Function at 0x1004b2db0
Capabilities:
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
mov rsi, qword [sym.bash.exe__nc_globals]
cmp qword [rsi + 0x120], 0
mov dword [rcx], 0
mov dword [rdx], 0
je 0x1004b2e25
call fcn.1004b2c20
test al, al
jne 0x1004b2df7
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsi + 0x120]
call fcn.1004d2c80
mov rcx, qword [rsi + 0x128]
mov qword [rsi + 0x120], 0
call fcn.1004d2c80
mov qword [rsi + 0x128], 0
mov r12, qword [rsi + 0x28]
mov edx, 1
xor r14d, r14d
lea rcx, str.TERMINFO
lea rbp, str._usr_share_terminfo
lea rdi, [rsp + 0x30]
mov qword [rsp + 0x30], r12
lea r13, [rsp + 0x60]
mov rbx, rdi
lea r15, [0x100501c3d]
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x58], rbp
call fcn.1004b2b40
mov rax, qword [rsi + 0x158]
mov qword [rsp + 0x38], rax
call sym.bash.exe__nc_home_terminfo
mov edx, 2
lea rcx, [0x100501c3e]
mov qword [rsp + 0x40], rax
call fcn.1004b2b40
mov edx, 3
lea rcx, str.TERMINFO_DIRS
call fcn.1004b2b40
mov rax, qword [rsi + 0x178]
mov qword [rsp + 0x48], rax
jmp 0x1004b2eb3
mov r12, qword [rbx]
test r12, r12
cmove r12, r15
add rbx, 8
mov qword [rbx - 8], r12
mov rcx, r12
call sub.msys_2.0.dll_strlen
lea r14, [r14 + rax + 2]
cmp rbx, r13
jne 0x1004b2eb0
mov rcx, r14
call fcn.1004d2f30
mov qword [rsi + 0x120], rax
mov r14, rax
test rax, rax
je 0x1004b2de6
mov byte [rax], 0
nop word [rax + rax]
mov r12, qword [rdi]
cmp byte [r12], 0
je 0x1004b2f2b
mov rcx, r14
call sub.msys_2.0.dll_strlen
add rax, r14
cmp rax, r14
je 0x1004b2f19
mov byte [rax], 0x3a
lea r14, [rax + 1]
mov rcx, r14
mov rdx, r12
call fcn.1004d3420
mov r14, qword [rsi + 0x120]
add rdi, 8
cmp rdi, r13
jne 0x1004b2ef8
movzx eax, byte [r14]
test al, al
je 0x1004b3310
lea rdx, [r14 + 1]
mov r12d, 2
nop word [rax + rax]
cmp al, 0x3a
sete al
add rdx, 1
movzx eax, al
add r12, rax
movzx eax, byte [rdx - 1]
test al, al
jne 0x1004b2f50
mov rcx, r12
mov edx, 8
call sub.msys_2.0.dll_calloc
mov rcx, r12
mov edx, pe_nt_image_headers64
mov qword [rsi + 0x128], rax
mov r13, rax
call sub.msys_2.0.dll_calloc
mov r12, rax
test rax, rax
je 0x1004b331b
test r13, r13
je 0x1004b331b
mov qword [r13], r14
movzx eax, byte [r14]
test al, al
je 0x1004b3060
mov r15d, 1
mov edi, 1
jmp 0x1004b2fd6
mov r14, qword [rsi + 0x120]
add r14, r15
add r15, 1
movzx eax, byte [r14]
test al, al
je 0x1004b3050
cmp al, 0x3a
jne 0x1004b2fc0
movsxd rbx, edi
mov rax, r14
mov rcx, qword [r13 + rbx*8 - 8]
sub rax, rcx
cmp rax, 3
je 0x1004b3010
mov byte [r14], 0
mov rax, qword [rsi + 0x120]
add edi, 1
mov r13, qword [rsi + 0x128]
add rax, r15
mov qword [r13 + rbx*8], rax
jmp 0x1004b2fc0
mov r8d, 4
lea rdx, str.b64:
mov qword [rsp + 0x28], rcx
call sub.msys_2.0.dll_strncmp
test eax, eax
je 0x1004b2fc0
mov rcx, qword [rsp + 0x28]
mov r8d, 4
lea rdx, str.hex:
call sub.msys_2.0.dll_strncmp
test eax, eax
je 0x1004b2fc0
jmp 0x1004b2fee
mov rax, qword [r13]
test rax, rax
je 0x1004b32f5
movzx eax, byte [rax]
xor edi, edi
xor ebx, ebx
test al, al
je 0x1004b3154
nop dword [rax]
mov rax, qword [r13]
movzx edx, byte [rax]
lea rcx, [rax + 1]
test dl, dl
jne 0x1004b30a6
jmp 0x1004b30c8
lea r9d, [rdx - 9]
mov rcx, r8
cmp r9b, 1
jbe 0x1004b309e
mov byte [rax], dl
mov rcx, r8
add rax, 1
movzx edx, byte [rcx - 1]
test dl, dl
je 0x1004b30c8
lea r8, [rcx + 1]
cmp dl, 0x5c
jne 0x1004b3088
add rcx, 2
cmp byte [r8 - 1], 0xa
jne 0x1004b3095
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x1004b30a6
nop word [rax + rax]
mov byte [rax], 0
mov r15, qword [rsi + 0x128]
test edi, edi
je 0x1004b32e2
lea eax, [rdi - 1]
mov r13, qword [r15 + rbx]
mov rbx, r15
lea r14, [r15 + rax*8 + 8]
jmp 0x1004b30f9
add rbx, 8
cmp r14, rbx
je 0x1004b3168
mov rdx, qword [rbx]
mov rcx, r13
call sub.msys_2.0.dll_strcmp
test eax, eax
jne 0x1004b30f0
movsxd rax, edi
lea rbx, [rax*8]
mov rax, qword [r15 + rax*8 + 8]
lea r13, [r15 + rbx]
mov qword [r13], rax
test rax, rax
je 0x1004b317f
mov rax, r13
nop dword [rax + rax]
mov rdx, qword [rax + 0x10]
add rax, 8
mov qword [rax], rdx
test rdx, rdx
jne 0x1004b3130
mov rax, qword [r13]
test rax, rax
je 0x1004b317f
movzx eax, byte [rax]
test al, al
jne 0x1004b3070
mov rcx, rbp
call sub.msys_2.0.dll_strdup
mov qword [r13], rax
jmp 0x1004b3074
add edi, 1
movsxd rbx, edi
shl rbx, 3
lea r13, [r15 + rbx]
mov rax, qword [r13]
test rax, rax
jne 0x1004b3149
mov r15, qword [r15]
test r15, r15
je 0x1004b32f5
xor ebx, ebx
xor r14d, r14d
lea rdi, str.b64:
lea r13, [r12 + 0x80]
lea rbp, str.hex:
nop word cs:[rax + rax]
shl r14, 7
mov r8d, 4
mov rdx, rdi
mov rcx, r15
add r14, r12
call sub.msys_2.0.dll_strncmp
test eax, eax
je 0x1004b31e5
mov r8d, 4
mov rdx, rbp
mov rcx, r15
call sub.msys_2.0.dll_strncmp
test eax, eax
jne 0x1004b32a0
mov r8, qword [rsi + 0x128]
test ebx, ebx
je 0x1004b32fc
lea edx, [rbx - 1]
mov ecx, dword [r14]
mov rax, r12
shl rdx, 7
add rdx, r13
jmp 0x1004b3219
sub rax, 0xffffffffffffff80
cmp rdx, rax
je 0x1004b3290
cmp ecx, dword [rax]
jne 0x1004b3210
mov r10, qword [rax + 8]
cmp qword [r14 + 8], r10
jne 0x1004b3210
mov rax, qword [rsi + 0x128]
movsxd r14, ebx
lea rcx, [rax + r14*8]
mov rax, qword [rax + r14*8 + 8]
mov qword [rcx], rax
test rax, rax
je 0x1004b3264
mov rax, rcx
nop dword [rax]
mov rdx, qword [rax + 0x10]
add rax, 8
mov qword [rax], rdx
test rdx, rdx
jne 0x1004b3248
mov r15, qword [rcx]
test r15, r15
jne 0x1004b31b0
xor ecx, ecx
mov dword [rsi + 0x130], ebx
call sub.msys_2.0.dll_time
mov qword [rsi + 0x138], rax
mov rcx, r12
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.1004d2c80
add ebx, 1
movsxd r14, ebx
mov r15, qword [r8 + r14*8]
jmp 0x1004b325b
mov rdx, r14
mov rcx, r15
call sub.msys_2.0.dll_stat
test eax, eax
jne 0x1004b3227
mov eax, dword [r14 + 0x10]
and eax, 0xf000
cmp eax, 0x4000
je 0x1004b31e5
cmp eax, 0x8000
jne 0x1004b3227
cmp qword [r14 + 0x28], 0
je 0x1004b3227
jmp 0x1004b31e5
mov ebx, 8
mov edi, 1
lea r13, [r15 + 8]
jmp 0x1004b3140
xor ebx, ebx
jmp 0x1004b3264
mov r15, qword [r8 + 8]
mov r14d, 1
mov ebx, 1
jmp 0x1004b325b
mov r12d, 2
jmp 0x1004b2f67
mov rcx, r14
call fcn.1004d2c80
mov qword [rsi + 0x120], 0
jmp 0x1004b3278