Function at 0x42f1f0
Capabilities:
Get file system object information
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x507d2e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x354
push ebx
push ebp
mov ebx, ecx
push esi
push edi
xor edi, edi
mov eax, dword [ebx + 0x6600]
mov dword [esp + 0x18], ebx
cmp eax, edi
mov dword [esp + 0x14], edi
je 0x42f22f
lea eax, [ebx + 0x658c]
mov dword [esp + 0x14], eax
cmp dword [ebx + 0x70b8], edi
je 0x42f241
lea ecx, [ebx + 0x7044]
mov dword [esp + 0x14], ecx
cmp dword [ebx + 0x7b70], edi
je 0x42f253
lea edx, [ebx + 0x7afc]
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x14]
cmp eax, edi
je 0x42f264
push edi
lea ecx, [eax + 0x70]
call fcn.004253b0
lea ecx, [ebx + 0x658c]
call fcn.00429880
lea ecx, [ebx + 0x7044]
call fcn.00429880
lea ecx, [ebx + 0x7afc]
call fcn.00429880
call fcn.00446450
xor ebp, ebp
add eax, 0xc8
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x1c]
mov eax, ebp
push eax
inc ebp
call fcn.0043dc80
mov esi, eax
cmp esi, edi
je 0x42f526
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov edx, dword [esi]
push 0xe77
mov ecx, esi
call dword [edx + 0x18]
test al, al
jne 0x42f2cd
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x42f51a
mov ecx, 0x58
xor eax, eax
lea edi, [esp + 0xa4]
rep stosd dword es:[edi], eax
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
push eax
lea ecx, [esp + 0x14]
call fcn.004e55b7
push 0x53c780
lea ecx, [esp + 0x14]
mov dword [esp + 0x370], 0
call fcn.004df577
test eax, eax
je 0x42f35f
push 0x53c774
lea ecx, [esp + 0x14]
call fcn.004df577
test eax, eax
je 0x42f35f
push 0x53c76c
lea ecx, [esp + 0x14]
call fcn.004df577
test eax, eax
je 0x42f35f
mov eax, dword [esp + 0x10]
push eax
call fcn.00436a40
add esp, 4
test eax, eax
jne 0x42f36d
mov ecx, dword [esi]
push esi
call dword [ecx + 8]
lea ecx, [esp + 0x10]
mov dword [esp + 0x36c], 0xffffffff
call fcn.004e5549
jmp 0x42f518
push 0x53d314
lea ecx, [esp + 0x14]
call fcn.004e56d2
mov eax, dword [esp + 0x10]
push 0x111
lea edx, [esp + 0xa8]
push 0x160
push edx
push 0x80
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xc]
push eax
lea ecx, [esp + 0x24]
call fcn.004e55b7
mov eax, dword [esi]
mov ecx, esi
mov byte [esp + 0x36c], 1
call dword [eax + 0x14]
push eax
lea ecx, [esp + 0x34]
call fcn.004e55b7
mov ecx, dword [eax]
mov edx, dword [ecx - 8]
lea ecx, [esp + 0x30]
test edx, edx
setne bl
call fcn.004e5549
test bl, bl
je 0x42f42f
push 0x53cd68
lea ecx, [esp + 0x38]
call fcn.004e55b7
mov edi, eax
mov edx, dword [esi]
mov ecx, esi
mov byte [esp + 0x36c], 2
call dword [edx + 0x14]
push eax
lea eax, [esp + 0x30]
push edi
push eax
call fcn.004e57de
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x370], 3
call fcn.004e5961
lea ecx, [esp + 0x2c]
mov byte [esp + 0x36c], 2
call fcn.004e5549
lea ecx, [esp + 0x34]
mov byte [esp + 0x36c], 1
call fcn.004e5549
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.004e52be
mov eax, dword [esp + 0x1c]
push 0
lea ecx, [eax + 0x7afc]
call fcn.00428ea0
push 0
mov edi, eax
push 0
push 0x8026
push 0x8026
mov ecx, edi
call fcn.00420820
push 4
call fcn.004e5c1a
mov ebx, eax
add esp, 4
mov dword [esp + 0x28], ebx
test ebx, ebx
mov byte [esp + 0x36c], 4
je 0x42f495
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
push eax
mov ecx, ebx
call fcn.004e55b7
jmp 0x42f497
xor eax, eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x24]
mov byte [esp + 0x36c], 1
lea ecx, [eax + 0xd0f4]
push edx
push 1
mov eax, dword [ecx + 8]
push eax
call fcn.00433d80
mov eax, dword [esp + 0x24]
mov ecx, esi
mov dword [edi + 0x94], eax
mov edx, dword [esi]
call dword [edx + 0xc]
push eax
mov ecx, edi
call fcn.004e9579
mov eax, dword [esp + 0xa4]
test eax, eax
je 0x42f4e9
push eax
mov ecx, edi
call fcn.0041efd0
lea ecx, [esp + 0x20]
mov byte [esp + 0x36c], 0
call fcn.004e5549
mov eax, dword [esi]
push esi
call dword [eax + 8]
lea ecx, [esp + 0x10]
mov dword [esp + 0x36c], 0xffffffff
call fcn.004e5549
mov ebx, dword [esp + 0x18]
xor edi, edi
cmp ebp, 0xffff
jl 0x42f295
call fcn.0043bcd0
mov ebp, eax
push 0x80
mov dword [esp + 0x28], ebp
call fcn.004e5c1a
add esp, 4
mov esi, eax
mov ecx, ebp
mov dword [esp + 0x28], esi
push 0x20
push esi
call fcn.0043c8d0
cmp eax, edi
jle 0x42f877
mov edi, esi
mov esi, dword [esp + 0x28]
mov dword [esp + 0x20], edi
mov dword [esp + 0x10], eax
mov ebx, 5
mov eax, dword [0x54a6a4]
xor ebp, ebp
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x60], ebp
mov dword [esp + 0x64], ebp
mov edx, dword [edi]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x28]
push edx
mov dword [esp + 0x374], ebx
call fcn.0043c960
test eax, eax
je 0x42f7fc
mov ecx, dword [edi]
lea eax, [esp + 0x80]
push eax
push ebp
push ecx
mov ecx, dword [esp + 0x30]
call fcn.0043c7e0
test eax, eax
je 0x42f7fc
mov eax, dword [esp + 0x64]
cmp eax, ebp
jne 0x42f614
lea ecx, [esp + 0x58]
mov dword [esp + 0x36c], 9
call fcn.004e5549
lea ecx, [esp + 0x4c]
mov byte [esp + 0x36c], 8
call fcn.004e5549
lea ecx, [esp + 0x48]
mov byte [esp + 0x36c], 7
call fcn.004e5549
mov byte [esp + 0x36c], 6
jmp 0x42f83a
dec eax
je 0x42f6c4
dec eax
je 0x42f676
dec eax
jne 0x42f715
lea edx, [esp + 0x40]
push 0x53cd68
lea eax, [esp + 0x38]
push edx
push eax
call fcn.004e57de
push ecx
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
push eax
push ecx
mov byte [esp + 0x37c], 0xc
call fcn.004e5778
mov eax, dword [esp + 0x1c]
push ebp
lea ecx, [eax + 0x7afc]
call fcn.00428ea0
mov esi, eax
mov byte [esp + 0x36c], bl
lea ecx, [esp + 0x34]
jmp 0x42f710
lea ecx, [esp + 0x40]
push 0x53cd68
lea edx, [esp + 0x30]
push ecx
push edx
call fcn.004e57de
push ecx
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
push eax
push ecx
mov byte [esp + 0x37c], 0xb
call fcn.004e5778
mov eax, dword [esp + 0x1c]
push ebp
lea ecx, [eax + 0x7044]
call fcn.00428ea0
mov esi, eax
mov byte [esp + 0x36c], bl
lea ecx, [esp + 0x2c]
jmp 0x42f710
lea ecx, [esp + 0x40]
push 0x53cd68
lea edx, [esp + 0x34]
push ecx
push edx
call fcn.004e57de
push ecx
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
push eax
push ecx
mov byte [esp + 0x37c], 0xa
call fcn.004e5778
mov eax, dword [esp + 0x1c]
push ebp
lea ecx, [eax + 0x658c]
call fcn.00428ea0
mov esi, eax
mov byte [esp + 0x36c], bl
lea ecx, [esp + 0x30]
call fcn.004e5549
mov eax, dword [esp + 0x60]
mov dword [esp + 0x1c], ebp
cmp eax, ebp
je 0x42f735
cmp dword [eax + 4], ebp
je 0x42f735
push 0x10
push eax
mov ecx, esi
call fcn.00420ea0
jmp 0x42f7e2
mov eax, dword [esp + 0x44]
cmp dword [eax - 8], ebp
jne 0x42f77d
mov edx, dword [esp + 0x48]
mov ecx, 0x58
xor eax, eax
lea edi, [esp + 0xa4]
rep stosd dword es:[edi], eax
push 0x111
lea ecx, [esp + 0xa8]
push 0x160
push ecx
push 0x80
push edx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x1c], eax
jmp 0x42f795
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x1c]
push 1
push ecx
push ebp
push edx
push eax
call dword [sym.imp.SHELL32.dll_ExtractIconExA]
mov eax, dword [esp + 0x1c]
cmp eax, ebp
jne 0x42f7da
mov ecx, 0x58
xor eax, eax
lea edi, [esp + 0x204]
push 0x111
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x4c]
lea eax, [esp + 0x208]
push 0x160
push eax
push 0x80
push ecx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
mov eax, dword [esp + 0x204]
cmp eax, ebp
mov dword [esp + 0x1c], eax
je 0x42f7e2
push eax
mov ecx, esi
call fcn.0041efd0
mov edx, dword [esp + 0x80]
mov ecx, esi
push edx
push ebp
push ebp
push 0x8001
call fcn.00420820
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x58]
mov dword [esp + 0x36c], 0x10
call fcn.004e5549
lea ecx, [esp + 0x4c]
mov byte [esp + 0x36c], 0xf
call fcn.004e5549
lea ecx, [esp + 0x48]
mov byte [esp + 0x36c], 0xe
call fcn.004e5549
mov byte [esp + 0x36c], 0xd
lea ecx, [esp + 0x44]
call fcn.004e5549
lea ecx, [esp + 0x40]
mov dword [esp + 0x36c], 0xffffffff
call fcn.004e5549
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x10], eax
jne 0x42f569
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x28]
xor edi, edi
push esi
call fcn.004e5c43
mov eax, dword [ebx + 0x7034]
xor ebp, ebp
add esp, 4
cmp eax, ebp
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], edi
je 0x42f8dc
mov ecx, dword [ebx + 0x7038]
sub ecx, eax
test ecx, 0xfffffffc
jle 0x42f8dc
lea eax, [ebx + 0x658c]
cmp eax, ebp
je 0x42f8cf
lea eax, [ebx + 0x65fc]
mov edi, 1
mov dword [esp + 0x68], eax
jmp 0x42f8f4
xor eax, eax
mov edi, 1
mov dword [esp + 0x68], eax
jmp 0x42f8f4
mov eax, dword [esp + 0x14]
lea ecx, [ebx + 0x658c]
cmp eax, ecx
jne 0x42f8ee
mov dword [esp + 0x14], ebp
push ebp
call fcn.004e96be
mov eax, dword [ebx + 0x7aec]
cmp eax, ebp
je 0x42f92e
mov edx, dword [ebx + 0x7af0]
sub edx, eax
test edx, 0xfffffffc
jle 0x42f92e
lea eax, [ebx + 0x7044]
cmp eax, ebp
je 0x42f925
lea eax, [ebx + 0x70b4]
mov dword [esp + edi*4 + 0x68], eax
inc edi
jmp 0x42f946
xor eax, eax
mov dword [esp + edi*4 + 0x68], eax
inc edi
jmp 0x42f946
mov eax, dword [esp + 0x14]
lea ecx, [ebx + 0x7044]
cmp eax, ecx
jne 0x42f940
mov dword [esp + 0x14], ebp
push ebp
call fcn.004e96be
mov eax, dword [ebx + 0x85a4]
cmp eax, ebp
je 0x42f980
mov ecx, dword [ebx + 0x85a8]
sub ecx, eax
test ecx, 0xfffffffc
jle 0x42f980
lea eax, [ebx + 0x7afc]
cmp eax, ebp
je 0x42f977
lea eax, [ebx + 0x7b6c]
mov dword [esp + edi*4 + 0x68], eax
inc edi
jmp 0x42f998
xor eax, eax
mov dword [esp + edi*4 + 0x68], eax
inc edi
jmp 0x42f998
mov eax, dword [esp + 0x14]
lea ecx, [ebx + 0x7afc]
cmp eax, ecx
jne 0x42f992
mov dword [esp + 0x14], ebp
push ebp
call fcn.004e96be
lea eax, [edi - 1]
cmp eax, ebp
jle 0x42f9bc
lea esi, [esp + 0x68]
mov ebx, eax
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push edx
call fcn.00425420
add esi, 4
dec ebx
jne 0x42f9a5
mov ebx, dword [esp + 0x18]
xor ebp, ebp
lea eax, [ebx + 0xad28]
test eax, eax
je 0x42f9ce
lea eax, [ebx + 0xadc4]
jmp 0x42f9d0
xor eax, eax
mov ecx, dword [esp + edi*4 + 0x64]
push eax
call fcn.00425420
mov esi, 0xe
lea ecx, [ebx + 0x658c]
sub esi, edi
push esi
call fcn.0042a630
push esi
lea ecx, [ebx + 0x7afc]
call fcn.0042a630
push esi
lea ecx, [ebx + 0x7044]
call fcn.0042a630
lea ecx, [ebx + 0x89a0]
test ecx, ecx
je 0x42fa17
lea eax, [ebx + 0x8a3c]
jmp 0x42fa19
xor eax, eax
push eax
lea ecx, [ebx + 0xadc4]
call fcn.00425420
mov ecx, dword [esp + 0x14]
cmp ecx, ebp
je 0x42fa34
push 1
call fcn.0042a310
mov ecx, dword [esp + 0x364]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x360
ret