Function at 0x14005adcc
Capabilities:
Get file system object information

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68a0]
mov eax, 0x69a0
call fcn.14011a0f0
sub rsp, rax
mov rax, qword [0x140183c48]
xor rax, rsp
mov qword [rbp + 0x6898], rax
mov rsi, rdx
mov qword [rbp - 0x48], rdx
mov rbx, rcx
mov edi, 1
add dword [0x14018b800], edi
mov r9d, edi
or r13, 0xffffffffffffffff
mov r8, r13
mov edx, 0x100c
mov rcx, qword [rcx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
mov qword [rbp - 0x40], rax
mov edx, edi
lea rcx, [0x1401bdfb0]
call fcn.1400c6354
mov ecx, 0x1c4
call fcn.1400a685c
mov rdx, rax
xor r8d, r8d
lea rcx, [0x1401bdfb0]
call fcn.1400c6280
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 0xa]
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.140057c74
mov dword [rsp + 0x20], 0x4011
mov r9d, 0x2b8
lea r8, [rbp + 0x25b0]
xor edx, edx
lea rcx, [0x140146510]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov r9, rax
mov r8d, edi
mov edx, 0x1003
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x1401bdf98]
call fcn.140004a48
xor r12d, r12d
lea eax, [rdi + 6]
lea r14, [0x1401bb630]
cmp dword [0x1401c3f24], 0xffffffff
je 0x14005afbe
mov qword [rbp + 0x1318], r12
mov qword [rbp + 0x1328], r12
mov qword [rbp + 0x1330], r12
mov qword [rbp + 0x1328], r12
mov qword [rbp + 0x1330], rax
mov word [rbp + 0x1318], r12w
mov qword [rbp + 0x1338], r12
lea rdx, [rbp + 0x11f0]
mov rcx, r14
call fcn.140009f24
cmp byte [rbp + 0x1270], r12b
je 0x14005af50
cmp byte [rbp + 0x1418], r12b
je 0x14005af50
cmp byte [rbp + 0x1363], r12b
jne 0x14005af50
mov ecx, dword [rbp + 0x13fc]
lea eax, [rcx - 2]
cmp eax, edi
lea eax, [rdi + 3]
cmovbe ecx, eax
mov dword [rbp + 0x13fc], ecx
jmp 0x14005af5b
mov ecx, dword [rbp + 0x13fc]
mov eax, 4
mov dword [rbp + 0x1190], eax
mov edx, 0x75
sub ecx, 1
je 0x14005af81
sub ecx, 2
je 0x14005af7a
cmp ecx, 1
jne 0x14005af86
lea edx, [rcx + 0x77]
jmp 0x14005af86
mov edx, 0x77
jmp 0x14005af86
mov edx, 0x76
mov ecx, edx
call fcn.1400a685c
mov qword [rbp + 0x11a0], rax
movsxd r8, dword [0x1401c3f24]
lea r9, [rbp + 0x1190]
mov edx, 0x1060
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x1318]
call fcn.140004d54
mov edi, 0x800
mov r8d, edi
lea rdx, [rbp + 0x4890]
mov rcx, r14
call fcn.14000985c
mov r8d, edi
lea rdx, [rbp + 0x3890]
mov rcx, r14
call fcn.140009f04
xor r9d, r9d
lea r8, [rbp + 0x4890]
lea rdx, [rbp + 0x3890]
mov rcx, rbx
call fcn.14004e5d8
lea rdx, [rbp + 0x3890]
mov rcx, rbx
call fcn.140057444
lea rcx, [rbp + 0x3890]
mov rax, r13
inc rax
cmp word [rcx + rax*2], r12w
jne 0x14005b019
lea rdi, [rax + 1]
test rax, rax
cmove rdi, rax
lea rdx, [rbp + 0x3890]
lea rcx, [0x14019c508]
call fcn.1400cc1d8
mov r14d, r12d
mov dword [rsp + 0x34], r12d
xor r8d, r8d
lea rdx, str.FlatView
lea rcx, str.FileList
call fcn.1400bd490
test eax, eax
setne r13b
xor r8d, r8d
lea rdx, str.ShowSeconds
lea rcx, str.FileList
call fcn.1400bd490
test eax, eax
setne r12b
mov r8d, 1
lea rdx, str.ExactSizes
lea rcx, str.FileList
call fcn.1400bd490
xor ecx, ecx
test eax, eax
setne byte [rsp + 0x30]
mov qword [rbp + 0x1100], rcx
mov qword [rbp + 0x1108], rcx
mov qword [rbp + 0x1110], rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov ecx, 0x48
call fcn.140119cec
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x38], rax
mov edx, 0x1f4
lea rcx, [rbp + 0x48]
call fcn.1400e7c2c
nop
mov r8b, r13b
lea rdx, [rbp + 0x70]
lea rcx, [0x1401bb630]
call fcn.140009f38
test al, al
je 0x14005b993
lea rsi, [rbp + 0x70]
lea rdi, [rsi + rdi*2]
mov qword [rbp - 0x50], rdi
xor esi, esi
test r14b, 0x1f
jne 0x14005b128
lea rcx, [rbp + 0x48]
call fcn.1400e936c
mov r14, rdi
mov r15b, byte [rbp + 0x114c]
test r13b, r13b
je 0x14005b143
lea rcx, [rbp + 0x70]
call fcn.14009702c
mov r14, rax
mov r8d, 0x800
mov rdx, r14
lea rcx, [rbp + 0x14b0]
call fcn.1400ac908
lea rcx, [rbp + 0x14b0]
call fcn.1400afa60
test r15b, r15b
je 0x14005b210
test r13b, r13b
jne 0x14005b210
lea rax, [rbp + 0x14b0]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], si
jne 0x14005b181
lea rdx, [rbp + 0x14b0]
test byte [rbp + 0x1158], 0x20
je 0x14005b285
mov qword [rbp + 0x11c8], rsi
mov qword [rbp + 0x11d8], rsi
mov qword [rbp + 0x11e0], rsi
lea rcx, [rbp + 0x11c8]
call fcn.140006e8c
nop
lea r8, [rbp + 0x11c8]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140007364
mov rdi, qword [rbp + 0x40]
cmp byte [rdi + 0x19], sil
jne 0x14005b1f4
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x11c8]
call fcn.140006d78
test al, al
je 0x14005b1f9
mov rdi, qword [rsp + 0x38]
lea rcx, [rbp + 0x11c8]
call fcn.140004d54
cmp rdi, qword [rsp + 0x38]
jne 0x14005b966
mov dword [rbp - 0x30], 7
mov edi, dword [rsp + 0x34]
mov dword [rbp - 0x2c], edi
or dword [rbp - 0xc], 0xffffffff
mov dword [rbp - 0x28], esi
mov word [rbp + 0x2870], si
mov eax, dword [rbp + 0x1158]
test al, 1
je 0x14005b255
mov r8d, 0xa
lea rdx, [0x14014651c]
lea rcx, [rbp + 0x2870]
call fcn.1400ac8e0
mov eax, dword [rbp + 0x1158]
and eax, 6
je 0x14005b4ae
cmp eax, 2
je 0x14005b495
cmp eax, 4
je 0x14005b48c
cmp eax, 6
jne 0x14005b4ae
lea rdx, [0x140146548]
jmp 0x14005b49c
mov qword [rbp + 0x1170], rsi
mov qword [rbp + 0x1180], rsi
mov qword [rbp + 0x1188], rsi
lea rcx, [rbp + 0x1170]
call fcn.140006e8c
nop
lea r8, [rbp + 0x1170]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140007364
mov rdi, qword [rbp + 0x40]
cmp byte [rdi + 0x19], sil
jne 0x14005b2da
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x1170]
call fcn.140006d78
test al, al
je 0x14005b2df
mov rdi, qword [rsp + 0x38]
mov rdx, qword [rbp + 0x1188]
cmp rdx, 8
jb 0x14005b325
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b320
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005bc19
call fcn.140119d28
mov qword [rbp + 0x1180], rsi
mov qword [rbp + 0x1188], 7
mov word [rbp + 0x1170], si
cmp rdi, qword [rsp + 0x38]
je 0x14005b210
mov rdi, qword [rdi + 0x40]
mov rdx, rdi
lea rcx, [0x1401c3ec0]
call fcn.140055780
mov rcx, qword [rbp + 0x1100]
mov qword [rax + 0x28], rcx
mov rcx, qword [rbp + 0x1108]
mov qword [rax + 0x30], rcx
mov rcx, qword [rbp + 0x1110]
mov qword [rax + 0x38], rcx
mov ecx, dword [rbp + 0x1118]
mov dword [rax + 0x20], ecx
or r14d, 0xffffffff
cmp qword [rbp + 0x1100], rsi
je 0x14005b3e5
cmp dword [0x1401c3f18], r14d
je 0x14005b3e5
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1100]
call fcn.1400ea4c8
mov eax, dword [0x1401c3f18]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [rbp + 0x1108], rsi
je 0x14005b440
cmp dword [0x1401c3f1c], r14d
je 0x14005b440
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1108]
call fcn.1400ea4c8
mov eax, dword [0x1401c3f1c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [rbp + 0x1110], rsi
je 0x14005b966
cmp dword [0x1401c3f20], r14d
je 0x14005b966
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x2890]
mov dl, r12b
lea rcx, [rbp + 0x1110]
call fcn.1400ea4c8
mov eax, dword [0x1401c3f20]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
jmp 0x14005b94a
lea rdx, [0x140146538]
jmp 0x14005b49c
lea rdx, [0x140146528]
mov r8d, 0xa
lea rcx, [rbp + 0x2870]
call fcn.1400ac8e0
test r15b, r15b
je 0x14005b4d8
lea r9, [rbp + 0x10f8]
lea r8, [rbp + 0x10f0]
lea rdx, [rbp + 0x70]
lea rcx, [0x1401bb630]
call fcn.140009d50
test al, al
je 0x14005b4d8
mov sil, 1
lea eax, [rdi + 1]
mov dword [rsp + 0x34], eax
mov dword [rbp + 0x115c], eax
lea rdx, [rbp + 0x70]
lea rcx, [0x1401c3ec0]
call fcn.140055848
mov qword [rbp - 8], rax
xor edi, edi
test r15b, r15b
je 0x14005b5c2
mov qword [rbp + 0x1190], rdi
mov qword [rbp + 0x11a0], rdi
mov qword [rbp + 0x11a8], rdi
lea rax, [rbp + 0x14b0]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], di
jne 0x14005b524
lea rdx, [rbp + 0x14b0]
lea rcx, [rbp + 0x1190]
call fcn.140006e8c
nop
mov rax, qword [rbp - 8]
mov qword [rbp + 0x11b0], rax
lea r8, [rbp + 0x1190]
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.140055d7c
nop
mov rdx, qword [rbp + 0x11a8]
cmp rdx, 8
jb 0x14005b5a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b5a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005bc19
call fcn.140119d28
mov qword [rbp + 0x11a0], rdi
mov qword [rbp + 0x11a8], 7
mov word [rbp + 0x1190], di
lea rdx, [rbp + 0x70]
mov rcx, rbx
call fcn.140057444
lea rcx, [rbp + 0x70]
mov rax, r14
sub rax, rcx
sar rax, 1
mov edx, 0x800
sub rdx, rax
mov rcx, r14
call fcn.1400e98b0
mov qword [rbp - 0x18], r14
cmp word [rbp + 0x2870], di
je 0x14005b60e
mov r8d, 0x800
lea rdx, [rbp + 0x2870]
lea rcx, [rbp + 0x70]
call fcn.1400ac8e0
lea r9, [rbp - 0x30]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdi, eax
xor eax, eax
test r15b, r15b
je 0x14005b637
test sil, sil
je 0x14005b741
or r14d, 0xffffffff
movabs rsi, 0x7fffffff7fffffff
cmp dword [0x1401c3f0c], r14d
je 0x14005b6c3
mov rcx, qword [rbp + 0x10f0]
mov r8d, 0x32
cmp rcx, rsi
jne 0x14005b675
lea rdx, [0x140146554]
lea rcx, [rbp + 0x2890]
call fcn.1400ac908
jmp 0x14005b694
lea rdx, [rbp + 0x2890]
cmp byte [rsp + 0x30], al
je 0x14005b689
call fcn.1400c63dc
jmp 0x14005b694
mov r9d, 0x5e6
call fcn.1400c64b0
mov eax, dword [0x1401c3f0c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp dword [0x1401c3f10], r14d
je 0x14005b745
mov rcx, qword [rbp + 0x10f8]
mov r8d, 0x32
cmp rcx, rsi
jne 0x14005b6f3
lea rdx, [0x140146554]
lea rcx, [rbp + 0x2890]
call fcn.1400ac908
jmp 0x14005b712
lea rdx, [rbp + 0x2890]
cmp byte [rsp + 0x30], al
je 0x14005b707
call fcn.1400c63dc
jmp 0x14005b712
mov r9d, 0x5e6
call fcn.1400c64b0
mov eax, dword [0x1401c3f10]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14005b745
or r14d, 0xffffffff
mov eax, dword [0x1401c3f14]
mov esi, 0x1074
cmp eax, r14d
je 0x14005b773
mov dword [rsp + 0x58], eax
or qword [rsp + 0x68], 0xffffffffffffffff
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c3f18], r14d
je 0x14005b7c2
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1100]
call fcn.1400ea4c8
mov eax, dword [0x1401c3f18]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c3f1c], r14d
je 0x14005b811
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1108]
call fcn.1400ea4c8
mov eax, dword [0x1401c3f1c]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401c3f20], r14d
je 0x14005b860
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x11f0]
mov dl, r12b
lea rcx, [rbp + 0x1110]
call fcn.1400ea4c8
mov eax, dword [0x1401c3f20]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, esi
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
cmp dword [0x1401c3f24], r14d
je 0x14005b915
mov eax, dword [rbp + 0x1124]
test eax, eax
je 0x14005b915
test r15b, r15b
jne 0x14005b915
cmp dword [rbp + 0x1148], esi
jne 0x14005b915
cmp eax, 3
jne 0x14005b8bb
mov qword [rsp + 0x20], 0x41
lea r9, [rbp + 0x2890]
xor r8d, r8d
lea edx, [rsi + 0x20]
lea rcx, [rbp + 0x1128]
call fcn.1400abf4c
jmp 0x14005b8e8
lea rcx, [0x140146558]
lea r8, str._08X
cmp eax, 1
cmove r8, rcx
mov r9d, dword [rbp + 0x1128]
mov edx, 0x41
lea rcx, [rbp + 0x2890]
call fcn.140004dcc
mov eax, dword [0x1401c3f24]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
test r13b, r13b
je 0x14005b966
cmp dword [0x1401c3f28], r14d
je 0x14005b966
mov r8d, 0x800
lea rdx, [rbp + 0x2890]
lea rcx, [rbp + 0x70]
call fcn.140096224
mov eax, dword [0x1401c3f28]
mov dword [rsp + 0x58], eax
lea rax, [rbp + 0x2890]
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x50]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8b, r13b
lea rdx, [rbp + 0x70]
lea rcx, [0x1401bb630]
call fcn.140009f38
mov r14d, dword [rsp + 0x34]
test al, al
je 0x14005b98b
mov rdi, qword [rbp - 0x50]
jmp 0x14005b119
mov rsi, qword [rbp - 0x48]
mov r15, qword [rbp - 0x40]
mov dword [rsp + 0x20], 0x4411
mov r9d, 0x2b8
lea r8, [rbp + 0x11f0]
mov r12d, 0x10
mov edx, r12d
lea rcx, [0x140146578]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rdi, rax
lea ecx, [r12 - 0xb]
xor r13d, r13d
test rax, rax
lea eax, [rcx + 2]
cmovne ecx, eax
mov dword [rbp - 0x30], ecx
mov dword [rbp - 0x2c], r14d
mov ecx, dword [rbp + 0x11f8]
mov dword [rbp - 0xc], ecx
mov dword [rbp - 0x28], r13d
lea r14, [0x1401441dc]
mov qword [rbp - 0x18], r14
xor edx, edx
mov r8d, 0x1100
lea rcx, [rbp + 0x14b0]
call fcn.14011cde0
mov r8d, 0x800
mov rdx, r14
lea rcx, [rbp + 0x14b0]
call fcn.1400ac908
mov dword [rbp + 0x2558], r12d
lea rdx, [rbp + 0x14b0]
lea rcx, [0x1401c3ec0]
call fcn.140055848
mov qword [rbp - 8], rax
lea r9, [rbp - 0x30]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x1401c3f14]
cmp ecx, 0xffffffff
je 0x14005ba85
test rdi, rdi
je 0x14005ba85
mov dword [rsp + 0x58], ecx
lea rcx, [rbp + 0x1408]
mov qword [rsp + 0x68], rcx
movsxd r8, eax
lea r9, [rsp + 0x50]
mov edx, 0x1074
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.14005e028
test rsi, rsi
je 0x14005bace
cmp word [rsi], r13w
je 0x14005bace
mov rdx, rsi
mov rcx, rbx
call fcn.140058b94
test al, al
jne 0x14005baf2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x14005bac9
cmp r15d, eax
jl 0x14005bac9
lea r15d, [rax - 1]
movsxd r8, r15d
jmp 0x14005bad1
xor r8d, r8d
mov eax, 3
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x5c], eax
lea r9, [rsp + 0x50]
mov edx, 0x102b
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
lea edi, [r9 + 1]
mov r8d, edi
lea edx, [rdi + 0xa]
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102a
mov rcx, qword [rbx + 0x50]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1401bdfb0]
call fcn.1400c6280
mov rcx, rbx
call fcn.14005dbf0
mov rcx, rbx
call fcn.14005de4c
lea rcx, [0x1401c0668]
call fcn.1400c9068
mov rcx, qword [0x14018b820]
cmp rcx, 0xffffffffffffffff
je 0x14005bb5e
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov r8d, 0x800
lea rdx, [rbp + 0x4890]
lea rcx, [rbp + 0x5890]
call fcn.1400ac908
lea rcx, [rbp + 0x5890]
call fcn.140097080
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x5890]
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov qword [0x14018b820], rax
xor edx, edx
lea rcx, [0x1401bdfb0]
call fcn.1400c6354
nop
lea rcx, [rbp + 0x48]
call fcn.1400e7c70
nop
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.140055e7c
mov edx, 0x48
mov rcx, qword [rsp + 0x38]
call fcn.140119d28
nop
mov eax, dword [0x14018b800]
test eax, eax
jle 0x14005bbef
sub eax, edi
mov dword [0x14018b800], eax
mov rcx, qword [rbp + 0x6898]
xor rcx, rsp
call fcn.14011a150
mov rbx, qword [rsp + 0x69f0]
add rsp, 0x69a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140121238
nop
int3