Function at 0x14000744c
Capabilities:
Get file attributes

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor r12d, r12d
or r13, 0xffffffffffffffff
mov dword [rax + 8], r12d
mov rbp, rcx
mov qword [rax + 0x10], r12
mov ebx, 1
mov r14d, r12d
mov edi, r12d
test rcx, rcx
je 0x1400074ef
mov rsi, r13
inc rsi
cmp word [rcx + rsi*2], r12w
jne 0x140007487
lea r15, [rsi + 1]
cmp r15, rsi
jb 0x1400074ef
mov eax, 2
mul r15
test rdx, rdx
jne 0x1400074ef
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x1400074ef
mov r9, rsi
mov r8, rbp
mov rdx, r15
mov rcx, rax
call fcn.140009d2c
lea rcx, [rsp + 0x80]
call qword [sym.imp.iertutil.dll_Ordinal_34]
nop dword [rax + rax]
test eax, eax
jns 0x1400074f2
mov ebx, r12d
jmp 0x1400076e1
mov ebx, r12d
cmp dword [rsp + 0x80], r12d
je 0x140007522
lea rcx, [rsp + 0x88]
call fcn.140008300
mov r14, qword [rsp + 0x88]
test eax, eax
js 0x1400075f6
test r14, r14
je 0x1400075f6
test ebx, ebx
je 0x1400076c8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
nop dword [rax + rax]
mov esi, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
or ebp, 0xffffffff
cmp esi, ebp
jne 0x1400075a0
add eax, 0xfffffffe
cmp eax, 1
ja 0x14000759c
mov rcx, rdi
call fcn.1400101bc
test eax, eax
jne 0x14000759c
mov rdx, r13
inc rdx
cmp word [rdi + rdx*2], r12w
jne 0x140007565
mov rcx, rdi
call fcn.1400103c8
test eax, eax
js 0x14000759c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
nop dword [rax + rax]
mov esi, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
cmp esi, ebp
je 0x14000754e
cmp esi, ebp
je 0x1400075bf
test sil, 0x10
jne 0x1400075bf
mov rdx, r13
inc rdx
cmp word [rdi + rdx*2], r12w
jne 0x1400075a9
mov rcx, rdi
call fcn.1400103c8
test eax, eax
js 0x1400075f6
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
xor r8d, r8d
mov edx, 0x20000
mov dword [rsp + 0x20], 3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov r15, rax
cmp rax, r13
jne 0x1400075fe
mov ebx, r12d
jmp 0x1400076c8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFinalPathNameByHandleW]
nop dword [rax + rax]
mov esi, eax
test eax, eax
je 0x140007652
mov ecx, esi
add rcx, rcx
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
nop dword [rax + rax]
mov rbp, rax
test rax, rax
je 0x140007652
xor r9d, r9d
mov r8d, esi
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFinalPathNameByHandleW]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jne 0x140007657
mov ebx, r12d
jmp 0x1400076b9
inc esi
cmp esi, 8
jb 0x1400076b9
mov rcx, rbp
call fcn.140007d68
mov ebx, eax
test eax, eax
je 0x140007683
cmp dword [rsp + 0x80], r12d
je 0x140007683
mov rdx, r14
mov rcx, rbp
call fcn.140007e70
mov ebx, eax
mov rcx, rbp
call fcn.1400101bc
test eax, eax
jne 0x1400076b9
test ebx, ebx
je 0x1400076b9
mov edx, esi
mov rcx, rbp
call fcn.1400103c8
test eax, eax
mov ebx, r12d
mov rsi, r13
setns bl
inc rsi
cmp word [rbp + rsi*2], r12w
jne 0x1400076a8
inc esi
test ebx, ebx
jne 0x140007659
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
test r14, r14
je 0x1400076dc
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [rax + rax]
test rdi, rdi
je 0x1400076f0
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov eax, ebx
mov rbx, qword [rsp + 0x90]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret