Function at 0x43e853
Capabilities:
Get file system object information

Disassembly:
sub esp, 0xc
push ebx
mov ebx, dword [esp + 0x14]
push ebp
push esi
push edi
push ebx
call fcn.004185df
pop ecx
lea esi, [ebx + eax*2]
jmp 0x43e873
cmp word [esi], 0x2e
je 0x43e877
sub esi, 2
cmp esi, ebx
jae 0x43e86a
add esi, 2
push esi
call fcn.004185df
pop ecx
cmp eax, 4
ja 0x43eace
lea eax, [esp + 0x10]
push esi
push eax
call fcn.00497ff6
pop ecx
pop ecx
lea edi, [esp + 0x10]
movzx esi, word [edi]
mov ecx, esi
cmp esi, 0x61
lea eax, [ecx - 0x20]
movzx edx, ax
mov eax, ecx
cmovb edx, eax
lea eax, [esp + 0x16]
mov word [edi], dx
add edi, 2
cmp edi, eax
jbe 0x43e89b
lea eax, [esp + 0x10]
push 0x4c2258
push eax
call fcn.00498049
pop ecx
pop ecx
test eax, eax
je 0x43eace
lea eax, [esp + 0x10]
push 0x4c2260
push eax
call fcn.00498049
pop ecx
pop ecx
test eax, eax
je 0x43eace
lea eax, [esp + 0x10]
push 0x4c2268
push eax
call fcn.00498049
pop ecx
pop ecx
test eax, eax
je 0x43eace
lea eax, [esp + 0x10]
push 0x4c2270
push eax
call fcn.00498049
pop ecx
pop ecx
test eax, eax
je 0x43eace
mov ecx, dword [0x506da8]
xor esi, esi
mov edi, esi
test ecx, ecx
jle 0x43e956
mov ebp, esi
mov eax, dword [0x506db4]
add eax, ebp
push eax
lea eax, [esp + 0x14]
push eax
call fcn.00498049
pop ecx
pop ecx
test eax, eax
je 0x43e994
mov ecx, dword [0x506da8]
inc edi
add ebp, 0x10
cmp edi, ecx
jl 0x43e930
mov edx, dword [0x506da4]
lea eax, [ecx + 1]
shl eax, 4
cmp eax, edx
jbe 0x43e9b7
add edx, 0x640
push edx
push dword [0x506db4]
mov dword [0x506da4], edx
push 8
push dword [0x503688]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov ecx, dword [0x506da8]
mov dword [0x506db4], eax
jmp 0x43e9bc
mov edx, dword [0x506db4]
add edi, edi
mov eax, dword [0x506db0]
mov ecx, dword [edx + edi*8 + 8]
lea ecx, [eax + ecx*2]
mov eax, dword [esp + 0x24]
mov dword [eax], ecx
mov eax, dword [edx + edi*8 + 0xc]
jmp 0x43eb11
mov eax, dword [0x506db4]
push 8
lea edx, [esp + 0x14]
shl ecx, 4
push edx
add ecx, eax
push ecx
call fcn.00426ab0
mov edi, 0x2b4
mov ebp, 0x506af0
push edi
push esi
push ebp
call fcn.00423330
add esp, 0x18
push 0x4401
push edi
push ebp
push esi
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov edx, dword [0x506da8]
mov edi, 0x506d04
mov eax, dword [0x506db4]
add edx, edx
mov ecx, dword [0x506af4]
push edi
mov dword [eax + edx*8 + 0xc], ecx
call fcn.004185df
pop ecx
test eax, eax
jne 0x43ea31
mov edx, dword [0x506da8]
mov ecx, edx
mov eax, dword [0x506db4]
add ecx, ecx
mov dword [eax + ecx*8 + 8], esi
jmp 0x43eabf
push edi
call fcn.004185df
mov edx, dword [0x5068e4]
mov esi, dword [0x506dac]
add eax, esi
pop ecx
lea ecx, [edx - 1]
cmp eax, ecx
jbe 0x43ea81
add edx, 0x1f4
mov dword [0x5068e4], edx
lea eax, [edx + edx]
push eax
push dword [0x506db0]
push 8
push dword [0x503688]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov esi, dword [0x506dac]
mov edx, eax
mov dword [0x506db0], edx
jmp 0x43ea87
mov edx, dword [0x506db0]
mov ecx, dword [0x506da8]
mov eax, dword [0x506db4]
add ecx, ecx
push edi
mov dword [eax + ecx*8 + 8], esi
lea eax, [edx + esi*2]
push eax
call fcn.00497ff6
push edi
call fcn.004185df
mov ecx, dword [0x506dac]
add esp, 0xc
mov edx, dword [0x506da8]
inc ecx
add eax, ecx
mov dword [0x506dac], eax
mov eax, dword [esp + 0x24]
inc edx
mov dword [0x506da8], edx
mov dword [eax], edi
jmp 0x43eb0c
mov edi, 0x2b4
xor esi, esi
push edi
push esi
mov ebp, 0x506af0
push ebp
call fcn.00423330
add esp, 0xc
push 0x4401
push edi
push ebp
push esi
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
push 0x506d04
mov esi, 0x5068e8
push esi
call fcn.00497ff6
mov eax, dword [esp + 0x2c]
pop ecx
pop ecx
mov dword [eax], esi
mov eax, dword [0x506af4]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8