Function at 0x4309ab
Capabilities:
Get file attributes

Disassembly:
push 0x49c
mov eax, 0x49fa66
call fcn.00481da3
mov eax, dword [ebp + 8]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp + 0x1c]
push 9
pop ecx
mov dword [ebp - 0x438], eax
xor eax, eax
xor esi, esi
lea edi, [ebp - 0x470]
push 0x30
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x4a4]
push esi
push eax
mov dword [ebp - 0x434], esi
mov dword [ebp - 0x4a8], esi
call fcn.0047e7d0
add esp, 0xc
push 0x206
lea eax, [ebp - 0x21a]
push esi
push eax
mov word [ebp - 0x21c], si
call fcn.0047e7d0
add esp, 0xc
cmp byte [ebp + 0x18], 0
mov dword [ebp - 0x474], 0x2f
mov dword [ebp - 0x468], 0xf000
je 0x430a5e
movzx eax, byte [ebp + 0x18]
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x474], 0x6f
push 8
call fcn.0045d815
cmp eax, esi
pop ecx
mov dword [ebp - 0x440], eax
jne 0x430a77
xor eax, eax
jmp 0x430e3f
push 0x24
call fcn.0045d815
cmp eax, esi
pop ecx
je 0x430a9f
mov dword [eax + 0x18], 7
mov dword [eax + 0x14], esi
mov word [eax + 4], si
mov dword [eax + 0x1c], vtable.CPidl.0
mov dword [eax + 0x20], esi
mov ebx, eax
jmp 0x430aa1
xor ebx, ebx
cmp ebx, esi
je 0x430a70
mov edi, dword [ebp - 0x444]
mov esi, dword [ebp - 0x42c]
lea eax, [ebp - 0x21c]
push eax
push 0x8000
call fcn.0042e41b
test eax, eax
pop ecx
pop ecx
jne 0x430ad0
push ebx
call fcn.00430e47
jmp 0x430a70
mov esi, dword [ebp - 0x430]
test byte [esi + 0x78], 2
je 0x430b0e
mov eax, dword [ebp - 0x42c]
cmp dword [esi + 0x54], eax
je 0x430b0e
lea eax, [esi + 0x2b0]
cmp dword [eax + 0x18], 8
jb 0x430af8
mov eax, dword [eax + 4]
jmp 0x430afb
add eax, 4
lea ecx, [ebp - 0x21c]
push ecx
push eax
call fcn.0047eb9e
test eax, eax
pop ecx
pop ecx
je 0x430ac8
lea eax, [ebp - 0x21c]
push 0x4b994c
push eax
call fcn.0047bbb4
test eax, eax
pop ecx
pop ecx
je 0x430b64
lea eax, [ebp - 0x21c]
push 0x4b9954
push eax
call fcn.0047bbb4
test eax, eax
pop ecx
pop ecx
je 0x430b64
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
jne 0x430b64
push ebx
call fcn.00430e47
push dword [ebp - 0x440]
call fcn.0045d845
pop ecx
jmp 0x430a70
cmp dword [ebp - 0x438], 0xffff0000
jne 0x430b8f
lea eax, [ebp - 0x21c]
push eax
call fcn.0047ba0d
pop ecx
lea ecx, [ebp - 0x21c]
push ecx
add esi, 0x30c
call fcn.0042b9e5
push edi
push dword [ebp - 0x428]
call fcn.0042e5ab
pop ecx
pop ecx
push eax
lea esi, [ebx + 0x1c]
call fcn.0042f5c7
lea eax, [ebp - 0x21c]
push eax
call fcn.0047ba0d
pop ecx
lea ecx, [ebp - 0x21c]
push ecx
mov esi, ebx
call fcn.0042b9e5
mov esi, dword [ebp - 0x42c]
lea eax, [ebp - 0x21c]
push eax
push 0
call fcn.0042e41b
test eax, eax
pop ecx
pop ecx
je 0x430c8e
xor esi, esi
cmp dword [ebp - 0x428], esi
jne 0x430c8e
lea eax, [ebp - 0x21c]
push str.Documents_and_Settings
push eax
call fcn.0047bbb4
test eax, eax
pop ecx
pop ecx
jne 0x430c8e
push 0x206
lea eax, [ebp - 0x422]
push esi
push eax
mov dword [ebp - 0x434], 1
mov word [ebp - 0x424], si
call fcn.0047e7d0
add esp, 0xc
mov eax, edi
call fcn.0042e6e6
push eax
call fcn.0042e62a
pop ecx
mov dword [ebp - method.CPidl.virtual_0], vtable.CPidl.0
mov dword [ebp - 0x444], eax
lea ecx, [ebp - 0x424]
push ecx
mov dword [ebp - 4], esi
push esi
mov esi, dword [ebp - 0x42c]
mov edi, eax
call fcn.0042e41b
test eax, eax
pop ecx
pop ecx
je 0x430c7f
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.0040464f
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0042f5aa
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x464], eax
mov eax, dword [ebx + 0x20]
lea esi, [ebp - 0x474]
mov dword [ebp - 0x460], 0x104
call fcn.0042e532
test eax, eax
je 0x430ccf
cmp dword [ebx + 0x18], 8
jb 0x430cc1
mov eax, dword [ebx + 4]
jmp 0x430cc4
lea eax, [ebx + 4]
lea esi, [ebp - 0x474]
call fcn.0042e4fa
mov eax, dword [ebp - 0x440]
push 0xa
pop ecx
push dword [ebp - 0x428]
mov dword [eax], 1
mov dword [eax + 4], ebx
mov dword [ebp - 0x450], eax
lea esi, [ebp - 0x474]
lea edi, [ebp - 0x4a0]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x430]
mov eax, dword [esi + 0x308]
push eax
call fcn.0042e56a
neg al
pop ecx
pop ecx
sbb eax, eax
add eax, 0xffff0003
xor edi, edi
cmp dword [ebp - 0x434], edi
mov dword [ebp - 0x4a4], eax
je 0x430d3e
xor eax, eax
cmp dword [ebp - 0x428], edi
setne al
add eax, 0xffff0002
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x438]
cmp eax, 0xffff0000
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x428], edi
je 0x430dee
push eax
push esi
call fcn.004312c6
cmp eax, edi
mov dword [ebp - 0x428], eax
jne 0x430ddf
push 0x206
lea eax, [ebp - 0x422]
push edi
push eax
mov word [ebp - 0x424], di
call fcn.0047e7d0
mov eax, dword [ebx + 0x20]
add esp, 0xc
lea ecx, [ebp - 0x424]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
jl 0x430dee
lea eax, [ebp - 0x424]
push eax
call fcn.0047ba0d
test eax, eax
pop ecx
ja 0x430de4
lea eax, [esi + 0x2e8]
cmp dword [eax + 0x18], 8
jb 0x430dbf
mov eax, dword [eax + 4]
jmp 0x430dc2
add eax, 4
cmp dword [ebx + 0x18], 8
jb 0x430dcd
mov ecx, dword [ebx + 4]
jmp 0x430dd0
lea ecx, [ebx + 4]
push eax
push ecx
call fcn.0047eb9e
test eax, eax
pop ecx
pop ecx
jne 0x430dee
jmp 0x430de4
cmp eax, 2
je 0x430dee
mov dword [ebp - 0x428], 1
lea eax, [ebp - 0x4a8]
push eax
push edi
push 0x1132
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
lea eax, [ebp - 0x43c]
mov dword [ebp - 0x43c], ebx
push eax
lea eax, [esi + 0x2a4]
lea ebx, [ebp - 0x44c]
mov dword [ebp - 0x438], edi
call fcn.00432384
mov esi, dword [ebp - 0x428]
mov ecx, dword [ebp - 0x430]
mov eax, edi
call fcn.004312a1
mov eax, edi
call fcn.00481e26
ret 0x18