Function at 0x140008930
Capabilities:
Get file size
Get file system object information

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x140262920]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov r14, r8
mov qword [rsp + 0x58], r8
mov rdi, rdx
mov rsi, rcx
mov qword [rsp + 0x68], rcx
xor r15d, r15d
mov dword [rsp + 0x48], r15d
add rcx, 0xe8
mov qword [rsp + 0x70], rcx
call fcn.14019b0c4
test eax, eax
jne 0x140008d11
mov qword [rbp + 0x248], r15
mov qword [rsp + 0x40], r15
mov rax, qword [rdi]
mov rcx, qword [rax - 0x18]
test rcx, rcx
je 0x1400089ba
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x1400089d4
call fcn.14001aef0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x140008d19
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], 1
lea r9, [0x14022ee08]
mov r13, 0xffffffffffffffff
mov rax, r13
nop dword [rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x140008a00
mov rdx, qword [rdi]
mov dword [rsp + 0x20], eax
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.14000bf50
mov r8, r14
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x248]
call fcn.14000a930
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140008a54
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, qword [rbp + 0x248]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140008a90
mov r12, r15
jmp 0x140008acd
xor eax, eax
mov qword [rbp + 0x240], rax
lea rdx, [rbp + 0x240]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, qword [rbp + 0x240]
test eax, eax
cmove rcx, r15
mov qword [rbp + 0x240], rcx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, qword [rbp + 0x240]
lea r9, [0x14022db84]
xor r8d, r8d
mov edx, 0x180
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsp + 0x60], rax
mov ecx, 0x30
call fcn.14000d7f0
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140008b29
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r15
jmp 0x140008b2c
mov rbx, r15
mov ecx, 8
call fcn.14000d7f0
mov rsi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140008bc0
xor eax, eax
mov qword [rsi], rax
mov r15, qword [rdi]
lea rdi, [r15 - 0x18]
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rdi + 0x10], 0
jl 0x140008b76
cmp rax, qword [rdi]
jne 0x140008b76
lock inc dword [rdi + 0x10]
lea rax, [rdi + 0x18]
mov qword [rsi], rax
xor r15d, r15d
jmp 0x140008bc3
lea r14, [rdi + 8]
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [r14]
call qword [rax]
mov rdi, rax
test rax, rax
je 0x140008d24
mov eax, dword [r14]
mov dword [rdi + 8], eax
mov r9d, dword [r14]
inc r9d
movsxd rdx, r9d
lea rcx, [rdi + 0x18]
mov r8, r15
call fcn.140005720
mov r14, qword [rsp + 0x58]
lea rax, [rdi + 0x18]
mov qword [rsi], rax
xor r15d, r15d
jmp 0x140008bc3
mov rsi, r15
mov qword [rbx], rsi
mov ecx, 8
call fcn.14000d7f0
mov rsi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140008c4f
xor eax, eax
mov qword [rsi], rax
mov r15, qword [r14]
lea rdi, [r15 - 0x18]
mov rcx, qword [rdi]
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
cmp dword [rdi + 0x10], 0
jl 0x140008c0d
cmp rax, qword [rdi]
jne 0x140008c0d
lock inc dword [rdi + 0x10]
lea rax, [rdi + 0x18]
mov qword [rsi], rax
jmp 0x140008c52
lea r14, [rdi + 8]
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [r14]
call qword [rax]
mov rdi, rax
test rax, rax
je 0x140008d0b
mov eax, dword [r14]
mov dword [rdi + 8], eax
mov r9d, dword [r14]
inc r9d
movsxd rdx, r9d
lea rcx, [rdi + 0x18]
mov r8, r15
call fcn.140005720
lea rax, [rdi + 0x18]
mov qword [rsi], rax
jmp 0x140008c52
mov rsi, r15
mov qword [rbx + 8], rsi
xor edx, edx
mov r8d, 0x2b8
lea rcx, [rbp - 0x80]
call fcn.14019dc80
mov dword [rsp + 0x20], 0x114
mov r9d, 0x2b8
lea r8, [rbp - 0x80]
mov edx, 0x80
mov rcx, qword [rbp + 0x248]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rax, qword [rbp - 0x80]
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], r12
movsxd r8, dword [rsp + 0x60]
mov r9, rbx
mov edx, 0x19a
mov rcx, qword [rsp + 0x68]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov rdx, qword [rbp + 0x248]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
sub r13d, 1
jg 0x140008cd5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x70]
call fcn.14019b108
xor eax, eax
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140199ac0
mov rbx, qword [rsp + 0x3b8]
add rsp, 0x360
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140005870
nop
mov ecx, eax
call fcn.14019ad78
nop
mov ecx, 0x80004005
call fcn.140005930
nop
call fcn.140005870
int3