Function at 0x44c972
Capabilities:
Get common file path
Get file system object information

Disassembly:
sub esp, 0x4c0
push ebx
push ebp
push esi
push edi
push dword [0x876528]
call fcn.0045c655
xor ebp, ebp
mov edi, eax
cmp dword [0x875674], ebp
jne 0x44ccf9
push ebp
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0044f6b8
call fcn.004508fd
push ebp
call fcn.00450572
push 1
mov dword [0x875668], eax
call fcn.00450572
push str.My_Documents
push 0x874410
mov dword [0x875664], eax
call fcn.0058a803
push 0x5bc0e0
push 0x874820
call fcn.0058a803
push 0x5bc0ec
push 0x874a28
call fcn.0058a803
push 0x5bc0f8
push 0x874c30
call fcn.0058a803
push 0x5bc104
push 0x874e38
call fcn.0058a803
push 0x5bc11c
push 0x875040
call fcn.0058a803
push 0x5bc12c
push 0x875248
call fcn.0058a803
push 0x5bc140
push 0x875450
call fcn.0058a803
add esp, 0x40
xor eax, eax
mov word [esp + 0x2c8], ax
lea eax, [esp + 0x2c8]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x14]
push 0x4001
mov ebx, 0x2b4
push ebx
push eax
push ebp
lea eax, [esp + 0x2d8]
push eax
call esi
mov ecx, dword [0x875658]
test eax, eax
lea eax, [esp + 0x10]
cmovne ecx, dword [esp + 0x18]
push eax
push 5
push ebp
mov dword [0x875658], ecx
call sub.SHELL32.dll_SHGetSpecialFolderLocation
test eax, eax
jne 0x44cb7a
push 0x874618
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [0x86e530], eax
test eax, eax
je 0x44cb6e
push 0x4009
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x44cb00
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x44cb00
push 0x4001
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x874618
call esi
test eax, eax
je 0x44cb0b
mov eax, dword [esp + 0x18]
mov dword [0x87565c], eax
jmp 0x44cb11
mov dword [0x86e530], ebp
push 0x208
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push dword [esp + 0x20]
call esi
test eax, eax
jne 0x44cb5d
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push str.::450d8fba_ad25_11d0_98a8_0800361b1103
call esi
test eax, eax
jne 0x44cb5d
push 0x200
push ebx
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x874618
call esi
test eax, eax
jne 0x44cb5d
mov dword [0x86e530], ebp
jmp 0x44cb6e
lea eax, [esp + 0x20]
push eax
push 0x874410
call fcn.0058a803
pop ecx
pop ecx
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x44cb80
mov dword [0x86e530], ebp
push 0x874618
call fcn.0042267c
pop ecx
cmp word [eax*2 + 0x874616], 0x5c
je 0x44cba7
push 0x5b6398
push 0x874618
call fcn.0058a825
pop ecx
pop ecx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x87567c], eax
test eax, eax
je 0x44cc0d
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
mov ebx, 0x104
push ebx
push 0x874820
push 0x2310
push eax
call esi
push ebx
push 0x874a28
push 0x2312
push dword [0x87567c]
call esi
push ebx
push 0x874c30
push 0x2313
push dword [0x87567c]
call esi
push ebx
push 0x875248
push 0x2314
push dword [0x87567c]
call esi
mov esi, 0xa8
push esi
push ebp
push 0x874368
call fcn.0042d490
add esp, 0xc
mov dword [0x874368], 0x17
mov dword [0x87436c], esi
mov dword [0x874370], 0x44bdad
mov dword [0x874374], 0x44c534
mov dword [0x874384], 0x44d1d8
mov dword [0x874380], 0x44c7e7
mov dword [0x874378], 0x44c7ce
mov dword [0x87439c], 0x44c299
mov dword [0x8743a0], 0x44c626
mov dword [0x8743a4], 0x44d120
mov dword [0x8743a8], 0x44c683
mov dword [0x8743ac], 0x44d16b
mov dword [0x874390], 0x44cfbe
mov dword [0x8743c8], 0x44bc51
mov dword [0x8743cc], 0x44cf71
mov dword [0x8743e0], 0x44d058
mov dword [0x8743e4], 0x44c5d0
mov dword [0x8743d4], 0x44cfd8
mov dword [0x8743d0], 0x44c56f
mov dword [0x8743dc], 0x44d0fb
mov dword [0x8743d8], 0x44c604
mov dword [0x875674], 1
cmp dword [0x87566c], ebp
jne 0x44cd37
mov eax, dword [edi]
mov esi, dword [sym.imp.USER32.dll_GetParent]
jmp 0x44cd13
push dword [0x87566c]
call esi
push eax
mov dword [0x87566c], eax
call esi
test eax, eax
jne 0x44cd0b
push 0x44c810
push 0xfffffffffffffffc
push dword [0x87566c]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [0x875670], eax
mov ebx, dword [esp + 0x4ec]
lea eax, [esp + 0x4e4]
push eax
mov ecx, ebx
lea eax, [esp + 0x4e4]
shr ecx, 0x15
and ecx, 8
or ecx, 0x50010141
push eax
mov esi, ecx
lea eax, [esp + 0x4e4]
push eax
or esi, 4
lea eax, [esp + 0x4e4]
test ebx, 0x200000
push eax
cmovne esi, ecx
call fcn.00453b1b
push ebp
push dword [0x871bf8]
mov ecx, esi
mov eax, ebx
push 0xffffffffffffffff
push dword [edi]
or ecx, 0x8000
test bl, 0x20
push dword [esp + 0x4f4]
cmove ecx, esi
shr eax, 0xb
push dword [esp + 0x4f4]
not eax
push dword [esp + 0x4f4]
and eax, 0x200
push dword [esp + 0x4f4]
push ecx
push ebp
push 0x5bbef4
push eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x22f4
push 8
push dword [0x871bf4]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, eax
test edi, edi
je 0x44cf42
test ebx, ebx
je 0x44cf42
cmp dword [0x86e52c], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x44ce22
push ebp
push ebp
push 0x1023
push edi
call esi
push ebp
push ebp
push 0x1000
push edi
mov dword [0x86e52c], eax
call esi
mov dword [0x875678], eax
push dword [0x875664]
mov ebp, 0x1003
push 1
push ebp
push edi
call esi
push dword [0x875668]
push 0
push ebp
push edi
call esi
mov ebp, dword [esp + 0x4ec]
mov ecx, ebp
shr ecx, 0x16
and ecx, 1
or ecx, 0x10000
mov edx, ecx
or edx, 0x10
test ebp, 0x800000
cmove edx, ecx
mov ecx, edx
or ecx, 0x20
test ebp, 0x2000000
cmove ecx, edx
push ecx
push ecx
push 0x1036
push edi
call esi
push 0x44c2b1
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ebp, dword [esp + 0x4d4]
push ebp
push dword [0x876518]
mov dword [0x875680], eax
call fcn.0045c833
mov esi, eax
mov eax, dword [esp + 0x4ec]
or dword [esi + 0x14], 0xffffffff
or dword [esi + 0x18], 0xffffffff
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x10], ebx
mov dword [ebx], edi
mov dword [ebx + 8], eax
mov dword [ebx + 4], ebp
test al, 0x40
je 0x44ced5
and dword [ebx + 0x22f0], 0
mov dword [ebx + 0x22ec], 1
lea eax, [ebx + 0x214]
push 0x5bbf2c
push eax
call fcn.0058a803
pop ecx
pop ecx
push 0x874368
push edi
push esi
push ebp
call fcn.0044f2ab
push 0x96
push str.PB_Explorer_Column_Name
or ebx, 0xffffffff
mov edi, eax
push ebx
push esi
call fcn.0044bc51
push 0x50
push str.PB_Explorer_Column_Size
push ebx
push esi
call fcn.0044bc51
push 0x50
push str.PB_Explorer_Column_Type
push ebx
push esi
call fcn.0044bc51
push 0x50
push str.PB_Explorer_Column_Modified
push ebx
push esi
call fcn.0044bc51
push dword [esp + 0x4e8]
push esi
call fcn.0044d1d8
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c0
ret 0x1c