Function at 0x10034c90
Capabilities:
Get common file path
Get startup folder

Disassembly:
sub esp, 0x1c
push ebx
push ebp
push esi
mov esi, eax
mov eax, dword [0x101e2cb8]
mov ecx, dword [eax + 4]
push edi
push ecx
mov ecx, 0x101e2ca0
call fcn.10036270
mov eax, dword [0x101e2cb8]
mov dword [eax + 4], eax
mov eax, dword [0x101e2cb8]
xor ebp, ebp
mov dword [0x101e2cbc], ebp
mov dword [eax], eax
mov eax, dword [0x101e2cb8]
mov dword [eax + 8], eax
cmp esi, ebp
je 0x10034cef
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 0xffffffff
call fcn.10035a00
mov ecx, dword [0x101e2c98]
mov eax, dword [ecx]
mov esi, dword [0x101e2c80]
mov edi, eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], edi
jmp 0x10034d10
mov ebx, dword [0x101e2c98]
cmp esi, ebp
je 0x10034d22
cmp esi, dword [0x101e2c80]
je 0x10034d27
call fcn.100d13c5
cmp edi, ebx
je 0x10034d61
cmp esi, ebp
jne 0x10034d5d
call fcn.100d13c5
xor esi, esi
cmp edi, dword [esi + 0x18]
jne 0x10034d40
call fcn.100d13c5
mov edx, dword [edi + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
lea esi, [esp + 0x14]
call fcn.10025e50
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
jmp 0x10034d10
mov esi, dword [esi]
jmp 0x10034d36
mov eax, dword [0x101e2c98]
mov edi, dword [eax + 4]
cmp byte [edi + 0x11], 0
mov esi, edi
jne 0x10034d92
mov ecx, dword [esi + 8]
push ecx
mov ecx, 0x101e2c80
call fcn.10035f30
mov esi, dword [esi]
push edi
call fcn.100d072d
add esp, 4
cmp byte [esi + 0x11], 0
mov edi, esi
je 0x10034d71
mov eax, dword [0x101e2c98]
mov dword [eax + 4], eax
mov eax, dword [0x101e2c98]
mov dword [0x101e2c9c], ebp
mov dword [eax], eax
mov eax, dword [0x101e2c98]
lea edx, [esp + 0x14]
mov dword [eax + 8], eax
push edx
lea eax, [esp + 0x20]
push eax
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], 0x1012e37c
mov dword [esp + 0x20], ebp
call fcn.10035a00
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x1c], 0x1012e384
mov dword [esp + 0x20], 0
call fcn.10035a00
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x410
push 0x40
call edi
mov ebp, dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov esi, eax
test esi, esi
je 0x10034e3c
push esi
push 1
push 0
push 0x23
push 0
call ebp
test eax, eax
jl 0x10034e35
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 1
call fcn.10035a00
jmp 0x10034e3c
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x10034e83
push esi
push 1
push 0
push 0x1c
push 0
call ebp
test eax, eax
jl 0x10034e7c
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 0
call fcn.10035a00
jmp 0x10034e83
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x10034eca
push esi
push 1
push 0
push 0x18
push 0
call ebp
test eax, eax
jl 0x10034ec3
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 1
call fcn.10035a00
jmp 0x10034eca
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x10034f11
push esi
push 1
push 0
push 0x19
push 0
call ebp
test eax, eax
jl 0x10034f0a
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 1
call fcn.10035a00
jmp 0x10034f11
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x10034f58
push esi
push 1
push 0
push 5
push 0
call ebp
test eax, eax
jl 0x10034f51
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 1
call fcn.10035a00
jmp 0x10034f58
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x10034f9f
push esi
push 1
push 0
push 0
push 0
call ebp
test eax, eax
jl 0x10034f98
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 0
call fcn.10035a00
jmp 0x10034f9f
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x10034fe6
push esi
push 1
push 0
push 0xd
push 0
call ebp
test eax, eax
jl 0x10034fdf
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 2
call fcn.10035a00
jmp 0x10034fe6
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x1003502d
push esi
push 1
push 0
push 0xe
push 0
call ebp
test eax, eax
jl 0x10035026
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 2
call fcn.10035a00
jmp 0x1003502d
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x10035074
push esi
push 1
push 0
push 0x35
push 0
call ebp
test eax, eax
jl 0x1003506d
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 2
call fcn.10035a00
jmp 0x10035074
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x100350bb
push esi
push 1
push 0
push 0x36
push 0
call ebp
test eax, eax
jl 0x100350b4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 2
call fcn.10035a00
jmp 0x100350bb
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x10035102
push esi
push 1
push 0
push 0x37
push 0
call ebp
test eax, eax
jl 0x100350fb
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 2
call fcn.10035a00
jmp 0x10035102
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x410
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x1003514f
push esi
push 1
push 0
push 0x28
push 0
call ebp
test eax, eax
jl 0x10035148
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ebx, 0x101e2ca0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 1
call fcn.10035a00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret