Function at 0x14005d2d0
Capabilities:
Get common file path
Get file system object information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x330
mov rax, qword [0x1401786a0]
xor rax, rsp
mov qword [rsp + 0x320], rax
mov rsi, rcx
mov rcx, qword [rcx + 8]
lea r8, [rsp + 0x58]
xor ebp, ebp
xor edx, edx
mov qword [rsp + 0x58], rbp
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea rcx, [rsp + 0x68]
xor edx, edx
mov r8d, 0x2b0
mov qword [rsp + 0x60], rbp
call fcn.140076300
mov rcx, qword [rsp + 0x58]
lea r8, [rsp + 0x60]
mov r9d, 0x2b8
xor edx, edx
mov dword [rsp + 0x20], 0x4108
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea rcx, [rsp + 0x60]
xor edx, edx
mov r8d, 0x2b8
mov rdi, rax
call fcn.140076300
mov rcx, qword [rsp + 0x58]
lea r8, [rsp + 0x60]
mov r9d, 0x2b8
xor edx, edx
mov dword [rsp + 0x20], 0x4009
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov rcx, qword [rsi + 0x3c0]
xor r8d, r8d
mov r9, rax
mov edx, 0x402
mov rbx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsi + 0x3a8]
mov r9, rbx
xor r8d, r8d
mov edx, 0x1109
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [rbp + 0x28]
lea rcx, [rsp + 0x30]
xor edx, edx
call fcn.140076300
mov rcx, qword [rsi + 0x3b0]
lea r11, str.Name
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x1061
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x34], ebp
mov dword [rsp + 0x38], 0xc8
mov dword [rsp + 0x30], 0xf
mov dword [rsp + 0x4c], ebp
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [rbp + 0x28]
lea rcx, [rsp + 0x30]
xor edx, edx
call fcn.140076300
mov rcx, qword [rsi + 0x3b0]
lea r11, str.Size
lea r9, [rsp + 0x30]
lea r8d, [rbp + 1]
mov edx, 0x1061
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x34], 1
mov dword [rsp + 0x38], 0x64
mov dword [rsp + 0x30], 0xf
mov dword [rsp + 0x4c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [rbp + 0x28]
lea rcx, [rsp + 0x30]
xor edx, edx
call fcn.140076300
lea r11, str.Type
mov dword [rsp + 0x34], ebp
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x38], 0x64
mov dword [rsp + 0x30], 0xf
mov dword [rsp + 0x4c], 2
lea r9, [rsp + 0x30]
mov rcx, qword [rsi + 0x3b0]
lea r8d, [rbp + 2]
mov edx, 0x1061
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [rbp + 0x28]
lea rcx, [rsp + 0x30]
xor edx, edx
call fcn.140076300
mov rcx, qword [rsi + 0x3b0]
lea r11, str.Modified
lea r9, [rsp + 0x30]
lea r8d, [rbp + 3]
mov edx, 0x1061
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x34], ebp
mov dword [rsp + 0x38], 0x64
mov dword [rsp + 0x30], 0xf
mov dword [rsp + 0x4c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [rbp + 0x28]
lea rcx, [rsp + 0x30]
xor edx, edx
call fcn.140076300
mov rcx, qword [rsi + 0x3b0]
lea r11, str.Attributes
lea r9, [rsp + 0x30]
lea r8d, [rbp + 4]
mov edx, 0x1061
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x34], 1
mov dword [rsp + 0x38], 0x64
mov dword [rsp + 0x30], 0xf
mov dword [rsp + 0x4c], 4
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsi + 0x3b0]
mov r9, rdi
xor r8d, r8d
mov edx, 0x1003
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsi + 0x3b0]
lea r8d, [rbp + 1]
mov r9, rbx
mov edx, 0x1003
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x320]
xor rcx, rsp
call fcn.1400762d0
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret