Function at 0x140008b20
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
or r15, 0xffffffffffffffff
mov dword [0x140045ba8], edi
mov rcx, qword [rcx]
mov r13, r15
inc r13
cmp word [rcx + r13*2], di
jne 0x140008b51
call fcn.140012378
mov rbp, rax
mov r14, rax
mov eax, 0x3a
lea r12d, [rax - 0x39]
cmp word [rbp], ax
je 0x14001b43a
mov ecx, 0x250
call fcn.14000b998
mov qword [rsi + 0x30], rax
mov ebp, 0x5c
movzx r14d, word [r14]
cmp r14w, bp
je 0x140008d49
mov rax, qword [rsi]
test rax, rax
je 0x14001b50e
mov edx, ebp
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
mov rbx, rax
mov rax, qword [rsi]
test rbx, rbx
je 0x14001b50e
add rbx, 2
lea rdx, [0x140034544]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__wcsicmp]
nop dword [rax + rax]
test eax, eax
je 0x140008d49
lea rdx, [0x140034240]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__wcsicmp]
nop dword [rax + rax]
test eax, eax
je 0x140008d49
cmp dword [0x14003d12c], 4
je 0x140008dc4
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
or ebx, 0xffffffff
mov ebp, eax
cmp eax, ebx
jne 0x140008d38
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov dword [0x140045ba8], eax
cmp ebp, ebx
jne 0x140008d3f
mov ebp, 0x5c
mov rax, qword [rsi]
mov r8d, r12d
mov rbx, rdi
mov rdx, rax
movzx ecx, word [rax]
test cx, cx
je 0x140008c8a
mov r9d, 0x3a
cmp cx, bp
je 0x140008d15
cmp cx, r9w
je 0x140008d0b
add rdx, 2
add r8d, r12d
movzx ecx, word [rdx]
test cx, cx
jne 0x140008c68
mov qword [rsi + 0x18], rbx
test rbx, rbx
je 0x14001b566
cmp word [rbx], di
lea rax, [rbx + 2]
cmove rax, rbx
mov qword [rsi + 0x20], rax
test rbx, rbx
je 0x140008ce6
mov edx, 0x2a
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_wcschr]
nop dword [rax + rax]
test rax, rax
je 0x140008d1d
or dword [rsi + 0x38], 8
mov dword [0x140045b30], r12d
mov edx, 0x2e
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_wcschr]
nop dword [rax + rax]
mov rdi, rax
mov rbx, qword [rsp + 0x50]
mov eax, r12d
mov rbp, qword [rsp + 0x58]
mov qword [rsi + 0x28], rdi
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
cmp r8d, 2
jne 0x140008c7b
mov rbx, rdx
jmp 0x140008c7b
mov edx, 0x3f
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_wcschr]
nop dword [rax + rax]
test rax, rax
je 0x140008ccf
jmp 0x140008cc4
mov eax, edi
jmp 0x140008c3b
test bpl, 0x10
je 0x140008c49
mov rbx, qword [rsi]
lea rax, [0x1400341a4]
mov edx, 0x5c
lea rbp, [0x1400341a6]
cmp r14w, dx
cmovne rbp, rax
test rbx, rbx
je 0x140008de9
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
mov r14, qword [rsi]
test rax, rax
je 0x14001b53f
lea ebx, [r13 + 5]
lea ecx, [rbx + rbx]
call fcn.14000b998
movsxd rbx, ebx
mov r8, r14
mov rdx, rbx
mov qword [rsi], rax
mov rcx, rax
call fcn.1400113e0
mov rcx, qword [rsi]
mov r8, rbp
mov rdx, rbx
call fcn.140011300
mov rax, qword [rsi + 0x30]
mov dword [rax], 0x10
jmp 0x140008c49
cmp dword [0x140045b40], r12d
je 0x140008c13
cmp dword [0x14003d128], r12d
jne 0x140008c4e
mov dword [0x14003d128], edi
jmp 0x140008c13
mov r14, rbx
jmp 0x14001b53f
cmp r13d, 2
jle 0x140008b79
mov word [r14], di
xor ecx, ecx
sub r14, 2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetErrorMode]
nop dword [rax + rax]
mov rcx, qword [rsi]
mov edx, 0x8000
mov r12d, eax
call fcn.1400126e0
mov ebx, eax
cmp eax, r15d
je 0x14001b49d
mov ecx, eax
call fcn.1400101b8
test eax, eax
jne 0x14001b487
mov ecx, ebx
call fcn.14002f318
test eax, eax
je 0x14001b49d
mov ecx, ebx
call fcn.1400101b8
test eax, eax
jne 0x14001b4ed
mov ecx, ebx
call fcn.14002f318
test eax, eax
jmp 0x14001b4eb
cmp dword [0x14003d12c], 4
mov eax, 0x3a
mov word [rbp], ax
mov r14, rbp
jne 0x14001b4d6
cmp dword [0x140045b3c], edi
jne 0x14001b4ca
mov r8, qword [rsi]
lea edx, [rax - 0x39]
mov ecx, 0x236b
call fcn.140003278
mov dword [0x140045b38], 1
jmp 0x14001b4e8
mov r8, qword [rsi]
mov edx, 1
mov ecx, 0x236b
call fcn.140003278
cmp ebx, r15d
je 0x14001b4f4
mov ecx, ebx
call fcn.14000d208
mov ecx, r12d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetErrorMode]
nop dword [rax + rax]
mov r12d, 1
jmp 0x140008b79
mov rbx, rax
mov rcx, r15
inc rcx
cmp word [rax + rcx*2], di
jne 0x14001b514
cmp rcx, 2
jb 0x140008bca
mov ecx, 0x3a
cmp word [rax + 2], cx
jne 0x140008bca
lea rbx, [rax + 4]
jmp 0x140008bca
inc r15
cmp word [rbx + r15*2], di
jne 0x14001b53f
cmp r15, 2
jne 0x140008d87
lea eax, [r15 + 0x38]
cmp word [rbx + 2], ax
je 0x140008db5
jmp 0x140008d87
mov rbx, rax
jmp 0x140008ca2