Function at 0x41fb92
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x4c0
push ebx
push ebp
push esi
push edi
push dword [0x4e8b7c]
call fcn.0042b430
xor ebp, ebp
mov edi, eax
cmp dword [0x4e8a9c], ebp
jne 0x41ff13
push ebp
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0044923b
call fcn.00449f06
push ebp
call fcn.00449ec3
push 1
mov dword [0x4e8a90], eax
call fcn.00449ec3
push str.My_Documents
push 0x4e7838
mov dword [0x4e8a8c], eax
call fcn.0042be0a
push str.Name
push 0x4e7c48
call fcn.0042be0a
push str.Size
push 0x4e7e50
call fcn.0042be0a
push str.Type
push 0x4e8058
call fcn.0042be0a
push str.Attributes
push 0x4e8260
call fcn.0042be0a
push str.Created
push 0x4e8468
call fcn.0042be0a
push str.Modified
push 0x4e8670
call fcn.0042be0a
push str.Accessed
push 0x4e8878
call fcn.0042be0a
add esp, 0x40
xor eax, eax
mov word [esp + 0x2c8], ax
lea eax, [esp + 0x2c8]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x14]
push 0x4001
mov ebx, 0x2b4
push ebx
push eax
push ebp
lea eax, [esp + 0x2d8]
push eax
call esi
test eax, eax
je 0x41fca5
mov eax, dword [esp + 0x18]
mov dword [0x4e8a80], eax
lea eax, [esp + 0x10]
push eax
push 5
push ebp
call sub.SHELL32.dll_SHGetSpecialFolderLocation
test eax, eax
jne 0x41fd94
push 0x4e7a40
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [0x4e6590], eax
test eax, eax
je 0x41fd88
push 0x4009
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x41fd1a
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x41fd1a
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x4e7a40
call esi
test eax, eax
je 0x41fd25
mov eax, dword [esp + 0x18]
mov dword [0x4e8a84], eax
jmp 0x41fd2b
mov dword [0x4e6590], ebp
push 0x208
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x41fd77
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x41fd77
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x4e7a40
call esi
test eax, eax
jne 0x41fd77
mov dword [0x4e6590], ebp
jmp 0x41fd88
lea eax, [esp + 0x20]
push eax
push 0x4e7838
call fcn.0042be0a
pop ecx
pop ecx
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x41fd9a
mov dword [0x4e6590], ebp
push 0x4e7a40
call fcn.0042be2c
pop ecx
cmp word [eax*2 + 0x4e7a3e], 0x5c
je 0x41fdc1
push 0x4a5764
push 0x4e7a40
call fcn.0042c48f
pop ecx
pop ecx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x4e8aa4], eax
test eax, eax
je 0x41fe27
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
mov ebx, 0x104
push ebx
push 0x4e7c48
push 0x2310
push eax
call esi
push ebx
push 0x4e7e50
push 0x2312
push dword [0x4e8aa4]
call esi
push ebx
push 0x4e8058
push 0x2313
push dword [0x4e8aa4]
call esi
push ebx
push 0x4e8670
push 0x2314
push dword [0x4e8aa4]
call esi
mov esi, 0xa8
push esi
push ebp
push 0x4e7790
call fcn.0042bcb0
add esp, 0xc
mov dword [0x4e7790], 0x17
mov dword [0x4e7794], esi
mov dword [0x4e7798], 0x4217cf
mov dword [0x4e779c], 0x421b4d
mov dword [0x4e77ac], 0x420dce
mov dword [0x4e77a8], 0x421b88
mov dword [0x4e77a0], 0x421bb1
mov dword [0x4e77c4], 0x421bca
mov dword [0x4e77c8], 0x421d2d
mov dword [0x4e77cc], 0x421d87
mov dword [0x4e77d0], 0x421be2
mov dword [0x4e77d4], 0x421de8
mov dword [0x4e77b8], 0x421dce
mov dword [0x4e77f0], 0x421e55
mov dword [0x4e77f4], 0x421fb5
mov dword [0x4e7808], 0x422002
mov dword [0x4e780c], 0x4220a5
mov dword [0x4e77fc], 0x42212d
mov dword [0x4e77f8], 0x420cc5
mov dword [0x4e7804], 0x4220d9
mov dword [0x4e7800], 0x422105
mov dword [0x4e8a9c], 1
cmp dword [0x4e8a94], ebp
jne 0x41ff51
mov eax, dword [edi]
mov esi, dword [sym.imp.USER32.dll_GetParent]
jmp 0x41ff2d
push dword [0x4e8a94]
call esi
push eax
mov dword [0x4e8a94], eax
call esi
test eax, eax
jne 0x41ff25
push 0x420399
push 0xfffffffffffffffc
push dword [0x4e8a94]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [0x4e8a98], eax
mov ebx, dword [esp + 0x4ec]
mov esi, ebx
shr esi, 0x15
and esi, 8
or esi, 0x50010141
test ebx, 0x200000
jne 0x41ff71
or esi, 4
test bl, 0x20
je 0x41ff7c
or esi, 0x8000
lea eax, [esp + 0x4e4]
push eax
lea eax, [esp + 0x4e4]
push eax
lea eax, [esp + 0x4e4]
push eax
lea eax, [esp + 0x4e4]
push eax
call fcn.0044909f
push ebp
push dword [0x4e6f10]
mov eax, ebx
push 0xffffffffffffffff
push dword [edi]
shr eax, 0xb
push dword [esp + 0x4f4]
not eax
push dword [esp + 0x4f4]
and eax, 0x200
push dword [esp + 0x4f4]
push dword [esp + 0x4f4]
push esi
push ebp
push str.SysListView32
push eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x22f4
push 8
push dword [0x4e6f0c]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebp, eax
test edi, edi
je 0x420156
test ebp, ebp
je 0x420156
cmp dword [0x4e658c], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x42003a
push 0
push 0
push 0x1023
push edi
call esi
push 0
push 0
push 0x1000
push edi
mov dword [0x4e658c], eax
call esi
mov dword [0x4e8aa0], eax
push dword [0x4e8a8c]
push 1
push 0x1003
push edi
call esi
push dword [0x4e8a90]
push 0
push 0x1003
push edi
call esi
mov eax, ebx
shr eax, 0x16
and eax, 1
or eax, 0x10000
test ebx, 0x800000
je 0x420072
or eax, 0x10
test ebx, 0x2000000
je 0x42007d
or eax, 0x20
push eax
push eax
push 0x1036
push edi
call esi
push 0x4221ad
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push dword [esp + 0x4d4]
mov dword [0x4e8aa8], eax
push dword [0x4e8b78]
call fcn.0042c583
mov esi, eax
mov eax, dword [esp + 0x4d4]
or dword [esi + 0x14], 0xffffffff
or dword [esi + 0x18], 0xffffffff
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x10], ebp
mov dword [ebp], edi
mov dword [ebp + 8], ebx
mov dword [ebp + 4], eax
test bl, 0x40
je 0x4200e3
and dword [ebp + 0x22f0], 0
mov dword [ebp + 0x22ec], 1
lea eax, [ebp + 0x214]
push 0x4a6450
push eax
call fcn.0042be0a
pop ecx
pop ecx
push 0x4e7790
push edi
push esi
push dword [esp + 0x4e0]
call fcn.00448f11
push 0x96
push str.PB_Explorer_Column_Name
or ebx, 0xffffffff
mov edi, eax
push ebx
push esi
call fcn.00421e55
push 0x50
push str.PB_Explorer_Column_Size
push ebx
push esi
call fcn.00421e55
push 0x50
push str.PB_Explorer_Column_Type
push ebx
push esi
call fcn.00421e55
push 0x50
push str.PB_Explorer_Column_Modified
push ebx
push esi
call fcn.00421e55
push dword [esp + 0x4e8]
push esi
call fcn.00420dce
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c0
ret 0x1c