Function at 0x5a3330
Capabilities:
Get file system object information
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x30c
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x38], esi
call fcn.005a27ba
push 1
push dword [esi + 0x60]
call fcn.004513a7
mov eax, dword [esi + 4]
and dword [esi + 0x70], 0
push 0x4011
mov byte [esi + 0x75], 0
mov ebp, dword [eax + 0xc]
lea eax, [esp + 0x6c]
push 0x2b4
push eax
push 0x80
push 0x6ce190
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [esp + 0x320]
xor edi, edi
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x44], eax
mov dword [esp + 0x2c], edi
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
mov ecx, 0xa0
cdq
idiv ecx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x28], eax
imul eax, ebp
push eax
call fcn.004513b4
mov ebx, eax
xor edx, edx
mov eax, dword [esp + 0x320]
mov dword [esp + 0x3c], edx
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
cdq
idiv dword [esp + 0x48]
test eax, eax
je 0x5a371e
xor eax, eax
mov dword [esp + 0x40], eax
add eax, ecx
mov dword [esp + 0x34], eax
lea esi, [eax + 0x38]
cmp dword [esi + 0x14], 8
mov dword [esp + 0x2c], esi
jb 0x5a33f1
mov esi, dword [esi]
mov dword [esp + 0x2c], esi
push 0x5c
push esi
call fcn.006668d7
or dword [esp + 0x20], 0xffffffff
xor edx, edx
and dword [esp + 0x24], edx
pop ecx
pop ecx
mov ecx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x20], ecx
mov eax, esi
mov dword [esp + 0x14], eax
test ecx, ecx
je 0x5a35cd
lea esi, [ebx + 0x14]
jmp 0x5a3427
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x1c], edi
je 0x5a34dc
cmp dword [esi + 0x14], 8
mov edx, dword [esi - 4]
mov dword [esp + 0x4c], edx
mov edx, esi
jb 0x5a3442
mov edx, dword [esi]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push edx
mov dword [esp + 0x3c], ecx
call fcn.00673aae
add esp, 0xc
neg eax
sbb al, al
inc al
cmp dword [esp + 0x4c], 0
jne 0x5a34ad
test al, al
je 0x5a34ad
mov eax, dword [esp + 0x30]
cmp dword [esi + 0x10], eax
jne 0x5a34ad
mov ecx, dword [esp + 0x34]
push 0x5c
mov eax, dword [ecx + 8]
add dword [esi + 0x1c], eax
mov eax, dword [ecx + 0xc]
adc dword [esi + 0x20], eax
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
add ecx, 2
push ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ecx
call fcn.006668d7
mov edx, dword [esp + 0x18]
pop ecx
pop ecx
mov ecx, eax
inc edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x10], edx
jmp 0x5a34b5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
inc dword [esp + 0x1c]
add esi, ebp
test ecx, ecx
jne 0x5a3423
mov esi, dword [esp + 0x14]
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x18]
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], esi
jmp 0x5a35cd
mov esi, dword [esp + 0x18]
lea ecx, [edi - 1]
imul ecx, ebp
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x28]
add ecx, ebp
mov dword [esp + 0x30], edi
inc edi
mov dword [esp + 0x1c], ecx
cmp edi, eax
jbe 0x5a351b
add eax, eax
mov dword [esp + 0x28], eax
imul eax, ebp
push eax
push ebx
call fcn.00451461
mov ecx, dword [esp + 0x1c]
mov ebx, eax
push ebp
lea esi, [ecx + ebx]
push 0
push esi
call fcn.006678b0
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov eax, dword [esp + 0x20]
sub eax, ecx
sar eax, 1
push eax
push ecx
lea ecx, [esp + 0x58]
call fcn.005a241b
push eax
lea ecx, [esi + 0x14]
call fcn.00427924
lea ecx, [esp + 0x50]
call fcn.00427afc
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x18]
mov dword [esi], edx
mov byte [esp + 0x27], 0
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dl, byte [esp + 0x27]
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0x34], ecx
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x3c], eax
mov eax, dword [ecx + 0x78]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x34]
cmp dl, byte [eax + 0x68]
sbb eax, eax
and eax, 2
cmp dword [esp + 0x18], 0xffffffff
mov dword [esi + 8], eax
jne 0x5a359c
inc dword [ecx + 0x70]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x20]
add eax, 2
push 0x5c
push eax
mov dword [esp + 0x1c], eax
call fcn.006668d7
inc dword [esp + 0x18]
mov dword [esp + 0x28], eax
pop ecx
pop ecx
mov ecx, dword [esp + 0x1c]
test eax, eax
jne 0x5a34f2
mov eax, dword [esp + 0x28]
inc edi
cmp edi, eax
jbe 0x5a35e8
add eax, eax
mov dword [esp + 0x28], eax
imul eax, ebp
push eax
push ebx
call fcn.00451461
mov ebx, eax
lea esi, [edi - 1]
imul esi, ebp
push ebp
push 0
add esi, ebx
push esi
call fcn.006678b0
add esp, 0xc
cmp dword [esp + 0x18], 0xffffffff
jne 0x5a360a
mov eax, dword [esp + 0x38]
inc dword [eax + 0x70]
mov ecx, dword [esp + 0x14]
and dword [esp + 0x50], 0
and dword [esp + 0x60], 0
mov dword [esp + 0x64], 7
test ecx, ecx
je 0x5a362e
push ecx
lea ecx, [esp + 0x54]
call fcn.00427ba3
lea eax, [esp + 0x50]
push eax
lea ecx, [esi + 0x14]
call fcn.00427924
mov eax, dword [esp + 0x64]
cmp eax, 8
jb 0x5a367e
mov ecx, dword [esp + 0x50]
lea eax, [eax*2 + 2]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], ecx
cmp eax, 0x1000
jb 0x5a3675
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x18]
push eax
call fcn.004279ae
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x18]
mov dword [esi], eax
push 0x4011
mov eax, dword [edx + 8]
mov ecx, dword [edx + 0xc]
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x14]
mov dword [esi + 0x3c], eax
xor al, al
mov dword [esi + 0x34], ecx
mov dword [esi + 0x10], edx
cmp al, byte [edx + 0x68]
push 0x2b4
sbb eax, eax
and eax, 2
mov dword [esi + 8], eax
lea eax, [esp + 0x70]
push eax
push 0x80
push dword [esp + 0x3c]
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
mov eax, dword [esp + 0x6c]
jne 0x5a36d5
mov eax, dword [esp + 0x44]
mov dword [esi + 0xc], eax
mov esi, dword [esp + 0x38]
cmp byte [esi + 0x75], 0
jne 0x5a36ed
cmp dword [esp + 0x10], 0
je 0x5a36ed
mov byte [esi + 0x75], 1
mov eax, dword [esp + 0x320]
inc dword [esp + 0x3c]
add dword [esp + 0x40], 0xa0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
cdq
idiv dword [esp + 0x48]
cmp dword [esp + 0x3c], eax
mov eax, dword [esp + 0x40]
jne 0x5a33d8
mov dword [esp + 0x2c], edi
mov ecx, dword [esp + 0x28]
lea eax, [ebp + 4]
imul eax, edi
imul ecx, ebp
cmp ecx, eax
jae 0x5a3738
push eax
push ebx
call fcn.00451461
mov ebx, eax
mov eax, edi
imul eax, ebp
add eax, ebx
lea ecx, [eax + edi*4]
mov dword [esp + 0x44], ecx
test edi, edi
je 0x5a3780
mov esi, dword [esp + 0x44]
mov ecx, ebx
mov dword [esp + 0x30], edi
mov edx, dword [ecx]
cmp edx, 0xffffffff
jne 0x5a3765
and dword [ecx], 0
mov dword [eax], ecx
add eax, 4
jmp 0x5a3771
imul edx, ebp
add edx, ebx
sub esi, 4
mov dword [ecx], edx
mov dword [esi], ecx
add ecx, ebp
sub edi, 1
jne 0x5a3754
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x328]
mov dword [esi + 0x60], ebx
mov dword [esi + 0x18], edi
mov dword [eax], edi
mov eax, dword [esp + 0x324]
pop edi
pop esi
pop ebp
mov dword [eax], ebx
pop ebx
add esp, 0x30c
ret 0xc