Function at 0x404bf0
Capabilities:
Get common file path
Get file system object information

Disassembly:
push 0xffffffffffffffff
push 0x468078
mov eax, dword fs:[0]
push eax
sub esp, 0x3a0
mov eax, dword [0x4896a0]
xor eax, esp
mov dword [esp + 0x39c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4896a0]
xor eax, esp
push eax
lea eax, [esp + 0x3b4]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov eax, 0x64
push 0x7f
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], eax
lea eax, [esp + 0x335]
push ebx
push eax
mov dword [esp + 0x3c8], ebx
mov dword [esp + 0x3c], 0xc8
mov dword [esp + 0x44], 0x96
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], 1
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov byte [esp + 0x33c], bl
call fcn.00449a70
push 0x7f
lea ecx, [esp + 0x1c1]
push ebx
push ecx
mov byte [esp + 0x1c8], bl
call fcn.00449a70
push 0x7f
lea edx, [esp + 0x2cd]
push ebx
push edx
mov byte [esp + 0x2d4], bl
call fcn.00449a70
push 0x7f
lea eax, [esp + 0x259]
push ebx
push eax
mov byte [esp + 0x260], bl
call fcn.00449a70
add esp, 0x30
push 0x17
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x48c1b8
call fcn.0041aa20
mov eax, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push eax
lea edx, [esp + 0x334]
push edx
call edi
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404d0a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x18
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x48c1b8
call fcn.0041aa20
mov eax, dword [eax]
push eax
lea edx, [esp + 0x1b4]
push edx
call edi
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404d48
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x19
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x48c1b8
call fcn.0041aa20
mov eax, dword [eax]
push eax
lea edx, [esp + 0x2b4]
push edx
call edi
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404d86
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x1a
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x48c1b8
call fcn.0041aa20
mov eax, dword [eax]
push eax
lea edx, [esp + 0x234]
push edx
call edi
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404dc4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x330]
mov dword [esp + 0x20], ecx
lea edx, [esp + 0x1b0]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x3c8]
lea ecx, [esp + 0x230]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x3d0]
lea eax, [esp + 0x2b0]
mov dword [esi + 0x6c], edx
mov edx, dword [esp + 0x3d4]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x3cc]
mov dword [esi + 0x74], ecx
mov ecx, dword [esp + 0x3dc]
mov dword [esi + 0x78], edx
mov dword [esi + 0x70], eax
mov eax, dword [esp + 0x3d8]
lea edx, [esp + 0x3c4]
mov dword [esi + 0x80], ecx
lea ecx, [esi + 0x54]
push edx
mov dword [esi + 0x7c], eax
call fcn.004037f0
lea eax, [esp + 0x3c4]
lea ecx, [esi + 0x58]
push eax
call fcn.004037f0
mov ecx, esi
call fcn.0042febf
mov ecx, dword [eax + 0x20]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push 0x1200
push ecx
call ebp
mov dword [esp + 0x18], eax
xor edi, edi
mov edx, dword [esp + 0x18]
mov eax, dword [esp + edi*4 + 0x30]
mov ecx, dword [esp + edi*4 + 0x40]
push edx
mov edx, dword [esp + edi*4 + 0x24]
push eax
push ecx
push edx
push edi
mov ecx, esi
call fcn.0042e253
inc edi
cmp edi, 4
jl 0x404e6f
mov eax, dword [esi + 0x20]
lea ecx, [esp + 0x1c]
push ecx
push ebx
push eax
mov dword [esp + 0x28], ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
push 0x160
lea edx, [esp + 0x54]
push ebx
push edx
call fcn.00449a70
mov ecx, dword [esp + 0x28]
add esp, 0xc
push 0x4009
push 0x160
lea eax, [esp + 0x58]
push eax
push ebx
push ecx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
mov ecx, dword [esi + 0x20]
push eax
push 1
push 0x1003
push ecx
call ebp
mov edx, dword [esi + 0x20]
push 0x20
push ebx
push 0x1036
push edx
call ebp
mov edi, dword [esi + 0x54]
push ecx
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
sub edi, 0x10
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call edx
cmp dword [edi + 0xc], ebx
lea edx, [edi + 0xc]
jl 0x404f21
cmp eax, dword [edi]
jne 0x404f21
mov ebp, edi
mov eax, 1
lock xadd dword [edx], eax
jmp 0x404f56
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov ebp, eax
cmp ebp, ebx
jne 0x404f3a
call fcn.00402cb0
mov eax, dword [edi + 4]
mov dword [ebp + 4], eax
mov eax, dword [edi + 4]
inc eax
push eax
add edi, 0x10
push edi
push eax
lea ecx, [ebp + 0x10]
push ecx
call fcn.0044ac2f
add esp, 0x10
mov edx, dword [esp + 0x1c]
add ebp, 0x10
mov ecx, esi
mov dword [edx], ebp
call fcn.00404550
mov eax, dword [esp + 0x3c4]
add eax, 0xfffffff0
mov dword [esp + 0x3bc], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404f94
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x3b4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x39c]
xor ecx, esp
call fcn.00449ba6
add esp, 0x3ac
ret 0x1c