Function at 0x5ab6fd
Capabilities:
Get file system object information
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x30c
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x38], esi
call fcn.005aab87
push 1
push dword [esi + 0x60]
call fcn.0045e2a2
mov eax, dword [esi + 4]
and dword [esi + 0x70], 0
push 0x4011
mov byte [esi + 0x75], 0
mov ebp, dword [eax + 0xc]
lea eax, [esp + 0x6c]
push 0x2b4
push eax
push 0x80
push 0x6d7170
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [esp + 0x320]
xor edi, edi
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x44], eax
mov dword [esp + 0x2c], edi
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
mov ecx, 0xa0
cdq
idiv ecx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x28], eax
imul eax, ebp
push eax
call fcn.0045e2af
mov ebx, eax
xor edx, edx
mov eax, dword [esp + 0x320]
mov dword [esp + 0x3c], edx
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
cdq
idiv dword [esp + 0x48]
test eax, eax
je 0x5abaeb
xor eax, eax
mov dword [esp + 0x40], eax
add eax, ecx
mov dword [esp + 0x34], eax
lea esi, [eax + 0x38]
cmp dword [esi + 0x14], 8
mov dword [esp + 0x2c], esi
jb 0x5ab7be
mov esi, dword [esi]
mov dword [esp + 0x2c], esi
push 0x5c
push esi
call fcn.0066e097
or dword [esp + 0x20], 0xffffffff
xor edx, edx
and dword [esp + 0x24], edx
pop ecx
pop ecx
mov ecx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x20], ecx
mov eax, esi
mov dword [esp + 0x14], eax
test ecx, ecx
je 0x5ab99a
lea esi, [ebx + 0x14]
jmp 0x5ab7f4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x1c], edi
je 0x5ab8a9
cmp dword [esi + 0x14], 8
mov edx, dword [esi - 4]
mov dword [esp + 0x4c], edx
mov edx, esi
jb 0x5ab80f
mov edx, dword [esi]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push edx
mov dword [esp + 0x3c], ecx
call fcn.0067b56b
add esp, 0xc
neg eax
sbb al, al
inc al
cmp dword [esp + 0x4c], 0
jne 0x5ab87a
test al, al
je 0x5ab87a
mov eax, dword [esp + 0x30]
cmp dword [esi + 0x10], eax
jne 0x5ab87a
mov ecx, dword [esp + 0x34]
push 0x5c
mov eax, dword [ecx + 8]
add dword [esi + 0x1c], eax
mov eax, dword [ecx + 0xc]
adc dword [esi + 0x20], eax
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
add ecx, 2
push ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ecx
call fcn.0066e097
mov edx, dword [esp + 0x18]
pop ecx
pop ecx
mov ecx, eax
inc edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x10], edx
jmp 0x5ab882
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
inc dword [esp + 0x1c]
add esi, ebp
test ecx, ecx
jne 0x5ab7f0
mov esi, dword [esp + 0x14]
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x18]
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], esi
jmp 0x5ab99a
mov esi, dword [esp + 0x18]
lea ecx, [edi - 1]
imul ecx, ebp
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x28]
add ecx, ebp
mov dword [esp + 0x30], edi
inc edi
mov dword [esp + 0x1c], ecx
cmp edi, eax
jbe 0x5ab8e8
add eax, eax
mov dword [esp + 0x28], eax
imul eax, ebp
push eax
push ebx
call fcn.0045e35c
mov ecx, dword [esp + 0x1c]
mov ebx, eax
push ebp
lea esi, [ecx + ebx]
push 0
push esi
call fcn.0066f070
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov eax, dword [esp + 0x20]
sub eax, ecx
sar eax, 1
push eax
push ecx
lea ecx, [esp + 0x58]
call fcn.005aa7eb
push eax
lea ecx, [esi + 0x14]
call fcn.00427394
lea ecx, [esp + 0x50]
call fcn.0042756c
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x18]
mov dword [esi], edx
mov byte [esp + 0x27], 0
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dl, byte [esp + 0x27]
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0x34], ecx
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x3c], eax
mov eax, dword [ecx + 0x78]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x34]
cmp dl, byte [eax + 0x68]
sbb eax, eax
and eax, 2
cmp dword [esp + 0x18], 0xffffffff
mov dword [esi + 8], eax
jne 0x5ab969
inc dword [ecx + 0x70]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x20]
add eax, 2
push 0x5c
push eax
mov dword [esp + 0x1c], eax
call fcn.0066e097
inc dword [esp + 0x18]
mov dword [esp + 0x28], eax
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c]
test eax, eax
jne 0x5ab8bf
mov eax, dword [esp + 0x28]
inc edi
cmp edi, eax
jbe 0x5ab9b5
add eax, eax
mov dword [esp + 0x28], eax
imul eax, ebp
push eax
push ebx
call fcn.0045e35c
mov ebx, eax
lea esi, [edi - 1]
imul esi, ebp
push ebp
push 0
add esi, ebx
push esi
call fcn.0066f070
add esp, 0xc
cmp dword [esp + 0x18], 0xffffffff
jne 0x5ab9d7
mov eax, dword [esp + 0x38]
inc dword [eax + 0x70]
mov ecx, dword [esp + 0x14]
and dword [esp + 0x50], 0
and dword [esp + 0x60], 0
mov dword [esp + 0x64], 7
test ecx, ecx
je 0x5ab9fb
push ecx
lea ecx, [esp + 0x54]
call fcn.00427613
lea eax, [esp + 0x50]
push eax
lea ecx, [esi + 0x14]
call fcn.00427394
mov eax, dword [esp + 0x64]
cmp eax, 8
jb 0x5aba4b
mov ecx, dword [esp + 0x50]
lea eax, [eax*2 + 2]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], ecx
cmp eax, 0x1000
jb 0x5aba42
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x18]
push eax
call fcn.0042741e
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0066bb0a
pop ecx
pop ecx
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x18]
mov dword [esi], eax
push 0x4011
mov eax, dword [edx + 8]
mov ecx, dword [edx + 0xc]
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x14]
mov dword [esi + 0x3c], eax
xor al, al
mov dword [esi + 0x34], ecx
mov dword [esi + 0x10], edx
cmp al, byte [edx + 0x68]
push 0x2b4
sbb eax, eax
and eax, 2
mov dword [esi + 8], eax
lea eax, [esp + 0x70]
push eax
push 0x80
push dword [esp + 0x3c]
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
mov eax, dword [esp + 0x6c]
jne 0x5abaa2
mov eax, dword [esp + 0x44]
mov dword [esi + 0xc], eax
mov esi, dword [esp + 0x38]
cmp byte [esi + 0x75], 0
jne 0x5ababa
cmp dword [esp + 0x10], 0
je 0x5ababa
mov byte [esi + 0x75], 1
mov eax, dword [esp + 0x320]
inc dword [esp + 0x3c]
add dword [esp + 0x40], 0xa0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
cdq
idiv dword [esp + 0x48]
cmp dword [esp + 0x3c], eax
mov eax, dword [esp + 0x40]
jne 0x5ab7a5
mov dword [esp + 0x2c], edi
mov ecx, dword [esp + 0x28]
lea eax, [ebp + 4]
imul eax, edi
imul ecx, ebp
cmp ecx, eax
jae 0x5abb05
push eax
push ebx
call fcn.0045e35c
mov ebx, eax
mov eax, edi
imul eax, ebp
add eax, ebx
lea ecx, [eax + edi*4]
mov dword [esp + 0x44], ecx
test edi, edi
je 0x5abb4d
mov esi, dword [esp + 0x44]
mov ecx, ebx
mov dword [esp + 0x30], edi
mov edx, dword [ecx]
cmp edx, 0xffffffff
jne 0x5abb32
and dword [ecx], 0
mov dword [eax], ecx
add eax, 4
jmp 0x5abb3e
imul edx, ebp
add edx, ebx
sub esi, 4
mov dword [ecx], edx
mov dword [esi], ecx
add ecx, ebp
sub edi, 1
jne 0x5abb21
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x328]
mov dword [esi + 0x60], ebx
mov dword [esi + 0x18], edi
mov dword [eax], edi
mov eax, dword [esp + 0x324]
pop edi
pop esi
pop ebp
mov dword [eax], ebx
pop ebx
add esp, 0x30c
ret 0xc