Function at 0x444f3d
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x268
push ebx
push ebp
push esi
push edi
push dword [0x4a0e80]
call fcn.0046154d
xor ebx, ebx
mov edi, eax
cmp dword [0x49f0b0], ebx
jne 0x44530a
push ebx
call dword [sym.imp.OLE32.DLL_CoInitialize]
call fcn.0043d2c2
call fcn.0044b9ad
push ebx
call fcn.0044b635
push 1
mov dword [0x49fa8c], eax
call fcn.0044b635
push str.My_Documents
push 0x49f168
mov dword [0x49f164], eax
call sub.MSVCRT.dll_strcpy
push str.Name
push 0x49f370
call sub.MSVCRT.dll_strcpy
push str.Size
push 0x49f474
call sub.MSVCRT.dll_strcpy
push str.Type
push 0x49f578
call sub.MSVCRT.dll_strcpy
push str.Attributes
push 0x49f67c
call sub.MSVCRT.dll_strcpy
push str.Created
push 0x49f780
call sub.MSVCRT.dll_strcpy
push str.Modified
push 0x49f884
call sub.MSVCRT.dll_strcpy
push str.Accessed
push 0x49f988
call sub.MSVCRT.dll_strcpy
add esp, 0x40
mov byte [esp + 0x174], bl
mov ebp, 0x104
lea eax, [esp + 0x174]
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov esi, dword [sym.imp.SHELL32.DLL_SHGetFileInfoA]
lea eax, [esp + 0x14]
push 0x4001
push 0x160
push eax
push ebx
lea eax, [esp + 0x184]
push eax
call esi
test eax, eax
je 0x44504d
mov eax, dword [esp + 0x18]
mov dword [0x49f0b4], eax
lea eax, [esp + 0x10]
push eax
push 5
push ebx
call dword [sym.imp.SHELL32.DLL_SHGetSpecialFolderLocation]
test eax, eax
jne 0x445155
push 0x49f26c
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.DLL_SHGetPathFromIDListA]
mov dword [0x49b07c], eax
test eax, eax
je 0x445149
push 0x4009
push 0x160
lea eax, [esp + 0x1c]
push eax
push ebx
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x4450cf
push 0x4001
push 0x160
lea eax, [esp + 0x1c]
push eax
push ebx
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x4450cf
push 0x4001
push 0x160
lea eax, [esp + 0x1c]
push eax
push ebx
push 0x49f26c
call esi
test eax, eax
je 0x4450da
mov eax, dword [esp + 0x18]
mov dword [0x49f0b8], eax
jmp 0x4450e0
mov dword [0x49b07c], ebx
push 0x208
push 0x160
lea eax, [esp + 0x1c]
push eax
push ebx
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x445130
push 0x200
push 0x160
lea eax, [esp + 0x1c]
push eax
push ebx
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x445130
push 0x200
push 0x160
lea eax, [esp + 0x1c]
push eax
push ebx
push 0x49f26c
call esi
test eax, eax
je 0x445143
lea eax, [esp + 0x20]
push eax
push 0x49f168
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
jmp 0x445149
mov dword [0x49b07c], ebx
push dword [esp + 0x10]
call dword [sym.imp.OLE32.DLL_CoTaskMemFree]
jmp 0x44515b
mov dword [0x49b07c], ebx
push 0x49f26c
call sub.MSVCRT.dll_strlen
pop ecx
cmp byte [eax + 0x49f26b], 0x5c
je 0x445180
push 0x489094
push 0x49f26c
call sub.MSVCRT.dll_strcat
pop ecx
pop ecx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x49fa9c], eax
test eax, eax
je 0x44521e
mov esi, dword [sym.imp.USER32.DLL_LoadStringA]
push ebp
push 0x49f370
push 0x2310
push eax
call esi
push ebp
push 0x49f474
push 0x2312
push dword [0x49fa9c]
call esi
push ebp
push 0x49f578
push 0x2313
push dword [0x49fa9c]
call esi
push ebp
push 0x49f67c
push 0x231b
push dword [0x49fa9c]
call esi
push ebp
push 0x49f780
push 0x2324
push dword [0x49fa9c]
call esi
push ebp
push 0x49f884
push 0x2314
push dword [0x49fa9c]
call esi
push ebp
push 0x49f988
push 0x2325
push dword [0x49fa9c]
call esi
mov esi, 0xa4
push esi
push ebx
push 0x49f0c0
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [0x49f0c0], 0x17
mov dword [0x49f0c4], esi
mov dword [0x49f0c8], 0x4443dc
mov dword [0x49f0cc], 0x444b2c
mov dword [0x49f0dc], 0x44577b
mov dword [0x49f0d8], 0x444db8
mov dword [0x49f0d0], 0x444da0
mov dword [0x49f0f4], 0x4448a9
mov dword [0x49f0f8], 0x444bf9
mov dword [0x49f0fc], 0x4456c3
mov dword [0x49f100], 0x444c55
mov dword [0x49f104], 0x44570c
mov dword [0x49f0e8], 0x445587
mov dword [0x49f120], 0x444281
mov dword [0x49f124], 0x44553a
mov dword [0x49f138], 0x4455f9
mov dword [0x49f13c], 0x444ba3
mov dword [0x49f12c], 0x4455a1
mov dword [0x49f128], 0x444b67
mov dword [0x49f134], 0x44569c
mov dword [0x49f130], 0x444bd7
mov dword [0x49f0b0], 1
cmp dword [0x49fa90], ebx
jne 0x445348
mov eax, dword [edi]
mov esi, dword [sym.imp.USER32.DLL_GetParent]
jmp 0x445324
push dword [0x49fa90]
call esi
push eax
mov dword [0x49fa90], eax
call esi
test eax, eax
jne 0x44531c
push 0x444de1
push 0xfffffffffffffffc
push dword [0x49fa90]
call dword [sym.imp.USER32.DLL_SetWindowLongA]
mov dword [0x49fa94], eax
mov ebx, dword [esp + 0x294]
mov eax, 0x50000141
test ebx, 0x1000000
je 0x44535f
add eax, 8
test ebx, 0x200000
jne 0x44536a
or eax, 4
test bl, 0x20
je 0x445374
or eax, 0x8000
xor ecx, ecx
test ebx, 0x100000
jne 0x445383
mov ecx, 0x200
push 0
push dword [0x49d75c]
push 0xffffffffffffffff
push dword [edi]
push dword [esp + 0x29c]
push dword [esp + 0x29c]
push dword [esp + 0x29c]
push dword [esp + 0x29c]
push eax
push 0
push str.SysListView32
push ecx
call dword [sym.imp.USER32.DLL_CreateWindowExA]
push 0x11f0
push 8
push dword [0x49d758]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebp, eax
test esi, esi
je 0x44552b
test ebp, ebp
je 0x44552b
cmp dword [0x49b078], 0xffffffff
mov edi, dword [sym.imp.USER32.DLL_SendMessageA]
jne 0x445412
push 0
push 0
push 0x1023
push esi
call edi
push 0
push 0
push 0x1000
push esi
mov dword [0x49b078], eax
call edi
mov dword [0x49fa98], eax
push dword [0x49f164]
push 1
push 0x1003
push esi
call edi
push dword [0x49fa8c]
push 0
push 0x1003
push esi
call edi
mov eax, 0x10000
test ebx, 0x400000
je 0x445440
inc eax
test ebx, 0x800000
je 0x44544b
or eax, 0x10
test ebx, 0x2000000
je 0x445456
or eax, 0x20
push eax
push eax
push 0x1036
push esi
call edi
push 0x4448c1
push 0xfffffffffffffffc
push esi
call dword [sym.imp.USER32.DLL_SetWindowLongA]
push dword [esp + 0x27c]
mov dword [0x49faa0], eax
push dword [0x4a0fd8]
call fcn.004616fd
mov edi, eax
mov eax, dword [esp + 0x27c]
or dword [edi + 0x14], 0xffffffff
or dword [edi + 0x18], 0xffffffff
or dword [edi + 0x1c], 0xffffffff
mov dword [edi + 0x10], ebp
mov dword [ebp], esi
mov dword [ebp + 8], ebx
mov dword [ebp + 4], eax
test bl, 0x40
je 0x4454bc
and dword [ebp + 0x11ec], 0
mov dword [ebp + 0x11e8], 1
lea eax, [ebp + 0x110]
push 0x489090
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
push 0x49f0c0
push esi
push edi
push dword [esp + 0x288]
call fcn.0044a1fc
push 0x64
pop ebx
push ebx
push str.PB_Explorer_Column_Name
or ebp, 0xffffffff
mov esi, eax
push ebp
push edi
call fcn.00444281
push ebx
push str.PB_Explorer_Column_Size
push ebp
push edi
call fcn.00444281
push ebx
push str.PB_Explorer_Column_Type
push ebp
push edi
call fcn.00444281
push ebx
push str.PB_Explorer_Column_Modified
push ebp
push edi
call fcn.00444281
push dword [esp + 0x290]
push edi
call fcn.0044577b
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x268
ret 0x1c