Function at 0x14001a5c0
Capabilities:
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
movaps xmmword [rsp + 0x180], xmm7
movaps xmmword [rsp + 0x170], xmm6
mov rbp, rcx
mov rax, qword [0x140145040]
xor rax, rsp
mov qword [rsp + 0x168], rax
lea rcx, str.EnforceNoExecutableFileHandles
call fcn.140085a50
mov dil, 1
test al, al
je 0x14001a70d
call fcn.140012af0
mov rax, qword [0x140157838]
cmp dword [rax], 0
je 0x14001a70d
movabs rsi, 0xaaaaaaaaaaaaaaaa
lea rcx, [rsp + 0x60]
mov qword [rcx + 0x10], rsi
movaps xmm6, xmmword [0x1401213c0]
movaps xmmword [rcx], xmm6
mov rdx, rbp
call fcn.140059840
xorps xmm0, xmm0
lea rdx, [rsp + 0x100]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov ecx, 6
call fcn.1400264a0
test al, al
je 0x14001a91d
mov ecx, 0x18
call fcn.1400b4d4c
mov rdi, rax
mov r13, rax
add r13, 0x18
cmp byte [rsp + 0x117], 0
jns 0x14001a904
mov rdx, qword [rsp + 0x100]
mov r8, qword [rsp + 0x108]
mov rcx, rdi
call fcn.140007fc0
jmp 0x14001a922
mov rcx, qword [rbx - 0x18]
call fcn.1400b4d44
add rbx, 0xffffffffffffffe8
cmp rbx, r14
je 0x14001a6e9
cmp byte [rbx - 1], 0
js 0x14001a6b0
jmp 0x14001a6b9
xor dil, 1
cmp byte [rsp + 0x57], 0
jns 0x14001a6df
mov rcx, qword [rsp + 0x40]
call fcn.1400b4d44
test r14, r14
je 0x14001a6f1
cmp r14, rbx
jne 0x14001a6c2
mov rcx, r14
call fcn.1400b4d44
cmp byte [rsp + 0x77], 0
jns 0x14001a702
mov rcx, qword [rsp + 0x60]
call fcn.1400b4d44
test dil, dil
je 0x14001a7eb
xor edi, edi
mov rcx, qword [rsp + 0x168]
xor rcx, rsp
call fcn.1400b7310
mov eax, edi
movaps xmm6, xmmword [rsp + 0x170]
movaps xmm7, xmmword [rsp + 0x180]
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0x108], rsi
call fcn.1400b4d44
jmp 0x14001a70d
mov dil, 1
jmp 0x14001a6ce
add rbx, 0x18
test rdi, rdi
je 0x14001a77b
mov rcx, rdi
call fcn.1400b4d44
jmp 0x14001a77b
mov r14, rdi
mov rbx, r13
cmp r14, rbx
je 0x14001a75a
lea r15, [rsp + 0x100]
lea r12, [rsp + 0x60]
mov r13, r14
jmp 0x14001a7b4
mov rcx, qword [rsp + 0x100]
call fcn.1400b4d44
add r13, 0x18
cmp r13, rbx
sete al
or al, dil
cmp al, 1
je 0x14001a6ca
mov qword [rsp + 0x110], rsi
movaps xmmword [rsp + 0x100], xmm6
mov rcx, r15
mov rdx, r13
call fcn.140059840
mov rcx, r15
mov rdx, r12
xor r8d, r8d
call fcn.1400283a0
mov edi, eax
cmp byte [rsp + 0x117], 0
js 0x14001a792
jmp 0x14001a79f
lea rdi, [rsp + 0x100]
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov ecx, 0x18
call fcn.1400b4d4c
lea rbx, [rsp + 0xa0]
mov qword [rbx], rax
lea rcx, [rax + 0x18]
mov qword [rbx + 0x10], rcx
mov qword [rax], 0x440057
mov byte [rax + 0x17], 2
mov qword [rbx + 8], rcx
mov rcx, rdi
mov rdx, rbx
call fcn.140064100
mov rsi, qword [rbx]
test rsi, rsi
je 0x14001a87a
mov rdi, qword [rsp + 0xa8]
mov rcx, rsi
cmp rdi, rsi
jne 0x14001a85d
jmp 0x14001a86d
mov rcx, qword [rdi - 0x18]
call fcn.1400b4d44
add rdi, 0xffffffffffffffe8
cmp rdi, rsi
je 0x14001a865
cmp byte [rdi - 1], 0
jns 0x14001a854
jmp 0x14001a84b
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0xa8], rsi
call fcn.1400b4d44
cmp byte [rsp + 0x118], 0
je 0x14001afa3
mov dword [rsp + 0x28], 2
mov byte [rsp + 0x20], 0
lea rbx, [rsp + 0x100]
mov rcx, rbp
mov rdx, rbx
mov r8d, 0x20
xor r9d, r9d
call fcn.140027e60
mov edi, eax
cmp byte [rbx + 0x18], 0
je 0x14001a70d
mov rsi, qword [rsp + 0x100]
test rsi, rsi
je 0x14001a70d
mov rbx, qword [rsp + 0x108]
mov rcx, rsi
cmp rbx, rsi
jne 0x14001a8f9
jmp 0x14001a74b
mov qword [rbx - 0x10], rcx
call fcn.1400b4d44
add rbx, 0xffffffffffffffe8
cmp rbx, rsi
je 0x14001a743
mov rcx, qword [rbx - 0x18]
test rcx, rcx
jne 0x14001a8e3
jmp 0x14001a8ec
mov rax, qword [rsp + 0x110]
mov qword [rdi + 0x10], rax
movaps xmm0, xmmword [rsp + 0x100]
movups xmmword [rdi], xmm0
jmp 0x14001a939
xor edi, edi
xor r13d, r13d
cmp byte [rsp + 0x117], 0
jns 0x14001a939
mov rcx, qword [rsp + 0x100]
call fcn.1400b4d44
xorps xmm7, xmm7
movaps xmmword [rsp + 0x40], xmm7
mov qword [rsp + 0x50], 0
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x14001a775
lea rbx, [rsp + 0xa0]
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
lea rdx, str.GetSecureSystemTemp
lea r8, str....._base_files_file_util_win.cc
lea r14, [rsp + 0x100]
mov rcx, r14
mov r9d, 0x2b9
call fcn.1400754d0
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
call fcn.140098080
lea rbx, [rsp + 0x80]
movaps xmmword [rbx], xmm7
mov qword [rbx + 0x10], 0
mov ecx, 0x65
mov rdx, rbx
call fcn.1400264a0
test al, al
mov qword [rsp + 0x38], rbp
je 0x14001ab17
lea rax, [0x140130494]
lea rdx, [rsp + 0x148]
mov qword [rdx], rax
mov qword [rdx + 8], 0xa
mov rcx, r14
call fcn.1400a9d80
movzx eax, byte [rsp + 0x117]
test al, al
jns 0x14001aa0c
mov rax, qword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
lea r8, [rsp + 0x158]
mov qword [r8], r14
mov qword [r8 + 8], rax
lea r14, [rsp + 0x80]
lea rdx, [rsp + 0xe0]
mov rcx, r14
call fcn.14002a9b0
cmp byte [rsp + 0x117], 0
jns 0x14001aa4a
mov rcx, qword [rsp + 0x100]
call fcn.1400b4d44
cmp byte [rsp + 0x97], 0
jns 0x14001aa61
mov rcx, qword [rsp + 0x80]
call fcn.1400b4d44
lea r15, [rsp + 0xe0]
mov rax, qword [r15 + 0x10]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [r15]
movaps xmmword [rsp + 0x80], xmm0
lea r12, [rsp + 0x100]
movaps xmmword [r12 + 0x30], xmm6
movaps xmmword [r12 + 0x20], xmm6
movaps xmmword [r12 + 0x10], xmm6
movaps xmmword [r12], xmm6
lea rdx, str.PathExists
lea r8, str....._base_files_file_util_win.cc
mov rcx, r15
mov r9d, 0x20b
call fcn.1400754d0
mov rcx, r12
mov rdx, r15
xor r8d, r8d
call fcn.140098080
cmp byte [rsp + 0x97], 0
jns 0x14001aadc
mov r14, qword [rsp + 0x80]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebp, eax
mov qword [rsp + 0x158], 0xa
mov al, byte [0x14015765a]
test al, al
jne 0x14001ace4
lea rcx, [rsp + 0x100]
call fcn.140097660
cmp ebp, 0xffffffff
jne 0x14001adb7
cmp byte [rsp + 0x97], 0
jns 0x14001ab2e
mov rcx, qword [rsp + 0x80]
call fcn.1400b4d44
xorps xmm0, xmm0
lea r14, [rsp + 0x80]
movaps xmmword [r14], xmm0
mov qword [r14 + 0x10], 0
mov ecx, 0x6a
mov rdx, r14
call fcn.1400264a0
test al, al
je 0x14001abf4
lea r15, [rsp + 0x100]
movaps xmmword [r15 + 0x30], xmm6
movaps xmmword [r15 + 0x20], xmm6
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
lea rdx, str.PathExists
lea r8, str....._base_files_file_util_win.cc
lea r12, [rsp + 0xe0]
mov rcx, r12
mov r9d, 0x20b
call fcn.1400754d0
mov rcx, r15
mov rdx, r12
xor r8d, r8d
call fcn.140098080
cmp byte [rsp + 0x97], 0
jns 0x14001abb9
mov r14, qword [rsp + 0x80]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebp, eax
mov qword [rsp + 0x158], 0xa
mov al, byte [0x14015765a]
test al, al
jne 0x14001ad0e
lea rcx, [rsp + 0x100]
call fcn.140097660
cmp ebp, 0xffffffff
jne 0x14001ad5b
cmp byte [rsp + 0x97], 0
jns 0x14001ac0b
mov rcx, qword [rsp + 0x80]
call fcn.1400b4d44
xorps xmm0, xmm0
lea r14, [rsp + 0x80]
movaps xmmword [r14], xmm0
mov qword [r14 + 0x10], 0
mov ecx, 0x67
mov rdx, r14
call fcn.1400264a0
test al, al
je 0x14001ad38
lea r15, [rsp + 0x100]
movaps xmmword [r15 + 0x30], xmm6
movaps xmmword [r15 + 0x20], xmm6
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
lea rdx, str.PathExists
lea r8, str....._base_files_file_util_win.cc
lea r12, [rsp + 0xe0]
mov rcx, r12
mov r9d, 0x20b
call fcn.1400754d0
mov rcx, r15
mov rdx, r12
xor r8d, r8d
call fcn.140098080
cmp byte [rsp + 0x97], 0
jns 0x14001ac96
mov r14, qword [rsp + 0x80]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebp, eax
mov qword [rsp + 0x158], 0xa
mov al, byte [0x14015765a]
test al, al
jne 0x14001af4d
lea rcx, [rsp + 0x100]
call fcn.140097660
cmp ebp, 0xffffffff
je 0x14001ad38
lea rcx, [rsp + 0x80]
call fcn.140039260
test al, al
jne 0x14001adcc
jmp 0x14001ad38
movzx ecx, al
lea r8, [rsp + 0xe0]
mov qword [r8], 0
lea rdx, [rsp + 0x158]
mov r9d, 2
call fcn.1400754f0
jmp 0x14001ab01
movzx ecx, al
lea r8, [rsp + 0xe0]
mov qword [r8], 0
lea rdx, [rsp + 0x158]
mov r9d, 2
call fcn.1400754f0
jmp 0x14001abde
cmp byte [rsp + 0x97], 0
jns 0x14001ad4f
mov rcx, qword [rsp + 0x80]
call fcn.1400b4d44
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
jmp 0x14001ae1d
lea rcx, [rsp + 0x80]
call fcn.140039260
test al, al
jne 0x14001adcc
jmp 0x14001abf4
movzx ecx, al
lea r8, [rsp + 0x100]
mov qword [r8], 0
lea rdx, [rsp + 0xe0]
mov r9d, 2
call fcn.1400754f0
jmp 0x14001ae37
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x50], rax
movaps xmm0, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x14001ae1b
lea rcx, [rsp + 0x80]
call fcn.140039260
test al, al
je 0x14001ab17
cmp byte [rsp + 0x57], 0
movzx r8d, byte [rsp + 0x97]
js 0x14001af77
test r8b, r8b
mov rbp, qword [rsp + 0x38]
jns 0x14001ad9b
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.14000f2e0
cmp byte [rsp + 0x97], 0
jns 0x14001ae1b
mov rcx, qword [rsp + 0x80]
call fcn.1400b4d44
mov bl, 1
mov qword [rsp + 0xe0], 0xa
mov al, byte [0x14015765a]
test al, al
jne 0x14001ad71
lea rcx, [rsp + 0xa0]
call fcn.140097660
test bl, bl
je 0x14001a775
movabs rax, 0xaaaaaaaaaaaaaaa
mov rcx, r13
sub rcx, rdi
sar rcx, 3
movabs rbx, 0xaaaaaaaaaaaaaaab
imul rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, rax
ja 0x14001afa6
lea rdx, [rbx + rbx]
cmp rdx, rcx
cmova rcx, rdx
movabs rdx, 0x555555555555555
cmp rbx, rdx
cmovae rcx, rax
test rcx, rcx
je 0x14001af17
cmp rcx, rax
ja 0x14001afa9
shl rcx, 3
lea rcx, [rcx + rcx*2]
call fcn.1400b4d4c
lea rcx, [rbx + rbx*2]
lea rbx, [rax + rcx*8]
cmp byte [rsp + 0x57], 0
jns 0x14001af1b
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov rcx, rbx
call fcn.140007fc0
mov r14, rbx
cmp r13, rdi
je 0x14001a762
xorps xmm0, xmm0
mov rax, r13
mov r14, rbx
mov rcx, qword [rax - 8]
mov qword [r14 - 8], rcx
movups xmm1, xmmword [rax - 0x18]
movups xmmword [r14 - 0x18], xmm1
movups xmmword [rax - 0x18], xmm0
mov qword [rax - 8], 0
lea rcx, [rax - 0x18]
add r14, 0xffffffffffffffe8
mov rax, rcx
cmp rcx, rdi
jne 0x14001aee8
jmp 0x14001af44
xor eax, eax
jmp 0x14001aeb2
mov rax, qword [rsp + 0x50]
mov qword [rbx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rbx], xmm0
jmp 0x14001aed3
mov rcx, qword [r13 - 0x18]
call fcn.1400b4d44
add r13, 0xffffffffffffffe8
cmp r13, rdi
je 0x14001a762
cmp byte [r13 - 1], 0
js 0x14001af2e
jmp 0x14001af37
movzx ecx, al
lea r8, [rsp + 0xe0]
mov qword [r8], 0
lea rdx, [rsp + 0x158]
mov r9d, 2
call fcn.1400754f0
jmp 0x14001acbb
test r8b, r8b
cmovs r8, qword [rsp + 0x88]
cmovs rbx, qword [rsp + 0x80]
lea rcx, [rsp + 0x40]
mov rdx, rbx
call fcn.14000f3a0
mov rbp, qword [rsp + 0x38]
jmp 0x14001ae04
int3
int3
int3