Function at 0x14011050e
Capabilities:
Get file attributes

Disassembly:
push rax
pushf
mov eax, 0xa413487d
pushf
not eax
add eax, 0x6a81f16d
xor eax, 0x60424b4f
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x9928d36
xor eax, 0x42f0b126
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x487dc0a3
xor eax, 0xea88e17
rol eax, 0xa5
popf
cmp eax, 3
jne 0x14011055e
popf
pop rax
jmp 0x1401107f2
cmp eax, 9
jne 0x14011056d
popf
pop rax
jmp 0x140110bde
cmp eax, 0xa
jne 0x14011057c
popf
pop rax
jmp 0x140110c18
cmp eax, 8
jne 0x14011058b
popf
pop rax
jmp 0x140110b3b
cmp eax, 0
jne 0x14011059a
popf
pop rax
jmp 0x140110612
cmp eax, 7
jne 0x1401105a9
popf
pop rax
jmp 0x140110b01
cmp eax, 5
jne 0x1401105b8
popf
pop rax
jmp 0x14011093a
cmp eax, 2
jne 0x1401105c7
popf
pop rax
jmp 0x140110744
cmp eax, 0xc
jne 0x1401105d6
popf
pop rax
jmp 0x140110c9a
cmp eax, 4
jne 0x1401105e5
popf
pop rax
jmp 0x1401108a8
cmp eax, 6
jne 0x1401105f4
popf
pop rax
jmp 0x140110a90
cmp eax, 0xb
jne 0x140110603
popf
pop rax
jmp 0x140110c50
cmp eax, 1
jne 0x140110612
popf
pop rax
jmp 0x1401106ea
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rdx, rcx
mov ecx, 0xa146b620
pushf
not ecx
add ecx, 0x11130443
xor ecx, 0x15d25021
rol ecx, 0xb1
popf
pushf
not ecx
add ecx, 0x4a09aba4
xor ecx, 0x793fff8d
rol ecx, 0xc5
popf
pushf
not ecx
add ecx, 0x41b7700f
xor ecx, 0x5a0e53c5
rol ecx, 0x40
popf
call fcn.14010f2de
mov ebx, eax
test eax, eax
jne 0x1401106b7
push rax
pushf
mov eax, 0xecaabf31
pushf
not eax
add eax, 0x10ec3731
xor eax, 0x38e723ae
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x5954999f
xor eax, 0x262d63fa
rol eax, 0x52
popf
pushf
not eax
add eax, 0x5dd9fa0e
xor eax, 0x41be2105
rol eax, 0x45
popf
jmp 0x14011054f
push rax
pushf
mov eax, 0xc8c97856
pushf
not eax
add eax, 0x71c2ac91
xor eax, 0x246044de
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x54fed565
xor eax, 0xeb21ce2
rol eax, 0x9d
popf
jmp 0x14011054f
and dword [rsp + 0x38], eax
jmp 0x1401106ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x3c], eax
jmp 0x140110c9a
mov rcx, rdi
jmp 0x140110748
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140110799
push rax
pushf
mov eax, 0xa36698f6
pushf
not eax
add eax, 0x6e319256
xor eax, 0x578328a5
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x1aa1e903
xor eax, 0x298773b8
rol eax, 0x49
popf
pushf
not eax
add eax, 0xd3f4804
xor eax, 0x54d0039a
rol eax, 0xc4
popf
jmp 0x14011054f
push rax
pushf
mov eax, 0x72fb1c27
pushf
not eax
add eax, 0x3cc0e958
xor eax, 0xedda273
rol eax, 0x42
popf
pushf
not eax
add eax, 0x5a7699b2
xor eax, 0x40017aa9
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x6539e4b4
xor eax, 0x75eff861
rol eax, 0x98
popf
pushf
not eax
add eax, 0x410ef98f
xor eax, 0x4a9252bf
rol eax, 0xc7
popf
jmp 0x14011054f
test al, 0x10
je 0x14011084f
push rax
pushf
mov eax, 0x81a4cf33
pushf
not eax
add eax, 0x5ddeb30c
xor eax, 0x3f9bb3f2
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x70fd5dda
xor eax, 0x79b7c085
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x6656e0d4
xor eax, 0x4453fd65
rol eax, 0x70
popf
pushf
not eax
add eax, 0x4f1f5926
xor eax, 0x17b81bb3
rol eax, 0xf1
popf
jmp 0x14011054f
push rax
pushf
mov eax, 0x55356f2f
pushf
not eax
add eax, 0x3ef28407
xor eax, 0x1b2fc679
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x2cedf089
xor eax, 0x6dc3a678
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x46706395
xor eax, 0x98be4a2
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x3a1a82ca
xor eax, 0x41edae87
rol eax, 0xe
popf
jmp 0x14011054f
bt eax, 0xa
jae 0x1401108f4
push rax
pushf
mov eax, 0x4cd68513
pushf
not eax
add eax, 0x54e28495
xor eax, 0x57085d9d
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x4fdebbf9
xor eax, 0x74c31f01
rol eax, 0x73
popf
pushf
not eax
add eax, 0x68f9f0a7
xor eax, 0x20aee407
rol eax, 0xbb
popf
jmp 0x14011054f
push rax
pushf
mov eax, 0x72c797cc
pushf
not eax
add eax, 0x5e5f93e1
xor eax, 0x793ee6e9
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x1d74e6db
xor eax, 0x6f0ed2cd
rol eax, 0x66
popf
pushf
not eax
add eax, 0x52b2aca0
xor eax, 0x1f2acd26
rol eax, 0xcc
popf
jmp 0x14011054f
mov r9d, 0x13f94a53
pushf
not r9d
add r9d, 0x6c53a0d7
xor r9d, 0x5515b101
rol r9d, 0x31
popf
pushf
not r9d
add r9d, 0x365a1d31
xor r9d, 0x66560291
rol r9d, 0x21
popf
lea rcx, [rsp + 0x38]
mov r8d, 0x67d084c9
pushf
not r8d
add r8d, 0x46471dfc
xor r8d, 0x666a31aa
rol r8d, 0xed
popf
pushf
not r8d
add r8d, 0x111976d0
xor r8d, 0x42da020c
rol r8d, 0xc4
popf
pushf
not r8d
add r8d, 0x3b08bf5b
xor r8d, 0x4d42e355
rol r8d, 6
popf
mov rdx, rdi
call fcn.140110caa
mov rcx, qword [rsp + 0x38]
mov edi, eax
cmp rcx, 0xffffffffffffffff
je 0x140110a36
push rax
pushf
mov eax, 0xf435e053
pushf
not eax
add eax, 0x376c6f1f
xor eax, 0x2a4c2dd2
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x40a27082
xor eax, 0x1030a050
rol eax, 0x88
popf
pushf
not eax
add eax, 0x65eb8d0a
xor eax, 0x9b2f60c
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x18029952
xor eax, 0x383c0e3
rol eax, 0x8b
popf
jmp 0x14011054f
push rax
pushf
mov eax, 0x7724d300
pushf
not eax
add eax, 0x388164f1
xor eax, 0xc699ac9
rol eax, 0x85
popf
pushf
not eax
add eax, 0x19aeaaec
xor eax, 0x75a76c52
rol eax, 0x47
popf
pushf
not eax
add eax, 0x1561a17
xor eax, 0x1435006b
rol eax, 0x43
popf
pushf
not eax
add eax, 0xb277040
xor eax, 0x4ace1c5a
rol eax, 0xde
popf
jmp 0x14011054f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140110acd
push rax
pushf
mov eax, 0x33def9fc
pushf
not eax
add eax, 0x73a23d08
xor eax, 0x424b4f96
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x694af10e
xor eax, 0x1a8ded07
rol eax, 0xd2
popf
jmp 0x14011054f
push rax
pushf
mov eax, 0x7037b8a3
pushf
not eax
add eax, 0x65912c36
xor eax, 0x750538c7
rol eax, 0x13
popf
pushf
not eax
add eax, 0x7b5c1dd4
xor eax, 0x20b01a71
rol eax, 0xbc
popf
jmp 0x14011054f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
test edi, edi
jne 0x140110b98
push rax
pushf
mov eax, 0x6ea0fd3d
pushf
not eax
add eax, 0x1a67b47e
xor eax, 0x3028d9a8
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x7d769580
xor eax, 0x4c36c483
rol eax, 0xca
popf
pushf
not eax
add eax, 0x55e35c
xor eax, 0x262768b7
rol eax, 0x64
popf
pushf
not eax
add eax, 0x5c841504
xor eax, 0x5fbdfd64
rol eax, 0xb1
popf
jmp 0x14011054f
push rax
pushf
mov eax, 0xb93e7659
pushf
not eax
add eax, 0x6a0ec353
xor eax, 0x7d3bf4e6
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x530d85c2
xor eax, 0x4bf7cc24
rol eax, 0x13
popf
pushf
not eax
add eax, 0x6110caee
xor eax, 0x4f57bf21
rol eax, 0x93
popf
jmp 0x14011054f
and dword [rsp + 0x3c], 0
jmp 0x140110c50
or dword [rsp + 0x3c], 0xffffffff
push rax
pushf
mov eax, 0xb88174e2
pushf
not eax
add eax, 0x3d0bb65
xor eax, 0x5e5812b
rol eax, 0x92
popf
pushf
not eax
add eax, 0x39fde2d8
xor eax, 0x1b4ea82c
rol eax, 0xcf
popf
jmp 0x14011054f
mov dword [rsp + 0x38], ebx
push rax
pushf
mov eax, 0x924f1d9c
pushf
not eax
add eax, 0x686afbab
xor eax, 0x3dd98575
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x38e0dca6
xor eax, 0x68c2dcec
rol eax, 0x57
popf
pushf
not eax
add eax, 0x7a724345
xor eax, 0x4d01b80b
rol eax, 0x3d
popf
jmp 0x14011054f
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret