Function at 0x1400d3844
Capabilities:
Get file attributes

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xccd0]
mov eax, 0xcdd0
call fcn.1400f0b10
sub rsp, rax
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0xce08], rbx
mov qword [rsp + 0xce10], rsi
mov qword [rsp + 0xce18], rdi
mov rax, qword [0x1401412b0]
xor rax, rsp
mov qword [rbp + 0xccc0], rax
mov rdi, rcx
xor esi, esi
mov word [0x1401aaa90], si
mov word [0x1401aba90], si
mov word [0x1401aca90], si
mov byte [0x1401aaa7e], sil
mov dword [0x1401aaa80], esi
mov edx, dword [0x1401dfe10]
mov rax, qword gs:[0x58]
mov r8d, 4
mov rcx, qword [rax + rdx*8]
lea r15, [0x1401adc70]
lea r13, [0x1401add30]
lea r12, [0x1401addf0]
mov eax, dword [r8 + rcx]
cmp dword [0x1401ae6b8], eax
jle 0x1400d393f
lea rcx, [0x1401ae6b8]
call fcn.1400f12b0
cmp dword [0x1401ae6b8], 0xffffffff
jne 0x1400d393f
mov rcx, r15
call fcn.14008d288
nop
mov rcx, r13
call fcn.14008d288
nop
mov rcx, r12
call fcn.14008d288
nop
lea rcx, [0x14010d640]
call fcn.1400f10c0
nop
lea rcx, [0x1401ae6b8]
call fcn.1400f1250
mov qword [0x1401aaa70], r15
mov rcx, r15
call fcn.14008d480
mov rcx, r13
call fcn.14008d480
mov rcx, r12
call fcn.14008d480
mov al, byte [0x140148c34]
mov byte [0x1401ae6b7], al
test rdi, rdi
jne 0x1400d399f
mov qword [rsp + 0x20], r15
lea r9, [0x1400d4290]
mov r8, qword [0x140148b90]
lea rdx, str.FINDFILES
mov rcx, qword [0x14017f0f0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
test rax, rax
je 0x1400d425e
lea r9, [0x1400d4fd0]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 9]
call fcn.1400c78c4
lea rcx, str.HELPSearchResults
call fcn.1400c8d7c
mov r14d, 1
cmp byte [0x1401ae6b3], sil
je 0x1400d39d6
mov cl, r14b
call fcn.140048878
test rdi, rdi
je 0x1400d3a51
mov r8d, 0x40a
lea rdx, [0x14015ea94]
lea rcx, [rbp + 0x84a0]
call fcn.14008d254
mov word [0x1401ae6b1], 0x101
mov byte [0x1401ae6b0], sil
lea rdx, [0x14010f558]
mov rcx, r12
call fcn.14008d2c4
lea rbx, [0x140160ab8]
mov rcx, rbx
call fcn.14008d4c8
jmp 0x1400d3a33
lea rdx, [rbp + 0x8cc0]
mov rcx, r15
call fcn.14008d2c4
mov r8d, 0x800
lea rdx, [rbp + 0x8cc0]
mov rcx, rbx
call fcn.14008d398
test al, al
jne 0x1400d3a24
jmp 0x1400d3af3
mov word [rbp + 0x84a0], si
cmp word [0x1401adeb0], si
je 0x1400d3af3
mov ebx, 0x40a
cmp byte [0x1401ae6b4], sil
je 0x1400d3a89
mov r8d, ebx
lea rdx, [0x14011d50c]
lea rcx, [rbp + 0x84a0]
call fcn.14008d22c
cmp byte [0x1401ae6b5], sil
je 0x1400d3aa8
mov r8, rbx
lea rdx, [0x14011d510]
lea rcx, [rbp + 0x84a0]
call fcn.14008d22c
cmp byte [0x1401ae6b6], sil
je 0x1400d3ac7
mov r8, rbx
lea rdx, [0x14011d514]
lea rcx, [rbp + 0x84a0]
call fcn.14008d22c
mov r8, rbx
lea rdx, [0x140118f38]
lea rcx, [rbp + 0x84a0]
call fcn.14008d22c
mov r8, rbx
lea rdx, [0x1401adeb0]
lea rcx, [rbp + 0x84a0]
call fcn.14008d22c
lea r12, [0x14016b2d0]
cmp byte [0x140148c34], sil
je 0x1400d3b18
mov r8d, 0x800
lea rdx, [rbp + 0xbcc0]
mov rcx, r12
call fcn.140005618
mov dword [0x1401aaa78], esi
mov byte [0x1401aaa7d], sil
mov byte [0x1401aaa7c], r14b
cmp byte [0x1401ae6b0], sil
je 0x1400d3b44
cmp byte [0x1401ae6b7], sil
mov r8d, 2
je 0x1400d3b47
mov r8d, esi
test rdi, rdi
cmove rdi, r13
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov rdx, rdi
lea rcx, [rbp + 0x32d0]
call fcn.14008950c
nop
mov qword [rbp + 0xf60], rsi
mov qword [rbp + 0xf68], rsi
mov qword [rbp + 0xf70], rsi
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x32d0]
call fcn.14008a0a4
test eax, eax
jne 0x1400d413f
lea r13, [0x1401addf0]
mov al, byte [0x140148c36]
test al, al
jne 0x1400d4145
call fcn.140044d5c
mov edx, dword [0x1401aaa78]
test edx, edx
je 0x1400d3bd4
mov r8b, byte [0x1401ae6b7]
mov rcx, qword [0x140148ba8]
call fcn.1400d73d8
mov dword [0x1401aaa78], esi
cmp word [rsp + 0x50], 0x2e
jne 0x1400d3be9
cmp word [rsp + 0x52], 0x5c
lea rdx, [rsp + 0x54]
je 0x1400d3bee
lea rdx, [rsp + 0x50]
mov r8d, 0x800
lea rcx, [rbp + 0x9cc0]
call fcn.14008d254
mov edx, 0x50
lea rcx, [rbp + 0x9cc0]
call fcn.140044db8
mov rbx, rax
mov ecx, 0x523
call fcn.140087094
mov r8, rax
mov r9, rbx
mov edx, 0x800
lea rcx, [rbp + 0xacc0]
call fcn.14000269c
lea rax, [rbp + 0xacc0]
mov qword [rsp + 0x20], rax
mov r9, r14
mov edx, 0x9b
mov r8d, 0x40b
mov rcx, qword [0x140148ba8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp byte [0x1401ae6b1], sil
je 0x1400d3d9b
cmp byte [rbp + 0xf5c], sil
je 0x1400d3c7f
cmp word [rbp + 0x84a0], si
jne 0x1400d3d9b
mov rcx, r15
call fcn.14008d4c8
jmp 0x1400d3ca0
mov r8d, 5
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.14006bdb4
test al, al
jne 0x1400d3cb2
mov rcx, r15
call fcn.14008d338
test rax, rax
jne 0x1400d3c89
jmp 0x1400d3d9b
mov ecx, 0x10000
call fcn.1400f7870
mov rbx, rax
test rax, rax
je 0x1400d4133
cmp word [rbp + 0x84a0], si
jne 0x1400d3d08
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x84a0]
xor edx, edx
xor ecx, ecx
call fcn.140069dc8
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140069dc8
jmp 0x1400d3d93
lea rcx, [rbp + 0x11a0]
call fcn.140066b5c
nop
mov r8d, 4
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x11a0]
call fcn.140067130
test al, al
jne 0x1400d3d41
lea rcx, [rbp + 0x11a0]
call fcn.140066b98
jmp 0x1400d4119
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x84a0]
xor edx, edx
xor ecx, ecx
jmp 0x1400d3d66
movsxd rdx, eax
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rcx, rbx
xor r9d, r9d
call fcn.140069dc8
mov r8d, 0x10000
mov rdx, rbx
lea rcx, [rbp + 0x11a0]
call fcn.140067394
test eax, eax
jne 0x1400d3d58
lea rcx, [rbp + 0x11a0]
call fcn.140066b98
mov rcx, rbx
call fcn.1400f7868
cmp byte [0x1401ae6b2], sil
je 0x1400d4119
cmp byte [rbp + 0xf5c], sil
jne 0x1400d4119
mov rcx, r13
call fcn.14008d4c8
jmp 0x1400d3dd3
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14006bdb4
test al, al
jne 0x1400d3de8
mov rcx, r13
call fcn.14008d338
test rax, rax
mov rbx, rax
jne 0x1400d3dbf
jmp 0x1400d4119
mov dil, r14b
cmp word [rbx], 0x2a
jne 0x1400d3e33
cmp word [rbx + 2], si
jne 0x1400d3e33
mov al, byte [0x1401ae6b7]
test al, al
jne 0x1400d3e39
mov byte [rsp + 0x38], r14b
mov byte [rsp + 0x30], sil
mov byte [rsp + 0x28], sil
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.140005aac
mov dil, al
test al, al
je 0x1400d4119
mov al, byte [0x1401ae6b7]
mov qword [0x140149d10], 2
movzx ecx, byte [0x14016b854]
test al, al
cmovne ecx, r14d
mov byte [0x14016b854], cl
cmp word [rbp + 0x84a0], si
setne r8b
mov r9d, r14d
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.140005e74
cmp eax, 2
jne 0x1400d3e89
call fcn.140046524
test al, al
je 0x1400d413f
jmp 0x1400d4119
cmp eax, r14d
jne 0x1400d4119
mov word [rbp + 0x8cc0], si
mov byte [rsp + 0x38], r14b
mov byte [rsp + 0x30], sil
mov byte [rsp + 0x28], sil
mov qword [rsp + 0x20], rsi
mov r9d, 0x800
lea r8, [rbp + 0x8cc0]
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.140005aac
lea rdx, [rbp + 0x8cc0]
lea rcx, [rsp + 0x50]
call fcn.1400902b0
test eax, eax
je 0x1400d3f7f
lea rcx, [rbp + 0x8cc0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or ebx, 0xffffffff
cmp eax, ebx
jne 0x1400d4119
mov r8d, 0x800
lea rdx, [0x14010f580]
lea rcx, [rbp + 0x8cc0]
call fcn.1400785d4
lea rdx, [rbp + 0x8cc0]
lea rcx, [rsp + 0x50]
call fcn.1400902b0
test eax, eax
je 0x1400d3f3b
lea rcx, [rbp + 0x8cc0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebx
jne 0x1400d4119
mov r8d, 0x800
lea rdx, [0x14010f578]
lea rcx, [rbp + 0x8cc0]
call fcn.1400785d4
lea rdx, [rbp + 0x8cc0]
lea rcx, [rsp + 0x50]
call fcn.1400902b0
test eax, eax
je 0x1400d3f7f
lea rcx, [rbp + 0x8cc0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
movzx edi, dil
cmp eax, ebx
cmovne edi, esi
test dil, dil
je 0x1400d4119
mov rcx, r12
cmp word [rbp + 0x84a0], si
jne 0x1400d4042
mov ebx, esi
mov qword [rbp + 0x3260], rsi
mov qword [rbp + 0x3268], rsi
mov qword [rbp + 0x3270], rsi
jmp 0x1400d4026
cmp byte [0x140148c36], sil
jne 0x1400d4119
add ebx, r14d
test bl, 0x1f
jne 0x1400d3fcb
call fcn.140044d5c
mov rcx, r15
call fcn.14008d4c8
jmp 0x1400d3fee
mov r8d, 5
lea rdx, [rbp + 0x21d0]
mov rcx, rax
call fcn.14006bdb4
test al, al
jne 0x1400d3ffd
mov rcx, r15
call fcn.14008d338
test rax, rax
jne 0x1400d3fd5
jmp 0x1400d4023
mov ecx, dword [rbp + 0x3278]
call fcn.1400683e8
mov r8b, al
lea r9, [0x140117500]
lea rdx, [rbp + 0x21d0]
lea rcx, [rsp + 0x50]
call fcn.1400da7b4
mov rcx, r12
mov r8b, r14b
lea rdx, [rbp + 0x21d0]
call fcn.140005694
test al, al
jne 0x1400d3fb1
jmp 0x1400d4119
lea rdx, [rbp + 0xfa0]
call fcn.140005638
mov rcx, r12
call fcn.140005340
bt rax, 0xa
jae 0x1400d407b
mov ecx, 0x3ac
call fcn.140087094
mov rdx, rax
lea rcx, [0x14015fab2]
call fcn.1400caa2c
jmp 0x1400d4119
xor ecx, ecx
call fcn.1400bfca8
mov r8d, 0x800
lea rdx, [0x14015fab2]
mov rcx, r12
call fcn.140005240
mov eax, dword [rbp + 0x10e8]
mov dword [0x14015ca54], eax
lea rbx, [0x140160ab8]
mov rcx, rbx
call fcn.14008d480
mov rcx, r15
call fcn.14008d4c8
jmp 0x1400d40c7
mov rdx, rax
mov rcx, rbx
call fcn.14008d2c4
mov rcx, r15
call fcn.14008d338
test rax, rax
jne 0x1400d40bc
mov byte [0x14015a971], r14b
call fcn.1400c1638
lea r9, [rbp + 0x84a0]
lea r8, [0x14011d518]
mov edx, 0x810
lea rcx, [0x14015ea92]
call fcn.14000269c
mov byte [0x14015ea78], r14b
mov qword [0x140149d10], 2
mov rcx, r12
call fcn.140006e90
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x32d0]
call fcn.14008a0a4
test eax, eax
jne 0x1400d413f
jmp 0x1400d3b9e
lea rcx, [0x14017f1b0]
call fcn.1400622b4
mov al, byte [0x140148c36]
mov byte [0x1401aaa7c], sil
test al, al
je 0x1400d4163
movzx eax, al
cmp byte [0x1401aaa7e], sil
cmovne eax, esi
mov byte [0x140148c36], al
mov edx, dword [0x1401aaa78]
test edx, edx
je 0x1400d4186
mov r8b, byte [0x1401ae6b7]
mov rcx, qword [0x140148ba8]
call fcn.1400d73d8
mov dword [0x1401aaa78], esi
mov byte [0x1401aaa7d], sil
mov ecx, 0x271
call fcn.140087094
mov qword [rsp + 0x20], rax
mov r9, r14
mov edx, 0x9b
mov r8d, 0x40b
mov rcx, qword [0x140148ba8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp byte [0x140148c36], sil
je 0x1400d41cf
mov rcx, qword [0x140148ba8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400d41d4
call fcn.1400c8d94
cmp word [0x1401aba90], si
je 0x1400d41fe
lea rdx, [0x1401aba90]
lea rbx, [0x14016e0b0]
mov rcx, rbx
call fcn.14003fbc8
cmp word [0x1401aaa90], si
je 0x1400d4228
jmp 0x1400d4216
cmp word [0x1401aaa90], si
je 0x1400d4239
lea rbx, [0x14016e0b0]
mov rcx, rbx
call fcn.14003d1fc
mov r8b, r14b
lea rdx, [0x1401aaa90]
mov rcx, rbx
call fcn.14003ccac
lea rdx, [0x1401aca90]
mov rcx, rbx
call fcn.14003f0ec
jmp 0x1400d4252
cmp byte [0x140148c34], sil
je 0x1400d4252
lea rdx, [rbp + 0xbcc0]
mov rcx, r12
call fcn.140006ec8
nop
lea rcx, [rbp + 0x32d0]
call fcn.1400895dc
mov rcx, qword [rbp + 0xccc0]
xor rcx, rsp
call fcn.1400f0b80
lea r11, [rsp + 0xcdd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret