Function at 0x6790c870
Capabilities:
Get file system object information

Disassembly:
push 0xffffffffffffffff
push 0x6798e2d7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x430
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x10]
xor edi, edi
mov esi, ecx
push eax
mov dword [esp + 0x14], edi
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
jge 0x6790c8aa
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x448], edi
cmp eax, edi
jne 0x6790c8c0
xor eax, eax
jmp 0x6790ce38
mov eax, dword [esi + 0xf8]
mov edx, dword [esi + 0x108]
mov ebp, dword [esp + 0x454]
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edi
push ecx
mov ecx, dword [eax + 0x20]
mov ebx, dword [ebp]
push edx
push ecx
call dword [sym.imp.USER32.dll_GetParent]
push eax
push ebp
call dword [ebx + 0x10]
test eax, eax
jge 0x6790c917
mov eax, dword [esp + 0x10]
mov dword [esp + 0x448], 0xffffffff
cmp eax, edi
je 0x6790cdaf
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
jmp 0x6790ce38
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x34]
push edx
lea edx, [esp + 0x18]
mov dword [esp + 0x38], edi
mov dword [esp + 0x18], edi
mov ecx, dword [eax]
push edx
push 1
push eax
mov dword [esp + 0x40], edi
call dword [ecx + 0xc]
test eax, eax
jne 0x6790ce0c
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::CString_4
lea ecx, [esp + 0x24]
mov byte [esp + 0x448], 1
call sub.MFC42.DLL_CString::CString_4
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x1c]
push eax
push edi
lea ebx, [esi + 0xfc]
push ecx
push ebp
mov ecx, ebx
mov byte [esp + 0x458], 2
call sym.MfcHlpr520.dll_public:_int___thiscall_CMHPShellPidl::GetName_struct_IShellFolder___struct__ITEMIDLIST___unsigned_long_int__class_CString__
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x24]
push edx
push 0x8000
push eax
push ebp
mov ecx, ebx
call sym.MfcHlpr520.dll_public:_int___thiscall_CMHPShellPidl::GetName_struct_IShellFolder___struct__ITEMIDLIST___unsigned_long_int__class_CString__
mov ecx, dword [ebp]
lea edx, [esp + 0x20]
lea eax, [esp + 0x14]
push edx
push eax
push 1
push ebp
mov dword [esp + 0x30], 0x20fc000
call dword [ecx + 0x24]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esi]
push eax
push ecx
mov ecx, esi
call dword [edx + 0xa0]
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x38], eax
je 0x6790cd60
push 0xc
call sub.MFC42.DLL_operatornew
mov edi, eax
add esp, 4
test edi, edi
je 0x6790cd66
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x450]
mov dword [edi], edx
mov eax, dword [esp + 0x14]
mov edx, dword [ecx + 4]
push eax
mov eax, dword [esp + 0x14]
push edx
push eax
mov ecx, ebx
call sym.MfcHlpr520.dll_public:_struct__ITEMIDLIST____thiscall_CMHPShellPidl::ConcatPidls_struct_IMalloc___struct__ITEMIDLIST_const___struct__ITEMIDLIST_const__
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x68], ecx
inc ecx
mov dword [esp + 0x30], ecx
xor ecx, ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x7c], ecx
push 0x4009
push eax
mov ecx, ebx
mov dword [esp + 0x34], eax
mov dword [esp + 0x6c], 7
mov dword [esp + 0x80], edx
call sym.MfcHlpr520.dll_public:_int___thiscall_CMHPShellPidl::GetItemIcon_struct__ITEMIDLIST___unsigned_int_const
mov dword [esp + 0x80], eax
mov dword [edi + 8], ebp
mov eax, dword [ebp]
push ebp
call dword [eax + 4]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push ecx
push edx
mov ecx, ebx
call sym.MfcHlpr520.dll_public:_struct__ITEMIDLIST____thiscall_CMHPShellPidl::DuplicateItem_struct_IMalloc___struct__ITEMIDLIST__
mov dword [edi + 4], eax
mov eax, dword [esi + 0xf8]
lea ecx, [esp + 0x64]
mov dword [esp + 0x84], edi
mov edx, dword [eax + 0x20]
push ecx
push 0
push 0x1007
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x20]
mov ebx, eax
mov eax, dword [esi]
push ecx
push ebx
mov ecx, esi
call dword [eax + 0x9c]
test ebx, ebx
jl 0x6790cdb6
mov edi, dword [esp + 0x2c]
lea edx, [esp + 0x1dc]
push edx
push edi
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
mov eax, dword [esp + 0x20]
mov ecx, eax
and ecx, 0x40000000
cmp ecx, 0x40000000
jne 0x6790cca5
test eax, 0x20000000
jne 0x6790cca5
lea edx, [esp + 0x9c]
lea eax, [esp + 0x1dc]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x38], eax
je 0x6790ccb8
mov ecx, dword [esp + 0xb8]
push 1
push 0
push 0
push ecx
call fcn.6797ef20
mov ebp, edx
mov edx, dword [esp + 0xbc]
mov edi, eax
xor eax, eax
add edi, edx
lea ecx, [esp + 0x28]
adc ebp, eax
call sub.MFC42.DLL_CString::CString_4
mov ecx, dword [esi]
lea edx, [esp + 0x8c]
push 0xf
add edi, 0x400
push edx
push 0
adc ebp, 0
push 0x400
push ebp
push edi
mov byte [esp + 0x460], 3
mov dword [esp + 0x54], ecx
call fcn.6797ee70
push edx
push eax
mov eax, dword [esp + 0x4c]
mov ecx, esi
call dword [eax + 0x8c]
push eax
lea ecx, [esp + 0x2c]
push str._s_KB
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x34]
mov ecx, dword [esi + 0xf8]
add esp, 0xc
push edx
push 1
push ebx
call sub.MFC42.DLL_CListCtrl::SetItemText
lea eax, [esp + 0x58]
lea ecx, [esp + 0xb0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea edx, [esp + 0x48]
lea eax, [esp + 0x58]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov eax, dword [esp + 0x48]
cmp ax, 0x7b2
jb 0x6790cc69
cmp ax, 0x7f6
ja 0x6790cc69
mov ecx, dword [esp + 0x4a]
cmp cx, 1
jb 0x6790cc69
cmp cx, 0xc
ja 0x6790cc69
mov edx, dword [esp + 0x54]
push 0xffffffffffffffff
and edx, 0xffff
and ecx, 0xffff
push edx
mov edx, dword [esp + 0x5a]
and edx, 0xffff
and eax, 0xffff
push edx
mov edx, dword [esp + 0x5c]
and edx, 0xffff
push edx
mov edx, dword [esp + 0x5e]
and edx, 0xffff
push edx
push ecx
push eax
lea ecx, [esp + 0x7c]
call sub.MFC42.DLL_CTime::CTime_1
mov eax, dword [eax]
lea ecx, [esp + 0x40]
push str._m__d__y__I:_M__p
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x4c], eax
call sub.MFC42.DLL_CTime::Format
mov eax, dword [eax]
mov ecx, dword [esi + 0xf8]
push eax
push 3
push ebx
mov byte [esp + 0x454], 4
call sub.MFC42.DLL_CListCtrl::SetItemText
lea ecx, [esp + 0x40]
mov byte [esp + 0x448], 3
call sub.MFC42.DLL_CString::CString
jmp 0x6790cc7c
mov ecx, dword [esi + 0xf8]
push sym.MfcHlpr520.dll____C__00A___AA_
push 3
push ebx
call sub.MFC42.DLL_CListCtrl::SetItemText
mov edx, dword [esp + 0x38]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [esp + 0x28]
mov byte [esp + 0x448], 2
call sub.MFC42.DLL_CString::CString
mov ebp, dword [esp + 0x454]
mov edi, dword [esp + 0x2c]
jmp 0x6790ccb8
mov ecx, dword [esi + 0xf8]
push str.0_bytes
push 2
push ebx
call sub.MFC42.DLL_CListCtrl::SetItemText
push 0x408
lea eax, [esp + 0x2e4]
push 0x160
push eax
push 0
push edi
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
lea ecx, [esp + 0x3f0]
push ecx
mov ecx, dword [esi + 0xf8]
push 2
push ebx
call sub.MFC42.DLL_CListCtrl::SetItemText
test edi, edi
je 0x6790cd5e
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6790cd00
mov edx, dword [eax]
push edi
push eax
call dword [edx + 0x14]
mov eax, dword [esp + 0x10]
xor edi, edi
mov ecx, dword [esp + 0x14]
cmp ecx, edi
je 0x6790cd19
cmp eax, edi
je 0x6790cd15
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x14]
mov dword [esp + 0x14], edi
lea ecx, [esp + 0x24]
mov byte [esp + 0x448], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x448], 0
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x34]
push edx
lea edx, [esp + 0x18]
mov ecx, dword [eax]
push edx
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
je 0x6790c941
jmp 0x6790ce0c
xor edi, edi
mov eax, dword [esp + 0x10]
jmp 0x6790cd02
mov eax, dword [esp + 0x18]
test eax, eax
je 0x6790cd74
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [esp + 0x24]
mov byte [esp + 0x448], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x448], 0
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x10]
mov dword [esp + 0x448], 0xffffffff
test eax, eax
je 0x6790cdaf
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
jmp 0x6790ce38
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x6790cdcd
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6790cdcd
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x14]
lea ecx, [esp + 0x24]
mov byte [esp + 0x448], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x448], 0
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x10]
mov dword [esp + 0x448], 0xffffffff
test eax, eax
je 0x6790ce08
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x6790ce38
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x6790ce1a
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x448], 0xffffffff
cmp eax, edi
je 0x6790ce33
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, 1
mov ecx, dword [esp + 0x440]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x43c
ret 8