Function at 0x435db8
Capabilities:
Get common file path
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60c
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0xfc
xor ebx, ebx
mov dword [ebp - 0x104], 0x5c3a43
lea eax, [ebp - 0x100]
push ebx
push eax
call fcn.00626f50
mov esi, str.RecoverPaltalkPassword
mov dword [ebp - 0x608], 0x400
push esi
push str._s_entered
call fcn.00449974
mov edi, 0x100
lea eax, [ebp - 0x104]
push edi
push eax
call fcn.00411a75
add esp, 0x1c
test eax, eax
jne 0x435e46
push edi
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
jne 0x435e46
push 0x678f10
lea eax, [ebp - 0x104]
push edi
push eax
call fcn.006311ec
add esp, 0xc
lea eax, [ebp - 0x104]
mov byte [ebp - 0x101], bl
push eax
push esi
push str._s_Getting_drive_serial_number_for_root_path__s
call fcn.00449974
push edi
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004111df
add esp, 0x18
test eax, eax
jne 0x435e80
xor eax, eax
jmp 0x435fef
push esi
push str._s_now_searching_in_registry
call fcn.00449974
pop ecx
pop ecx
lea eax, [ebp - 0x60c]
push eax
push 0x20019
push ebx
push str.SoftwareA.V.M.Paltalk_NGcommon_settingscoreuserscreds
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x435ecb
push eax
push esi
push str._s_:_Failed_to_find_paltalk_stored_entries_in_registry__Error0x_.8x
call fcn.00449974
add esp, 0xc
jmp 0x435f41
xor ecx, ecx
lea eax, [ebp - 0x608]
push ecx
push ecx
push ecx
push ecx
push eax
lea eax, [ebp - 0x604]
mov esi, ecx
push eax
push ecx
jmp 0x435f19
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x604]
push eax
call fcn.00433973
pop ecx
pop ecx
inc esi
mov dword [ebp - 0x608], 0x400
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x608]
push eax
lea eax, [ebp - 0x604]
push eax
push esi
push dword [ebp - 0x60c]
call edi
test eax, eax
je 0x435ee4
push eax
mov esi, str.RecoverPaltalkPassword
push esi
push str._s_:_RegEnumKeyEx_returned_with_status__0x_.8x
call fcn.00449974
add esp, 0xc
push dword [ebp - 0x60c]
call ebx
lea eax, [ebp - 0x60c]
push eax
push 0x20019
push 0
push str.SoftwarePaltalk
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x435f77
push eax
push esi
push str._s_:_Failed_to_find_paltalk_stored_entries_in_registry__Error0x_.8x
call fcn.00449974
add esp, 0xc
jmp 0x435e79
xor ecx, ecx
lea eax, [ebp - 0x608]
push ecx
push ecx
push ecx
push ecx
push eax
lea eax, [ebp - 0x604]
mov esi, ecx
push eax
push ecx
jmp 0x435fbb
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x604]
push eax
call fcn.00434697
pop ecx
pop ecx
inc esi
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x608]
push eax
lea eax, [ebp - 0x604]
push eax
push esi
push dword [ebp - 0x60c]
mov dword [ebp - 0x608], 0x400
call edi
test eax, eax
je 0x435f90
push eax
push str.RecoverPaltalkPassword
push str._s_:_RegEnumKeyEx_returned_with_status__0x_.8x
call fcn.00449974
add esp, 0xc
push dword [ebp - 0x60c]
call ebx
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret