Function at 0x14004331c
Capabilities:
Get file system object information

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x45b0]
mov eax, 0x46b0
call fcn.1400f1270
sub rsp, rax
mov qword [rbp - 0x10], 0xfffffffffffffffe
mov qword [rsp + 0x4700], rbx
mov rax, qword [0x1401412b0]
xor rax, rsp
mov qword [rbp + 0x45a8], rax
mov r12, rdx
mov qword [rbp - 0x68], rdx
mov rdi, rcx
mov esi, 1
add dword [0x140147ca0], esi
mov r9d, esi
or rbx, 0xffffffffffffffff
mov r8, rbx
mov edx, 0x100c
mov rcx, qword [rcx + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14, rax
mov qword [rbp - 0x70], rax
mov edx, esi
lea rcx, [0x14016dce0]
call fcn.1400a83a4
mov ecx, 0x1c2
call fcn.1400881f8
mov rdx, rax
xor r8d, r8d
lea rcx, [0x14016dce0]
call fcn.1400a82cc
mov rcx, qword [0x140148e10]
xor r13d, r13d
test rcx, rcx
je 0x1400433d9
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov qword [0x140148e10], rbx
mov r15b, r13b
mov byte [rsp + 0x30], r13b
cmp byte [rdi + 0x1082], r13b
je 0x1400433fb
lea rcx, [0x14016dcd0]
call fcn.140001f60
jmp 0x1400434b1
lea rbx, [rdi + 0x1084]
jmp 0x140043416
mov rcx, rbx
call fcn.1400796e4
cmp word [rax], r13w
je 0x140043424
mov word [rax], r13w
mov rcx, rbx
call fcn.140069390
test al, al
je 0x140043404
jmp 0x14004342c
mov r15b, sil
mov byte [rsp + 0x30], sil
xor r8d, r8d
lea rdx, str.FullPathsTitle
lea rcx, [0x14010fd68]
call fcn.14009f858
test eax, eax
setne al
test al, al
je 0x140043450
mov rax, rbx
jmp 0x140043458
mov rcx, rbx
call fcn.1400796e4
mov rcx, rbx
cmp word [rax], r13w
cmovne rcx, rax
call fcn.1400dd4a4
mov rcx, rbx
call fcn.140078b18
mov esi, eax
cmp eax, 0xffffffff
je 0x140043485
call fcn.1400c54f8
bt eax, esi
jae 0x140043b9c
test r15b, r15b
jne 0x1400434b1
lea rcx, [0x14016dcd0]
call fcn.14000260c
lea rcx, [0x1401546e8]
call fcn.1400ad91c
mov rdx, rbx
lea rcx, [0x1401546e8]
call fcn.1400add0c
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xb]
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.14003fe4c
mov ebx, 0x4401
mov esi, 0x2b8
test r15b, r15b
jne 0x1400434fb
mov dword [rsp + 0x20], ebx
mov r9d, esi
lea r8, [rbp + 0x40]
xor edx, edx
lea rcx, [0x14010f95c]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test rax, rax
jne 0x140043533
xor r8d, r8d
mov edx, 0x800
lea rcx, [rbp + 0x35a0]
call fcn.1400c53e0
test r15b, r15b
je 0x140043519
mov rax, r13
jmp 0x140043533
mov dword [rsp + 0x20], ebx
mov r9d, esi
lea r8, [rbp + 0x40]
xor edx, edx
lea rcx, [rbp + 0x35a0]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov r9, rax
mov edx, 0x1003
mov r8d, 1
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rsi, [rdi + 0x1084]
mov rcx, rsi
call fcn.1400c5528
mov bl, al
mov byte [rsp + 0x31], al
xor r8d, r8d
lea rdx, str.ShowSeconds
lea rcx, str.FileList
call fcn.14009f858
test eax, eax
setne byte [rsp + 0x33]
mov rcx, rdi
cmp byte [rdi + 0x1082], r13b
je 0x140043593
call fcn.140043bd8
jmp 0x140043a4d
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
call fcn.140037318
mov r9d, 0x800
lea r8, [rbp + 0x35a0]
lea rdx, [0x14010f558]
mov rcx, rsi
call fcn.1400791c8
lea rcx, [rbp + 0x2450]
call fcn.14006a87c
nop
lea rdx, [rbp + 0x35a0]
lea rcx, [rbp + 0x2450]
call fcn.14006aa30
mov qword [rbp + 0x1310], r13
mov qword [rbp + 0x1318], r13
mov qword [rbp + 0x1320], r13
xor esi, esi
mov byte [rsp + 0x32], sil
mov edx, 0x1f4
lea rcx, [rbp - 8]
call fcn.1400c4a28
nop
test r15b, r15b
jne 0x140043970
mov r12b, byte [rsp + 0x31]
mov r14b, sil
mov r15b, byte [rsp + 0x33]
jmp 0x140043622
xor esi, esi
xor r8d, r8d
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x2450]
call fcn.14006a934
test al, al
je 0x140043956
test r13b, 0x1f
jne 0x14004364f
lea rcx, [rbp - 8]
call fcn.1400c6050
lea rcx, [rbp + 0x300]
call fcn.1400796e4
mov rbx, rax
movzx ecx, word [rax]
cmp cx, word [0x14010f95c]
jne 0x140043677
movzx ecx, word [rax + 2]
cmp cx, word [0x14010f95e]
je 0x140043622
mov dword [rbp - 0x60], 7
mov dword [rbp - 0x5c], r13d
or dword [rbp - 0x3c], 0xffffffff
mov dword [rbp - 0x58], esi
movzx ecx, word [rax]
movzx eax, word [0x14010f648]
sub ecx, eax
jne 0x1400436b3
movzx ecx, word [rbx + 2]
movzx eax, word [0x14010f64a]
sub ecx, eax
jne 0x1400436b3
movzx ecx, word [rbx + 4]
movzx eax, word [0x14010f64c]
sub ecx, eax
test ecx, ecx
sete sil
test sil, sil
je 0x1400436d0
test r12b, r12b
jne 0x140043620
mov eax, dword [rbp + 0x48]
mov dword [rbp - 0x3c], eax
mov r14b, 1
xor edx, edx
mov r8d, 0x1100
lea rcx, [rbp + 0x1350]
call fcn.1400f24e0
mov r8d, 0x800
mov rdx, rbx
lea rcx, [rbp + 0x1350]
call fcn.14008e2e4
mov rdx, rbx
mov rcx, rdi
call fcn.14003f6f0
mov rax, qword [rbp + 0x1300]
mov qword [rbp + 0x23d0], rax
and qword [rbp + 0x23d8], 0
mov eax, dword [rbp + 0x1308]
mov dword [rbp + 0x23f8], eax
mov rax, qword [rbp + 0x1310]
mov qword [rbp + 0x23e0], rax
inc r13d
mov dword [rbp + 0x243c], r13d
cmp byte [rbp + 0x130d], 0
je 0x14004375c
mov al, byte [rbp + 0x130e]
neg al
sbb ecx, ecx
neg ecx
add ecx, 2
mov dword [rbp + 0x2428], ecx
lea rdx, [rbp + 0x1350]
lea rcx, [0x140173cc0]
call fcn.14003df0c
mov qword [rbp - 0x38], rax
lea rcx, [rbp + 0x300]
mov rax, rbx
sub rax, rcx
sar rax, 1
mov edx, 0x800
sub rdx, rax
mov rcx, rbx
call fcn.1400c658c
mov qword [rbp - 0x48], rbx
lea r9, [rbp - 0x60]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
cmp byte [rbp + 0x130c], 0
jne 0x1400437db
mov r8d, 0x32
lea rdx, [rbp + 0x3530]
mov rcx, qword [rbp + 0x23d0]
call fcn.1400a842c
lea rax, [rbp + 0x3530]
jmp 0x1400437e2
lea rax, [0x14010f1a8]
mov dword [rsp + 0x48], 1
mov qword [rsp + 0x58], rax
lea r9, [rsp + 0x40]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x48], 2
lea r9, [rsp + 0x40]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x60]
test sil, sil
je 0x140043832
lea rax, [rbp + 0x258]
mov qword [rsp + 0x58], rax
jmp 0x140043838
or qword [rsp + 0x58], 0xffffffffffffffff
call qword [sym.imp.USER32.dll_SendMessageW]
call fcn.14006c514
lea rcx, [rbp + 0x1338]
cmp eax, 0x600
jae 0x14004385e
lea rdx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
jmp 0x140043887
lea rdx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHRestricted
lea rax, [rbp + 0x3460]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x10]
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_GetDateFormatW]
lea rcx, [rbp + 0x3460]
sub rcx, 2
xor esi, esi
lea rcx, [rcx + 2]
cmp word [rcx], si
jne 0x1400438cb
mov eax, dword [0x140113c64]
mov dword [rcx], eax
lea rcx, [rbp + 0x3460]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], si
jne 0x1400438e7
lea rcx, [rbp + 0x3460]
lea rcx, [rcx + rax*2]
mov al, r15b
neg al
sbb edx, edx
not edx
and edx, 2
mov dword [rsp + 0x28], reloc.SHELL32.dll_SHRestricted
mov qword [rsp + 0x20], rcx
xor r9d, r9d
lea r8, [rbp + 0x10]
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_GetTimeFormatW]
mov dword [rsp + 0x48], 3
lea rax, [rbp + 0x3460]
mov qword [rsp + 0x58], rax
lea r9, [rsp + 0x40]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140043622
test r14b, r14b
mov r14, qword [rbp - 0x70]
mov r15b, byte [rsp + 0x30]
mov r12, qword [rbp - 0x68]
jne 0x140043a2d
mov bl, byte [rsp + 0x31]
test bl, bl
jne 0x140043a2d
mov dword [rbp - 0x60], 7
mov dword [rbp - 0x5c], r13d
mov eax, dword [rbp + 0x48]
mov dword [rbp - 0x3c], eax
xor r13d, r13d
mov dword [rbp - 0x58], r13d
lea rax, [0x14010f648]
mov qword [rbp - 0x48], rax
xor edx, edx
mov r8d, 0x1100
lea rcx, [rbp + 0x1350]
call fcn.1400f24e0
mov eax, dword [0x14010f648]
mov dword [rbp + 0x1350], eax
movzx eax, word [0x14010f64c]
mov word [rbp + 0x1354], ax
mov dword [rbp + 0x23f8], 0x10
lea rdx, [rbp + 0x1350]
lea rcx, [0x140173cc0]
call fcn.14003df0c
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x60]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x48], 2
lea rcx, [rbp + 0x258]
mov qword [rsp + 0x58], rcx
movsxd r8, eax
lea r9, [rsp + 0x40]
mov edx, 0x1074
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140043a30
xor r13d, r13d
lea rcx, [rbp - 8]
call fcn.1400c4a6c
nop
lea rcx, [rbp + 0x2450]
call fcn.14006a894
lea rsi, [rdi + 0x1084]
lea rcx, [0x140173cc0]
call fcn.14001a040
mov rcx, rdi
call fcn.140045744
test r12, r12
je 0x140043ab0
cmp word [r12], r13w
jne 0x140043aa1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp r14d, eax
jl 0x140043a8f
test eax, eax
jle 0x140043a8f
lea r14d, [rax - 1]
mov dword [rsp + 0x50], 3
mov dword [rsp + 0x4c], 3
jmp 0x140043acb
mov rdx, r12
mov rcx, rdi
call fcn.1400407cc
test al, al
jne 0x140043ae2
mov eax, 3
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x4c], eax
cmp r14d, 0xffffffff
je 0x140043ac8
test r12, r12
jne 0x140043acb
mov r14d, r13d
lea r9, [rsp + 0x40]
movsxd r8, r14d
mov edx, 0x102b
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, 1
or r8, 0xffffffffffffffff
mov edx, 0x100c
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
xor r8d, r8d
xor edx, edx
lea rcx, [0x14016dce0]
call fcn.1400a82cc
xor r9d, r9d
lea edx, [r9 + 0xb]
lea r8d, [r9 + 1]
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102a
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, ebx
xor r9d, r9d
mov edx, 0x1013
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.140045338
mov rcx, rdi
call fcn.140045584
xor edx, edx
lea rcx, [0x14016dce0]
call fcn.1400a83a4
lea rcx, [0x1401703b0]
call fcn.1400aabcc
test r15b, r15b
jne 0x140043b9c
cmp byte [rdi + 0x1082], r13b
jne 0x140043b9c
xor edx, edx
lea r8d, [rdx + 3]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov qword [0x140148e10], rax
mov eax, dword [0x140147ca0]
test eax, eax
jle 0x140043bae
dec eax
mov dword [0x140147ca0], eax
mov rcx, qword [rbp + 0x45a8]
xor rcx, rsp
call fcn.1400f12e0
mov rbx, qword [rsp + 0x4700]
add rsp, 0x46b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret