Function at 0x434720
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dfb22
mov eax, dword fs:[0]
push eax
sub esp, 0x28c
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x268], ebx
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00480640
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea edi, [ebp - 0x218]
add edi, 0xfffffffe
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x434790
mov eax, dword [0x5e6ba4]
mov dword [edi], eax
cmp word [ebp - 0x218], 0
jne 0x4347b1
xor ecx, ecx
jmp 0x4347cf
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4347c0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
mov ecx, ebx
push eax
call fcn.00402ad0
mov eax, dword [0x679464]
test eax, eax
jne 0x43481c
push 0x15c
call fcn.0046d56f
add esp, 4
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x43480e
mov ecx, eax
call fcn.00443b90
jmp 0x434810
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x679464], eax
mov ecx, eax
call fcn.00471d44
mov edx, eax
mov dword [ebp - 0x24c], 7
xor eax, eax
mov dword [ebp - 0x250], 0
mov word [ebp - 0x260], ax
cmp word [edx], ax
jne 0x43484b
xor ecx, ecx
jmp 0x43485f
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x434850
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.00402ad0
mov dword [ebp - 4], 1
call fcn.00452579
test al, al
je 0x434898
jbe 0x4348a6
inc eax
cmp al, 0xdb
mov byte [0x22ec0526], al
adc edi, dword [edx - 0x6e]
loopne 0x434831
fcomp qword [edx]
add eax, 0xe0d543ce
mov ebx, dword [ebp - 0x268]
lea ecx, [ebp - 0x298]
call fcn.00464345
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 2
call fcn.0046440b
test eax, eax
je 0x434a4a
std
invalid
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 0
push eax
lea ecx, [ebp - 0x298]
call fcn.004645f8
call fcn.004523db
test al, al
je 0x4348ef
sbb al, 0x8a
inc ebp
sub al, 0xb8
aad 0xd9
cli
xchg ebp, eax
mov ch, byte [edx + ebx*2 + 0x220f5718]
push 0xb
xor eax, eax
mov dword [ebp - 0x21c], 7
push str.WOver32.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
call fcn.00402ad0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 3
push eax
push ebx
lea eax, [ebp - 0x260]
mov ecx, ebx
push eax
call fcn.00430fc0
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x43495a
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402c20
push 0xb
xor eax, eax
mov dword [ebp - 0x21c], 7
push str.WOver64.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
call fcn.00402ad0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 4
push eax
push ebx
lea eax, [ebp - 0x260]
mov ecx, ebx
push eax
call fcn.00430fc0
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x4349c5
invalid
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402c20
call fcn.004524ef
test al, al
je 0x4349ed
add byte [eax + eax*8 - 0x3a0e08c], al
pop edi
cld
lea ebp, [ebx*4 + 0x21632ea2]
hlt
call fcn.00451f8b
test al, al
je 0x434a0f
jb 0x4349a7
inc eax
cwde
test dword [ebp + 0x2c], ecx
std
aam 0x69
adc eax, 0x8750c486
mov bl, bl
out dx, eax
mov edi, 0xae52a41f
jno 0x4349c9
call fcn.0045223d
test al, al
je 0x434a34
xchg ecx, eax
fbld tbyte [ebx]
sti
mov dword [0xafd49dbd], eax
jne 0x434a35
invalid
push dword [ebp - 0x264]
lea ecx, [ebp - 0x298]
call fcn.00464616
jmp 0x434b20
mov ch, 0x9c
std
invalid
push 0xb
xor eax, eax
mov dword [ebp - 0x21c], 7
push str.WOver32.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
call fcn.00402ad0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 5
push eax
push ebx
lea eax, [ebp - 0x260]
mov ecx, ebx
push eax
call fcn.00430fc0
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x434ab5
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402c20
push 0xb
xor eax, eax
mov dword [ebp - 0x21c], 7
push str.WOver64.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
call fcn.00402ad0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 6
push eax
push ebx
lea eax, [ebp - 0x260]
mov ecx, ebx
push eax
call fcn.00430fc0
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x434b20
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402c20
call fcn.004521f8
test al, al
je 0x434b44
stosb byte es:[edi], al
jle 0x434b4e
shr byte [esi + 0x2057343a], 1
pop esi
invalid
call fcn.0045209f
test al, al
je 0x434b6b
pop edx
pop edx
sub byte [ebp + 0x4298829a], ah
dec byte [ebx]
inc eax
cli
rcr dword [eax - 0x6da65200], 1
jmp 0xfcd30827
xor eax, eax
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x274], 0
inc dword [eax]
add byte [eax], al
add bh, al
test dword [ebp + edi*8 + 0xffff], ecx
add byte [eax], al
mov dword [ebp - 0x234], 7
mov dword [ebp - 0x238], 0
mov word [ebp - 0x248], ax
mov byte [ebp - 4], 7
call fcn.0045209f
test al, al
je 0x434bd2
int1
cmpsd dword [esi], dword es:[edi]
clc
in eax, 0x32
cdq
loope 0x434c1b
jle 0x434b7c
fild word [edx + 0x3b]
xlatb
xchg byte [eax - 0x2c307ab7], ch
sbb al, 0x18
jp 0x434c17
mov ah, 0x1c
push es
xlatb
sbb dword [eax], ebp
lea ebp, [edx + 6]
push 6
push str.CLSID_
lea ecx, [ebp - 0x248]
call fcn.00402ad0
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x26c]
push ecx
push 0xf013f
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push 0
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x264], eax
call fcn.00452351
invalid
add dword [eax], eax
test al, al
je 0x434c38
adc al, 0xd1
add edi, dword [esi]
jg 0x434c5b
mov dh, 0
push ebx
mov ch, 0xd8
invalid
call fcn.004520e4
test al, al
je 0x434c59
sbb dl, byte [esi - 0x4e]
loope 0x434cbc
and al, byte [edi - 0x48]
scasd eax, dword es:[edi]
and al, 0xc8
adc ebx, esp
xchg ebx, eax
daa
salc
add ebx, eax
nop
xor al, 0xc9
lds ecx, [ebx + 0x1d510e8]
call fcn.0045216e
test al, al
je 0x434c7a
aad 1
add byte [eax + eax*8 - 0x72dfe78c], al
call 0xa020e46a
and byte [ebp - 0x2267fe18], cl
lahf
xchg bl, ch
outsb dx, byte [esi]
ret 0xcb67
cmp dword [ebp - 0x264], 0
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0x268]
jne 0x434ca9
push dword [ebp - 0x26c]
mov ecx, ebx
call fcn.00431650
mov eax, dword [ebp - 0x26c]
test eax, eax
je 0x434ca9
push eax
call edi
push 0x17
push str.SOFTWAREClassesCLSID_
lea ecx, [ebp - 0x248]
call fcn.00402ad0
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x270]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push ecx
mov ebp, 0xfffffdcc
or byte [ebp - 0x26f73], cl
dec dword [ebx + 0x5e600c35]
add byte [ebp - 0x2477b], cl
dec dword [edi]
inc ebx
test dword [eax + 0x51fffffd], edi
push 0xf013f
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
mov dword [ebp - 0x264], eax
call fcn.0045230c
test al, al
je 0x434d18
cmp dword [ebx - 3], ebx
aaa
frstor dword [ecx + 0x638cd89d]
sahf
leave
mov esi, 0x8475f226
into
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp dword [ebp - 0x264], 0
jne 0x434d3b
push dword [ebp - 0x270]
mov ecx, ebx
call fcn.00431650
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x434d3b
push eax
call edi
push 8
push str.TypeLib_
lea ecx, [ebp - 0x248]
call fcn.00402ad0
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x274]
push ecx
push 0xf013f
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push 0
push eax
push SysReAllocString
call esi
mov dword [ebp - 0x264], eax
call fcn.00452579
test al, al
je 0x434d96
invalid
stosd dword es:[edi], eax
sub esi, ecx
cmp eax, 0xd5dfc4b9
add bl, byte [edi - 0x7c4252fa]
mov ebp, 0xfffffd9c
add byte [ebp + 0x1e], dh
cmp dword [ebp - 0x264], 0
jne 0x434dbd
push dword [ebp - 0x274]
mov ecx, dword [ebp - 0x268]
call fcn.00431fa0
mov eax, dword [ebp - 0x274]
test eax, eax
je 0x434dbd
add edx, dword [eax - 1]
xlatb
push eax
call edi
call fcn.004524aa
test al, al
je 0x434dd8
jb 0x434d88
cmp al, 0x33
xchg esi, eax
pop ebp
sal dword [esi], 0x2e
imul esp, dword [eax + 0x4df4545], 0x16
xchg esi, eax
cmp ecx, dword [ebx - 0x26773]
invalid
mov ecx, dword [ebp - 0x268]
call 0x432800
call fcn.004523db
test al, al
je 0x434e07
xchg ebp, eax
or esp, ebx
lodsb al, byte [esi]
and esi, dword [edi + ecx*8]
and dl, dl
push 0x4b
xor eax, esp
sbb edx, esi
add ebx, dword [edx - 0x7ba9dbe2]
loope 0x434db9
in eax, 0xa1
nop
push edi
call fcn.0045223d
test al, al
je 0x434e25
pop ebp
and byte [ebx + 0x7549b8b9], ah
loop 0x434dc6
xadd byte [ebx + 0x69], dh
dec byte [eax + ecx*8]
dec edx
sbb byte [ecx - 0x10], al
hlt
invalid
call fcn.00452396
test al, al
je 0x434e40
add al, 0xbe
jne 0x434e23
push edx
cmp ebx, dword [edi]
invalid
mov eax, dword [ebp - 0x234]
cmp eax, 8
jb 0x434e5e
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x234], 7
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x238], 0
mov word [ebp - 0x248], ax
call fcn.00464358
mov eax, dword [ebp - 0x24c]
cmp eax, 8
jb 0x434ea4
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00402c20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d81d
mov esp, ebp
pop ebp
ret