Function at 0x1400f8c50
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xce10
call fcn.14011a0f0
sub rsp, rax
mov rax, qword [0x140183c48]
xor rax, rsp
mov qword [rsp + 0xce00], rax
mov r15, rcx
xor edi, edi
mov word [0x1401f8d50], di
mov word [0x1401f9d50], di
mov word [0x1401fad50], di
mov byte [0x1401f8d3e], dil
mov dword [0x1401f8d40], edi
mov edx, dword [0x14022e000]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1401fc960], ecx
jg 0x1400f975e
lea r14, [0x1401fbf30]
lea r12, [0x1401fbfe8]
mov qword [0x1401f8d30], r14
mov rcx, r14
call fcn.1400acb28
mov rcx, r12
call fcn.1400acb28
lea rcx, [0x1401fc0a0]
call fcn.1400acb28
mov al, byte [0x14018b804]
mov byte [0x1401fc95f], al
test r15, r15
jne 0x1400f8d42
mov qword [rsp + 0x20], r14
lea r9, [0x1400f97d0]
mov r8, qword [0x14018b7d0]
lea rdx, str.FINDFILES
mov rcx, qword [0x1401cb660]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
test rax, rax
je 0x1400f9731
lea r9, [0x1400fa5d0]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 9]
call fcn.1400ebefc
lea rcx, str.HELPSearchResults
call fcn.1400ed5e8
mov esi, 1
cmp byte [0x1401fc95b], dil
je 0x1400f8d78
mov cl, sil
call fcn.140063074
test r15, r15
je 0x1400f8dfb
mov r8d, 0x40a
lea rdx, [0x1401a9974]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac908
mov word [0x1401fc959], 0x101
mov byte [0x1401fc958], dil
lea rdx, [0x140141330]
lea rcx, [0x1401fc0a0]
call fcn.1400ac96c
lea rcx, [0x1401ab998]
call fcn.1400acb70
jmp 0x1400f8dd8
lea rdx, [rsp + 0x8e00]
mov rcx, r14
call fcn.1400ac96c
mov r8d, 0x800
lea rdx, [rsp + 0x8e00]
lea rcx, [0x1401ab998]
call fcn.1400aca40
test al, al
jne 0x1400f8dc8
jmp 0x1400f8ea3
mov word [rsp + 0x85e0], di
cmp word [0x1401fc158], di
je 0x1400f8ea3
mov ebx, 0x40a
cmp byte [0x1401fc95c], dil
je 0x1400f8e35
mov r8d, ebx
lea rdx, [0x140157424]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac8e0
cmp byte [0x1401fc95d], dil
je 0x1400f8e55
mov r8, rbx
lea rdx, [0x140157428]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac8e0
cmp byte [0x1401fc95e], dil
je 0x1400f8e75
mov r8, rbx
lea rdx, [0x1401449c0]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac8e0
mov r8, rbx
lea rdx, [0x1401533c0]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac8e0
mov r8, rbx
lea rdx, [0x1401fc158]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac8e0
lea r13, [0x1401bb630]
cmp byte [0x14018b804], dil
je 0x1400f8ec9
mov r8d, 0x800
lea rdx, [rsp + 0xbe00]
mov rcx, r13
call fcn.140009f04
mov dword [0x1401f8d38], edi
mov byte [0x1401f8d3d], dil
mov byte [0x1401f8d3c], sil
cmp byte [0x1401fc958], dil
je 0x1400f8ef5
cmp byte [0x1401fc95f], dil
mov r8d, 2
je 0x1400f8ef8
mov r8d, edi
test r15, r15
cmove r15, r12
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov rdx, r15
lea rcx, [rsp + 0x3420]
call fcn.1400a8c10
nop
mov qword [rsp + 0x1290], rdi
mov qword [rsp + 0x1298], rdi
mov qword [rsp + 0x12a0], rdi
mov r12d, 0x800
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x3420]
call fcn.1400a9774
test eax, eax
jne 0x1400f90ad
cmp byte [0x14018b806], dil
jne 0x1400f90ad
call fcn.14005eac4
mov edx, dword [0x1401f8d38]
test edx, edx
je 0x1400f8f8b
mov r8b, byte [0x1401fc95f]
mov rcx, qword [0x14018b7e8]
call fcn.1400fcdd0
mov dword [0x1401f8d38], edi
cmp word [rsp + 0x280], 0x2e
jne 0x1400f8fa9
cmp word [rsp + 0x282], 0x5c
lea rdx, [rsp + 0x284]
je 0x1400f8fb1
lea rdx, [rsp + 0x280]
mov r8, r12
lea rcx, [rsp + 0x9e00]
call fcn.1400ac908
mov edx, 0x50
lea rcx, [rsp + 0x9e00]
call fcn.1400c67cc
mov rbx, rax
mov ecx, 0x523
call fcn.1400a685c
mov r9, rbx
mov r8, rax
mov rdx, r12
lea rcx, [rsp + 0xae00]
call fcn.140004dcc
lea rax, [rsp + 0xae00]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov edx, 0x9c
mov r8d, 0x40b
mov rcx, qword [0x14018b7e8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp byte [0x1401fc959], dil
je 0x1400f924b
cmp byte [0x1401fc95f], dil
jne 0x1400f924b
cmp byte [rsp + 0x128c], dil
je 0x1400f9050
cmp word [rsp + 0x85e0], di
jne 0x1400f924b
mov rcx, r14
call fcn.1400acb70
jmp 0x1400f9074
mov r8d, 5
lea rdx, [rsp + 0x280]
mov rcx, rax
call fcn.14008a1f8
test al, al
jne 0x1400f9086
mov rcx, r14
call fcn.1400ac9e0
test rax, rax
jne 0x1400f905a
jmp 0x1400f924b
mov ecx, 0x10000
call fcn.1401273c4
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x1400f913a
lea rcx, [0x1401cb7d8]
call fcn.14007e6d0
mov byte [0x1401f8d3c], dil
movzx eax, byte [0x14018b806]
test al, al
je 0x1400f90cf
cmp byte [0x1401f8d3e], dil
cmovne eax, edi
mov byte [0x14018b806], al
mov edx, dword [0x1401f8d38]
test edx, edx
je 0x1400f90f2
mov r8b, byte [0x1401fc95f]
mov rcx, qword [0x14018b7e8]
call fcn.1400fcdd0
mov dword [0x1401f8d38], edi
mov byte [0x1401f8d3d], dil
mov ecx, 0x271
call fcn.1400a685c
mov qword [rsp + 0x20], rax
mov r9, rsi
mov edx, 0x9c
mov r8d, 0x40b
mov rcx, qword [0x14018b7e8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp byte [0x14018b806], dil
je 0x1400f96a0
call fcn.1400ec738
jmp 0x1400f96a5
cmp word [rsp + 0x85e0], di
jne 0x1400f9168
lea r9, [rsp + 0x280]
xor r8d, r8d
lea rdx, [rsp + 0x85e0]
lea rcx, [0x1401cb680]
call fcn.1400879cc
jmp 0x1400f9243
lea rcx, [rsp + 0x12d0]
call fcn.1400841a8
nop
mov r8d, 4
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x12d0]
call fcn.1400847d0
test al, al
jne 0x1400f91a7
lea rcx, [rsp + 0x12d0]
call fcn.1400841f0
jmp 0x1400f8f39
lea r9, [rsp + 0x280]
xor r8d, r8d
lea rdx, [rsp + 0x85e0]
lea rcx, [0x1401cb680]
call fcn.1400879cc
mov r15d, edi
mov r8d, 0x10000
mov rdx, rbx
lea rcx, [rsp + 0x12d0]
call fcn.140084b50
movsxd r12, eax
test eax, eax
je 0x1400f9216
cmp byte [0x14018b806], dil
jne 0x1400f9216
add r15d, esi
mov dword [rsp + 0x40], r15d
test r15b, 0xf
jne 0x1400f9202
call fcn.14005eac4
mov r8, r12
mov rdx, rbx
lea rcx, [0x1401cb680]
call fcn.140087c54
jmp 0x1400f91c9
jmp 0x1400f9230
mov r12d, 0x800
lea rcx, [rsp + 0x12d0]
call fcn.1400841f0
mov rcx, rbx
call fcn.140125bf8
cmp byte [0x1401fc95a], dil
je 0x1400f8f39
cmp byte [rsp + 0x128c], dil
jne 0x1400f8f39
lea rcx, [0x1401fc0a0]
call fcn.1400acb70
jmp 0x1400f928b
xor r8d, r8d
lea rdx, [rsp + 0x280]
mov rcx, rbx
call fcn.14008a1f8
test al, al
jne 0x1400f92a4
lea rcx, [0x1401fc0a0]
call fcn.1400ac9e0
test rax, rax
mov rbx, rax
jne 0x1400f9274
jmp 0x1400f8f39
mov r15b, sil
cmp word [rbx], 0x2a
jne 0x1400f92f2
cmp word [rbx + 2], di
jne 0x1400f92f2
mov al, byte [0x1401fc95f]
test al, al
jne 0x1400f92f8
mov byte [rsp + 0x38], sil
mov byte [rsp + 0x30], dil
mov byte [rsp + 0x28], dil
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a320
mov r15b, al
test al, al
je 0x1400f8f39
mov al, byte [0x1401fc95f]
mov qword [0x14018c850], 2
movzx ecx, byte [0x1401bbb08]
test al, al
cmovne ecx, esi
mov byte [0x1401bbb08], cl
cmp word [rsp + 0x85e0], di
setne r8b
mov r9d, esi
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a6e8
cmp eax, 2
jne 0x1400f934b
call fcn.140060ca0
test al, al
jne 0x1400f8f39
jmp 0x1400f90ad
cmp eax, esi
jne 0x1400f8f39
mov word [rsp + 0x8e00], di
mov byte [rsp + 0x38], sil
mov byte [rsp + 0x30], dil
mov byte [rsp + 0x28], dil
mov qword [rsp + 0x20], rdi
mov r9, r12
lea r8, [rsp + 0x8e00]
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a320
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400afa30
test eax, eax
je 0x1400f944c
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or ebx, 0xffffffff
cmp eax, ebx
jne 0x1400f8f39
mov r8, r12
lea rdx, [0x140141148]
lea rcx, [rsp + 0x8e00]
call fcn.1400970b8
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400afa30
test eax, eax
je 0x1400f9406
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebx
jne 0x1400f8f39
mov r8, r12
lea rdx, [0x140141140]
lea rcx, [rsp + 0x8e00]
call fcn.1400970b8
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400afa30
test eax, eax
je 0x1400f944c
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebx
jne 0x1400f8f39
test r15b, r15b
je 0x1400f8f39
cmp word [rsp + 0x85e0], di
jne 0x1400f9516
mov ebx, edi
mov qword [rsp + 0x33b0], rdi
mov qword [rsp + 0x33b8], rdi
mov qword [rsp + 0x33c0], rdi
jmp 0x1400f94f6
cmp byte [0x14018b806], dil
jne 0x1400f8f39
add ebx, esi
test bl, 0x1f
jne 0x1400f9498
call fcn.14005eac4
mov rcx, r14
call fcn.1400acb70
jmp 0x1400f94bc
mov r8d, 5
lea rdx, [rsp + 0x2320]
mov rcx, rax
call fcn.14008a1f8
test al, al
jne 0x1400f94cb
mov rcx, r14
call fcn.1400ac9e0
test rax, rax
jne 0x1400f94a2
jmp 0x1400f94f6
mov ecx, dword [rsp + 0x33c8]
call fcn.140085c38
mov r8b, al
lea r9, [0x140140f10]
lea rdx, [rsp + 0x2320]
lea rcx, [rsp + 0x280]
call fcn.140100460
mov r8b, sil
lea rdx, [rsp + 0x2320]
mov rcx, r13
call fcn.140009f38
test al, al
jne 0x1400f947f
jmp 0x1400f8f39
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], 7
mov word [rsp + 0x178], di
mov qword [rsp + 0x198], rdi
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.140009f24
mov rcx, r13
call fcn.14000995c
bt rax, 0xa
jae 0x1400f958c
mov ecx, 0x3ac
call fcn.1400a685c
mov rdx, rax
lea rcx, [0x1401aa992]
call fcn.1400ef290
jmp 0x1400f9637
xor ecx, ecx
call fcn.1400e381c
mov r8, r12
lea rdx, [0x1401aa992]
mov rcx, r13
call fcn.14000985c
mov eax, dword [rsp + 0x1c8]
mov dword [0x1401a5928], eax
lea rcx, [0x1401ab998]
call fcn.1400acb28
mov rcx, r14
call fcn.1400acb70
jmp 0x1400f95d7
mov rdx, rax
lea rcx, [0x1401ab998]
call fcn.1400ac96c
mov rcx, r14
call fcn.1400ac9e0
test rax, rax
jne 0x1400f95c8
mov byte [0x1401a3841], sil
call fcn.1400e52c0
lea r9, [rsp + 0x85e0]
lea r8, [0x140157430]
mov edx, 0x810
lea rcx, [0x1401a9972]
call fcn.140004dcc
mov word [0x1401a8950], 0x101
mov dword [0x1401a8954], 5
mov qword [0x14018c850], 2
mov rcx, r13
call fcn.14000ba68
nop
mov rdx, qword [rsp + 0x190]
cmp rdx, 8
jb 0x1400f967f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f967a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f97c2
call fcn.140119d28
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], 7
mov word [rsp + 0x178], di
jmp 0x1400f8f39
call fcn.1400ed600
cmp word [0x1401f9d50], di
je 0x1400f96cf
lea rdx, [0x1401f9d50]
lea rbx, [0x1401be3f0]
mov rcx, rbx
call fcn.1400596e4
cmp word [0x1401f8d50], di
je 0x1400f96f9
jmp 0x1400f96e7
cmp word [0x1401f8d50], di
je 0x1400f970a
lea rbx, [0x1401be3f0]
mov rcx, rbx
call fcn.140056be4
mov r8b, sil
lea rdx, [0x1401f8d50]
mov rcx, rbx
call fcn.1400565c0
lea rdx, [0x1401fad50]
mov rcx, rbx
call fcn.140058b94
jmp 0x1400f9724
cmp byte [0x14018b804], dil
je 0x1400f9724
lea rdx, [rsp + 0xbe00]
mov rcx, r13
call fcn.14000baa8
nop
lea rcx, [rsp + 0x3420]
call fcn.1400a8cd8
mov rcx, qword [rsp + 0xce00]
xor rcx, rsp
call fcn.14011a150
lea r11, [rsp + 0xce10]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, [0x1401fc960]
call fcn.14011a758
cmp dword [0x1401fc960], 0xffffffff
jne 0x1400f8cd0
lea r14, [0x1401fbf30]
mov rcx, r14
call fcn.1400ac93c
nop
lea r12, [0x1401fbfe8]
mov rcx, r12
call fcn.1400ac93c
nop
lea rcx, [0x1401fc0a0]
call fcn.1400ac93c
nop
lea rcx, [0x14013e520]
call fcn.14011a5ac
nop
lea rcx, [0x1401fc960]
call fcn.14011a6f8
jmp 0x1400f8cde
call fcn.140121238
int3