Function at 0x4070e0
Capabilities:
Get file system object information

Disassembly:
push 0xffffffffffffffff
push 0x54a6e1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2f4
push ebx
push ebp
push esi
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
push edi
push 0x4000
lea eax, [esp + 0x48]
push 0x160
push eax
mov ebx, ecx
push 0
push 0
mov dword [esp + 0x40], ebx
call esi
push 0x4001
lea ecx, [esp + 0x48]
push 0x160
push ecx
push 0
push 0
mov edi, eax
call esi
mov edx, dword [ebx + 0x780]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push edi
push 0
push 0x1003
push edx
mov esi, eax
call ebp
mov eax, dword [ebx + 0x780]
push esi
push 1
push 0x1003
push eax
call ebp
mov ecx, dword [ebx + 0x780]
push 0
push 0
push 0x1009
push ecx
call ebp
mov edx, dword [ebx + 0x780]
push 0
push 0
push 0x101c
push edx
call ebp
test eax, eax
jne 0x407173
push 0xffffffffffffffff
push 0xc8
lea edi, [ebx + 0x764]
push eax
push 0x596b10
push eax
mov ecx, edi
call fcn.0052991c
push 0xffffffffffffffff
push 0x64
push 0
push 0x596b40
push 1
mov ecx, edi
call fcn.0052991c
push 0xffffffffffffffff
push 0x64
push 0
push 0x596b08
push 2
mov ecx, edi
call fcn.0052991c
push 0xffffffffffffffff
push 0x73
push 0
push 0x596b34
push 3
mov ecx, edi
call fcn.0052991c
push 0xffffffffffffffff
push 0x23
push 0
push 0x596b78
push 4
mov ecx, edi
call fcn.0052991c
push 0x10
push 0
mov dword [esp + 0x28], 1
call fcn.00405470
add esp, 8
mov ecx, edi
push 0
push eax
push 0
push 0
push 0x596b50
push 0
push 3
call fcn.0052996f
push 1
push 0
push 0
push 0
push 0
push 4
push 0
push eax
mov ecx, edi
call fcn.005299f1
mov eax, dword [ebx + 0x780]
push 0
push 0
push 0xb
push eax
call ebp
mov eax, dword [esp + 0x318]
test eax, eax
je 0x407467
mov ecx, dword [esp + 0x314]
mov dword [esp + 0x18], 0
inc ecx
dec eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x28]
test eax, eax
mov dword [esp + 0x34], esi
jbe 0x407455
mov bl, byte [esi]
xor ebp, ebp
neg bl
sbb ebx, ebx
mov eax, dword [esp + 0x18]
and ebx, 0xffffff90
xor edx, edx
add ebx, 0x80
cmp ebx, 0x10
setne dl
cmp edx, eax
sete al
inc esi
mov byte [esp + 0x13], al
test al, al
je 0x40731d
push ebx
push esi
call fcn.00405470
mov edx, dword [esp + 0x28]
add esp, 8
mov ecx, edx
inc edx
push ebp
push eax
push ebp
push ebp
push esi
push ecx
push 3
mov ecx, edi
mov dword [esp + 0x3c], edx
call fcn.0052996f
mov ebp, eax
xor eax, eax
cmp ebx, 0x10
mov ecx, edi
sete al
push eax
push 0
push 0
push 0
push 0
push 4
push 0
push ebp
call fcn.005299f1
push 0x410
lea ecx, [esp + 0x1a8]
push 0x160
or bl, 0x80
push ecx
push ebx
push esi
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
lea edx, [esp + 0x2b4]
mov ecx, edi
push edx
push 2
push ebp
call fcn.00529a6a
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea esi, [esi + eax + 1]
mov al, byte [esp + 0x13]
test al, al
je 0x407434
mov ecx, dword [0x59a094]
mov eax, dword [esi + 4]
mov dword [esp + 0x14], ecx
mov edx, eax
mov dword [esp + 0x30c], 0
and edx, 0x3ff
neg edx
sbb edx, edx
neg edx
shr eax, 0xa
add edx, eax
lea eax, [esp + 0x14]
push edx
push str._10d_KB
push eax
call fcn.00528c17
mov ecx, dword [esp + 0x20]
add esp, 0xc
push ecx
push 1
push ebp
mov ecx, edi
call fcn.00529a6a
mov edx, dword [0x59a094]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], edx
push eax
lea eax, [esp + 0x20]
push 0x596b74
push eax
mov byte [esp + 0x318], 1
call fcn.00528c17
mov ecx, dword [esp + 0x28]
add esp, 0xc
push ecx
push 4
push ebp
mov ecx, edi
call fcn.00529a6a
mov edx, dword [esi + 0xc]
lea ecx, [esp + 0x3c]
mov dword [esp + 0x3c], edx
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
push ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x48], eax
call fcn.005293e5
lea edx, [esp + 0x38]
push str._Y__m__d__H:_M
push edx
lea ecx, [esp + 0x38]
call fcn.00529473
mov eax, dword [eax]
mov ecx, edi
push eax
push 3
push ebp
mov byte [esp + 0x318], 2
call fcn.00529a6a
lea ecx, [esp + 0x38]
mov byte [esp + 0x30c], 1
call fcn.0052fee7
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30c], 0
call fcn.0052fee7
lea ecx, [esp + 0x14]
mov dword [esp + 0x30c], 0xffffffff
call fcn.0052fee7
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
add esi, 0x14
mov eax, esi
sub eax, edx
cmp eax, ecx
jb 0x407280
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
inc eax
cmp eax, 2
mov dword [esp + 0x18], eax
jl 0x40726c
mov ecx, dword [ebx + 0x780]
push 0
push 1
push 0xb
push ecx
call ebp
push 1
mov ecx, edi
call fcn.0052f62d
mov edx, dword [ebx + 0x244]
push edx
push 0x596b54
push ebx
call fcn.004074c0
mov ecx, dword [esp + 0x310]
add esp, 0xc
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x300
ret 8