Function at 0x563969
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push 0x14
call fcn.005fffc4
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
add ebx, 0xc
push ebx
push 0x108
call fcn.005fffc4
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x7638ff
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
add ebx, 4
push ebx
push 0x58
call fcn.005fffc4
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x77f569
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x14
rep stosd dword es:[edi], eax
mov dword [ebp - 8], esp
push 0x400
push 0x15c
mov eax, dword [ebp - 4]
push eax
push 0x15c
call fcn.005fffc4
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0
mov ebx, dword [ebp + 8]
push dword [ebx]
call dword [sym.imp.shell32.dll_SHGetFileInfoA]
nop
nop
nop
nop
cmp dword [ebp - 8], esp
je 0x563a77
push 6
call fcn.005fffca
add esp, 4
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov edi, dword [ebp - 0x10]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.006010d0
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x563acc
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x563aca
imul eax, dword [edi]
jmp 0x563abf
mov ecx, eax
cmp ecx, 0x100
jle 0x563ad9
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
push ebx
push edi
push 1
mov eax, 2
call fcn.006010d0
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x563b17
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x563b15
imul eax, dword [edi]
jmp 0x563b0a
mov ecx, eax
cmp ecx, 0x50
jle 0x563b21
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 8], ebx
push 0xa0000101
push 0
mov ebx, dword [ebp - 8]
push dword [ebx]
push 1
mov ebx, 0x168
call fcn.00603590
add esp, 0x10
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
jmp 0x563b68
push eax
mov ebx, dword [ebp - 4]
push ebx
add ebx, 0xc
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.005fffbe
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.005fffbe
add esp, 4
pop ebx
call fcn.005fffbe
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4