Function at 0x41a868
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x4c0
push ebx
push ebp
push esi
push edi
push dword [0x4bda84]
call fcn.00433fc1
xor edi, edi
mov ebp, eax
cmp dword [0x4ba448], edi
jne 0x41abea
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.00420fb1
call fcn.00422503
push edi
call fcn.00422181
push 1
mov dword [0x4bb748], eax
call fcn.00422181
push str.My_Documents
push 0x4ba500
mov dword [0x4ba4fc], eax
call sub.MSVCRT.dll_wcscpy
push str.Name
push 0x4ba910
call sub.MSVCRT.dll_wcscpy
push str.Size
push 0x4bab18
call sub.MSVCRT.dll_wcscpy
push str.Type
push 0x4bad20
call sub.MSVCRT.dll_wcscpy
push str.Attributes
push 0x4baf28
call sub.MSVCRT.dll_wcscpy
push str.Created
push 0x4bb130
call sub.MSVCRT.dll_wcscpy
push str.Modified
push 0x4bb338
call sub.MSVCRT.dll_wcscpy
push str.Accessed
push 0x4bb540
call sub.MSVCRT.dll_wcscpy
add esp, 0x40
xor eax, eax
mov word [esp + 0x2c8], ax
lea eax, [esp + 0x2c8]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x14]
push 0x4001
mov ebx, 0x2b4
push ebx
push eax
push edi
lea eax, [esp + 0x2d8]
push eax
call esi
test eax, eax
je 0x41a97b
mov eax, dword [esp + 0x18]
mov dword [0x4ba44c], eax
lea eax, [esp + 0x10]
push eax
push 5
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
jne 0x41aa6b
push 0x4ba708
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [0x4b54b0], eax
test eax, eax
je 0x41aa5f
push 0x4009
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x41a9f1
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x41a9f1
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
push 0x4ba708
call esi
test eax, eax
je 0x41a9fc
mov eax, dword [esp + 0x18]
mov dword [0x4ba450], eax
jmp 0x41aa02
mov dword [0x4b54b0], edi
push 0x208
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x41aa46
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x41aa46
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
push 0x4ba708
call esi
test eax, eax
je 0x41aa59
lea eax, [esp + 0x20]
push eax
push 0x4ba500
call sub.MSVCRT.dll_wcscpy
pop ecx
pop ecx
jmp 0x41aa5f
mov dword [0x4b54b0], edi
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x41aa71
mov dword [0x4b54b0], edi
push 0x4ba708
call sub.MSVCRT.dll_wcslen
pop ecx
cmp word [eax*2 + 0x4ba706], 0x5c
je 0x41aa98
push 0x49f36c
push 0x4ba708
call sub.MSVCRT.dll_wcscat
pop ecx
pop ecx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x4bb758], eax
test eax, eax
je 0x41aafe
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
mov ebx, 0x104
push ebx
push 0x4ba910
push 0x2310
push eax
call esi
push ebx
push 0x4bab18
push 0x2312
push dword [0x4bb758]
call esi
push ebx
push 0x4bad20
push 0x2313
push dword [0x4bb758]
call esi
push ebx
push 0x4bb338
push 0x2314
push dword [0x4bb758]
call esi
mov esi, 0xa4
push esi
push edi
push 0x4ba458
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [0x4ba458], 0x17
mov dword [0x4ba45c], esi
mov dword [0x4ba460], 0x419cdb
mov dword [0x4ba464], 0x41a44b
mov dword [0x4ba474], 0x41b08e
mov dword [0x4ba470], 0x41a6de
mov dword [0x4ba468], 0x41a6c6
mov dword [0x4ba48c], 0x41a1b2
mov dword [0x4ba490], 0x41a518
mov dword [0x4ba494], 0x41afd6
mov dword [0x4ba498], 0x41a574
mov dword [0x4ba49c], 0x41b01f
mov dword [0x4ba480], 0x41ae91
mov dword [0x4ba4b8], 0x419b7b
mov dword [0x4ba4bc], 0x41ae44
mov dword [0x4ba4d0], 0x41af0c
mov dword [0x4ba4d4], 0x41a4c2
mov dword [0x4ba4c4], 0x41aeab
mov dword [0x4ba4c0], 0x41a486
mov dword [0x4ba4cc], 0x41afaf
mov dword [0x4ba4c8], 0x41a4f6
mov dword [0x4ba448], 1
cmp dword [0x4bb74c], edi
jne 0x41ac29
mov eax, dword [ebp]
mov esi, dword [sym.imp.USER32.dll_GetParent]
jmp 0x41ac05
push dword [0x4bb74c]
call esi
push eax
mov dword [0x4bb74c], eax
call esi
test eax, eax
jne 0x41abfd
push 0x41a707
push 0xfffffffffffffffc
push dword [0x4bb74c]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [0x4bb750], eax
mov ebx, dword [esp + 0x4ec]
mov esi, 0x50010141
test ebx, 0x1000000
je 0x41ac40
add esi, 8
test ebx, 0x200000
jne 0x41ac4b
or esi, 4
test bl, 0x20
je 0x41ac56
or esi, 0x8000
test ebx, 0x100000
jne 0x41ac63
mov edi, 0x200
lea eax, [esp + 0x4e4]
push eax
lea eax, [esp + 0x4e4]
push eax
lea eax, [esp + 0x4e4]
push eax
lea eax, [esp + 0x4e4]
push eax
call fcn.00424e4c
push 0
push dword [0x4b8b98]
push 0xffffffffffffffff
push dword [ebp]
push dword [esp + 0x4f4]
push dword [esp + 0x4f4]
push dword [esp + 0x4f4]
push dword [esp + 0x4f4]
push esi
push 0
push str.SysListView32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x22f4
push 8
push dword [0x4b8b94]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebp, eax
test edi, edi
je 0x41ae35
test ebp, ebp
je 0x41ae35
cmp dword [0x4b54ac], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x41ad18
push 0
push 0
push 0x1023
push edi
call esi
push 0
push 0
push 0x1000
push edi
mov dword [0x4b54ac], eax
call esi
mov dword [0x4bb754], eax
push dword [0x4ba4fc]
push 1
push 0x1003
push edi
call esi
push dword [0x4bb748]
push 0
push 0x1003
push edi
call esi
mov eax, 0x10000
test ebx, 0x400000
je 0x41ad46
inc eax
test ebx, 0x800000
je 0x41ad51
or eax, 0x10
test ebx, 0x2000000
je 0x41ad5c
or eax, 0x20
push eax
push eax
push 0x1036
push edi
call esi
push 0x41a1ca
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push dword [esp + 0x4d4]
mov dword [0x4bb75c], eax
push dword [0x4bda7c]
call fcn.00434052
mov esi, eax
mov eax, dword [esp + 0x4d4]
or dword [esi + 0x14], 0xffffffff
or dword [esi + 0x18], 0xffffffff
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x10], ebp
mov dword [ebp], edi
mov dword [ebp + 8], ebx
mov dword [ebp + 4], eax
test bl, 0x40
je 0x41adc2
and dword [ebp + 0x22f0], 0
mov dword [ebp + 0x22ec], 1
lea eax, [ebp + 0x214]
push 0x49f354
push eax
call sub.MSVCRT.dll_wcscpy
pop ecx
pop ecx
push 0x4ba458
push edi
push esi
push dword [esp + 0x4e0]
call fcn.00420a53
push 0x96
push str.PB_Explorer_Column_Name
or ebx, 0xffffffff
mov edi, eax
push ebx
push esi
call fcn.00419b7b
push 0x50
push str.PB_Explorer_Column_Size
push ebx
push esi
call fcn.00419b7b
push 0x50
push str.PB_Explorer_Column_Type
push ebx
push esi
call fcn.00419b7b
push 0x50
push str.PB_Explorer_Column_Modified
push ebx
push esi
call fcn.00419b7b
push dword [esp + 0x4e8]
push esi
call fcn.0041b08e
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c0
ret 0x1c