Function at 0x414d30
Capabilities:
Get file system object information

Disassembly:
push ebp
lea ebp, [esp - 0x4bb0]
mov eax, 0x4bb0
call fcn.00502fa0
push 0xffffffffffffffff
push 0x51b3bb
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x5513d4]
xor eax, ebp
mov dword [ebp + 0x4bac], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1c], ebx
push 0x4111
push 0x2b4
lea eax, [ebp + 0x10f8]
mov byte [ebx + 8], 1
push eax
push 0x10
push str.dummy
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp + 0x10fc]
push 0x4113
push 0x2b4
mov dword [ebp - 0x20], eax
lea eax, [ebp + 0x10f8]
push eax
push 0x10
push str.dummy
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp + 0x10fc]
mov ecx, 0x57b208
mov dword [ebp - 0x24], eax
lea eax, [ebp + 0x2bac]
push 0x800
push eax
call fcn.00406070
push 0x4001
push 0x2b4
lea eax, [ebp + 0x10f8]
push eax
push 0
lea eax, [ebp + 0x2bac]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov esi, dword [ebp + 0x10fc]
push 0xffff0000
push 0
push 0x1101
push dword [ebx]
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
mov dword [ebp - 0x5c], 0x27
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
lea eax, [ebp + 0x2bac]
push eax
call fcn.00485280
push 0x800
mov dword [ebp - 0x4c], eax
lea eax, [ebp + 0x13ac]
push 0
push eax
mov dword [ebp - 0x48], 0x800
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0xffff0000
call fcn.00505530
add esp, 0xc
lea eax, [ebp - 0x64]
push eax
push 0
push 0x1132
push dword [ebx]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, eax
lea ecx, [ebp - 0x94]
mov dword [ebp + 0x13ac], ebx
call fcn.00443700
mov dword [ebp - 4], 0
mov dword [ebp + 0x1090], 0
mov dword [ebp + 0x1094], 0
mov dword [ebp + 0x1098], 0
mov dword [ebp + 0x109c], 0
xor eax, eax
mov dword [ebp + 0x10a0], 0
mov word [ebp + 0x1bac], ax
mov ecx, 0x57b208
push 1
lea eax, [ebp]
mov dword [ebp + 0x10a4], 0
push eax
call fcn.00406710
test al, al
je 0x414fdb
mov ebx, 1
push dword [ebp + 0x10a8]
call fcn.00474360
test al, al
jne 0x414f29
lea eax, [ebp]
push eax
call fcn.004852e0
cmp word [ebp], 0
je 0x414fbd
lea ecx, [ebp + 0x1bac]
lea eax, [ebp]
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x414f66
test dx, dx
je 0x414f62
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x414f66
add eax, 4
add ecx, 4
test dx, dx
jne 0x414f40
xor eax, eax
jmp 0x414f6b
sbb eax, eax
or eax, 1
test eax, eax
je 0x414fbd
push 0x800
lea eax, [ebp]
push eax
lea eax, [ebp + 0x1bac]
push eax
call fcn.0049ce90
xor edi, edi
cmp word [ebp], di
je 0x414fae
lea esi, [ebp]
nop
movzx eax, word [esi]
push eax
call fcn.00484d20
test al, al
je 0x414fa0
mov word [esi], bx
inc edi
lea esi, [ebp]
cmp word [esi + edi*2], 0
lea esi, [esi + edi*2]
jne 0x414f90
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x94]
call fcn.00443d40
push 1
lea eax, [ebp]
mov ecx, 0x57b208
push eax
call fcn.00406710
test al, al
jne 0x414f11
mov ebx, dword [ebp + 0x13ac]
push 1
lea ecx, [ebp - 0x94]
call fcn.00444160
mov eax, dword [ebp - 0x90]
xor esi, esi
test eax, eax
je 0x415036
lea edi, [esi + 0x5c]
jmp 0x415000
push esi
lea ecx, [ebp - 0x94]
call fcn.00443c30
xor ecx, ecx
mov edx, dword [eax]
cmp word [edx], cx
je 0x41502b
mov eax, edx
cmp word [eax], 1
jne 0x415020
mov word [eax], di
inc ecx
cmp word [edx + ecx*2], 0
lea eax, [edx + ecx*2]
jne 0x415017
mov eax, dword [ebp - 0x90]
inc esi
cmp esi, eax
jb 0x415000
xor ecx, ecx
mov dword [ebp - 0x14], ecx
test eax, eax
je 0x41521f
push ecx
lea ecx, [ebp - 0x94]
call fcn.00443c40
mov ebx, 0x52452c
mov edi, dword [eax]
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x41506c
dec eax
lea ecx, [ebp - 0x94]
push eax
call fcn.00443c40
mov ebx, dword [eax]
xor eax, eax
mov dword [ebp - 0x10], eax
test edi, edi
je 0x415206
lea esp, [esp]
test eax, eax
jle 0x4150c1
movzx eax, word [edi]
push eax
call fcn.00484d20
test al, al
je 0x4150a2
movzx eax, word [edi + 2]
add edi, 2
push eax
call fcn.00484d20
test al, al
jne 0x415091
movzx eax, word [ebx]
push eax
call fcn.00484d20
test al, al
je 0x4150c1
nop
movzx eax, word [ebx + 2]
add ebx, 2
push eax
call fcn.00484d20
test al, al
jne 0x4150b0
movzx eax, word [edi]
mov esi, edi
push eax
call fcn.00484d20
test al, al
je 0x4150d3
lea esi, [edi + 2]
movzx eax, word [esi]
test ax, ax
je 0x4150f9
jmp 0x4150e0
movzx eax, ax
push eax
call fcn.00484d20
test al, al
jne 0x4150f9
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4150e0
movzx eax, word [esi]
push eax
call fcn.00484d20
test al, al
je 0x41513a
mov eax, esi
sub eax, edi
and eax, 0xfffffffe
cmp eax, 4
jl 0x41513a
cmp word [esi - 2], 0x2e
jne 0x41513a
cmp word [esi - 4], 0x2e
jne 0x41513a
lea eax, [esi - 4]
cmp eax, edi
je 0x415135
movzx eax, word [esi - 6]
push eax
call fcn.00484d20
test al, al
je 0x41513a
add esi, 2
jmp 0x4150d3
sub esi, edi
sar esi, 1
cmp esi, 0x7ff
jae 0x415150
test esi, esi
je 0x415206
jmp 0x415155
mov esi, 0x7ff
push esi
lea eax, [ebp + 0x3bac]
push edi
push eax
call fcn.00509c27
lea eax, [esi + esi]
add esp, 0xc
mov dword [ebp - 0x18], eax
cmp eax, 0x1000
jae 0x41526a
xor ecx, ecx
mov word [ebp + eax + 0x3bac], cx
lea eax, [ebp + 0x3bac]
push esi
push eax
push ebx
call fcn.004a0630
mov esi, dword [ebp - 0x18]
test eax, eax
jne 0x4151ab
movzx eax, word [ebx + esi]
add ebx, esi
test ax, ax
je 0x4151f7
push eax
call fcn.00484d20
test al, al
jne 0x4151f7
mov ebx, dword [ebp - 0x10]
cmp ebx, 0x200
jae 0x415206
lea eax, [ebp + 0x3bac]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp + ebx*4 + 0x13ac]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x1c]
push 0
push 0x1132
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp + ebx*4 + 0x13b0], eax
mov ebx, 0x52452c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
add edi, esi
jne 0x415080
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, dword [ebp - 0x90]
jb 0x415043
mov ebx, dword [ebp + 0x13ac]
mov esi, dword [ebp - 0x1c]
push ebx
push 2
push 0x1102
push dword [esi]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esi + 4], ebx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.00443910
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x4bac]
xor ecx, ebp
call fcn.00502f8e
lea esp, [ebp + 0x4bb0]
pop ebp
ret
call fcn.00502eb2
int3