Function at 0x479af0
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x650b69
mov eax, dword fs:[0]
push eax
sub esp, 0x380
mov eax, dword [0x6dc0b8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x2e8], ebx
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov eax, dword [ebp + 8]
sub eax, 7
je 0x479bc8
sub eax, 2
jne 0x47a356
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push eax
push 0x147
push dword [ebx + 0x48]
call esi
test eax, eax
js 0x47a356
mov ecx, dword [ebx + 0x4c]
push dword [ecx + eax*4]
lea ecx, [ebp - 0x30c]
call fcn.0049f470
push 0
push 0xffffffffffffffff
push 0x14e
mov dword [ebp - 4], 0xa
push dword [ebx + 0x48]
call esi
push 1
lea eax, [ebp - 0x30c]
mov ecx, ebx
push eax
call fcn.00479190
test eax, eax
jne 0x479bbd
push eax
push eax
push 0x403
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
push dword [ebp - 0x30c]
call fcn.00545b61
add esp, 4
mov al, 1
jmp 0x47a358
push dword [ebp - 0x30c]
jmp 0x47a34e
lea eax, [ebx + 0x4c]
mov ecx, eax
mov dword [ebp - 0x344], eax
call fcn.004066d0
push 0
push 0
push 0x14b
push dword [ebx + 0x48]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 0
lea ecx, [ebx + 0xc4]
mov dword [ebp - 4], 0
lea edx, [ebp - 0x31c]
call fcn.004a0900
push 8
call fcn.00545b74
xor ebx, ebx
mov dword [ebp - 0x2e4], eax
xor ecx, ecx
mov dword [ebp - 0x2e0], ebx
add esp, 4
mov dword [ebp - 0x2dc], 3
mov word [eax], cx
mov byte [ebp - 4], 1
mov edi, dword [ebp - 0x318]
mov dword [ebp - 0x310], edi
test edi, edi
je 0x479c8b
mov esi, dword [ebp - 0x31c]
mov esi, dword [esi + edi*4 - 4]
test esi, esi
je 0x479c7e
push dword [esi]
call fcn.00545b61
add esp, 4
push 0xc
push esi
call fcn.00545b66
add esp, 8
dec edi
mov dword [ebp - 0x310], edi
mov dword [ebp - 0x318], edi
xor esi, esi
mov dword [ebp - 0x2d0], esi
lea edx, [esi + 2]
test edi, edi
je 0x479ef7
jmp 0x479ca5
mov edx, 2
mov eax, dword [ebp - 0x31c]
xor ecx, ecx
mov esi, dword [eax + esi*4]
mov edi, dword [esi + 4]
lea eax, [edi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00545b74
mov ecx, dword [esi + 4]
add esp, 4
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], edi
mov dword [ebp - 0x2f8], edi
lea ecx, [ecx*2 + 2]
push ecx
push dword [esi]
push eax
call fcn.005e0850
add esp, 0xc
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x2dc]
sub eax, ebx
cmp edi, eax
jbe 0x479d22
lea ecx, [ebx + edi]
mov eax, ecx
add ecx, 0x10
shr eax, 1
add eax, ecx
lea ecx, [ebp - 0x2e4]
and eax, 0xfffffff0
dec eax
push eax
call fcn.0049f070
mov ebx, dword [ebp - 0x2e0]
mov esi, dword [ebp - 0x2e4]
lea eax, [edi*2 + 2]
push eax
push dword [ebp - 0x300]
lea ecx, [esi + ebx*2]
push ecx
call fcn.005e0850
add ebx, edi
add esp, 0xc
mov dword [ebp - 0x2e0], ebx
cmp dword [ebp - 0x2dc], ebx
jne 0x479d77
mov eax, ebx
lea ecx, [ebp - 0x2e4]
shr eax, 1
add ebx, 0x10
add eax, ebx
and eax, 0xfffffff0
dec eax
push eax
call fcn.0049f070
mov ebx, dword [ebp - 0x2e0]
mov esi, dword [ebp - 0x2e4]
mov eax, 0x5c
lea ecx, [ebp - 0x37c]
mov word [esi + ebx*2], ax
inc ebx
xor eax, eax
mov dword [ebp - 0x2e0], ebx
mov word [esi + ebx*2], ax
call fcn.00415d50
push esi
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 3
call fcn.004a4300
test al, al
mov eax, 0x10
cmovne eax, dword [ebp - 0x35c]
test edi, edi
mov dword [ebp - 0x2d8], eax
mov eax, 0x6acfb0
cmovne eax, dword [ebp - 0x300]
xor esi, esi
mov dword [ebp - 0x2d4], eax
cmp word [eax], si
je 0x479ddf
inc esi
cmp word [eax + esi*2], 0
jne 0x479dd7
xor ecx, ecx
lea eax, [esi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00545b74
add esp, 4
lea esi, [esi*2 + 2]
mov edi, eax
push esi
push dword [ebp - 0x2d4]
push edi
call fcn.005e0850
add esp, 0xc
push 0x4010
push 0x2b4
lea eax, [ebp - 0x2cc]
push eax
mov eax, dword [ebp - 0x2d8]
or eax, 0x80
push eax
push dword [ebp - 0x2e4]
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov esi, dword [ebp - 0x2d0]
or ecx, 0xffffffff
test eax, eax
mov dword [ebp - 0x33c], 0xffffffff
mov eax, 0x11
mov dword [ebp - 0x324], esi
cmovne ecx, dword [ebp - 0x2c8]
test ecx, ecx
mov dword [ebp - 0x330], ecx
mov dword [ebp - 0x32c], ecx
mov ecx, 0x17
cmovns eax, ecx
mov dword [ebp - 0x338], edi
mov dword [ebp - 0x340], eax
lea eax, [ebp - 0x340]
push eax
mov eax, dword [ebp - 0x2e8]
push 0
push 0x40b
push dword [eax + 0x48]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
mov byte [ebp - 4], 3
call fcn.00545b61
mov ecx, dword [ebp - 0x344]
lea eax, [ebp - 0x2e4]
add esp, 4
push eax
call fcn.00406580
push dword [ebp - 0x354]
call fcn.00545b61
add esp, 4
mov byte [ebp - 4], 1
push dword [ebp - 0x300]
call fcn.00545b61
mov edi, dword [ebp - 0x310]
inc esi
add esp, 4
mov dword [ebp - 0x2d0], esi
cmp esi, edi
jb 0x479ca0
push 8
call fcn.00545b74
mov ebx, eax
mov dword [ebp - 0x2f0], 0
xor eax, eax
mov dword [ebp - 0x2f4], ebx
add esp, 4
mov dword [ebp - 0x2ec], 3
mov word [ebx], ax
lea edx, [ebp - 0x2d0]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30c]
call fcn.00493c80
mov dword [ebp - 0x2d4], eax
lea ecx, [ebp - 0x2f4]
mov byte [ebp - 4], 6
cmp eax, ecx
je 0x479fb1
mov eax, dword [eax + 4]
mov dword [ebp - 0x2d8], eax
cmp eax, 3
jbe 0x479f92
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00545b74
add esp, 4
mov esi, eax
push ebx
call fcn.00545b61
mov eax, dword [ebp - 0x2d8]
mov ebx, esi
add esp, 4
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2f0], eax
lea eax, [eax*2 + 2]
push eax
mov eax, dword [ebp - 0x2d4]
push dword [eax]
push ebx
call fcn.005e0850
add esp, 0xc
mov byte [ebp - 4], 5
push dword [ebp - 0x30c]
call fcn.00545b61
mov eax, dword [ebp - 0x2d0]
add esp, 4
mov esi, dword [ebp - 0x2e8]
test eax, eax
mov dword [ebp - 0x330], eax
mov ecx, 0x11
mov dword [ebp - 0x32c], eax
mov eax, 0x17
cmovns ecx, eax
mov dword [ebp - 0x33c], 0xffffffff
lea eax, [ebp - 0x340]
mov dword [ebp - 0x340], ecx
push eax
push 0
push 0x40b
push dword [esi + 0x48]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x338], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [esi + 0x4c]
call fcn.00406580
lea edx, [ebp - 0x2d0]
lea ecx, [ebp - 0x30c]
call fcn.00493aa0
mov dword [ebp - 0x2d4], eax
lea ecx, [ebp - 0x2f4]
mov byte [ebp - 4], 7
cmp eax, ecx
je 0x47a0c4
mov eax, dword [eax + 4]
mov dword [ebp - 0x2d8], eax
cmp eax, dword [ebp - 0x2ec]
jbe 0x47a0a5
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00545b74
add esp, 4
mov esi, eax
push ebx
call fcn.00545b61
mov eax, dword [ebp - 0x2d8]
mov ebx, esi
mov esi, dword [ebp - 0x2e8]
add esp, 4
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2f0], eax
lea eax, [eax*2 + 2]
push eax
mov eax, dword [ebp - 0x2d4]
push dword [eax]
push ebx
call fcn.005e0850
add esp, 0xc
mov byte [ebp - 4], 5
push dword [ebp - 0x30c]
call fcn.00545b61
mov eax, dword [ebp - 0x2d0]
add esp, 4
test eax, eax
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], eax
mov ecx, 0x11
mov eax, 0x17
mov dword [ebp - 0x33c], 0xffffffff
cmovns ecx, eax
mov dword [ebp - 0x324], 0
lea eax, [ebp - 0x340]
mov dword [ebp - 0x340], ecx
push eax
push 0
push 0x40b
push dword [esi + 0x48]
mov dword [ebp - 0x338], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x2f4]
push eax
lea eax, [esi + 0x4c]
mov ecx, eax
call fcn.00406580
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f8], 0
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 8
call fcn.004a4b50
mov ebx, dword [ebp - 0x2fc]
test ebx, ebx
je 0x47a2e8
xor edi, edi
nop dword [eax]
mov eax, dword [ebp - 0x300]
xor ecx, ecx
mov edx, 2
mov esi, dword [eax + edi*4]
mov eax, dword [esi + 4]
mov dword [ebp - 0x2d0], eax
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00545b74
mov ecx, dword [esi + 4]
add esp, 4
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x308], eax
lea ecx, [ecx*2 + 2]
mov dword [ebp - 0x304], eax
push ecx
push dword [esi]
mov esi, dword [ebp - 0x30c]
push esi
call fcn.005e0850
add esp, 0xc
mov ecx, dword [ebp - 0x344]
lea eax, [ebp - 0x30c]
push eax
mov byte [ebp - 4], 9
call fcn.00406580
push 0x4010
push 0x2b4
lea eax, [ebp - 0x2cc]
push eax
push 0x80
push esi
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [ebp - 0x2d0]
or edx, 0xffffffff
test eax, eax
cmovne edx, dword [ebp - 0x2c8]
test ecx, ecx
je 0x47a240
cmp word [esi + ecx*2 - 2], 0x5c
jne 0x47a240
lea eax, [ecx - 1]
xor ecx, ecx
mov dword [ebp - 0x308], eax
mov word [esi + eax*2], cx
test edx, edx
mov dword [ebp - 0x330], edx
mov ecx, 0x17
mov dword [ebp - 0x32c], edx
mov eax, 0x11
mov dword [ebp - 0x33c], 0xffffffff
cmovns eax, ecx
mov dword [ebp - 0x324], 1
mov dword [ebp - 0x340], eax
lea eax, [ebp - 0x340]
push eax
mov eax, dword [ebp - 0x2e8]
push 0
push 0x40b
mov dword [ebp - 0x338], esi
push dword [eax + 0x48]
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
mov byte [ebp - 4], 8
call fcn.00545b61
inc edi
add esp, 4
cmp edi, ebx
jb 0x47a180
mov edi, dword [ebp - 0x310]
test ebx, ebx
je 0x47a2e8
mov eax, dword [ebp - 0x300]
nop
mov esi, dword [eax + ebx*4 - 4]
dec ebx
test esi, esi
je 0x47a2e4
push dword [esi]
call fcn.00545b61
add esp, 4
push 0xc
push esi
call fcn.00545b66
mov eax, dword [ebp - 0x300]
add esp, 8
test ebx, ebx
jne 0x47a2c0
push dword [ebp - 0x300]
call fcn.00545b61
add esp, 4
push dword [ebp - 0x2f4]
call fcn.00545b61
add esp, 4
push dword [ebp - 0x2e4]
call fcn.00545b61
add esp, 4
test edi, edi
je 0x47a348
mov eax, dword [ebp - 0x31c]
nop dword [eax]
mov esi, dword [eax + edi*4 - 4]
dec edi
test esi, esi
je 0x47a344
push dword [esi]
call fcn.00545b61
add esp, 4
push 0xc
push esi
call fcn.00545b66
mov eax, dword [ebp - 0x31c]
add esp, 8
test edi, edi
jne 0x47a320
push dword [ebp - 0x31c]
call fcn.00545b61
add esp, 4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00545b50
mov esp, ebp
pop ebp
ret 0xc