Function at 0x140096f54
Capabilities:
Get file attributes

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x17b10
call fcn.1400baa60
sub rsp, rax
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x17b48], rbx
mov qword [rsp + 0x17b50], rbp
mov qword [rsp + 0x17b58], rsi
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x17b00], rax
mov rbx, rcx
xor esi, esi
mov word [0x140127d60], si
mov word [0x140127560], si
mov word [0x140126d60], si
mov eax, dword [0x14012ae18]
lea r12, [0x14012a620]
lea r13, [0x14012a770]
lea rdi, [0x14012a8c0]
lea ebp, [rsi + 1]
test bpl, al
jne 0x14009700b
or eax, ebp
mov dword [0x14012ae18], eax
mov rcx, r12
call fcn.14006bae0
nop
mov rcx, r13
call fcn.14006bae0
nop
mov rcx, rdi
call fcn.14006bae0
nop
lea rcx, [0x1400c11b0]
call fcn.1400ab10c
nop
mov qword [0x140128568], r12
mov rcx, r12
call fcn.14006b85c
mov rcx, r13
call fcn.14006b85c
mov rcx, rdi
call fcn.14006b85c
mov dl, byte [0x1400fec05]
mov byte [0x14012ae16], dl
cmp rbx, rsi
jne 0x14009706b
mov qword [rsp + 0x20], r12
lea r9, [0x1400908c4]
mov r8, qword [0x1400ffd80]
lea rdx, str.FINDFILES
mov rcx, qword [0x1400ec660]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, rsi
je 0x140097a03
lea r9, [0x140093ccc]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 7]
call fcn.14008a1d0
lea rcx, str.HELPSearchResults
call fcn.140087f40
mov r15d, 0x400
cmp rbx, rsi
je 0x140097167
mov rcx, rsi
lea rax, [0x14010d6ec]
mov al, byte [rcx + rax]
mov byte [rsp + rcx + 0x56f0], al
add rcx, rbp
cmp al, sil
jne 0x14009709d
mov byte [0x14012ae12], bpl
mov byte [0x14012ae11], bpl
mov byte [0x14012ae10], sil
lea rdx, [0x1400c42d4]
mov rcx, rdi
call fcn.14006bb28
mov rcx, qword [0x14010ef20]
call fcn.14006b7f0
mov r9, r15
lea r8, [rsp + 0x6300]
lea rdx, [rsp + 0x5b00]
mov rcx, qword [0x14010ef20]
call fcn.14006bbc4
cmp al, sil
je 0x140097233
mov r9, r15
lea r8, [rsp + 0x6300]
lea rdx, [rsp + 0x6300]
lea rcx, [rsp + 0x5b00]
call fcn.1400529c4
lea rdx, [rsp + 0x6300]
mov rcx, r12
call fcn.14006bb28
mov r9, r15
lea r8, [rsp + 0x6300]
lea rdx, [rsp + 0x5b00]
mov rcx, qword [0x14010ef20]
call fcn.14006bbc4
cmp al, sil
jne 0x14009710e
jmp 0x140097233
mov byte [rsp + 0x56f0], sil
cmp byte [0x14012aa10], sil
je 0x140097233
or rdx, 0xffffffffffffffff
cmp byte [0x14012ae13], sil
je 0x1400971a5
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
movzx eax, word [0x1400cc7c0]
mov word [rdi], ax
cmp byte [0x14012ae14], sil
je 0x1400971ca
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
movzx eax, word [0x1400cc7bc]
mov word [rdi], ax
cmp byte [0x14012ae15], sil
je 0x1400971ef
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
movzx eax, word [0x1400cc7b8]
mov word [rdi], ax
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
movzx eax, word [str.htc]
mov word [rdi], ax
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
lea rdx, [0x14012aa10]
xor ecx, ecx
mov al, byte [rdx + rcx]
mov byte [rdi + rcx], al
add rcx, rbp
test al, al
jne 0x140097226
lea r14, [0x140105fe0]
cmp byte [0x1400fec05], sil
je 0x140097256
mov r8, r15
lea rdx, [rsp + 0x7300]
mov rcx, r14
call fcn.1400129e8
mov dword [0x140128560], esi
mov byte [0x140126bc8], sil
mov byte [0x140126bc9], bpl
mov r15d, 2
cmp byte [0x14012ae10], sil
je 0x140097287
cmp byte [0x14012ae16], sil
jne 0x140097287
mov r8d, r15d
jmp 0x14009728a
mov r8d, esi
cmp rbx, rsi
cmove rbx, r13
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov rdx, rbx
lea rcx, [rsp + 0x2ab0]
call fcn.140064168
nop
lea rcx, [rsp + 0xdb4]
call fcn.14006e33c
lea rcx, [rsp + 0xdd8]
call fcn.14006e33c
lea rcx, [rsp + 0xdfc]
call fcn.14006e33c
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x2ab0]
call fcn.140064d60
cmp eax, esi
jne 0x14009790a
lea r13, [0x14012a8c0]
cmp byte [0x1400ffcf0], sil
jne 0x14009790a
call fcn.140047564
mov edx, dword [0x140128560]
cmp edx, esi
je 0x140097329
mov r8b, byte [0x14012ae16]
mov rcx, qword [0x1400fec08]
call fcn.140093500
mov dword [0x140128560], esi
cmp word [rsp + 0x5a0], 0x2e
jne 0x140097349
cmp word [rsp + 0x5a2], 0x5c
jne 0x140097349
lea rcx, [rsp + 0x5a4]
jmp 0x140097351
lea rcx, [rsp + 0x5a0]
lea rdx, [rsp + 0x6300]
movzx eax, word [rcx]
mov word [rdx], ax
add rcx, r15
add rdx, r15
cmp ax, si
jne 0x140097359
mov edx, 0x50
lea rcx, [rsp + 0x6300]
call fcn.140047108
mov rdi, rax
mov ecx, 0x523
call fcn.140061d94
mov r8, rax
mov r9, rdi
mov edx, 0x400
lea rcx, [rsp + 0x6b00]
call fcn.1400287d0
lea r8, [rsp + 0x6b00]
mov edx, 0x9b
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp byte [0x14012ae12], sil
je 0x140097747
mov rcx, r13
call fcn.14006b7f0
mov rcx, r13
call fcn.14006bcc8
mov rdi, rax
cmp rax, rsi
je 0x140097747
xor r8d, r8d
lea rdx, [rsp + 0x5a0]
mov rcx, rdi
call fcn.140046958
cmp al, sil
jne 0x140097411
mov rcx, r13
call fcn.14006bcc8
mov rdi, rax
cmp rax, rsi
jne 0x1400973e4
jmp 0x140097747
mov bl, bpl
cmp word [rdi], 0x2a
jne 0x14009745b
cmp word [rdi + 2], si
jne 0x14009745b
mov al, byte [0x14012ae16]
cmp al, sil
jne 0x140097461
mov byte [rsp + 0x30], bpl
mov byte [rsp + 0x28], sil
mov byte [rsp + 0x20], sil
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x5a0]
mov rcx, r14
call fcn.140016600
mov bl, al
cmp al, sil
je 0x140097747
mov al, byte [0x14012ae16]
mov qword [0x1400ff4b8], r15
movzx ecx, byte [0x1401077e2]
cmp al, sil
cmovne ecx, ebp
mov byte [0x1401077e2], cl
cmp byte [rsp + 0x56f0], sil
setne r8b
mov r9d, ebp
lea rdx, [rsp + 0x5a0]
mov rcx, r14
call fcn.140015b20
cmp eax, r15d
jne 0x1400974b2
call fcn.140050128
cmp al, sil
je 0x14009790a
jmp 0x1400978ed
cmp eax, ebp
jne 0x140097747
mov word [rsp + 0x5b00], si
mov byte [rsp + 0x30], bpl
mov byte [rsp + 0x28], sil
mov byte [rsp + 0x20], sil
xor r9d, r9d
lea r8, [rsp + 0x5b00]
lea rdx, [rsp + 0x5a0]
mov rcx, r14
call fcn.140016600
lea rdx, [rsp + 0x5b00]
lea rcx, [rsp + 0x5a0]
call fcn.140073f2c
cmp eax, esi
je 0x1400975a8
lea rcx, [rsp + 0x5b00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or edi, 0xffffffff
cmp eax, edi
jne 0x1400978ed
lea rdx, [0x1400c4068]
lea rcx, [rsp + 0x5b00]
call fcn.1400548e4
lea rdx, [rsp + 0x5b00]
lea rcx, [rsp + 0x5a0]
call fcn.140073f2c
cmp eax, esi
je 0x140097565
lea rcx, [rsp + 0x5b00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, edi
jne 0x1400978ed
lea rdx, [0x1400c4070]
lea rcx, [rsp + 0x5b00]
call fcn.1400548e4
lea rdx, [rsp + 0x5b00]
lea rcx, [rsp + 0x5a0]
call fcn.140073f2c
cmp eax, esi
je 0x1400975a8
lea rcx, [rsp + 0x5b00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
movzx ebx, bl
cmp eax, edi
cmovne ebx, esi
cmp bl, sil
je 0x1400978ed
cmp byte [rsp + 0x56f0], sil
jne 0x14009768d
mov edi, esi
mov r8b, bpl
lea rdx, [rsp + 0x1640]
mov rcx, r14
call fcn.140012100
cmp al, sil
je 0x1400978ed
cmp byte [0x1400ffcf0], sil
jne 0x1400978ed
add edi, ebp
test dil, 0x1f
jne 0x1400975f7
call fcn.140047564
mov rcx, r12
call fcn.14006b7f0
mov rcx, r12
call fcn.14006bcc8
cmp rax, rsi
je 0x14009766c
mov r8d, 4
lea rdx, [rsp + 0x1640]
mov rcx, rax
call fcn.140046958
cmp al, sil
jne 0x140097636
mov rcx, r12
call fcn.14006bcc8
cmp rax, rsi
jne 0x14009760c
jmp 0x14009766c
mov ecx, dword [rsp + 0x1e50]
call fcn.140031170
lea rcx, [0x1400c3786]
mov qword [rsp + 0x28], rcx
mov byte [rsp + 0x20], al
lea r9, [rsp + 0x1640]
xor r8d, r8d
lea rdx, [rsp + 0x5a0]
xor ecx, ecx
call fcn.14008db90
mov r8b, bpl
lea rdx, [rsp + 0x1640]
mov rcx, r14
call fcn.140012100
cmp al, sil
jne 0x1400975dd
jmp 0x1400978ed
lea rdx, [rsp + 0x50]
mov rcx, r14
call fcn.140012a24
call fcn.1400829f8
mov r8d, 0x400
lea rdx, [0x14010e71c]
mov rcx, r14
call fcn.140012a08
mov edx, dword [rsp + 0xd0]
mov dword [0x14010c6b4], edx
mov rcx, qword [0x14010ef20]
call fcn.14006b85c
mov rcx, r12
call fcn.14006b7f0
mov rcx, r12
call fcn.14006bcc8
cmp rax, rsi
je 0x1400976fe
mov rdx, rax
mov rcx, qword [0x14010ef20]
call fcn.14006bb34
mov rcx, r12
call fcn.14006bcc8
cmp rax, rsi
jne 0x1400976e2
mov byte [0x14010bdd2], bpl
mov dword [0x14010bd78], esi
mov dword [0x14010bd9c], esi
lea r8, [rsp + 0x56f0]
lea rdx, [0x1400cc7b0]
lea rcx, [0x14010d6eb]
call fcn.1400a8700
mov byte [0x14010d6ca], bpl
mov qword [0x1400ff4b8], r15
mov rcx, r14
call fcn.140010f50
jmp 0x1400978ed
cmp byte [0x14012ae11], sil
je 0x1400978ed
mov rcx, r12
call fcn.14006b7f0
mov rcx, r12
call fcn.14006bcc8
cmp rax, rsi
je 0x1400978ed
mov r8d, 4
lea rdx, [rsp + 0x5a0]
mov rcx, rax
call fcn.140046958
cmp al, sil
jne 0x14009779a
mov rcx, r12
call fcn.14006bcc8
cmp rax, rsi
jne 0x14009776d
jmp 0x1400978ed
cmp byte [rsp + 0x56f0], sil
jne 0x140097800
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rsp + 0x56f0]
xor edx, edx
xor ecx, ecx
call fcn.140034ed0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x7b00]
call fcn.140034ed0
jmp 0x1400978ed
lea rcx, [rsp + 0x1e80]
call fcn.14002fddc
nop
mov byte [rsp + 0x20], sil
mov r9b, bpl
lea r8, [rsp + 0x5a0]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x1e80]
call fcn.1400301ec
cmp al, sil
jne 0x14009784a
lea rcx, [rsp + 0x1e80]
call fcn.1400301b8
jmp 0x1400978ed
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rsp + 0x56f0]
xor edx, edx
xor ecx, ecx
call fcn.140034ed0
mov r8d, 0x10000
lea rdx, [rsp + 0x7b00]
lea rcx, [rsp + 0x1e80]
call fcn.1400309f8
cmp eax, esi
je 0x1400978e0
movsxd rdx, eax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x7b00]
call fcn.140034ed0
mov r8d, 0x10000
lea rdx, [rsp + 0x7b00]
lea rcx, [rsp + 0x1e80]
call fcn.1400309f8
cmp eax, esi
jne 0x14009789c
lea rcx, [rsp + 0x1e80]
call fcn.1400301b8
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x2ab0]
call fcn.140064d60
cmp eax, esi
je 0x1400972f4
mov byte [0x140126bc9], sil
mov edx, dword [0x140128560]
cmp edx, esi
je 0x140097934
mov r8b, byte [0x14012ae16]
mov rcx, qword [0x1400fec08]
call fcn.140093500
mov dword [0x140128560], esi
mov byte [0x140126bc8], sil
mov ecx, 0x270
call fcn.140061d94
mov r8, rax
mov edx, 0x9b
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp byte [0x1400ffcf0], sil
je 0x140097972
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x140097977
call fcn.140087a5c
cmp word [0x140127560], si
je 0x1400979bf
lea rdx, [0x140127560]
lea rdi, [0x1401055a0]
mov rcx, rdi
call fcn.1400450c0
cmp word [0x140127d60], si
je 0x1400979ae
lea rdx, [0x140127d60]
mov rcx, rdi
call fcn.140044af0
lea rdx, [0x140126d60]
mov rcx, rdi
call fcn.140042de4
jmp 0x1400979f6
cmp word [0x140127d60], si
je 0x1400979f6
lea rdi, [0x1401055a0]
mov rcx, rdi
call fcn.140042cc8
lea rdx, [0x140127d60]
mov rcx, rdi
call fcn.140044af0
lea rdx, [0x140126d60]
mov rcx, rdi
call fcn.140042de4
nop
lea rcx, [rsp + 0x2ab0]
call fcn.14006443c
mov rcx, qword [rsp + 0x17b00]
xor rcx, rsp
call fcn.1400a86e0
lea r11, [rsp + 0x17b10]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret