Function at 0x4339ee
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x4c0
push ebx
push ebp
push esi
push edi
push dword [0x52d904]
call fcn.0043ebe1
xor ebp, ebp
mov edi, eax
cmp dword [0x52ceb4], ebp
jne 0x433d75
push ebp
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.00435dee
call fcn.00436b48
push ebp
call fcn.004367bd
push 1
mov dword [0x52cea8], eax
call fcn.004367bd
push str.My_Documents
push 0x52bc50
mov dword [0x52cea4], eax
call fcn.004c6fd3
push str.Name
push 0x52c060
call fcn.004c6fd3
push str.Size
push 0x52c268
call fcn.004c6fd3
push str.Type
push 0x52c470
call fcn.004c6fd3
push str.Attributes
push 0x52c678
call fcn.004c6fd3
push str.Created
push 0x52c880
call fcn.004c6fd3
push str.Modified
push 0x52ca88
call fcn.004c6fd3
push str.Accessed
push 0x52cc90
call fcn.004c6fd3
add esp, 0x40
xor eax, eax
mov word [esp + 0x2c8], ax
lea eax, [esp + 0x2c8]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x14]
push 0x4001
mov ebx, 0x2b4
push ebx
push eax
push ebp
lea eax, [esp + 0x2d8]
push eax
call esi
mov ecx, dword [0x52ce98]
test eax, eax
lea eax, [esp + 0x10]
cmovne ecx, dword [esp + 0x18]
push eax
push 5
push ebp
mov dword [0x52ce98], ecx
call sub.SHELL32.dll_SHGetSpecialFolderLocation
test eax, eax
jne 0x433bf6
push 0x52be58
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [0x526c14], eax
test eax, eax
je 0x433bea
push 0x4009
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x433b7c
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x433b7c
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x52be58
call esi
test eax, eax
je 0x433b87
mov eax, dword [esp + 0x18]
mov dword [0x52ce9c], eax
jmp 0x433b8d
mov dword [0x526c14], ebp
push 0x208
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x433bd9
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x433bd9
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x52be58
call esi
test eax, eax
jne 0x433bd9
mov dword [0x526c14], ebp
jmp 0x433bea
lea eax, [esp + 0x20]
push eax
push 0x52bc50
call fcn.004c6fd3
pop ecx
pop ecx
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x433bfc
mov dword [0x526c14], ebp
push 0x52be58
call fcn.004146fc
pop ecx
cmp word [eax*2 + 0x52be56], 0x5c
je 0x433c23
push 0x4f1398
push 0x52be58
call fcn.004c6ff5
pop ecx
pop ecx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x52cebc], eax
test eax, eax
je 0x433c89
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
mov ebx, 0x104
push ebx
push 0x52c060
push 0x2310
push eax
call esi
push ebx
push 0x52c268
push 0x2312
push dword [0x52cebc]
call esi
push ebx
push 0x52c470
push 0x2313
push dword [0x52cebc]
call esi
push ebx
push 0x52ca88
push 0x2314
push dword [0x52cebc]
call esi
mov esi, 0xa8
push esi
push ebp
push 0x52bba8
call fcn.0041f4a0
add esp, 0xc
mov dword [0x52bba8], 0x17
mov dword [0x52bbac], esi
mov dword [0x52bbb0], 0x432e29
mov dword [0x52bbb4], 0x4335b0
mov dword [0x52bbc4], 0x434254
mov dword [0x52bbc0], 0x433863
mov dword [0x52bbb8], 0x43384a
mov dword [0x52bbdc], 0x433315
mov dword [0x52bbe0], 0x4336a2
mov dword [0x52bbe4], 0x43419c
mov dword [0x52bbe8], 0x4336ff
mov dword [0x52bbec], 0x4341e7
mov dword [0x52bbd0], 0x43403a
mov dword [0x52bc08], 0x432ccd
mov dword [0x52bc0c], 0x433fed
mov dword [0x52bc20], 0x4340d4
mov dword [0x52bc24], 0x43364c
mov dword [0x52bc14], 0x434054
mov dword [0x52bc10], 0x4335eb
mov dword [0x52bc1c], 0x434177
mov dword [0x52bc18], 0x433680
mov dword [0x52ceb4], 1
cmp dword [0x52ceac], ebp
jne 0x433db3
mov eax, dword [edi]
mov esi, dword [sym.imp.USER32.dll_GetParent]
jmp 0x433d8f
push dword [0x52ceac]
call esi
push eax
mov dword [0x52ceac], eax
call esi
test eax, eax
jne 0x433d87
push 0x43388c
push 0xfffffffffffffffc
push dword [0x52ceac]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [0x52ceb0], eax
mov ebx, dword [esp + 0x4ec]
lea eax, [esp + 0x4e4]
push eax
mov ecx, ebx
lea eax, [esp + 0x4e4]
shr ecx, 0x15
and ecx, 8
or ecx, 0x50010141
push eax
mov esi, ecx
lea eax, [esp + 0x4e4]
push eax
or esi, 4
lea eax, [esp + 0x4e4]
test ebx, 0x200000
push eax
cmovne esi, ecx
call fcn.00439d3d
push ebp
push dword [0x529aec]
mov ecx, esi
mov eax, ebx
push 0xffffffffffffffff
push dword [edi]
or ecx, 0x8000
test bl, 0x20
push dword [esp + 0x4f4]
cmove ecx, esi
shr eax, 0xb
push dword [esp + 0x4f4]
not eax
push dword [esp + 0x4f4]
and eax, 0x200
push dword [esp + 0x4f4]
push ecx
push ebp
push str.SysListView32
push eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x22f4
push 8
push dword [0x529ae8]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, eax
test edi, edi
je 0x433fbe
test ebx, ebx
je 0x433fbe
cmp dword [0x526c10], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x433e9e
push ebp
push ebp
push 0x1023
push edi
call esi
push ebp
push ebp
push 0x1000
push edi
mov dword [0x526c10], eax
call esi
mov dword [0x52ceb8], eax
push dword [0x52cea4]
mov ebp, 0x1003
push 1
push ebp
push edi
call esi
push dword [0x52cea8]
push 0
push ebp
push edi
call esi
mov ebp, dword [esp + 0x4ec]
mov ecx, ebp
shr ecx, 0x16
and ecx, 1
or ecx, 0x10000
mov edx, ecx
or edx, 0x10
test ebp, 0x800000
cmove edx, ecx
mov ecx, edx
or ecx, 0x20
test ebp, 0x2000000
cmove ecx, edx
push ecx
push ecx
push 0x1036
push edi
call esi
push 0x43332d
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ebp, dword [esp + 0x4d4]
push ebp
push dword [0x52d920]
mov dword [0x52cec0], eax
call fcn.0043edbf
mov esi, eax
mov eax, dword [esp + 0x4ec]
or dword [esi + 0x14], 0xffffffff
or dword [esi + 0x18], 0xffffffff
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x10], ebx
mov dword [ebx], edi
mov dword [ebx + 8], eax
mov dword [ebx + 4], ebp
test al, 0x40
je 0x433f51
and dword [ebx + 0x22f0], 0
mov dword [ebx + 0x22ec], 1
lea eax, [ebx + 0x214]
push 0x4f6c58
push eax
call fcn.004c6fd3
pop ecx
pop ecx
push 0x52bba8
push edi
push esi
push ebp
call fcn.00436231
push 0x96
push str.PB_Explorer_Column_Name
or ebx, 0xffffffff
mov edi, eax
push ebx
push esi
call fcn.00432ccd
push 0x50
push str.PB_Explorer_Column_Size
push ebx
push esi
call fcn.00432ccd
push 0x50
push str.PB_Explorer_Column_Type
push ebx
push esi
call fcn.00432ccd
push 0x50
push str.PB_Explorer_Column_Modified
push ebx
push esi
call fcn.00432ccd
push dword [esp + 0x4e8]
push esi
call fcn.00434254
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c0
ret 0x1c