Function at 0x494090
Capabilities:
Get file system object information

Disassembly:
push 0xffffffffffffffff
push 0x4feba6
mov eax, dword fs:[0]
push eax
mov eax, 0x5b88
call fcn.004e6b50
mov eax, dword [0x519bc0]
xor eax, esp
mov dword [esp + 0x5b84], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x519bc0]
xor eax, esp
push eax
lea eax, [esp + 0x5b9c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x5bac]
inc dword [0x53e3dc]
mov esi, ecx
mov dword [esp + 0x60], eax
xor ebx, ebx
mov dword [esp + 0x5ba4], ebx
mov ecx, dword [esi + 0x28]
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0xffffffffffffffff
push 0x100c
push ecx
call ebp
push 1
mov ecx, 0x53f488
mov dword [esp + 0x28], eax
call fcn.004a3840
push 0x1c4
call fcn.00463400
push eax
mov ecx, 0x53f488
call fcn.004a38b0
mov edx, dword [esi + 0x28]
push ebx
push ebx
push 0xb
push edx
call ebp
mov ecx, esi
call fcn.004925b0
push 0x4011
push 0x2b4
lea eax, [esp + 0x1660]
push eax
push ebx
push 0x505eac
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [esi + 0x28]
push eax
push 1
push 0x1003
push ecx
call ebp
mov ecx, 0x549cb0
call fcn.00478dc0
lea edx, [esp + 0xcc]
push edx
mov ecx, 0x54be08
call fcn.0047b1c0
cmp byte [esp + 0x14c], bl
je 0x4941b8
cmp byte [esp + 0x2b8], bl
je 0x4941b8
cmp byte [esp + 0x207], bl
jne 0x4941b8
mov eax, dword [esp + 0x29c]
cmp eax, 3
je 0x4941aa
cmp eax, 2
jne 0x4941bf
mov eax, 4
mov dword [esp + 0x29c], eax
jmp 0x4941bf
mov eax, dword [esp + 0x29c]
sub eax, 1
mov dword [esp + 0xac], 4
mov ecx, 0x73
je 0x4941ea
sub eax, 2
je 0x4941e3
sub eax, 1
jne 0x4941ef
lea ecx, [eax + 0x76]
jmp 0x4941ef
mov ecx, 0x75
jmp 0x4941ef
mov ecx, 0x74
push ecx
call fcn.00463400
mov ecx, dword [esi + 0x28]
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xac]
push eax
push 5
push 0x1060
push ecx
call ebp
push 0x800
lea edx, [esp + 0x4b9c]
push edx
mov ecx, 0x54be08
call fcn.0047b190
push 0x800
lea eax, [esp + 0x2b9c]
push eax
mov ecx, 0x54be08
call fcn.0047b170
push ebx
lea ecx, [esp + 0x4b9c]
push ecx
lea edx, [esp + 0x2ba0]
push edx
mov ecx, esi
call fcn.00489a60
lea eax, [esp + 0x2b98]
push eax
mov ecx, esi
call fcn.0048fdd0
lea eax, [esp + 0x2b98]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x494270
sub eax, edx
sar eax, 1
mov edi, eax
je 0x494284
inc edi
lea ecx, [esp + 0x2b98]
push ecx
mov ecx, 0x549ca0
call fcn.004a8a20
push 1
push str.AllowUppercase
push str.FileList
mov dword [esp + 0x28], ebx
call fcn.0049c560
push ebx
push str.FlatView
test eax, eax
push str.FileList
setne byte [esp + 0x23]
call fcn.0049c560
push ebx
push str.ShowSeconds
test eax, eax
push str.FileList
setne byte [esp + 0x24]
call fcn.0049c560
test eax, eax
setne dl
xor eax, eax
push 0x1f4
lea ecx, [esp + 0xa0]
mov byte [esp + 0x24], dl
mov dword [esp + 0x1350], ebx
mov dword [esp + 0x1354], ebx
mov word [esp + 0x3b9c], ax
call fcn.004b49a0
mov byte [esp + 0x5ba4], 1
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x2c0]
push edx
mov ecx, 0x54be08
call fcn.0047ae90
test al, al
je 0x4948ca
lea eax, [esp + edi*2 + 0x2bc]
mov dword [esp + 0x64], eax
test byte [esp + 0x1c], 0x1f
jne 0x494350
lea ecx, [esp + 0x9c]
call fcn.004b4130
mov ebx, dword [esp + 0x1354]
mov edi, dword [esp + 0x64]
shr ebx, 4
and bl, 1
cmp byte [esp + 0x18], 0
mov byte [esp + 0x16], bl
je 0x49437b
lea ecx, [esp + 0x2bc]
push ecx
call fcn.004534c0
mov edi, eax
test bl, bl
je 0x494410
cmp byte [esp + 0x18], 0
jne 0x494410
test byte [esp + 0x1394], 0x20
je 0x4944c8
lea ecx, [esp + 0x3b98]
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4943cb
test dx, dx
je 0x4943c7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4943cb
add eax, 4
add ecx, 4
test dx, dx
jne 0x4943a5
xor eax, eax
jmp 0x4943d0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4948ab
lea edx, [esp + 0x3b98]
mov eax, edi
sub edx, edi
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4943e3
push 1
push 0
lea edx, [esp + 0x2c4]
push edx
mov ecx, 0x569928
call fcn.0048fa80
test al, al
jne 0x4948ab
mov edx, dword [esp + 0x1394]
mov ebx, dword [esp + 0x1c]
xor eax, eax
mov dword [esp + 0x68], 7
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x84], 0xffffffff
mov dword [esp + 0x70], 0
mov word [esp + 0x29f4], ax
test dl, 1
je 0x494472
lea eax, [esp + 0x29f4]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x494453
mov ecx, dword [0x505ea4]
mov dword [eax], ecx
mov cx, word [0x505ea8]
mov word [eax + 4], cx
and edx, 6
mov eax, edx
je 0x4945dc
sub eax, 2
je 0x4945aa
sub eax, 2
je 0x494575
sub eax, 2
jne 0x4945dc
lea eax, [esp + 0x29f4]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4944a2
mov edx, dword [0x505e98]
mov ecx, dword [0x505e9c]
mov dword [eax], edx
mov dx, word [0x505ea0]
jmp 0x4945d5
push 1
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x2c4]
push ecx
mov ecx, 0x569928
call fcn.0048fa80
test al, al
je 0x494410
mov edx, dword [esp + 0x134c]
or edx, dword [esp + 0x1350]
je 0x4948ab
mov eax, dword [esp + 0x28]
push eax
mov ecx, 0x569928
call fcn.0048faf0
mov ecx, dword [esp + 0x134c]
mov dword [eax + 0x20], ecx
mov edx, dword [esp + 0x1350]
mov dword [eax + 0x24], edx
mov ecx, dword [esp + 0x1354]
push 0x64
mov dword [eax + 0x18], ecx
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x2a0c]
push edx
push eax
lea ecx, [esp + 0x1358]
push ecx
mov ecx, esi
call fcn.00491ce0
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x2c]
push eax
lea edx, [esp + 0x2a0c]
push ecx
mov dword [esp + 0x48], edx
mov edx, dword [esi + 0x28]
push 0x1074
push edx
mov dword [esp + 0x44], 4
call ebp
jmp 0x4948ab
lea eax, [esp + 0x29f4]
add eax, 0xfffffffe
nop
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x494580
mov ecx, dword [0x505e8c]
mov edx, dword [0x505e90]
mov dword [eax], ecx
mov cx, word [0x505e94]
mov dword [eax + 4], edx
mov word [eax + 8], cx
jmp 0x4945dc
lea eax, [esp + 0x29f4]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4945b4
mov edx, dword [0x505e80]
mov ecx, dword [0x505e84]
mov dword [eax], edx
mov dx, word [0x505e88]
mov dword [eax + 4], ecx
mov word [eax + 8], dx
lea eax, [esp + 0x2bc]
inc ebx
push eax
mov ecx, 0x569928
mov dword [esp + 0x139c], ebx
call fcn.0048f8f0
lea ecx, [esp + 0x2bc]
push ecx
mov ecx, esi
mov dword [esp + 0x8c], eax
call fcn.0048fdd0
cmp byte [esp + 0x17], 0
jne 0x494619
push edi
call fcn.00497480
lea eax, [esp + 0x2bc]
mov edx, edi
sub edx, eax
sar edx, 1
mov ecx, 0x800
sub ecx, edx
push ecx
push edi
call fcn.004b5310
cmp word [esp + 0x29f4], 0
mov dword [esp + 0x7c], edi
je 0x49465d
push 0x800
lea edx, [esp + 0x29f8]
push edx
lea eax, [esp + 0x2c4]
push eax
call fcn.00469530
mov edx, dword [esi + 0x28]
lea ecx, [esp + 0x68]
push ecx
push 0
push 0x104d
push edx
call ebp
cmp byte [esp + 0x16], 0
mov edi, eax
jne 0x49475e
mov eax, dword [esp + 0x133c]
mov ecx, dword [esp + 0x1340]
cmp eax, 0x7fffffff
jne 0x4946b9
cmp ecx, 0x7fffffff
jne 0x4946b9
xor eax, eax
jmp 0x4946a0
movzx ecx, word [eax + 0x505e7c]
mov word [esp + eax + 0x2a08], cx
add eax, 2
test cx, cx
jne 0x4946a0
jmp 0x4946ca
push 0x32
lea edx, [esp + 0x2a0c]
push edx
push ecx
push eax
call fcn.004a3bb0
mov edx, dword [esi + 0x28]
lea ecx, [esp + 0x2c]
push ecx
push edi
push 0x1074
lea eax, [esp + 0x2a14]
push edx
mov dword [esp + 0x44], 1
mov dword [esp + 0x50], eax
call ebp
mov eax, dword [esp + 0x1344]
mov ecx, dword [esp + 0x1348]
cmp eax, 0x7fffffff
jne 0x494729
cmp ecx, 0x7fffffff
jne 0x494729
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [eax + 0x505e7c]
mov word [esp + eax + 0x2a08], cx
add eax, 2
test cx, cx
jne 0x494710
jmp 0x49473a
push 0x32
lea edx, [esp + 0x2a0c]
push edx
push ecx
push eax
call fcn.004a3bb0
mov edx, dword [esi + 0x28]
lea ecx, [esp + 0x2c]
push ecx
push edi
push 0x1074
lea eax, [esp + 0x2a14]
push edx
mov dword [esp + 0x44], 2
mov dword [esp + 0x50], eax
call ebp
mov eax, dword [esp + 0x134c]
or eax, dword [esp + 0x1350]
je 0x49478e
mov edx, dword [esp + 0x20]
push 0x64
lea ecx, [esp + 0x2ad4]
push ecx
push edx
lea eax, [esp + 0x1358]
push eax
mov ecx, esi
call fcn.00491ce0
jmp 0x4947a7
xor eax, eax
movzx ecx, word [eax + 0x501a20]
mov word [esp + eax + 0x2ad0], cx
add eax, 2
test cx, cx
jne 0x494790
mov eax, dword [esi + 0x28]
lea edx, [esp + 0x2c]
push edx
push edi
push 0x1074
lea ecx, [esp + 0x2adc]
push eax
mov dword [esp + 0x44], 4
mov dword [esp + 0x50], ecx
call ebp
mov eax, dword [esp + 0x1360]
test eax, eax
je 0x494862
cmp byte [esp + 0x16], 0
jne 0x494862
cmp dword [esp + 0x1384], 0
jne 0x494862
cmp eax, 3
jne 0x494811
push 0x41
lea ecx, [esp + 0x2a0c]
push ecx
push 0
push 0x20
lea edx, [esp + 0x1374]
push edx
call fcn.00469310
jmp 0x49483e
cmp eax, 1
mov eax, str._04X
je 0x494820
mov eax, str._08X
mov ecx, dword [esp + 0x1364]
push ecx
push eax
lea edx, [esp + 0x2a10]
push edx
mov edx, 0x41
call fcn.004a63e0
add esp, 0xc
mov edx, dword [esi + 0x28]
lea ecx, [esp + 0x2c]
push ecx
push edi
push 0x1074
lea eax, [esp + 0x2a14]
push edx
mov dword [esp + 0x44], 5
mov dword [esp + 0x50], eax
call ebp
cmp byte [esp + 0x18], 0
je 0x4948a7
push 0x800
lea eax, [esp + 0x1910]
push eax
lea ecx, [esp + 0x2c4]
push ecx
call fcn.00453720
mov ecx, dword [esi + 0x28]
lea eax, [esp + 0x2c]
push eax
push edi
push 0x1074
lea edx, [esp + 0x1918]
push ecx
mov dword [esp + 0x44], 6
mov dword [esp + 0x50], edx
call ebp
mov dword [esp + 0x1c], ebx
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x2c0]
push eax
mov ecx, 0x54be08
call fcn.0047ae90
test al, al
jne 0x49433d
push 0x4411
push 0x2b4
lea ecx, [esp + 0x13ac]
push ecx
push 0x10
push 0x505e5c
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov edi, eax
mov dword [esp + 0x68], 5
test edi, edi
je 0x4948ff
mov dword [esp + 0x68], 7
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x13a8]
push 0x10e8
lea ecx, [esp + 0x1910]
push 0
push ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x90], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x88], 0x502530
call fcn.004e7df0
add esp, 0xc
xor eax, eax
movzx ecx, word [eax + 0x502530]
mov word [esp + eax + 0x190c], cx
add eax, 2
test cx, cx
jne 0x494941
lea edx, [esp + 0x190c]
push edx
mov ecx, 0x569928
mov dword [esp + 0x29a8], 0x10
call fcn.0048f8f0
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x68]
push eax
push 0
push 0x104d
push ecx
call ebp
test edi, edi
mov edi, 3
je 0x4949b7
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x15bc]
push eax
mov dword [esp + 0x48], edx
mov edx, dword [esi + 0x28]
push 0x1074
push edx
mov dword [esp + 0x44], edi
call ebp
mov ecx, 0x569928
call fcn.0048fa50
mov ecx, esi
call fcn.00492940
mov eax, dword [esp + 0x60]
test eax, eax
je 0x494a11
cmp word [eax], 0
je 0x494a11
push eax
mov ecx, esi
call fcn.00493f30
test al, al
jne 0x494a2b
mov eax, dword [esi + 0x28]
push 0
push 0
push 0x1004
push eax
call ebp
mov ecx, dword [esp + 0x24]
test eax, eax
jle 0x494a00
cmp ecx, eax
jl 0x494a00
lea ecx, [eax - 1]
mov eax, dword [esi + 0x28]
lea edx, [esp + 0x2c]
push edx
push ecx
push 0x102b
push eax
jmp 0x494a21
mov edx, dword [esi + 0x28]
lea ecx, [esp + 0x2c]
push ecx
push 0
push 0x102b
push edx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], edi
call ebp
mov eax, dword [esi + 0x28]
push 0
push 1
push 0xb
push eax
call ebp
mov ecx, dword [esi + 0x28]
push 0
push 0
push 0x102a
push ecx
call ebp
push 0
mov ecx, 0x53f488
call fcn.004a38b0
mov ecx, esi
call fcn.00493240
mov ecx, esi
call fcn.00490340
mov ecx, 0x54f7cc
call fcn.004a6070
push 0
mov ecx, 0x53f488
call fcn.004a3840
mov byte [esp + 0x5ba4], 0
lea ecx, [esp + 0x9c]
call fcn.004b4170
mov dword [esp + 0x5ba4], 0xffffffff
cmp dword [0x53e3dc], 0
jle 0x494aa4
dec dword [0x53e3dc]
mov ecx, dword [esp + 0x5b9c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x5b84]
xor ecx, esp
call fcn.004e6b3a
add esp, 0x5b94
ret 4