Function at 0x18006c120
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xbe8]
sub rsp, 0xce8
lea edi, [rdx + 0x9a2]
mov rsi, r8
mov dword [rbp + 0xc38], edi
mov r13d, edx
mov rbx, rcx
cmp edx, edi
jae 0x18006c90b
mov r15, qword [rsp + 0x58]
mov ecx, 0x6e
mov r12d, dword [rbp + 0xc38]
xor r14d, r14d
lea edx, [rcx - 0x49]
nop
cmp r13d, 0x1fe
ja 0x18006c77e
je 0x18006c74c
cmp r13d, 0x137
ja 0x18006c260
je 0x18006c23c
mov eax, r13d
sub eax, 0x63
je 0x18006c206
sub eax, 0x4b
je 0x18006c1ef
sub eax, 1
je 0x18006c1e2
cmp eax, 0x3d
jne 0x18006c8ca
movzx eax, word [0x1800a153c]
mov word [rsp + 0x3e], cx
mov word [rsp + 0x3f], ax
movzx eax, byte [0x1800a153e]
mov byte [rsp + 0x41], al
jmp 0x18006c8ca
mov r15, qword [r9]
mov qword [rsp + 0x58], r15
jmp 0x18006c8ca
movzx eax, word [rbx]
mov word [rbp + 0x838], ax
mov eax, dword [rsi]
mov dword [rbp + 0x94c], eax
jmp 0x18006c8ca
mov eax, dword [str.Name]
lea rcx, [rsp + 0x3d]
mov word [rsp + 0x38], dx
mov r8d, 2
mov dword [rsp + 0x39], eax
lea rdx, [0x1800a1578]
movzx eax, byte [0x1800a1574]
mov byte [rsp + 0x3d], al
call fcn.180073af0
jmp 0x18006c8b9
mov eax, dword [r9]
mov dword [rbp + 0x950], eax
mov dword [rbp + 0x954], r14d
mov word [rbp + 0x94a], r14w
mov qword [rbp + 0x942], r14
jmp 0x18006c8ca
mov eax, r13d
sub eax, 0x138
je 0x18006c729
sub eax, 0x3d
je 0x18006c705
sub eax, 0x4b
je 0x18006c6e7
cmp eax, 1
jne 0x18006c8ca
lea rcx, [rbp + 0x9e0]
call fcn.1800737f4
mov rcx, rax
lea rdx, str.Vse_pregledano:
call fcn.180078e00
test eax, eax
jne 0x18006c2dd
cmp qword [0x1800d6108], 0
jne 0x18006c2dd
test qword [0x1800d57d0], 0x200
mov rcx, qword [r15 + 0x18]
mov qword [0x1800c56e0], rcx
mov qword [0x1800d6108], 1
je 0x18006c2dd
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rbp + 0x9e0]
call fcn.1800737f4
mov rcx, rax
lea rdx, str.UINT64_value
call fcn.180078e00
test eax, eax
jne 0x18006c6c1
mov rdx, qword [0x1800d57d0]
test rdx, 0x8400
je 0x18006c388
mov ebx, 0x5d
mov eax, ebx
sub eax, 0x5a
je 0x18006c350
sub eax, 1
je 0x18006c341
sub eax, 1
je 0x18006c33b
cmp eax, 1
jne 0x18006c37a
mov dword [rbp - 0x40], 0x30
mov dword [rbp - 0x3c], 4
jmp 0x18006c37a
mov byte [rbp - 0x30], 0x18
jmp 0x18006c37a
bt rdx, 0xa
jae 0x18006c37a
mov r8d, 0xa002
jmp 0x18006c35d
bt rdx, 0xf
jae 0x18006c37a
mov r8d, 0xa001
mov rcx, qword [0x1800c56e0]
lea r9, [rbp - 0x40]
mov edx, 0x440
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [0x1800d57d0]
dec ebx
cmp ebx, 0x59
ja 0x18006c315
mov rbx, qword [rbp + 0xc30]
mov ecx, dword [r15 + 0x10]
sub ecx, 0x4e
je 0x18006c460
sub ecx, 0x37
je 0x18006c3a6
cmp ecx, 0xfad
jne 0x18006c6c1
test dl, 4
je 0x18006c460
mov rcx, qword [r15 + 0x18]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rsi, eax
mov rdi, r14
test eax, eax
jle 0x18006c452
mov ebx, 0x78
mov eax, ebx
sub eax, 0x76
je 0x18006c41d
sub eax, 1
je 0x18006c3f6
cmp eax, 1
jne 0x18006c443
mov dword [rsp + 0x60], 5
mov dword [rsp + 0x64], edi
jmp 0x18006c443
lea rax, [rbp + 0x1f0]
mov dword [rsp + 0x68], r14d
mov qword [rsp + 0x78], rax
lea r9, [rsp + 0x60]
mov dword [rbp - 0x80], 0xff
xor r8d, r8d
mov edx, 0x104b
jmp 0x18006c439
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x18006c443
movsxd r8, edi
xor r9d, r9d
mov edx, 0x1008
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.USER32.dll_SendMessageW]
dec ebx
cmp ebx, 0x75
ja 0x18006c3d7
inc rdi
cmp rdi, rsi
jl 0x18006c3d2
mov rsi, qword [rbp + 0xc40]
mov rdx, qword [0x1800d57d0]
mov byte [rbp - 0x10], 0
mov edi, r14d
bt rdx, 0xb
jae 0x18006c6b4
mov rcx, qword [r15 + 0x18]
mov r9d, 2
mov edx, 0x100c
lea r8, [r9 - 3]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14, rax
cmp eax, 0xffffffff
je 0x18006c647
mov esi, 0x114
nop dword [rax]
mov ecx, esi
sub ecx, 0x114
je 0x18006c621
sub ecx, 1
je 0x18006c603
sub ecx, 1
je 0x18006c5fa
cmp ecx, 1
jne 0x18006c635
mov rcx, qword [r15 + 0x18]
lea r9, [rsp + 0x60]
xor r8d, r8d
mov edx, 0x104b
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x18006c635
test byte [rsp + 0x6c], 2
je 0x18006c635
mov ebx, 0x62
lea r15, [0x1800c5280]
nop dword [rax]
cmp ebx, 0x62
je 0x18006c5c8
cmp ebx, 0x4050
je 0x18006c537
cmp ebx, 0x803e
jne 0x18006c5e1
mov edi, 1
jmp 0x18006c5e1
lea rcx, [rbp - 0x10]
mov rax, 0xffffffffffffffff
cmp byte [rcx + rax + 1], 0
lea rax, [rax + 1]
jne 0x18006c542
cmp word [rbp + rax*2 - 0x12], 0x5c
je 0x18006c574
lea rcx, [rbp - 0x10]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18006c560
movzx eax, word [0x18009fa88]
mov word [rcx], ax
lea rcx, [rbp - 0x10]
dec rcx
nop dword [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18006c580
lea r8, [rbp + 0x1f0]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x18006c5a0
mov rcx, qword [0x1800c56a8]
lea r8, [rbp - 0x10]
mov edx, 0x3fe
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x18006c5e1
xor eax, eax
nop word [rax + rax]
movzx ecx, byte [rax + r15]
mov byte [rbp + rax - 0x10], cl
lea rax, [rax + 1]
test cl, cl
jne 0x18006c5d0
add ebx, 0x3fee
cmp ebx, 0xbfca
jbe 0x18006c510
mov r15, qword [rsp + 0x58]
jmp 0x18006c635
mov dword [rbp - 0x80], 0xff
jmp 0x18006c635
lea rax, [rbp + 0x1f0]
mov dword [rsp + 0x68], 0
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x70], 2
jmp 0x18006c635
mov byte [rbp + 0x1f0], 0
mov dword [rsp + 0x60], 9
mov dword [rsp + 0x64], r14d
inc esi
cmp esi, 0x118
jb 0x18006c4a0
test edi, edi
jne 0x18006c6aa
xor r14d, r14d
lea r15, [0x1800c5390]
mov ecx, r14d
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + r15]
mov byte [rbp + rcx - 0x10], al
lea rcx, [rcx + 1]
test al, al
jne 0x18006c660
mov r15, qword [rsp + 0x58]
lea rcx, [rbp - 0x10]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r14b
jne 0x18006c681
test rax, rax
je 0x18006c6ad
mov rcx, qword [0x1800c56a8]
lea r8, [0x1800c5280]
mov edx, 0x3fe
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x18006c6ad
xor r14d, r14d
mov rsi, qword [rbp + 0xc40]
mov edi, dword [rbp + 0xc38]
mov rbx, qword [rbp + 0xc30]
mov r9, qword [rbp + 0xc48]
mov r8, qword [rsi]
mov edx, dword [rbx]
mov rcx, qword [0x1800d57a0]
mov r9, qword [r9]
call qword [sym.imp.USER32.dll_CallNextHookEx]
mov qword [rsp + 0x30], rax
jmp 0x18006c8b9
mov ecx, 0xfffffec2
mov byte [rbp + 0x842], 0
lea rdx, [rbp + 0x3f0]
call qword [0x1800d5910]
jmp 0x18006c8b9
lea rcx, [rsp + 0x38]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18006c710
movzx eax, word [0x1800a0368]
mov word [rcx], ax
jmp 0x18006c8c5
mov rcx, qword [r15 + 0x18]
lea rdx, [rbp + 0x9e0]
mov r8d, 0xff
mov qword [0x1800d6108], r14
call qword [sym.imp.USER32.dll_GetClassNameW]
jmp 0x18006c8b9
mov eax, dword [str.onmen]
lea rdx, [0x1800a1548]
mov dword [rsp + 0x42], eax
lea rcx, [rsp + 0x38]
movzx eax, word [0x1800a1544]
mov r8d, 2
mov word [rsp + 0x46], ax
call fcn.1800738b0
jmp 0x18006c8b9
cmp r13d, 0x310
ja 0x18006c85c
je 0x18006c826
mov eax, r13d
sub eax, 0x249
je 0x18006c813
sub eax, 1
je 0x18006c90b
sub eax, 0x3d
je 0x18006c7c1
cmp eax, 0x4b
jne 0x18006c8ca
mov eax, dword [rbp + 0x954]
mov dword [rsp + 0x30], eax
jmp 0x18006c90b
mov r8d, 2
lea rdx, [0x1800a157c]
lea rcx, [rsp + 0x38]
call fcn.1800738b0
mov r8d, 2
mov dword [rsp + 0x4b], 0x626169
lea rdx, [0x18009fe34]
lea rcx, [rsp + 0x4e]
call fcn.180073af0
movzx eax, word [0x1800a1580]
mov word [rsp + 0x4f], ax
movzx eax, byte [0x1800a1582]
mov byte [rsp + 0x51], al
jmp 0x18006c8b9
movzx eax, word [rbp + 0x94a]
mov word [0x1800d5918], ax
jmp 0x18006c8ca
mov edx, 0x3c
mov rcx, rbx
call fcn.180016720
test al, al
jne 0x18006c8dc
lea rax, [rsp + 0x38]
mov r12, 0xffffffffffffffff
nop word [rax + rax]
inc r12
cmp byte [rax + r12], 0
jne 0x18006c850
jmp 0x18006c8b9
cmp r13d, 0x399
je 0x18006c890
cmp r13d, 0x422
je 0x18006c87d
cmp r13d, 0x4ab
je 0x18006c90b
jmp 0x18006c8ca
mov edx, 0x16
mov rcx, rbx
call fcn.1800358f0
mov byte [rsp + 0x30], al
jmp 0x18006c8b9
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov edx, 0x12c
xor ecx, ecx
call fcn.18005c350
test al, al
je 0x18006c906
mov edx, r12d
lea rcx, [rsp + 0x38]
call qword [sym.imp.SHELL32.dll_DoEnvironmentSubstA]
mov r9, qword [rbp + 0xc48]
mov edx, 0x25
mov ecx, 0x6e
add r13d, 0x89
cmp r13d, edi
jb 0x18006c180
jmp 0x18006c90b
mov edx, 0xa8
mov rcx, rbx
call fcn.180005a50
test al, al
je 0x18006c906
mov rdx, qword [rsi]
xor r9d, r9d
xor r8d, r8d
mov ecx, 0x133
call fcn.180016870
mov byte [rsp + 0x30], al
jmp 0x18006c90b
mov byte [rsp + 0x30], 0
mov rax, qword [rsp + 0x30]
add rsp, 0xce8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret