Function at 0x180064ee0
Capabilities:
Get file attributes

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x98
mov edi, dword [rbp + 0x77]
mov r8, rdx
mov edx, dword [rbp + 0x77]
mov r13, r9
imul r12d, edx, 0x7dd
mov r9, rcx
mov esi, edx
mov dword [rbp - 0x35], edi
cmp edx, r12d
ja 0x18006520a
mov rax, qword [rbp - 0x11]
lea rcx, [0x180109538]
mov r13, qword [rbp - 0x11]
mov r15d, dword [rbp + 0x77]
mov r14, qword [rbp - 0x11]
mov rbx, qword [rbp + 0x7f]
mov qword [rbp - 0x41], rax
mov rax, qword [rbp - 0x11]
mov qword [rbp - 0x21], rax
nop word [rax + rax]
cmp esi, 0x2058
ja 0x180065106
je 0x1800650e1
mov eax, esi
sub eax, 0x2d
je 0x180065088
sub eax, 0x2a
je 0x180065068
sub eax, 0x60
je 0x180065054
sub eax, 0x1d
je 0x180064fbd
mov r10, qword [rbp - 0x41]
cmp eax, 0x12
jne 0x180064fe1
mov rcx, qword [rbp + 0x7f]
xorps xmm0, xmm0
xor eax, eax
mov rbx, rcx
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 0x20], rax
lea rcx, [0x180109538]
jmp 0x180064fe1
mov r9, qword [0x180135a00]
mov r8, rbx
mov edx, 0xeb
xor ecx, ecx
call fcn.1800278b0
mov edx, dword [rbp + 0x77]
lea rcx, [0x180109538]
mov r10, qword [rbp - 0x41]
mov r9, qword [rbp + 0x67]
mov r8, qword [rbp + 0x6f]
imul eax, edx, 0xb7
add esi, eax
cmp esi, r12d
jbe 0x180064f60
mov r13, qword [rbp + 0x7f]
mov r12, qword [rbp - 0x21]
lea eax, [rdx + 0xb]
mov dword [rbp + 7], eax
cmp edx, eax
jae case.0x180065052.46
mov ebx, dword [rbp + 0x77]
lea r15, [0x180000000]
mov esi, dword [rbp + 0x77]
mov r14d, dword [rbp + 0x77]
mov qword [rbp - 1], rbx
mov qword [rbp - 0x11], rsi
lea eax, [rdx - 0x2d]
lea r11, [0x18010f474]
cmp eax, 0x92
ja case.0x180065052.56
movzx eax, byte [r15 + rax + 0x65840]
mov ecx, dword [r15 + rax*4 + 0x65810]
add rcx, r15
jmp rcx
mov rax, qword [rbp - 0x11]
mov r10, r13
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x41], r13
jmp 0x180064fe1
mov r9, rbx
mov dword [rbp - 0x29], 0xb8
xor r8d, r8d
lea rcx, [rbp - 0x29]
mov edx, 0xd5
call fcn.1800c77c0
jmp 0x180064fd3
mov rdx, rbx
mov ecx, 0xf
call fcn.1800d0d90
mov r14, rax
test rax, rax
jne 0x180064fd3
mov eax, 0x21
cmp eax, 0x21
je 0x1800650c8
cmp eax, 0xa3
jne 0x1800650d0
mov eax, edi
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edi, 0xffffffff
mov dword [rbp - 0x35], edi
add eax, 0x82
cmp eax, 0x125
jb 0x1800650a6
jmp 0x180064fd3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov r15d, eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x180064fd3
cmp esi, 0x3e88
je 0x1800651f0
cmp esi, 0x4083
je 0x1800651de
cmp esi, 0x7cb9
je 0x1800651ca
cmp esi, 0x8388
je 0x180065166
cmp esi, 0xbaea
jne 0x180064fdd
mov rcx, qword [rbx + 8]
mov rax, qword [rcx + 0x20]
test rax, rax
je 0x18006515c
mov rcx, qword [rcx + 0x30]
call rax
test eax, eax
jne 0x180065200
mov edx, dword [rbp + 0x77]
xor edi, edi
mov dword [rbp - 0x35], edi
jmp 0x180064fd6
cmp dword [r8], 2
jge 0x180064fdd
mov ebx, 0xbb
nop word [rax + rax]
mov eax, ebx
sub eax, 0xba
je case.0x180065052.46
cmp eax, 1
jne 0x1800651b7
mov r8, qword [rbp + 0x7f]
lea r9, [0x18010e6c6]
lea rdx, [rbp - 0x29]
mov dword [rbp - 0x29], 0
mov ecx, 0xcd
call fcn.1800612d0
xor edi, edi
mov dword [rbp - 0x35], edi
dec ebx
cmp ebx, 0xb9
ja 0x180065180
mov rbx, qword [rbp + 0x7f]
jmp 0x180064fd3
mov rax, qword [rbp + 0x7f]
mov rbx, rax
mov qword [rax + 0x28], r9
mov qword [rax + 8], rcx
jmp 0x180064fdd
cmp r15d, 0xffffffff
jne 0x180064fdd
mov eax, r15d
jmp 0x1800650b4
mov rax, qword [r8]
mov qword [rbx + 0x20], rax
jmp 0x180064fdd
mov eax, 0xfffffff6
jmp 0x1800650b4
mov r10, qword [rbp - 0x11]
mov r12, qword [rbp - 0x11]
mov qword [rbp - 0x41], r10
mov qword [rbp - 0x21], r12
jmp 0x180065002
test ebx, 0xfffffffd
jne case.0x180065052.56
mov edi, dword [rbp - 0x29]
mov ecx, 0x6d
mov dword [rbp - 9], ecx
nop word [rax + rax]
mov eax, ecx
sub eax, 0x6d
je 0x180065373
sub eax, 1
je 0x1800653f7
sub eax, 1
je 0x180065366
cmp eax, 1
jne 0x1800653fc
test ebx, ebx
jne 0x1800653fc
mov ebx, dword [rbp - 0x19]
mov eax, 0x10c
cmp eax, 0x10c
je 0x180065295
cmp eax, 0x193
jne 0x18006534a
mov edx, 0xbc
mov dword [rbp + 0x77], edx
jmp 0x18006534a
xor r9d, r9d
mov r8d, 0x92
mov rdx, r13
xor ecx, ecx
call fcn.1800df3c0
mov edx, dword [rbp - 0x31]
add edx, eax
cmp edx, ebx
jge 0x180065345
nop word [rax + rax]
mov r15d, 0x75
mov eax, r15d
sub eax, 0x75
je 0x1800652f2
cmp eax, 1
jne 0x180065318
cmp r14d, eax
jl 0x180065345
mov r9, r12
mov dword [rbp - 0x49], r14d
mov r8, r13
lea rdx, [rbp - 0x49]
mov ecx, 0xcd
call fcn.1800612d0
jmp 0x180065318
xor r9d, r9d
mov r8d, 0x92
mov rdx, r13
xor ecx, ecx
call fcn.1800df3c0
mov r14d, ebx
sub r14d, eax
sub r14d, dword [rbp - 0x31]
cmp r14d, dword [rbp - 0x39]
cmovg r14d, dword [rbp - 0x39]
inc r15d
cmp r15d, 0x77
jb 0x1800652c6
xor r9d, r9d
mov r8d, 0x92
mov rdx, r13
xor ecx, ecx
call fcn.1800df3c0
mov edx, dword [rbp - 0x31]
mov ebx, dword [rbp - 0x19]
add edx, eax
cmp edx, dword [rbp - 0x19]
jl 0x1800652c0
mov eax, 0x10c
add eax, 0x87
cmp eax, 0x21a
jb 0x180065276
mov rbx, qword [rbp - 1]
mov ecx, dword [rbp - 9]
jmp 0x1800653fc
mov edx, 0xbc
mov dword [rbp + 0x77], edx
jmp 0x1800653ff
mov r14d, dword [rbp - 0x39]
mov eax, esi
cdq
xor r12d, r12d
idiv edi
mov r13d, eax
test eax, eax
jle 0x1800653fc
nop word [rax + rax]
mov r15d, 0x10
mov eax, r15d
sub eax, 0x10
je 0x1800653bd
cmp eax, 0x76
jne 0x1800653dd
mov r9, qword [rbp - 0x21]
lea rdx, [rbp - 0x49]
mov r8, qword [rbp + 0x7f]
lea ecx, [rax + 0x57]
mov dword [rbp - 0x49], r14d
call fcn.1800612d0
jmp 0x1800653dd
mov rdx, qword [rbp + 0x7f]
xor r9d, r9d
mov r8d, 0x92
xor ecx, ecx
call fcn.1800df3c0
lea ecx, [rax + r14]
add ecx, dword [rbp - 0x31]
cmp ecx, dword [rbp - 0x19]
jge 0x1800653f7
add r15d, 0x76
cmp r15d, 0xfc
jb 0x180065396
add r12d, r14d
cmp r12d, r13d
jl 0x180065390
mov ecx, dword [rbp - 9]
jmp 0x1800653fc
mov ecx, 0x6e
mov edx, dword [rbp + 0x77]
mov r13, qword [rbp + 0x7f]
inc ecx
mov r12, qword [rbp - 0x21]
mov dword [rbp - 9], ecx
cmp ecx, 0x71
jb 0x180065240
mov edi, dword [rbp - 0x35]
lea r15, [0x180000000]
jmp case.0x180065052.56
mov eax, dword [rbp - 0x31]
test eax, eax
jle case.0x180065052.56
mov r9, r10
mov dword [rbp - 0x49], eax
mov r8, r13
lea rdx, [rbp - 0x49]
mov ecx, 0xcd
call fcn.1800612d0
mov edx, dword [rbp + 0x77]
jmp case.0x180065052.56
cmp dword [r8], 2
mov ebx, 1
mov qword [rbp - 1], rbx
jle case.0x180065052.56
mov r15d, 0xf9
nop word [rax + rax]
mov eax, r15d
sub eax, 0xf9
je 0x1800654b0
cmp eax, 1
jne 0x180065515
cmp dword [r8], 3
jle 0x180065515
mov rdx, qword [r9 + 0x18]
xor r8d, r8d
mov ecx, eax
call fcn.1800b9f00
mov r8, qword [rbp + 0x6f]
mov rbx, rax
test eax, 0xfffffffd
je 0x180065515
mov ebx, 1
jmp 0x180065515
mov rax, qword [r9 + 0x10]
lea rcx, [rbp - 0x39]
xor r9d, r9d
mov qword [rsp + 0x28], 0
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xe0
call fcn.1800a3a80
cmp dword [rbp - 0x39], 1
mov qword [rbp - 0x21], rax
jge 0x180065511
mov eax, 0x54
cmp eax, 0x54
je 0x1800654fa
cmp eax, 0xec
jne 0x180065505
mov dword [rbp - 0x39], 1
jmp 0x180065505
lea r11, [0x18010f474]
mov qword [rbp - 0x21], r11
add eax, 0x98
cmp eax, 0x184
jb 0x1800654e5
mov r8, qword [rbp + 0x6f]
mov r9, qword [rbp + 0x67]
inc r15d
cmp r15d, 0xfb
jb 0x180065470
mov r12, qword [rbp - 0x21]
lea r15, [0x180000000]
mov edx, dword [rbp + 0x77]
mov qword [rbp - 1], rbx
jmp case.0x180065052.56
mov eax, 0x90
cmp eax, 0x90
je 0x180065807
add eax, 0x7a
cmp eax, 0x10a
jb 0x180065545
xor eax, eax
cmp ebx, 2
sete al
inc eax
mov dword [rbp - 0x29], eax
jmp case.0x180065052.56
test esi, esi
jle 0x180065577
sub esi, dword [rbp - 0x31]
mov qword [rbp - 0x11], rsi
cmp esi, 1
jge case.0x180065052.56
mov r15d, 0x44
cmp r15d, 0x44
je 0x1800655ab
cmp r15d, 0xd04
je 0x1800655a4
cmp r15d, 0x19c4
je case.0x180065052.46
jmp 0x1800655c9
xor edi, edi
mov dword [rbp - 0x35], edi
jmp 0x1800655c9
mov eax, dword [rbp - 0x31]
lea rdx, [rbp - 0x49]
mov r9, r10
mov dword [rbp - 0x49], eax
mov r8, r13
mov ecx, 0xcd
call fcn.1800612d0
mov r10, qword [rbp - 0x41]
add r15d, 0xcc0
cmp r15d, 0x2640
jbe 0x180065586
mov edx, dword [rbp + 0x77]
lea r15, [0x180000000]
jmp case.0x180065052.56
lea eax, [rbx - 1]
cmp eax, 1
ja case.0x180065052.56
mov ebx, dword [rbp - 0x19]
mov ecx, 0x6b
mov edi, dword [rbp - 0x29]
nop
mov eax, ecx
sub eax, 0x68
je 0x180065736
sub eax, 1
je 0x18006568e
sub eax, 1
je 0x180065736
cmp eax, 1
jne 0x18006573e
mov eax, esi
xor r15d, r15d
cdq
idiv edi
mov r12d, eax
test eax, eax
jle 0x180065681
mov rsi, qword [rbp - 0x21]
nop word [rax + rax]
xor r9d, r9d
mov r8d, 0x92
mov rdx, r13
xor ecx, ecx
call fcn.1800df3c0
mov edx, dword [rbp - 0x39]
lea ecx, [rax + rdx]
cmp ecx, ebx
jge 0x18006567d
mov dword [rbp - 0x49], edx
mov r9, rsi
lea rdx, [rbp - 0x49]
mov r8, r13
mov ecx, 0xcd
call fcn.1800612d0
add r15d, dword [rbp - 0x39]
cmp r15d, r12d
jl 0x180065640
mov rsi, qword [rbp - 0x11]
mov edx, dword [rbp + 0x77]
mov ecx, 0x6b
jmp 0x18006573e
xor r9d, r9d
mov r8d, 0x92
mov rdx, r13
xor ecx, ecx
call fcn.1800df3c0
cmp eax, ebx
jge 0x18006572c
nop dword [rax]
mov r15d, 0x30
mov eax, r15d
sub eax, 0x2e
je 0x1800656f4
sub eax, 1
je 0x1800656e3
cmp eax, 1
jne 0x18006570c
xor r9d, r9d
mov r8d, 0x92
mov rdx, r13
xor ecx, ecx
call fcn.1800df3c0
mov r14d, ebx
sub r14d, eax
jmp 0x18006570c
cmp r14d, dword [rbp - 0x39]
cmovg r14d, dword [rbp - 0x39]
cmp r14d, 1
jl 0x18006572c
jmp 0x18006570c
mov r9, r12
mov dword [rbp - 0x49], r14d
mov r8, r13
lea rdx, [rbp - 0x49]
mov ecx, 0xcd
call fcn.1800612d0
dec r15d
cmp r15d, 0x2d
ja 0x1800656b6
xor r9d, r9d
mov r8d, 0x92
mov rdx, r13
xor ecx, ecx
call fcn.1800df3c0
cmp eax, ebx
jl 0x1800656b0
mov edx, dword [rbp + 0x77]
mov ecx, 0x69
jmp 0x18006573e
mov edx, 0xbe
mov dword [rbp + 0x77], edx
mov r12, qword [rbp - 0x21]
dec ecx
cmp ecx, 0x67
ja 0x180065600
mov rbx, qword [rbp - 1]
lea r15, [0x180000000]
mov edi, dword [rbp - 0x35]
jmp case.0x180065052.56
mov rax, qword [r9]
lea rcx, [rbp - 0x31]
xor r9d, r9d
mov qword [rsp + 0x28], 0
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xe0
call fcn.1800a3a80
mov rdx, qword [rbp + 0x67]
xor r8d, r8d
mov qword [rbp - 0x41], rax
mov rdx, qword [rdx + 8]
lea ecx, [r8 + 1]
call fcn.1800b9f00
mov edx, dword [rbp + 0x77]
mov rsi, rax
mov qword [rbp - 0x11], rax
mov dword [rbp - 0x19], eax
jmp case.0x180065052.56
mov r12, r11
mov qword [rbp - 0x21], r11
mov dword [rbp - 0x39], 1
jmp case.0x180065052.56
mov ecx, 0x124
mov eax, ecx
sub eax, 0x124
je 0x1800657d5
cmp eax, 1
je case.0x180065052.46
jmp 0x1800657da
xor edi, edi
mov dword [rbp - 0x35], edi
inc ecx
cmp ecx, 0x126
jb 0x1800657c1
inc edx
mov dword [rbp + 0x77], edx
cmp edx, dword [rbp + 7]
jae case.0x180065052.46
mov r13, qword [rbp + 0x7f]
mov r9, qword [rbp + 0x67]
mov r8, qword [rbp + 0x6f]
mov r10, qword [rbp - 0x41]
jmp 0x180065029
xor eax, eax
jmp 0x1800650b4