Function at 0x4356a0
Capabilities:
Get common file path

Disassembly:
push 0x364
mov eax, 0x4a160b
call fcn.0045208a
mov esi, ecx
push 0x208
xor ebx, ebx
push ebx
lea eax, [ebp - 0x21c]
push eax
call fcn.0046a220
add esp, 0xc
push 0x104
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x435a74
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x264]
call fcn.00401688
mov dword [ebp - 4], ebx
push str.ImagePath
lea ecx, [ebp - 0x27c]
call fcn.00401688
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24c]
call fcn.00401a80
mov byte [ebp - 4], 2
mov dword [ebp - 0x2c4], ebx
mov byte [ebp - 4], 3
mov dword [ebp - 0x2c0], ebx
mov byte [ebp - 4], 4
mov byte [ebp - 4], 5
push str.HKEY_LOCAL_MACHINESystemCurrentControlSet_servicesRiftEnabler
lea ecx, [ebp - 0x234]
call fcn.00401688
mov byte [ebp - 4], 6
push 0x201
lea edx, [ebp - 0x234]
lea ecx, [ebp - 0x2c8]
call fcn.0043a180
pop ecx
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x2c4]
call fcn.0043a159
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c8]
call fcn.0043a144
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x234]
call fcn.004020b0
push 4
pop edi
mov dword [ebp - 4], edi
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.0043a7a9
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x24c]
call fcn.00402a72
lea ecx, [ebp - 0x24c]
call fcn.00401634
test eax, eax
je 0x435866
mov eax, ecx
push eax
mov edx, 0x4b6b54
lea ecx, [ebp - 0x234]
call fcn.00420c87
pop ecx
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x264]
call fcn.00401af3
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x234]
call fcn.004020b0
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.00435c25
test al, al
jne 0x435862
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2bc]
call fcn.0040f8fe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c0]
call fcn.0043a144
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c4]
call fcn.0043a144
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24c]
call fcn.004020b0
mov byte [ebp - 4], bl
jmp 0x435a5a
mov byte [esi + 0x28], 1
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2bc]
call fcn.0040f8fe
mov dword [ebp - 4], edi
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x264]
call fcn.004016ad
mov byte [ebp - 4], 0x11
push str.HKEY_LOCAL_MACHINESystemCurrentControlSet_servicesOCUSBVID
lea ecx, [ebp - 0x234]
call fcn.00401688
mov byte [ebp - 4], 0x12
push 0x201
lea edx, [ebp - 0x234]
lea ecx, [ebp - 0x2c8]
call fcn.0043a180
pop ecx
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x2c0]
call fcn.0043a159
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2c8]
call fcn.0043a144
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x234]
call fcn.004020b0
mov dword [ebp - 4], edi
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.0043a7a9
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x24c]
call fcn.00402a72
lea ecx, [ebp - 0x24c]
call fcn.00401634
test eax, eax
je 0x435980
mov eax, ecx
push eax
mov edx, 0x4b6b54
lea ecx, [ebp - 0x234]
call fcn.00420c87
pop ecx
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x264]
call fcn.00401af3
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x234]
call fcn.004020b0
lea eax, [esi + 0x2c]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.00435c25
test al, al
jne 0x43597c
mov byte [ebp - 4], 0x17
jmp 0x435822
mov byte [esi + 0x44], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2bc]
call fcn.0040f8fe
mov dword [ebp - 4], 3
jmp 0x435831
lea ecx, [ebp - 0x27c]
call fcn.004020b0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.004020b0
call fcn.00451fd6
ret