Function at 0x4065b0
Capabilities:
Get common file path
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x55b7e7
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x5b4e20]
xor eax, esp
mov dword [esp + 0x118], eax
push ebx
push esi
push edi
mov eax, dword [0x5b4e20]
xor eax, esp
push eax
lea eax, [esp + 0x130]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0x430
push 0
push 0x1036
push dword [edi + 0xb4]
call ebx
push 0xffffffffffffffff
push 0xdc
push 0
push str.Hidden_File_Name
lea esi, [edi + 0x94]
push 0
mov ecx, esi
call fcn.0041d0a5
push 0xffffffffffffffff
push 0x64
push 0
push str.Type
push 1
mov ecx, esi
call fcn.0041d0a5
push 0xffffffffffffffff
push 0x78
push 0
push str.File_Size
push 2
mov ecx, esi
call fcn.0041d0a5
push 0xffffffffffffffff
push 0x78
push 0
push str.Date
push 3
mov ecx, esi
call fcn.0041d0a5
push 0xffffffffffffffff
push 0x1ae
push 0
push str.File_Path
push 4
mov ecx, esi
call fcn.0041d0a5
mov ecx, esi
call fcn.00404100
push 1
push 0
mov ecx, esi
mov dword [edi + 0x190], 1
mov dword [edi + 0x198], 3
mov dword [edi + 0x194], 1
mov dword [edi + 0x19c], 4
mov dword [edi + 0x1a0], 1
call fcn.00404330
mov ecx, esi
call fcn.0041d5bc
cmp dword [esi + 0xec], 0
mov ecx, eax
jne 0x4066f0
test ecx, ecx
je 0x4066d9
mov ecx, dword [ecx + 0x20]
push ecx
lea ecx, [esi + 0x74]
call fcn.00417c4d
test eax, eax
je 0x4066f0
mov dword [esi + 0xec], 1
push 0
mov ecx, esi
call fcn.0041a345
push 1
mov ecx, esi
mov dword [esi + 0xe8], 0x1c
call fcn.0041a345
push 0x58de18
push 0
push 4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x258
push 0
push 0
push 0
push 0xc
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
lea ecx, [edi + 0x1ea4]
call fcn.0041b3e0
mov ecx, esi
call fcn.0041d5bc
mov edx, eax
lea eax, [edi + 0x1ea4]
test eax, eax
jne 0x406757
xor ecx, ecx
jmp 0x40675a
mov ecx, dword [eax + 4]
push 1
push ecx
push 0x30
push dword [edx + 0x20]
call ebx
push 0x24
lea ecx, [edi + 0x284]
push str.Right_click_here_for_more_options...
call fcn.004028a0
push 1
push 1
push 0x20
push 0x18
lea esi, [edi + 0x1f04]
push 0x18
mov ecx, esi
call fcn.0041cc9e
call fcn.0041c867
mov eax, dword [eax + 0xc]
push 0xe3
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
push eax
push 0xffffffffffffffff
push dword [edi + 0x1f08]
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
test esi, esi
jne 0x4067b8
xor eax, eax
jmp 0x4067bb
mov eax, dword [esi + 4]
push eax
push 1
push 0x1003
push dword [edi + 0xb4]
call ebx
push eax
call fcn.0041cdcb
push str.Courier_New
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xe
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
lea ecx, [edi + 0x1e8c]
call fcn.0041b3e0
push 0
push 0
push 0x258
push 0xc
push ecx
mov ecx, esp
push 0x58de18
call fcn.004023d0
lea esi, [edi + 0x2068]
mov ecx, esi
call fcn.004106c0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x58df84
call fcn.004023d0
push ecx
mov ecx, esp
push str.Start_the_Hidden_File_Scan...
mov dword [esp + 0x144], 0
call fcn.004023d0
mov ecx, esi
mov dword [esp + 0x140], 0xffffffff
call fcn.0040ffc0
sub esp, 0x14
mov ecx, esi
call fcn.0040f760
push 8
push 0xae
push 0xdb
push 0x100
push 0xad
mov ecx, esi
mov dword [esi + 0x260], 0
mov dword [esi + 0x264], 0xff
call fcn.0040fdc0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x58df84
call fcn.004023d0
push ecx
mov ecx, esp
push str.Select_the_Folder...
mov dword [esp + 0x144], 1
call fcn.004023d0
lea ecx, [edi + 0x2300]
mov dword [esp + 0x140], 0xffffffff
call fcn.0040ffc0
sub esp, 0x14
lea ecx, [edi + 0x2300]
call fcn.0040f760
mov dword [edi + 0x2560], 0
mov dword [edi + 0x2564], 0xff
push 4
push 0xa2
push 0xd4
push 0x300
push 0xa3
lea ecx, [edi + 0x2300]
call fcn.0040fdc0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x58df84
call fcn.004023d0
push ecx
mov ecx, esp
push str.Generate_HTML_report_of_Hidden_Files
mov dword [esp + 0x144], 2
call fcn.004023d0
lea ecx, [edi + 0x2830]
mov dword [esp + 0x140], 0xffffffff
call fcn.0040ffc0
sub esp, 0x14
lea ecx, [edi + 0x2830]
call fcn.0040f760
push 8
push 0xa8
push 0xd8
push 0x100
push 0xa7
lea ecx, [edi + 0x2830]
mov dword [edi + 0x2a90], 0
mov dword [edi + 0x2a94], 0xff
call fcn.0040fdc0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x58df84
call fcn.004023d0
push ecx
mov ecx, esp
push str.Unhide_all_the_selected_Hidden_Files...
mov dword [esp + 0x144], 3
call fcn.004023d0
lea ecx, [edi + 0x2ac8]
mov dword [esp + 0x140], 0xffffffff
call fcn.0040ffc0
sub esp, 0x14
lea ecx, [edi + 0x2ac8]
call fcn.0040f760
push 8
push 0xaa
push 0xde
push 0x100
push 0xa9
lea ecx, [edi + 0x2ac8]
mov dword [edi + 0x2d28], 0
mov dword [edi + 0x2d2c], 0xff
call fcn.0040fdc0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x58df84
call fcn.004023d0
push ecx
mov ecx, esp
push str.Manage_the_Hidden_File_Finder_Settings
mov dword [esp + 0x144], 4
call fcn.004023d0
lea ecx, [edi + 0x2598]
mov dword [esp + 0x140], 0xffffffff
call fcn.0040ffc0
sub esp, 0x14
lea ecx, [edi + 0x2598]
call fcn.0040f760
push 4
push 0xb0
mov dword [edi + 0x27f8], 0
mov dword [edi + 0x27fc], 0xff
push 0xdc
push 0x300
push 0xaf
lea ecx, [edi + 0x2598]
call fcn.0040fdc0
push 0x58de18
push 0
push 4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
lea esi, [edi + 0x1e84]
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
mov ecx, esi
call fcn.0041b3e0
test esi, esi
jne 0x406ae6
xor eax, eax
jmp 0x406ae9
mov eax, dword [esi + 4]
push 1
push eax
push 0x30
push dword [edi + 0x37e0]
call ebx
test esi, esi
jne 0x406afe
xor eax, eax
jmp 0x406b01
mov eax, dword [esi + 4]
push 1
push eax
push 0x30
push dword [edi + 0x36b0]
call ebx
push ecx
mov ecx, esp
push str.http:__securityxploded.com_hidden_file_finder.php
mov byte [edi + 0x3704], 1
call fcn.004023d0
lea esi, [edi + 0x37c0]
mov ecx, esi
call fcn.0040e610
mov byte [edi + 0x383c], 1
cmp byte [esi + 0x7c], 0
je 0x406b52
push 0x3e9
push esi
push str.Get_more_Help_on_Hidden_File_Finder
lea ecx, [esi + 0x88]
call fcn.0042557c
push 0x58de18
push 0
push 4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xe
lea esi, [edi + 0x1e9c]
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
mov ecx, esi
call fcn.0041b3e0
test esi, esi
jne 0x406b90
xor eax, eax
jmp 0x406b93
mov eax, dword [esi + 4]
push 1
push eax
push 0x30
push dword [edi + 0x3910]
call ebx
push ecx
mov ecx, esp
push str.http:__securityxploded.com_hidden_file_finder.php
call fcn.004023d0
lea ecx, [edi + 0x38f0]
call fcn.0040e610
mov byte [edi + 0x396c], 1
lea eax, [edi + 0x38f0]
mov dword [edi + 0x3a18], 0xffffff
cmp byte [eax + 0x7c], 0
je 0x406beb
push 0x3e9
push eax
push str.Download_New_Version_of_Hidden_File_Finder
lea ecx, [eax + 0x88]
call fcn.0042557c
test esi, esi
jne 0x406bf3
xor eax, eax
jmp 0x406bf6
mov eax, dword [esi + 4]
push 1
push eax
push 0x30
push dword [edi + 0x3a40]
call ebx
push ecx
mov ecx, esp
push str.http:__securityxploded.com_download.php
call fcn.004023d0
lea esi, [edi + 0x3a20]
mov ecx, esi
call fcn.0040e610
mov byte [edi + 0x3a9c], 1
mov dword [edi + 0x3b48], 0
mov dword [edi + 0x3b44], 0xff
cmp byte [esi + 0x7c], 0
je 0x406c54
push 0x3e9
push esi
push str.Click_here_to_download_more_Free_Security_Tools_from_SecurityXploded
lea ecx, [esi + 0x88]
call fcn.0042557c
call fcn.0041c867
mov eax, dword [eax + 0xc]
push 0xe1
push eax
call dword [sym.imp.USER32.dll_LoadMenuW]
push eax
lea ecx, [edi + 0x1ee8]
call fcn.0041fa6f
push 0
push dword [edi + 0x1eec]
call dword [sym.imp.USER32.dll_GetSubMenu]
push eax
call fcn.0041fffd
mov esi, dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0x5858ff
mov dword [edi + 0x1ef0], eax
call esi
push eax
lea ecx, [edi + 0x2d60]
call fcn.0041b3e0
push 0x5bb9ff
call esi
push eax
lea ecx, [edi + 0x2d68]
call fcn.0041b3e0
push 0xff00
call esi
push eax
lea ecx, [edi + 0x2d70]
call fcn.0041b3e0
push 0xff00
call esi
push eax
lea ecx, [edi + 0x2d78]
call fcn.0041b3e0
push 0xffffff
call esi
push eax
lea ecx, [edi + 0x2d80]
call fcn.0041b3e0
push 0xffffff
call esi
push eax
lea ecx, [edi + 0x2d88]
call fcn.0041b3e0
push 0xb5b7bb
call esi
push eax
lea ecx, [edi + 0x2d90]
call fcn.0041b3e0
push 0xdedfe2
call esi
push eax
lea ecx, [edi + 0x2d98]
call fcn.0041b3e0
push 0
push 0x208
push 0xc5
push dword [edi + 0x1fa0]
call ebx
push 0x100
lea eax, [esp + 0x24]
push 0
push eax
mov dword [esp + 0x28], 0x5c3a43
call fcn.00533910
add esp, 0xc
lea eax, [esp + 0x1c]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [esp + 0x1c]
push eax
lea ecx, [edi + 0x1f80]
mov byte [esp + 0x23], 0
call fcn.0041a301
push 0
lea ecx, [edi + 0x2830]
mov dword [edi + 0x2da8], 0
mov dword [edi + 0x2dac], 0
call fcn.00419971
push 0
lea ecx, [edi + 0x2ac8]
call fcn.00419971
push 0
lea ecx, [edi + 0x3b50]
call fcn.0041a345
sub esp, 8
lea ecx, [edi + 0x3b50]
call fcn.0040bcc0
mov dword [edi + 0x3c3c], eax
test eax, eax
jne 0x406dda
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
lea ecx, [edi + 0x3b50]
call fcn.0040cac0
mov ecx, dword [esp + 0x130]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x118]
xor ecx, esp
call fcn.005308a3
mov esp, ebp
pop ebp
ret