Function at 0x4c1811
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push 0x14
call fcn.00535595
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
add ebx, 0xc
push ebx
push 0x10c
call fcn.00535595
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x619351
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x41
rep stosd dword es:[edi], eax
add ebx, 4
push ebx
push 0x58
call fcn.00535595
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x619359
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x14
rep stosd dword es:[edi], eax
mov dword [ebp - 8], esp
push 0x400
push 0x15c
mov eax, dword [ebp - 4]
push eax
push 0x160
call fcn.00535595
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x104
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push 0
mov ebx, dword [ebp + 8]
push dword [ebx]
call dword [sym.imp.shell32.dll_SHGetFileInfoA]
nop
nop
nop
nop
cmp dword [ebp - 8], esp
je 0x4c191f
push 6
call fcn.0053559b
add esp, 4
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov edi, dword [ebp - 0x10]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00536400
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4c1974
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4c1972
imul eax, dword [edi]
jmp 0x4c1967
mov ecx, eax
cmp ecx, 0x104
jle 0x4c1981
mov ecx, 0x104
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x104
push ebx
push edi
push 1
mov eax, 2
call fcn.00536400
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4c19bf
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4c19bd
imul eax, dword [edi]
jmp 0x4c19b2
mov ecx, eax
cmp ecx, 0x50
jle 0x4c19c9
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
call fcn.0053558f
add esp, 4
pop eax
mov ebx, dword [ebp - 4]
add ebx, 0x10
mov dword [ebp - 8], ebx
push 0xa0000101
push 0
mov ebx, dword [ebp - 8]
push dword [ebx]
push 1
mov ebx, 0x168
call fcn.005386e0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
jmp 0x4c1a10
push eax
mov ebx, dword [ebp - 4]
push ebx
add ebx, 0xc
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0053558f
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0053558f
add esp, 4
pop ebx
call fcn.0053558f
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4