Function at 0x140043cfc
Capabilities:
Get file system object information

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x29f0
call fcn.1400ba8b0
sub rsp, rax
mov qword [rsp + 0xa8], 0xfffffffffffffffe
mov qword [rsp + 0x2a40], rbx
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x29e8], rax
mov r14, rdx
mov qword [rsp + 0x48], rdx
mov rbx, rcx
mov esi, 1
add dword [0x1400ff4a4], esi
mov r9, rsi
or rdi, 0xffffffffffffffff
mov r8, rdi
mov edx, 0x100c
mov rcx, qword [rcx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
mov qword [rsp + 0x50], rax
mov edx, esi
lea rcx, [0x1400ffda0]
call fcn.14006b078
mov ecx, 0x1c4
call fcn.140061d2c
mov rdx, rax
lea rcx, [0x1400ffda0]
call fcn.14006b0e4
xor r9d, r9d
xor r8d, r8d
lea edx, [rsi + 0xa]
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.140042834
mov dword [rsp + 0x20], 0x4011
mov r9d, 0x2b8
lea r8, [rsp + 0x1540]
xor edx, edx
lea rcx, [0x1400c7800]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov r9, rax
mov r8, rsi
mov edx, 0x1003
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x1400ffd88]
call fcn.140007268
lea rdx, [rsp + 0x13f0]
lea rcx, [0x140105fb0]
call fcn.1400129f0
mov r8d, 0x400
lea rdx, [rsp + 0x21e0]
lea rcx, [0x140105fb0]
call fcn.1400129b4
lea rdx, [rsp + 0x21e0]
mov rcx, rbx
call fcn.14003f5ac
xor eax, eax
mov rcx, rdi
lea rdi, [rsp + 0x21e0]
repne scasw ax, word [rdi]
not rcx
sub rcx, rsi
mov rdi, rcx
je 0x140043e53
add rdi, rsi
lea rdx, [rsp + 0x21e0]
lea rcx, [0x140105538]
call fcn.14007172c
xor ebp, ebp
mov r12d, ebp
mov byte [rsp + 0x32], bpl
mov r8d, esi
lea rdx, str.AllowUppercase
lea rsi, str.FileList
mov rcx, rsi
call fcn.14005c420
cmp eax, ebp
setne byte [rsp + 0x33]
xor r8d, r8d
lea rdx, str.FlatView
mov rcx, rsi
call fcn.14005c420
cmp eax, ebp
setne r13b
mov byte [rsp + 0x30], r13b
xor r8d, r8d
lea rdx, str.ShowSeconds
mov rcx, rsi
call fcn.14005c420
cmp eax, ebp
setne byte [rsp + 0x31]
mov word [rsp + 0x19e0], bp
mov edx, 0x1f4
lea rcx, [rsp + 0x90]
call fcn.140087008
nop
mov r8b, r13b
lea rdx, [rsp + 0xb0]
lea rcx, [0x140105fb0]
call fcn.1400120cc
lea esi, [rbp + 5]
cmp al, bpl
je 0x140044511
lea rdi, [rsp + rdi*2 + 0xb0]
mov qword [rsp + 0x38], rdi
mov r15, rsi
mov r14b, bpl
test r12b, 0x1f
jne 0x140043f2b
lea rcx, [rsp + 0x90]
call fcn.1400868a8
mov rsi, rdi
mov ebp, dword [rsp + 0x8c0]
shr ebp, 4
and bpl, 1
xor r8d, r8d
cmp r13b, r8b
je 0x140043f57
lea rcx, [rsp + 0xb0]
call fcn.140052abc
mov rsi, rax
xor r8d, r8d
cmp bpl, r8b
je 0x140044093
cmp r13b, r8b
jne 0x140044093
bt dword [rsp + 0x8cc], 0x10
jae 0x140043fec
mov rcx, rsi
lea rdi, [rsp + 0x19e0]
sub rdi, rsi
movzx edx, word [rcx]
movzx eax, word [rcx + rdi]
sub edx, eax
jne 0x140043f95
add rcx, 2
test eax, eax
jne 0x140043f82
cmp edx, r8d
je 0x1400444db
mov rcx, rsi
lea rdx, [rsp + 0x19e0]
sub rdx, rsi
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r8w
jne 0x140043fac
mov byte [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rsp + 0xb0]
xor edx, edx
lea rcx, [0x140116170]
call fcn.14003f0c0
xor r8d, r8d
cmp al, r8b
jne 0x1400444d2
jmp 0x140044093
mov byte [rsp + 0x20], 1
lea r9, [rsp + 0x40]
lea r8, [rsp + 0xb0]
xor edx, edx
lea rcx, [0x140116170]
call fcn.14003f0c0
xor r8d, r8d
cmp al, r8b
je 0x140044093
mov rdx, qword [rsp + 0x40]
lea rcx, [0x140116170]
call fcn.14003f194
mov rcx, qword [rsp + 0x8c4]
mov qword [rax + 0x24], rcx
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x1840]
mov r8b, byte [rsp + 0x31]
lea rdx, [rsp + 0x8c4]
mov rcx, rbx
call fcn.140041000
mov dword [rsp + 0x1808], 4
lea rax, [rsp + 0x1840]
mov qword [rsp + 0x1818], rax
lea r9, [rsp + 0x1800]
mov r8, qword [rsp + 0x40]
mov edx, 0x1074
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
xor ebp, ebp
jmp 0x1400444e2
mov dword [rsp + 0x58], 7
mov dword [rsp + 0x5c], r12d
or rcx, 0xffffffffffffffff
mov dword [rsp + 0x7c], ecx
mov dword [rsp + 0x60], r8d
mov word [rsp + 0x1800], r8w
mov edx, dword [rsp + 0x8cc]
test dl, 1
je 0x1400440e7
lea rdi, [rsp + 0x1800]
xor eax, eax
repne scasw ax, word [rdi]
mov eax, dword [0x1400c77f4]
mov dword [rdi - 2], eax
movzx eax, word [0x1400c77f8]
mov word [rdi + 2], ax
or rcx, 0xffffffffffffffff
and edx, 6
je 0x140044168
cmp edx, 2
je 0x140044145
cmp edx, 4
je 0x140044120
cmp edx, 6
jne 0x140044168
lea rdi, [rsp + 0x1800]
xor eax, eax
repne scasw ax, word [rdi]
mov rax, qword [0x1400c77e8]
mov qword [rdi - 2], rax
movzx eax, word [0x1400c77f0]
mov word [rdi + 6], ax
jmp 0x140044168
lea rdi, [rsp + 0x1800]
xor eax, eax
repne scasw ax, word [rdi]
mov rax, qword [0x1400c77d8]
mov qword [rdi - 2], rax
movzx eax, word [0x1400c77e0]
mov word [rdi + 6], ax
jmp 0x140044168
lea rdi, [rsp + 0x1800]
xor eax, eax
repne scasw ax, word [rdi]
mov rax, qword [0x1400c77c8]
mov qword [rdi - 2], rax
movzx eax, word [0x1400c77d0]
mov word [rdi + 6], ax
inc r12d
mov dword [rsp + 0x8d4], r12d
lea rdx, [rsp + 0xb0]
lea rcx, [0x140116170]
call fcn.14003ee54
mov qword [rsp + 0x80], rax
lea rdx, [rsp + 0xb0]
mov rcx, rbx
call fcn.14003f5ac
cmp byte [rsp + 0x33], 0
jne 0x1400441ae
mov rcx, rsi
call fcn.140046ecc
mov qword [rsp + 0x70], rsi
xor eax, eax
or rdx, 0xffffffffffffffff
mov rcx, rdx
mov rdi, rsi
repne scasw ax, word [rdi]
not rcx
lea rdi, [rsi + rcx*2 - 2]
mov rcx, rdx
repne scasw ax, word [rdi]
lea rdx, [rsp + 0x1800]
xor ecx, ecx
movzx eax, word [rdx + rcx]
mov word [rdi + rcx - 2], ax
add rcx, 2
test ax, ax
jne 0x1400441da
lea r9, [rsp + 0x58]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rdi, eax
xor esi, esi
cmp bpl, sil
jne 0x140044322
mov rcx, qword [rsp + 0x8b0]
movabs rax, 0x7fffffff7fffffff
cmp rcx, rax
jne 0x140044252
mov rcx, rsi
lea r13, [0x140000000]
movzx eax, word [rcx + r13 + 0xc77c4]
mov word [rsp + rcx + 0x1840], ax
add rcx, 2
cmp ax, si
jne 0x140044231
mov r13b, byte [rsp + 0x30]
jmp 0x140044265
mov r8d, 0x32
lea rdx, [rsp + 0x1840]
call fcn.140046b20
mov dword [rsp + 0x1808], 1
lea rax, [rsp + 0x1840]
mov qword [rsp + 0x1818], rax
lea r9, [rsp + 0x1800]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x8b8]
movabs rax, 0x7fffffff7fffffff
cmp rcx, rax
jne 0x1400442db
mov rcx, rsi
lea r13, [0x140000000]
movzx eax, word [rcx + r13 + 0xc77c4]
mov word [rsp + rcx + 0x1840], ax
add rcx, 2
cmp ax, si
jne 0x1400442ba
mov r13b, byte [rsp + 0x30]
jmp 0x1400442ee
mov r8d, 0x32
lea rdx, [rsp + 0x1840]
call fcn.140046b20
mov dword [rsp + 0x1808], 2
lea rax, [rsp + 0x1840]
mov qword [rsp + 0x1818], rax
lea r9, [rsp + 0x1800]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rsp + 0x8c4], esi
jne 0x14004435f
cmp dword [rsp + 0x8c8], esi
jne 0x14004435f
mov rcx, rsi
lea r13, [0x140000000]
movzx eax, word [rcx + r13 + 0xc3f4c]
mov word [rsp + rcx + 0x1910], ax
add rcx, 2
cmp ax, si
jne 0x14004433e
mov r13b, byte [rsp + 0x30]
jmp 0x140044384
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x1910]
mov r8b, byte [rsp + 0x31]
lea rdx, [rsp + 0x8c4]
mov rcx, rbx
call fcn.140041000
mov dword [rsp + 0x1808], 4
lea rax, [rsp + 0x1910]
mov qword [rsp + 0x1818], rax
lea r9, [rsp + 0x1800]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [rsp + 0x8cc]
test dl, 8
je 0x140044430
cmp bpl, sil
jne 0x140044430
test dl, 0x10
lea rax, str._04X
lea r8, str._08X
cmovne r8, rax
mov r9d, dword [rsp + 0x8d0]
mov edx, 0xa
lea rcx, [rsp + 0x1800]
call fcn.14005b860
mov dword [rsp + 0x1848], r15d
lea rax, [rsp + 0x1800]
mov qword [rsp + 0x1858], rax
lea r9, [rsp + 0x1840]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [rsp + 0x8cc]
xor ebp, ebp
cmp r14b, bpl
jne 0x140044477
mov dword [rsp + 0x1800], 4
and dl, 0x10
neg dl
sbb ecx, ecx
neg ecx
add ecx, 0x73
call fcn.140061d2c
mov qword [rsp + 0x1810], rax
lea r9, [rsp + 0x1800]
mov r8, r15
mov edx, 0x1060
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r14b, 1
cmp r13b, bpl
je 0x1400444cb
mov r8d, 0x400
lea rdx, [rsp + 0xbb0]
lea rcx, [rsp + 0xb0]
call fcn.140053004
mov dword [rsp + 0x1848], 6
lea rax, [rsp + 0xbb0]
mov qword [rsp + 0x1858], rax
lea r9, [rsp + 0x1840]
mov r8, rdi
mov edx, 0x1074
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, qword [rsp + 0x38]
jmp 0x1400444e2
mov rdi, qword [rsp + 0x38]
xor ebp, ebp
jmp 0x1400444e2
mov rdi, qword [rsp + 0x38]
xor ebp, ebp
mov r8b, r13b
lea rdx, [rsp + 0xb0]
lea rcx, [0x140105fb0]
call fcn.1400120cc
cmp al, bpl
jne 0x140043f18
mov r14, qword [rsp + 0x48]
mov r15, qword [rsp + 0x50]
mov esi, 5
mov dword [rsp + 0x20], 0x4411
mov r9d, 0x2b8
lea r8, [rsp + 0x8f0]
mov edx, 0x10
lea rcx, [0x1400c77a0]
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rdi, rax
cmp rax, rbp
mov eax, 7
cmovne esi, eax
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x5c], r12d
mov ecx, dword [rsp + 0x8f8]
mov dword [rsp + 0x7c], ecx
mov dword [rsp + 0x60], ebp
lea rsi, [0x1400c39c0]
mov qword [rsp + 0x70], rsi
xor edx, edx
mov r8d, 0x838
lea rcx, [rsp + 0xbb0]
call fcn.1400a9164
mov rdx, rbp
movzx eax, word [rdx + rsi]
mov word [rsp + rdx + 0xbb0], ax
add rdx, 2
cmp ax, bp
jne 0x140044583
mov dword [rsp + 0x13c0], 0x10
lea rdx, [rsp + 0xbb0]
lea rcx, [0x140116170]
call fcn.14003ee54
mov qword [rsp + 0x80], rax
lea r9, [rsp + 0x58]
xor r8d, r8d
mov edx, 0x104d
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov esi, 3
cmp rdi, rbp
je 0x14004460f
mov dword [rsp + 0x1848], esi
lea rdx, [rsp + 0xb08]
mov qword [rsp + 0x1858], rdx
movsxd r8, eax
lea r9, [rsp + 0x1840]
mov edx, 0x1074
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x140116170]
call fcn.14003f05c
mov rcx, rbx
call fcn.140042f48
cmp r14, rbp
je 0x140044688
cmp word [r14], bp
je 0x140044688
mov rdx, r14
mov rcx, rbx
call fcn.140042d6c
cmp al, bpl
jne 0x1400446af
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, ebp
jle 0x14004465f
cmp r15d, eax
jl 0x14004465f
lea r15d, [rax - 1]
mov dword [rsp + 0x1850], esi
mov dword [rsp + 0x184c], esi
movsxd r8, r15d
lea r9, [rsp + 0x1840]
mov edx, 0x102b
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400446af
mov dword [rsp + 0x1850], esi
mov dword [rsp + 0x184c], esi
lea r9, [rsp + 0x1840]
xor r8d, r8d
mov edx, 0x102b
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
lea edx, [r9 + 0xb]
lea r8d, [r9 + 1]
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102a
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
lea rcx, [0x1400ffda0]
call fcn.14006b0e4
mov rcx, rbx
call fcn.1400413c8
mov rcx, rbx
call fcn.1400415d4
lea rcx, [0x1401082f8]
call fcn.14006e9f8
xor edx, edx
lea rcx, [0x1400ffda0]
call fcn.14006b078
nop
lea rcx, [rsp + 0x90]
call fcn.1400868d4
nop
mov eax, dword [0x1400ff4a4]
cmp eax, ebp
jle 0x140044730
dec eax
mov dword [0x1400ff4a4], eax
mov rcx, qword [rsp + 0x29e8]
xor rcx, rsp
call fcn.1400a8530
mov rbx, qword [rsp + 0x2a40]
add rsp, 0x29f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret