Function at 0x43622d
Capabilities:
Get common file path

Disassembly:
push 0x424
mov eax, 0x46ba08
call fcn.00468ea6
mov eax, dword [0x475014]
mov edi, 0x100
cmp eax, 0x475014
je 0x43626f
test dword [eax + 0x1c], edi
je 0x43626f
cmp byte [eax + 0x19], 4
jb 0x43626f
push dword [eax + 0x14]
mov esi, 0x40cdf8
push dword [eax + 0x10]
mov edx, esi
push 0x34
pop ecx
call fcn.00414ca8
jmp 0x436274
mov esi, 0x40cdf8
lea ecx, [ebp - 0x42c]
call dword [sym.imp.MFC42u.dll_CString::CString_3]
and dword [ebp - 4], 0
xor eax, eax
mov ebx, 0x206
mov word [ebp - 0x220], ax
push ebx
push eax
lea eax, [ebp - 0x21e]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
xor eax, eax
mov word [ebp - 0x428], ax
lea eax, [ebp - 0x426]
push ebx
xor ebx, ebx
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov byte [ebp - 4], 1
call dword [sym.imp.MFC42u.dll_AfxGetModuleState]
push 0x40c9b4
push 0x40a2b8
push 0x40c9cc
lea ecx, [ebp - 0x430]
push ecx
mov ecx, dword [eax + 4]
call dword [sym.imp.MFC42u.dll_CWinApp::GetProfileStringW]
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 2
call dword [0x478574]
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 1
call dword [sym.imp.MFC42u.dll_CString::CString]
push 0x104
push 5
lea edx, [ebp - 0x220]
mov dword [ebp - 4], ebx
pop ecx
call fcn.0041f2c4
test eax, eax
jne 0x43636e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x475014]
cmp ecx, 0x475014
je 0x436358
test dword [ecx + 0x1c], edi
je 0x436358
cmp byte [ecx + 0x19], 2
jb 0x436358
push eax
push 0x40a32c
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x36
mov edx, esi
pop ecx
call fcn.00414cf4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x42c]
call dword [sym.imp.MFC42u.dll_CString::CString]
call fcn.00468de4
ret
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 4
push eax
mov ecx, 0x476b84
call dword [0x4786b4]
mov eax, dword [ebp - 0x42c]
cmp dword [eax - 8], ebx
jle 0x436394
movzx ecx, word [eax]
jmp 0x436396
mov ecx, ebx
push 0x5c
pop edx
cmp dx, cx
je 0x4363b0
push edx
mov ecx, 0x476b84
call dword [sym.imp.MFC42u.dll_CString::operator_2]
mov eax, dword [ebp - 0x42c]
push eax
mov edx, 0x104
lea ecx, [ebp - 0x220]
call fcn.0041b6c9
test eax, eax
jns 0x4363f5
mov ecx, dword [0x475014]
cmp ecx, 0x475014
je 0x436358
test dword [ecx + 0x1c], edi
je 0x436358
cmp byte [ecx + 0x19], 2
jb 0x436358
push eax
push 0x40a36c
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x37
jmp 0x436350
lea ecx, [ebp - 0x220]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x4363fe
sub ecx, edx
sar ecx, 1
push 0x5c
pop eax
cmp ax, word [ebp + ecx*2 - 0x222]
jne 0x436437
lea ecx, [ecx*2 - 2]
cmp ecx, 0x208
jae 0x4364d3
xor eax, eax
mov word [ebp + ecx - 0x220], ax
lea eax, [ebp - 0x220]
mov ecx, 0x476b84
push eax
call dword [sym.imp.MFC42u.dll_CString::operator_1]
lea eax, [ebp - 0x428]
push eax
push 0x40c9b4
push ebx
push ebx
push 0x8005
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathAndSubDirW]
mov ecx, eax
test ecx, ecx
js 0x436529
push 0xe105
push 0x40a3a4
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov edx, eax
test edx, edx
jns 0x4364d8
mov ecx, edx
and ecx, 0x1fff0000
cmp ecx, 0x70000
jne 0x43649d
movzx edx, dx
mov eax, dword [0x475014]
cmp eax, 0x475014
je 0x436358
test dword [eax + 0x1c], edi
je 0x436358
cmp byte [eax + 0x19], 2
jb 0x436358
push edx
push 0x40c9d8
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x39
jmp 0x436350
call fcn.0046940e
mov ecx, dword [0x476b84]
call fcn.0041dd77
test eax, eax
jne 0x436358
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x475014]
cmp ecx, 0x475014
je 0x436358
test dword [ecx + 0x1c], edi
je 0x436358
cmp byte [ecx + 0x19], 2
jb 0x436358
push eax
push 0x40b6a4
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x3a
jmp 0x436350
mov eax, ecx
and eax, 0x1fff0000
cmp eax, 0x70000
jne 0x43653a
movzx ecx, cx
mov eax, dword [0x475014]
cmp eax, 0x475014
je 0x436358
test dword [eax + 0x1c], edi
je 0x436358
cmp byte [eax + 0x19], 2
jb 0x436358
push ecx
push 0x40ca20
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x3b
jmp 0x436350