Function at 0x140096d94
Capabilities:
Get file attributes

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x17b10
call fcn.1400ba8b0
sub rsp, rax
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x17b48], rbx
mov qword [rsp + 0x17b50], rbp
mov qword [rsp + 0x17b58], rsi
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x17b00], rax
mov rbx, rcx
xor esi, esi
mov word [0x1401288e0], si
mov word [0x1401280e0], si
mov word [0x1401278e0], si
mov eax, dword [0x14012b998]
lea r12, [0x14012b1a0]
lea r13, [0x14012b2f0]
lea rdi, [0x14012b440]
lea ebp, [rsi + 1]
test bpl, al
jne 0x140096e4b
or eax, ebp
mov dword [0x14012b998], eax
mov rcx, r12
call fcn.14006ba08
nop
mov rcx, r13
call fcn.14006ba08
nop
mov rcx, rdi
call fcn.14006ba08
nop
lea rcx, [0x1400c1000]
call fcn.1400aaf5c
nop
mov qword [0x1401290e8], r12
mov rcx, r12
call fcn.14006b784
mov rcx, r13
call fcn.14006b784
mov rcx, rdi
call fcn.14006b784
mov dl, byte [0x1400fec05]
mov byte [0x14012b996], dl
cmp rbx, rsi
jne 0x140096eab
mov qword [rsp + 0x20], r12
lea r9, [0x140090714]
mov r8, qword [0x1400ffd80]
lea rdx, str.FINDFILES
mov rcx, qword [0x1400ec660]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, rsi
je 0x140097843
lea r9, [0x140093b0c]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 7]
call fcn.14008a020
lea rcx, str.HELPSearchResults
call fcn.140087db0
mov r15d, 0x400
cmp rbx, rsi
je 0x140096fa7
mov rcx, rsi
lea rax, [0x14010d68c]
mov al, byte [rcx + rax]
mov byte [rsp + rcx + 0x56f0], al
add rcx, rbp
cmp al, sil
jne 0x140096edd
mov byte [0x14012b992], bpl
mov byte [0x14012b991], bpl
mov byte [0x14012b990], sil
lea rdx, [0x1400c42d4]
mov rcx, rdi
call fcn.14006ba50
mov rcx, qword [0x14010eec0]
call fcn.14006b718
mov r9, r15
lea r8, [rsp + 0x6300]
lea rdx, [rsp + 0x5b00]
mov rcx, qword [0x14010eec0]
call fcn.14006baec
cmp al, sil
je 0x140097073
mov r9, r15
lea r8, [rsp + 0x6300]
lea rdx, [rsp + 0x6300]
lea rcx, [rsp + 0x5b00]
call fcn.140052988
lea rdx, [rsp + 0x6300]
mov rcx, r12
call fcn.14006ba50
mov r9, r15
lea r8, [rsp + 0x6300]
lea rdx, [rsp + 0x5b00]
mov rcx, qword [0x14010eec0]
call fcn.14006baec
cmp al, sil
jne 0x140096f4e
jmp 0x140097073
mov byte [rsp + 0x56f0], sil
cmp byte [0x14012b590], sil
je 0x140097073
or rdx, 0xffffffffffffffff
cmp byte [0x14012b993], sil
je 0x140096fe5
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
movzx eax, word [0x1400cc7b0]
mov word [rdi], ax
cmp byte [0x14012b994], sil
je 0x14009700a
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
movzx eax, word [0x1400cc7ac]
mov word [rdi], ax
cmp byte [0x14012b995], sil
je 0x14009702f
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
movzx eax, word [0x1400cc7a8]
mov word [rdi], ax
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
movzx eax, word [str.htc]
mov word [rdi], ax
lea rdi, [rsp + 0x56f0]
xor eax, eax
mov rcx, rdx
repne scasb al, byte [rdi]
sub rdi, rbp
lea rdx, [0x14012b590]
xor ecx, ecx
mov al, byte [rdx + rcx]
mov byte [rdi + rcx], al
add rcx, rbp
test al, al
jne 0x140097066
lea r14, [0x140105fb0]
cmp byte [0x1400fec05], sil
je 0x140097096
mov r8, r15
lea rdx, [rsp + 0x7300]
mov rcx, r14
call fcn.1400129b4
mov dword [0x1401290e0], esi
mov byte [0x140127748], sil
mov byte [0x140127749], bpl
mov r15d, 2
cmp byte [0x14012b990], sil
je 0x1400970c7
cmp byte [0x14012b996], sil
jne 0x1400970c7
mov r8d, r15d
jmp 0x1400970ca
mov r8d, esi
cmp rbx, rsi
cmove rbx, r13
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov rdx, rbx
lea rcx, [rsp + 0x2ab0]
call fcn.140064100
nop
lea rcx, [rsp + 0xdb4]
call fcn.14006e1b0
lea rcx, [rsp + 0xdd8]
call fcn.14006e1b0
lea rcx, [rsp + 0xdfc]
call fcn.14006e1b0
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x2ab0]
call fcn.140064cf8
cmp eax, esi
jne 0x14009774a
lea r13, [0x14012b440]
cmp byte [0x1400ffcf0], sil
jne 0x14009774a
call fcn.1400474ec
mov edx, dword [0x1401290e0]
cmp edx, esi
je 0x140097169
mov r8b, byte [0x14012b996]
mov rcx, qword [0x1400fec08]
call fcn.140093340
mov dword [0x1401290e0], esi
cmp word [rsp + 0x5a0], 0x2e
jne 0x140097189
cmp word [rsp + 0x5a2], 0x5c
jne 0x140097189
lea rcx, [rsp + 0x5a4]
jmp 0x140097191
lea rcx, [rsp + 0x5a0]
lea rdx, [rsp + 0x6300]
movzx eax, word [rcx]
mov word [rdx], ax
add rcx, r15
add rdx, r15
cmp ax, si
jne 0x140097199
mov edx, 0x50
lea rcx, [rsp + 0x6300]
call fcn.140047090
mov rdi, rax
mov ecx, 0x523
call fcn.140061d2c
mov r8, rax
mov r9, rdi
mov edx, 0x400
lea rcx, [rsp + 0x6b00]
call fcn.14005b860
lea r8, [rsp + 0x6b00]
mov edx, 0x9b
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp byte [0x14012b992], sil
je 0x140097587
mov rcx, r13
call fcn.14006b718
mov rcx, r13
call fcn.14006bbf0
mov rdi, rax
cmp rax, rsi
je 0x140097587
xor r8d, r8d
lea rdx, [rsp + 0x5a0]
mov rcx, rdi
call fcn.1400468e0
cmp al, sil
jne 0x140097251
mov rcx, r13
call fcn.14006bbf0
mov rdi, rax
cmp rax, rsi
jne 0x140097224
jmp 0x140097587
mov bl, bpl
cmp word [rdi], 0x2a
jne 0x14009729b
cmp word [rdi + 2], si
jne 0x14009729b
mov al, byte [0x14012b996]
cmp al, sil
jne 0x1400972a1
mov byte [rsp + 0x30], bpl
mov byte [rsp + 0x28], sil
mov byte [rsp + 0x20], sil
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x5a0]
mov rcx, r14
call fcn.1400165b0
mov bl, al
cmp al, sil
je 0x140097587
mov al, byte [0x14012b996]
mov qword [0x1400ff4b8], r15
movzx ecx, byte [0x1401077b2]
cmp al, sil
cmovne ecx, ebp
mov byte [0x1401077b2], cl
cmp byte [rsp + 0x56f0], sil
setne r8b
mov r9d, ebp
lea rdx, [rsp + 0x5a0]
mov rcx, r14
call fcn.140015af0
cmp eax, r15d
jne 0x1400972f2
call fcn.1400500d0
cmp al, sil
je 0x14009774a
jmp 0x14009772d
cmp eax, ebp
jne 0x140097587
mov word [rsp + 0x5b00], si
mov byte [rsp + 0x30], bpl
mov byte [rsp + 0x28], sil
mov byte [rsp + 0x20], sil
xor r9d, r9d
lea r8, [rsp + 0x5b00]
lea rdx, [rsp + 0x5a0]
mov rcx, r14
call fcn.1400165b0
lea rdx, [rsp + 0x5b00]
lea rcx, [rsp + 0x5a0]
call fcn.140073da4
cmp eax, esi
je 0x1400973e8
lea rcx, [rsp + 0x5b00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or edi, 0xffffffff
cmp eax, edi
jne 0x14009772d
lea rdx, [0x1400c4068]
lea rcx, [rsp + 0x5b00]
call fcn.1400549fc
lea rdx, [rsp + 0x5b00]
lea rcx, [rsp + 0x5a0]
call fcn.140073da4
cmp eax, esi
je 0x1400973a5
lea rcx, [rsp + 0x5b00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, edi
jne 0x14009772d
lea rdx, [0x1400c4070]
lea rcx, [rsp + 0x5b00]
call fcn.1400549fc
lea rdx, [rsp + 0x5b00]
lea rcx, [rsp + 0x5a0]
call fcn.140073da4
cmp eax, esi
je 0x1400973e8
lea rcx, [rsp + 0x5b00]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
movzx ebx, bl
cmp eax, edi
cmovne ebx, esi
cmp bl, sil
je 0x14009772d
cmp byte [rsp + 0x56f0], sil
jne 0x1400974cd
mov edi, esi
mov r8b, bpl
lea rdx, [rsp + 0x1640]
mov rcx, r14
call fcn.1400120cc
cmp al, sil
je 0x14009772d
cmp byte [0x1400ffcf0], sil
jne 0x14009772d
add edi, ebp
test dil, 0x1f
jne 0x140097437
call fcn.1400474ec
mov rcx, r12
call fcn.14006b718
mov rcx, r12
call fcn.14006bbf0
cmp rax, rsi
je 0x1400974ac
mov r8d, 4
lea rdx, [rsp + 0x1640]
mov rcx, rax
call fcn.1400468e0
cmp al, sil
jne 0x140097476
mov rcx, r12
call fcn.14006bbf0
cmp rax, rsi
jne 0x14009744c
jmp 0x1400974ac
mov ecx, dword [rsp + 0x1e50]
call fcn.14003111c
lea rcx, [0x1400c3786]
mov qword [rsp + 0x28], rcx
mov byte [rsp + 0x20], al
lea r9, [rsp + 0x1640]
xor r8d, r8d
lea rdx, [rsp + 0x5a0]
xor ecx, ecx
call fcn.14008d9e0
mov r8b, bpl
lea rdx, [rsp + 0x1640]
mov rcx, r14
call fcn.1400120cc
cmp al, sil
jne 0x14009741d
jmp 0x14009772d
lea rdx, [rsp + 0x50]
mov rcx, r14
call fcn.1400129f0
call fcn.140082880
mov r8d, 0x400
lea rdx, [0x14010e6bc]
mov rcx, r14
call fcn.1400129d4
mov edx, dword [rsp + 0xd0]
mov dword [0x14010c654], edx
mov rcx, qword [0x14010eec0]
call fcn.14006b784
mov rcx, r12
call fcn.14006b718
mov rcx, r12
call fcn.14006bbf0
cmp rax, rsi
je 0x14009753e
mov rdx, rax
mov rcx, qword [0x14010eec0]
call fcn.14006ba5c
mov rcx, r12
call fcn.14006bbf0
cmp rax, rsi
jne 0x140097522
mov byte [0x14010bd72], bpl
mov dword [0x14010bd18], esi
mov dword [0x14010bd3c], esi
lea r8, [rsp + 0x56f0]
lea rdx, [0x1400cc7a0]
lea rcx, [0x14010d68b]
call fcn.1400a8550
mov byte [0x14010d66a], bpl
mov qword [0x1400ff4b8], r15
mov rcx, r14
call fcn.140010f48
jmp 0x14009772d
cmp byte [0x14012b991], sil
je 0x14009772d
mov rcx, r12
call fcn.14006b718
mov rcx, r12
call fcn.14006bbf0
cmp rax, rsi
je 0x14009772d
mov r8d, 4
lea rdx, [rsp + 0x5a0]
mov rcx, rax
call fcn.1400468e0
cmp al, sil
jne 0x1400975da
mov rcx, r12
call fcn.14006bbf0
cmp rax, rsi
jne 0x1400975ad
jmp 0x14009772d
cmp byte [rsp + 0x56f0], sil
jne 0x140097640
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rsp + 0x56f0]
xor edx, edx
xor ecx, ecx
call fcn.140034e68
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x7b00]
call fcn.140034e68
jmp 0x14009772d
lea rcx, [rsp + 0x1e80]
call fcn.14002fd88
nop
mov byte [rsp + 0x20], sil
mov r9b, bpl
lea r8, [rsp + 0x5a0]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x1e80]
call fcn.140030198
cmp al, sil
jne 0x14009768a
lea rcx, [rsp + 0x1e80]
call fcn.140030164
jmp 0x14009772d
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rsp + 0x56f0]
xor edx, edx
xor ecx, ecx
call fcn.140034e68
mov r8d, 0x10000
lea rdx, [rsp + 0x7b00]
lea rcx, [rsp + 0x1e80]
call fcn.1400309a4
cmp eax, esi
je 0x140097720
movsxd rdx, eax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x7b00]
call fcn.140034e68
mov r8d, 0x10000
lea rdx, [rsp + 0x7b00]
lea rcx, [rsp + 0x1e80]
call fcn.1400309a4
cmp eax, esi
jne 0x1400976dc
lea rcx, [rsp + 0x1e80]
call fcn.140030164
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x2ab0]
call fcn.140064cf8
cmp eax, esi
je 0x140097134
mov byte [0x140127749], sil
mov edx, dword [0x1401290e0]
cmp edx, esi
je 0x140097774
mov r8b, byte [0x14012b996]
mov rcx, qword [0x1400fec08]
call fcn.140093340
mov dword [0x1401290e0], esi
mov byte [0x140127748], sil
mov ecx, 0x270
call fcn.140061d2c
mov r8, rax
mov edx, 0x9b
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp byte [0x1400ffcf0], sil
je 0x1400977b2
mov rcx, qword [0x1400fec08]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400977b7
call fcn.1400878cc
cmp word [0x1401280e0], si
je 0x1400977ff
lea rdx, [0x1401280e0]
lea rdi, [0x140105570]
mov rcx, rdi
call fcn.140045048
cmp word [0x1401288e0], si
je 0x1400977ee
lea rdx, [0x1401288e0]
mov rcx, rdi
call fcn.140044a78
lea rdx, [0x1401278e0]
mov rcx, rdi
call fcn.140042d6c
jmp 0x140097836
cmp word [0x1401288e0], si
je 0x140097836
lea rdi, [0x140105570]
mov rcx, rdi
call fcn.140042c50
lea rdx, [0x1401288e0]
mov rcx, rdi
call fcn.140044a78
lea rdx, [0x1401278e0]
mov rcx, rdi
call fcn.140042d6c
nop
lea rcx, [rsp + 0x2ab0]
call fcn.1400643d4
mov rcx, qword [rsp + 0x17b00]
xor rcx, rsp
call fcn.1400a8530
lea r11, [rsp + 0x17b10]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret