Function at 0x14026f780
Capabilities:
Get file attributes

Disassembly:
push rbx
push rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1403a8088]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov r13, qword [rsp + 0xe0]
mov r14, r9
mov rsi, qword [rsp + 0xe8]
mov rbp, r8
mov r15, qword [rsp + 0xf0]
mov r12d, edx
mov rbx, rcx
test rcx, rcx
je 0x14026f7e6
cmp word [rcx], 0
jne 0x14026f7ee
lea r8, [0x1403ff8e8]
xor ecx, ecx
lea rdx, str.ERROR:__s:_path_is_empty
call fcn.14026d8f0
or eax, 0xffffffff
jmp 0x14026f9ed
xor edx, edx
mov qword [rsp + 0xc8], rdi
mov rcx, r15
lea r8d, [rdx + 0x70]
call fcn.140274480
mov rdi, rax
or rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x14026f810
inc eax
mov edx, 1
movsxd rcx, eax
add rcx, rcx
call fcn.14026fe10
mov qword [rdi + 0x18], rax
movzx ecx, word [rbx]
lea rbx, [rbx + 2]
mov word [rax], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14026f830
mov edx, 1
lea ecx, [rdx + 3]
call fcn.14026fe10
mov qword [rdi + 0x10], rax
lea r8, [rsp + 0x30]
xor ebx, ebx
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov word [rax], cx
mov rax, qword [rdi + 0x10]
lea edx, [rcx - 0x2c]
mov rcx, rdi
mov word [rax + 2], bx
mov dword [rdi + 0x20], reloc.WS2_32.dll_recv
mov qword [rdi + 0x58], rbx
mov qword [rdi + 0x60], rbx
mov qword [rdi + 0x68], rbx
call fcn.14026e880
mov ecx, eax
test eax, eax
jne 0x14026f94a
mov rcx, qword [rsp + 0x30]
lea r9d, [rbx + 0x28]
xor eax, eax
mov dword [rsp + 0x20], 4
lea r8, [rsp + 0x48]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
call sub.ntdll.dll_NtQueryInformationFile
test eax, eax
jns 0x14026f903
mov rdx, qword gs:[0x30]
lea r8, [0x1403ff920]
lea ecx, [rbx + 1]
mov dword [rdx + 0x11e8], eax
lea rdx, str.ERROR:__s:_cannot_get_basic_file_information
call fcn.14026d8f0
mov rcx, qword [rsp + 0x30]
call fcn.14026eb60
jmp 0x14026f975
mov eax, dword [rsp + 0x68]
lea r8, [0x1403ff968]
mov dword [rdi + 0x20], eax
lea rdx, str.INFO:___s:_root_directory_flags:__u
mov rax, qword [rsp + 0x48]
xor ecx, ecx
mov r9d, dword [rdi + 0x20]
mov qword [rdi + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [rdi + 0x60], rax
mov rax, qword [rsp + 0x50]
mov qword [rdi + 0x68], rax
call fcn.14026d8f0
mov rcx, qword [rsp + 0x30]
call fcn.14026eb60
jmp 0x14026f975
mov rax, qword gs:[0x30]
lea r8, str.ftw_add_root_directory
lea rdx, [0x1403ff9c0]
mov dword [rax + 0x11e8], ecx
mov ecx, 1
mov r9, qword [rdi + 0x18]
call fcn.14026d8f0
xor eax, eax
mov dword [rdi + 0x40], ebx
mov qword [rdi + 0x48], rax
mov qword [rdi + 0x50], rax
mov qword [rdi + 0x28], rax
mov qword [rdi + 0x30], rax
mov qword [rdi + 0x38], rax
test r12b, 2
je 0x14026f9c8
mov r8, rsi
mov rdx, r13
mov rcx, rdi
call fcn.14026f120
test eax, eax
jns 0x14026f9c8
mov rcx, qword [rdi + 0x10]
call fcn.14026fe90
mov rcx, qword [rdi + 0x18]
call fcn.14026fe90
mov rdx, rdi
mov rcx, r15
call fcn.140274510
or eax, 0xffffffff
jmp 0x14026f9e5
test r14, r14
je 0x14026f9d6
mov rdx, rsi
mov rcx, rdi
call r14
test rbp, rbp
je 0x14026f9e3
mov rdx, rsi
mov rcx, rdi
call rbp
xor eax, eax
mov rdi, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.14012a2b0
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret