Function at 0x180092670
Capabilities:
Get file system object information

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x518]
sub rsp, 0x5f0
mov rax, qword [0x180122658]
xor rax, rsp
mov qword [rbp + 0x4e0], rax
xor eax, eax
mov r12d, edx
mov dword [rsp + 0x30], eax
mov rdi, rcx
mov dword [rsp + 0x34], eax
mov r14d, eax
mov word [rbp + 0x2d0], ax
mov ebx, eax
mov word [rbp + 0x210], ax
mov esi, eax
mov r15d, 0x80004005
test rcx, rcx
je 0x180092963
mov r13d, 0x2b8
lea rcx, [rsp + 0x40]
mov r8d, r13d
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov eax, r12d
lea r8, [rsp + 0x40]
neg eax
mov r9d, r13d
mov edx, 0x80
sbb ecx, ecx
and ecx, 0x8000
add ecx, 0x710
mov dword [rsp + 0x20], ecx
mov rcx, rdi
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test rax, rax
je 0x1800927eb
cmp dword [rsp + 0x48], ebx
jne 0x18009277b
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.USER32.dll_DestroyIcon]
lea r8, [0x1800f3170]
mov rcx, rdi
lea rdx, [rbp + 0x200]
call fcn.180048b2c
mov r15d, eax
test eax, eax
jne 0x1800927eb
lea r9, [rsp + 0x30]
mov r8d, 0x101
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x200]
call fcn.1800128b8
mov rbx, rax
jmp 0x1800927e7
mov rbx, qword [rsp + 0x40]
lea rax, [rsp + 0x50]
test r12d, r12d
lea r8, [rbp + 0x158]
mov edx, 0x2a
lea rcx, [rbp + 0x270]
cmovne r8, rax
call fcn.18000dd00
lea r8, [0x1800f3170]
mov dword [rsp + 0x34], 1
lea rdx, [rbp + 0x200]
mov rcx, rdi
call fcn.180048b2c
mov r15d, eax
test eax, eax
jne 0x1800927eb
lea r9, [rsp + 0x30]
mov r8d, 0x101
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x200]
call fcn.180012924
mov esi, dword [rsp + 0x30]
mov rcx, rdi
call fcn.180005e78
mov r13d, eax
test r15d, r15d
jne 0x180092805
xor r15d, r15d
test rbx, rbx
jne 0x180092843
jmp 0x180092808
xor r15d, r15d
mov r8, rdi
mov word [rsp + 0x30], r15w
mov edx, 0x101
lea rcx, [rbp + 0x2d0]
call fcn.18000dd00
mov rcx, qword [0x1801232f0]
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x2d0]
call qword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
movzx esi, word [rsp + 0x30]
mov rbx, rax
cmp rbx, 1
ja 0x18009288b
mov rcx, qword [0x1801232f0]
lea rdx, [rbp + 0x2d0]
mov r8d, 0x101
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleFileNameW]
test eax, eax
je 0x180092963
mov rcx, qword [0x1801232f0]
mov edx, 8
mov word [rbp + 0x4d0], r15w
mov esi, r15d
call qword [sym.imp.USER32.dll_LoadIconW]
mov rbx, rax
cmp dword [rsp + 0x34], r15d
jne 0x180092939
test r12d, r12d
je 0x1800928d8
lea r8, [rdi - 2]
mov rax, r13
lea r8, [r8 + r13*2]
jmp 0x1800928cd
movzx eax, word [r8]
sub ax, 0x2f
cmp ax, 0x2d
ja 0x1800928c9
movzx eax, ax
movabs rcx, 0x200000000801
bt rcx, rax
jb 0x1800928d2
sub r8, 2
cmp r8, rdi
jae 0x1800928a8
add r8, 2
jmp 0x180092928
lea r8, [rbp + 0x270]
lea rcx, [rbp + 0x200]
call fcn.180012bac
test eax, eax
jne 0x180092939
cmp r15w, word [rbp + 0x210]
jne 0x180092921
lea r8, [rsp + 0x34]
mov dword [rsp + 0x34], 0x54
lea rdx, [rbp + 0x210]
lea rcx, str.SoftwareMicrosoftOLE2DefaultIconLabel
call fcn.180012864
mov word [rbp + 0x262], r15w
lea r8, [rbp + 0x210]
mov edx, 0x2a
lea rcx, [rbp + 0x270]
call fcn.18000dd00
mov r9d, esi
lea r8, [rbp + 0x2d0]
lea rdx, [rbp + 0x270]
mov rcx, rbx
call sym.ole32.dll_OleMetafilePictFromIconAndLabel
mov r14, rax
test rbx, rbx
je 0x180092963
mov rcx, rbx
call qword [sym.imp.USER32.dll_DestroyIcon]
mov rax, r14
mov rcx, qword [rbp + 0x4e0]
xor rcx, rsp
call fcn.180023ec0
lea r11, [rsp + 0x5f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret