Function at 0x1800b38e0
Capabilities:
Get file attributes

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1960
call fcn.180124410
sub rsp, rax
mov qword [rsp + 0xb8], 0xfffffffffffffffe
mov qword [rsp + 0x19b8], rbx
mov rax, qword [0x1801dc960]
xor rax, rsp
mov qword [rsp + 0x1950], rax
mov r15, r8
mov rbx, rdx
mov r13, rcx
lea rdx, [sym.vrvhook64.dll_MyCopyItems]
lea rcx, [0x18028d500]
call fcn.18000dae0
mov rdi, rax
test rax, rax
jne 0x1800b394b
lea eax, [rdi + 1]
jmp 0x1800b42c2
mov rcx, rax
call fcn.18000d7e0
mov r14, rax
cmp dword [0x18025caa4], 0
jne 0x1800b3970
mov r8, r15
mov rdx, rbx
mov rcx, r13
call r14
jmp 0x1800b42c2
mov rcx, rdi
call fcn.180083ad0
test eax, eax
je 0x1800b398d
mov r8, r15
mov rdx, rbx
mov rcx, r13
call r14
jmp 0x1800b42c2
cmp qword [0x1801deeb0], 0
jne 0x1800b39a8
mov r8, r15
mov rdx, rbx
mov rcx, r13
call r14
jmp 0x1800b42c2
cmp dword [0x1801e68d0], 0
jne 0x1800b3a01
cmp dword [0x180220ad8], 0
jne 0x1800b3a01
cmp dword [0x1802210f4], 0
jne 0x1800b3a01
cmp dword [0x1801e3950], 0
jne 0x1800b3a01
cmp dword [0x180221ea4], 0
jne 0x1800b3a01
cmp dword [0x180254528], 0
jne 0x1800b3a01
cmp dword [0x1802552e8], 0
jne 0x1800b3a01
cmp dword [0x18021adec], 0
jne 0x1800b3a01
mov r8, r15
mov rdx, rbx
mov rcx, r13
call r14
jmp 0x1800b42c2
xor esi, esi
mov edi, esi
mov dword [rsp + 0x44], esi
lea rcx, [0x1801dc900]
mov rax, qword [0x1801dc900]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x40], esi
mov qword [rsp + 0x70], rsi
mov rax, qword [r15]
lea r8, [rsp + 0x70]
mov edx, 0x80058000
mov rcx, r15
call qword [rax + 0x28]
mov byte [rsp + 0x1730], sil
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x1731]
call fcn.1800f4fb0
or rbp, 0xffffffffffffffff
mov r8, qword [rsp + 0x70]
test r8, r8
je 0x1800b3a96
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x104
lea rax, [rsp + 0x1730]
mov qword [rsp + 0x20], rax
mov r9d, ebp
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test rbx, rbx
je 0x1800b424a
mov rax, qword [rbx]
lea r8, [rsp + 0xc0]
lea rdx, [0x18016c650]
mov rcx, rbx
call qword [rax]
mov qword [rsp + 0x68], rsi
mov byte [rsp + 0x1840], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x1841]
call fcn.1800f4fb0
lea rdx, [rsp + 0x1840]
mov rcx, rbx
call fcn.180067b20
test eax, eax
je 0x1800b3d72
lea rdx, [rsp + 0x1730]
lea rcx, [rsp + 0x1840]
call fcn.18009c9c0
lea r8, [rsp + 0x1730]
lea rdx, [rsp + 0x1840]
lea rcx, [rsp + 0x58]
call fcn.18009d0e0
mov r12d, 1
test eax, eax
cmovne edi, r12d
cmp dword [0x1802552e8], r12d
jne 0x1800b3c46
movzx ecx, byte [rsp + 0x1730]
call fcn.180068530
test eax, eax
jne 0x1800b3b5e
movzx ecx, byte [rsp + 0x1730]
call fcn.180068680
test eax, eax
je 0x1800b3c46
movzx ecx, byte [rsp + 0x1840]
call fcn.180068860
test eax, eax
jne 0x1800b3b84
lea rcx, [rsp + 0x1840]
call fcn.180068940
test eax, eax
je 0x1800b3c46
call fcn.1800a79a0
cmp qword [0x1801e1b30], 0
je 0x1800b3c46
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b3ba8
mov rax, qword [rcx]
call qword [rax]
lea rcx, [rsp + 0x1840]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 0x10
je 0x1800b3c20
mov dword [rsp + 0x44], esi
lea rdx, [rsp + 0x44]
lea rcx, [rsp + 0x1840]
call fcn.180068110
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x44], 0
jne 0x1800b3bf4
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b3c46
mov rax, qword [rcx]
call qword [rax + 8]
cmp dword [rsp + 0x44], 0
je 0x1800b3c46
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x1730]
lea rcx, [rsp + 0x1840]
call fcn.18009e000
mov ecx, esi
test eax, eax
setne cl
mov dword [rsp + 0x40], ecx
jmp 0x1800b3c46
xor r8d, r8d
lea rdx, [rsp + 0x1730]
lea rcx, [rsp + 0x1840]
call fcn.18009d740
mov ecx, dword [rsp + 0x40]
test eax, eax
cmove ecx, r12d
mov dword [rsp + 0x40], ecx
cmp dword [0x180254528], r12d
jne 0x1800b3d55
lea rcx, [rsp + 0x1730]
call fcn.180068940
test eax, eax
je 0x1800b3d55
call fcn.1800a79a0
cmp qword [0x1801e1b30], 0
je 0x1800b3f35
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b3c8c
mov rax, qword [rcx]
call qword [rax]
lea rcx, [rsp + 0x1840]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 0x10
je 0x1800b3d2b
mov dword [rsp + 0x50], esi
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1840]
call fcn.180067f00
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x50], 0
jne 0x1800b3ce4
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b3f35
mov rax, qword [rcx]
call qword [rax + 8]
cmp dword [rsp + 0x50], 0
je 0x1800b3f35
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x64]
lea rdx, [rsp + 0x1730]
lea rcx, [rsp + 0x1840]
call fcn.1800b3210
test eax, eax
je 0x1800b3d22
mov edx, 0x9428
lea rcx, [0x180165e38]
call fcn.18005cd20
mov dword [rsp + 0x40], r12d
jmp 0x1800b3f35
mov dword [rsp + 0x40], esi
jmp 0x1800b3f35
xor r8d, r8d
lea rdx, [rsp + 0x1730]
lea rcx, [rsp + 0x1840]
call fcn.1800a0910
test eax, eax
jne 0x1800b3f35
mov dword [rsp + 0x40], r12d
jmp 0x1800b3f35
lea r8, [rsp + 0x1730]
lea rdx, [rsp + 0x1840]
mov rcx, r13
call fcn.180067da0
jmp 0x1800b3f35
mov rax, qword [rbx]
lea r8, [rsp + 0x68]
lea rdx, [0x18016d380]
mov rcx, rbx
call qword [rax]
test eax, eax
jne 0x1800b424a
mov eax, 0xf
mov word [rsp + 0x98], ax
mov qword [rsp + 0xa0], rsi
mov r12d, 1
mov dword [rsp + 0xa8], r12d
mov dword [rsp + 0xac], ebp
mov dword [rsp + 0xb0], r12d
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1800b424a
mov rax, qword [rcx]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x98]
call qword [rax + 0x18]
test eax, eax
js 0x1800b424a
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
mov rcx, qword [rsp + 0x80]
call qword [0x1801deeb0]
mov edi, eax
test eax, eax
je 0x1800b3f18
lea rdx, [rsp + 0x1730]
mov rcx, qword [rsp + 0x80]
call fcn.18009cd60
lea r9, [rsp + 0x1730]
mov r8, qword [rsp + 0x80]
mov edx, edi
lea rcx, [rsp + 0x58]
call fcn.18009d330
mov ecx, dword [rsp + 0x44]
test eax, eax
cmovne ecx, r12d
mov dword [rsp + 0x44], ecx
cmp dword [0x1802552e8], r12d
jne 0x1800b3ea8
movzx ecx, byte [rsp + 0x1730]
call fcn.180068530
test eax, eax
jne 0x1800b3e74
movzx ecx, byte [rsp + 0x1730]
call fcn.180068680
test eax, eax
je 0x1800b3ea8
call fcn.1800a79a0
cmp qword [0x1801e1b30], 0
je 0x1800b3ea8
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x80]
mov ecx, edi
call fcn.1800b34e0
mov ecx, dword [rsp + 0x40]
test eax, eax
cmovne ecx, r12d
mov dword [rsp + 0x40], ecx
cmp dword [0x180254528], r12d
jne 0x1800b3ef3
lea rcx, [rsp + 0x1730]
call fcn.180068940
test eax, eax
je 0x1800b3ef3
call fcn.1800a79a0
cmp qword [0x1801e1b30], 0
je 0x1800b3f18
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x80]
mov ecx, edi
call fcn.1800b2e30
test eax, eax
je 0x1800b3f18
mov dword [rsp + 0x40], r12d
jmp 0x1800b3f18
lea rax, [rsp + 0x1730]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x80]
mov r8d, edi
lea rdx, [rsp + 0x58]
mov rcx, r13
call fcn.18009d510
mov rax, qword [0x1801dee98]
test rax, rax
je 0x1800b3f31
lea rcx, [rsp + 0x78]
call rax
mov edi, dword [rsp + 0x44]
jmp 0x1800b3f35
mov edi, dword [rsp + 0x44]
test edi, edi
je 0x1800b424a
mov dword [rsp + 0xd0], 2
mov r9, qword [rsp + 0x58]
lea r8, [0x180153a08]
mov edx, 0x1450
lea rcx, [rsp + 0xd4]
call fcn.1800f5158
lea rcx, [0x1801dc900]
mov rax, qword [0x1801dc900]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
lea rcx, [rsp + 0x1730]
lea rax, [rsp + 0x1730]
test rax, 0xffffffffffff0000
jne 0x1800b3fc7
movzx edi, cx
xor edx, edx
mov ecx, edi
call fcn.180001960
test rax, rax
je 0x1800b40bf
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.180003400
mov rbx, qword [rsp + 0x48]
jmp 0x1800b40bf
xor eax, eax
mov rcx, rbp
lea rdi, [rsp + 0x1730]
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
jne 0x1800b403f
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x1800b40bf
cmp dword [rdx + 0x10], eax
jge 0x1800b4012
cmp dword [rbx - 0xc], eax
jge 0x1800b4008
mov ecx, 0x80070057
call fcn.180001700
int3
mov dword [rbx - 0x10], esi
mov byte [rbx], al
jmp 0x1800b40bf
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800b4028
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
jmp 0x1800b40bf
mov r13d, dword [rbx - 0x10]
lea r14, [rsp + 0x1730]
sub r14, rbx
mov ecx, r12d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x1800b406e
mov edx, edi
lea rcx, [rsp + 0x48]
call fcn.180002910
mov rbx, qword [rsp + 0x48]
cmp r14, r13
ja 0x1800b408b
movsxd r13, edi
lea r8, [r14 + rbx]
movsxd rdx, dword [rbx - 0xc]
mov r9, r13
mov rcx, rbx
call fcn.1800f6010
jmp 0x1800b40a5
movsxd r13, edi
movsxd rdx, dword [rbx - 0xc]
mov r9, r13
lea r8, [rsp + 0x1730]
mov rcx, rbx
call fcn.1800f5f78
test edi, edi
js 0x1800b423f
cmp edi, dword [rbx - 0xc]
jg 0x1800b423f
mov dword [rbx - 0x10], edi
mov byte [r13 + rbx], 0
nop
movzx eax, byte [rsp + rsi + 0x1730]
mov byte [rsp + rsi + 0x1524], al
inc rsi
test al, al
jne 0x1800b40c0
xor eax, eax
mov rcx, rbp
lea rdi, [rsp + 0x1524]
repne scasb al, byte [rdi]
not rcx
dec rcx
cmp rcx, 3
ja 0x1800b4107
cmp byte [rsp + rcx + 0x1523], 0x5c
jne 0x1800b4107
mov byte [rsp + rcx + 0x1523], al
jmp 0x1800b41f1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0x10
je 0x1800b41da
mov edx, 0x5c
mov rcx, rbx
call fcn.1800f6344
test rax, rax
je 0x1800b41da
sub eax, ebx
cmp eax, 0xffffffff
je 0x1800b41da
mov r9d, eax
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x48]
call fcn.180003b80
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1800b41ac
cmp dword [rbx + 0x10], 0
jl 0x1800b419d
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1800b419d
call fcn.180002880
mov rdi, rax
mov ecx, ebp
lock xadd dword [rbx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x1800b4192
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x48], rax
jmp 0x1800b41ac
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x48]
call fcn.180003320
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800b41d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x48]
jmp 0x1800b41da
mov rbx, qword [rsp + 0x48]
mov r8, rbx
lea rdx, [0x180153a08]
lea rcx, [rsp + 0x1524]
call fcn.1800f509c
lea rcx, [rsp + 0xd0]
call fcn.180068390
nop
lea rdx, [rbx - 0x18]
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1800b421a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebp
dec ebp
test ebp, ebp
jg 0x1800b4237
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, r12d
jmp 0x1800b42c2
mov ecx, 0x80070057
call fcn.180001700
nop
cmp dword [rsp + 0x40], 0
je 0x1800b4284
mov edx, 0x94b7
lea rcx, [0x180165e10]
call fcn.18005cd20
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebp
dec ebp
test ebp, ebp
jg 0x1800b4280
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
jmp 0x1800b42c2
mov edx, 0x94bb
lea rcx, [0x180165de8]
call fcn.18005cd20
mov r8, r15
mov rdx, rbx
mov rcx, r13
call r14
mov edi, eax
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebp
dec ebp
test ebp, ebp
jg 0x1800b42c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, edi
mov rcx, qword [rsp + 0x1950]
xor rcx, rsp
call fcn.1800f4f80
mov rbx, qword [rsp + 0x19b8]
add rsp, 0x1960
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret