Function at 0x14008d37c
Capabilities:
Get file system object information

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb80]
sub rsp, 0xc80
mov rax, qword [0x14022ff58]
xor rax, rsp
mov qword [rbp + 0xb78], rax
mov r12, rdx
mov qword [rbp - 0x10], rdx
mov rdi, rcx
xor esi, esi
lea r15d, [rsi + 1]
add dword [0x140231ad0], r15d
mov r9d, r15d
or rbx, 0xffffffffffffffff
mov r8, rbx
mov edx, 0x100c
mov rcx, qword [rcx + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsp + 0x70], rax
mov edx, r15d
lea rcx, [0x140234a10]
call fcn.140128674
mov ecx, 0x1c4
call fcn.1400f5fe0
mov qword [rbp + 0x190], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1a0], xmm0
mov r8, rbx
inc r8
cmp word [rax + r8*2], si
jne 0x14008d412
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.1400041a8
nop
xor r8d, r8d
lea rdx, [rbp + 0x190]
lea rcx, [0x140234a10]
call fcn.140128574
nop
mov rdx, qword [rbp + 0x1a8]
mov r14d, 8
cmp rdx, r14
jb 0x14008d48e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d489
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef5a
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x1a0], xmm0
mov word [rbp + 0x190], si
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xb]
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.14008645c
mov dword [rsp + 0x20], 0x4011
mov r9d, 0x2b8
lea r8, [rbp + 0x8b0]
xor edx, edx
lea rcx, [0x1401dfbf0]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov r9, rax
mov r8, r15
mov edx, 0x1003
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x1402349f8]
call fcn.1400065ec
mov ebx, 7
lea r13d, [rbx - 3]
cmp dword [0x1402354f8], 0xffffffff
je 0x14008d63c
mov qword [rbp + 0x4f8], rsi
mov qword [rbp + 0x508], rsi
mov qword [rbp + 0x510], rsi
mov qword [rbp + 0x508], rsi
mov qword [rbp + 0x510], rbx
mov word [rbp + 0x4f8], si
mov qword [rbp + 0x518], rsi
mov qword [rbp + 0x550], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x560], xmm0
movdqa xmm1, xmmword [0x1401da070]
movdqa xmmword [rbp + 0x560], xmm1
mov word [rbp + 0x550], si
lea rdx, [rbp + 0x3d0]
lea rcx, [0x140234020]
call fcn.14000ef10
cmp byte [rbp + 0x450], sil
je 0x14008d5c2
cmp byte [rbp + 0x5a0], sil
je 0x14008d5c2
cmp byte [rbp + 0x543], sil
jne 0x14008d5c2
mov ecx, dword [rbp + 0x580]
lea eax, [rcx - 2]
cmp eax, r15d
cmovbe ecx, r13d
mov dword [rbp + 0x580], ecx
jmp 0x14008d5c8
mov ecx, dword [rbp + 0x580]
mov dword [rbp + 0x2b0], r13d
mov edx, 0x76
sub ecx, 1
je 0x14008d5ef
sub ecx, 2
je 0x14008d5e8
cmp ecx, 1
jne 0x14008d5f4
lea edx, [rcx + 0x78]
jmp 0x14008d5f4
mov edx, 0x78
jmp 0x14008d5f4
mov edx, 0x77
mov ecx, edx
call fcn.1400f5fe0
mov qword [rbp + 0x2c0], rax
movsxd r8, dword [0x1402354f8]
lea r9, [rbp + 0x2b0]
mov edx, 0x1060
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x550]
call fcn.140006b84
nop
lea rcx, [rbp + 0x4f8]
call fcn.140006b84
mov qword [rbp + 0x230], rsi
mov qword [rbp + 0x240], rsi
mov qword [rbp + 0x248], rsi
mov qword [rbp + 0x240], rsi
mov qword [rbp + 0x248], rbx
mov word [rbp + 0x230], si
mov qword [rbp + 0x250], rsi
mov qword [rbp + 0x260], rsi
mov qword [rbp + 0x268], rsi
mov qword [rbp + 0x260], rsi
mov qword [rbp + 0x268], rbx
mov word [rbp + 0x250], si
lea rdx, [rbp + 0x230]
lea rcx, [0x140234020]
call fcn.14000e804
lea rdx, [rbp + 0x250]
lea rcx, [0x140234020]
call fcn.14000eefc
lea rcx, [rdi + 0x50]
xor r9d, r9d
lea r8, [rbp + 0x230]
lea rdx, [rbp + 0x250]
call fcn.14006ecc0
lea rdx, [rbp + 0x250]
mov rcx, rdi
call fcn.140084ddc
mov rax, qword [rbp + 0x260]
lea rbx, [rax + 1]
test rax, rax
cmove rbx, rax
mov qword [rbp - 0x18], rbx
lea rdx, [rbp + 0x250]
lea rcx, [0x140231b78]
call fcn.140133b8c
mov r15d, esi
mov dword [rsp + 0x58], esi
mov qword [rbp + 0x190], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1a0], xmm0
mov r8, r14
lea rdx, str.FlatView
lea rcx, [rbp + 0x190]
call fcn.1400041a8
nop
mov qword [rbp + 0x290], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2a0], xmm0
mov r8, r14
lea rdx, str.FileList
lea rcx, [rbp + 0x290]
call fcn.1400041a8
nop
xor r8d, r8d
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x290]
call fcn.14011537c
test eax, eax
setne r13b
lea rcx, [rbp + 0x290]
call fcn.140006b84
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, r14
jb 0x14008d7cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d7ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef60
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x1a0], xmm0
mov word [rbp + 0x190], si
mov qword [rbp + 0x210], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x220], xmm0
mov r8d, 0xb
lea rdx, str.ShowSeconds
lea rcx, [rbp + 0x210]
call fcn.1400041a8
nop
mov qword [rbp + 0x190], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1a0], xmm0
mov r8, r14
lea rdx, str.FileList
lea rcx, [rbp + 0x190]
call fcn.1400041a8
nop
xor r8d, r8d
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x190]
call fcn.14011537c
test eax, eax
setne r14b
mov byte [rsp + 0x31], r14b
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 8
jb 0x14008d8a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d89d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef66
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x1a0], xmm0
mov word [rbp + 0x190], si
mov rdx, qword [rbp + 0x228]
cmp rdx, 8
jb 0x14008d8ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d8fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef6c
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x220], xmm0
mov word [rbp + 0x210], si
mov qword [rbp + 0x1b0], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1c0], xmm0
mov r8d, 0xa
lea rdx, str.ExactSizes
lea rcx, [rbp + 0x1b0]
call fcn.1400041a8
nop
mov qword [rbp + 0x190], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1a0], xmm0
mov r8d, 8
lea rdx, str.FileList
lea rcx, [rbp + 0x190]
call fcn.1400041a8
nop
mov r8d, 1
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x190]
call fcn.14011537c
test eax, eax
setne sil
mov byte [rsp + 0x30], sil
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 8
jb 0x14008d9d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d9d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef72
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x1a0], xmm0
xor eax, eax
mov word [rbp + 0x190], ax
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 8
jb 0x14008da39
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008da32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef78
call fcn.1401addcc
xor eax, eax
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x1c0], xmm0
mov word [rbp + 0x1b0], ax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov ecx, 0x48
call fcn.1401add90
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x60], rax
mov edx, 0x1f4
lea rcx, [rbp + 0x90]
call fcn.14015e87c
nop
xor eax, eax
mov qword [rbp + 0xc0], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmm1, xmmword [0x1401da070]
movdqa xmmword [rbp + 0xd0], xmm1
mov word [rbp + 0xc0], ax
mov qword [rbp + 0xe0], rax
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmmword [rbp + 0xf0], xmm1
mov word [rbp + 0xe0], ax
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x120], rax
mov r8b, r13b
lea rdx, [rbp + 0xc0]
lea rcx, [0x140234020]
call fcn.14000ef24
test al, al
je 0x14008e989
test r15b, 0x1f
jne 0x14008db19
lea rcx, [rbp + 0x90]
call fcn.14016118c
or r9, 0xffffffffffffffff
mov r8, rbx
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0xc0]
call fcn.140006c90
nop
mov r12b, byte [rbp + 0x164]
xor ebx, ebx
test r13b, r13b
je 0x14008dbfa
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x5b0]
call fcn.1400e2880
mov rbx, rax
lea rax, [rbp + 0x1d0]
cmp rax, rbx
je 0x14008dbec
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 8
jb 0x14008dbb2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dbad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef7e
call fcn.1401addcc
xor eax, eax
mov qword [rbp + 0x1e0], rax
lea ecx, [rax + 7]
mov qword [rbp + 0x1e8], rcx
mov word [rbp + 0x1d0], ax
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x1d0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x1e0], xmm1
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rcx
mov word [rbx], ax
lea rcx, [rbp + 0x5b0]
call fcn.140006b84
xor ebx, ebx
mov qword [rbp + 0x1f0], rbx
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x208], rbx
lea rdx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 8
cmovae rdx, qword [rbp + 0x1d0]
mov r8, qword [rbp + 0x1e0]
lea rcx, [rbp + 0x1f0]
call fcn.1400042b0
nop
lea rcx, [rbp + 0x1f0]
call fcn.140104d80
test r12b, r12b
je 0x14008dfb8
test r13b, r13b
jne 0x14008dfb8
lea r8, [rbp + 0x1f0]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.140082118
mov rbx, qword [rsp + 0x48]
xor eax, eax
test byte [rbp + 0x174], 0x20
je 0x14008dcf8
cmp byte [rbx + 0x19], al
jne 0x14008dc97
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x1f0]
call fcn.140081f34
test al, al
jns 0x14008dc9c
mov rbx, qword [rsp + 0x60]
cmp rbx, qword [rsp + 0x60]
je 0x14008dfb6
mov r8, qword [rbp + 0x208]
cmp r8, 8
jb 0x14008dcca
inc r8
mov rdx, qword [rbp + 0x1f0]
lea rcx, [rbp + 0x1f0]
call fcn.14002709c
xor r12d, r12d
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], r12w
lea rcx, [rbp + 0x1d0]
call fcn.140006b84
jmp 0x14008e962
cmp byte [rbx + 0x19], al
jne 0x14008dd11
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x1f0]
call fcn.140081f34
test al, al
jns 0x14008dd16
mov rbx, qword [rsp + 0x60]
cmp rbx, qword [rsp + 0x60]
je 0x14008dfb6
mov rbx, qword [rbx + 0x40]
imul rcx, rbx, 0xc8
add rcx, qword [rdi + 0x38]
mov rax, qword [rbp + 0x110]
mov qword [rcx + 0x50], rax
mov rax, qword [rbp + 0x118]
mov qword [rcx + 0x58], rax
mov rax, qword [rbp + 0x120]
mov qword [rcx + 0x60], rax
mov eax, dword [rbp + 0x128]
mov dword [rcx + 0x68], eax
mov al, byte [rbp + 0x16a]
mov byte [rcx + 0xaa], al
xor r12d, r12d
cmp qword [rbp + 0x110], r12
je 0x14008de03
cmp dword [0x1402354e8], 0xffffffff
je 0x14008de03
mov r8b, r14b
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x348]
call fcn.140162c88
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
lea rdx, [rbp + 0x348]
cmp qword [rbp + 0x360], 8
cmovae rdx, qword [rbp + 0x348]
mov r8, qword [rbp + 0x358]
lea rcx, [rsp + 0x38]
call fcn.1400042b0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402354e8]
mov rdx, rbx
call fcn.140027d0c
nop
lea rcx, [rbp + 0x348]
call fcn.140006b84
cmp qword [rbp + 0x118], r12
je 0x14008de9d
cmp dword [0x1402354ec], 0xffffffff
je 0x14008de9d
mov r8b, r14b
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x368]
call fcn.140162c88
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
lea rdx, [rbp + 0x368]
cmp qword [rbp + 0x380], 8
cmovae rdx, qword [rbp + 0x368]
mov r8, qword [rbp + 0x378]
lea rcx, [rsp + 0x38]
call fcn.1400042b0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402354ec]
mov rdx, rbx
call fcn.140027d0c
nop
lea rcx, [rbp + 0x368]
call fcn.140006b84
cmp qword [rbp + 0x120], r12
je 0x14008df37
cmp dword [0x1402354f0], 0xffffffff
je 0x14008df37
mov r8b, r14b
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x2e8]
call fcn.140162c88
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
lea rdx, [rbp + 0x2e8]
cmp qword [rbp + 0x300], 8
cmovae rdx, qword [rbp + 0x2e8]
mov r8, qword [rbp + 0x2f8]
lea rcx, [rsp + 0x38]
call fcn.1400042b0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402354f0]
mov rdx, rbx
call fcn.140027d0c
nop
lea rcx, [rbp + 0x2e8]
call fcn.140006b84
cmp dword [0x1402354f4], 0xffffffff
je 0x14008dfa5
mov r8b, byte [rbp + 0x16a]
mov edx, dword [rbp + 0x128]
lea rcx, [rbp + 0x3a8]
call fcn.1400877a4
nop
mov eax, dword [0x1402354f4]
mov dword [rbp - 0x78], eax
lea rax, [rbp + 0x3a8]
cmp qword [rbp + 0x3c0], 8
cmovae rax, qword [rbp + 0x3a8]
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x3a8]
call fcn.140006b84
nop
lea rcx, [rbp + 0x1f0]
call fcn.140006b84
jmp 0x14008dce7
xor ebx, ebx
mov eax, 7
mov dword [rbp], eax
mov dword [rbp + 4], r15d
or dword [rbp + 0x24], 0xffffffff
mov dword [rbp + 8], ebx
mov qword [rbp + 0x1b0], rbx
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], rbx
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], rax
mov word [rbp + 0x1b0], bx
mov eax, dword [rbp + 0x174]
test al, 1
je 0x14008e01e
mov r8d, 2
lea rdx, [0x1401dfbfc]
lea rcx, [rbp + 0x1b0]
call fcn.140006c14
mov eax, dword [rbp + 0x174]
and eax, 6
je 0x14008e067
cmp eax, 2
je 0x14008e04e
mov ecx, 4
cmp eax, ecx
je 0x14008e042
cmp eax, 6
jne 0x14008e067
mov r8d, ecx
lea rdx, [0x1401dfc28]
jmp 0x14008e05b
mov r8, rcx
lea rdx, [0x1401dfc18]
jmp 0x14008e05b
mov r8d, 4
lea rdx, [0x1401dfc08]
lea rcx, [rbp + 0x1b0]
call fcn.140006c14
test r12b, r12b
je 0x14008e094
lea r9, [rbp + 0x108]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0xc0]
lea rcx, [0x140234020]
call fcn.14000ecf8
test al, al
mov r15b, 1
jne 0x14008e097
mov r15b, bl
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
mov dword [rbp + 0x178], eax
lea r9, [rdi + 0x38]
mov r10, qword [r9 + 8]
mov rcx, r10
sub rcx, qword [r9]
movabs rax, 0xa3d70a3d70a3d70b
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x28], rdx
mov rcx, r9
cmp r10, qword [r9 + 0x10]
je 0x14008e0ee
lea rdx, [rbp + 0xc0]
call fcn.14000a638
jmp 0x14008e0fd
lea r8, [rbp + 0xc0]
mov rdx, r10
call fcn.14000a6b0
test r12b, r12b
je 0x14008e244
mov qword [rbp + 0x2b0], rbx
mov qword [rbp + 0x2c0], rbx
mov qword [rbp + 0x2c8], rbx
mov rsi, qword [rbp + 0x200]
lea r14, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 8
cmovae r14, qword [rbp + 0x1f0]
movabs rcx, 0x7ffffffffffffffe
cmp rsi, rcx
ja 0x14008ef8a
cmp rsi, 8
jae 0x14008e175
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], 7
movups xmm0, xmmword [r14]
movdqu xmmword [rbp + 0x2b0], xmm0
jmp 0x14008e20a
mov eax, 7
mov qword [rbp + 0x2c8], rax
mov rbx, rsi
or rbx, rax
cmp rbx, rcx
jbe 0x14008e19f
mov rbx, rcx
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14008e1ce
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14008ef84
add rcx, rcx
cmp rcx, 0x1000
jb 0x14008e1d5
call fcn.14000416c
jmp 0x14008e1e1
xor eax, eax
test rcx, rcx
je 0x14008e1e1
call fcn.1401add90
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], rbx
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1401aff80
nop
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x2d0], rax
lea r8, [rbp + 0x2b0]
lea rdx, [rbp + 0xa8]
lea rcx, [rsp + 0x60]
call fcn.140081fa8
nop
lea rcx, [rbp + 0x2b0]
call fcn.140006b84
mov sil, byte [rsp + 0x30]
mov r14b, byte [rsp + 0x31]
lea rdx, [rbp + 0x1d0]
mov rcx, rdi
call fcn.140084ddc
lea rcx, [rbp + 0x1d0]
call fcn.140006c10
lea rdx, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 8
cmovae rdx, qword [rbp + 0x1b0]
mov r8, qword [rbp + 0x1c0]
lea rcx, [rbp + 0x1d0]
call fcn.140006c14
lea rax, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 8
cmovae rax, qword [rbp + 0x1d0]
mov qword [rbp + 0x18], rax
lea r9, [rbp]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rbx, eax
test r12b, r12b
je 0x14008e2ce
test r15b, r15b
je 0x14008e3e2
or r15d, 0xffffffff
cmp dword [0x1402354dc], r15d
je 0x14008e357
mov rcx, qword [rbp + 0x100]
movabs rdx, 0x7fffffff7fffffff
mov r8d, 0x32
cmp rcx, rdx
jne 0x14008e30c
lea rdx, [0x1401da6e0]
lea rcx, [rbp + 0x3d0]
call fcn.1400fdf74
jmp 0x14008e32a
lea rdx, [rbp + 0x3d0]
test sil, sil
je 0x14008e31f
call fcn.14012880c
jmp 0x14008e32a
mov r9d, 0x5e6
call fcn.1401288c4
mov eax, dword [0x1402354dc]
mov dword [rbp - 0x78], eax
lea rax, [rbp + 0x3d0]
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1402354e0], r15d
je 0x14008e3e6
mov rcx, qword [rbp + 0x108]
movabs rdx, 0x7fffffff7fffffff
mov r8d, 0x32
cmp rcx, rdx
jne 0x14008e395
lea rdx, [0x1401da6e0]
lea rcx, [rbp + 0x3d0]
call fcn.1400fdf74
jmp 0x14008e3b3
lea rdx, [rbp + 0x3d0]
test sil, sil
je 0x14008e3a8
call fcn.14012880c
jmp 0x14008e3b3
mov r9d, 0x5e6
call fcn.1401288c4
mov eax, dword [0x1402354e0]
mov dword [rbp - 0x78], eax
lea rax, [rbp + 0x3d0]
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14008e3e6
or r15d, 0xffffffff
mov eax, dword [0x1402354e4]
cmp eax, r15d
je 0x14008e412
mov dword [rbp - 0x78], eax
or qword [rbp - 0x68], 0xffffffffffffffff
lea r9, [rbp - 0x80]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1402354e8], r15d
je 0x14008e4a4
mov r8b, r14b
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x308]
call fcn.140162c88
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x78], rax
xor r15d, r15d
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
lea rdx, [rbp + 0x308]
cmp qword [rbp + 0x320], 8
cmovae rdx, qword [rbp + 0x308]
mov r8, qword [rbp + 0x318]
lea rcx, [rsp + 0x38]
call fcn.1400042b0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402354e8]
mov rdx, rbx
call fcn.140027d0c
nop
lea rcx, [rbp + 0x308]
call fcn.140006b84
jmp 0x14008e4a7
xor r15d, r15d
cmp dword [0x1402354ec], 0xffffffff
je 0x14008e537
mov r8b, r14b
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x328]
call fcn.140162c88
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
lea rdx, [rbp + 0x328]
cmp qword [rbp + 0x340], 8
cmovae rdx, qword [rbp + 0x328]
mov r8, qword [rbp + 0x338]
lea rcx, [rsp + 0x38]
call fcn.1400042b0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402354ec]
mov rdx, rbx
call fcn.140027d0c
nop
lea rcx, [rbp + 0x328]
call fcn.140006b84
cmp dword [0x1402354f0], 0xffffffff
je 0x14008e5c7
mov r8b, r14b
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x290]
call fcn.140162c88
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
lea rdx, [rbp + 0x290]
cmp qword [rbp + 0x2a8], 8
cmovae rdx, qword [rbp + 0x290]
mov r8, qword [rbp + 0x2a0]
lea rcx, [rsp + 0x38]
call fcn.1400042b0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402354f0]
mov rdx, rbx
call fcn.140027d0c
nop
lea rcx, [rbp + 0x290]
call fcn.140006b84
cmp dword [0x1402354f4], 0xffffffff
je 0x14008e634
mov r8b, byte [rbp + 0x16a]
mov edx, dword [rbp + 0x128]
lea rcx, [rbp + 0x388]
call fcn.1400877a4
nop
mov eax, dword [0x1402354f4]
mov dword [rbp - 0x78], eax
lea rax, [rbp + 0x388]
cmp qword [rbp + 0x3a0], 8
cmovae rax, qword [rbp + 0x388]
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x388]
call fcn.140006b84
cmp dword [0x1402354f8], 0xffffffff
je 0x14008e74d
cmp dword [rbp + 0x13c], r15d
je 0x14008e74d
test r12b, r12b
jne 0x14008e74d
mov r12d, 7
cmp dword [rbp + 0x160], r15d
jne 0x14008e753
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], r15
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], r12
mov word [rbp + 0x190], r15w
cmp dword [rbp + 0x13c], 3
jne 0x14008e6b8
lea r8, [rbp + 0x190]
lea edx, [r12 + 0x19]
lea rcx, [rbp + 0x140]
call fcn.1400fccb4
jmp 0x14008e701
lea rax, str._04X
lea rdx, str._08X
cmp dword [rbp + 0x13c], 1
cmove rdx, rax
mov r8d, dword [rbp + 0x140]
lea rcx, [rbp + 0x5d0]
call fcn.1400fdfbc
nop
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.140017a8c
nop
lea rcx, [rbp + 0x5d0]
call fcn.140006b84
mov eax, dword [0x1402354f8]
mov dword [rbp - 0x78], eax
lea rax, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rax, qword [rbp + 0x190]
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x190]
call fcn.140006b84
jmp 0x14008e753
mov r12d, 7
test r13b, r13b
je 0x14008e850
cmp dword [0x1402354fc], 0xffffffff
je 0x14008e850
mov qword [rbp + 0x210], r15
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r12
mov word [rbp + 0x210], r15w
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0xc0]
call fcn.1400e0f04
lea rdx, [rbp + 0x210]
mov rcx, rdi
call fcn.140084ddc
mov eax, dword [0x1402354fc]
mov dword [rbp - 0x78], eax
lea rax, [rbp + 0x210]
cmp qword [rbp + 0x228], 8
cmovae rax, qword [rbp + 0x210]
mov qword [rbp - 0x68], rax
lea r9, [rbp - 0x80]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 8
jb 0x14008e83a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef90
call fcn.1401addcc
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r12
mov word [rbp + 0x210], r15w
mov rdx, qword [rbp + 0x1c8]
mov ebx, 0x1000
cmp rdx, 8
jb 0x14008e897
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, rbx
jb 0x14008e892
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef96
call fcn.1401addcc
mov qword [rbp + 0x1c0], r15
mov qword [rbp + 0x1c8], r12
mov word [rbp + 0x1b0], r15w
mov rdx, qword [rbp + 0x208]
cmp rdx, 8
jb 0x14008e8ef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, rbx
jb 0x14008e8ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef9c
call fcn.1401addcc
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x208], r12
mov word [rbp + 0x1f0], r15w
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 8
jb 0x14008e947
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, rbx
jb 0x14008e942
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008efa2
call fcn.1401addcc
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r12
mov word [rbp + 0x1d0], r15w
mov r15d, dword [rsp + 0x58]
mov r8b, r13b
lea rdx, [rbp + 0xc0]
lea rcx, [0x140234020]
call fcn.14000ef24
test al, al
je 0x14008e985
mov rbx, qword [rbp - 0x18]
jmp 0x14008db07
mov r12, qword [rbp - 0x10]
mov dword [rsp + 0x20], 0x4411
mov r9d, 0x2b8
lea r8, [rbp + 0x5f0]
mov r14d, 0x10
mov edx, r14d
lea rcx, [0x1401dfc58]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rbx, rax
lea ecx, [r14 - 0xb]
xor r13d, r13d
test rax, rax
lea eax, [rcx + 2]
cmovne ecx, eax
mov dword [rbp], ecx
mov dword [rbp + 4], r15d
mov ecx, dword [rbp + 0x5f8]
mov dword [rbp + 0x24], ecx
mov dword [rbp + 8], r13d
lea rsi, [0x1401da458]
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x3d0], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3e0], xmm0
movdqa xmm1, xmmword [0x1401da070]
movdqa xmmword [rbp + 0x3e0], xmm1
mov word [rbp + 0x3d0], r13w
mov qword [rbp + 0x3f0], r13
movdqa xmmword [rbp + 0x400], xmm0
movdqa xmmword [rbp + 0x400], xmm1
mov word [rbp + 0x3f0], r13w
movups xmmword [rbp + 0x410], xmm0
mov qword [rbp + 0x420], r13
mov qword [rbp + 0x428], r13
mov qword [rbp + 0x430], r13
xor edx, edx
lea r8d, [r14 + 0x50]
lea rcx, [rbp + 0x438]
call fcn.1401b0b80
mov rdx, rsi
lea rcx, [rbp + 0x3d0]
call fcn.140012f6c
lea esi, [r14 - 0xf]
mov byte [rbp + 0x474], sil
mov dword [rbp + 0x438], r14d
lea r9, [rdi + 0x38]
mov r10, qword [r9 + 8]
mov rcx, r10
sub rcx, qword [r9]
movabs rax, 0xa3d70a3d70a3d70b
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x28], rdx
mov rcx, r9
cmp r10, qword [r9 + 0x10]
je 0x14008eac5
lea rdx, [rbp + 0x3d0]
call fcn.14000a638
jmp 0x14008ead4
lea r8, [rbp + 0x3d0]
mov rdx, r10
call fcn.14000a6b0
lea r9, [rbp]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x1402354e4]
cmp ecx, 0xffffffff
je 0x14008eb25
test rbx, rbx
je 0x14008eb25
mov dword [rbp - 0x78], ecx
lea rcx, [rbp + 0x808]
mov qword [rbp - 0x68], rcx
movsxd r8, eax
lea r9, [rbp - 0x80]
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov rdx, qword [rbp + 0x408]
mov ebx, 8
cmp rdx, rbx
jb 0x14008eb6f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008eb6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008efa8
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqa xmmword [rbp + 0x400], xmm0
mov word [rbp + 0x3f0], r13w
mov rdx, qword [rbp + 0x3e8]
cmp rdx, rbx
jb 0x14008ebcc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ebc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ef54
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqa xmmword [rbp + 0x3e0], xmm0
mov word [rbp + 0x3d0], r13w
mov rcx, rdi
call fcn.140093468
cmp qword [r12 + 0x10], r13
je 0x14008ec42
lea rdx, [0x1401da77c]
mov rcx, r12
call fcn.140081e68
test al, al
jne 0x14008ec15
mov rdx, r12
mov rcx, rdi
call fcn.140088a1c
test al, al
jne 0x14008ec66
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x70]
test eax, eax
jle 0x14008ec3d
cmp ecx, eax
jl 0x14008ec3d
lea ecx, [rax - 1]
movsxd r8, ecx
jmp 0x14008ec45
xor r8d, r8d
mov eax, 3
mov dword [rbp - 0x70], eax
mov dword [rbp - 0x74], eax
lea r9, [rbp - 0x80]
mov edx, 0x102b
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
mov r8, rsi
lea edx, [r9 + 0xb]
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102a
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rbp + 0x190], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1a0], xmm0
xor r8d, r8d
lea rdx, [0x1401d9fd0]
lea rcx, [rbp + 0x190]
call fcn.1400041a8
nop
xor r8d, r8d
lea rdx, [rbp + 0x190]
lea rcx, [0x140234a10]
call fcn.140128574
nop
mov r8, qword [rbp + 0x1a8]
cmp r8, rbx
jb 0x14008ecf7
inc r8
mov rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x190]
call fcn.14002709c
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x1a0], xmm0
mov word [rbp + 0x190], r13w
mov rcx, rdi
call fcn.140092f70
mov rcx, rdi
call fcn.14009328c
lea rcx, [0x140235170]
call fcn.14012e380
mov rcx, qword [0x140231b20]
cmp rcx, 0xffffffffffffffff
je 0x14008ed3e
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov qword [rbp + 0x270], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x280], xmm0
lea rdx, [rbp + 0x230]
cmp qword [rbp + 0x248], rbx
cmovae rdx, qword [rbp + 0x230]
mov r8, qword [rbp + 0x240]
lea rcx, [rbp + 0x270]
call fcn.1400042b0
nop
lea rcx, [rbp + 0x270]
call fcn.1400e299c
lea rcx, [rbp + 0x270]
cmp qword [rbp + 0x288], rbx
cmovae rcx, qword [rbp + 0x270]
mov r8d, esi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov qword [0x140231b20], rax
xor edx, edx
lea rcx, [0x140234a10]
call fcn.140128674
nop
mov r8, qword [rbp + 0x288]
cmp r8, rbx
jb 0x14008eddf
inc r8
mov rdx, qword [rbp + 0x270]
lea rcx, [rbp + 0x270]
call fcn.14002709c
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rbp + 0x280], xmm0
mov word [rbp + 0x270], r13w
mov r8, qword [rbp + 0xf8]
cmp r8, rbx
jb 0x14008ee19
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.14002709c
movdqa xmm0, xmmword [0x1401da070]
movdqa xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0xe0], r13w
mov r8, qword [rbp + 0xd8]
cmp r8, rbx
jb 0x14008ee53
inc r8
mov rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xc0]
call fcn.14002709c
movdqa xmm0, xmmword [0x1401da070]
movdqa xmmword [rbp + 0xd0], xmm0
mov word [rbp + 0xc0], r13w
lea rcx, [rbp + 0x90]
call fcn.14015e8c0
nop
mov r8, qword [rsp + 0x60]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.1400820a8
mov r8, rsi
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.14006f5a0
nop
mov r8, qword [rbp + 0x268]
cmp r8, rbx
jb 0x14008eec5
inc r8
mov rdx, qword [rbp + 0x250]
lea rcx, [rbp + 0x250]
call fcn.14002709c
mov qword [rbp + 0x260], r13
mov edi, 7
mov qword [rbp + 0x268], rdi
mov word [rbp + 0x250], r13w
mov r8, qword [rbp + 0x248]
cmp r8, rbx
jb 0x14008ef02
inc r8
mov rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0x230]
call fcn.14002709c
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], rdi
mov word [rbp + 0x230], r13w
mov eax, dword [0x140231ad0]
test eax, eax
jle 0x14008ef2a
sub eax, esi
mov dword [0x140231ad0], eax
mov rcx, qword [rbp + 0xb78]
xor rcx, rsp
call fcn.1401adee0
mov rbx, qword [rsp + 0xcd0]
add rsp, 0xc80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.140006b64
int3
call fcn.140006be8
int3
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
int3