Function at 0x14001e898
Capabilities:
Get file system object information

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x40
mov r14, rdx
mov rdi, rcx
call sub.msvcrt.dll_wcslen
lea rbx, [rdi + rax*2]
jmp 0x14001e8c8
cmp word [rbx], 0x2e
je 0x14001e8cd
sub rbx, 2
cmp rbx, rdi
jae 0x14001e8be
lea rcx, [rbx + 2]
call sub.msvcrt.dll_wcslen
mov esi, 4
cmp rax, rsi
ja 0x14001eb76
lea rdx, [rbx + 2]
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll_wcscpy
lea rax, [rsp + 0x30]
cmp word [rax], 0x61
movzx ecx, word [rax]
jb 0x14001e903
sub ecx, 0x20
mov word [rax], cx
add rax, 2
dec rsi
jne 0x14001e8f7
lea rdx, [0x14007fb90]
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x14001eb76
lea rdx, [0x14007fb98]
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x14001eb76
lea rdx, [0x14007fba0]
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x14001eb76
lea rdx, [0x14007fba8]
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x14001eb76
mov edx, dword [0x1400a79dc]
xor ebx, ebx
test edx, edx
jle 0x14001e9a7
movsxd rdx, ebx
lea rcx, [rsp + 0x30]
shl rdx, 4
add rdx, qword [0x1400a7eb0]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x14001e9f8
mov edx, dword [0x1400a79dc]
inc ebx
cmp ebx, edx
jl 0x14001e97f
movsxd r8, dword [0x1400a79d8]
lea eax, [rdx + 1]
mov esi, 8
movsxd rcx, eax
shl rcx, 4
cmp rcx, r8
jbe 0x14001ea22
mov rcx, qword [0x1400a5390]
add r8d, 0x640
mov edx, esi
mov dword [0x1400a79d8], r8d
movsxd r9, r8d
mov r8, qword [0x1400a7eb0]
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov edx, dword [0x1400a79dc]
mov qword [0x1400a7eb0], rax
jmp 0x14001ea29
mov rdx, qword [0x1400a7eb0]
mov rax, qword [0x1400a7ea8]
movsxd r8, ebx
add r8, r8
movsxd rcx, dword [rdx + r8*8 + 8]
lea rcx, [rax + rcx*2]
mov qword [r14], rcx
movsxd rax, dword [rdx + r8*8 + 0xc]
jmp 0x14001ebc9
mov rax, qword [0x1400a7eb0]
movsxd rcx, edx
lea rdx, [rsp + 0x30]
mov r8, rsi
shl rcx, 4
add rcx, rax
call sub.msvcrt.dll_memcpy
mov ebx, 0x2b8
lea rcx, [0x1400a7bf0]
mov r8d, ebx
xor edx, edx
call sub.msvcrt.dll_memset
lea r8, [0x1400a7bf0]
mov r9d, ebx
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x20], 0x4401
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [0x1400a7bf8]
movsxd rdx, dword [0x1400a79dc]
mov rax, qword [0x1400a7eb0]
add rdx, rdx
lea rbx, [0x1400a7e08]
mov dword [rax + rdx*8 + 0xc], ecx
mov rcx, rbx
call sub.msvcrt.dll_wcslen
test rax, rax
jne 0x14001eac0
movsxd rdx, dword [0x1400a79dc]
mov rax, qword [0x1400a7eb0]
mov rcx, rdx
add rcx, rcx
and dword [rax + rcx*8 + 8], 0
jmp 0x14001eb6c
mov rcx, rbx
call sub.msvcrt.dll_wcslen
mov r9d, dword [0x1400a79d4]
movsxd r10, dword [0x1400a7be8]
lea ecx, [r9 - 1]
add rax, r10
movsxd r8, ecx
cmp rax, r8
jbe 0x14001eb22
mov r8, qword [0x1400a7ea8]
mov rcx, qword [0x1400a5390]
add r9d, 0x1f4
mov dword [0x1400a79d4], r9d
movsxd r9, r9d
mov edx, esi
add r9, r9
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov r10d, dword [0x1400a7be8]
mov rdx, rax
mov qword [0x1400a7ea8], rax
jmp 0x14001eb29
mov rdx, qword [0x1400a7ea8]
mov rax, qword [0x1400a7eb0]
movsxd rcx, dword [0x1400a79dc]
add rcx, rcx
mov dword [rax + rcx*8 + 8], r10d
movsxd rax, r10d
lea rcx, [rdx + rax*2]
mov rdx, rbx
call sub.msvcrt.dll_wcscpy
mov rcx, rbx
call sub.msvcrt.dll_wcslen
mov ecx, dword [0x1400a7be8]
mov edx, dword [0x1400a79dc]
inc ecx
add eax, ecx
mov dword [0x1400a7be8], eax
inc edx
mov dword [0x1400a79dc], edx
jmp 0x14001ebbf
mov ebx, 0x2b8
lea rcx, [0x1400a7bf0]
xor edx, edx
mov r8d, ebx
call sub.msvcrt.dll_memset
lea r8, [0x1400a7bf0]
mov r9d, ebx
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x20], 0x4401
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea rbx, [0x1400a79e0]
lea rdx, [0x1400a7e08]
mov rcx, rbx
call sub.msvcrt.dll_wcscpy
mov qword [r14], rbx
movsxd rax, dword [0x1400a7bf8]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
add rsp, 0x40
pop r14
ret