Function at 0x14004fbc0
Capabilities:
Get file system object information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x1402cf910]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov rbx, rcx
xor r14d, r14d
mov dword [rsp + 0x30], r14d
call fcn.14006fc48
xor edx, edx
mov r8d, 0x2b8
lea rcx, [rsp + 0x70]
call fcn.1401f0eb0
mov dword [rsp + 0x20], 0x4001
mov r9d, 0x2b8
lea r8, [rsp + 0x70]
xor edx, edx
lea rcx, [0x14028f410]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test rax, rax
je 0x14004fc6c
mov rcx, rax
call fcn.140072870
test rax, rax
mov r9d, r14d
je 0x14004fc4b
mov r9, qword [rax + 8]
mov edx, 0x1003
mov r8d, 1
mov rcx, qword [rbx + 0x1c8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
call fcn.140072870
nop
mov qword [rsp + 0x38], r14
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x14004ffa6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 1
mov edx, 0x17e
lea rcx, [rsp + 0x38]
call fcn.140003220
lea rsi, [rbx + 0x188]
mov edi, 0xffffffff
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x8c
xor r9d, r9d
mov rbx, qword [rsp + 0x38]
mov r8, rbx
xor edx, edx
mov rcx, rsi
call fcn.140072e38
mov dword [rsp + 0x30], r14d
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004fcf4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x40], r14
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x14004ffb1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 2
mov edx, 0x176
lea rcx, [rsp + 0x40]
call fcn.140003220
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x41
mov r9d, 1
mov rbx, qword [rsp + 0x40]
mov r8, rbx
mov edx, r9d
mov rcx, rsi
call fcn.140072e38
mov dword [rsp + 0x30], r14d
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004fd74
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x48], r14
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x14004ffbc
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x30], 4
mov edx, 0x177
lea rcx, [rsp + 0x48]
call fcn.140003220
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x41
mov r9d, 1
mov rbx, qword [rsp + 0x48]
mov r8, rbx
lea edx, [r9 + 1]
mov rcx, rsi
call fcn.140072e38
mov dword [rsp + 0x30], r14d
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004fdf5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x50], r14
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x14004ffc7
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x30], 8
mov edx, 0x179
lea rcx, [rsp + 0x50]
call fcn.140003220
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x41
mov r9d, 1
mov rbx, qword [rsp + 0x50]
mov r8, rbx
lea edx, [r9 + 2]
mov rcx, rsi
call fcn.140072e38
mov dword [rsp + 0x30], r14d
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004fe76
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x58], r14
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x14004ffd2
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x30], 0x10
mov edx, 0x178
lea rcx, [rsp + 0x58]
call fcn.140003220
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x41
mov r9d, 1
mov rbx, qword [rsp + 0x58]
mov r8, rbx
lea edx, [r9 + 3]
mov rcx, rsi
call fcn.140072e38
mov dword [rsp + 0x30], r14d
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004fef7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x60], r14
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x14004ff9b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x30], 0x20
mov edx, 0x180
lea rcx, [rsp + 0x60]
call fcn.140003220
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x64
xor r9d, r9d
mov rbx, qword [rsp + 0x60]
mov r8, rbx
lea edx, [r9 + 5]
mov rcx, rsi
call fcn.140072e38
nop
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14004ff6f
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, 1
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.1401ee030
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
int3