Function at 0x45ea10
Capabilities:
Enumerate files on windows
Get common file path
Get file system object information

Disassembly:
mov eax, 0x316c
call fcn.004ac5b0
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x3164], eax
push ebx
push ebp
push esi
push edi
push 0x29c5
push dword [0x4e6030]
mov dword [esp + 0x18], edx
mov esi, ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, eax
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x978], ax
lea eax, [esp + 0x97a]
push eax
call fcn.0048fb10
add esp, 0xc
xor eax, eax
mov word [esp + 0x2170], ax
push 0x7fe
push eax
lea eax, [esp + 0x217a]
push eax
call fcn.0048fb10
add esp, 0xc
xor eax, eax
mov word [esp + 0x560], ax
push 0x206
push eax
lea eax, [esp + 0x56a]
push eax
call fcn.0048fb10
add esp, 0xc
xor eax, eax
mov word [esp + 0x768], ax
push 0x206
push eax
lea eax, [esp + 0x772]
push eax
call fcn.0048fb10
add esp, 0xc
xor eax, eax
mov word [esp + 0x2970], ax
push 0x7fe
push eax
lea eax, [esp + 0x297a]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x3184]
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea eax, [esp + 0x2970]
push eax
push dword [esp + 0x1c]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push esi
lea eax, [esp + 0x2974]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x2970]
push eax
call fcn.00493613
add esp, 4
cmp eax, 0xffffffff
jne 0x45eb36
xor eax, eax
jmp 0x45f0b0
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x1978], ax
lea eax, [esp + 0x197a]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x310]
push eax
push 0x4b358c
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [esp + 0x14], esi
cmp esi, 0xffffffff
je 0x45f0ab
lea eax, [esp + 0x310]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x45f0a4
mov ebp, dword [sym.imp.SHLWAPI.dll_StrCpyW]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
nop dword [eax + eax]
lea eax, [esp + 0x310]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x45f0a4
push str.desktop.ini
lea eax, [esp + 0x340]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x45eba0
push str..lnk
lea eax, [esp + 0x340]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
push 0
test eax, eax
lea eax, [esp + 0x1974]
push eax
push 0x400
lea eax, [esp + 0x348]
push eax
je 0x45ee63
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea eax, [esp + 0x970]
push eax
lea edx, [esp + 0x1974]
call fcn.00477340
xor eax, eax
lea edx, [esp + 0x564]
add esp, 4
mov word [esp + 0x560], ax
mov word [esp + 0x768], ax
lea ecx, [esp + 0x970]
lea eax, [esp + 0x768]
push eax
call fcn.0045ded0
add esp, 4
lea eax, [esp + 0x970]
push eax
lea eax, [esp + 0x2174]
push eax
call ebp
push 0
lea eax, [esp + 0x974]
push eax
push 0x104
push 0
lea eax, [esp + 0x2180]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
push 0x2b4
lea eax, [esp + 0x5c]
push 0
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x58]
xor esi, esi
push 0x111
push 0x2b4
push eax
push 0x80
lea eax, [esp + 0x980]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
je 0x45ecf0
push dword [esp + 0x58]
push 0xffffffffffffffff
push dword [0x4e2834]
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push dword [0x4e2834]
mov esi, eax
push 1
push 0x1003
push ebx
call edi
push 0
push 0
push 0x1004
push ebx
mov dword [0x4e2954], esi
call edi
mov dword [0x4e293c], eax
mov eax, dword [esp + 0x3184]
mov dword [0x4e2960], eax
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x1178], ax
lea eax, [esp + 0x117a]
push eax
mov dword [0x4e2940], 0
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x1970]
lea esi, [esp + 0x1170]
push 0x5c
push 0
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
test eax, eax
je 0x45ed7c
movzx ecx, word [eax]
test cx, cx
je 0x45ed75
mov edx, esi
sub eax, edx
mov word [esi], cx
add esi, 2
movzx ecx, word [eax + esi]
test cx, cx
jne 0x45ed66
xor eax, eax
mov word [esi], ax
jmp 0x45ed8e
lea eax, [esp + 0x1970]
push eax
lea eax, [esp + 0x1176]
push eax
call ebp
push 0x4e2938
push 0
push 0x104d
lea eax, [esp + 0x117e]
push ebx
mov dword [0x4e294c], eax
call edi
lea eax, [esp + 0x560]
mov dword [esp + 0x24], 1
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4e293c]
push 0x1074
push ebx
call edi
lea eax, [esp + 0x768]
mov dword [esp + 0x24], 2
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4e293c]
push 0x1074
push ebx
call edi
lea eax, [esp + 0x970]
mov dword [esp + 0x24], 3
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4e293c]
push 0x1074
push ebx
call edi
cmp dword [esp + 0x10], 0
mov ecx, 0x2000
mov eax, 0x1000
mov dword [esp + 0x2c], 0xf000
cmovne eax, ecx
mov dword [esp + 0x28], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4e293c]
push 0x102b
push ebx
call edi
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [sym.imp.ole32.dll_OleUninitialize]
mov esi, dword [esp + 0x14]
jmp 0x45eba0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea edx, [esp + 0x970]
lea ecx, [esp + 0x1970]
call fcn.0045e940
xor eax, eax
lea edx, [esp + 0x560]
mov word [esp + 0x560], ax
lea ecx, [esp + 0x970]
mov word [esp + 0x768], ax
lea eax, [esp + 0x768]
push eax
call fcn.0045ded0
add esp, 4
lea eax, [esp + 0x970]
push eax
lea eax, [esp + 0x2174]
push eax
call ebp
push 0
lea eax, [esp + 0x974]
push eax
push 0x104
push 0
lea eax, [esp + 0x2180]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
push 0x2b4
lea eax, [esp + 0x5c]
push 0
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x58]
xor esi, esi
push 0x111
push 0x2b4
push eax
push 0x80
lea eax, [esp + 0x980]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
je 0x45ef3f
push dword [esp + 0x58]
push 0xffffffffffffffff
push dword [0x4e2834]
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push dword [0x4e2834]
mov esi, eax
push 1
push 0x1003
push ebx
call edi
push 0
push 0
push 0x1004
push ebx
mov dword [0x4e2954], esi
call edi
mov dword [0x4e293c], eax
mov eax, dword [esp + 0x3184]
mov dword [0x4e2960], eax
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x1178], ax
lea eax, [esp + 0x117a]
push eax
mov dword [0x4e2940], 0
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x1970]
lea esi, [esp + 0x1170]
push 0x5c
push 0
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
test eax, eax
je 0x45efcb
movzx ecx, word [eax]
test cx, cx
je 0x45efc4
mov edx, esi
sub eax, edx
mov word [esi], cx
add esi, 2
movzx ecx, word [eax + esi]
test cx, cx
jne 0x45efb5
xor eax, eax
mov word [esi], ax
jmp 0x45efdd
lea eax, [esp + 0x1970]
push eax
lea eax, [esp + 0x1176]
push eax
call ebp
push 0x4e2938
push 0
push 0x104d
lea eax, [esp + 0x117e]
push ebx
mov dword [0x4e294c], eax
call edi
lea eax, [esp + 0x560]
mov dword [esp + 0x24], 1
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4e293c]
push 0x1074
push ebx
call edi
lea eax, [esp + 0x768]
mov dword [esp + 0x24], 2
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4e293c]
push 0x1074
push ebx
call edi
lea eax, [esp + 0x970]
mov dword [esp + 0x24], 3
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4e293c]
push 0x1074
push ebx
call edi
cmp dword [esp + 0x10], 0
mov ecx, 0x2000
mov eax, 0x1000
mov dword [esp + 0x2c], 0xf000
cmovne eax, ecx
mov dword [esp + 0x28], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4e293c]
push 0x102b
push ebx
call edi
mov esi, dword [esp + 0x14]
jmp 0x45eba0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
mov ecx, dword [esp + 0x3174]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048ea75
add esp, 0x316c
ret