Function at 0x1400f6bb0
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xce10
call fcn.140117f40
sub rsp, rax
mov rax, qword [0x140181c48]
xor rax, rsp
mov qword [rsp + 0xce00], rax
mov r15, rcx
xor edi, edi
mov word [0x1401f6d50], di
mov word [0x1401f7d50], di
mov word [0x1401f8d50], di
mov byte [0x1401f6d3e], dil
mov dword [0x1401f6d40], edi
mov edx, dword [0x14022c000]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1401fa960], ecx
jg 0x1400f76be
lea r14, [0x1401f9f30]
lea r12, [0x1401f9fe8]
mov qword [0x1401f6d30], r14
mov rcx, r14
call fcn.1400aac04
mov rcx, r12
call fcn.1400aac04
lea rcx, [0x1401fa0a0]
call fcn.1400aac04
mov al, byte [0x140189804]
mov byte [0x1401fa95f], al
test r15, r15
jne 0x1400f6ca2
mov qword [rsp + 0x20], r14
lea r9, [0x1400f7730]
mov r8, qword [0x1401897d0]
lea rdx, str.FINDFILES
mov rcx, qword [0x1401c9660]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
test rax, rax
je 0x1400f7691
lea r9, [0x1400f8530]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 9]
call fcn.1400e9d7c
lea rcx, str.HELPSearchResults
call fcn.1400eb468
mov esi, 1
cmp byte [0x1401fa95b], dil
je 0x1400f6cd8
mov cl, sil
call fcn.1400612d4
test r15, r15
je 0x1400f6d5b
mov r8d, 0x40a
lea rdx, [0x1401a7974]
lea rcx, [rsp + 0x85e0]
call fcn.1400aa9e4
mov word [0x1401fa959], 0x101
mov byte [0x1401fa958], dil
lea rdx, [0x14013f330]
lea rcx, [0x1401fa0a0]
call fcn.1400aaa48
lea rcx, [0x1401a9998]
call fcn.1400aac4c
jmp 0x1400f6d38
lea rdx, [rsp + 0x8e00]
mov rcx, r14
call fcn.1400aaa48
mov r8d, 0x800
lea rdx, [rsp + 0x8e00]
lea rcx, [0x1401a9998]
call fcn.1400aab1c
test al, al
jne 0x1400f6d28
jmp 0x1400f6e03
mov word [rsp + 0x85e0], di
cmp word [0x1401fa158], di
je 0x1400f6e03
mov ebx, 0x40a
cmp byte [0x1401fa95c], dil
je 0x1400f6d95
mov r8d, ebx
lea rdx, [0x1401551f4]
lea rcx, [rsp + 0x85e0]
call fcn.1400aa9bc
cmp byte [0x1401fa95d], dil
je 0x1400f6db5
mov r8, rbx
lea rdx, [0x1401551f8]
lea rcx, [rsp + 0x85e0]
call fcn.1400aa9bc
cmp byte [0x1401fa95e], dil
je 0x1400f6dd5
mov r8, rbx
lea rdx, [0x1401429a0]
lea rcx, [rsp + 0x85e0]
call fcn.1400aa9bc
mov r8, rbx
lea rdx, [0x140151190]
lea rcx, [rsp + 0x85e0]
call fcn.1400aa9bc
mov r8, rbx
lea rdx, [0x1401fa158]
lea rcx, [rsp + 0x85e0]
call fcn.1400aa9bc
lea r13, [0x1401b9630]
cmp byte [0x140189804], dil
je 0x1400f6e29
mov r8d, 0x800
lea rdx, [rsp + 0xbe00]
mov rcx, r13
call fcn.140009e90
mov dword [0x1401f6d38], edi
mov byte [0x1401f6d3d], dil
mov byte [0x1401f6d3c], sil
cmp byte [0x1401fa958], dil
je 0x1400f6e55
cmp byte [0x1401fa95f], dil
mov r8d, 2
je 0x1400f6e58
mov r8d, edi
test r15, r15
cmove r15, r12
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov rdx, r15
lea rcx, [rsp + 0x3420]
call fcn.1400a6cf0
nop
mov qword [rsp + 0x1290], rdi
mov qword [rsp + 0x1298], rdi
mov qword [rsp + 0x12a0], rdi
mov r12d, 0x800
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x3420]
call fcn.1400a7854
test eax, eax
jne 0x1400f700d
cmp byte [0x140189806], dil
jne 0x1400f700d
call fcn.14005cd24
mov edx, dword [0x1401f6d38]
test edx, edx
je 0x1400f6eeb
mov r8b, byte [0x1401fa95f]
mov rcx, qword [0x1401897e8]
call fcn.1400fad30
mov dword [0x1401f6d38], edi
cmp word [rsp + 0x280], 0x2e
jne 0x1400f6f09
cmp word [rsp + 0x282], 0x5c
lea rdx, [rsp + 0x284]
je 0x1400f6f11
lea rdx, [rsp + 0x280]
mov r8, r12
lea rcx, [rsp + 0x9e00]
call fcn.1400aa9e4
mov edx, 0x50
lea rcx, [rsp + 0x9e00]
call fcn.1400c4870
mov rbx, rax
mov ecx, 0x523
call fcn.1400a493c
mov r9, rbx
mov r8, rax
mov rdx, r12
lea rcx, [rsp + 0xae00]
call fcn.140004dcc
lea rax, [rsp + 0xae00]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov edx, 0x9c
mov r8d, 0x40b
mov rcx, qword [0x1401897e8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp byte [0x1401fa959], dil
je 0x1400f71ab
cmp byte [0x1401fa95f], dil
jne 0x1400f71ab
cmp byte [rsp + 0x128c], dil
je 0x1400f6fb0
cmp word [rsp + 0x85e0], di
jne 0x1400f71ab
mov rcx, r14
call fcn.1400aac4c
jmp 0x1400f6fd4
mov r8d, 5
lea rdx, [rsp + 0x280]
mov rcx, rax
call fcn.140088348
test al, al
jne 0x1400f6fe6
mov rcx, r14
call fcn.1400aaabc
test rax, rax
jne 0x1400f6fba
jmp 0x1400f71ab
mov ecx, 0x10000
call fcn.140125214
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x1400f709a
lea rcx, [0x1401c97d8]
call fcn.14007c9c4
mov byte [0x1401f6d3c], dil
movzx eax, byte [0x140189806]
test al, al
je 0x1400f702f
cmp byte [0x1401f6d3e], dil
cmovne eax, edi
mov byte [0x140189806], al
mov edx, dword [0x1401f6d38]
test edx, edx
je 0x1400f7052
mov r8b, byte [0x1401fa95f]
mov rcx, qword [0x1401897e8]
call fcn.1400fad30
mov dword [0x1401f6d38], edi
mov byte [0x1401f6d3d], dil
mov ecx, 0x271
call fcn.1400a493c
mov qword [rsp + 0x20], rax
mov r9, rsi
mov edx, 0x9c
mov r8d, 0x40b
mov rcx, qword [0x1401897e8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp byte [0x140189806], dil
je 0x1400f7600
call fcn.1400ea5b8
jmp 0x1400f7605
cmp word [rsp + 0x85e0], di
jne 0x1400f70c8
lea r9, [rsp + 0x280]
xor r8d, r8d
lea rdx, [rsp + 0x85e0]
lea rcx, [0x1401c9680]
call fcn.140085b14
jmp 0x1400f71a3
lea rcx, [rsp + 0x12d0]
call fcn.1400824e4
nop
mov r8d, 4
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x12d0]
call fcn.140082b10
test al, al
jne 0x1400f7107
lea rcx, [rsp + 0x12d0]
call fcn.14008252c
jmp 0x1400f6e99
lea r9, [rsp + 0x280]
xor r8d, r8d
lea rdx, [rsp + 0x85e0]
lea rcx, [0x1401c9680]
call fcn.140085b14
mov r15d, edi
mov r8d, 0x10000
mov rdx, rbx
lea rcx, [rsp + 0x12d0]
call fcn.140082e90
movsxd r12, eax
test eax, eax
je 0x1400f7176
cmp byte [0x140189806], dil
jne 0x1400f7176
add r15d, esi
mov dword [rsp + 0x40], r15d
test r15b, 0xf
jne 0x1400f7162
call fcn.14005cd24
mov r8, r12
mov rdx, rbx
lea rcx, [0x1401c9680]
call fcn.140085d9c
jmp 0x1400f7129
jmp 0x1400f7190
mov r12d, 0x800
lea rcx, [rsp + 0x12d0]
call fcn.14008252c
mov rcx, rbx
call fcn.140123a48
cmp byte [0x1401fa95a], dil
je 0x1400f6e99
cmp byte [rsp + 0x128c], dil
jne 0x1400f6e99
lea rcx, [0x1401fa0a0]
call fcn.1400aac4c
jmp 0x1400f71eb
xor r8d, r8d
lea rdx, [rsp + 0x280]
mov rcx, rbx
call fcn.140088348
test al, al
jne 0x1400f7204
lea rcx, [0x1401fa0a0]
call fcn.1400aaabc
test rax, rax
mov rbx, rax
jne 0x1400f71d4
jmp 0x1400f6e99
mov r15b, sil
cmp word [rbx], 0x2a
jne 0x1400f7252
cmp word [rbx + 2], di
jne 0x1400f7252
mov al, byte [0x1401fa95f]
test al, al
jne 0x1400f7258
mov byte [rsp + 0x38], sil
mov byte [rsp + 0x30], dil
mov byte [rsp + 0x28], dil
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a2ac
mov r15b, al
test al, al
je 0x1400f6e99
mov al, byte [0x1401fa95f]
mov qword [0x14018a850], 2
movzx ecx, byte [0x1401b9b08]
test al, al
cmovne ecx, esi
mov byte [0x1401b9b08], cl
cmp word [rsp + 0x85e0], di
setne r8b
mov r9d, esi
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a674
cmp eax, 2
jne 0x1400f72ab
call fcn.14005ef00
test al, al
jne 0x1400f6e99
jmp 0x1400f700d
cmp eax, esi
jne 0x1400f6e99
mov word [rsp + 0x8e00], di
mov byte [rsp + 0x38], sil
mov byte [rsp + 0x30], dil
mov byte [rsp + 0x28], dil
mov qword [rsp + 0x20], rdi
mov r9, r12
lea r8, [rsp + 0x8e00]
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a2ac
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400adb10
test eax, eax
je 0x1400f73ac
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or ebx, 0xffffffff
cmp eax, ebx
jne 0x1400f6e99
mov r8, r12
lea rdx, [0x14013f148]
lea rcx, [rsp + 0x8e00]
call fcn.1400951e0
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400adb10
test eax, eax
je 0x1400f7366
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebx
jne 0x1400f6e99
mov r8, r12
lea rdx, [0x14013f140]
lea rcx, [rsp + 0x8e00]
call fcn.1400951e0
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400adb10
test eax, eax
je 0x1400f73ac
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebx
jne 0x1400f6e99
test r15b, r15b
je 0x1400f6e99
cmp word [rsp + 0x85e0], di
jne 0x1400f7476
mov ebx, edi
mov qword [rsp + 0x33b0], rdi
mov qword [rsp + 0x33b8], rdi
mov qword [rsp + 0x33c0], rdi
jmp 0x1400f7456
cmp byte [0x140189806], dil
jne 0x1400f6e99
add ebx, esi
test bl, 0x1f
jne 0x1400f73f8
call fcn.14005cd24
mov rcx, r14
call fcn.1400aac4c
jmp 0x1400f741c
mov r8d, 5
lea rdx, [rsp + 0x2320]
mov rcx, rax
call fcn.140088348
test al, al
jne 0x1400f742b
mov rcx, r14
call fcn.1400aaabc
test rax, rax
jne 0x1400f7402
jmp 0x1400f7456
mov ecx, dword [rsp + 0x33c8]
call fcn.140083f5c
mov r8b, al
lea r9, [0x14013ef10]
lea rdx, [rsp + 0x2320]
lea rcx, [rsp + 0x280]
call fcn.1400fe3c0
mov r8b, sil
lea rdx, [rsp + 0x2320]
mov rcx, r13
call fcn.140009ec4
test al, al
jne 0x1400f73df
jmp 0x1400f6e99
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], 7
mov word [rsp + 0x178], di
mov qword [rsp + 0x198], rdi
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.140009eb0
mov rcx, r13
call fcn.1400098e8
bt rax, 0xa
jae 0x1400f74ec
mov ecx, 0x3ac
call fcn.1400a493c
mov rdx, rax
lea rcx, [0x1401a8992]
call fcn.1400ed110
jmp 0x1400f7597
xor ecx, ecx
call fcn.1400e169c
mov r8, r12
lea rdx, [0x1401a8992]
mov rcx, r13
call fcn.1400097e8
mov eax, dword [rsp + 0x1c8]
mov dword [0x1401a3928], eax
lea rcx, [0x1401a9998]
call fcn.1400aac04
mov rcx, r14
call fcn.1400aac4c
jmp 0x1400f7537
mov rdx, rax
lea rcx, [0x1401a9998]
call fcn.1400aaa48
mov rcx, r14
call fcn.1400aaabc
test rax, rax
jne 0x1400f7528
mov byte [0x1401a1841], sil
call fcn.1400e3140
lea r9, [rsp + 0x85e0]
lea r8, [0x140155200]
mov edx, 0x810
lea rcx, [0x1401a7972]
call fcn.140004dcc
mov word [0x1401a6950], 0x101
mov dword [0x1401a6954], 5
mov qword [0x14018a850], 2
mov rcx, r13
call fcn.14000b9f4
nop
mov rdx, qword [rsp + 0x190]
cmp rdx, 8
jb 0x1400f75df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f75da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f7722
call fcn.140117b78
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], 7
mov word [rsp + 0x178], di
jmp 0x1400f6e99
call fcn.1400eb480
cmp word [0x1401f7d50], di
je 0x1400f762f
lea rdx, [0x1401f7d50]
lea rbx, [0x1401bc3f0]
mov rcx, rbx
call fcn.140057974
cmp word [0x1401f6d50], di
je 0x1400f7659
jmp 0x1400f7647
cmp word [0x1401f6d50], di
je 0x1400f766a
lea rbx, [0x1401bc3f0]
mov rcx, rbx
call fcn.140054e7c
mov r8b, sil
lea rdx, [0x1401f6d50]
mov rcx, rbx
call fcn.140054860
lea rdx, [0x1401f8d50]
mov rcx, rbx
call fcn.140056e24
jmp 0x1400f7684
cmp byte [0x140189804], dil
je 0x1400f7684
lea rdx, [rsp + 0xbe00]
mov rcx, r13
call fcn.14000ba34
nop
lea rcx, [rsp + 0x3420]
call fcn.1400a6db8
mov rcx, qword [rsp + 0xce00]
xor rcx, rsp
call fcn.140117fa0
lea r11, [rsp + 0xce10]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, [0x1401fa960]
call fcn.1401185a8
cmp dword [0x1401fa960], 0xffffffff
jne 0x1400f6c30
lea r14, [0x1401f9f30]
mov rcx, r14
call fcn.1400aaa18
nop
lea r12, [0x1401f9fe8]
mov rcx, r12
call fcn.1400aaa18
nop
lea rcx, [0x1401fa0a0]
call fcn.1400aaa18
nop
lea rcx, [0x14013c420]
call fcn.1401183fc
nop
lea rcx, [0x1401fa960]
call fcn.140118548
jmp 0x1400f6c3e
call fcn.14011f088
int3