Function at 0x4528d0
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x4c4
push ebx
push ebp
push esi
push edi
push dword [0x49fb64]
call fcn.0046157b
xor ebx, ebx
mov ebp, eax
cmp dword [0x49f140], ebx
jne 0x452c06
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.004557e9
push 1
call fcn.004554de
mov dword [0x49eb0c], eax
test eax, eax
je 0x452d9f
push str.My_Documents
push 0x49eb10
call fcn.00478ca2
push str.My_Computer
push 0x49ef20
call fcn.00478ca2
add esp, 0x10
xor eax, eax
mov word [esp + 0x2cc], ax
lea eax, [esp + 0x2cc]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x18]
push 0x4001
push 0x2b4
push eax
push ebx
lea eax, [esp + 0x2dc]
push eax
call esi
mov ecx, dword [0x49f134]
test eax, eax
lea eax, [esp + 0x10]
cmovne ecx, dword [esp + 0x1c]
push eax
push 5
push ebx
mov dword [0x49f134], ecx
call sub.SHELL32.dll_SHGetSpecialFolderLocation
mov edi, dword [sym.imp.ole32.dll_CoTaskMemFree]
test eax, eax
jne 0x452a8f
push 0x49ed18
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [0x49a478], eax
test eax, eax
je 0x452a87
push 0x4009
push 0x2b4
lea eax, [esp + 0x20]
push eax
push ebx
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x452a0d
push 0x4001
push 0x2b4
lea eax, [esp + 0x20]
push eax
push ebx
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x452a0d
push 0x4001
push 0x2b4
lea eax, [esp + 0x20]
push eax
push ebx
push 0x49ed18
call esi
test eax, eax
je 0x452a18
mov eax, dword [esp + 0x1c]
mov dword [0x49f128], eax
jmp 0x452a1e
mov dword [0x49a478], ebx
push 0x208
push 0x2b4
lea eax, [esp + 0x20]
push eax
push ebx
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x452a76
push 0x200
push 0x2b4
lea eax, [esp + 0x20]
push eax
push ebx
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x452a76
push 0x200
push 0x2b4
lea eax, [esp + 0x20]
push eax
push ebx
push 0x49ed18
call esi
test eax, eax
jne 0x452a76
mov dword [0x49a478], ebx
jmp 0x452a87
lea eax, [esp + 0x24]
push eax
push 0x49eb10
call fcn.00478ca2
pop ecx
pop ecx
push dword [esp + 0x10]
call edi
jmp 0x452a95
mov dword [0x49a478], ebx
push 0x49ed18
call fcn.00431db2
pop ecx
cmp word [eax*2 + 0x49ed16], 0x5c
je 0x452abc
push 0x485398
push 0x49ed18
call fcn.00478cc4
pop ecx
pop ecx
lea eax, [esp + 0x14]
push eax
push 0x11
push ebx
call sub.SHELL32.dll_SHGetSpecialFolderLocation
test eax, eax
lea eax, [esp + 0x18]
jne 0x452b29
push 0x4009
push 0x2b4
push eax
push ebx
push dword [esp + 0x24]
call esi
mov ecx, dword [0x49f12c]
test eax, eax
push 0x208
cmovne ecx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push 0x2b4
push eax
push ebx
push dword [esp + 0x24]
mov dword [0x49f12c], ecx
call esi
test eax, eax
je 0x452b21
lea eax, [esp + 0x24]
push eax
push 0x49ef20
call fcn.00478ca2
pop ecx
pop ecx
push dword [esp + 0x14]
call edi
jmp 0x452b78
push 0x4001
push 0x2b4
push eax
push ebx
mov edi, str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
push edi
call esi
mov ecx, dword [0x49f12c]
test eax, eax
push 0x200
cmovne ecx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push 0x2b4
push eax
push ebx
push edi
mov dword [0x49f12c], ecx
call esi
test eax, eax
je 0x452b78
lea eax, [esp + 0x24]
push eax
push 0x49ef20
call fcn.00478ca2
pop ecx
pop ecx
mov esi, 0xa8
push esi
push ebx
push 0x49ea60
call fcn.0043ca10
add esp, 0xc
mov dword [0x49ea60], 0x18
mov dword [0x49ea64], esi
mov dword [0x49ea68], 0x4511ea
mov dword [0x49ea6c], 0x4517d0
push str.shell32.dll
mov dword [0x49ea7c], 0x45206e
mov dword [0x49ea78], 0x4518f3
mov dword [0x49ea70], 0x451892
mov dword [0x49eadc], 0x451827
mov dword [0x49ead8], 0x451ff3
mov dword [0x49eaa0], 0x452868
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x49f144], eax
mov dword [0x49f140], 1
mov edi, dword [sym.imp.USER32.dll_SetWindowLongW]
cmp dword [0x49f138], ebx
jne 0x452c47
mov eax, dword [ebp]
mov esi, dword [sym.imp.USER32.dll_GetParent]
jmp 0x452c27
push dword [0x49f138]
call esi
push eax
mov dword [0x49f138], eax
call esi
test eax, eax
jne 0x452c1f
push 0x4519ae
push 0xfffffffffffffffc
push dword [0x49f138]
call edi
mov dword [0x49f13c], eax
mov ebx, dword [esp + 0x4f0]
lea eax, [esp + 0x4e8]
push eax
mov ecx, ebx
lea eax, [esp + 0x4e8]
shr ecx, 0x13
and ecx, 0x20
or ecx, 0x50010000
push eax
mov esi, ecx
lea eax, [esp + 0x4e8]
push eax
or esi, 2
lea eax, [esp + 0x4e8]
test ebx, 0x4000000
push eax
cmovne esi, ecx
call fcn.004576d2
push 0
push dword [0x49cc20]
mov ecx, esi
mov eax, ebx
push 0xffffffffffffffff
push dword [ebp]
or ecx, 1
test ebx, 0x8000000
push dword [esp + 0x4f8]
cmovne ecx, esi
shr eax, 0xb
push dword [esp + 0x4f8]
not eax
push dword [esp + 0x4f8]
and eax, 0x200
push dword [esp + 0x4f8]
push ecx
push 0
push str.SysTreeView32
push eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x224
push 8
push dword [0x49cc1c]
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, eax
test ebp, ebp
je 0x452d9f
test ebx, ebx
je 0x452d9f
push dword [0x49eb0c]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x1109
push ebp
call esi
push 4
push 4
push 0x112c
push ebp
call esi
push 0x450f55
push 0xfffffffffffffffc
push ebp
call edi
mov esi, dword [esp + 0x4d8]
push esi
push dword [0x49fb80]
mov dword [0x49eb08], eax
call fcn.00461759
mov edi, eax
lea ecx, [ebx + 0xc]
mov eax, dword [esp + 0x4f0]
push 0x48acfc
push ecx
or dword [edi + 0x14], 0xffffffff
mov dword [edi + 0x10], ebx
mov dword [ebx], ebp
mov dword [ebx + 8], eax
mov dword [ebx + 4], esi
call fcn.00478ca2
pop ecx
pop ecx
push 0x49ea60
push ebp
push edi
push esi
call fcn.004543b0
push 0x488268
push edi
mov esi, eax
call fcn.0045206e
push dword [esp + 0x4ec]
push edi
call fcn.0045206e
mov eax, esi
jmp 0x452da1
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c4
ret 0x1c