Function at 0x14008d75c
Capabilities:
Get file system object information

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb90]
sub rsp, 0xc90
mov rax, qword [0x140231ec8]
xor rax, rsp
mov qword [rbp + 0xb88], rax
mov r14, rdx
mov qword [rbp - 0x28], rdx
mov rdi, rcx
xor r13d, r13d
mov esi, r13d
mov dword [rsp + 0x58], r13d
lea r15d, [r13 + 1]
add dword [0x140233a40], r15d
mov r9d, r15d
or rbx, 0xffffffffffffffff
mov r8, rbx
mov edx, 0x100c
mov rcx, qword [rcx + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12, rax
mov qword [rbp - 0x20], rax
mov edx, r15d
lea rcx, [0x140236a20]
call fcn.140129904
mov ecx, 0x1c4
call fcn.1400f70b0
mov qword [rbp + 0x280], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x290], xmm0
mov r8, rbx
inc r8
cmp word [rax + r8*2], r13w
jne 0x14008d7fd
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rbp + 0x280]
lea rcx, [0x140236a20]
call fcn.140129804
nop
lea rcx, [rbp + 0x280]
call fcn.140006b94
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xb]
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.140086b80
mov dword [rsp + 0x20], 0x4011
mov r9d, 0x2b8
lea r8, [rbp + 0x8c0]
xor edx, edx
lea rcx, [0x1401e1c30]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov r9, rax
mov r8, r15
mov edx, 0x1003
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x140236a08]
call fcn.1400065fc
mov ebx, 7
cmp dword [0x140237508], 0xffffffff
je 0x14008d9d5
mov qword [rbp + 0x508], r13
mov qword [rbp + 0x518], r13
mov qword [rbp + 0x520], r13
mov qword [rbp + 0x518], r13
mov qword [rbp + 0x520], rbx
mov word [rbp + 0x508], r13w
mov qword [rbp + 0x528], r13
mov qword [rbp + 0x560], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x570], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqa xmmword [rbp + 0x570], xmm1
mov word [rbp + 0x560], r13w
lea rdx, [rbp + 0x3e0]
lea rcx, [0x140236030]
call fcn.14000ef60
cmp byte [rbp + 0x460], r13b
je 0x14008d957
cmp byte [rbp + 0x5b0], r13b
je 0x14008d957
cmp byte [rbp + 0x553], r13b
jne 0x14008d957
mov ecx, dword [rbp + 0x590]
lea eax, [rcx - 2]
cmp eax, r15d
lea eax, [rbx - 3]
cmovbe ecx, eax
mov dword [rbp + 0x590], ecx
jmp 0x14008d962
mov ecx, dword [rbp + 0x590]
mov eax, 4
mov dword [rbp + 0x2c0], eax
mov edx, 0x76
sub ecx, 1
je 0x14008d988
sub ecx, 2
je 0x14008d981
cmp ecx, 1
jne 0x14008d98d
lea edx, [rcx + 0x78]
jmp 0x14008d98d
mov edx, 0x78
jmp 0x14008d98d
mov edx, 0x77
mov ecx, edx
call fcn.1400f70b0
mov qword [rbp + 0x2d0], rax
movsxd r8, dword [0x140237508]
lea r9, [rbp + 0x2c0]
mov edx, 0x1060
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x560]
call fcn.140006b94
nop
lea rcx, [rbp + 0x508]
call fcn.140006b94
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], r13
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], rbx
mov word [rbp + 0x240], r13w
mov qword [rbp + 0x260], r13
mov qword [rbp + 0x270], r13
mov qword [rbp + 0x278], r13
mov qword [rbp + 0x270], r13
mov qword [rbp + 0x278], rbx
mov word [rbp + 0x260], r13w
lea rdx, [rbp + 0x240]
lea rcx, [0x140236030]
call fcn.14000e854
lea rdx, [rbp + 0x260]
lea rcx, [0x140236030]
call fcn.14000ef4c
lea rcx, [rdi + 0x50]
xor r9d, r9d
lea r8, [rbp + 0x240]
lea rdx, [rbp + 0x260]
call fcn.14006f400
lea rdx, [rbp + 0x260]
mov rcx, rdi
call fcn.1400854fc
mov rax, qword [rbp + 0x270]
lea rcx, [rax + 1]
test rax, rax
cmove rcx, rax
mov qword [rbp - 0x30], rcx
lea rdx, [rbp + 0x260]
lea rcx, [0x1402349b8]
call fcn.140134e90
mov dword [rsp + 0x34], r13d
mov qword [rbp + 0x1c0], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1d0], xmm0
mov r15d, 8
mov r8d, r15d
lea rdx, str.FlatView
lea rcx, [rbp + 0x1c0]
call fcn.1400041b8
nop
mov qword [rbp + 0x1a0], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1b0], xmm0
mov r8d, r15d
lea rdx, str.FileList
lea rcx, [rbp + 0x1a0]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x1a0]
call fcn.1401165ec
test eax, eax
setne bl
mov byte [rsp + 0x30], bl
mov rdx, qword [rbp + 0x1b8]
cmp rdx, r15
jb 0x14008db64
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008db5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f329
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp + 0x1b0], xmm0
mov word [rbp + 0x1a0], r13w
mov rdx, qword [rbp + 0x1d8]
cmp rdx, r15
jb 0x14008dbc1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dbbc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f32f
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1c0], r13w
mov qword [rbp + 0x200], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x210], xmm0
mov r8d, 0xb
lea rdx, str.ShowSeconds
lea rcx, [rbp + 0x200]
call fcn.1400041b8
nop
mov qword [rbp + 0x1a0], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1b0], xmm0
mov r8, r15
lea rdx, str.FileList
lea rcx, [rbp + 0x1a0]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x1a0]
call fcn.1401165ec
test eax, eax
setne r15b
mov byte [rsp + 0x31], r15b
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 8
jb 0x14008dc95
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dc90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f335
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp + 0x1b0], xmm0
mov word [rbp + 0x1a0], r13w
mov rdx, qword [rbp + 0x218]
cmp rdx, 8
jb 0x14008dcf3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dcee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f33b
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp + 0x210], xmm0
mov word [rbp + 0x200], r13w
mov qword [rbp + 0x1c0], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1d0], xmm0
mov r8d, 0xa
lea rdx, str.ExactSizes
lea rcx, [rbp + 0x1c0]
call fcn.1400041b8
nop
mov qword [rbp + 0x1a0], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1b0], xmm0
mov r8d, 8
lea rdx, str.FileList
lea rcx, [rbp + 0x1a0]
call fcn.1400041b8
nop
mov r8d, 1
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x1a0]
call fcn.1401165ec
test eax, eax
setne r13b
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 8
jb 0x14008ddc8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ddc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f341
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp + 0x1b0], xmm0
xor eax, eax
mov word [rbp + 0x1a0], ax
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 8
jb 0x14008de29
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008de22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f347
call fcn.1401af9bc
xor eax, eax
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1c0], ax
lea rcx, [rsp + 0x60]
call fcn.140082ecc
nop
mov edx, 0x1f4
lea rcx, [rbp + 0x80]
call fcn.14015ffac
nop
xor eax, eax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], ax
mov qword [rbp + 0xd0], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqa xmmword [rbp + 0xe0], xmm1
mov word [rbp + 0xd0], ax
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], rax
mov qword [rbp + 0x110], rax
mov r8b, bl
lea rdx, [rbp + 0xb0]
lea rcx, [0x140236030]
call fcn.14000ef74
test al, al
je 0x14008ee73
xor r14d, r14d
test byte [rsp + 0x34], 0x1f
jne 0x14008deff
lea rcx, [rbp + 0x80]
call fcn.1401628bc
mov r12b, byte [rbp + 0x154]
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], 7
mov word [rbp + 0x180], r14w
test bl, bl
je 0x14008dffb
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x5c0]
call fcn.1400e393c
mov rbx, rax
lea rax, [rbp + 0x180]
cmp rax, rbx
je 0x14008dfe5
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x14008dfa9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dfa4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f34d
call fcn.1401af9bc
mov qword [rbp + 0x190], r14
mov eax, 7
mov qword [rbp + 0x198], rax
mov word [rbp + 0x180], r14w
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], rax
mov word [rbx], r14w
lea rcx, [rbp + 0x5c0]
call fcn.140006b94
mov ebx, 7
jmp 0x14008e106
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1b0], r14
mov qword [rbp + 0x1b8], r14
mov rax, qword [rbp + 0xc0]
mov rcx, qword [rbp - 0x30]
cmp rax, rcx
jb 0x14008f323
sub rax, rcx
or r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rax, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rax, qword [rbp + 0xb0]
lea rdx, [rax + rcx*2]
lea rcx, [rbp + 0x1a0]
call fcn.1400041b8
or esi, 1
mov dword [rsp + 0x58], esi
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x14008e0a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e0a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f353
call fcn.1401af9bc
mov qword [rbp + 0x190], r14
mov ebx, 7
mov qword [rbp + 0x198], rbx
mov word [rbp + 0x180], r14w
movups xmm0, xmmword [rbp + 0x1a0]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rbp + 0x1b0]
movups xmmword [rbp + 0x190], xmm1
mov qword [rbp + 0x1b0], r14
mov qword [rbp + 0x1b8], rbx
mov word [rbp + 0x1a0], r14w
and esi, 0xfffffffe
mov dword [rsp + 0x58], esi
lea rcx, [rbp + 0x1a0]
call fcn.140006b94
mov qword [rbp + 0x1e0], r14
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1f8], r14
mov rsi, qword [rbp + 0x190]
lea r14, [rbp + 0x180]
cmp qword [rbp + 0x198], 8
cmovae r14, qword [rbp + 0x180]
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
ja 0x14008f377
mov qword [rbp + 0x1f8], rbx
cmp rsi, 8
jae 0x14008e17a
mov qword [rbp + 0x1f0], rsi
mov r8d, 0x10
mov rdx, r14
lea rcx, [rbp + 0x1e0]
call fcn.1401b1b70
jmp 0x14008e204
mov rbx, rsi
or rbx, 7
cmp rbx, rax
jbe 0x14008e199
mov rbx, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14008e1c8
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14008f371
add rcx, rcx
cmp rcx, 0x1000
jb 0x14008e1cf
call fcn.14000417c
jmp 0x14008e1db
xor eax, eax
test rcx, rcx
je 0x14008e1db
call fcn.1401af980
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1f0], rsi
mov qword [rbp + 0x1f8], rbx
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1401b1b70
nop
lea rcx, [rbp + 0x1e0]
call fcn.140105fb4
xor r14d, r14d
test r12b, r12b
je 0x14008e547
cmp byte [rsp + 0x30], r14b
jne 0x14008e547
lea r8, [rbp + 0x1e0]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.1400826d0
mov rbx, qword [rsp + 0x48]
test byte [rbp + 0x164], 0x20
je 0x14008e293
cmp byte [rbx + 0x19], r14b
jne 0x14008e265
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x1e0]
call fcn.1400824ec
test al, al
jns 0x14008e26a
mov rbx, qword [rsp + 0x60]
cmp rbx, qword [rsp + 0x60]
je 0x14008e547
lea rcx, [rbp + 0x1e0]
call fcn.140006b94
nop
lea rcx, [rbp + 0x180]
call fcn.140006b94
jmp 0x14008ee44
cmp byte [rbx + 0x19], r14b
jne 0x14008e2ad
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x1e0]
call fcn.1400824ec
test al, al
jns 0x14008e2b2
mov rbx, qword [rsp + 0x60]
cmp rbx, qword [rsp + 0x60]
je 0x14008e547
mov rbx, qword [rbx + 0x40]
imul rcx, rbx, 0xc8
add rcx, qword [rdi + 0x38]
mov rax, qword [rbp + 0x100]
mov qword [rcx + 0x50], rax
mov rax, qword [rbp + 0x108]
mov qword [rcx + 0x58], rax
mov rax, qword [rbp + 0x110]
mov qword [rcx + 0x60], rax
mov eax, dword [rbp + 0x118]
mov dword [rcx + 0x68], eax
mov al, byte [rbp + 0x15a]
mov byte [rcx + 0xaa], al
or esi, 0xffffffff
cmp qword [rbp + 0x100], r14
je 0x14008e39e
cmp dword [0x1402374f8], esi
je 0x14008e39e
mov r8b, r15b
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x318]
call fcn.1401643b8
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rdx, [rbp + 0x318]
cmp qword [rbp + 0x330], 8
cmovae rdx, qword [rbp + 0x318]
mov r8, qword [rbp + 0x328]
lea rcx, [rsp + 0x38]
call fcn.1400042c0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402374f8]
mov rdx, rbx
call fcn.140027e9c
nop
lea rcx, [rbp + 0x318]
call fcn.140006b94
cmp qword [rbp + 0x108], r14
je 0x14008e437
cmp dword [0x1402374fc], esi
je 0x14008e437
mov r8b, r15b
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x338]
call fcn.1401643b8
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rdx, [rbp + 0x338]
cmp qword [rbp + 0x350], 8
cmovae rdx, qword [rbp + 0x338]
mov r8, qword [rbp + 0x348]
lea rcx, [rsp + 0x38]
call fcn.1400042c0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402374fc]
mov rdx, rbx
call fcn.140027e9c
nop
lea rcx, [rbp + 0x338]
call fcn.140006b94
cmp qword [rbp + 0x110], r14
je 0x14008e4d0
cmp dword [0x140237500], esi
je 0x14008e4d0
mov r8b, r15b
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x358]
call fcn.1401643b8
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rdx, [rbp + 0x358]
cmp qword [rbp + 0x370], 8
cmovae rdx, qword [rbp + 0x358]
mov r8, qword [rbp + 0x368]
lea rcx, [rsp + 0x38]
call fcn.1400042c0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x140237500]
mov rdx, rbx
call fcn.140027e9c
nop
lea rcx, [rbp + 0x358]
call fcn.140006b94
cmp dword [0x140237504], esi
je 0x14008e275
mov r8b, byte [rbp + 0x15a]
mov edx, dword [rbp + 0x118]
lea rcx, [rbp + 0x3b8]
call fcn.140087ed0
nop
mov eax, dword [0x140237504]
mov dword [rsp + 0x78], eax
lea rax, [rbp + 0x3b8]
cmp qword [rbp + 0x3d0], 8
cmovae rax, qword [rbp + 0x3b8]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x3b8]
call fcn.140006b94
jmp 0x14008e275
mov eax, 7
mov dword [rbp - 0x10], eax
mov ebx, dword [rsp + 0x34]
mov dword [rbp - 0xc], ebx
or dword [rbp + 0x14], 0xffffffff
mov dword [rbp - 8], r14d
mov qword [rbp + 0x220], r14
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], r14
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], rax
mov word [rbp + 0x220], r14w
mov eax, dword [rbp + 0x164]
test al, 1
je 0x14008e5b2
mov r8d, 2
lea rdx, [0x1401e1c3c]
lea rcx, [rbp + 0x220]
call fcn.140006c24
mov eax, dword [rbp + 0x164]
and eax, 6
je 0x14008e5fb
cmp eax, 2
je 0x14008e5e2
mov ecx, 4
cmp eax, ecx
je 0x14008e5d6
cmp eax, 6
jne 0x14008e5fb
mov r8d, ecx
lea rdx, [0x1401e1c68]
jmp 0x14008e5ef
mov r8, rcx
lea rdx, [0x1401e1c58]
jmp 0x14008e5ef
mov r8d, 4
lea rdx, [0x1401e1c48]
lea rcx, [rbp + 0x220]
call fcn.140006c24
test r12b, r12b
je 0x14008e628
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0xb0]
lea rcx, [0x140236030]
call fcn.14000ed48
test al, al
mov r15b, 1
jne 0x14008e62b
mov r15b, r14b
lea eax, [rbx + 1]
mov dword [rsp + 0x34], eax
mov dword [rbp + 0x168], eax
lea r9, [rdi + 0x38]
mov r10, qword [r9 + 8]
mov rcx, r10
sub rcx, qword [r9]
movabs rax, 0xa3d70a3d70a3d70b
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x18], rdx
mov rcx, r9
cmp r10, qword [r9 + 0x10]
je 0x14008e67f
lea rdx, [rbp + 0xb0]
call fcn.14000a648
jmp 0x14008e68e
lea r8, [rbp + 0xb0]
mov rdx, r10
call fcn.14000a6c0
test r12b, r12b
je 0x14008e7ce
mov qword [rbp + 0x2c0], r14
mov qword [rbp + 0x2d0], r14
mov qword [rbp + 0x2d8], r14
mov rsi, qword [rbp + 0x1f0]
lea r14, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 8
cmovae r14, qword [rbp + 0x1e0]
movabs rcx, 0x7ffffffffffffffe
cmp rsi, rcx
ja 0x14008f35f
cmp rsi, 8
jae 0x14008e706
mov qword [rbp + 0x2d0], rsi
mov qword [rbp + 0x2d8], 7
movups xmm0, xmmword [r14]
movdqu xmmword [rbp + 0x2c0], xmm0
jmp 0x14008e79b
mov eax, 7
mov qword [rbp + 0x2d8], rax
mov rbx, rsi
or rbx, rax
cmp rbx, rcx
jbe 0x14008e730
mov rbx, rcx
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14008e75f
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14008f359
add rcx, rcx
cmp rcx, 0x1000
jb 0x14008e766
call fcn.14000417c
jmp 0x14008e772
xor eax, eax
test rcx, rcx
je 0x14008e772
call fcn.1401af980
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x2d0], rsi
mov qword [rbp + 0x2d8], rbx
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1401b1b70
nop
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x2e0], rax
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x98]
lea rcx, [rsp + 0x60]
call fcn.140082560
nop
lea rcx, [rbp + 0x2c0]
call fcn.140006b94
xor r14d, r14d
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.1400854fc
lea rcx, [rbp + 0x180]
call fcn.140006c20
lea rdx, [rbp + 0x220]
mov esi, 8
cmp qword [rbp + 0x238], rsi
cmovae rdx, qword [rbp + 0x220]
mov r8, qword [rbp + 0x230]
lea rcx, [rbp + 0x180]
call fcn.140006c24
lea rax, [rbp + 0x180]
cmp qword [rbp + 0x198], rsi
cmovae rax, qword [rbp + 0x180]
mov qword [rbp + 8], rax
lea r9, [rbp - 0x10]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rbx, eax
test r12b, r12b
je 0x14008e85b
test r15b, r15b
je 0x14008e973
or r15d, 0xffffffff
cmp dword [0x1402374ec], r15d
je 0x14008e8e6
mov rcx, qword [rbp + 0xf0]
movabs rax, 0x7fffffff7fffffff
mov r8d, 0x32
cmp rcx, rax
jne 0x14008e899
lea rdx, [0x1401dc6f0]
lea rcx, [rbp + 0x3e0]
call fcn.1400ff058
jmp 0x14008e8b7
lea rdx, [rbp + 0x3e0]
test r13b, r13b
je 0x14008e8ac
call fcn.140129a9c
jmp 0x14008e8b7
mov r9d, 0x5e6
call fcn.140129b54
mov eax, dword [0x1402374ec]
mov dword [rsp + 0x78], eax
lea rax, [rbp + 0x3e0]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1402374f0], r15d
je 0x14008e977
mov rcx, qword [rbp + 0xf8]
movabs rax, 0x7fffffff7fffffff
mov r8d, 0x32
cmp rcx, rax
jne 0x14008e924
lea rdx, [0x1401dc6f0]
lea rcx, [rbp + 0x3e0]
call fcn.1400ff058
jmp 0x14008e942
lea rdx, [rbp + 0x3e0]
test r13b, r13b
je 0x14008e937
call fcn.140129a9c
jmp 0x14008e942
mov r9d, 0x5e6
call fcn.140129b54
mov eax, dword [0x1402374f0]
mov dword [rsp + 0x78], eax
lea rax, [rbp + 0x3e0]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14008e977
or r15d, 0xffffffff
mov eax, dword [0x1402374f4]
cmp eax, r15d
je 0x14008e9a5
mov dword [rsp + 0x78], eax
or qword [rbp - 0x78], 0xffffffffffffffff
lea r9, [rsp + 0x70]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1402374f8], r15d
mov r15b, byte [rsp + 0x31]
je 0x14008ea32
mov r8b, r15b
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x378]
call fcn.1401643b8
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x68], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rdx, [rbp + 0x378]
cmp qword [rbp + 0x390], rsi
cmovae rdx, qword [rbp + 0x378]
mov r8, qword [rbp + 0x388]
lea rcx, [rsp + 0x38]
call fcn.1400042c0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402374f8]
mov rdx, rbx
call fcn.140027e9c
nop
lea rcx, [rbp + 0x378]
call fcn.140006b94
cmp dword [0x1402374fc], 0xffffffff
je 0x14008eaba
mov r8b, r15b
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x398]
call fcn.1401643b8
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rdx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], rsi
cmovae rdx, qword [rbp + 0x398]
mov r8, qword [rbp + 0x3a8]
lea rcx, [rsp + 0x38]
call fcn.1400042c0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x1402374fc]
mov rdx, rbx
call fcn.140027e9c
nop
lea rcx, [rbp + 0x398]
call fcn.140006b94
cmp dword [0x140237500], 0xffffffff
je 0x14008eb42
mov r8b, r15b
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x280]
call fcn.1401643b8
nop
lea rax, [rsp + 0x38]
mov qword [rbp + 0x78], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rdx, [rbp + 0x280]
cmp qword [rbp + 0x298], rsi
cmovae rdx, qword [rbp + 0x280]
mov r8, qword [rbp + 0x290]
lea rcx, [rsp + 0x38]
call fcn.1400042c0
nop
mov rcx, qword [rdi + 0x90]
lea r9, [rsp + 0x38]
mov r8d, dword [0x140237500]
mov rdx, rbx
call fcn.140027e9c
nop
lea rcx, [rbp + 0x280]
call fcn.140006b94
cmp dword [0x140237504], 0xffffffff
je 0x14008ebb0
mov r8b, byte [rbp + 0x15a]
mov edx, dword [rbp + 0x118]
lea rcx, [rbp + 0x2a0]
call fcn.140087ed0
nop
mov eax, dword [0x140237504]
mov dword [rsp + 0x78], eax
lea rax, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], rsi
cmovae rax, qword [rbp + 0x2a0]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x2a0]
call fcn.140006b94
cmp dword [0x140237508], 0xffffffff
je 0x14008ecca
cmp dword [rbp + 0x12c], r14d
je 0x14008ecca
test r12b, r12b
jne 0x14008ecca
mov r12d, 7
cmp dword [rbp + 0x150], r14d
jne 0x14008ecd0
mov qword [rbp + 0x200], r14
mov qword [rbp + 0x210], r14
mov qword [rbp + 0x218], r14
mov qword [rbp + 0x210], r14
mov qword [rbp + 0x218], r12
mov word [rbp + 0x200], r14w
cmp dword [rbp + 0x12c], 3
jne 0x14008ec34
lea r8, [rbp + 0x200]
lea edx, [r12 + 0x19]
lea rcx, [rbp + 0x130]
call fcn.1400fdd58
jmp 0x14008ec7d
lea rax, str._04X
lea rdx, str._08X
cmp dword [rbp + 0x12c], 1
cmove rdx, rax
mov r8d, dword [rbp + 0x130]
lea rcx, [rbp + 0x5e0]
call fcn.1400ff0a0
nop
mov rdx, rax
lea rcx, [rbp + 0x200]
call fcn.140017bbc
nop
lea rcx, [rbp + 0x5e0]
call fcn.140006b94
mov eax, dword [0x140237508]
mov dword [rsp + 0x78], eax
lea rax, [rbp + 0x200]
cmp qword [rbp + 0x218], rsi
cmovae rax, qword [rbp + 0x200]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x200]
call fcn.140006b94
jmp 0x14008ecd0
mov r12d, 7
cmp byte [rsp + 0x30], r14b
je 0x14008ed81
cmp dword [0x14023750c], 0xffffffff
je 0x14008ed81
mov qword [rbp + 0x1c0], r14
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], r12
mov word [rbp + 0x1c0], r14w
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0xb0]
call fcn.1400e1f54
lea rdx, [rbp + 0x1c0]
mov rcx, rdi
call fcn.1400854fc
mov eax, dword [0x14023750c]
mov dword [rsp + 0x78], eax
lea rax, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], rsi
cmovae rax, qword [rbp + 0x1c0]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
mov r8, rbx
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x1c0]
call fcn.140006b94
nop
lea rcx, [rbp + 0x220]
call fcn.140006b94
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, rsi
jb 0x14008edd3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008edce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f365
call fcn.1401af9bc
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1f8], r12
mov word [rbp + 0x1e0], r14w
mov rdx, qword [rbp + 0x198]
cmp rdx, rsi
jb 0x14008ee2e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ee29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f36b
call fcn.1401af9bc
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], r12
mov word [rbp + 0x180], r14w
mov bl, byte [rsp + 0x30]
mov r8b, bl
lea rdx, [rbp + 0xb0]
lea rcx, [0x140236030]
call fcn.14000ef74
test al, al
je 0x14008ee6b
mov esi, dword [rsp + 0x58]
jmp 0x14008deec
mov r14, qword [rbp - 0x28]
mov r12, qword [rbp - 0x20]
mov dword [rsp + 0x20], 0x4411
mov r9d, 0x2b8
lea r8, [rbp + 0x600]
mov edx, 0x10
lea rcx, [0x1401e1c18]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rbx, rax
mov ecx, 5
xor r15d, r15d
test rax, rax
lea eax, [rcx + 2]
cmovne ecx, eax
mov dword [rbp - 0x10], ecx
mov eax, dword [rsp + 0x34]
mov dword [rbp - 0xc], eax
mov ecx, dword [rbp + 0x608]
mov dword [rbp + 0x14], ecx
mov dword [rbp - 8], r15d
lea rsi, [0x1401dc478]
mov qword [rbp + 8], rsi
mov qword [rbp + 0x3e0], r15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3f0], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqa xmmword [rbp + 0x3f0], xmm1
mov word [rbp + 0x3e0], r15w
mov qword [rbp + 0x400], r15
movdqa xmmword [rbp + 0x410], xmm0
movdqa xmmword [rbp + 0x410], xmm1
mov word [rbp + 0x400], r15w
movups xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x430], r15
mov qword [rbp + 0x438], r15
mov qword [rbp + 0x440], r15
xor edx, edx
lea r8d, [r15 + 0x60]
lea rcx, [rbp + 0x448]
call fcn.1401b2770
mov rdx, rsi
lea rcx, [rbp + 0x3e0]
call fcn.140012fc0
lea esi, [r15 + 1]
mov byte [rbp + 0x484], sil
mov dword [rbp + 0x448], 0x10
lea r9, [rdi + 0x38]
mov r10, qword [r9 + 8]
mov rcx, r10
sub rcx, qword [r9]
movabs rax, 0xa3d70a3d70a3d70b
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x18], rdx
mov rcx, r9
cmp r10, qword [r9 + 0x10]
je 0x14008efb2
lea rdx, [rbp + 0x3e0]
call fcn.14000a648
jmp 0x14008efc1
lea r8, [rbp + 0x3e0]
mov rdx, r10
call fcn.14000a6c0
lea r9, [rbp - 0x10]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x1402374f4]
cmp ecx, 0xffffffff
je 0x14008f014
test rbx, rbx
je 0x14008f014
mov dword [rsp + 0x78], ecx
lea rcx, [rbp + 0x818]
mov qword [rbp - 0x78], rcx
movsxd r8, eax
lea r9, [rsp + 0x70]
mov edx, 0x1074
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov r8, qword [rbp + 0x418]
cmp r8, 8
jb 0x14008f037
inc r8
mov rdx, qword [rbp + 0x400]
lea rcx, [rbp + 0x400]
call fcn.1400271bc
movdqa xmm0, xmmword [0x1401dc090]
movdqa xmmword [rbp + 0x410], xmm0
mov word [rbp + 0x400], r15w
mov r8, qword [rbp + 0x3f8]
cmp r8, 8
jb 0x14008f072
inc r8
mov rdx, qword [rbp + 0x3e0]
lea rcx, [rbp + 0x3e0]
call fcn.1400271bc
movdqa xmm0, xmmword [0x1401dc090]
movdqa xmmword [rbp + 0x3f0], xmm0
mov word [rbp + 0x3e0], r15w
mov rcx, rdi
call fcn.140093d74
cmp qword [r14 + 0x10], r15
je 0x14008f11d
lea rdx, [0x1401dc78c]
mov rcx, r14
call fcn.140082420
test al, al
jne 0x14008f0c2
mov rdx, r14
mov rcx, rdi
call fcn.14008912c
test al, al
jne 0x14008f143
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x14008f0e7
cmp r12d, eax
jl 0x14008f0e7
lea r12d, [rax - 1]
mov eax, 3
mov dword [rbp - 0x80], eax
mov dword [rsp + 0x7c], eax
movsxd rbx, r12d
lea r9, [rsp + 0x70]
mov r8, rbx
mov edx, 0x102b
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rsi
mov r8, rbx
mov edx, 0x1013
jmp 0x14008f136
mov eax, 3
mov dword [rbp - 0x80], eax
mov dword [rsp + 0x7c], eax
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x102b
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
mov r8, rsi
lea edx, [r9 + 0xb]
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102a
mov rcx, qword [rdi + 0x90]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rbp + 0x2a0], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2b0], xmm0
xor r8d, r8d
lea rdx, [0x1401dbff0]
lea rcx, [rbp + 0x2a0]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rbp + 0x2a0]
lea rcx, [0x140236a20]
call fcn.140129804
nop
lea rcx, [rbp + 0x2a0]
call fcn.140006b94
mov rcx, rdi
call fcn.14009387c
mov rcx, rdi
call fcn.140093b98
lea rcx, [0x140237180]
call fcn.14012f610
mov rcx, qword [0x140233a88]
cmp rcx, 0xffffffffffffffff
je 0x14008f1ed
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov qword [rbp + 0x2f8], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x308], xmm0
lea rdx, [rbp + 0x240]
cmp qword [rbp + 0x258], 8
cmovae rdx, qword [rbp + 0x240]
mov r8, qword [rbp + 0x250]
lea rcx, [rbp + 0x2f8]
call fcn.1400042c0
nop
lea rcx, [rbp + 0x2f8]
call fcn.1400e3a58
lea rcx, [rbp + 0x2f8]
cmp qword [rbp + 0x310], 8
cmovae rcx, qword [rbp + 0x2f8]
mov r8d, esi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
mov qword [0x140233a88], rax
xor edx, edx
lea rcx, [0x140236a20]
call fcn.140129904
nop
lea rcx, [rbp + 0x2f8]
call fcn.140006b94
nop
lea rcx, [rbp + 0xd0]
call fcn.140006b94
nop
lea rcx, [rbp + 0xb0]
call fcn.140006b94
nop
lea rcx, [rbp + 0x80]
call fcn.14015fff0
nop
mov r8, qword [rsp + 0x60]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.140082660
mov r8, rsi
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.14006fce0
nop
lea rcx, [rbp + 0x260]
call fcn.140006b94
nop
lea rcx, [rbp + 0x240]
call fcn.140006b94
nop
mov eax, dword [0x140233a40]
test eax, eax
jle 0x14008f2f9
sub eax, esi
mov dword [0x140233a40], eax
mov rcx, qword [rbp + 0xb88]
xor rcx, rsp
call fcn.1401afad0
mov rbx, qword [rsp + 0xce0]
add rsp, 0xc90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140006c0c
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.140006b74
int3
call fcn.140006bf8
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.140006b74
int3
call fcn.140006bf8
int3