; ; common_stat<_stat64i32> from 0x1801290c8 to 0x180129212 (330 bytes) ; ; 3 xrefs: ; > _stat64i32 @ 0x180129871 ; > _stat64i32 @ 0x180129928 ; > @ 0x180202a68 ; ; This function is hookable on this platform! ; ; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA ; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings ; mov [rsp+arg_0], rbx ; +0x0, 0x1801290c8 mov [rsp+arg_10], rbp ; +0x5, 0x1801290cd push rsi ; +0xa, 0x1801290d2 push rdi ; +0xb, 0x1801290d3 push r14 ; +0xc, 0x1801290d4 sub rsp, 40h ; +0xe, 0x1801290d6 xor esi, esi ; +0x12, 0x1801290da mov rdi, rdx ; +0x14, 0x1801290dc mov rbp, rcx ; +0x17, 0x1801290df test rdx, rdx ; +0x1a, 0x1801290e2 jnz short loc_180129103 ; +0x1d, 0x1801290e5 call __doserrno ; +0x1f, 0x1801290e7 mov [rax], esi ; +0x24, 0x1801290ec call _errno ; +0x26, 0x1801290ee mov dword ptr [rax], 16h ; +0x2b, 0x1801290f3 call _invalid_parameter_noinfo ; +0x31, 0x1801290f9 or eax, 0FFFFFFFFh ; +0x36, 0x1801290fe jmp short loc_18012917D ; +0x39, 0x180129101 xorps xmm0, xmm0 ; +0x3b, 0x180129103 movups xmmword ptr [rdx], xmm0 ; +0x3e, 0x180129106 movups xmmword ptr [rdx+10h], xmm0 ; +0x41, 0x180129109 movups xmmword ptr [rdx+20h], xmm0 ; +0x45, 0x18012910d test rbp, rbp ; +0x49, 0x180129111 jz short loc_1801290E7 ; +0x4c, 0x180129114 xor r9d, r9d; lpSecurityAttributes ; +0x4e, 0x180129116 mov [rsp+58h+hTemplateFile], rsi; hTemplateFile ; +0x51, 0x180129119 mov [rsp+58h+dwFlagsAndAttributes], 2000000h; dwFlagsAndAttributes ; +0x56, 0x18012911e mov edx, 80h; dwDesiredAccess ; +0x5e, 0x180129126 mov [rsp+58h+dwCreationDisposition], 3; dwCreationDisposition ; +0x63, 0x18012912b lea r8d, [r9+7]; dwShareMode ; +0x6b, 0x180129133 call cs:CreateFileW ; +0x6f, 0x180129137 mov rbx, rax ; +0x75, 0x18012913d mov rcx, rbp; Path ; +0x78, 0x180129140 cmp rax, 0FFFFFFFFFFFFFFFFh ; +0x7b, 0x180129143 jz short loc_180129190 ; +0x7f, 0x180129147 mov r9, rdi ; +0x81, 0x180129149 mov r8, rax ; +0x84, 0x18012914c or edx, 0FFFFFFFFh ; +0x87, 0x18012914f call ??$common_stat_handle_file_opened@U_stat64i32@@@@YA_NQEB_WHQEAXAEAU_stat64i32@@@Z ; +0x8a, 0x180129152 test al, al ; +0x8f, 0x180129157 jnz short loc_18012916C ; +0x91, 0x180129159 xorps xmm0, xmm0 ; +0x93, 0x18012915b or esi, 0FFFFFFFFh ; +0x96, 0x18012915e movups xmmword ptr [rdi], xmm0 ; +0x99, 0x180129161 movups xmmword ptr [rdi+10h], xmm0 ; +0x9c, 0x180129164 movups xmmword ptr [rdi+20h], xmm0 ; +0xa0, 0x180129168 cmp rbx, 0FFFFFFFFFFFFFFFFh ; +0xa4, 0x18012916c jz short loc_18012917B ; +0xa8, 0x180129170 mov rcx, rbx; hObject ; +0xaa, 0x180129172 call cs:CloseHandle ; +0xad, 0x180129175 mov eax, esi ; +0xb3, 0x18012917b mov rbx, [rsp+58h+arg_0] ; +0xb5, 0x18012917d mov rbp, [rsp+58h+arg_10] ; +0xba, 0x180129182 add rsp, 40h ; +0xbf, 0x180129187 pop r14 ; +0xc3, 0x18012918b pop rdi ; +0xc5, 0x18012918d pop rsi ; +0xc6, 0x18012918e retn ; +0xc7, 0x18012918f call ?is_usable_drive_or_unc_root@@YA_NQEB_W@Z ; +0xc8, 0x180129190 test al, al ; +0xcd, 0x180129195 jnz short loc_1801291A5 ; +0xcf, 0x180129197 mov ecx, 2 ; +0xd1, 0x180129199 call __acrt_errno_map_os_error ; +0xd6, 0x18012919e jmp short loc_18012915B ; +0xdb, 0x1801291a3 mov rdx, rbp; wchar_t * ; +0xdd, 0x1801291a5 mov ecx, 10h; int ; +0xe0, 0x1801291a8 call ?convert_to_stat_mode@@YAGHQEB_W@Z ; +0xe5, 0x1801291ad mov r14d, 1 ; +0xea, 0x1801291b2 mov [rdi+6], ax ; +0xf0, 0x1801291b8 lea rdx, [rsp+58h+arg_8]; int * ; +0xf4, 0x1801291bc mov [rdi+8], r14w ; +0xf9, 0x1801291c1 mov rcx, rbp; wchar_t * ; +0xfe, 0x1801291c6 mov [rsp+58h+arg_8], esi ; +0x101, 0x1801291c9 call ?get_drive_number_from_path@@YA_NQEB_WAEAH@Z ; +0x105, 0x1801291cd test al, al ; +0x10a, 0x1801291d2 jz short loc_18012915B ; +0x10c, 0x1801291d4 or dword ptr [rsp+58h+hTemplateFile], 0FFFFFFFFh ; +0x10e, 0x1801291d6 xor r9d, r9d ; +0x113, 0x1801291db mov eax, [rsp+58h+arg_8] ; +0x116, 0x1801291de mov r8d, r14d ; +0x11a, 0x1801291e2 dec eax ; +0x11d, 0x1801291e5 mov [rsp+58h+dwFlagsAndAttributes], esi ; +0x11f, 0x1801291e7 mov edx, r14d ; +0x123, 0x1801291eb mov [rdi+10h], eax ; +0x126, 0x1801291ee mov ecx, 7BCh ; +0x129, 0x1801291f1 mov [rdi], eax ; +0x12e, 0x1801291f6 mov [rsp+58h+dwCreationDisposition], esi ; +0x130, 0x1801291f8 call j_??$common_loctotime_t@_J@@YA_JHHHHHHH@Z ; +0x134, 0x1801291fc mov [rdi+20h], rax ; +0x139, 0x180129201 mov [rdi+18h], rax ; +0x13d, 0x180129205 mov [rdi+28h], rax ; +0x141, 0x180129209 jmp loc_18012916C ; +0x145, 0x18012920d