Function at 0x484be0
Capabilities:
Get file system object information

Disassembly:
push 0xffffffffffffffff
push 0x4faf1b
mov eax, dword fs:[0]
push eax
mov eax, 0x4c7c
call fcn.004e3510
mov eax, dword [0x514bc0]
xor eax, esp
mov dword [esp + 0x4c78], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x514bc0]
xor eax, esp
push eax
lea eax, [esp + 0x4c90]
mov dword fs:[0], eax
push 0x800
lea eax, [esp + 0x2c90]
mov ebx, ecx
push eax
xor edi, edi
push edi
mov dword [esp + 0x28], ebx
mov byte [ebx + 8], 1
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x800
push str.Formats
lea ecx, [esp + 0x2c94]
push ecx
call fcn.00451be0
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
push 0x4111
push 0x2b4
lea edx, [esp + 0x8f8]
push edx
push 0x10
push str.dummy
call esi
mov eax, dword [esp + 0x8f4]
push 0x4113
push 0x2b4
lea ecx, [esp + 0x8f8]
push ecx
push 0x10
push str.dummy
mov dword [esp + 0x38], eax
call esi
mov edx, dword [esp + 0x8f4]
push 0x800
lea eax, [esp + 0x3c90]
push eax
mov ecx, 0x546dc0
mov dword [esp + 0x28], edx
call fcn.004790c0
push 0x4001
push 0x2b4
lea ecx, [esp + 0x8f8]
push ecx
push edi
lea edx, [esp + 0x3c9c]
push edx
call esi
mov eax, dword [ebx]
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [esp + 0x8f4]
push 0xffff0000
push edi
push 0x1101
push eax
call ebp
xor eax, eax
lea ecx, [esp + 0x3c8c]
mov dword [esp + 0x30], eax
push ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x34], 0x27
call fcn.00451a10
push 0x800
lea edx, [esp + 0xf4]
push edi
push edx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], 0x800
mov dword [esp + 0x60], edi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], 0xffff0000
call fcn.004e4400
mov ecx, dword [ebx]
add esp, 0xc
lea eax, [esp + 0x28]
push eax
push edi
push 0x1132
push ecx
call ebp
mov ebx, eax
lea ecx, [esp + 0x68]
mov dword [esp + 0xf0], ebx
call fcn.0048d400
mov dword [esp + 0x4c98], edi
push 1
lea eax, [esp + 0xba8]
xor edx, edx
push eax
mov ecx, 0x546dc0
mov dword [esp + 0x1c3c], edi
mov dword [esp + 0x1c40], edi
mov word [esp + 0x1c94], dx
call fcn.00478dc0
test al, al
je 0x484ec7
nop
mov ecx, dword [esp + 0x1c3c]
push ecx
call fcn.00443730
test al, al
jne 0x484dee
lea edx, [esp + 0xba4]
push edx
call fcn.00451d00
cmp word [esp + 0xba4], di
je 0x484eab
lea ecx, [esp + 0x1c8c]
lea eax, [esp + 0xba4]
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x484e36
cmp dx, di
je 0x484e32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x484e36
add eax, 4
add ecx, 4
cmp dx, di
jne 0x484e10
xor eax, eax
jmp 0x484e3b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
je 0x484eab
xor eax, eax
jmp 0x484e50
movzx ecx, word [esp + eax + 0xba4]
mov word [esp + eax + 0x1c8c], cx
add eax, 2
cmp cx, di
jne 0x484e50
lea esi, [esp + 0xba4]
nop
movzx eax, word [esi]
push eax
call fcn.004514d0
test al, al
je 0x484e85
mov ecx, 1
mov word [esi], cx
inc edi
cmp word [esp + edi*2 + 0xba4], 0
lea esi, [esp + edi*2 + 0xba4]
jne 0x484e70
lea edx, [esp + 0xba4]
push edx
lea ecx, [esp + 0x6c]
call fcn.0048d1c0
xor edi, edi
push 1
lea eax, [esp + 0xba8]
push eax
mov ecx, 0x546dc0
call fcn.00478dc0
test al, al
jne 0x484dd0
lea ecx, [esp + 0x68]
call fcn.0048d320
push 1
lea ecx, [esp + 0x6c]
call fcn.0048d480
mov eax, dword [esp + 0xd4]
xor esi, esi
cmp eax, edi
jbe 0x484f29
jmp 0x484ef0
push esi
lea ecx, [esp + 0x6c]
call fcn.0048d3c0
mov edx, dword [eax]
xor ecx, ecx
cmp word [edx], di
je 0x484f1d
mov eax, edx
cmp word [eax], 1
jne 0x484f13
mov ebp, 0x5c
mov word [eax], bp
inc ecx
cmp word [edx + ecx*2], di
lea eax, [edx + ecx*2]
jne 0x484f05
mov eax, dword [esp + 0xd4]
inc esi
cmp esi, eax
jb 0x484ef0
mov dword [esp + 0x18], edi
cmp eax, edi
jbe 0x485109
push edi
lea ecx, [esp + 0x6c]
call fcn.0048d3d0
mov ebx, dword [eax]
mov ebp, 0x4fdab8
test edi, edi
jbe 0x484f59
lea ecx, [edi - 1]
push ecx
lea ecx, [esp + 0x6c]
call fcn.0048d3d0
mov ebp, dword [eax]
mov dword [esp + 0x14], 0
test ebx, ebx
je 0x4850f0
jmp 0x484f74
mov edi, dword [esp + 0x18]
movzx edx, word [ebx]
push edx
call fcn.004514d0
test al, al
je 0x484f92
movzx eax, word [ebx + 2]
add ebx, 2
push eax
call fcn.004514d0
test al, al
jne 0x484f81
movzx ecx, word [ebp]
push ecx
call fcn.004514d0
test al, al
je 0x484fb1
movzx edx, word [ebp + 2]
add ebp, 2
push edx
call fcn.004514d0
test al, al
jne 0x484fa0
mov esi, ebx
movzx eax, word [esi]
test ax, ax
je 0x484fd9
jmp 0x484fc0
movzx eax, ax
push eax
call fcn.004514d0
test al, al
jne 0x484fd9
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x484fc0
movzx ecx, word [esi]
push ecx
call fcn.004514d0
test al, al
je 0x48501d
mov edx, esi
sub edx, ebx
and edx, 0xfffffffe
cmp edx, 4
jl 0x48501d
mov eax, 0x2e
cmp word [esi - 2], ax
jne 0x48501d
cmp word [esi - 4], ax
jne 0x48501d
lea eax, [esi - 4]
cmp eax, ebx
je 0x485018
movzx ecx, word [esi - 6]
push ecx
call fcn.004514d0
test al, al
je 0x48501d
add esi, 2
jmp 0x484fb3
sub esi, ebx
sar esi, 1
cmp esi, 0x7ff
jb 0x485030
mov esi, 0x7ff
jmp 0x485038
test esi, esi
je 0x4850f0
push esi
lea edx, [esp + 0x1c90]
push ebx
push edx
call fcn.004e7058
add esp, 0xc
push esi
lea ecx, [esp + 0x1c90]
push ecx
xor eax, eax
lea edi, [esi + esi]
push ebp
mov word [esp + edi + 0x1c98], ax
call fcn.0046a970
test eax, eax
jne 0x485088
movzx eax, word [edi + ebp]
test ax, ax
je 0x485080
movzx edx, ax
push edx
call fcn.004514d0
test al, al
je 0x485088
mov esi, dword [esp + 0x14]
add ebp, edi
jmp 0x4850df
mov esi, dword [esp + 0x14]
cmp esi, 0x200
jae 0x4850ec
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x48], ecx
lea eax, [esp + 0x1c8c]
lea ecx, [esp + 0x28]
push ecx
mov dword [esp + 0x44], eax
mov eax, dword [esp + esi*4 + 0xf4]
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x20]
push 0
mov dword [esp + 0x30], eax
mov eax, dword [edx]
push 0x1132
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + esi*4 + 0xf4], eax
mov ebp, 0x4fdab8
inc esi
add ebx, edi
mov dword [esp + 0x14], esi
jne 0x484f70
mov edi, dword [esp + 0x18]
inc edi
mov dword [esp + 0x18], edi
cmp edi, dword [esp + 0xd4]
jb 0x484f35
mov ebx, dword [esp + 0xf0]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi]
push ebx
push 2
push 0x1102
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esi + 4], ebx
mov dword [esp + 0x4c98], 0xffffffff
lea ecx, [esp + 0x68]
call fcn.00479920
mov ecx, dword [esp + 0x4c90]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4c78]
xor ecx, esp
call fcn.004e34f4
add esp, 0x4c88
ret