Function at 0x43ee20
Capabilities:
Get common file path

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x521c8d
push eax
mov dword fs:[0], esp
sub esp, 0x254
push ebx
push ebp
push esi
mov esi, dword [esp + 0x270]
push edi
xor ebx, ebx
xor edi, edi
cmp esi, ebx
je 0x43f1ff
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x43f1ff
mov ebp, dword [esp + 0x278]
mov eax, dword [ebp]
cmp dword [eax - 8], ebx
jne 0x43f1ff
push esi
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x1c]
mov dword [esp + 0x26c], ebx
call sub.MFC42.DLL_CString::TrimLeft_1
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::TrimRight_1
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x14]
call fcn.004c73e6
lea ecx, [esp + 0x28]
mov byte [esp + 0x26c], 1
call sub.MFC42.DLL_CString::CString_3
lea edx, [esp + 0x28]
lea eax, [esp + 0x10]
push edx
push eax
mov byte [esp + 0x274], 2
call fcn.00420e40
mov ecx, dword [esp + 0x18]
add esp, 8
mov eax, dword [ecx - 8]
cmp eax, ebx
je 0x43efac
push ecx
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
je 0x43eefb
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call sub.MFC42.DLL_CString::operator_2
jmp 0x43efac
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
push eax
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString_2
mov byte [esp + 0x26c], 3
mov dword [esp + 0x2c], str.MsiExec.exe
mov dword [esp + 0x30], str.RunDll32.exe
mov dword [esp + 0x34], str.spuninst.exe
lea edi, [esp + 0x2c]
mov ebp, 3
mov esi, dword [edi]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x43ef5b
mov eax, dword [esp + 0x14]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x43ef5b
mov ebx, 1
add edi, 4
dec ebp
jne 0x43ef39
test ebx, ebx
jne 0x43ef94
mov esi, dword [esp + 0x278]
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call sub.MFC42.DLL_CString::operator_2
push 0x104
mov ecx, esi
call sub.MFC42.DLL_CString::GetBuffer
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push 0xffffffffffffffff
mov ecx, esi
call sub.MFC42.DLL_CString::ReleaseBuffer
lea ecx, [esp + 0x14]
mov byte [esp + 0x26c], 2
call sub.MFC42.DLL_CString::CString
mov ebp, dword [esp + 0x278]
mov eax, dword [ebp]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
je 0x43f1b7
mov eax, dword [ebp]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
push eax
call ebx
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::CString_2
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x5d]
mov byte [esp + 0x5c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x161]
mov byte [esp + 0x160], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x14]
mov byte [esp + 0x26c], 4
mov dword [esp + 0x24], 0
stosb byte es:[edi], al
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esp + 0x20]
mov byte [esp + 0x26c], 5
call sub.MFC42.DLL_CString::CString_3
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push 0
lea edx, [esp + 0x60]
push 0x10
push edx
push 0
mov byte [esp + 0x27c], 6
call esi
test eax, eax
je 0x43f05e
lea eax, [esp + 0x5c]
push eax
call ebx
push eax
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::operator_3
push 0
lea ecx, [esp + 0x164]
push 5
push ecx
push 0
call esi
test eax, eax
je 0x43f086
lea edx, [esp + 0x160]
push edx
call ebx
push eax
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::operator_3
push 0x5638b0
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find_2
cmp eax, 0xffffffff
jne 0x43f155
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov esi, dword [sym.imp.MSVCRT.dll__mbsicmp]
push eax
push ecx
call esi
add esp, 8
test eax, eax
je 0x43f155
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
push edx
push eax
call esi
add esp, 8
test eax, eax
je 0x43f155
mov dword [esp + 0x38], str.Windows
mov dword [esp + 0x3c], str.Winnt
mov dword [esp + 0x40], str.System
mov dword [esp + 0x44], str.System32
mov dword [esp + 0x48], str.Program_Files
mov dword [esp + 0x4c], str.Documents_and_Settings
mov dword [esp + 0x50], 0x56385c
mov dword [esp + 0x54], str.Desktop
mov dword [esp + 0x58], str.My_Documents
lea edi, [esp + 0x38]
mov ebx, 9
mov esi, dword [edi]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x43f147
mov ecx, dword [esp + 0x18]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x43f147
mov dword [esp + 0x24], 1
add edi, 4
dec ebx
jne 0x43f122
mov eax, dword [esp + 0x24]
test eax, eax
je 0x43f165
push 0x56f01c
mov ecx, ebp
call sub.MFC42.DLL_CString::operator_3
xor esi, esi
jmp 0x43f182
push 0x5623e8
mov ecx, ebp
call sub.MFC42.DLL_CString::TrimLeft
push 0x5623e8
mov ecx, ebp
call sub.MFC42.DLL_CString::TrimRight
mov esi, 1
lea ecx, [esp + 0x20]
mov byte [esp + 0x26c], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x26c], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x26c], 2
call sub.MFC42.DLL_CString::CString
jmp 0x43f1c5
push 0x56f01c
mov ecx, ebp
call sub.MFC42.DLL_CString::operator_3
xor esi, esi
lea ecx, [esp + 0x28]
mov byte [esp + 0x26c], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov byte [esp + 0x26c], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov dword [esp + 0x26c], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, esi
jmp 0x43f201
mov eax, edi
mov ecx, dword [esp + 0x264]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x260
ret 8