Function at 0x140280d0b
Capabilities:
Get file attributes

Disassembly:
push rax
pushf
mov eax, 0x7de32cb8
pushf
not eax
add eax, 0xf2c2c5f3
xor eax, 0xbec9efc6
rol eax, 0xd
popf
pushf
not eax
add eax, 0x8097506b
xor eax, 0xd88b882c
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xcf0128e1
xor eax, 0xee740159
rol eax, 0x50
popf
cmp eax, 4
jne 0x140280d5b
popf
pop rax
jmp 0x140281090
cmp eax, 0
jne 0x140280d6a
popf
pop rax
jmp 0x140280e0f
cmp eax, 3
jne 0x140280d79
popf
pop rax
jmp 0x140281000
cmp eax, 1
jne 0x140280d88
popf
pop rax
jmp 0x140280ef8
cmp eax, 0xa
jne 0x140280d97
popf
pop rax
jmp 0x1402813e3
cmp eax, 7
jne 0x140280da6
popf
pop rax
jmp 0x140281301
cmp eax, 6
jne 0x140280db5
popf
pop rax
jmp 0x140281258
cmp eax, 0xb
jne 0x140280dc4
popf
pop rax
jmp 0x14028142d
cmp eax, 0xc
jne 0x140280dd3
popf
pop rax
jmp 0x140281496
cmp eax, 8
jne 0x140280de2
popf
pop rax
jmp 0x14028137e
cmp eax, 5
jne 0x140280df1
popf
pop rax
jmp 0x14028110f
cmp eax, 2
jne 0x140280e00
popf
pop rax
jmp 0x140280f65
cmp eax, 9
jne 0x140280e0f
popf
pop rax
jmp 0x1402813de
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rdx, rcx
mov ecx, 0x42560f27
pushf
not ecx
add ecx, 0xe29f9d5b
xor ecx, 0x824e98a7
rol ecx, 0xb9
popf
pushf
not ecx
add ecx, 0xbe7a29f9
xor ecx, 0x96320fcb
rol ecx, 0x56
popf
call fcn.140183f4b
mov ebx, eax
test eax, eax
jne 0x140280e9f
push rax
pushf
mov eax, 0xb7b5767f
pushf
not eax
add eax, 0x8650eb71
xor eax, 0xf2dd674a
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xb0110fb3
xor eax, 0x8ca175e1
rol eax, 0x91
popf
pushf
not eax
add eax, 0xba5e6f7d
xor eax, 0x9c1396bf
rol eax, 0x43
popf
jmp 0x140280d4c
push rax
pushf
mov eax, 0x5d77f809
pushf
not eax
add eax, 0xb9633dad
xor eax, 0xbe7b3820
rol eax, 0x25
popf
pushf
not eax
add eax, 0xa19c3f37
xor eax, 0xd2bc3071
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x9bd6862f
xor eax, 0x839dc344
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xc8c9a211
xor eax, 0xe78d47bc
rol eax, 0xd7
popf
jmp 0x140280d4c
and dword [rsp + 0x38], eax
jmp 0x140280efd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x3c], eax
jmp 0x14028142d
mov rcx, rdi
jmp 0x140280f69
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140280fa7
push rax
pushf
mov eax, 0x59f00273
pushf
not eax
add eax, 0xeb08d545
xor eax, 0xe296bbea
rol eax, 4
popf
pushf
not eax
add eax, 0xd4427fa2
xor eax, 0x835bebea
rol eax, 0xc5
popf
jmp 0x140280d4c
push rax
pushf
mov eax, 0x24226c95
pushf
not eax
add eax, 0xf7784f66
xor eax, 0x8b33ca04
rol eax, 0x76
popf
pushf
not eax
add eax, 0xae0cd9a2
xor eax, 0xf036d822
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xa65c1e89
xor eax, 0xa8ef785c
rol eax, 0x94
popf
pushf
not eax
add eax, 0xd867d9ed
xor eax, 0xd5eb4db6
rol eax, 0xf2
popf
jmp 0x140280d4c
test al, 0x10
je 0x140281037
push rax
pushf
mov eax, 0xcfa0de45
pushf
not eax
add eax, 0xc806c475
xor eax, 0xab633d42
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xef7a3ebe
xor eax, 0x89cfdde2
rol eax, 0xc7
popf
jmp 0x140280d4c
push rax
pushf
mov eax, 0x28b5d9a5
pushf
not eax
add eax, 0xe9d608d0
xor eax, 0xfb4ccfcf
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xda83a5ed
xor eax, 0xfb901400
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xbde8e347
xor eax, 0xda41b492
rol eax, 0x36
popf
pushf
not eax
add eax, 0xd893933b
xor eax, 0xaf2d2fb9
rol eax, 0xd8
popf
jmp 0x140280d4c
bt eax, 0xa
jae 0x1402810c9
push rax
pushf
mov eax, 0xc202b415
pushf
not eax
add eax, 0xafb8e6c8
xor eax, 0x99db8f63
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xfc3f42d5
xor eax, 0x87718503
rol eax, 0xab
popf
jmp 0x140280d4c
push rax
pushf
mov eax, 0xb3b5942b
pushf
not eax
add eax, 0xc8d1a2da
xor eax, 0xb70d1d9a
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x89c0b40e
xor eax, 0xf8a2b6d7
rol eax, 0x32
popf
pushf
not eax
add eax, 0xede880eb
xor eax, 0x9db163fe
rol eax, 0x80
popf
jmp 0x140280d4c
mov r9d, 0x9b404d9b
pushf
not r9d
add r9d, 0x8bc4bd73
xor r9d, 0xe4b196e7
rol r9d, 0x67
popf
pushf
not r9d
add r9d, 0xfb90eab2
xor r9d, 0xc521ab04
rol r9d, 0xed
popf
pushf
not r9d
add r9d, 0xa46fc6ed
xor r9d, 0xe5396236
rol r9d, 0x48
popf
lea rcx, [rsp + 0x38]
mov r8d, 0xa90f5fe3
pushf
not r8d
add r8d, 0xa1444719
xor r8d, 0xa1eaf462
rol r8d, 0x25
popf
pushf
not r8d
add r8d, 0x860c4714
xor r8d, 0xd1a7d167
rol r8d, 0x4c
popf
pushf
not r8d
add r8d, 0xd2a3b207
xor r8d, 0xf0ceb848
rol r8d, 0xaf
popf
mov rdx, rdi
call fcn.14038ad7f
mov rcx, qword [rsp + 0x38]
mov edi, eax
cmp rcx, 0xffffffffffffffff
je 0x140281211
push rax
pushf
mov eax, 0x68b36053
pushf
not eax
add eax, 0xa18ec8fb
xor eax, 0xd0992c2e
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xa9861775
xor eax, 0xa8244151
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xebbfa53f
xor eax, 0xe77f4618
rol eax, 0x93
popf
jmp 0x140280d4c
push rax
pushf
mov eax, 0x8077c48c
pushf
not eax
add eax, 0xbc42dd64
xor eax, 0x82a60a5c
rol eax, 0x26
popf
pushf
not eax
add eax, 0xf1932c06
xor eax, 0xf9efadf3
rol eax, 0x30
popf
pushf
not eax
add eax, 0xd64d30a5
xor eax, 0xb1690103
rol eax, 0x12
popf
jmp 0x140280d4c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x1402812bb
push rax
pushf
mov eax, 0x4525659
pushf
not eax
add eax, 0xa835ebc5
xor eax, 0xa5b9dff3
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xb7e65188
xor eax, 0x97339ebc
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xa8848859
xor eax, 0xaaa2f491
rol eax, 0xb
popf
pushf
not eax
add eax, 0x8e3b7ba8
xor eax, 0xe354b881
rol eax, 0x57
popf
jmp 0x140280d4c
push rax
pushf
mov eax, 0xa0dd0e41
pushf
not eax
add eax, 0xb803cbe6
xor eax, 0xa53a3675
rol eax, 0x28
popf
pushf
not eax
add eax, 0xf376768b
xor eax, 0xd4972f26
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x8c22ec5a
xor eax, 0x901dc142
rol eax, 0xd6
popf
jmp 0x140280d4c
test edi, edi
jne 0x14028134b
push rax
pushf
mov eax, 0xb9f798dd
pushf
not eax
add eax, 0xb70d0d65
xor eax, 0xf575b6dc
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x97277897
xor eax, 0xe14af866
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xba66031b
xor eax, 0xf7726b95
rol eax, 0x4d
popf
jmp 0x140280d4c
push rax
pushf
mov eax, 0x7638ed6b
pushf
not eax
add eax, 0xb571ce4c
xor eax, 0x9bc7d230
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x9df60a91
xor eax, 0xb854c096
rol eax, 0x61
popf
jmp 0x140280d4c
and dword [rsp + 0x3c], 0
jmp 0x1402813e3
or dword [rsp + 0x3c], 0xffffffff
mov dword [rsp + 0x38], ebx
push rax
pushf
mov eax, 0xaea60f5b
pushf
not eax
add eax, 0xc8cb4d26
xor eax, 0xda5bd260
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xc83b6275
xor eax, 0xf588e2bf
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x9cb21131
xor eax, 0xbda90039
rol eax, 0x87
popf
jmp 0x140280d4c
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
call fcn.1401edd39
int3