Function at 0x43674e
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x4c0
push ebx
push ebp
push esi
push edi
push dword [0x530e78]
call fcn.004419a1
xor ebp, ebp
mov edi, eax
cmp dword [0x53041c], ebp
jne 0x436ad5
push ebp
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.00438b4e
call fcn.004398a8
push ebp
call fcn.0043951d
push 1
mov dword [0x530410], eax
call fcn.0043951d
push str.My_Documents
push 0x52f1b8
mov dword [0x53040c], eax
call fcn.004c9c13
push str.Name
push 0x52f5c8
call fcn.004c9c13
push str.Size
push 0x52f7d0
call fcn.004c9c13
push str.Type
push 0x52f9d8
call fcn.004c9c13
push str.Attributes
push 0x52fbe0
call fcn.004c9c13
push str.Created
push 0x52fde8
call fcn.004c9c13
push str.Modified
push 0x52fff0
call fcn.004c9c13
push str.Accessed
push 0x5301f8
call fcn.004c9c13
add esp, 0x40
xor eax, eax
mov word [esp + 0x2c8], ax
lea eax, [esp + 0x2c8]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x14]
push 0x4001
mov ebx, 0x2b4
push ebx
push eax
push ebp
lea eax, [esp + 0x2d8]
push eax
call esi
mov ecx, dword [0x530400]
test eax, eax
lea eax, [esp + 0x10]
cmovne ecx, dword [esp + 0x18]
push eax
push 5
push ebp
mov dword [0x530400], ecx
call sub.SHELL32.dll_SHGetSpecialFolderLocation
test eax, eax
jne 0x436956
push 0x52f3c0
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [0x52a0dc], eax
test eax, eax
je 0x43694a
push 0x4009
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x4368dc
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x4368dc
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x52f3c0
call esi
test eax, eax
je 0x4368e7
mov eax, dword [esp + 0x18]
mov dword [0x530404], eax
jmp 0x4368ed
mov dword [0x52a0dc], ebp
push 0x208
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x436939
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x436939
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x52f3c0
call esi
test eax, eax
jne 0x436939
mov dword [0x52a0dc], ebp
jmp 0x43694a
lea eax, [esp + 0x20]
push eax
push 0x52f1b8
call fcn.004c9c13
pop ecx
pop ecx
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x43695c
mov dword [0x52a0dc], ebp
push 0x52f3c0
call fcn.0041686c
pop ecx
cmp word [eax*2 + 0x52f3be], 0x5c
je 0x436983
push 0x4f4398
push 0x52f3c0
call fcn.004c9c35
pop ecx
pop ecx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x530424], eax
test eax, eax
je 0x4369e9
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
mov ebx, 0x104
push ebx
push 0x52f5c8
push 0x2310
push eax
call esi
push ebx
push 0x52f7d0
push 0x2312
push dword [0x530424]
call esi
push ebx
push 0x52f9d8
push 0x2313
push dword [0x530424]
call esi
push ebx
push 0x52fff0
push 0x2314
push dword [0x530424]
call esi
mov esi, 0xa8
push esi
push ebp
push 0x52f110
call fcn.00421610
add esp, 0xc
mov dword [0x52f110], 0x17
mov dword [0x52f114], esi
mov dword [0x52f118], 0x435b89
mov dword [0x52f11c], 0x436310
mov dword [0x52f12c], 0x436fb4
mov dword [0x52f128], 0x4365c3
mov dword [0x52f120], 0x4365aa
mov dword [0x52f144], 0x436075
mov dword [0x52f148], 0x436402
mov dword [0x52f14c], 0x436efc
mov dword [0x52f150], 0x43645f
mov dword [0x52f154], 0x436f47
mov dword [0x52f138], 0x436d9a
mov dword [0x52f170], 0x435a2d
mov dword [0x52f174], 0x436d4d
mov dword [0x52f188], 0x436e34
mov dword [0x52f18c], 0x4363ac
mov dword [0x52f17c], 0x436db4
mov dword [0x52f178], 0x43634b
mov dword [0x52f184], 0x436ed7
mov dword [0x52f180], 0x4363e0
mov dword [0x53041c], 1
cmp dword [0x530414], ebp
jne 0x436b13
mov eax, dword [edi]
mov esi, dword [sym.imp.USER32.dll_GetParent]
jmp 0x436aef
push dword [0x530414]
call esi
push eax
mov dword [0x530414], eax
call esi
test eax, eax
jne 0x436ae7
push 0x4365ec
push 0xfffffffffffffffc
push dword [0x530414]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [0x530418], eax
mov ebx, dword [esp + 0x4ec]
lea eax, [esp + 0x4e4]
push eax
mov ecx, ebx
lea eax, [esp + 0x4e4]
shr ecx, 0x15
and ecx, 8
or ecx, 0x50010141
push eax
mov esi, ecx
lea eax, [esp + 0x4e4]
push eax
or esi, 4
lea eax, [esp + 0x4e4]
test ebx, 0x200000
push eax
cmovne esi, ecx
call fcn.0043cb15
push ebp
push dword [0x52d07c]
mov ecx, esi
mov eax, ebx
push 0xffffffffffffffff
push dword [edi]
or ecx, 0x8000
test bl, 0x20
push dword [esp + 0x4f4]
cmove ecx, esi
shr eax, 0xb
push dword [esp + 0x4f4]
not eax
push dword [esp + 0x4f4]
and eax, 0x200
push dword [esp + 0x4f4]
push ecx
push ebp
push str.SysListView32
push eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x22f4
push 8
push dword [0x52d078]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, eax
test edi, edi
je 0x436d1e
test ebx, ebx
je 0x436d1e
cmp dword [0x52a0d8], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x436bfe
push ebp
push ebp
push 0x1023
push edi
call esi
push ebp
push ebp
push 0x1000
push edi
mov dword [0x52a0d8], eax
call esi
mov dword [0x530420], eax
push dword [0x53040c]
mov ebp, 0x1003
push 1
push ebp
push edi
call esi
push dword [0x530410]
push 0
push ebp
push edi
call esi
mov ebp, dword [esp + 0x4ec]
mov ecx, ebp
shr ecx, 0x16
and ecx, 1
or ecx, 0x10000
mov edx, ecx
or edx, 0x10
test ebp, 0x800000
cmove edx, ecx
mov ecx, edx
or ecx, 0x20
test ebp, 0x2000000
cmove ecx, edx
push ecx
push ecx
push 0x1036
push edi
call esi
push 0x43608d
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ebp, dword [esp + 0x4d4]
push ebp
push dword [0x530e94]
mov dword [0x530428], eax
call fcn.00441b7f
mov esi, eax
mov eax, dword [esp + 0x4ec]
or dword [esi + 0x14], 0xffffffff
or dword [esi + 0x18], 0xffffffff
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x10], ebx
mov dword [ebx], edi
mov dword [ebx + 8], eax
mov dword [ebx + 4], ebp
test al, 0x40
je 0x436cb1
and dword [ebx + 0x22f0], 0
mov dword [ebx + 0x22ec], 1
lea eax, [ebx + 0x214]
push 0x4f9c98
push eax
call fcn.004c9c13
pop ecx
pop ecx
push 0x52f110
push edi
push esi
push ebp
call fcn.00438f91
push 0x96
push str.PB_Explorer_Column_Name
or ebx, 0xffffffff
mov edi, eax
push ebx
push esi
call fcn.00435a2d
push 0x50
push str.PB_Explorer_Column_Size
push ebx
push esi
call fcn.00435a2d
push 0x50
push str.PB_Explorer_Column_Type
push ebx
push esi
call fcn.00435a2d
push 0x50
push str.PB_Explorer_Column_Modified
push ebx
push esi
call fcn.00435a2d
push dword [esp + 0x4e8]
push esi
call fcn.00436fb4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c0
ret 0x1c