Function at 0x14005a86c
Capabilities:
Get file system object information

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68a0]
mov eax, 0x69a0
call fcn.140119910
sub rsp, rax
mov rax, qword [0x140182c48]
xor rax, rsp
mov qword [rbp + 0x6898], rax
mov rsi, rdx
mov qword [rbp - 0x48], rdx
mov rbx, rcx
mov edi, 1
add dword [0x14018a800], edi
mov r9d, edi
or r13, 0xffffffffffffffff
mov r8, r13
mov edx, 0x100c
mov rcx, qword [rcx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
mov qword [rbp - 0x40], rax
mov edx, edi
lea rcx, [0x1401bcfb0]
call fcn.1400c5c74
mov ecx, 0x1c4
call fcn.1400a617c
mov rdx, rax
xor r8d, r8d
lea rcx, [0x1401bcfb0]
call fcn.1400c5ba0
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 0xa]
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.140057714
mov dword [rsp + 0x20], 0x4011
mov r9d, 0x2b8
lea r8, [rbp + 0x25b0]
xor edx, edx
lea rcx, [0x140145500]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov r9, rax
mov r8d, edi
mov edx, 0x1003
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x1401bcf98]
call fcn.140004a48
xor r12d, r12d
lea eax, [rdi + 6]
lea r14, [0x1401ba630]
cmp dword [0x1401c2f24], 0xffffffff
je 0x14005aa5e
mov qword [rbp + 0x1318], r12
mov qword [rbp + 0x1328], r12
mov qword [rbp + 0x1330], r12
mov qword [rbp + 0x1328], r12
mov qword [rbp + 0x1330], rax
mov word [rbp + 0x1318], r12w
mov qword [rbp + 0x1338], r12
lea rdx, [rbp + 0x11f0]
mov rcx, r14
call fcn.140009f10
cmp byte [rbp + 0x1270], r12b
je 0x14005a9f0
cmp byte [rbp + 0x1418], r12b
je 0x14005a9f0
cmp byte [rbp + 0x1363], r12b
jne 0x14005a9f0
mov ecx, dword [rbp + 0x13fc]
lea eax, [rcx - 2]
cmp eax, edi
lea eax, [rdi + 3]
cmovbe ecx, eax
mov dword [rbp + 0x13fc], ecx
jmp 0x14005a9fb
mov ecx, dword [rbp + 0x13fc]
mov eax, 4
mov dword [rbp + 0x1190], eax
mov edx, 0x75
sub ecx, 1
je 0x14005aa21
sub ecx, 2
je 0x14005aa1a
cmp ecx, 1
jne 0x14005aa26
lea edx, [rcx + 0x77]
jmp 0x14005aa26
mov edx, 0x77
jmp 0x14005aa26
mov edx, 0x76
mov ecx, edx
call fcn.1400a617c
mov qword [rbp + 0x11a0], rax
movsxd r8, dword [0x1401c2f24]
lea r9, [rbp + 0x1190]
mov edx, 0x1060
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x1318]
call fcn.140004d54
mov edi, 0x800
mov r8d, edi
lea rdx, [rbp + 0x4890]
mov rcx, r14
call fcn.140009848
mov r8d, edi
lea rdx, [rbp + 0x3890]
mov rcx, r14
call fcn.140009ef0
xor r9d, r9d
lea r8, [rbp + 0x4890]
lea rdx, [rbp + 0x3890]
mov rcx, rbx
call fcn.14004e088
lea rdx, [rbp + 0x3890]
mov rcx, rbx
call fcn.140056ee4
lea rcx, [rbp + 0x3890]
mov rax, r13
inc rax
cmp word [rcx + rax*2], r12w
jne 0x14005aab9
lea rdi, [rax + 1]
test rax, rax
cmove rdi, rax
lea rdx, [rbp + 0x3890]
lea rcx, [0x14019b508]
call fcn.1400cbaf8
mov r14d, r12d
mov dword [rsp + 0x34], r12d
xor r8d, r8d
lea rdx, str.FlatView
lea rcx, str.FileList
call fcn.1400bcdb0
test eax, eax
setne r13b
xor r8d, r8d
lea rdx, str.ShowSeconds
lea rcx, str.FileList
call fcn.1400bcdb0
test eax, eax
setne r12b
mov r8d, 1
lea rdx, str.ExactSizes
lea rcx, str.FileList
call fcn.1400bcdb0
xor ecx, ecx
test eax, eax
setne byte [rsp + 0x30]
mov qword [rbp + 0x1100], rcx
mov qword [rbp + 0x1108], rcx
mov qword [rbp + 0x1110], rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov ecx, 0x48
call fcn.14011950c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x38], rax
mov edx, 0x1f4
lea rcx, [rbp + 0x48]
call fcn.1400e733c
nop
mov r8b, r13b
lea rdx, [rbp + 0x70]
lea rcx, [0x1401ba630]
call fcn.140009f24
test al, al
je 0x14005b433
lea rsi, [rbp + 0x70]
lea rdi, [rsi + rdi*2]
mov qword [rbp - 0x50], rdi
xor esi, esi
test r14b, 0x1f
jne 0x14005abc8
lea rcx, [rbp + 0x48]
call fcn.1400e8a7c
mov r14, rdi
mov r15b, byte [rbp + 0x114c]
test r13b, r13b
je 0x14005abe3
lea rcx, [rbp + 0x70]
call fcn.14009694c
mov r14, rax
mov r8d, 0x800
mov rdx, r14
lea rcx, [rbp + 0x14b0]
call fcn.1400ac228
lea rcx, [rbp + 0x14b0]
call fcn.1400af380
test r15b, r15b
je 0x14005acb0
test r13b, r13b
jne 0x14005acb0
lea rax, [rbp + 0x14b0]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], si
jne 0x14005ac21
lea rdx, [rbp + 0x14b0]
test byte [rbp + 0x1158], 0x20
je 0x14005ad25
mov qword [rbp + 0x11c8], rsi
mov qword [rbp + 0x11d8], rsi
mov qword [rbp + 0x11e0], rsi
lea rcx, [rbp + 0x11c8]
call fcn.140006e8c
nop
lea r8, [rbp + 0x11c8]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140007364
mov rdi, qword [rbp + 0x40]
cmp byte [rdi + 0x19], sil
jne 0x14005ac94
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x11c8]
call fcn.140006d78
test al, al
je 0x14005ac99
mov rdi, qword [rsp + 0x38]
lea rcx, [rbp + 0x11c8]
call fcn.140004d54
cmp rdi, qword [rsp + 0x38]
jne 0x14005b406
mov dword [rbp - 0x30], 7
mov edi, dword [rsp + 0x34]
mov dword [rbp - 0x2c], edi
or dword [rbp - 0xc], 0xffffffff
mov dword [rbp - 0x28], esi
mov word [rbp + 0x2870], si
mov eax, dword [rbp + 0x1158]
test al, 1
je 0x14005acf5
mov r8d, 0xa
lea rdx, [0x14014550c]
lea rcx, [rbp + 0x2870]
call fcn.1400ac200
mov eax, dword [rbp + 0x1158]
and eax, 6
je 0x14005af4e
cmp eax, 2
je 0x14005af35
cmp eax, 4
je 0x14005af2c
cmp eax, 6
jne 0x14005af4e
lea rdx, [0x140145538]
jmp 0x14005af3c
mov qword [rbp + 0x1170], rsi
mov qword [rbp + 0x1180], rsi
mov qword [rbp + 0x1188], rsi
lea rcx, [rbp + 0x1170]
call fcn.140006e8c
nop
lea r8, [rbp + 0x1170]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140007364
mov rdi, qword [rbp + 0x40]
cmp byte [rdi + 0x19], sil
jne 0x14005ad7a
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x1170]
call fcn.140006d78
test al, al
je 0x14005ad7f
mov rdi, qword [rsp + 0x38]
mov rdx, qword [rbp + 0x1188]
cmp rdx, 8
jb 0x14005adc5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005adc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b6b9
call fcn.140119548
mov qword [rbp + 0x1180], rsi
mov qword [rbp + 0x1188], 7
mov word [rbp + 0x1170], si
cmp rdi, qword [rsp + 0x38]
je 0x14005acb0
mov rdi, qword [rdi + 0x40]
mov rdx, rdi
lea rcx, [0x1401c2ec0]
call fcn.140055228
mov rcx, qword [rbp + 0x1100]
mov qword [rax + 0x28], rcx
mov rcx, qword [rbp + 0x1108]
mov qword [rax + 0x30], rcx
mov rcx, qword [rbp + 0x1110]
mov qword [rax + 0x38], rcx
mov ecx, dword [rbp + 0x1118]
mov dword [rax + 0x20], ecx
or r14d, 0xffffffff
cmp qword [rbp + 0x1100], rsi
je 0x14005ae85
cmp dword [0x1401c2f18], r14d
je 0x14005ae85
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1100]
call fcn.1400e9bd8
mov eax, dword [0x1401c2f18]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [rbp + 0x1108], rsi
je 0x14005aee0
cmp dword [0x1401c2f1c], r14d
je 0x14005aee0
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1108]
call fcn.1400e9bd8
mov eax, dword [0x1401c2f1c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [rbp + 0x1110], rsi
je 0x14005b406
cmp dword [0x1401c2f20], r14d
je 0x14005b406
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1110]
call fcn.1400e9bd8
mov eax, dword [0x1401c2f20]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
jmp 0x14005b3ea
lea rdx, [0x140145528]
jmp 0x14005af3c
lea rdx, [0x140145518]
mov r8d, 0xa
lea rcx, [rbp + 0x2870]
call fcn.1400ac200
test r15b, r15b
je 0x14005af78
lea r9, [rbp + 0x10f8]
lea r8, [rbp + 0x10f0]
lea rdx, [rbp + 0x70]
lea rcx, [0x1401ba630]
call fcn.140009d3c
test al, al
je 0x14005af78
mov sil, 1
lea eax, [rdi + 1]
mov dword [rsp + 0x34], eax
mov dword [rbp + 0x115c], eax
lea rdx, [rbp + 0x70]
lea rcx, [0x1401c2ec0]
call fcn.1400552f0
mov qword [rbp - 8], rax
xor edi, edi
test r15b, r15b
je 0x14005b062
mov qword [rbp + 0x1190], rdi
mov qword [rbp + 0x11a0], rdi
mov qword [rbp + 0x11a8], rdi
lea rax, [rbp + 0x14b0]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], di
jne 0x14005afc4
lea rdx, [rbp + 0x14b0]
lea rcx, [rbp + 0x1190]
call fcn.140006e8c
nop
mov rax, qword [rbp - 8]
mov qword [rbp + 0x11b0], rax
lea r8, [rbp + 0x1190]
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.14005581c
nop
mov rdx, qword [rbp + 0x11a8]
cmp rdx, 8
jb 0x14005b049
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b044
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b6b9
call fcn.140119548
mov qword [rbp + 0x11a0], rdi
mov qword [rbp + 0x11a8], 7
mov word [rbp + 0x1190], di
lea rdx, [rbp + 0x70]
mov rcx, rbx
call fcn.140056ee4
lea rcx, [rbp + 0x70]
mov rax, r14
sub rax, rcx
sar rax, 1
mov edx, 0x800
sub rdx, rax
mov rcx, r14
call fcn.1400e8fc0
mov qword [rbp - 0x18], r14
cmp word [rbp + 0x2870], di
je 0x14005b0ae
mov r8d, 0x800
lea rdx, [rbp + 0x2870]
lea rcx, [rbp + 0x70]
call fcn.1400ac200
lea r9, [rbp - 0x30]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdi, eax
xor eax, eax
test r15b, r15b
je 0x14005b0d7
test sil, sil
je 0x14005b1e1
or r14d, 0xffffffff
movabs rsi, 0x7fffffff7fffffff
cmp dword [0x1401c2f0c], r14d
je 0x14005b163
mov rcx, qword [rbp + 0x10f0]
mov r8d, 0x32
cmp rcx, rsi
jne 0x14005b115
lea rdx, [0x140145544]
lea rcx, [rbp + 0x2890]
call fcn.1400ac228
jmp 0x14005b134
lea rdx, [rbp + 0x2890]
cmp byte [rsp + 0x30], al
je 0x14005b129
call fcn.1400c5cfc
jmp 0x14005b134
mov r9d, 0x5e6
call fcn.1400c5dd0
mov eax, dword [0x1401c2f0c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp dword [0x1401c2f10], r14d
je 0x14005b1e5
mov rcx, qword [rbp + 0x10f8]
mov r8d, 0x32
cmp rcx, rsi
jne 0x14005b193
lea rdx, [0x140145544]
lea rcx, [rbp + 0x2890]
call fcn.1400ac228
jmp 0x14005b1b2
lea rdx, [rbp + 0x2890]
cmp byte [rsp + 0x30], al
je 0x14005b1a7
call fcn.1400c5cfc
jmp 0x14005b1b2
mov r9d, 0x5e6
call fcn.1400c5dd0
mov eax, dword [0x1401c2f10]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14005b1e5
or r14d, 0xffffffff
mov eax, dword [0x1401c2f14]
mov esi, 0x1074
cmp eax, r14d
je 0x14005b213
mov dword [rsp + 0x58], eax
or qword [rsp + 0x68], 0xffffffffffffffff
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c2f18], r14d
je 0x14005b262
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1100]
call fcn.1400e9bd8
mov eax, dword [0x1401c2f18]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c2f1c], r14d
je 0x14005b2b1
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1108]
call fcn.1400e9bd8
mov eax, dword [0x1401c2f1c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c2f20], r14d
je 0x14005b300
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1110]
call fcn.1400e9bd8
mov eax, dword [0x1401c2f20]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
cmp dword [0x1401c2f24], r14d
je 0x14005b3b5
mov eax, dword [rbp + 0x1124]
test eax, eax
je 0x14005b3b5
test r15b, r15b
jne 0x14005b3b5
cmp dword [rbp + 0x1148], esi
jne 0x14005b3b5
cmp eax, 3
jne 0x14005b35b
mov qword [rsp + 0x20], 0x41
lea r9, [rbp + 0x2890]
xor r8d, r8d
lea edx, [rsi + 0x20]
lea rcx, [rbp + 0x1128]
call fcn.1400ab86c
jmp 0x14005b388
lea rcx, [0x140145548]
lea r8, str._08X
cmp eax, 1
cmove r8, rcx
mov r9d, dword [rbp + 0x1128]
mov edx, 0x41
lea rcx, [rbp + 0x2890]
call fcn.140004dcc
mov eax, dword [0x1401c2f24]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
test r13b, r13b
je 0x14005b406
cmp dword [0x1401c2f28], r14d
je 0x14005b406
mov r8d, 0x800
lea rdx, [rbp + 0x2890]
lea rcx, [rbp + 0x70]
call fcn.140095b44
mov eax, dword [0x1401c2f28]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8b, r13b
lea rdx, [rbp + 0x70]
lea rcx, [0x1401ba630]
call fcn.140009f24
mov r14d, dword [rsp + 0x34]
test al, al
je 0x14005b42b
mov rdi, qword [rbp - 0x50]
jmp 0x14005abb9
mov rsi, qword [rbp - 0x48]
mov r15, qword [rbp - 0x40]
mov dword [rsp + 0x20], 0x4411
mov r9d, 0x2b8
lea r8, [rbp + 0x11f0]
mov r12d, 0x10
mov edx, r12d
lea rcx, [0x140145568]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rdi, rax
lea ecx, [r12 - 0xb]
xor r13d, r13d
test rax, rax
lea eax, [rcx + 2]
cmovne ecx, eax
mov dword [rbp - 0x30], ecx
mov dword [rbp - 0x2c], r14d
mov ecx, dword [rbp + 0x11f8]
mov dword [rbp - 0xc], ecx
mov dword [rbp - 0x28], r13d
lea r14, [0x1401431cc]
mov qword [rbp - 0x18], r14
xor edx, edx
mov r8d, 0x1100
lea rcx, [rbp + 0x14b0]
call fcn.14011c600
mov r8d, 0x800
mov rdx, r14
lea rcx, [rbp + 0x14b0]
call fcn.1400ac228
mov dword [rbp + 0x2558], r12d
lea rdx, [rbp + 0x14b0]
lea rcx, [0x1401c2ec0]
call fcn.1400552f0
mov qword [rbp - 8], rax
lea r9, [rbp - 0x30]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x1401c2f14]
cmp ecx, 0xffffffff
je 0x14005b525
test rdi, rdi
je 0x14005b525
mov dword [rsp + 0x58], ecx
lea rcx, [rbp + 0x1408]
mov qword [rsp + 0x68], rcx
movsxd r8, eax
lea r9, [rsp + 0x50]
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.14005dac8
test rsi, rsi
je 0x14005b56e
cmp word [rsi], r13w
je 0x14005b56e
mov rdx, rsi
mov rcx, rbx
call fcn.140058634
test al, al
jne 0x14005b592
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x14005b569
cmp r15d, eax
jl 0x14005b569
lea r15d, [rax - 1]
movsxd r8, r15d
jmp 0x14005b571
xor r8d, r8d
mov eax, 3
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x5c], eax
lea r9, [rsp + 0x50]
mov edx, 0x102b
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
lea edi, [r9 + 1]
mov r8d, edi
lea edx, [rdi + 0xa]
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102a
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1401bcfb0]
call fcn.1400c5ba0
mov rcx, rbx
call fcn.14005d690
mov rcx, rbx
call fcn.14005d8ec
lea rcx, [0x1401bf668]
call fcn.1400c8988
mov rcx, qword [0x14018a820]
cmp rcx, 0xffffffffffffffff
je 0x14005b5fe
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov r8d, 0x800
lea rdx, [rbp + 0x4890]
lea rcx, [rbp + 0x5890]
call fcn.1400ac228
lea rcx, [rbp + 0x5890]
call fcn.1400969a0
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x5890]
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov qword [0x14018a820], rax
xor edx, edx
lea rcx, [0x1401bcfb0]
call fcn.1400c5c74
nop
lea rcx, [rbp + 0x48]
call fcn.1400e7380
nop
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.14005591c
mov edx, 0x48
mov rcx, qword [rsp + 0x38]
call fcn.140119548
nop
mov eax, dword [0x14018a800]
test eax, eax
jle 0x14005b68f
sub eax, edi
mov dword [0x14018a800], eax
mov rcx, qword [rbp + 0x6898]
xor rcx, rsp
call fcn.140119970
mov rbx, qword [rsp + 0x69f0]
add rsp, 0x69a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140120a58
nop
int3