Function at 0x10023300
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4f14
call fcn.1004e6c7
mov eax, dword [0x1001e268]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
push edi
push edi
push edi
push edi
push esi
lea eax, [ebp - 0x4f00]
push eax
mov dword [ebp - 0x4f08], edi
mov dword [ebp - 0x4f00], edi
call fcn.100394e1
cmp eax, edi
jge 0x1002336a
mov eax, dword [ebp - 0x4f00]
cmp eax, edi
je 0x10023350
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call fcn.1001fd7c
pop ecx
xor al, al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1004da72
leave
ret 8
push dword [ebp - 0x4f00]
call fcn.1001fe2e
test al, al
je 0x10023340
lea eax, [ebp - 0x4f08]
push eax
push dword [ebp - 0x4f00]
push esi
call fcn.100207c0
test al, al
je 0x10023875
lea ecx, [ebp - 0x4c38]
mov eax, 0x1046
mov dword [ebp - 0x4c44], ecx
mov esi, 0x10084540
push edi
lea ecx, [ebp - 0x4c48]
mov dword [ebp - 0x4c3c], eax
mov dword [ebp - 0x4c48], esi
mov dword [ebp - 0x4c40], eax
call fcn.1002314d
mov ebx, dword [ebp - 0x4f08]
push ebx
call fcn.1001ff70
test al, al
je 0x1002385c
lea eax, [ebp - 0x4c48]
push eax
push ecx
mov eax, esp
mov dword [eax], ebx
call fcn.1004f546
test al, al
je 0x1002385c
mov eax, dword [ebp - 0x4f00]
push 0x20
lea edx, [ebp - 0x4f14]
push edx
lea edx, [ebp - 0x3adc]
mov ebx, 0x823
push edx
mov dword [ebp - 0x4f14], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
test eax, eax
jge 0x10023454
lea eax, [ebp - 0x4c38]
cmp dword [ebp - 0x4c44], eax
je 0x10023439
push dword [ebp - 0x4c44]
call fcn.1001fe1b
mov eax, dword [ebp - 0x4f00]
cmp eax, edi
je 0x10023449
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x4f08]
jmp 0x10023351
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
push edi
push edi
push edi
lea edx, [ebp - 0x3adc]
push edx
push eax
call dword [ecx + 0x14]
test eax, eax
jl 0x10023420
lea eax, [ebp - 0x3adc]
push eax
call sub.MSOHEV.DLL_Ordinal_28
push dword [ebp - 0x4f08]
mov dword [ebp - 0x4f04], eax
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
push 0
mov edi, eax
push edi
push 0xa
push 0x10053408
call fcn.1004f035
test al, al
jne 0x100234e7
lea eax, [ebp - 0x4c38]
cmp dword [ebp - 0x4c44], eax
je 0x100234ba
push dword [ebp - 0x4c44]
call fcn.1001fe1b
mov eax, dword [ebp - 0x4f00]
test eax, eax
je 0x100234ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x4f04], 0
je 0x10023449
push dword [ebp - 0x4f04]
call sub.MSOHEV.DLL_Ordinal_5
jmp 0x10023449
mov dword [ebp - 0x3bf0], esi
lea ecx, [ebp - 0x3be0]
mov eax, 0x102
mov dword [ebp - 0x3bec], ecx
xor esi, esi
push esi
lea ecx, [ebp - 0x3bf0]
mov dword [ebp - 0x3be4], eax
mov dword [ebp - 0x3be8], eax
call fcn.1002314d
lea eax, [ebp - 0x3bf0]
push eax
push esi
push edi
push Ordinal_4
call fcn.1002317b
test al, al
jne 0x1002357c
lea eax, [ebp - 0x3be0]
cmp dword [ebp - 0x3bec], eax
je 0x10023548
push dword [ebp - 0x3bec]
call fcn.1001fe1b
lea eax, [ebp - 0x4c38]
cmp dword [ebp - 0x4c44], eax
je 0x10023561
push dword [ebp - 0x4c44]
call fcn.1001fe1b
mov eax, dword [ebp - 0x4f00]
cmp eax, esi
je 0x10023571
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x4f04], esi
jmp 0x100234d1
call fcn.10021033
test al, al
je 0x1002352f
mov eax, dword [ebp - 0x4f00]
lea edx, [ebp - 0x4f10]
push edx
lea edx, [ebp - 0x2a94]
push edx
mov dword [ebp - 0x4f0c], ebx
mov dword [ebp - 0x4f10], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x54]
test eax, eax
jl 0x1002352f
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
lea edx, [ebp - 0x4f0c]
push edx
lea edx, [ebp - 0x1a4c]
push edx
push eax
call dword [ecx + 0x64]
test eax, eax
jge 0x10023637
lea eax, [ebp - 0x3be0]
cmp dword [ebp - 0x3bec], eax
je 0x100235e6
push dword [ebp - 0x3bec]
call fcn.1001fe1b
lea eax, [ebp - 0x4c38]
cmp dword [ebp - 0x4c44], eax
je 0x100235ff
push dword [ebp - 0x4c44]
call fcn.1001fe1b
mov eax, dword [ebp - 0x4f00]
cmp eax, esi
je 0x1002360f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x4f04], esi
je 0x10023622
push dword [ebp - 0x4f04]
call sub.MSOHEV.DLL_Ordinal_5
xor bl, bl
push dword [ebp - 0x4f08]
call fcn.1001fd7c
pop ecx
mov al, bl
jmp 0x10023359
push 0x2b0
lea eax, [ebp - 0x4ef8]
push esi
push eax
mov dword [ebp - 0x4efc], esi
call sub.MSVCR90.dll_memset
add esp, 0xc
push 0x410
push 0x2b4
lea eax, [ebp - 0x4efc]
push eax
push 0x80
push edi
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [ebp - 0x1a4c]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, si
jne 0x10023678
sub eax, edx
sar eax, 1
cmp eax, 0x28
jbe 0x100236a5
push 0x10002bb4
lea eax, [ebp - 0x1a02]
push 0x7fe
push eax
call dword [sym.imp.MSVCR90.dll_wcscpy_s]
add esp, 0xc
cmp byte [ebp + 0xc], 0
jne 0x10023783
lea eax, [ebp - 0x2a94]
push eax
lea eax, [ebp - 0x4ce8]
push eax
lea eax, [ebp - 0x1a4c]
push eax
push 3
push 0x4000001
push dword [0x1008462c]
lea eax, [ebp - 0xa04]
push 0x400
push eax
call fcn.100369c0
add esp, 0x20
push pe_nt_image_headers32
lea eax, [ebp - 0x204]
push eax
push 0x4000000
push dword [0x1008462c]
call fcn.10036969
push 0x50134
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0xa04]
push eax
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
sub eax, 6
je 0x10023783
dec eax
lea eax, [ebp - 0x3be0]
jne 0x100235d3
cmp dword [ebp - 0x3bec], eax
je 0x10023740
push dword [ebp - 0x3bec]
call fcn.1001fe1b
lea eax, [ebp - 0x4c38]
cmp dword [ebp - 0x4c44], eax
je 0x10023759
push dword [ebp - 0x4c44]
call fcn.1001fe1b
mov eax, dword [ebp - 0x4f00]
cmp eax, esi
je 0x10023769
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x4f04], esi
je 0x1002377c
push dword [ebp - 0x4f04]
call sub.MSOHEV.DLL_Ordinal_5
mov bl, 1
jmp 0x10023624
mov edi, dword [ebp - 0x4f04]
push esi
push dword [ebp - 0x3bec]
push edi
call sub.MSOHEV.DLL_Ordinal_10
test eax, eax
jne 0x100237ea
lea eax, [ebp - 0x3be0]
cmp dword [ebp - 0x3bec], eax
je 0x100237b3
push dword [ebp - 0x3bec]
call fcn.1001fe1b
lea eax, [ebp - 0x4c38]
cmp dword [ebp - 0x4c44], eax
je 0x100237cc
push dword [ebp - 0x4c44]
call fcn.1001fe1b
mov eax, dword [ebp - 0x4f00]
cmp eax, esi
je 0x100237dc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, esi
je 0x10023622
push edi
jmp 0x1002361d
push 0x260
push edi
push 0xffffffffffffffff
call sub.MSOHEV.DLL_Ordinal_4
test eax, eax
jne 0x1002380c
push 0x240
push edi
push 0xffffffffffffffff
call sub.MSOHEV.DLL_Ordinal_4
test eax, eax
je 0x1002379a
lea eax, [ebp - 0x3be0]
cmp dword [ebp - 0x3bec], eax
je 0x10023825
push dword [ebp - 0x3bec]
call fcn.1001fe1b
lea eax, [ebp - 0x4c38]
cmp dword [ebp - 0x4c44], eax
je 0x1002383e
push dword [ebp - 0x4c44]
call fcn.1001fe1b
mov eax, dword [ebp - 0x4f00]
cmp eax, esi
je 0x1002384e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, esi
je 0x1002377c
push edi
jmp 0x10023777
lea eax, [ebp - 0x4c38]
cmp dword [ebp - 0x4c44], eax
je 0x10023875
push dword [ebp - 0x4c44]
call fcn.1001fe1b
mov eax, dword [ebp - 0x4f00]
cmp eax, edi
je 0x10023622
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10023622