Function at 0x1800801d0
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov edi, dword [rbp + 0x7f]
xor r14d, r14d
mov ebx, dword [rbp + 0x7f]
mov r10, r8
imul eax, r9d, 0x55f
mov rsi, rdx
mov r15d, r9d
mov dword [rbp - 0x41], r9d
mov dword [rbp - 0x59], eax
cmp r9d, eax
ja 0x18008059b
movzx r9d, byte [rbp + 0x7f]
mov r11d, pe_nt_image_headers64
mov eax, dword [rbp + 0x7f]
movzx r14d, word [rbp + 0x7f]
movzx r12d, byte [rbp + 0x7f]
movzx r13d, byte [rbp + 0x7f]
mov dword [rbp - 0x51], r9d
mov qword [rbp - 0x19], rbx
mov dword [rbp - 0x39], eax
nop dword [rax]
cmp r15d, 0x44e8
ja 0x1800803dd
je 0x180080c19
mov eax, r15d
sub eax, 0x5c
je 0x18008037a
sub eax, 0x30
je 0x18008034c
sub eax, 0x30
je 0x1800802dd
sub eax, 0x54
je 0x1800802a6
cmp eax, 0x2c38
jne 0x180080565
mov eax, dword [rbp - 0x31]
cmp eax, 0xffffffff
je 0x180080591
test al, 0xa0
je 0x180080591
jmp 0x180080565
xor eax, eax
mov qword [rbp - 0x21], rcx
mov r14d, eax
mov rax, rcx
nop dword [rax]
nop word [rax + rax]
mov byte [rax], r14b
lea rax, [rax + 1]
inc r14w
cmp r14w, r11w
jb 0x1800802c0
mov byte [rcx + 0x100], 0
jmp 0x180080565
mov rax, qword [rsi + 0x1e8]
mov r11d, dword [rax + 0x14]
add rax, 0x20
mov dword [rbp - 0x39], r11d
mov qword [rsi + 0x1e8], rax
cmp rax, qword [rsi + 0x1f0]
jae 0x180080309
test dword [rax + 0x10], 0x200
jne 0x18008036f
lea r9, str.NtUserCallOneParam.SETTSFEVENTSTATE
mov r8d, r11d
mov edx, 1
mov rcx, rsi
call fcn.18004dee0
mov ebx, eax
cmp eax, 0xfffffff6
je 0x180080c12
mov eax, dword [rbp + 0x7f]
mov r13, qword [rbp - 0x21]
mov r12d, dword [rbp + 0x7f]
mov dword [rbp - 0x51], eax
mov rax, qword [rbp - 0x21]
mov qword [rbp - 0x41], rax
mov r15d, 0x3fefc
jmp 0x180080bd2
mov rdx, qword [rsi + 8]
xor r9d, r9d
mov r8d, 0xd6
mov rcx, r10
call fcn.1800e09e0
mov edi, eax
mov r9d, dword [rbp - 0x51]
mov r10, qword [rbp + 0x77]
mov rcx, qword [rbp + 0x67]
mov r11d, pe_nt_image_headers64
jmp 0x180080565
xor eax, eax
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rsi
lea r9d, [rax + 0x62]
call fcn.180064120
mov r15, rax
test rax, rax
je 0x180080591
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [rbp - 0x31], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r9d, dword [rbp - 0x51]
mov r11d, pe_nt_image_headers64
mov r10, qword [rbp + 0x77]
mov rcx, qword [rbp + 0x67]
mov r15d, dword [rbp - 0x41]
jmp 0x180080565
cmp r15d, 0x5a34
je 0x180080587
cmp r15d, 0x5c88
je 0x18008055d
cmp r15d, 0x85e0
je 0x180080544
cmp r15d, 0xb854
je 0x1800804ab
cmp r15d, 0x10ab0
jne 0x180080565
cmp r14w, r11w
jae 0x180080565
mov rbx, qword [rbp - 0x21]
nop dword [rax]
mov r8d, 0x4a
mov eax, r8d
sub eax, 0x4a
je 0x180080470
sub eax, 0x24
je 0x18008044e
cmp eax, 0x24
jne 0x180080487
inc r14w
jmp 0x180080487
movzx edx, r12b
movzx ecx, r14w
movzx eax, byte [rdx + rbx]
mov byte [rcx + rbx], al
movzx eax, r9b
inc eax
mov byte [rdx + rbx], r13b
cdq
idiv dword [r10]
mov r9d, edx
jmp 0x180080487
movzx eax, r14w
movzx r13d, byte [rax + rbx]
movzx eax, r9b
movzx ecx, byte [rax + rsi]
add cl, r13b
add r12b, cl
add r8d, 0x24
cmp r8d, 0xb6
jb 0x180080436
mov dword [rbp - 0x51], r9d
cmp r14w, r11w
jb 0x180080430
mov rbx, qword [rbp - 0x19]
mov rcx, qword [rbp + 0x67]
jmp 0x180080565
mov rcx, qword [rsi]
xor eax, eax
xor r8d, r8d
mov qword [rbp - 0x29], rax
xor edx, edx
lea r9d, [rax + 0x49]
call fcn.180012340
mov dword [rbp - 0x41], eax
lea rcx, [rbp - 0x11]
lea rax, [rbp - 0x41]
mov dword [rbp - 0x49], 0x201
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rbp - 0x49]
mov r8d, 0xc8
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.1800acbb0
mov qword [rbp - 0x19], rax
mov rbx, rax
test eax, eax
jne 0x180080c12
mov r8, qword [rsi + 0x1f0]
lea rax, [rbp - 0x49]
mov rcx, qword [rsi + 0x1e8]
lea rdx, [rbp - 0x41]
mov qword [rsp + 0x28], rax
mov r9d, 0xb5
lea rax, [rbp - 0x29]
mov dword [rbp - 0x49], 0x400
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x41], 0x200
call fcn.180046270
jmp 0x180080363
xor r9b, r9b
mov byte [rcx + 0x101], 0
xor r12b, r12b
mov dword [rbp - 0x51], r9d
xor eax, eax
movzx r14d, ax
jmp 0x180080565
add qword [rsi + 0x1e8], 0x20
imul eax, dword [rbp + 0x7f], 0x7d
add r15d, eax
mov dword [rbp - 0x41], r15d
cmp r15d, dword [rbp - 0x59]
jbe 0x180080250
mov r9d, dword [rbp + 0x7f]
xor r14d, r14d
mov r11d, dword [rbp - 0x39]
jmp 0x1800805a3
test byte [rbp - 0x31], 1
je 0x1800808bd
mov eax, 0xffffffff
jmp 0x180080c1b
mov r11d, dword [rbp + 0x7f]
mov dword [rbp - 0x39], r11d
mov r8, qword [rbp - 0x21]
mov r15d, r9d
mov edx, dword [rbp + 0x7f]
mov r13, qword [rbp - 0x21]
mov r12d, dword [rbp + 0x7f]
mov qword [rbp - 0x41], r8
mov dword [rbp - 0x51], edx
imul eax, r9d, 0x77a
cmp r15d, eax
ja 0x180080c19
cmp r15d, 0x27fa4
ja 0x180080884
je 0x180080803
cmp r15d, 0xbc
je 0x1800807c2
cmp r15d, 0x8084
je 0x180080784
cmp r15d, 0x1004c
je 0x18008071e
cmp r15d, 0x18014
je 0x180080644
cmp r15d, 0x1ffdc
jne 0x180080bd6
add qword [rsi + 0x1e8], 0x20
lea r8, [rbp - 0x59]
mov rcx, qword [rsi]
mov edx, 0x7a
mov dword [rbp - 0x59], 0x30
call fcn.180089dc0
mov r13, rax
jmp 0x180080bd2
mov rcx, qword [rbp - 0x29]
add rcx, 0x20
mov qword [rsi + 0x1f0], r8
mov qword [rsi + 0x1e8], rcx
cmp rcx, r8
jae 0x180080675
lea rax, [rcx + 0x20]
cmp rax, r8
jae 0x180080675
test dword [rcx + 0x10], 0x100040
jne 0x180080703
mov r14d, 0x94
nop dword [rax + rax]
mov eax, r14d
sub eax, 0x94
je 0x1800806cf
sub eax, 0x64
je 0x1800806aa
sub eax, 0x64
je 0x18008069f
cmp eax, 0x64
je 0x180080341
jmp 0x1800806eb
cmp ebx, 0xfffffff6
je 0x180080c12
jmp 0x1800806eb
mov qword [rsp + 0x20], r8
lea r9, str.IDBCursor::updateRequestSetup
mov r8d, dword [r8 + 0x14]
mov edx, 1
mov rcx, rsi
call fcn.18004dee0
mov r8, qword [rbp - 0x41]
mov ebx, eax
jmp 0x1800806eb
mov r8, qword [rsi + 0x1e8]
mov qword [rbp - 0x41], r8
cmp r8, qword [rsi + 0x1f0]
jb 0x1800806eb
sub r8, 0x20
mov qword [rbp - 0x41], r8
add r14d, 0x64
cmp r14d, 0x224
jb 0x180080680
mov rcx, qword [rsi + 0x1e8]
mov r9d, dword [rbp + 0x7f]
test dword [rcx + 0x10], 0x100000
mov eax, 0x80
mov r12d, 4
cmove r12d, eax
jmp 0x180080bd6
mov rax, qword [rsi + 0x1e8]
mov r14, qword [rbp - 0x29]
cmp rax, r14
jae 0x180080bd6
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [rax + 0x14]
lea r9, str.Entity__0_was_not_found
mov edx, 1
mov qword [rsp + 0x20], rax
mov rcx, rsi
call fcn.18004dee0
mov ebx, eax
cmp eax, 0xfffffff6
je 0x180080c12
mov rax, qword [rsi + 0x1e8]
add rax, 0x20
mov qword [rsi + 0x1e8], rax
cmp rax, r14
jb 0x180080740
jmp 0x180080bd2
mov rax, qword [rsi + 0x1f0]
lea rdx, [rbp - 0x59]
mov qword [rbp - 0x41], rax
xor r9d, r9d
mov rax, qword [rbp - 0x29]
mov r8, rsi
mov ecx, 0x121
mov qword [rsi + 0x1f0], rax
mov dword [rbp - 0x59], r14d
call fcn.1800243d0
mov ebx, eax
cmp eax, 0xfffffff6
je 0x180080c12
jmp 0x180080bd2
mov r14, qword [rbp - 0x29]
cmp qword [rsi + 0x1e8], r14
je 0x1800807dc
cmp r14, qword [rsi + 0x1f0]
jb 0x180080bd6
lea r9, str.__int___OVERLOADABLE___any_TYPE16_in____
mov r8d, r11d
mov edx, 1
mov rcx, rsi
call fcn.18004dee0
mov ebx, eax
cmp eax, 0xfffffff6
je 0x180080c12
jmp 0x180080bd2
test r13, r13
je 0x180080bf3
mov r9d, 0xa7
mov dword [rbp - 0x59], 0x30
xor r8d, r8d
lea rcx, [rbp - 0x59]
mov rdx, r13
call fcn.180056ec0
mov rcx, qword [rsi]
lea rdx, [rbp - 0x59]
mov r9d, 0x134
mov dword [rbp - 0x59], 0x30
mov r8, r13
call fcn.1800d9ca0
mov rcx, qword [rsi]
lea rax, [rbp - 0x59]
mov dword [rsp + 0x30], 0x70
lea rdx, [rbp - 0x31]
mov qword [rsp + 0x28], rax
mov r9, r13
lea rax, [rbp - 0x49]
mov dword [rbp - 0x49], r14d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x59], r14d
mov dword [rbp - 0x31], 0x53
call fcn.18005c020
jmp 0x180080bd2
cmp r15d, 0x2ff6c
je 0x180080950
cmp r15d, 0x37f34
je 0x180080902
cmp r15d, 0x3fefc
je 0x180080c19
cmp r15d, 0x47ec4
je 0x1800808c4
cmp r15d, 0x4fe8c
jne 0x180080bd6
xor eax, eax
jmp 0x180080c1b
mov rax, qword [rsi + 0x1e8]
mov rcx, qword [rsi + 0x1f0]
cmp rax, rcx
jae 0x180080bd6
nop dword [rax + rax]
test dword [rax + 0x10], 0x40000
jne 0x180080bd6
add rax, 0x20
mov qword [rsi + 0x1e8], rax
cmp rax, rcx
jb 0x1800808e0
jmp 0x180080bd6
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov qword [rsp + 0x28], r14
xor r8d, r8d
mov edx, 0xd8
mov qword [rsp + 0x20], r14
mov rcx, rsi
call fcn.1800b3fe0
mov rax, qword [rsi + 0x1e8]
cmp rax, qword [rsi + 0x1f0]
jae 0x18008093f
add rax, 0x20
mov qword [rsi + 0x1e8], rax
mov edi, r14d
jmp 0x180080bd2
mov r15d, 5
nop word [rax + rax]
mov eax, r15d
sub eax, 5
je 0x180080af8
cmp eax, 1
jne 0x180080b1b
cmp edx, 0x1f
jne 0x180080a13
mov r14d, 0xd9
mov eax, r14d
sub eax, 0xd8
je 0x1800809c6
cmp eax, 1
jne 0x1800809fb
cmp dword [r13 + 0x2c], 0
jbe 0x1800809fb
mov rax, qword [rsi + 0x1e8]
lea r9, str.Nothing_to_print__no_preview_available.
mov edx, 2
mov rcx, rsi
mov r8d, dword [rax + 0x14]
call fcn.18004dee0
mov ebx, eax
cmp eax, 0xfffffff6
je 0x180080c12
jmp 0x1800809fb
add qword [rsi + 0x1e8], 0x20
lea r8, [r13 + 0x2c]
mov r9, rsi
mov dword [rbp - 0x59], r12d
lea rdx, [rbp - 0x59]
mov ecx, 0x64
call fcn.18001cf30
mov ebx, eax
cmp eax, 0xfffffff6
je 0x180080c12
cmp eax, 0xffffffee
je 0x180080b82
dec r14d
cmp r14d, 0xd7
ja 0x180080984
mov edx, dword [rbp - 0x51]
jmp 0x180080b1b
cmp edx, 0x11
jne 0x180080b2d
mov r14d, 0x124
mov eax, r14d
sub eax, 0x121
je 0x180080abf
sub eax, 1
je 0x180080a6f
sub eax, 1
je 0x180080a50
cmp eax, 1
jne 0x180080ae3
add qword [rsi + 0x1e8], 0x20
jmp 0x180080ae3
mov rcx, qword [rsi]
lea r8, [rbp - 9]
mov r9d, 0x134
mov dword [rbp - 0x59], 0x18
lea rdx, [rbp - 0x59]
call fcn.1800d9ca0
jmp 0x180080ae3
xor ecx, ecx
lea rax, [rbp - 9]
mov qword [rsp + 0x38], rcx
xor edx, edx
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov qword [rsp + 0x20], rcx
lea ecx, [rdx + 0x68]
call fcn.180019fc0
cmp eax, 0xfffffff6
je 0x180080c12
mov r9, rsi
mov dword [rbp - 0x59], r12d
lea r8, [rbp + 0x1f]
mov ecx, 0x64
lea rdx, [rbp - 0x59]
call fcn.18001cf30
mov ebx, eax
jmp 0x180080ae3
mov r8d, 0x10d
lea rcx, [rbp - 9]
mov rdx, r13
call fcn.1800d3940
cmp ebx, 0xfffffff6
je 0x180080c12
cmp ebx, 0xffffffee
je 0x180080b82
dec r14d
cmp r14d, 0x120
ja 0x180080a22
mov edx, dword [rbp - 0x51]
jmp 0x180080b1b
mov rax, qword [rsi + 0x1e8]
cmp rax, qword [rsi + 0x1f0]
jae 0x180080b82
mov ecx, dword [rax + 0x10]
test cl, 4
je 0x180080b4c
mov edx, dword [rax + 0x18]
mov dword [rbp - 0x51], edx
cmp edx, 2
je 0x180080b3d
inc r15d
cmp r15d, 7
jb 0x180080960
jmp 0x180080950
mov rax, qword [rsi + 0x1e8]
lea r9, str.nodelinkIt___nodelinks.end__
jmp 0x180080b61
cmp r12d, 4
je 0x180080b82
lea r9, str.UdpBindOperation::BindHandler
jmp 0x180080b61
mov edx, 0x80
cmp r12d, edx
jne 0x180080b5a
test cl, cl
js 0x180080b82
lea r9, str.___uchar__ushort__uint__ulong
mov r8d, dword [rax + 0x14]
mov edx, 1
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.18004dee0
mov ebx, eax
cmp eax, 0xfffffff6
je 0x180080c12
mov rcx, qword [rsi]
mov r9d, 0x49
xor r8d, r8d
xor edx, edx
mov r15d, 0x2ff6c
call fcn.180012340
mov dword [r13 + 0x28], eax
mov r9d, 0x49
mov rcx, qword [rsi]
xor r8d, r8d
xor edx, edx
call fcn.180012340
mov rcx, qword [rbp - 0x11]
lea r9, [rbp - 0x59]
lea r8, [rbp - 0x49]
mov dword [rbp - 0x59], eax
mov edx, 0x110
mov dword [rbp - 0x49], 0xffffffff
call fcn.180023ef0
mov r9d, dword [rbp + 0x7f]
mov edx, dword [rbp - 0x51]
mov r8, qword [rbp - 0x41]
mov r11d, dword [rbp - 0x39]
imul eax, r9d, 0xae
add r15d, eax
xor r14d, r14d
jmp 0x1800805bc
mov rax, qword [rsi + 0x1e8]
lea r9, str.VC_LINK_Switch_useprofile_usex86pgd
mov edx, 1
mov rcx, rsi
mov r8d, dword [rax + 0x14]
call fcn.18004dee0
mov eax, 0xfffffff6
jmp 0x180080c1b
mov eax, edi
mov rbx, qword [rsp + 0x108]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret