Function at 0x180048d90
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
xor r13d, r13d
mov r12d, edx
mov rbp, rcx
mov ebx, r13d
test rcx, rcx
je 0x180048fa2
cmp word [rcx], r13w
je 0x180048fa2
lea r14d, [r13 + 0x42]
mov ecx, r14d
lea edx, [r13 + 0x38]
call qword [sym.imp.KERNELBASE.dll_GlobalAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x180048df2
lea ebx, [rax + 8]
jmp 0x180048fa7
mov rcx, rdi
call sym.KERNEL32.dll_GlobalLock
mov rsi, rax
test rax, rax
jne 0x180048e0a
lea ebx, [rax + 8]
jmp 0x180048f91
lea r8, [rsp + 0x60]
mov edx, 0x7fffffff
mov rcx, rbp
call fcn.1800492c8
test eax, eax
jns 0x180048e28
movzx ebx, ax
jmp 0x180048f89
mov rax, qword [rsp + 0x60]
mov dword [rsi + 0x28], r13d
lea edx, [rax + 1]
cmp edx, eax
jb 0x180048f84
lea rax, [rdx + rdx]
mov r15d, edx
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x180048f84
mov edx, eax
mov ecx, r14d
call qword [sym.imp.KERNELBASE.dll_GlobalAlloc]
nop dword [rax + rax]
mov qword [rsi + 0x30], rax
test rax, rax
jne 0x180048e73
lea ebx, [rax + 8]
jmp 0x180048f89
mov rcx, rax
call sym.KERNEL32.dll_GlobalLock
mov r14, rax
test rax, rax
jne 0x180048e8b
lea ebx, [rax + 8]
jmp 0x180048f65
mov r8, rbp
mov rdx, r15
mov rcx, r14
call fcn.18000b370
mov rcx, qword [rsi + 0x30]
mov r15d, eax
call sym.KERNEL32.dll_GlobalUnlock
test r15d, r15d
jns 0x180048eb3
movzx ebx, r15w
jmp 0x180048f65
mov rcx, r14
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
mov ecx, 0xffffffff
cmp eax, ecx
jne 0x180048ee6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jne 0x180048f65
lea ebx, [rax + 2]
jmp 0x180048f65
test al, 0x17
je 0x180048ef1
mov ebx, 0x13
jmp 0x180048f65
xor edx, edx
mov rcx, rbp
lea r8d, [rdx + 3]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LoadLibraryExW]
nop dword [rax + rax]
mov rbp, rax
test rax, rax
jne 0x180048f27
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jne 0x180048f65
mov ebx, 0xc1
jmp 0x180048f65
test r12d, r12d
jne 0x180048f50
lea r9d, [r12 + 0x10]
mov word [rsp + 0x20], r13w
mov r8, rsi
lea rdx, [0x1800477e0]
mov rcx, rbp
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_EnumResourceTypesExW]
nop dword [rax + rax]
mov rcx, rbp
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
cmp dword [rsi + 0x28], r13d
je 0x180048f77
mov rcx, qword [rsi + 0x30]
call qword [sym.imp.KERNELBASE.dll_GlobalFree]
nop dword [rax + rax]
jmp 0x180048f89
mov rcx, rdi
call sym.KERNEL32.dll_GlobalUnlock
mov rax, rdi
jmp 0x180048fb7
mov ebx, 0x216
mov rcx, rdi
call sym.KERNEL32.dll_GlobalUnlock
mov rcx, rdi
call qword [sym.imp.KERNELBASE.dll_GlobalFree]
nop dword [rax + rax]
jmp 0x180048fa7
mov ebx, 0x57
mov ecx, ebx
call qword [sym.imp.ntdll.dll_RtlSetLastWin32Error]
nop dword [rax + rax]
xor eax, eax
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret