Function at 0x1800b6d50
Capabilities:
Get file attributes

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x200
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1801dc960]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
mov rdi, rcx
lea rdx, [sym.vrvhook64.dll_MySHBrowseForFolderW]
lea rcx, [0x18028d500]
call fcn.18000dae0
mov rsi, rax
test rax, rax
je 0x1800b715f
mov rcx, rax
call fcn.18000d7e0
mov rbx, rax
cmp dword [0x18025caa4], 0
jne 0x1800b6dbe
mov rcx, rdi
call rbx
jmp 0x1800b715f
mov rcx, rsi
call fcn.180083ad0
test eax, eax
je 0x1800b6dd4
mov rcx, rdi
call rbx
jmp 0x1800b715f
mov rcx, rdi
call rbx
mov rbx, rax
test rax, rax
je 0x1800b715f
lea rdx, [0x18025c000]
mov rcx, qword [str._CHROME.EXE_FIREFOX.EXE_360SE.EXE_QQBROWSER.EXE_SOGOUEXPLORER.EXE_BAIDUBROWSER.EXE_HAO123JUZI.EXE_LIEBAO.EXE_BAIDUYUNGUANJIA.EXE_360WANGPAN.EXE_TANGO3.EXE_TWCHROME.EXE_THEWORLD.EXE_UCBROWSER.EXE_JUZI.EXE_360CHROME.EXE_115BR.EXE_MAXTHON.EXE_2345EXPLORER.EXE_115CHROME.EXE_HAO123BROWSER.EXE_]
call fcn.1800f4d08
test rax, rax
jne 0x1800b6e05
mov rax, rbx
jmp 0x1800b715f
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x1800b6e27
lea rdx, str._nN_O
call fcn.1800fb870
test rax, rax
jne 0x1800b6e27
mov rax, rbx
jmp 0x1800b715f
cmp dword [0x180250e70], 0
je 0x1800b715c
call fcn.1800a79a0
mov rdi, qword [0x1801deec0]
test rdi, rdi
jne 0x1800b6e4d
mov rax, rbx
jmp 0x1800b715f
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b6e65
mov rax, qword [rcx]
call qword [rax]
mov rdi, qword [0x1801deec0]
mov byte [rsp + 0xe0], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0xe1]
call fcn.1800f4fb0
lea rdx, [rsp + 0xe0]
mov rcx, rbx
call rdi
lea r9, [rsp + 0xe0]
lea r8, [0x180259780]
mov edx, 0xa96a
lea rcx, str.line:_d__MySHBrowseForFolderW:Name___s___s
call fcn.18005cd20
mov qword [rsp + 0xd0], 0xf
xor edi, edi
mov qword [rsp + 0xc8], rdi
mov byte [rsp + 0xb8], dil
lea r8d, [rdi + 0x17]
lea rdx, str.MSGTYPERPT_r_nMSGSTRING
lea rcx, [rsp + 0xb0]
call fcn.180003700
nop
mov qword [rsp + 0xa8], 0xf
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0x90], dil
lea r8d, [rdi + 0x17]
lea rdx, str.MSGTYPERPT_r_nMSGSTRING
lea rcx, [rsp + 0x88]
call fcn.180003700
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 0x10
je 0x1800b6fd8
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xb0]
call fcn.1800b1560
test eax, eax
jne 0x1800b6fd8
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b6f69
mov rax, qword [rcx]
call qword [rax + 8]
nop
cmp qword [rsp + 0xa8], 0x10
jb 0x1800b6f81
mov rcx, qword [rsp + 0x90]
call fcn.1800f4b9c
mov qword [rsp + 0xa8], 0xf
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0x90], 0
cmp qword [rsp + 0xd0], 0x10
jb 0x1800b6fb5
mov rcx, qword [rsp + 0xb8]
call fcn.1800f4b9c
mov qword [rsp + 0xd0], 0xf
mov qword [rsp + 0xc8], rdi
mov byte [rsp + 0xb8], 0
xor eax, eax
jmp 0x1800b715f
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b6fea
mov rax, qword [rcx]
call qword [rax + 8]
cmp qword [rsp + 0xc8], 0x17
ja 0x1800b7004
cmp qword [rsp + 0xa0], 0x17
jbe 0x1800b70f4
lea rax, [rsp + 0x20]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], 0xf
mov qword [rsp + 0x38], rdi
mov byte [rsp + 0x28], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x20]
call fcn.1800035e0
nop
mov qword [rsp + 0x68], 0xf
mov qword [rsp + 0x60], rdi
mov byte [rsp + 0x50], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x48]
call fcn.1800035e0
nop
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.18007bdb0
test eax, eax
jne 0x1800b70f4
cmp qword [rsp + 0xa8], 0x10
jb 0x1800b70a0
mov rcx, qword [rsp + 0x90]
call fcn.1800f4b9c
mov qword [rsp + 0xa8], 0xf
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0x90], 0
cmp qword [rsp + 0xd0], 0x10
jb 0x1800b70d4
mov rcx, qword [rsp + 0xb8]
call fcn.1800f4b9c
mov qword [rsp + 0xd0], 0xf
mov qword [rsp + 0xc8], rdi
mov byte [rsp + 0xb8], 0
xor eax, eax
jmp 0x1800b715f
cmp qword [rsp + 0xa8], 0x10
jb 0x1800b710c
mov rcx, qword [rsp + 0x90]
call fcn.1800f4b9c
mov qword [rsp + 0xa8], 0xf
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0x90], 0
cmp qword [rsp + 0xd0], 0x10
jb 0x1800b7140
mov rcx, qword [rsp + 0xb8]
call fcn.1800f4b9c
mov qword [rsp + 0xd0], 0xf
mov qword [rsp + 0xc8], rdi
mov byte [rsp + 0xb8], 0
mov rax, rbx
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.1800f4f80
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret