Function at 0x140008468
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
or r15, 0xffffffffffffffff
mov dword [0x140043b28], edi
mov rcx, qword [rcx]
mov r13, r15
inc r13
cmp word [rcx + r13*2], di
jne 0x140008499
call fcn.1400117a4
mov rbp, rax
mov r14, rax
mov eax, 0x3a
lea r12d, [rax - 0x39]
cmp word [rbp], ax
je 0x14001ae6a
mov ecx, 0x250
call fcn.14000b108
mov qword [rsi + 0x30], rax
mov ebp, 0x5c
movzx r14d, word [r14]
cmp r14w, bp
je 0x140008660
mov rax, qword [rsi]
test rax, rax
je 0x1400086fe
mov edx, ebp
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcsrchr]
mov rbx, rax
mov rax, qword [rsi]
test rbx, rbx
je 0x1400086fe
add rbx, 2
lea rdx, [0x140032420]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x140008660
lea rdx, [0x140032418]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x140008660
cmp dword [0x14003b12c], 4
je 0x1400086d9
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
or ebx, 0xffffffff
mov ebp, eax
cmp eax, ebx
jne 0x14000864f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [0x140043b28], eax
cmp ebp, ebx
jne 0x140008656
mov ebp, 0x5c
mov rax, qword [rsi]
mov r8d, r12d
mov rbx, rdi
mov rdx, rax
movzx ecx, word [rax]
test cx, cx
je 0x1400085b4
mov r9d, 0x3a
cmp cx, bp
je 0x140008632
cmp cx, r9w
je 0x140008628
add rdx, 2
add r8d, r12d
movzx ecx, word [rdx]
test cx, cx
jne 0x140008592
mov qword [rsi + 0x18], rbx
test rbx, rbx
je 0x14000872b
cmp word [rbx], di
lea rax, [rbx + 2]
cmove rax, rbx
mov qword [rsi + 0x20], rax
test rbx, rbx
je 0x140008604
mov edx, 0x2a
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_wcschr]
test rax, rax
je 0x14000863a
or dword [rsi + 0x38], 8
mov dword [0x140043ab0], r12d
mov edx, 0x2e
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_wcschr]
mov rdi, rax
mov rbx, qword [rsp + 0x50]
mov eax, r12d
mov rbp, qword [rsp + 0x58]
mov qword [rsi + 0x28], rdi
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
cmp r8d, 2
jne 0x1400085a5
mov rbx, rdx
jmp 0x1400085a5
mov edx, 0x3f
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_wcschr]
test rax, rax
je 0x1400085f3
jmp 0x1400085e8
mov eax, edi
jmp 0x140008565
test bpl, 0x10
je 0x140008573
mov rbx, qword [rsi]
lea rax, [0x140032114]
mov edx, 0x5c
lea rbp, [0x140032116]
cmp r14w, dx
cmovne rbp, rax
test rbx, rbx
je 0x140008733
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_wcsrchr]
mov r14, qword [rsi]
test rax, rax
je 0x14001af3b
lea ebx, [r13 + 5]
lea ecx, [rbx + rbx]
call fcn.14000b108
movsxd rbx, ebx
mov r8, r14
mov rdx, rbx
mov qword [rsi], rax
mov rcx, rax
call fcn.1400106e0
mov rcx, qword [rsi]
mov r8, rbp
mov rdx, rbx
call fcn.140010600
mov rax, qword [rsi + 0x30]
mov dword [rax], 0x10
jmp 0x140008573
cmp dword [0x140043ac0], r12d
je 0x140008549
cmp dword [0x14003b128], r12d
jne 0x140008578
mov dword [0x14003b128], edi
jmp 0x140008549
mov rbx, rax
mov rcx, r15
inc rcx
cmp word [rax + rcx*2], di
jne 0x140008704
cmp rcx, 2
jb 0x14000850c
mov ecx, 0x3a
cmp word [rax + 2], cx
jne 0x14000850c
jmp 0x14001af32
mov rbx, rax
jmp 0x1400085cc
mov r14, rbx
jmp 0x14001af3b
cmp r13d, 2
jle 0x1400084c1
mov word [r14], di
xor ecx, ecx
sub r14, 2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetErrorMode]
mov rcx, qword [rsi]
mov edx, 0x8000
mov r12d, eax
call fcn.140011ae0
mov ebx, eax
cmp eax, r15d
je 0x14001aec7
mov ecx, eax
call fcn.14000f7c8
test eax, eax
jne 0x14001aeb1
mov ecx, ebx
call fcn.14002cdc8
test eax, eax
je 0x14001aec7
mov ecx, ebx
call fcn.14000f7c8
test eax, eax
jne 0x14001af17
mov ecx, ebx
call fcn.14002cdc8
test eax, eax
jmp 0x14001af15
cmp dword [0x14003b12c], 4
mov eax, 0x3a
mov word [rbp], ax
mov r14, rbp
jne 0x14001af00
cmp dword [0x140043abc], edi
jne 0x14001aef4
mov r8, qword [rsi]
lea edx, [rax - 0x39]
mov ecx, 0x236b
call fcn.140015118
mov dword [0x140043ab8], 1
jmp 0x14001af12
mov r8, qword [rsi]
mov edx, 1
mov ecx, 0x236b
call fcn.140015118
cmp ebx, r15d
je 0x14001af1e
mov ecx, ebx
call fcn.14000c8e8
mov ecx, r12d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetErrorMode]
mov r12d, 1
jmp 0x1400084c1
lea rbx, [rax + 4]
jmp 0x14000850c
inc r15
cmp word [rbx + r15*2], di
jne 0x14001af3b
cmp r15, 2
jne 0x14000869c
lea eax, [r15 + 0x38]
cmp word [rbx + 2], ax
je 0x1400086ca
jmp 0x14000869c