Function at 0x4047ea
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x834
mov eax, dword [0x4f8004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x522d94]
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0x7f4], eax
xor eax, eax
mov dword [ebp - 0x7ec], edx
push str.DirListData
push ebx
mov dword [ebp - 0x7e4], eax
mov dword [ebp - 0x7d4], eax
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0x7dc], eax
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7d8], eax
call dword [sym.imp.USER32.dll_GetPropW]
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov edi, eax
push 0x4011
push 0x2b4
lea eax, [ebp - 0x4c8]
push eax
push 0x10
push str.Icon
call esi
mov eax, dword [ebp - 0x4c4]
push 0x4011
push 0x2b4
mov dword [edi + 0x218], eax
lea eax, [ebp - 0x4c8]
push eax
push 0x80
push str.Icon
call esi
mov eax, dword [ebp - 0x4c4]
mov ecx, ebx
mov dword [edi + 0x21c], eax
call fcn.0040476e
mov eax, dword [ebp - 0x7ec]
test eax, eax
je 0x404b65
xor ecx, ecx
cmp word [eax], cx
je 0x404b65
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push eax
lea eax, [edi + 0x10]
push eax
call esi
xor eax, eax
push eax
push eax
push 0xb
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
push eax
push eax
push 0x1009
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
push ecx
lea ecx, [ebp - 0x7d0]
call fcn.00404d50
mov edx, dword [ebp - 0x7ec]
xor eax, eax
or dword [ebp - 0x81c], 0xffffffff
or dword [ebp - 0x814], 0xffffffff
pop ecx
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0x828], eax
lea eax, [ebp - 0x210]
push edx
push eax
mov dword [ebp - 0x830], 7
mov dword [ebp - 0x818], 0x104
call esi
lea eax, [ebp - 0x7e4]
push eax
call dword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
xor esi, esi
test eax, eax
jne 0x404ac1
mov eax, dword [ebp - 0x7e4]
lea edx, [ebp - 0x7d8]
push edx
lea edx, [ebp - 0x7e8]
push edx
mov ecx, dword [eax]
lea edx, [ebp - 0x7f0]
push edx
lea edx, [ebp - 0x210]
push edx
push esi
push ebx
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x404ab5
mov eax, dword [ebp - 0x7e4]
lea edx, [ebp - 0x7d4]
push edx
push 0x4b19e0
push esi
push dword [ebp - 0x7e8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
test eax, eax
jne 0x404ab5
mov eax, dword [ebp - 0x7d4]
lea edx, [ebp - 0x7e0]
push edx
push 0xe0
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
test eax, eax
jne 0x404ab5
jmp 0x404a8b
mov eax, dword [ebp - 0x7d4]
lea edx, [ebp - 0x7d8]
push edx
lea edx, [ebp - 0x7dc]
mov dword [ebp - 0x7d8], 0x60000000
push edx
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x24]
test dword [ebp - 0x7d8], 0x40000000
je 0x404a8b
mov edx, dword [ebp - 0x7dc]
lea eax, [ebp - 0x7d0]
mov ecx, dword [ebp - 0x7d4]
push eax
call fcn.00404dd3
pop ecx
test eax, eax
je 0x404a8b
push 8
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov ecx, dword [ebp - 0x7dc]
mov esi, eax
mov dword [esi], ecx
mov ecx, dword [ebp - 0x7d4]
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0x7d4]
push ecx
mov edx, dword [ecx]
call dword [edx + 4]
test dword [ebp - 0x7d8], 0x20000000
mov dword [ebp - 0x810], esi
je 0x404a63
mov eax, dword [edi + 0x218]
jmp 0x404a69
mov eax, dword [edi + 0x21c]
mov dword [ebp - 0x814], eax
xor esi, esi
lea eax, [ebp - 0x830]
push eax
push esi
push 0x104d
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
inc dword [ebp - 0x82c]
mov eax, dword [ebp - 0x7e0]
lea edx, [ebp - 0x7dc]
push esi
push edx
push 1
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
test eax, eax
je 0x4049cf
mov eax, dword [ebp - 0x7e0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x7e4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [edi + 8], 0
je 0x404ad0
push dword [edi + 8]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [edi + 0xc]
test eax, eax
je 0x404ae1
mov ecx, dword [eax]
test ecx, ecx
je 0x404ae1
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x7e8]
mov edx, esi
test ecx, ecx
jne 0x404aef
jmp 0x404b0c
movzx eax, word [ecx]
test ax, ax
je 0x404b0c
mov esi, eax
movzx eax, si
add ecx, eax
add edx, eax
movzx eax, word [ecx]
mov esi, eax
test ax, ax
jne 0x404af9
xor esi, esi
push 0xfffe
mov dword [edi + 4], edx
mov eax, dword [ebp - 0x7e8]
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x7d4]
push 0x101e
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x7f4]
push ebx
mov dword [edi + 0x220], eax
call esi
push 0x404c08
xor edi, edi
push edi
push 0x1030
push ebx
call esi
push edi
push 1
push 0xb
push ebx
call esi
push edi
push edi
push 0x1004
push ebx
call esi
jmp 0x404b68
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00486c63
leave
ret