Function at 0x1400f8470
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xce10
call fcn.140119910
sub rsp, rax
mov rax, qword [0x140182c48]
xor rax, rsp
mov qword [rsp + 0xce00], rax
mov r15, rcx
xor edi, edi
mov word [0x1401f7d50], di
mov word [0x1401f8d50], di
mov word [0x1401f9d50], di
mov byte [0x1401f7d3e], dil
mov dword [0x1401f7d40], edi
mov edx, dword [0x14022d000]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1401fb960], ecx
jg 0x1400f8f7e
lea r14, [0x1401faf30]
lea r12, [0x1401fafe8]
mov qword [0x1401f7d30], r14
mov rcx, r14
call fcn.1400ac448
mov rcx, r12
call fcn.1400ac448
lea rcx, [0x1401fb0a0]
call fcn.1400ac448
mov al, byte [0x14018a804]
mov byte [0x1401fb95f], al
test r15, r15
jne 0x1400f8562
mov qword [rsp + 0x20], r14
lea r9, [0x1400f8ff0]
mov r8, qword [0x14018a7d0]
lea rdx, str.FINDFILES
mov rcx, qword [0x1401ca660]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
test rax, rax
je 0x1400f8f51
lea r9, [0x1400f9df0]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 9]
call fcn.1400eb60c
lea rcx, str.HELPSearchResults
call fcn.1400eccf8
mov esi, 1
cmp byte [0x1401fb95b], dil
je 0x1400f8598
mov cl, sil
call fcn.140062b14
test r15, r15
je 0x1400f861b
mov r8d, 0x40a
lea rdx, [0x1401a8974]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac228
mov word [0x1401fb959], 0x101
mov byte [0x1401fb958], dil
lea rdx, [0x140140330]
lea rcx, [0x1401fb0a0]
call fcn.1400ac28c
lea rcx, [0x1401aa998]
call fcn.1400ac490
jmp 0x1400f85f8
lea rdx, [rsp + 0x8e00]
mov rcx, r14
call fcn.1400ac28c
mov r8d, 0x800
lea rdx, [rsp + 0x8e00]
lea rcx, [0x1401aa998]
call fcn.1400ac360
test al, al
jne 0x1400f85e8
jmp 0x1400f86c3
mov word [rsp + 0x85e0], di
cmp word [0x1401fb158], di
je 0x1400f86c3
mov ebx, 0x40a
cmp byte [0x1401fb95c], dil
je 0x1400f8655
mov r8d, ebx
lea rdx, [0x1401561f4]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac200
cmp byte [0x1401fb95d], dil
je 0x1400f8675
mov r8, rbx
lea rdx, [0x1401561f8]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac200
cmp byte [0x1401fb95e], dil
je 0x1400f8695
mov r8, rbx
lea rdx, [0x1401439b0]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac200
mov r8, rbx
lea rdx, [0x140152190]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac200
mov r8, rbx
lea rdx, [0x1401fb158]
lea rcx, [rsp + 0x85e0]
call fcn.1400ac200
lea r13, [0x1401ba630]
cmp byte [0x14018a804], dil
je 0x1400f86e9
mov r8d, 0x800
lea rdx, [rsp + 0xbe00]
mov rcx, r13
call fcn.140009ef0
mov dword [0x1401f7d38], edi
mov byte [0x1401f7d3d], dil
mov byte [0x1401f7d3c], sil
cmp byte [0x1401fb958], dil
je 0x1400f8715
cmp byte [0x1401fb95f], dil
mov r8d, 2
je 0x1400f8718
mov r8d, edi
test r15, r15
cmove r15, r12
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov rdx, r15
lea rcx, [rsp + 0x3420]
call fcn.1400a8530
nop
mov qword [rsp + 0x1290], rdi
mov qword [rsp + 0x1298], rdi
mov qword [rsp + 0x12a0], rdi
mov r12d, 0x800
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x3420]
call fcn.1400a9094
test eax, eax
jne 0x1400f88cd
cmp byte [0x14018a806], dil
jne 0x1400f88cd
call fcn.14005e564
mov edx, dword [0x1401f7d38]
test edx, edx
je 0x1400f87ab
mov r8b, byte [0x1401fb95f]
mov rcx, qword [0x14018a7e8]
call fcn.1400fc5f0
mov dword [0x1401f7d38], edi
cmp word [rsp + 0x280], 0x2e
jne 0x1400f87c9
cmp word [rsp + 0x282], 0x5c
lea rdx, [rsp + 0x284]
je 0x1400f87d1
lea rdx, [rsp + 0x280]
mov r8, r12
lea rcx, [rsp + 0x9e00]
call fcn.1400ac228
mov edx, 0x50
lea rcx, [rsp + 0x9e00]
call fcn.1400c60ec
mov rbx, rax
mov ecx, 0x523
call fcn.1400a617c
mov r9, rbx
mov r8, rax
mov rdx, r12
lea rcx, [rsp + 0xae00]
call fcn.140004dcc
lea rax, [rsp + 0xae00]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov edx, 0x9c
mov r8d, 0x40b
mov rcx, qword [0x14018a7e8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp byte [0x1401fb959], dil
je 0x1400f8a6b
cmp byte [0x1401fb95f], dil
jne 0x1400f8a6b
cmp byte [rsp + 0x128c], dil
je 0x1400f8870
cmp word [rsp + 0x85e0], di
jne 0x1400f8a6b
mov rcx, r14
call fcn.1400ac490
jmp 0x1400f8894
mov r8d, 5
lea rdx, [rsp + 0x280]
mov rcx, rax
call fcn.140089b18
test al, al
jne 0x1400f88a6
mov rcx, r14
call fcn.1400ac300
test rax, rax
jne 0x1400f887a
jmp 0x1400f8a6b
mov ecx, 0x10000
call fcn.140126be4
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x1400f895a
lea rcx, [0x1401ca7d8]
call fcn.14007e144
mov byte [0x1401f7d3c], dil
movzx eax, byte [0x14018a806]
test al, al
je 0x1400f88ef
cmp byte [0x1401f7d3e], dil
cmovne eax, edi
mov byte [0x14018a806], al
mov edx, dword [0x1401f7d38]
test edx, edx
je 0x1400f8912
mov r8b, byte [0x1401fb95f]
mov rcx, qword [0x14018a7e8]
call fcn.1400fc5f0
mov dword [0x1401f7d38], edi
mov byte [0x1401f7d3d], dil
mov ecx, 0x271
call fcn.1400a617c
mov qword [rsp + 0x20], rax
mov r9, rsi
mov edx, 0x9c
mov r8d, 0x40b
mov rcx, qword [0x14018a7e8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp byte [0x14018a806], dil
je 0x1400f8ec0
call fcn.1400ebe48
jmp 0x1400f8ec5
cmp word [rsp + 0x85e0], di
jne 0x1400f8988
lea r9, [rsp + 0x280]
xor r8d, r8d
lea rdx, [rsp + 0x85e0]
lea rcx, [0x1401ca680]
call fcn.1400872e4
jmp 0x1400f8a63
lea rcx, [rsp + 0x12d0]
call fcn.140083cbc
nop
mov r8d, 4
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x12d0]
call fcn.1400842e0
test al, al
jne 0x1400f89c7
lea rcx, [rsp + 0x12d0]
call fcn.140083d04
jmp 0x1400f8759
lea r9, [rsp + 0x280]
xor r8d, r8d
lea rdx, [rsp + 0x85e0]
lea rcx, [0x1401ca680]
call fcn.1400872e4
mov r15d, edi
mov r8d, 0x10000
mov rdx, rbx
lea rcx, [rsp + 0x12d0]
call fcn.140084660
movsxd r12, eax
test eax, eax
je 0x1400f8a36
cmp byte [0x14018a806], dil
jne 0x1400f8a36
add r15d, esi
mov dword [rsp + 0x40], r15d
test r15b, 0xf
jne 0x1400f8a22
call fcn.14005e564
mov r8, r12
mov rdx, rbx
lea rcx, [0x1401ca680]
call fcn.14008756c
jmp 0x1400f89e9
jmp 0x1400f8a50
mov r12d, 0x800
lea rcx, [rsp + 0x12d0]
call fcn.140083d04
mov rcx, rbx
call fcn.140125418
cmp byte [0x1401fb95a], dil
je 0x1400f8759
cmp byte [rsp + 0x128c], dil
jne 0x1400f8759
lea rcx, [0x1401fb0a0]
call fcn.1400ac490
jmp 0x1400f8aab
xor r8d, r8d
lea rdx, [rsp + 0x280]
mov rcx, rbx
call fcn.140089b18
test al, al
jne 0x1400f8ac4
lea rcx, [0x1401fb0a0]
call fcn.1400ac300
test rax, rax
mov rbx, rax
jne 0x1400f8a94
jmp 0x1400f8759
mov r15b, sil
cmp word [rbx], 0x2a
jne 0x1400f8b12
cmp word [rbx + 2], di
jne 0x1400f8b12
mov al, byte [0x1401fb95f]
test al, al
jne 0x1400f8b18
mov byte [rsp + 0x38], sil
mov byte [rsp + 0x30], dil
mov byte [rsp + 0x28], dil
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a30c
mov r15b, al
test al, al
je 0x1400f8759
mov al, byte [0x1401fb95f]
mov qword [0x14018b850], 2
movzx ecx, byte [0x1401bab08]
test al, al
cmovne ecx, esi
mov byte [0x1401bab08], cl
cmp word [rsp + 0x85e0], di
setne r8b
mov r9d, esi
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a6d4
cmp eax, 2
jne 0x1400f8b6b
call fcn.140060740
test al, al
jne 0x1400f8759
jmp 0x1400f88cd
cmp eax, esi
jne 0x1400f8759
mov word [rsp + 0x8e00], di
mov byte [rsp + 0x38], sil
mov byte [rsp + 0x30], dil
mov byte [rsp + 0x28], dil
mov qword [rsp + 0x20], rdi
mov r9, r12
lea r8, [rsp + 0x8e00]
lea rdx, [rsp + 0x280]
mov rcx, r13
call fcn.14000a30c
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400af350
test eax, eax
je 0x1400f8c6c
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or ebx, 0xffffffff
cmp eax, ebx
jne 0x1400f8759
mov r8, r12
lea rdx, [0x140140148]
lea rcx, [rsp + 0x8e00]
call fcn.1400969d8
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400af350
test eax, eax
je 0x1400f8c26
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebx
jne 0x1400f8759
mov r8, r12
lea rdx, [0x140140140]
lea rcx, [rsp + 0x8e00]
call fcn.1400969d8
lea rdx, [rsp + 0x8e00]
lea rcx, [rsp + 0x280]
call fcn.1400af350
test eax, eax
je 0x1400f8c6c
lea rcx, [rsp + 0x8e00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, ebx
jne 0x1400f8759
test r15b, r15b
je 0x1400f8759
cmp word [rsp + 0x85e0], di
jne 0x1400f8d36
mov ebx, edi
mov qword [rsp + 0x33b0], rdi
mov qword [rsp + 0x33b8], rdi
mov qword [rsp + 0x33c0], rdi
jmp 0x1400f8d16
cmp byte [0x14018a806], dil
jne 0x1400f8759
add ebx, esi
test bl, 0x1f
jne 0x1400f8cb8
call fcn.14005e564
mov rcx, r14
call fcn.1400ac490
jmp 0x1400f8cdc
mov r8d, 5
lea rdx, [rsp + 0x2320]
mov rcx, rax
call fcn.140089b18
test al, al
jne 0x1400f8ceb
mov rcx, r14
call fcn.1400ac300
test rax, rax
jne 0x1400f8cc2
jmp 0x1400f8d16
mov ecx, dword [rsp + 0x33c8]
call fcn.14008572c
mov r8b, al
lea r9, [0x14013ff10]
lea rdx, [rsp + 0x2320]
lea rcx, [rsp + 0x280]
call fcn.1400ffc80
mov r8b, sil
lea rdx, [rsp + 0x2320]
mov rcx, r13
call fcn.140009f24
test al, al
jne 0x1400f8c9f
jmp 0x1400f8759
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], 7
mov word [rsp + 0x178], di
mov qword [rsp + 0x198], rdi
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.140009f10
mov rcx, r13
call fcn.140009948
bt rax, 0xa
jae 0x1400f8dac
mov ecx, 0x3ac
call fcn.1400a617c
mov rdx, rax
lea rcx, [0x1401a9992]
call fcn.1400ee9a0
jmp 0x1400f8e57
xor ecx, ecx
call fcn.1400e2f2c
mov r8, r12
lea rdx, [0x1401a9992]
mov rcx, r13
call fcn.140009848
mov eax, dword [rsp + 0x1c8]
mov dword [0x1401a4928], eax
lea rcx, [0x1401aa998]
call fcn.1400ac448
mov rcx, r14
call fcn.1400ac490
jmp 0x1400f8df7
mov rdx, rax
lea rcx, [0x1401aa998]
call fcn.1400ac28c
mov rcx, r14
call fcn.1400ac300
test rax, rax
jne 0x1400f8de8
mov byte [0x1401a2841], sil
call fcn.1400e49d0
lea r9, [rsp + 0x85e0]
lea r8, [0x140156200]
mov edx, 0x810
lea rcx, [0x1401a8972]
call fcn.140004dcc
mov word [0x1401a7950], 0x101
mov dword [0x1401a7954], 5
mov qword [0x14018b850], 2
mov rcx, r13
call fcn.14000ba54
nop
mov rdx, qword [rsp + 0x190]
cmp rdx, 8
jb 0x1400f8e9f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f8e9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8fe2
call fcn.140119548
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], 7
mov word [rsp + 0x178], di
jmp 0x1400f8759
call fcn.1400ecd10
cmp word [0x1401f8d50], di
je 0x1400f8eef
lea rdx, [0x1401f8d50]
lea rbx, [0x1401bd3f0]
mov rcx, rbx
call fcn.140059184
cmp word [0x1401f7d50], di
je 0x1400f8f19
jmp 0x1400f8f07
cmp word [0x1401f7d50], di
je 0x1400f8f2a
lea rbx, [0x1401bd3f0]
mov rcx, rbx
call fcn.140056684
mov r8b, sil
lea rdx, [0x1401f7d50]
mov rcx, rbx
call fcn.140056060
lea rdx, [0x1401f9d50]
mov rcx, rbx
call fcn.140058634
jmp 0x1400f8f44
cmp byte [0x14018a804], dil
je 0x1400f8f44
lea rdx, [rsp + 0xbe00]
mov rcx, r13
call fcn.14000ba94
nop
lea rcx, [rsp + 0x3420]
call fcn.1400a85f8
mov rcx, qword [rsp + 0xce00]
xor rcx, rsp
call fcn.140119970
lea r11, [rsp + 0xce10]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, [0x1401fb960]
call fcn.140119f78
cmp dword [0x1401fb960], 0xffffffff
jne 0x1400f84f0
lea r14, [0x1401faf30]
mov rcx, r14
call fcn.1400ac25c
nop
lea r12, [0x1401fafe8]
mov rcx, r12
call fcn.1400ac25c
nop
lea rcx, [0x1401fb0a0]
call fcn.1400ac25c
nop
lea rcx, [0x14013de00]
call fcn.140119dcc
nop
lea rcx, [0x1401fb960]
call fcn.140119f18
jmp 0x1400f84fe
call fcn.140120a58
int3