Function at 0x1ca4250
Capabilities:
Inspect section memory permissions

Disassembly:
push ebx
mov ebx, dword [esp + 0xc]
push esi
mov esi, dword [esp + 0xc]
push ebx
push str._FlagsAndAttribs0x_x
push esi
call fcn.01d10800
add esp, 0xc
test bl, 1
je 0x1ca4280
mov eax, dword [0x1d76b80]
push eax
push str._FILE_ATTRIBUTE_READONLY
mov ecx, esi
call fcn.01d0fdd0
test bl, 2
je 0x1ca4298
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_ATTRIBUTE_HIDDEN
mov ecx, esi
call fcn.01d0fdd0
test bl, 4
je 0x1ca42b0
mov edx, dword [0x1d76b80]
push edx
push str._FILE_ATTRIBUTE_SYSTEM
mov ecx, esi
call fcn.01d0fdd0
test bl, 0x10
je 0x1ca42c7
mov eax, dword [0x1d76b80]
push eax
push str._FILE_ATTRIBUTE_DIRECTORY
mov ecx, esi
call fcn.01d0fdd0
test bl, 0x20
je 0x1ca42df
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_ATTRIBUTE_ARCHIVE
mov ecx, esi
call fcn.01d0fdd0
test bl, 0x40
je 0x1ca42f7
mov edx, dword [0x1d76b80]
push edx
push str._FILE_ATTRIBUTE_DEVICE
mov ecx, esi
call fcn.01d0fdd0
test bl, bl
jns 0x1ca430d
mov eax, dword [0x1d76b80]
push eax
push str._FILE_ATTRIBUTE_NORMAL
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x100
je 0x1ca4328
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_ATTRIBUTE_TEMPORARY
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x200
je 0x1ca4343
mov edx, dword [0x1d76b80]
push edx
push str._FILE_ATTRIBUTE_SPARSE_FILE
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x400
je 0x1ca435d
mov eax, dword [0x1d76b80]
push eax
push str._FILE_ATTRIBUTE_REPARSE_POINT
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x800
je 0x1ca4378
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_ATTRIBUTE_COMPRESSED
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x1000
je 0x1ca4393
mov edx, dword [0x1d76b80]
push edx
push str._FILE_ATTRIBUTE_OFFLINE
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x2000
je 0x1ca43ad
mov eax, dword [0x1d76b80]
push eax
push str._FILE_ATTRIBUTE_NOT_CONTENT_INDEXED
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x4000
je 0x1ca43c8
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_ATTRIBUTE_ENCRYPTED
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x10000
je 0x1ca43e3
mov edx, dword [0x1d76b80]
push edx
push str._FILE_ATTRIBUTE_VIRTUAL
mov ecx, esi
call fcn.01d0fdd0
test ebx, ebx
jns 0x1ca43f9
mov eax, dword [0x1d76b80]
push eax
push str._FILE_FLAG_WRITE_THROUGH
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x40000000
je 0x1ca4414
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_FLAG_OVERLAPPED
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x20000000
je 0x1ca442f
mov edx, dword [0x1d76b80]
push edx
push str._FILE_FLAG_NO_BUFFERING
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x10000000
je 0x1ca4449
mov eax, dword [0x1d76b80]
push eax
push str._FILE_FLAG_RANDOM_ACCESS
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x8000000
je 0x1ca4464
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_FLAG_SEQUENTIAL_SCAN
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x4000000
je 0x1ca447f
mov edx, dword [0x1d76b80]
push edx
push str._FILE_FLAG_DELETE_ON_CLOSE
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x2000000
je 0x1ca4499
mov eax, dword [0x1d76b80]
push eax
push str._FILE_FLAG_BACKUP_SEMANTICS
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x1000000
je 0x1ca44b4
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_FLAG_POSIX_SEMANTICS
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x200000
je 0x1ca44cf
mov edx, dword [0x1d76b80]
push edx
push str._FILE_FLAG_OPEN_REPARSE_POINT
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x100000
je 0x1ca44e9
mov eax, dword [0x1d76b80]
push eax
push str._FILE_FLAG_OPEN_NO_RECALL
mov ecx, esi
call fcn.01d0fdd0
test ebx, 0x80000
je 0x1ca4504
mov ecx, dword [0x1d76b80]
push ecx
push str._FILE_FLAG_FIRST_PIPE_INSTANCE
mov ecx, esi
call fcn.01d0fdd0
pop esi
pop ebx
ret