Function at 0x40df98
Capabilities:
Get file attributes
Get file system object information

Disassembly:
mov eax, 0x4af714
call fcn.0047cccc
sub esp, 0x1b8
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x58], edi
mov eax, dword [ebp + 8]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
xor ebx, ebx
mov eax, dword [eax - 8]
mov dword [ebp - 4], ebx
cmp eax, ebx
jne 0x40e02c
push ebx
push ebx
push 0x1042
push dword [edi + 0x840]
call esi
cmp eax, 0xffffffff
mov dword [ebp - 0x10], eax
je 0x40e01a
lea ecx, [edi + 0x824]
push eax
call fcn.0049233a
cmp eax, 1
jne 0x40e02c
push ebx
lea eax, [ebp - 0x10]
push dword [ebp - 0x10]
lea ecx, [edi + 0x824]
push eax
call fcn.00492295
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.00497fed
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.00497eb4
jmp 0x40e02c
lea eax, [edi + 0x668]
lea ecx, [edi + 0x728]
push eax
call fcn.00494f14
push 0x4d7b5c
push dword [ebp + 8]
call fcn.0047d6e8
pop ecx
test eax, eax
pop ecx
jne 0x40e079
push ecx
lea eax, [edi + 0x668]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call fcn.00497c29
lea eax, [ebp - 0x10]
mov ecx, edi
push eax
call fcn.0040ec52
push eax
lea ecx, [edi + 0x668]
mov byte [ebp - 4], 2
call fcn.00497fed
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.00497eb4
jmp 0x40e0de
push 0x4d7ac4
push dword [ebp + 8]
call fcn.0047d6e8
pop ecx
test eax, eax
pop ecx
je 0x40e0de
lea eax, [ebp + 8]
lea ecx, [edi + 0x668]
push eax
call fcn.004982cc
lea eax, [ebp - 0x10]
push 1
push eax
lea ecx, [edi + 0x668]
call fcn.004909fb
mov eax, dword [eax]
push 0x4d7ac8
push eax
call fcn.0047d6e8
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x10]
setne byte [ebp - 0x11]
call fcn.00497eb4
cmp byte [ebp - 0x11], bl
je 0x40e0de
push 0x4d7ac8
lea ecx, [edi + 0x668]
call fcn.00498290
mov eax, dword [edi + 0x668]
cmp dword [eax - 8], ebx
jne 0x40e0f5
mov ecx, edi
call fcn.0040dc8f
jmp 0x40e3f7
push eax
push ebx
push 0x14a
push dword [edi + 0x744]
call esi
push ebx
push ebx
push 0x14e
push dword [edi + 0x744]
call esi
push ebx
push ebx
push 0x1009
push dword [edi + 0x840]
call esi
push ebx
push ebx
push 0x101c
push dword [edi + 0x840]
call esi
cmp eax, ebx
jne 0x40e122
push 0xffffffffffffffff
push 0xc8
lea esi, [edi + 0x824]
push ebx
push 0x4d7b24
push ebx
mov ecx, esi
call fcn.0049211c
push 0xffffffffffffffff
push 0x64
push ebx
push 0x4d7b54
push 1
mov ecx, esi
call fcn.0049211c
push 0xffffffffffffffff
push 0x64
push ebx
push 0x4d7b1c
push 2
mov ecx, esi
call fcn.0049211c
push 0xffffffffffffffff
push 0x73
push ebx
push 0x4d7b48
push 3
mov ecx, esi
call fcn.0049211c
push 0x10
push ebx
mov dword [ebp - 0x20], 1
call fcn.0040d76c
pop ecx
pop ecx
push ebx
push eax
push ebx
push ebx
push 0x4d7b5c
push ebx
push 3
mov ecx, esi
call fcn.0049216f
push 1
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
mov ecx, esi
call fcn.004921f1
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x44]
call fcn.00423f34
lea eax, [edi + 0x668]
push 0x4d7b44
push eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 3
call fcn.00498149
mov eax, dword [eax]
push ebx
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 4
call fcn.00423ff7
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 3
call fcn.00497eb4
cmp dword [ebp - 0x10], ebx
je 0x40e3cb
lea ecx, [ebp - 0x44]
call fcn.00424217
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x10], eax
call fcn.004241de
test eax, eax
jne 0x40e201
mov eax, dword [ebp - 0x44]
push 0x10
lea ecx, [ebp - 0x44]
call dword [eax + 0x38]
xor ecx, ecx
cmp eax, ebx
sete cl
cmp ecx, dword [ebp - 0x1c]
sete al
cmp al, bl
je 0x40e201
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x44]
push eax
call fcn.004242e6
mov edi, dword [eax]
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.0042440f
mov eax, dword [eax]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 6
call fcn.0042440f
mov eax, dword [eax]
push edi
mov byte [ebp - 4], 7
mov dword [ebp - 0x50], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push eax
push dword [ebp - 0x18]
call fcn.0040d76c
pop ecx
pop ecx
mov ecx, dword [ebp - 0x20]
push ebx
push eax
inc dword [ebp - 0x20]
push ebx
push ebx
push dword [ebp - 0x50]
push ecx
push 3
mov ecx, esi
call fcn.0049216f
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 6
call fcn.00497eb4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 5
call fcn.00497eb4
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 3
call fcn.00497eb4
mov eax, dword [ebp - 0x44]
push 0x10
lea ecx, [ebp - 0x44]
call dword [eax + 0x38]
push eax
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
mov ecx, esi
push dword [ebp - 0x18]
call fcn.004921f1
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x44]
push eax
call fcn.0042440f
mov eax, dword [eax]
push 0x410
lea ecx, [ebp - 0x1c4]
push 0x160
push ecx
push 0x80
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
lea ecx, [ebp - 0x64]
call fcn.00497eb4
lea eax, [ebp - 0xb4]
push eax
push 2
mov ecx, esi
push dword [ebp - 0x18]
call fcn.0049226a
mov eax, dword [0x4d95e4]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 8
call fcn.0042446e
mov edi, eax
lea ecx, [ebp - 0x44]
and edi, 0x3ff
neg edi
sbb edi, edi
neg edi
call fcn.0042446e
shr eax, 0xa
add edi, eax
lea eax, [ebp - 0x24]
push edi
push str._10d_KB
push eax
call fcn.00490e97
add esp, 0xc
mov ecx, esi
push dword [ebp - 0x24]
push 1
push dword [ebp - 0x18]
call fcn.0049226a
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x44]
push eax
call fcn.00424188
lea eax, [ebp - 0x28]
push str._Y__m__d__H:_M
push eax
lea ecx, [ebp - 0x4c]
call fcn.00491510
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 9
push 3
push dword [ebp - 0x18]
call fcn.0049226a
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.00497eb4
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call fcn.00497eb4
mov edi, dword [ebp - 0x58]
jmp 0x40e201
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.00423f71
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40e1c1
push dword [edi + 0x668]
push 0x4d7ae4
push edi
call fcn.0040f452
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00497eb4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4