Function at 0x1400228e0
Capabilities:
Get file system object information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x1402cf910]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov rdi, rcx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
call fcn.14006fc48
nop
mov qword [rsp + 0x38], r15
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140022df6
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 1
lea edx, [r15 + 0x70]
lea rcx, [rsp + 0x38]
call fcn.140003220
lea r14, [rdi + 0x238]
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x78
xor r9d, r9d
mov rbx, qword [rsp + 0x38]
mov r8, rbx
xor edx, edx
mov rcx, r14
call fcn.140072e38
mov dword [rsp + 0x30], r15d
lea rdx, [rbx - 0x18]
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400229ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x40], r15
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140022e01
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 2
mov edx, VarBstrFromDisp
lea rcx, [rsp + 0x40]
call fcn.140003220
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x4b
mov r9d, 1
mov rbx, qword [rsp + 0x40]
mov r8, rbx
mov edx, r9d
mov rcx, r14
call fcn.140072e38
mov dword [rsp + 0x30], r15d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140022a31
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x48], r15
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140022e0c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x30], 4
mov edx, reloc.OLEAUT32.dll_VarBstrFromDisp
lea rcx, [rsp + 0x48]
call fcn.140003220
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0x4b
mov r9d, 1
mov rbx, qword [rsp + 0x48]
mov r8, rbx
lea edx, [r9 + 1]
mov rcx, r14
call fcn.140072e38
mov dword [rsp + 0x30], r15d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140022ab6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x50], r15
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140022e17
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x30], 8
mov edx, 0x73
lea rcx, [rsp + 0x50]
call fcn.140003220
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 0x2d
mov r9d, 1
mov rbx, qword [rsp + 0x50]
mov r8, rbx
lea edx, [r9 + 2]
mov rcx, r14
call fcn.140072e38
mov dword [rsp + 0x30], r15d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140022b3b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x58], r15
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140022e22
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x30], 0x10
mov edx, 0x74
lea rcx, [rsp + 0x58]
call fcn.140003220
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x46
mov r9d, 2
mov rbx, qword [rsp + 0x58]
mov r8, rbx
lea edx, [r9 + 2]
mov rcx, r14
call fcn.140072e38
mov dword [rsp + 0x30], r15d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140022bc0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x60], r15
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140022e2d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x30], 0x20
mov edx, 0x75
lea rcx, [rsp + 0x60]
call fcn.140003220
mov dword [rsp + 0x28], 5
mov dword [rsp + 0x20], 0x46
mov r9d, 2
mov rbx, qword [rsp + 0x60]
mov r8, rbx
lea edx, [r9 + 3]
mov rcx, r14
call fcn.140072e38
mov dword [rsp + 0x30], r15d
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140022c45
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x68], r15
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140022deb
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x30], 0x40
mov edx, 0x76
lea rcx, [rsp + 0x68]
call fcn.140003220
mov dword [rsp + 0x28], 6
mov dword [rsp + 0x20], 0x46
mov r9d, 2
mov rbx, qword [rsp + 0x68]
mov r8, rbx
lea edx, [r9 + 4]
mov rcx, r14
call fcn.140072e38
nop
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x140022cc3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rsp + 0x20], 0x4001
mov r9d, 0x2b8
lea r8, [rsp + 0x70]
xor edx, edx
lea rcx, [0x140286b98]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test rax, rax
je 0x140022d1e
mov rcx, rax
call fcn.140072870
test rax, rax
mov r9, r15
je 0x140022cfe
mov r9, qword [rax + 8]
mov edx, 0x1003
mov r8d, 1
mov rcx, qword [rdi + 0x278]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
call fcn.140072870
mov rax, qword [rdi + 0x170]
mov ecx, dword [rax + 0x60]
mov dword [rdi + 0xf40], ecx
mov dword [rdi + 0xa90], ecx
mov dword [rdi + 0x900], ecx
mov dword [rdi + 0xc20], ecx
mov dword [rdi + 0x770], ecx
mov dword [rdi + 0x5e0], ecx
mov dword [rdi + 0x450], ecx
lea rcx, [rdi + 0xcb8]
call fcn.140042720
call fcn.140074f50
mov dword [rsp + 0x28], 0x1020
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8f
mov rcx, qword [rax + 0x10]
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rdi + 0x190], rax
call fcn.140074f50
mov dword [rsp + 0x28], 0x1020
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x90
mov rcx, qword [rax + 0x10]
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rdi + 0x198], rax
mov eax, 1
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.1401ee030
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
int3