_setlocale]
lea rdx, [rsp + 0xa0]
mov ecx, 4
call qword [sym.imp.msvcrt.dll_setlocale]
mov ecx, 5
lea rdx, [rsp + 0xa0]
call qword [sym.imp.msvcrt.dll_setlocale]
xor r8d, r8d
xor edx, edx
mov ecx, 0x100
call qword [sym.imp.KERNEL32.dll_SetThreadPreferredUILanguages]
lea rcx, [0x100014008]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x100013fa8], r12d
cmp dword [0x100013fac], ebp
jne 0x100006a4f
lea rcx, [0x100003e30]
mov qword [0x100013fb8], rbp
call fcn.100007f00
mov rdi, rax
cmp rax, rbp
je 0x1000069cd
mov rcx, rax
call fcn.1000079ec
lea rcx, [0x100003e68]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x100013fb8], rax
cmp rax, rbp
je 0x100006a1c
call fcn.1000073a8
cmp eax, ebp
jl 0x100006a15
mov rax, qword [0x100013fc0]
cmp rax, rbp
je 0x100006a15
mov r8, rdi
mov edx, 0x300f000
xor ecx, ecx
call rax
mov dword [0x100013fac], r12d
mov dword [0x100013fb0], r12d
mov rax, qword [0x100013fb8]
cmp dword [0x100013fac], ebp
jne 0x100006a32
cmp rax, rbp
je 0x100006a32
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp rdi, rbp
je 0x100006a4b
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov edi, dword [rsp + 0x70]
lea rcx, [0x100014008]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r8, [0x100002350]
lea rdx, [0x100003af0]
xor ecx, ecx
call fcn.1000074e8
cmp edi, r12d
jle 0x100006ce6
mov rcx, qword [r15 + 8]
lea rdx, [0x100001e18]
call qword [sym.imp.msvcrt.dll__wcsicmp]
movzx r14d, r14b
cmp eax, ebp
cmove r14d, ebp
xor edx, edx
mov ebp, r12d
mov rsi, rbp
cmp r14b, dl
je 0x100006ccd
movsxd rax, edi
mov qword [rsp + 0x90], rax
cmp rsi, rax
jge 0x100006c9d
mov rax, qword [r15 + rsi*8]
mov r12b, dl
cmp word [rax], 0x2d
je 0x100006ad1
cmp word [rax], 0x2f
jne 0x100006cad
lea eax, [rbp + 1]
mov r13d, edx
mov dword [rsp + 0x84], edx
mov dword [rsp + 0x80], eax
lea rdi, [0x10000b778]
mov rax, qword [0x100013fa0]
mov r15d, dword [rdi - 8]
cmp rax, rdx
jne 0x100006b0b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0x100013fa0], rax
lea r8, [rsp + 0xb0]
mov r9d, 0x400
mov edx, r15d
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x100006bd2
call qword [sym.imp.KERNEL32.dll_GetLastError]
and qword [rsp + 0x30], 0
xor r9d, r9d
mov r13d, eax
lea rax, [0x10000bf40]
xor edx, edx
mov ecx, 0x1200
mov r8d, r13d
mov dword [rsp + 0x28], 0x2000
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp eax, 2
jbe 0x100006b7c
add eax, 0xfffffffe
lea rdx, [0x10000bf40]
mov ecx, eax
xor eax, eax
mov word [rdx + rcx*2], ax
jmp 0x100006ba6
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [0x100003cb0]
lea rcx, [0x10000bf40]
mov dword [rsp + 0x28], eax
mov r9d, r13d
mov edx, 0x2000
mov dword [rsp + 0x20], r13d
call fcn.1000092c2
lea r9, [0x10000bf40]
lea rcx, [0x100003d20]
mov r8d, r13d
mov edx, r15d
call qword [sym.imp.msvcrt.dll_wprintf]
mov r13d, dword [rsp + 0x84]
xor eax, eax
mov word [rsp + 0xb0], ax
mov r15, qword [rsp + 0x98]
lea rdx, [rsp + 0xb0]
mov rcx, qword [r15 + rsi*8]
add rcx, 2
call qword [sym.imp.msvcrt.dll__wcsicmp]
xor edx, edx
cmp eax, edx
jne 0x100006c59
mov rcx, qword [rdi]
or ebx, dword [rdi - 4]
mov r12b, 1
cmp rcx, rdx
je 0x100006c45
mov eax, dword [rsp + 0x80]
cmp dword [rsp + 0x70], eax
jle 0x100006c89
inc eax
inc rsi
inc ebp
mov dword [rsp + 0x80], eax
mov rax, qword [r15 + rsi*8]
mov qword [rcx], rax
mov r9, qword [rdi]
cmp r9, rdx
je 0x100006c45
mov r9, qword [r9]
mov rdx, qword [rdi + 8]
lea r8, [0x100002350]
xor ecx, ecx
call fcn.1000074e8
jmp 0x100006c57
mov rdx, qword [rdi + 8]
lea r8, [0x100002350]
xor ecx, ecx
call fcn.1000074e8
xor edx, edx
inc r13d
add rdi, 0x18
mov dword [rsp + 0x84], r13d
cmp r13d, 0x16
jb 0x100006aec
cmp r12b, dl
je 0x100006cad
mov rax, qword [rsp + 0x90]
inc ebp
inc rsi
jmp 0x100006ab1
mov ecx, 0x400003e8
call fcn.100007294
mov eax, 0x57
jmp 0x10000725d
xor ebp, ebp
cmp r12b, bpl
je 0x100006caf
mov edi, dword [rsp + 0x70]
mov r13d, ebp
jmp 0x100006ccf
xor ebp, ebp
mov ecx, 0x400003e8
call fcn.100007294
mov r13d, dword [rsp + 0x78]
mov dword [0x100013f44], 0x57
jmp 0x1000070b3
xor ebp, ebp
bt ebx, 0x1e
jb 0x100006d2f
bt ebx, 0x1f
jb 0x100006d2f
mov r12d, 1
cmp r14b, bpl
je 0x100006d13
mov r9, qword [0x100013f78]
mov edx, ebx
mov ecx, ebx
shr edx, 6
shr ecx, 7
mov r8d, ebx
and dl, r12b
and cl, r12b
call fcn.100006700
mov dword [0x100013f44], eax
cmp eax, ebp
jne 0x1000070b3
mov rcx, qword [0x100013f88]
cmp rcx, rbp
je 0x100006d52
call fcn.1000051f8
mov dword [0x100013f44], eax
jmp 0x1000070b3
mov ecx, 0x400003e8
call fcn.100007294
shr ebx, 0x1f
test bl, 1
je 0x100006d4b
mov ecx, 0x400003e9
call fcn.100007294
xor eax, eax
jmp 0x10000725d
test bl, 4
je 0x100006e9a
mov r11, qword [0x100013f48]
cmp r11, rbp
je 0x100006e65
mov rsi, qword [0x100013f50]
cmp rsi, rbp
je 0x100006e65
mov rbp, qword [0x100013f68]
xor eax, eax
cmp rbp, rax
je 0x100006e63
mov r9d, ebx
mov r8d, ebx
mov r10b, bl
shr r9d, 9
shr r8d, 8
mov edx, ebx
and r9b, r12b
shr edx, 3
and r8b, r12b
and dl, r12b
mov ecx, ebx
and r10b, r12b
mov byte [rsp + 0x60], r10b
mov byte [rsp + 0x58], r9b
mov r9, qword [0x100013f60]
mov byte [rsp + 0x50], r8b
mov r8, qword [0x100013f58]
shr ecx, 5
and cl, r12b
mov eax, ebx
mov edi, ebx
shr eax, 4
shr edi, 7
and al, r12b
and dil, r12b
mov byte [rsp + 0x48], dil
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x38], cl
mov byte [rsp + 0x30], al
lea rax, [rsp + 0x88]
mov rdx, rsi
mov rcx, r11
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rax
call fcn.100004df4
xor ebp, ebp
mov dword [0x100013f44], eax
cmp eax, ebp
je 0x100006e27
mov edx, eax
mov ecx, 0x40000413
jmp 0x100006e90
test bl, 8
je 0x100006e54
mov r8, qword [rsp + 0x88]
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r8
repne scasw ax, word [rdi]
not rcx
sub rcx, r12
lea rdx, [rcx + rcx]
mov ecx, 0x40000414
call fcn.100007294
mov ecx, 0x4000040d
call fcn.100007294
jmp 0x1000070b3
xor ebp, ebp
lea r8, [0x100002350]
lea rdx, [0x1000026e0]
mov ecx, r12d
mov dword [0x100013f44], 0x57
call fcn.1000074e8
mov edx, dword [0x100013f44]
mov ecx, 0x40000412
call fcn.100007294
jmp 0x1000070b3
test bl, 0x40
je 0x100006f1e
mov rax, qword [rsp + 0x88]
mov r9, qword [0x100013f78]
mov edx, ebx
mov qword [rsp + 0x28], rax
mov rax, qword [0x100013f70]
shr edx, 7
mov cl, bl
mov edi, ebx
and dl, r12b
and edi, 0x800
and cl, r12b
mov qword [rsp + 0x20], rax
mov r8d, edi
shl r8d, 0x13
call fcn.10000535c
mov dword [0x100013f44], eax
cmp eax, ebp
je 0x100006ef3
mov edx, eax
mov ecx, 0x40000415
jmp 0x100006e90
test r12b, bl
je 0x100006f02
mov ecx, 0x40000416
jmp 0x100006e59
mov ecx, 0x40000417
call fcn.100007294
cmp edi, ebp
je 0x1000070b3
mov ecx, 0x4000040b
jmp 0x100006e59
call fcn.10000558c
mov dword [0x100013f44], eax
cmp eax, ebp
jne 0x1000070b3
cmp byte [0x100013f42], bpl
je 0x100006f90
cmp r14b, bpl
je 0x100006f62
cmp edi, r12d
jle 0x100006f62
mov ecx, 0x400003e8
mov dword [0x100013f44], 0x57
call fcn.100007294
mov ecx, 0x400003e9
jmp 0x100006e59
call fcn.1000050a4
mov dword [0x100013f44], eax
cmp r14b, bpl
je 0x1000070b3
cmp eax, ebp
je 0x100006f86
mov edx, eax
mov ecx, 0x40000418
jmp 0x100006e90
mov ecx, 0x40000419
jmp 0x100006e59
mov rcx, qword [0x10000b730]
cmp rcx, rbp
je 0x100006fb7
lea rdx, [0x100002828]
call qword [sym.imp.msvcrt.dll__wcsicmp]
cmp eax, ebp
jne 0x100006fb7
mov ecx, 0x2000ffff
call fcn.100006434
mov edx, ebx
and bl, r12b
shr edx, 1
mov cl, bl
and dl, r12b
call fcn.100005a58
mov dword [0x100013f44], eax
cmp eax, ebp
je 0x1000070b3
mov rcx, qword [0x10000b730]
cmp rcx, rbp
je 0x1000070b3
lea rdx, [0x100002828]
call qword [sym.imp.msvcrt.dll__wcsicmp]
cmp eax, ebp
jne 0x1000070b3
mov rcx, qword [0x10000b750]
mov edi, ebp
cmp rcx, rbp
je 0x100007061
lea rdx, [0x100003b04]
call qword [sym.imp.msvcrt.dll__wcsicmp]
cmp eax, ebp
je 0x100007061
mov r8, qword [0x10000b750]
lea rdx, [0x100003b10]
xor ecx, ecx
call fcn.1000074e8
mov rcx, qword [0x10000b750]
call qword [sym.imp.msvcrt.dll__wtoi]
mov edi, eax
cmp eax, ebp
je 0x100007061
cmp eax, dword [0x100013f44]
je 0x100007054
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, eax
jne 0x1000070aa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, edi
cmp edi, eax
je 0x100007068
mov r9d, dword [0x100013f44]
lea rax, [0x100001dcc]
lea r8, [0x100003b58]
cmp edi, ebp
cmove r8, rax
lea rdx, [0x100003b70]
xor ecx, ecx
call fcn.1000074e8
mov byte [0x100013f43], r12b
cmp byte [0x7ffe02d4], bpl
je 0x10000709e
int3
lea rcx, [0x100003a80]
call sub.ntdll.dll_DbgPrint
cmp edi, ebp
jne 0x1000070b3
call fcn.1000062a8
call fcn.100006624
mov r11, qword [0x10000b6f0]
cmp r11, rbp
je 0x1000070de
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r11
repne scasw ax, word [rdi]
mov rdi, r11
not rcx
dec rcx
add rcx, rcx
rep stosb byte [rdi], al
mov rdx, qword [0x10000b650]
cmp rdx, rbp
je 0x100007104
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rdx
repne scasw ax, word [rdi]
mov rdi, rdx
not rcx
dec rcx
add rcx, rcx
rep stosb byte [rdi], al
mov rcx, qword [0x100013f90]
call sub.netutils.dll_NetApiBufferFree
cmp r14b, bpl
jne 0x100007182
mov r9d, dword [0x100013f44]
cmp r9d, ebp
je 0x10000713e
lea r8, [0x100002350]
lea rdx, [0x100003bd0]
mov ecx, 1
call fcn.1000074e8
mov r13d, ebp
jmp 0x100007144
mov r13d, 1
lea rdi, [0x10000b610]
mov ebx, 0xb
mov rcx, qword [rdi]
cmp rcx, rbp
je 0x10000715e
call qword [sym.imp.msvcrt.dll_free]
add rdi, 0x20
sub rbx, 1
jne 0x100007150
lea r8, [0x100002350]
lea rdx, [0x100003c18]
mov r9d, r13d
xor ecx, ecx
call fcn.1000074e8
jmp 0x1000071d9
cmp dword [rsp + 0x70], 1
jle 0x1000071d9
mov r8d, dword [0x100013f44]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x30], rbp
xor r9d, r9d
xor edx, edx
mov ecx, 0x1100
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp eax, ebp
jbe 0x1000071ce
mov rdx, qword [rsp + 0x78]
lea rcx, [0x100003c4c]
call qword [sym.imp.msvcrt.dll_printf]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea rcx, [0x100014008]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [0x100013fa8]
dec edx
mov dword [0x100013fa8], edx
cmp dword [0x100013fac], ebp
je 0x100007242
cmp edx, ebp
jne 0x100007242
mov rcx, qword [0x100013fb8]
cmp rcx, rbp
je 0x100007242
cmp dword [0x100013fb0], ebp
je 0x100007229
mov rax, qword [0x100013fc8]
cmp rax, rbp
je 0x100007229
call rax
mov rcx, qword [0x100013fb8]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x100013fb8], rbp
mov dword [0x100013fac], ebp
mov dword [0x100013fb0], ebp
lea rcx, [0x100014008]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp r14b, bpl
cmovne r13d, dword [0x100013f44]
mov eax, r13d
mov rcx, qword [rsp + 0x8b0]
xor rcx, rsp
call fcn.100009290
lea r11, [rsp + 0x8c0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret