Function at 0x43b5c1
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x4c0
push ebx
push ebp
push esi
push edi
push dword [0x5070f0]
call fcn.00449a23
xor ebp, ebp
mov edi, eax
cmp dword [0x506804], ebp
jne 0x43b948
push ebp
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0043df10
call fcn.0043eb1b
push ebp
call fcn.0043e790
push 1
mov dword [0x5067f8], eax
call fcn.0043e790
push str.My_Documents
push 0x5055a0
mov dword [0x5067f4], eax
call fcn.00497ff6
push str.Name
push 0x5059b0
call fcn.00497ff6
push str.Size
push 0x505bb8
call fcn.00497ff6
push str.Type
push 0x505dc0
call fcn.00497ff6
push str.Attributes
push 0x505fc8
call fcn.00497ff6
push str.Created
push 0x5061d0
call fcn.00497ff6
push str.Modified
push 0x5063d8
call fcn.00497ff6
push str.Accessed
push 0x5065e0
call fcn.00497ff6
add esp, 0x40
xor eax, eax
mov word [esp + 0x2c8], ax
lea eax, [esp + 0x2c8]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x14]
push 0x4001
mov ebx, 0x2b4
push ebx
push eax
push ebp
lea eax, [esp + 0x2d8]
push eax
call esi
mov ecx, dword [0x5067e8]
test eax, eax
lea eax, [esp + 0x10]
cmovne ecx, dword [esp + 0x18]
push eax
push 5
push ebp
mov dword [0x5067e8], ecx
call sub.SHELL32.dll_SHGetSpecialFolderLocation
test eax, eax
jne 0x43b7c9
push 0x5057a8
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [0x501300], eax
test eax, eax
je 0x43b7bd
push 0x4009
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x43b74f
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x43b74f
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x5057a8
call esi
test eax, eax
je 0x43b75a
mov eax, dword [esp + 0x18]
mov dword [0x5067ec], eax
jmp 0x43b760
mov dword [0x501300], ebp
push 0x208
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x43b7ac
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x43b7ac
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x5057a8
call esi
test eax, eax
jne 0x43b7ac
mov dword [0x501300], ebp
jmp 0x43b7bd
lea eax, [esp + 0x20]
push eax
push 0x5055a0
call fcn.00497ff6
pop ecx
pop ecx
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x43b7cf
mov dword [0x501300], ebp
push 0x5057a8
call fcn.004185df
pop ecx
cmp word [eax*2 + 0x5057a6], 0x5c
je 0x43b7f6
push 0x4bc398
push 0x5057a8
call fcn.00498018
pop ecx
pop ecx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x50680c], eax
test eax, eax
je 0x43b85c
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
mov ebx, 0x104
push ebx
push 0x5059b0
push 0x2310
push eax
call esi
push ebx
push 0x505bb8
push 0x2312
push dword [0x50680c]
call esi
push ebx
push 0x505dc0
push 0x2313
push dword [0x50680c]
call esi
push ebx
push 0x5063d8
push 0x2314
push dword [0x50680c]
call esi
mov esi, 0xa8
push esi
push ebp
push 0x5054f8
call fcn.00423330
add esp, 0xc
mov dword [0x5054f8], 0x17
mov dword [0x5054fc], esi
mov dword [0x505500], 0x43a9fc
mov dword [0x505504], 0x43b183
mov dword [0x505514], 0x43be27
mov dword [0x505510], 0x43b436
mov dword [0x505508], 0x43b41d
mov dword [0x50552c], 0x43aee8
mov dword [0x505530], 0x43b275
mov dword [0x505534], 0x43bd6f
mov dword [0x505538], 0x43b2d2
mov dword [0x50553c], 0x43bdba
mov dword [0x505520], 0x43bc0d
mov dword [0x505558], 0x43a8a0
mov dword [0x50555c], 0x43bbc0
mov dword [0x505570], 0x43bca7
mov dword [0x505574], 0x43b21f
mov dword [0x505564], 0x43bc27
mov dword [0x505560], 0x43b1be
mov dword [0x50556c], 0x43bd4a
mov dword [0x505568], 0x43b253
mov dword [0x506804], 1
cmp dword [0x5067fc], ebp
jne 0x43b986
mov eax, dword [edi]
mov esi, dword [sym.imp.USER32.dll_GetParent]
jmp 0x43b962
push dword [0x5067fc]
call esi
push eax
mov dword [0x5067fc], eax
call esi
test eax, eax
jne 0x43b95a
push 0x43b45f
push 0xfffffffffffffffc
push dword [0x5067fc]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [0x506800], eax
mov ebx, dword [esp + 0x4ec]
lea eax, [esp + 0x4e4]
push eax
mov ecx, ebx
lea eax, [esp + 0x4e4]
shr ecx, 0x15
and ecx, 8
or ecx, 0x50010141
push eax
mov esi, ecx
lea eax, [esp + 0x4e4]
push eax
or esi, 4
lea eax, [esp + 0x4e4]
test ebx, 0x200000
push eax
cmovne esi, ecx
call fcn.00443804
push ebp
push dword [0x50368c]
mov ecx, esi
mov eax, ebx
push 0xffffffffffffffff
push dword [edi]
or ecx, 0x8000
test bl, 0x20
push dword [esp + 0x4f4]
cmove ecx, esi
shr eax, 0xb
push dword [esp + 0x4f4]
not eax
push dword [esp + 0x4f4]
and eax, 0x200
push dword [esp + 0x4f4]
push ecx
push ebp
push str.SysListView32
push eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x22f4
push 8
push dword [0x503688]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, eax
test edi, edi
je 0x43bb91
test ebx, ebx
je 0x43bb91
cmp dword [0x5012fc], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x43ba71
push ebp
push ebp
push 0x1023
push edi
call esi
push ebp
push ebp
push 0x1000
push edi
mov dword [0x5012fc], eax
call esi
mov dword [0x506808], eax
push dword [0x5067f4]
mov ebp, 0x1003
push 1
push ebp
push edi
call esi
push dword [0x5067f8]
push 0
push ebp
push edi
call esi
mov ebp, dword [esp + 0x4ec]
mov ecx, ebp
shr ecx, 0x16
and ecx, 1
or ecx, 0x10000
mov edx, ecx
or edx, 0x10
test ebp, 0x800000
cmove edx, ecx
mov ecx, edx
or ecx, 0x20
test ebp, 0x2000000
cmove ecx, edx
push ecx
push ecx
push 0x1036
push edi
call esi
push 0x43af00
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ebp, dword [esp + 0x4d4]
push ebp
push dword [0x5070e0]
mov dword [0x506810], eax
call fcn.00449bd3
mov esi, eax
mov eax, dword [esp + 0x4ec]
or dword [esi + 0x14], 0xffffffff
or dword [esi + 0x18], 0xffffffff
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x10], ebx
mov dword [ebx], edi
mov dword [ebx + 8], eax
mov dword [ebx + 4], ebp
test al, 0x40
je 0x43bb24
and dword [ebx + 0x22f0], 0
mov dword [ebx + 0x22ec], 1
lea eax, [ebx + 0x214]
push 0x4c1ebc
push eax
call fcn.00497ff6
pop ecx
pop ecx
push 0x5054f8
push edi
push esi
push ebp
call fcn.0043d50c
push 0x96
push str.PB_Explorer_Column_Name
or ebx, 0xffffffff
mov edi, eax
push ebx
push esi
call fcn.0043a8a0
push 0x50
push str.PB_Explorer_Column_Size
push ebx
push esi
call fcn.0043a8a0
push 0x50
push str.PB_Explorer_Column_Type
push ebx
push esi
call fcn.0043a8a0
push 0x50
push str.PB_Explorer_Column_Modified
push ebx
push esi
call fcn.0043a8a0
push dword [esp + 0x4e8]
push esi
call fcn.0043be27
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c0
ret 0x1c