Function at 0x14026af20
Capabilities:
Get file attributes

Disassembly:
push rbx
push rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1403a0088]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov r13, qword [rsp + 0xe0]
mov r14, r9
mov rsi, qword [rsp + 0xe8]
mov rbp, r8
mov r15, qword [rsp + 0xf0]
mov r12d, edx
mov rbx, rcx
test rcx, rcx
je 0x14026af86
cmp word [rcx], 0
jne 0x14026af8e
lea r8, [0x1403f78e8]
xor ecx, ecx
lea rdx, str.ERROR:__s:_path_is_empty
call fcn.140269090
or eax, 0xffffffff
jmp 0x14026b18d
xor edx, edx
mov qword [rsp + 0xc8], rdi
mov rcx, r15
lea r8d, [rdx + 0x70]
call fcn.14026fc20
mov rdi, rax
or rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x14026afb0
inc eax
mov edx, 1
movsxd rcx, eax
add rcx, rcx
call fcn.14026b5b0
mov qword [rdi + 0x18], rax
movzx ecx, word [rbx]
lea rbx, [rbx + 2]
mov word [rax], cx
lea rax, [rax + 2]
test cx, cx
jne 0x14026afd0
mov edx, 1
lea ecx, [rdx + 3]
call fcn.14026b5b0
mov qword [rdi + 0x10], rax
lea r8, [rsp + 0x30]
xor ebx, ebx
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov word [rax], cx
mov rax, qword [rdi + 0x10]
lea edx, [rcx - 0x2c]
mov rcx, rdi
mov word [rax + 2], bx
mov dword [rdi + 0x20], reloc.WS2_32.dll_recv
mov qword [rdi + 0x58], rbx
mov qword [rdi + 0x60], rbx
mov qword [rdi + 0x68], rbx
call fcn.14026a020
mov ecx, eax
test eax, eax
jne 0x14026b0ea
mov rcx, qword [rsp + 0x30]
lea r9d, [rbx + 0x28]
xor eax, eax
mov dword [rsp + 0x20], 4
lea r8, [rsp + 0x48]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
call sub.ntdll.dll_NtQueryInformationFile
test eax, eax
jns 0x14026b0a3
mov rdx, qword gs:[0x30]
lea r8, [0x1403f7920]
lea ecx, [rbx + 1]
mov dword [rdx + 0x11e8], eax
lea rdx, str.ERROR:__s:_cannot_get_basic_file_information
call fcn.140269090
mov rcx, qword [rsp + 0x30]
call fcn.14026a300
jmp 0x14026b115
mov eax, dword [rsp + 0x68]
lea r8, [0x1403f7968]
mov dword [rdi + 0x20], eax
lea rdx, str.INFO:___s:_root_directory_flags:__u
mov rax, qword [rsp + 0x48]
xor ecx, ecx
mov r9d, dword [rdi + 0x20]
mov qword [rdi + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [rdi + 0x60], rax
mov rax, qword [rsp + 0x50]
mov qword [rdi + 0x68], rax
call fcn.140269090
mov rcx, qword [rsp + 0x30]
call fcn.14026a300
jmp 0x14026b115
mov rax, qword gs:[0x30]
lea r8, str.ftw_add_root_directory
lea rdx, [0x1403f79c0]
mov dword [rax + 0x11e8], ecx
mov ecx, 1
mov r9, qword [rdi + 0x18]
call fcn.140269090
xor eax, eax
mov dword [rdi + 0x40], ebx
mov qword [rdi + 0x48], rax
mov qword [rdi + 0x50], rax
mov qword [rdi + 0x28], rax
mov qword [rdi + 0x30], rax
mov qword [rdi + 0x38], rax
test r12b, 2
je 0x14026b168
mov r8, rsi
mov rdx, r13
mov rcx, rdi
call fcn.14026a8c0
test eax, eax
jns 0x14026b168
mov rcx, qword [rdi + 0x10]
call fcn.14026b630
mov rcx, qword [rdi + 0x18]
call fcn.14026b630
mov rdx, rdi
mov rcx, r15
call fcn.14026fcb0
or eax, 0xffffffff
jmp 0x14026b185
test r14, r14
je 0x14026b176
mov rdx, rsi
mov rcx, rdi
call r14
test rbp, rbp
je 0x14026b183
mov rdx, rsi
mov rcx, rdi
call rbp
xor eax, eax
mov rdi, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.140125a70
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret