Function at 0x489f30
Capabilities:
Get file system object information

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4d9a39
push eax
mov dword fs:[0], esp
sub esp, 0x4d8
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov ecx, dword [esi + 0x9c]
cmp ecx, ebx
je 0x489f76
call fcn.004bafc0
mov eax, dword [esi + 0x98]
push 0xffffffffffffffff
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Remove]
jmp 0x48a030
push 0x20
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov dword [esp + 0x4f0], ebx
je 0x489f98
mov ecx, eax
call fcn.004baf00
jmp 0x489f9a
xor eax, eax
or ebp, 0xffffffff
lea ecx, [esp + 0x1c]
mov dword [esp + 0x4f0], ebp
mov dword [esi + 0x9c], eax
call fcn.004aeaa0
mov ecx, 0xad
xor eax, eax
lea edi, [esp + 0x234]
push ebx
rep stosd dword es:[edi], eax
push ebx
lea ecx, [esp + 0x24]
mov dword [esp + 0x4f8], 1
call fcn.004aeb70
mov edi, eax
cmp edi, ebx
je 0x48a01e
push 0x4009
lea ecx, [esp + 0x238]
push 0x2b4
push ecx
push ebx
push edi
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
push edi
lea ecx, [esp + 0x20]
mov ebx, eax
call fcn.004aedf0
test ebx, ebx
je 0x48a01e
push ebx
call dword [sym.imp.COMCTL32.dll_ImageList_Duplicate]
push ebp
push eax
mov dword [esi + 0x98], eax
call dword [sym.imp.COMCTL32.dll_ImageList_Remove]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x4f0], ebp
call fcn.004aeaf0
xor ebx, ebx
cmp dword [esi + 0x9c], ebx
je 0x48a19c
mov eax, dword [esi + 0x98]
cmp eax, ebx
je 0x48a19c
push 0xffffff
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_SetBkColor]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], ebx
call fcn.004c4d80
cmp eax, ebx
je 0x48a08e
lea edx, [esp + 0x18]
mov ecx, eax
push edx
push str.SEARCH_ICON
call fcn.004c5920
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x10]
push 1
push ecx
neg edx
push ebx
push edx
push eax
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov eax, dword [esp + 0x10]
cmp eax, ebx
jne 0x48a0b2
mov eax, dword [0x6dcf84]
push ebx
push 0x10
push 0x10
push 1
push 0xa9
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [esp + 0x10], eax
mov ecx, dword [esi + 0x98]
mov ebp, dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push eax
push 0xffffffffffffffff
push ecx
call ebp
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.USER32.dll_DestroyIcon]
xor ebx, ebx
mov dword [esp + 0x14], ebx
mov eax, dword [esi + 0x88]
test eax, eax
je 0x48a17b
mov ecx, dword [esi + 0x8c]
sub ecx, eax
mov eax, dword [esp + 0x14]
sar ecx, 5
cmp eax, ecx
jae 0x48a17b
mov edx, dword [esi + 0x88]
mov ecx, dword [ebx + edx + 0x1c]
lea eax, [ebx + edx]
cmp ecx, 1
je 0x48a111
cmp ecx, 2
jne 0x48a16a
mov dword [eax + 4], 0
mov eax, dword [esi + 0x88]
push 0
mov eax, dword [ebx + eax + 0x10]
push eax
call fcn.00433a60
mov edi, eax
add esp, 8
test edi, edi
jne 0x48a14d
mov ecx, dword [esi + 0x88]
push edi
mov eax, dword [ebx + ecx + 0x14]
push eax
call fcn.00433a60
mov edi, eax
add esp, 8
test edi, edi
je 0x48a16a
mov edx, dword [esi + 0x98]
push edi
push 0xffffffffffffffff
push edx
call ebp
mov ecx, dword [esi + 0x88]
push edi
mov dword [ebx + ecx + 4], eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov ecx, dword [esp + 0x14]
inc ecx
add ebx, 0x20
mov dword [esp + 0x14], ecx
jmp 0x48a0d5
mov ecx, dword [esi + 0x9c]
push 0x10
push 0x10
call fcn.004bb5e0
mov edx, dword [esi + 0x98]
mov ecx, dword [esi + 0x9c]
push edx
call fcn.004bb2b0
mov ecx, dword [esp + 0x4e8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x4e4
ret