Function at 0x445ba0
Capabilities:
Get file attributes

Disassembly:
push rbp
sub rsp, 0x380
lea rbp, [rsp + 0x80]
mov qword [rbp - 8], rcx
mov qword [rbp + 0x18], rcx
vmovdqa xmm0, xmmword [0x0047f3f0]
vmovdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x38], 0x4d430001
lea rax, [rbp + 0x20]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], 0x10
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
xor eax, eax
mov edx, eax
mov qword [rbp + 8], rdx
lea rax, [rbp + 0x38]
mov qword [rbp], rax
rol rdi, 3
rol rdi, 0xd
rol rdi, 0x3d
rol rdi, 0x33
xchg rbx, rbx
mov rax, qword [rbp]
mov rdx, qword [rbp + 8]
movabs r8, 0xaaaaaaaaaaaaaaaa
mov qword [rbp + 0x68], r8
mov qword [rbp + 0x38], 0x4d430001
lea r8, [rbp + 0x68]
mov qword [rbp + 0x40], r8
mov qword [rbp + 0x48], 8
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
rol rdi, 3
rol rdi, 0xd
rol rdi, 0x3d
rol rdi, 0x33
xchg rbx, rbx
mov rdx, qword [rbp + 0x10]
mov rax, rsp
mov dword [rax + 0x20], 4
mov r9d, 8
call sub.ntdll.dll_NtQueryVolumeInformationFile
mov dword [rbp + 0x70], eax
test eax, eax
je 0x445d6b
jmp 0x445d60
lea rdx, [0x004826e0]
lea rcx, [rbp + 0x74]
mov qword [rbp - 0x20], rcx
mov r8d, 0x20c
call fcn.0047b930
mov rcx, qword [rbp - 8]
mov r8, qword [rbp - 0x20]
vmovdqa xmm0, xmmword [0x0047f3f0]
vmovdqa xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x38], 0x4d430001
lea rax, [rbp + 0x280]
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], 0x10
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
xor eax, eax
mov edx, eax
lea rax, [rbp + 0x38]
rol rdi, 3
rol rdi, 0xd
rol rdi, 0x3d
rol rdi, 0x33
xchg rbx, rbx
mov rdx, qword [rbp - 0x18]
mov rax, rsp
mov dword [rax + 0x20], 9
mov r9d, 0x20c
call sub.ntdll.dll_NtQueryInformationFile
mov dword [rbp + 0x294], eax
mov ecx, eax
mov dword [rbp - 0xc], ecx
sub eax, 0xc000000d
je 0x445da7
jmp 0x445d4f
mov eax, dword [rbp - 0xc]
test eax, eax
je 0x445da5
jmp 0x445d9a
cmp dword [rbp + 0x68], 0x11
jne 0x445d72
jmp 0x445d7d
xor eax, eax
add rsp, 0x380
pop rbp
ret
jmp 0x445d58
jmp 0x445c9e
xor eax, eax
add rsp, 0x380
pop rbp
ret
jmp 0x445d6d
lea rax, [rbp + 0x74]
mov qword [rbp + 0x298], rax
mov eax, dword [rbp + 0x74]
add eax, 4
mov dword [rbp - 0x24], eax
setb al
jb 0x445dc4
jmp 0x445de1
xor eax, eax
add rsp, 0x380
pop rbp
ret
jmp 0x445d7f
lea rcx, str.reached_unreachable_code
mov edx, 0x18
xor eax, eax
mov r8d, eax
lea r9, [0x004828f0]
call fcn.00401080
lea rcx, str.integer_overflow
mov edx, 0x10
xor eax, eax
mov r8d, eax
lea r9, [0x0047fd28]
call fcn.00401080
mov eax, dword [rbp - 0x24]
lea rcx, [rbp + 0x74]
add rcx, 4
mov qword [rbp - 0x38], rcx
mov eax, eax
mov ecx, eax
mov qword [rbp - 0x30], rcx
mov eax, 4
cmp rax, rcx
jbe 0x445e1d
jmp 0x445e1f
mov rax, qword [rbp - 0x30]
mov rcx, rax
sub rcx, 4
mov qword [rbp - 0x40], rcx
cmp rax, 0x20c
jbe 0x445e3d
jmp 0x445e3f
jmp 0x445e04
mov rdx, qword [rbp - 0x30]
mov ecx, 4
call fcn.00406e80
mov rcx, qword [rbp - 0x30]
mov eax, 4
cmp rax, rcx
jbe 0x445eb8
jmp 0x445eba
jmp 0x445e2d
mov rcx, qword [rbp - 0x30]
mov edx, 0x20c
call fcn.00405eb0
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 0x2a8], rdx
mov qword [rbp + 0x2a0], rcx
call fcn.0044e2e0
mov rcx, rdx
mov qword [rbp - 0x50], rcx
mov rcx, rax
mov qword [rbp - 0x48], rcx
mov qword [rbp + 0x2b8], rdx
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0x2c8], rdx
mov qword [rbp + 0x2c0], rax
mov rcx, qword [rbp + 0x2c0]
mov rdx, qword [rbp + 0x2c8]
lea r8, str.msys_cygwin__pty
mov r9d, 6
call fcn.0044e3b0
test al, 1
jne 0x445ed4
jmp 0x445edb
jmp 0x445e4d
mov rdx, qword [rbp - 0x30]
mov ecx, 4
call fcn.00405eb0
mov al, byte [rbp - 0x51]
test al, 1
jne 0x445f22
jmp 0x445f72
mov al, 1
mov byte [rbp - 0x51], al
jmp 0x445ec8
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov qword [rbp + 0x2d0], rcx
mov qword [rbp + 0x2d8], rax
mov rcx, qword [rbp + 0x2d0]
mov rdx, qword [rbp + 0x2d8]
lea r8, [0x004ba50e]
mov r9d, 8
call fcn.0044e3b0
mov byte [rbp - 0x51], al
jmp 0x445ec8
mov al, byte [rbp - 0x52]
add rsp, 0x380
pop rbp
ret
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov qword [rbp + 0x2e0], rcx
mov qword [rbp + 0x2e8], rax
mov rdx, qword [rbp + 0x2e0]
mov r8, qword [rbp + 0x2e8]
lea r9, [0x004ba51e]
mov eax, 4
lea rcx, [rbp + 0x2f0]
mov qword [rsp + 0x20], rax
call fcn.0044e4b0
cmp byte [rbp + 0x2f8], 0
setne al
mov byte [rbp - 0x52], al
jmp 0x445f16
xor eax, eax
mov byte [rbp - 0x52], al
jmp 0x445f16