Function at 0x14005902c
Capabilities:
Get file system object information

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68a0]
mov eax, 0x69a0
call fcn.140117f40
sub rsp, rax
mov rax, qword [0x140181c48]
xor rax, rsp
mov qword [rbp + 0x6898], rax
mov rsi, rdx
mov qword [rbp - 0x48], rdx
mov rbx, rcx
mov edi, 1
add dword [0x140189800], edi
mov r9d, edi
or r13, 0xffffffffffffffff
mov r8, r13
mov edx, 0x100c
mov rcx, qword [rcx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
mov qword [rbp - 0x40], rax
mov edx, edi
lea rcx, [0x1401bbfb0]
call fcn.1400c43f8
mov ecx, 0x1c4
call fcn.1400a493c
mov rdx, rax
xor r8d, r8d
lea rcx, [0x1401bbfb0]
call fcn.1400c4324
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 0xa]
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.140055f04
mov dword [rsp + 0x20], 0x4011
mov r9d, 0x2b8
lea r8, [rbp + 0x25b0]
xor edx, edx
lea rcx, [0x1401444f0]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov r9, rax
mov r8d, edi
mov edx, 0x1003
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x1401bbf98]
call fcn.140004a48
xor r12d, r12d
lea eax, [rdi + 6]
lea r14, [0x1401b9630]
cmp dword [0x1401c1f24], 0xffffffff
je 0x14005921e
mov qword [rbp + 0x1318], r12
mov qword [rbp + 0x1328], r12
mov qword [rbp + 0x1330], r12
mov qword [rbp + 0x1328], r12
mov qword [rbp + 0x1330], rax
mov word [rbp + 0x1318], r12w
mov qword [rbp + 0x1338], r12
lea rdx, [rbp + 0x11f0]
mov rcx, r14
call fcn.140009eb0
cmp byte [rbp + 0x1270], r12b
je 0x1400591b0
cmp byte [rbp + 0x1418], r12b
je 0x1400591b0
cmp byte [rbp + 0x1363], r12b
jne 0x1400591b0
mov ecx, dword [rbp + 0x13fc]
lea eax, [rcx - 2]
cmp eax, edi
lea eax, [rdi + 3]
cmovbe ecx, eax
mov dword [rbp + 0x13fc], ecx
jmp 0x1400591bb
mov ecx, dword [rbp + 0x13fc]
mov eax, 4
mov dword [rbp + 0x1190], eax
mov edx, 0x75
sub ecx, 1
je 0x1400591e1
sub ecx, 2
je 0x1400591da
cmp ecx, 1
jne 0x1400591e6
lea edx, [rcx + 0x77]
jmp 0x1400591e6
mov edx, 0x77
jmp 0x1400591e6
mov edx, 0x76
mov ecx, edx
call fcn.1400a493c
mov qword [rbp + 0x11a0], rax
movsxd r8, dword [0x1401c1f24]
lea r9, [rbp + 0x1190]
mov edx, 0x1060
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x1318]
call fcn.140004d54
mov edi, 0x800
mov r8d, edi
lea rdx, [rbp + 0x4890]
mov rcx, r14
call fcn.1400097e8
mov r8d, edi
lea rdx, [rbp + 0x3890]
mov rcx, r14
call fcn.140009e90
xor r9d, r9d
lea r8, [rbp + 0x4890]
lea rdx, [rbp + 0x3890]
mov rcx, rbx
call fcn.14004c888
lea rdx, [rbp + 0x3890]
mov rcx, rbx
call fcn.1400556d4
lea rcx, [rbp + 0x3890]
mov rax, r13
inc rax
cmp word [rcx + rax*2], r12w
jne 0x140059279
lea rdi, [rax + 1]
test rax, rax
cmove rdi, rax
lea rdx, [rbp + 0x3890]
lea rcx, [0x14019a508]
call fcn.1400ca288
mov r14d, r12d
mov dword [rsp + 0x34], r12d
xor r8d, r8d
lea rdx, str.FlatView
lea rcx, str.FileList
call fcn.1400bb570
test eax, eax
setne r13b
xor r8d, r8d
lea rdx, str.ShowSeconds
lea rcx, str.FileList
call fcn.1400bb570
test eax, eax
setne r12b
mov r8d, 1
lea rdx, str.ExactSizes
lea rcx, str.FileList
call fcn.1400bb570
xor ecx, ecx
test eax, eax
setne byte [rsp + 0x30]
mov qword [rbp + 0x1100], rcx
mov qword [rbp + 0x1108], rcx
mov qword [rbp + 0x1110], rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov ecx, 0x48
call fcn.140117b3c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x38], rax
mov edx, 0x1f4
lea rcx, [rbp + 0x48]
call fcn.1400e5aac
nop
mov r8b, r13b
lea rdx, [rbp + 0x70]
lea rcx, [0x1401b9630]
call fcn.140009ec4
test al, al
je 0x140059bf3
lea rsi, [rbp + 0x70]
lea rdi, [rsi + rdi*2]
mov qword [rbp - 0x50], rdi
xor esi, esi
test r14b, 0x1f
jne 0x140059388
lea rcx, [rbp + 0x48]
call fcn.1400e71ec
mov r14, rdi
mov r15b, byte [rbp + 0x114c]
test r13b, r13b
je 0x1400593a3
lea rcx, [rbp + 0x70]
call fcn.140095154
mov r14, rax
mov r8d, 0x800
mov rdx, r14
lea rcx, [rbp + 0x14b0]
call fcn.1400aa9e4
lea rcx, [rbp + 0x14b0]
call fcn.1400adb40
test r15b, r15b
je 0x140059470
test r13b, r13b
jne 0x140059470
lea rax, [rbp + 0x14b0]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], si
jne 0x1400593e1
lea rdx, [rbp + 0x14b0]
test byte [rbp + 0x1158], 0x20
je 0x1400594e5
mov qword [rbp + 0x11c8], rsi
mov qword [rbp + 0x11d8], rsi
mov qword [rbp + 0x11e0], rsi
lea rcx, [rbp + 0x11c8]
call fcn.140006e2c
nop
lea r8, [rbp + 0x11c8]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140007304
mov rdi, qword [rbp + 0x40]
cmp byte [rdi + 0x19], sil
jne 0x140059454
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x11c8]
call fcn.140006d18
test al, al
je 0x140059459
mov rdi, qword [rsp + 0x38]
lea rcx, [rbp + 0x11c8]
call fcn.140004d54
cmp rdi, qword [rsp + 0x38]
jne 0x140059bc6
mov dword [rbp - 0x30], 7
mov edi, dword [rsp + 0x34]
mov dword [rbp - 0x2c], edi
or dword [rbp - 0xc], 0xffffffff
mov dword [rbp - 0x28], esi
mov word [rbp + 0x2870], si
mov eax, dword [rbp + 0x1158]
test al, 1
je 0x1400594b5
mov r8d, 0xa
lea rdx, [0x1401444fc]
lea rcx, [rbp + 0x2870]
call fcn.1400aa9bc
mov eax, dword [rbp + 0x1158]
and eax, 6
je 0x14005970e
cmp eax, 2
je 0x1400596f5
cmp eax, 4
je 0x1400596ec
cmp eax, 6
jne 0x14005970e
lea rdx, [0x140144528]
jmp 0x1400596fc
mov qword [rbp + 0x1170], rsi
mov qword [rbp + 0x1180], rsi
mov qword [rbp + 0x1188], rsi
lea rcx, [rbp + 0x1170]
call fcn.140006e2c
nop
lea r8, [rbp + 0x1170]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140007304
mov rdi, qword [rbp + 0x40]
cmp byte [rdi + 0x19], sil
jne 0x14005953a
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x1170]
call fcn.140006d18
test al, al
je 0x14005953f
mov rdi, qword [rsp + 0x38]
mov rdx, qword [rbp + 0x1188]
cmp rdx, 8
jb 0x140059585
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059580
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059e79
call fcn.140117b78
mov qword [rbp + 0x1180], rsi
mov qword [rbp + 0x1188], 7
mov word [rbp + 0x1170], si
cmp rdi, qword [rsp + 0x38]
je 0x140059470
mov rdi, qword [rdi + 0x40]
mov rdx, rdi
lea rcx, [0x1401c1ec0]
call fcn.140053a28
mov rcx, qword [rbp + 0x1100]
mov qword [rax + 0x28], rcx
mov rcx, qword [rbp + 0x1108]
mov qword [rax + 0x30], rcx
mov rcx, qword [rbp + 0x1110]
mov qword [rax + 0x38], rcx
mov ecx, dword [rbp + 0x1118]
mov dword [rax + 0x20], ecx
or r14d, 0xffffffff
cmp qword [rbp + 0x1100], rsi
je 0x140059645
cmp dword [0x1401c1f18], r14d
je 0x140059645
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1100]
call fcn.1400e8348
mov eax, dword [0x1401c1f18]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [rbp + 0x1108], rsi
je 0x1400596a0
cmp dword [0x1401c1f1c], r14d
je 0x1400596a0
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1108]
call fcn.1400e8348
mov eax, dword [0x1401c1f1c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [rbp + 0x1110], rsi
je 0x140059bc6
cmp dword [0x1401c1f20], r14d
je 0x140059bc6
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1110]
call fcn.1400e8348
mov eax, dword [0x1401c1f20]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
jmp 0x140059baa
lea rdx, [0x140144518]
jmp 0x1400596fc
lea rdx, [0x140144508]
mov r8d, 0xa
lea rcx, [rbp + 0x2870]
call fcn.1400aa9bc
test r15b, r15b
je 0x140059738
lea r9, [rbp + 0x10f8]
lea r8, [rbp + 0x10f0]
lea rdx, [rbp + 0x70]
lea rcx, [0x1401b9630]
call fcn.140009cdc
test al, al
je 0x140059738
mov sil, 1
lea eax, [rdi + 1]
mov dword [rsp + 0x34], eax
mov dword [rbp + 0x115c], eax
lea rdx, [rbp + 0x70]
lea rcx, [0x1401c1ec0]
call fcn.140053af0
mov qword [rbp - 8], rax
xor edi, edi
test r15b, r15b
je 0x140059822
mov qword [rbp + 0x1190], rdi
mov qword [rbp + 0x11a0], rdi
mov qword [rbp + 0x11a8], rdi
lea rax, [rbp + 0x14b0]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], di
jne 0x140059784
lea rdx, [rbp + 0x14b0]
lea rcx, [rbp + 0x1190]
call fcn.140006e2c
nop
mov rax, qword [rbp - 8]
mov qword [rbp + 0x11b0], rax
lea r8, [rbp + 0x1190]
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.14005401c
nop
mov rdx, qword [rbp + 0x11a8]
cmp rdx, 8
jb 0x140059809
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059804
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059e79
call fcn.140117b78
mov qword [rbp + 0x11a0], rdi
mov qword [rbp + 0x11a8], 7
mov word [rbp + 0x1190], di
lea rdx, [rbp + 0x70]
mov rcx, rbx
call fcn.1400556d4
lea rcx, [rbp + 0x70]
mov rax, r14
sub rax, rcx
sar rax, 1
mov edx, 0x800
sub rdx, rax
mov rcx, r14
call fcn.1400e7730
mov qword [rbp - 0x18], r14
cmp word [rbp + 0x2870], di
je 0x14005986e
mov r8d, 0x800
lea rdx, [rbp + 0x2870]
lea rcx, [rbp + 0x70]
call fcn.1400aa9bc
lea r9, [rbp - 0x30]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdi, eax
xor eax, eax
test r15b, r15b
je 0x140059897
test sil, sil
je 0x1400599a1
or r14d, 0xffffffff
movabs rsi, 0x7fffffff7fffffff
cmp dword [0x1401c1f0c], r14d
je 0x140059923
mov rcx, qword [rbp + 0x10f0]
mov r8d, 0x32
cmp rcx, rsi
jne 0x1400598d5
lea rdx, [0x140144534]
lea rcx, [rbp + 0x2890]
call fcn.1400aa9e4
jmp 0x1400598f4
lea rdx, [rbp + 0x2890]
cmp byte [rsp + 0x30], al
je 0x1400598e9
call fcn.1400c4480
jmp 0x1400598f4
mov r9d, 0x5e6
call fcn.1400c4554
mov eax, dword [0x1401c1f0c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp dword [0x1401c1f10], r14d
je 0x1400599a5
mov rcx, qword [rbp + 0x10f8]
mov r8d, 0x32
cmp rcx, rsi
jne 0x140059953
lea rdx, [0x140144534]
lea rcx, [rbp + 0x2890]
call fcn.1400aa9e4
jmp 0x140059972
lea rdx, [rbp + 0x2890]
cmp byte [rsp + 0x30], al
je 0x140059967
call fcn.1400c4480
jmp 0x140059972
mov r9d, 0x5e6
call fcn.1400c4554
mov eax, dword [0x1401c1f10]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400599a5
or r14d, 0xffffffff
mov eax, dword [0x1401c1f14]
mov esi, 0x1074
cmp eax, r14d
je 0x1400599d3
mov dword [rsp + 0x58], eax
or qword [rsp + 0x68], 0xffffffffffffffff
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c1f18], r14d
je 0x140059a22
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1100]
call fcn.1400e8348
mov eax, dword [0x1401c1f18]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c1f1c], r14d
je 0x140059a71
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1108]
call fcn.1400e8348
mov eax, dword [0x1401c1f1c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c1f20], r14d
je 0x140059ac0
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1110]
call fcn.1400e8348
mov eax, dword [0x1401c1f20]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
cmp dword [0x1401c1f24], r14d
je 0x140059b75
mov eax, dword [rbp + 0x1124]
test eax, eax
je 0x140059b75
test r15b, r15b
jne 0x140059b75
cmp dword [rbp + 0x1148], esi
jne 0x140059b75
cmp eax, 3
jne 0x140059b1b
mov qword [rsp + 0x20], 0x41
lea r9, [rbp + 0x2890]
xor r8d, r8d
lea edx, [rsi + 0x20]
lea rcx, [rbp + 0x1128]
call fcn.1400aa028
jmp 0x140059b48
lea rcx, [0x140144538]
lea r8, str._08X
cmp eax, 1
cmove r8, rcx
mov r9d, dword [rbp + 0x1128]
mov edx, 0x41
lea rcx, [rbp + 0x2890]
call fcn.140004dcc
mov eax, dword [0x1401c1f24]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
test r13b, r13b
je 0x140059bc6
cmp dword [0x1401c1f28], r14d
je 0x140059bc6
mov r8d, 0x800
lea rdx, [rbp + 0x2890]
lea rcx, [rbp + 0x70]
call fcn.14009434c
mov eax, dword [0x1401c1f28]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8b, r13b
lea rdx, [rbp + 0x70]
lea rcx, [0x1401b9630]
call fcn.140009ec4
mov r14d, dword [rsp + 0x34]
test al, al
je 0x140059beb
mov rdi, qword [rbp - 0x50]
jmp 0x140059379
mov rsi, qword [rbp - 0x48]
mov r15, qword [rbp - 0x40]
mov dword [rsp + 0x20], 0x4411
mov r9d, 0x2b8
lea r8, [rbp + 0x11f0]
mov r12d, 0x10
mov edx, r12d
lea rcx, [0x140144558]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rdi, rax
lea ecx, [r12 - 0xb]
xor r13d, r13d
test rax, rax
lea eax, [rcx + 2]
cmovne ecx, eax
mov dword [rbp - 0x30], ecx
mov dword [rbp - 0x2c], r14d
mov ecx, dword [rbp + 0x11f8]
mov dword [rbp - 0xc], ecx
mov dword [rbp - 0x28], r13d
lea r14, [0x1401421bc]
mov qword [rbp - 0x18], r14
xor edx, edx
mov r8d, 0x1100
lea rcx, [rbp + 0x14b0]
call fcn.14011ac30
mov r8d, 0x800
mov rdx, r14
lea rcx, [rbp + 0x14b0]
call fcn.1400aa9e4
mov dword [rbp + 0x2558], r12d
lea rdx, [rbp + 0x14b0]
lea rcx, [0x1401c1ec0]
call fcn.140053af0
mov qword [rbp - 8], rax
lea r9, [rbp - 0x30]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x1401c1f14]
cmp ecx, 0xffffffff
je 0x140059ce5
test rdi, rdi
je 0x140059ce5
mov dword [rsp + 0x58], ecx
lea rcx, [rbp + 0x1408]
mov qword [rsp + 0x68], rcx
movsxd r8, eax
lea r9, [rsp + 0x50]
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.14005c288
test rsi, rsi
je 0x140059d2e
cmp word [rsi], r13w
je 0x140059d2e
mov rdx, rsi
mov rcx, rbx
call fcn.140056e24
test al, al
jne 0x140059d52
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x140059d29
cmp r15d, eax
jl 0x140059d29
lea r15d, [rax - 1]
movsxd r8, r15d
jmp 0x140059d31
xor r8d, r8d
mov eax, 3
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x5c], eax
lea r9, [rsp + 0x50]
mov edx, 0x102b
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
lea edi, [r9 + 1]
mov r8d, edi
lea edx, [rdi + 0xa]
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102a
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1401bbfb0]
call fcn.1400c4324
mov rcx, rbx
call fcn.14005be50
mov rcx, rbx
call fcn.14005c0ac
lea rcx, [0x1401be668]
call fcn.1400c7118
mov rcx, qword [0x140189820]
cmp rcx, 0xffffffffffffffff
je 0x140059dbe
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov r8d, 0x800
lea rdx, [rbp + 0x4890]
lea rcx, [rbp + 0x5890]
call fcn.1400aa9e4
lea rcx, [rbp + 0x5890]
call fcn.1400951a8
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x5890]
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov qword [0x140189820], rax
xor edx, edx
lea rcx, [0x1401bbfb0]
call fcn.1400c43f8
nop
lea rcx, [rbp + 0x48]
call fcn.1400e5af0
nop
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.14005411c
mov edx, 0x48
mov rcx, qword [rsp + 0x38]
call fcn.140117b78
nop
mov eax, dword [0x140189800]
test eax, eax
jle 0x140059e4f
sub eax, edi
mov dword [0x140189800], eax
mov rcx, qword [rbp + 0x6898]
xor rcx, rsp
call fcn.140117fa0
mov rbx, qword [rsp + 0x69f0]
add rsp, 0x69a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14011f088
nop
int3