Function at 0x404c40
Capabilities:
Check os version
Get common file path
Get file system object information

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x415e0b
push eax
mov eax, dword [esp + 0x14]
mov dword fs:[0], esp
sub esp, 0x2a4
push esi
mov esi, ecx
mov ecx, dword [esp + 0x2c0]
mov dword [esi + 0xe4], eax
lea eax, [esi + 0x20]
push eax
mov dword [esi + 0xe8], ecx
mov dword [eax], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x405218
mov edx, dword [esp + 0x2b8]
push ebx
push edi
mov dword [esi + 8], edx
call fcn.004087d0
mov edi, dword [esp + 0x2cc]
test edi, edi
je 0x404d00
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x404cb6
mov eax, dword [esi + 8]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0xc]
mov ebx, dword [sym.imp.USER32.dll_LoadImageA]
push 0
push 0
push 0
push 1
push edi
push eax
call ebx
test eax, eax
mov dword [esi + 0xd8], eax
je 0x404d44
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x404ce2
mov ecx, dword [esi + 8]
mov dword [esi + 0xc], ecx
mov eax, dword [esi + 0xc]
push 0
push 0x10
push 0x10
push 1
push edi
push eax
call ebx
test eax, eax
mov dword [esi + 0xdc], eax
jne 0x404d19
jmp 0x405070
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [esi + 0xdc], eax
mov dword [esi + 0xd8], eax
mov ecx, esi
call fcn.00403d90
mov eax, dword [esp + 0x2d0]
test eax, eax
je 0x404d50
mov edx, eax
shr edx, 0x10
test edx, edx
lea ecx, [esi + 0xb8]
push eax
jne 0x404d4b
call fcn.004038b0
test eax, eax
jne 0x404d50
xor eax, eax
jmp 0x405070
call fcn.004039c0
push 0x104
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x4001
push 0x160
lea ecx, [esp + 0x158]
push ecx
push 0
lea edx, [esp + 0x5c]
push edx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
test eax, eax
mov dword [esi + 0x10], eax
je 0x404d44
push ebp
call fcn.00404b80
mov eax, dword [eax + 8]
mov edi, dword [sym.imp.USER32.dll_CreateCursor]
push 0x41f450
push 0x41f4d0
push 0x20
push 0x20
push 0
push 5
push eax
lea ebx, [esi + 0x14]
call edi
mov dword [ebx], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x41f250
push 0x41f2d0
push 0x20
push 0x20
push 0xf
push 0xf
push eax
call edi
mov dword [esi + 0x18], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x41f350
push 0x41f3d0
push 0x20
push 0x20
push 0xf
push 0xf
push eax
call edi
mov dword [esi + 0x1c], eax
call fcn.00404b80
mov eax, dword [eax + 8]
mov edi, dword [sym.imp.USER32.dll_CreateIcon]
push 0x420cc0
push 0x41f550
push 1
push 1
push 0x20
push 0x20
push eax
lea ebp, [esi + 0x108]
call edi
mov dword [ebp], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x420d40
push 0x41f5d0
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x10c], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x420dc0
push 0x41f650
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x110], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x420e40
push 0x41f6d0
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x114], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x420f40
push 0x41f7d0
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x118], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x421040
push 0x41f8d0
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x11c], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x420ec0
push 0x41f750
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x120], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x420fc0
push 0x41f850
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x124], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x4210c0
push 0x41f950
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x128], eax
call fcn.00404b80
mov eax, dword [eax + 8]
push 0x421140
push 0x41f9d0
push 1
push 1
push 0x20
push 0x20
push eax
call edi
mov dword [esi + 0x12c], eax
xor eax, eax
jmp 0x404f60
cmp dword [ebx], 0
je 0x40506d
inc eax
add ebx, 4
cmp eax, 3
jl 0x404f60
xor eax, eax
mov ecx, ebp
cmp dword [ecx], 0
je 0x40506d
inc eax
add ecx, 4
cmp eax, 0xa
jl 0x404f76
push 0
push 0xa
push 1
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
test eax, eax
mov dword [esi + 0x130], eax
je 0x40506d
mov edi, dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
xor ebx, ebx
mov edi, edi
mov eax, dword [ebp]
mov ecx, dword [esi + 0x130]
push eax
push 0xffffffffffffffff
push ecx
call edi
test eax, eax
jl 0x40506d
inc ebx
add ebp, 4
cmp ebx, 0xa
jl 0x404fb0
xor edi, edi
push 5
mov dword [esp + 0x18], 0x30
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x3c], edi
call dword [sym.imp.USER32.dll_GetSysColorBrush]
push 0x7f00
push edi
mov dword [esp + 0x3c], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov ebp, dword [esp + 0x2c4]
mov ebx, dword [sym.imp.USER32.dll_RegisterClassExA]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0xd8]
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x20], 0x405790
mov dword [esp + 0x40], str.CWindowClass
mov dword [esp + 0x1c], 0xb
call ebx
test ax, ax
je 0x40506d
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x40], str.CMDIChildClass
mov dword [esp + 0x20], 0x408c60
call ebx
test ax, ax
jne 0x40508a
push ebp
push str.CWindowClass
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
pop ebp
pop edi
pop ebx
pop esi
mov ecx, dword [esp + 0x2a4]
mov dword fs:[0], ecx
add esp, 0x2b0
ret 0x20
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
or eax, 0x20000
push ecx
mov dword [esp + 0x40], 0x417bb8
mov dword [esp + 0x20], 0x405790
mov dword [esp + 0x1c], eax
call ebx
test ax, ax
jne 0x4050e5
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
and ecx, 0xfffdffff
push edx
mov dword [esp + 0x1c], ecx
call ebx
test ax, ax
jne 0x4050e5
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push ebp
push str.CWindowClass
call esi
push ebp
push str.CMDIChildClass
call esi
jmp 0x40506d
mov ebx, dword [esp + 0x2d8]
cmp ebx, edi
mov dword [esi + 0xe0], 1
je 0x4051c9
cmp dword [esp + 0x2dc], edi
mov dword [esp + 0x10], edi
jle 0x4051c9
jmp 0x405118
mov ebp, dword [esp + 0x2c4]
cmp dword [ebx + 8], edi
mov dword [ebx + 0x14], ebp
jne 0x405127
mov dword [ebx + 8], 0x405790
cmp dword [ebx + 0x18], edi
jne 0x405135
mov eax, dword [esi + 0xd8]
mov dword [ebx + 0x18], eax
cmp dword [ebx + 0x2c], edi
jne 0x405143
mov ecx, dword [esi + 0xd8]
mov dword [ebx + 0x2c], ecx
push ebx
call dword [sym.imp.USER32.dll_RegisterClassExA]
test ax, ax
je 0x40506d
mov edx, dword [ebx + 0x28]
push 0xffffffffffffffff
push edx
lea ecx, [esp + 0x4c]
call fcn.00403bb0
lea ebp, [esi + 0xec]
mov dword [esp + 0x2bc], edi
mov edi, dword [ebp + 4]
push 1
push 0xffffffffffffffff
lea eax, [edi + 1]
push eax
mov ecx, ebp
call fcn.00404280
test eax, eax
je 0x405198
mov edx, dword [ebp + 0x10]
lea eax, [esp + 0x44]
lea ecx, [edi + edi*2]
lea ecx, [edx + ecx*4]
push eax
call fcn.004034d0
lea ecx, [esp + 0x44]
mov dword [esp + 0x2bc], 0xffffffff
call fcn.00403430
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x2dc]
inc eax
add ebx, 0x30
xor edi, edi
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x405111
mov eax, dword [esp + 0x2e0]
cmp eax, edi
je 0x4051dc
push eax
mov ecx, esi
call fcn.00403d10
push 0x41fb80
push 1
push 1
push 8
push 8
call dword [sym.imp.GDI32.dll_CreateBitmap]
cmp eax, edi
mov dword [esi + 0x100], eax
je 0x40506d
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
xor ecx, ecx
cmp eax, edi
setne cl
mov dword [esi + 0x104], eax
mov eax, ecx
jmp 0x40506f
mov ecx, dword [esp + 0x2a8]
xor eax, eax
pop esi
mov dword fs:[0], ecx
add esp, 0x2b0
ret 0x20