Function at 0x467e34
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe64
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004058a0
xor eax, eax
push ebp
push 0x468229
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x4681f6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00437180
test al, al
jne 0x467e90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x468200
xor eax, eax
push ebp
push 0x4681e5
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0xc], eax
push 0x12
push 0x12
push 0
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.00436010
mov cl, 7
mov edx, 0x12
mov eax, 0x12
call fcn.0043c8d0
mov dword [ebp - 8], eax
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 4]
call fcn.00437234
mov eax, dword [ebp - 0x19c]
lea edx, [ebp - 0x18]
call fcn.00409124
mov eax, dword [ebp - 0x18]
mov edx, 0x468244
call fcn.00405848
jne 0x467fb0
mov eax, dword [ebp - 8]
call fcn.0043cd70
call fcn.00436c78
mov edx, 0xff00ff
call fcn.00436538
mov eax, dword [ebp - 8]
call fcn.0043cd70
lea edx, [ebp - 0x38]
call fcn.00436ae4
xor edx, edx
xor eax, eax
call fcn.0043c828
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
call fcn.0043cf58
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
cmp eax, dword [ebp - 0x30]
jge 0x467f5f
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x30]
sub edx, dword [eax + 0x14]
sar edx, 1
jns 0x467f50
adc edx, 0
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
cmp eax, dword [ebp - 0x2c]
jge 0x467f89
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
sub edx, dword [eax + 0x10]
sar edx, 1
jns 0x467f7a
adc edx, 0
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 8]
call fcn.0043cd70
call fcn.00436d18
mov edx, eax
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0xc]
call fcn.0043cc40
lea eax, [ebp - 8]
call fcn.00466b84
jmp 0x4681c9
mov eax, dword [ebp - 8]
call fcn.0043cd70
call fcn.00436c78
xor edx, edx
call fcn.00436538
mov eax, dword [ebp - 8]
call fcn.0043cd70
lea edx, [ebp - 0x38]
call fcn.00436ae4
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 1
jle 0x467ff1
push 0xc8
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_WaitForSingleObject
push pe_nt_image_headers32
push 0x160
lea eax, [ebp - 0x198]
push eax
push 0
mov eax, dword [ebp - 4]
call fcn.004058b0
push eax
call sub.shell32.dll_SHGetFileInfoA
test eax, eax
je 0x4681bc
mov eax, dword [ebp - 0x18]
mov edx, 0x468254
call fcn.00405848
je 0x468036
cmp dword [ebp - 0x198], 0
je 0x4681c9
cmp dword [ebp - 0x198], 0
je 0x46804a
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x14], eax
jmp 0x468065
push 0x10
push 0x10
push 0x10
push 1
mov eax, dword [ebp - 4]
call fcn.004058b0
push eax
push 0
call sub.user32.dll_LoadImageA
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4681bc
xor eax, eax
push ebp
push 0x4681b5
push dword fs:[eax]
mov dword fs:[eax], esp
push 3
push 0
push 0
push 0x10
push 0x10
mov eax, dword [ebp - 0x14]
push eax
push 1
push 1
mov eax, dword [ebp - 8]
call fcn.0043cd70
call fcn.00436d18
push eax
call sub.user32.dll_DrawIconEx
mov cl, 7
mov edx, 0x12
mov eax, 0x12
call fcn.0043c8d0
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x468197
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.0043cd70
call fcn.00436c78
mov edx, 0xffffff
call fcn.00436538
mov eax, dword [ebp - 0x10]
call fcn.0043cd70
lea edx, [ebp - 0x38]
call fcn.00436ae4
push 1
push 0
push 0
push 0x10
push 0x10
mov eax, dword [ebp - 0x14]
push eax
push 1
push 1
mov eax, dword [ebp - 0x10]
call fcn.0043cd70
call fcn.00436d18
push eax
call sub.user32.dll_DrawIconEx
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0043dfcc
cmp eax, 0xffffff
jne 0x468141
push 0
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
call fcn.0043e2b0
jmp 0x46816f
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
call fcn.0043dfcc
mov dword [ebp - 0x28], eax
test byte [ebp - 0x25], 0xff
jne 0x46816f
mov eax, dword [ebp - 0x28]
or eax, 0xff000000
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
call fcn.0043e2b0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x12
jne 0x46811a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x12
jne 0x468115
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46819e
mov eax, dword [ebp - 0x10]
call fcn.0040440c
ret
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 6
jne 0x467fdb
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4681ec
cmp dword [ebp - 0xc], 0
je 0x4681e4
lea eax, [ebp - 0xc]
call fcn.0040f1f4
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x468230
lea eax, [ebp - 0x19c]
call fcn.00405420
lea eax, [ebp - 0x18]
call fcn.00405420
lea eax, [ebp - 4]
call fcn.00405420
ret