Function at 0x24418a0
Capabilities:
Get file system object information

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x24c095c
push eax
mov dword fs:[0], esp
sub esp, 0x2cc
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
cmp ebp, ebx
push esi
push edi
je 0x2441a03
mov edi, dword [esp + 0x2ec]
cmp edi, ebx
je 0x2441a03
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
cmp edx, 1
mov dword [esp + 0x2e4], ebx
jne 0x2441c8c
push edi
call fcn.024adc6c
lea esi, [edi + eax*2]
add esp, 4
cmp esi, edi
jbe 0x2441918
mov ax, word [esi]
cmp ax, 0x5c
je 0x2441918
cmp ax, 0x2e
je 0x2441918
sub esi, 2
cmp esi, edi
ja 0x2441902
cmp word [esi], 0x2e
je 0x2441923
mov esi, 0x24e26a0
call dword [sym.imp.kernel32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x2441a73
push 0x24da3b8
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
cmp eax, ebx
je 0x24419fa
push 0x24db4c0
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov edx, eax
cmp edx, ebx
je 0x24419fa
push 0x410
xor eax, eax
mov dword [esp + 0x2c], ebx
mov ecx, 0xac
lea edi, [esp + 0x30]
push 0x2b4
rep stosd dword es:[edi], eax
lea eax, [esp + 0x30]
push eax
push 0x80
push esi
call edx
cmp eax, ebx
mov word [esp + 0x2da], bx
je 0x24419b0
cmp word [esp + 0x23c], bx
je 0x24419b0
lea edx, [esp + 0x23c]
lea ecx, [esp + 0x10]
call fcn.0247f900
jmp 0x2441cde
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [0x24e27c8]
mov edx, 0xa07e
mov byte [esp + 0x2e8], 1
call fcn.02481110
test eax, eax
je 0x24419f1
cmp word [esi], 0x2e
jne 0x24419e2
add esi, 2
mov edx, esi
lea ecx, [esp + 0x10]
call fcn.0247f900
test eax, eax
jne 0x2441a20
lea ecx, [esp + 0x18]
call fcn.024017d0
lea ecx, [esp + 0x10]
call fcn.024017d0
xor eax, eax
mov ecx, dword [esp + 0x2dc]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x2d8
ret 4
mov edx, 0x24db0a8
lea ecx, [esp + 0x10]
call fcn.0247f890
test eax, eax
jne 0x2441a3c
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebx
jmp 0x2441a59
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x10]
call fcn.0247f890
test eax, eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebx
jne 0x2441c5c
cmp eax, ebx
je 0x2441ce2
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x1c], ebx
jmp 0x2441ce2
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
lea edx, [esp + 0x20]
mov ecx, esi
mov byte [esp + 0x2e4], 2
call fcn.0247fbd0
test eax, eax
je 0x2441c25
push 0x410
push 0x160
xor eax, eax
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], ebx
mov ecx, 0x57
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x30]
push 0x80
push eax
call dword [sym.imp.shell32.dll_SHGetFileInfo]
cmp eax, ebx
mov byte [esp + 0x187], bl
je 0x2441af7
cmp byte [esp + 0x138], bl
je 0x2441af7
lea edx, [esp + 0x10]
lea ecx, [esp + 0x138]
call fcn.0247fc70
test eax, eax
jne 0x2441c54
jmp 0x2441c25
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [0x24e27c8]
mov edx, 0xa07e
mov byte [esp + 0x2e8], 3
call fcn.02481110
test eax, eax
jne 0x2441b5b
mov eax, dword [esp + 0x1c]
cmp eax, ebx
mov dword [esp + 0x18], ebx
je 0x2441b39
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov dword [esp + 0x20], ebx
je 0x2441ce2
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebx
jmp 0x2441ce2
cmp word [esi], 0x2e
jne 0x2441b64
add esi, 2
mov edx, esi
lea ecx, [esp + 0x10]
call fcn.0247f900
test eax, eax
jne 0x2441bae
mov eax, dword [esp + 0x1c]
cmp eax, ebx
mov dword [esp + 0x18], ebx
je 0x2441b8c
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov dword [esp + 0x20], ebx
je 0x2441ce2
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebx
jmp 0x2441ce2
mov edx, 0x24db0a8
lea ecx, [esp + 0x10]
call fcn.0247f890
test eax, eax
jne 0x2441bfb
mov eax, dword [esp + 0x1c]
cmp eax, ebx
mov dword [esp + 0x18], ebx
je 0x2441bd9
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov dword [esp + 0x20], ebx
je 0x2441ce2
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebx
jmp 0x2441ce2
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x10]
call fcn.0247f890
test eax, eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebx
jne 0x2441c47
cmp eax, ebx
je 0x2441c25
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov dword [esp + 0x20], ebx
je 0x2441ce2
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebx
jmp 0x2441ce2
cmp eax, ebx
je 0x2441c54
push eax
call fcn.024ad03a
add esp, 4
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], ebx
cmp eax, ebx
je 0x2441c69
push eax
call fcn.024ad03a
add esp, 4
lea ecx, [esp + 0x10]
test ecx, ecx
je 0x2441d00
mov eax, dword [ebp + 4]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [ebp], edx
mov dword [ebp + 4], ecx
mov dword [esp + 0x14], eax
jmp 0x2441d04
cmp edx, 7
ja case.0x2441c91.1
jmp dword [edx*4 + 0x2441d20]
mov edx, 0xa06a
jmp 0x2441cce
mov edx, 0xa06e
jmp 0x2441cce
mov edx, 0xa06f
jmp 0x2441cce
mov edx, 0xa071
jmp 0x2441cce
mov edx, 0xa070
jmp 0x2441cce
mov edx, 0xa072
jmp 0x2441cce
mov edx, 0xa073
jmp 0x2441cce
mov edx, 0xa07e
mov ecx, dword [0x24e27c8]
lea eax, [esp + 0x10]
push eax
call fcn.02481110
test eax, eax
jne 0x2441c69
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov dword [esp + 0x10], ebx
je 0x2441a03
push eax
call fcn.024ad03a
add esp, 4
jmp 0x2441a03
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov dword [esp + 0x10], ebx
je 0x2441d15
push eax
call fcn.024ad03a
add esp, 4
mov eax, 1
jmp 0x2441a05