Function at 0x4ad03908
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x240
mov rax, qword [0x4ad2e1c8]
xor rax, rsp
mov qword [rsp + 0x230], rax
xor r15d, r15d
mov r13, rdx
mov r14, rcx
mov r12b, r15b
mov dl, r15b
mov esi, r15d
mov rbp, r15
or ebx, 0xffffffff
mov rax, qword [r14 + 0x70]
movzx edi, word [rax + rbp]
cmp di, 0x22
je 0x4ad0ba2b
cmp di, r15w
je 0x4ad039b4
cmp r12b, r15b
jne 0x4ad03980
cmp dl, r15b
jne 0x4ad03980
lea rcx, str._______t_
movzx edx, di
call qword [sym.imp.msvcrt.dll_wcschr]
cmp rax, r15
jne 0x4ad039b4
cmp ebx, 0xffffffff
jne 0x4ad0399e
lea rcx, [0x4ad3c030]
movzx edx, di
call qword [sym.imp.msvcrt.dll_wcschr]
cmp rax, r15
jne 0x4ad053ec
inc esi
mov word [rsp + rbp + 0x20], di
add rbp, 2
mov dl, r15b
cmp esi, 0x103
jb 0x4ad03949
cmp esi, r15d
je 0x4ad1a9d6
or r12d, 0xffffffff
mov word [rsp + rsi*2 + 0x20], r15w
cmp ebx, 0xffffffff
jne 0x4ad053cd
lea rdx, [rsp + 0x20]
mov r8, r13
mov ecx, 0x2a
call fcn.4ad02ce0
mov ebp, eax
cmp eax, r12d
je 0x4ad0533b
cmp eax, 0x14
je 0x4ad0686a
mov r13b, r15b
mov bl, r15b
cmp ebp, r12d
je 0x4ad0535c
mov rdi, qword [r14 + 0x70]
or rdx, 0xffffffffffffffff
xor eax, eax
mov rcx, rdx
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp esi, ecx
jne 0x4ad1a9e5
mov eax, ebp
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call entry0
mov rbx, qword [rsp + 0x290]
add rsp, 0x240
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov edi, 0x2d
lea rdx, [rsp + 0x20]
mov r8, r13
mov ecx, edi
call fcn.4ad02ce0
cmp eax, edi
jne 0x4ad039f6
jmp 0x4ad1a9de
xor ecx, ecx
mov esi, r15d
mov r12, rcx
mov rax, qword [r14 + 0x70]
movzx edi, word [r12 + rax]
cmp di, cx
je 0x4ad053c8
cmp di, 0x22
je 0x4ad0ba3d
cmp r13b, cl
jne 0x4ad053b1
cmp bl, cl
jne 0x4ad053b1
movzx ecx, di
call qword [sym.imp.msvcrt.dll_iswspace]
xor ecx, ecx
cmp eax, ecx
jne 0x4ad053c8
lea rcx, [0x4ad3bfc0]
movzx edx, di
call qword [sym.imp.msvcrt.dll_wcschr]
xor ecx, ecx
cmp rax, rcx
jne 0x4ad053c8
cmp di, 0x2f
je 0x4ad053c8
inc esi
mov bl, cl
add r12, 2
jmp 0x4ad053bb
cmp r15b, cl
je 0x4ad05364
xor r15d, r15d
jmp 0x4ad03a05
mov r15b, 1
jmp 0x4ad053bb
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, r12d
jne 0x4ad05400
mov eax, ebx
mov esi, ebx
mov word [rsp + rax*2 + 0x20], r15w
jmp 0x4ad039d0
cmp byte [0x4ad2e0ca], r15b
je 0x4ad039b4
mov ebx, esi
jmp 0x4ad0399e
test al, 0x10
je 0x4ad039d0
jmp 0x4ad053dd
mov dword [r14 + 0x80], 1
jmp 0x4ad039f6
cmp r12b, r15b
sete r12b
cmp r12b, r15b
sete dl
jmp 0x4ad0395b
cmp r13b, cl
sete r13b
cmp r13b, cl
sete bl
jmp 0x4ad0537c
or eax, 0xffffffff
jmp 0x4ad03a25
mov eax, edi
jmp 0x4ad03a25
mov rdi, qword [r14 + 0x78]
lea ebx, [rcx + 1]
cmp rdi, r15
je 0x4ad1a9ff
mov rcx, rdx
repne scasw ax, word [rdi]
not rcx
dec rcx
add ebx, ecx
lea ecx, [rbx + rbx]
call fcn.4ad017b8
mov rcx, qword [r14 + 0x70]
movsxd rbx, ebx
lea r8, [rcx + rsi*2]
mov rdx, rbx
mov rcx, rax
mov rdi, rax
call fcn.4ad01744
mov r8, qword [r14 + 0x78]
cmp r8, r15
je 0x4ad1aa34
mov rdx, rbx
mov rcx, rdi
call fcn.4ad01ac0
mov rax, qword [r14 + 0x70]
mov qword [r14 + 0x78], rdi
mov word [rax + rsi*2], r15w
jmp 0x4ad03a23