Function at 0x412970
Capabilities:
Get file system object information
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x421df4
mov eax, dword fs:[0]
push eax
mov eax, 0x15dc
call fcn.0041eaa0
mov eax, dword [0x436028]
xor eax, esp
mov dword [esp + 0x15d4], eax
push ebx
push ebp
push esi
mov eax, dword [0x436028]
xor eax, esp
push eax
lea eax, [esp + 0x15ec]
mov dword fs:[0], eax
xor ebx, ebx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x15f4], ebx
call sub.mfc90u.dll_CStringArray::CStringArray
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1600]
push ecx
mov byte [esp + 0x15fc], 1
call fcn.0040fb00
mov eax, dword [esp + 0x3c]
add esp, 8
xor ebp, ebp
cmp eax, ebx
mov dword [esp + 0x24], eax
jg 0x412a35
lea ecx, [esp + 0x2c]
mov byte [esp + 0x15f4], bl
call fcn.0041d960
lea ecx, [esp + 0x15fc]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, dword [esp + 0x15ec]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x15d4]
xor ecx, esp
call fcn.0041e2f2
add esp, 0x15e8
ret 4
mov eax, dword [esp + 0x34]
cmp ebp, ebx
jl 0x412d80
cmp ebp, eax
jge 0x412d80
mov edx, dword [esp + 0x30]
lea eax, [edx + ebp*4]
push eax
lea ecx, [esp + 0x18]
call dword [0x424970]
push 0x206
lea ecx, [esp + 0x13e2]
xor eax, eax
push ebx
mov byte [esp + 0x15fc], 2
push ecx
mov word [esp + 0x13e8], ax
call sub.MSVCR90.dll_memset
xor eax, eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
add esp, 0xc
lea eax, [esp + 0x14]
lea edx, [esp + 0x13dc]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x44], 2
mov dword [esp + 0x48], edx
call dword [0x424970]
push 0xe3e
lea ecx, [esp + 0x5a0]
push ebx
mov byte [esp + 0x15fc], 3
mov esi, dword [esp + 0x20]
push ecx
call sub.MSVCR90.dll_memset
add esp, 0xc
cmp esi, ebx
je 0x412b43
mov eax, esi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x412ae0
sub eax, edx
sar eax, 1
je 0x412b43
push esi
lea edx, [esp + 0x5a0]
push 0x208
push edx
call dword [sym.imp.MSVCR90.dll_wcscpy_s]
add esp, 0xc
push 0x104
lea eax, [esp + 0xdc6]
push eax
push 0x104
lea ecx, [esp + 0xbc6]
push ecx
push 0x104
lea edx, [esp + 0x9c6]
push edx
push 3
lea eax, [esp + 0x9c8]
push eax
push esi
call dword [sym.imp.MSVCR90.dll__wsplitpath_s]
add esp, 0x24
lea ecx, [esp + 0xdc2]
push ecx
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
lea edx, [esp + 0xbba]
push edx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x15f8], 4
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_2]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x13dc]
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, bx
jne 0x412ba0
mov eax, dword [edi + 0x650]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
lea edx, [esp + 0x40]
push edx
push 0xffffffffffffffff
push 0x1053
push eax
call esi
cmp eax, 0xffffffff
jne 0x412d4a
push 0x24c
lea ecx, [esp + 0x354]
push ebx
push ecx
mov dword [esp + 0x358], ebx
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x20]
add esp, 0xc
lea edx, [esp + 0x34c]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x412c24
mov ecx, dword [esp + 0x34c]
test cl, 4
jne 0x412d4a
test ecx, 0x400
jne 0x412d4a
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x2b0
lea ecx, [esp + 0x9c]
push ebx
push ecx
mov dword [esp + 0xa0], ebx
call sub.MSVCR90.dll_memset
add esp, 0xc
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov eax, dword [esp + 0x14]
push 0x4c00
push 0x2b4
lea edx, [esp + 0x9c]
push edx
push ebx
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
call dword [sym.imp.ole32.dll_OleUninitialize]
push 0x3c
lea ecx, [esp + 0x5c]
push ebx
push ecx
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
add esp, 0xc
push eax
mov dword [esp + 0x5c], 3
mov dword [esp + 0x78], edx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov ecx, dword [esp + 0x14]
call fcn.004096a0
test al, al
jne 0x412d4a
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call dword [0x424970]
call fcn.00412d90
cmp al, bl
je 0x412d4a
mov ecx, dword [edi + 0x650]
lea eax, [esp + 0x58]
push eax
push ebx
push 0x104d
push ecx
call esi
mov edx, dword [esp + 0x18]
push edx
push ebx
lea esi, [edi + 0x630]
push ebx
mov ecx, esi
call sub.mfc90u.dll_CListCtrl::SetItemText
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call dword [0x424970]
push ebx
push edi
call fcn.0040e740
push 0x42508c
push str.IDS_DECRYPTED
lea ecx, [esp + 0x30]
push ecx
mov ecx, 0x440670
call dword [sym.imp.ASOHelper.dll_public:_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______thiscall_CSystweakApp::LoadStringW_wchar_t_const___wchar_t_const__]
mov byte [esp + 0x15f4], 5
mov eax, dword [eax]
push eax
push 3
push ebx
mov ecx, esi
call sub.mfc90u.dll_CListCtrl::SetItemText
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x14]
mov byte [esp + 0x15f4], 1
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
inc ebp
cmp ebp, dword [esp + 0x24]
jl 0x412a31
jmp 0x4129eb
call sub.mfc90u.dll_AfxThrowInvalidArgException
int3