Function at 0x140042678
Capabilities:
Get file system object information

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x44b0]
mov eax, 0x45b0
call fcn.1400f31b0
sub rsp, rax
mov qword [rbp - 0x10], 0xfffffffffffffffe
mov qword [rsp + 0x4600], rbx
mov rax, qword [0x1401542d0]
xor rax, rsp
mov qword [rbp + 0x44a8], rax
mov r12, rdx
mov qword [rbp - 0x68], rdx
mov rdi, rcx
mov esi, 1
add dword [0x14015bc40], esi
mov r9d, esi
or rbx, 0xffffffffffffffff
mov r8, rbx
mov edx, 0x100c
mov rcx, qword [rcx + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14, rax
mov qword [rbp - 0x70], rax
mov edx, esi
lea rcx, [0x140180fc0]
call fcn.1400a90cc
mov ecx, 0x1c2
call fcn.140088ebc
mov rdx, rax
xor r8d, r8d
lea rcx, [0x140180fc0]
call fcn.1400a8ff4
mov rcx, qword [0x14015abc8]
xor r13d, r13d
test rcx, rcx
je 0x140042735
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov qword [0x14015abc8], rbx
mov r15b, r13b
mov byte [rsp + 0x30], r13b
cmp byte [rdi + 0x1082], r13b
je 0x140042757
lea rcx, [0x140180fb0]
call fcn.140001f4c
jmp 0x14004280d
lea rbx, [rdi + 0x1084]
jmp 0x140042772
mov rcx, rbx
call fcn.140079c5c
cmp word [rax], r13w
je 0x140042780
mov word [rax], r13w
mov rcx, rbx
call fcn.140069278
test al, al
je 0x140042760
jmp 0x140042788
mov r15b, sil
mov byte [rsp + 0x30], sil
xor r8d, r8d
lea rdx, str.FullPathsTitle
lea rcx, [0x140111db8]
call fcn.1400a0584
test eax, eax
setne al
test al, al
je 0x1400427ac
mov rax, rbx
jmp 0x1400427b4
mov rcx, rbx
call fcn.140079c5c
mov rcx, rbx
cmp word [rax], r13w
cmovne rcx, rax
call fcn.1400df43c
mov rcx, rbx
call fcn.140079080
mov esi, eax
cmp eax, 0xffffffff
je 0x1400427e1
call fcn.1400c6c10
bt eax, esi
jae 0x140042e9e
test r15b, r15b
jne 0x14004280d
lea rcx, [0x140180fb0]
call fcn.1400025d0
lea rcx, [0x140167760]
call fcn.1400ae62c
mov rdx, rbx
lea rcx, [0x140167760]
call fcn.1400aeb98
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xb]
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.14003e974
mov ebx, 0x4401
mov esi, 0x2b8
test r15b, r15b
jne 0x140042857
mov dword [rsp + 0x20], ebx
mov r9d, esi
lea r8, [rbp + 0x10]
xor edx, edx
lea rcx, [0x140111974]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test rax, rax
jne 0x14004288f
xor r8d, r8d
mov edx, 0x800
lea rcx, [rbp + 0x34a0]
call fcn.1400c6af8
test r15b, r15b
je 0x140042875
mov rax, r13
jmp 0x14004288f
mov dword [rsp + 0x20], ebx
mov r9d, esi
lea r8, [rbp + 0x10]
xor edx, edx
lea rcx, [rbp + 0x34a0]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov r9, rax
mov edx, 0x1003
mov r8d, 1
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rsi, [rdi + 0x1084]
mov rcx, rsi
call fcn.1400c6c40
mov bl, al
mov byte [rsp + 0x31], al
xor r8d, r8d
lea rdx, str.ShowSeconds
lea rcx, str.FileList
call fcn.1400a0584
test eax, eax
setne byte [rsp + 0x34]
mov rcx, rdi
cmp byte [rdi + 0x1082], r13b
je 0x1400428ef
call fcn.140042edc
jmp 0x140042d57
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
call fcn.140035c8c
mov r9d, 0x800
lea r8, [rbp + 0x34a0]
lea rdx, [0x140111558]
mov rcx, rsi
call fcn.140079704
lea rcx, [rbp + 0x2420]
call fcn.14006a740
nop
lea rdx, [rbp + 0x34a0]
lea rcx, [rbp + 0x2420]
call fcn.14006a8f4
mov qword [rbp + 0x12e0], r13
mov qword [rbp + 0x12e8], r13
mov qword [rbp + 0x12f0], r13
mov byte [rsp + 0x32], 0
mov r8d, 1
lea rdx, str.ExactSizes
lea rcx, str.FileList
call fcn.1400a0584
test eax, eax
setne byte [rsp + 0x33]
mov edx, 0x1f4
lea rcx, [rbp - 8]
call fcn.1400c6140
nop
test r15b, r15b
jne 0x140042c78
mov r12b, byte [rsp + 0x31]
mov r14b, byte [rsp + 0x32]
mov r15b, byte [rsp + 0x33]
xor r8d, r8d
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x2420]
call fcn.14006a7f8
test al, al
je 0x140042c5e
test r13b, 0x1f
jne 0x1400429c7
lea rcx, [rbp - 8]
call fcn.1400c779c
lea rcx, [rbp + 0x2d0]
call fcn.140079c5c
mov rbx, rax
movzx ecx, word [rax]
cmp cx, word [0x140111974]
jne 0x1400429ef
movzx ecx, word [rax + 2]
cmp cx, word [0x140111976]
je 0x14004299a
mov dword [rbp - 0x60], 7
mov dword [rbp - 0x5c], r13d
or dword [rbp - 0x3c], 0xffffffff
and dword [rbp - 0x58], 0
movzx ecx, word [rax]
movzx eax, word [0x140111660]
sub ecx, eax
jne 0x140042a2c
movzx ecx, word [rbx + 2]
movzx eax, word [0x140111662]
sub ecx, eax
jne 0x140042a2c
movzx ecx, word [rbx + 4]
movzx eax, word [0x140111664]
sub ecx, eax
test ecx, ecx
sete sil
test sil, sil
je 0x140042a49
test r12b, r12b
jne 0x14004299a
mov eax, dword [rbp + 0x18]
mov dword [rbp - 0x3c], eax
mov r14b, 1
xor edx, edx
mov r8d, 0x1100
lea rcx, [rbp + 0x1320]
call fcn.1400f4420
mov r8d, 0x800
mov rdx, rbx
lea rcx, [rbp + 0x1320]
call fcn.14008eff0
mov rdx, rbx
mov rcx, rdi
call fcn.14003e19c
mov rax, qword [rbp + 0x12d0]
mov qword [rbp + 0x23a0], rax
and qword [rbp + 0x23a8], 0
mov eax, dword [rbp + 0x12d8]
mov dword [rbp + 0x23c8], eax
mov rax, qword [rbp + 0x12e0]
mov qword [rbp + 0x23b0], rax
mov rax, qword [rbp + 0x12e8]
mov qword [rbp + 0x23b8], rax
mov rax, qword [rbp + 0x12f0]
mov qword [rbp + 0x23c0], rax
inc r13d
mov dword [rbp + 0x240c], r13d
cmp byte [rbp + 0x12dd], 0
je 0x140042af1
mov al, byte [rbp + 0x12de]
neg al
sbb ecx, ecx
neg ecx
add ecx, 2
mov dword [rbp + 0x23f8], ecx
lea rdx, [rbp + 0x1320]
lea rcx, [0x140186fa0]
call fcn.14003c8c0
mov qword [rbp - 0x38], rax
lea rcx, [rbp + 0x2d0]
mov rax, rbx
sub rax, rcx
sar rax, 1
mov edx, 0x800
sub rdx, rax
mov rcx, rbx
call fcn.1400c7cd8
mov qword [rbp - 0x48], rbx
lea r9, [rbp - 0x60]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rbx, eax
mov eax, dword [0x140186ffc]
cmp eax, 0xffffffff
je 0x140042bbe
cmp byte [rbp + 0x12dc], 0
jne 0x140042b97
mov r8d, 0x32
lea rdx, [rbp + 0x3430]
mov rcx, qword [rbp + 0x23a0]
test r15b, r15b
je 0x140042b79
call fcn.1400a9154
jmp 0x140042b84
mov r9d, 0x5e6
call fcn.1400a9228
mov eax, dword [0x140186ffc]
mov dword [rsp + 0x48], eax
lea rax, [rbp + 0x3430]
jmp 0x140042ba2
mov dword [rsp + 0x48], eax
lea rax, [0x140111128]
mov qword [rsp + 0x58], rax
lea r9, [rsp + 0x40]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x140187004]
cmp eax, 0xffffffff
je 0x140042bfd
mov dword [rsp + 0x48], eax
lea r9, [rsp + 0x40]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x60]
test sil, sil
je 0x140042bf1
lea rax, [rbp + 0x228]
mov qword [rsp + 0x58], rax
jmp 0x140042bf7
or qword [rsp + 0x58], 0xffffffffffffffff
call qword [sym.imp.USER32.dll_SendMessageW]
mov sil, byte [rsp + 0x34]
mov byte [rsp + 0x20], sil
mov r9d, 4
mov r8, rbx
lea rdx, [rbp + 0x1308]
mov rcx, rdi
call fcn.14003ee98
mov byte [rsp + 0x20], sil
mov r9d, 5
mov r8, rbx
lea rdx, [rbp + 0x12f8]
mov rcx, rdi
call fcn.14003ee98
mov byte [rsp + 0x20], sil
mov r9d, 6
mov r8, rbx
lea rdx, [rbp + 0x1300]
mov rcx, rdi
call fcn.14003ee98
jmp 0x14004299a
test r14b, r14b
mov r14, qword [rbp - 0x70]
mov r15b, byte [rsp + 0x30]
mov r12, qword [rbp - 0x68]
jne 0x140042d37
mov bl, byte [rsp + 0x31]
test bl, bl
jne 0x140042d37
mov dword [rbp - 0x60], 7
mov dword [rbp - 0x5c], r13d
mov eax, dword [rbp + 0x18]
mov dword [rbp - 0x3c], eax
xor r13d, r13d
mov dword [rbp - 0x58], r13d
lea rbx, [0x140111660]
mov qword [rbp - 0x48], rbx
xor edx, edx
mov r8d, 0x1100
lea rcx, [rbp + 0x1320]
call fcn.1400f4420
mov r8d, 0x800
mov rdx, rbx
lea rcx, [rbp + 0x1320]
call fcn.14008eff0
mov dword [rbp + 0x23c8], 0x10
lea rdx, [rbp + 0x1320]
lea rcx, [0x140186fa0]
call fcn.14003c8c0
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x60]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x140187004]
cmp ecx, 0xffffffff
je 0x140042d3a
mov dword [rsp + 0x48], ecx
lea rcx, [rbp + 0x228]
mov qword [rsp + 0x58], rcx
movsxd r8, eax
lea r9, [rsp + 0x40]
mov edx, 0x1074
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140042d3a
xor r13d, r13d
lea rcx, [rbp - 8]
call fcn.1400c6184
nop
lea rcx, [rbp + 0x2420]
call fcn.14006a758
lea rsi, [rdi + 0x1084]
lea rcx, [0x140186fa0]
call fcn.1400f436c
mov rcx, rdi
call fcn.140044a8c
mov ebx, 3
test r12, r12
je 0x140042db7
cmp word [r12], r13w
jne 0x140042da8
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp r14d, eax
jl 0x140042d9e
test eax, eax
jle 0x140042d9e
lea r14d, [rax - 1]
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x4c], ebx
jmp 0x140042dcd
mov rdx, r12
mov rcx, rdi
call fcn.14003f894
test al, al
jne 0x140042de4
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x4c], ebx
cmp r14d, 0xffffffff
je 0x140042dca
test r12, r12
jne 0x140042dcd
mov r14d, r13d
lea r9, [rsp + 0x40]
movsxd r8, r14d
mov edx, 0x102b
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, 1
or r8, 0xffffffffffffffff
mov edx, 0x100c
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
xor r8d, r8d
xor edx, edx
lea rcx, [0x140180fc0]
call fcn.1400a8ff4
xor r9d, r9d
lea edx, [r9 + 0xb]
lea r8d, [r9 + 1]
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102a
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, ebx
xor r9d, r9d
mov edx, 0x1013
mov rcx, qword [rdi + 0x60]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.1400446e8
mov rcx, rdi
call fcn.1400448f8
xor edx, edx
lea rcx, [0x140180fc0]
call fcn.1400a90cc
lea rcx, [0x140183690]
call fcn.1400ab9b0
test r15b, r15b
jne 0x140042e9e
cmp byte [rdi + 0x1082], r13b
jne 0x140042e9e
xor edx, edx
lea r8d, [rdx + 3]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov qword [0x14015abc8], rax
mov eax, dword [0x14015bc40]
test eax, eax
jle 0x140042eb0
dec eax
mov dword [0x14015bc40], eax
mov rcx, qword [rbp + 0x44a8]
xor rcx, rsp
call fcn.1400f3220
mov rbx, qword [rsp + 0x4600]
add rsp, 0x45b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret