Function at 0x405620
Capabilities:
Get common file path
Query or enumerate registry value

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
xor edx, edx
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
lea eax, [ebp - 0x698]
push esi
push ebx
push ecx
sub esp, 0x6c0
mov ebx, dword [ecx]
mov ecx, str.Recent_file_list
call fcn.00405080
test eax, eax
je 0x405660
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov edi, eax
mov eax, 0x250026
mov esi, 0x41b700
mov dword [ebp - 0x694], 0x208
mov dword [ebp - 0x690], eax
xor eax, eax
movd xmm1, esi
mov esi, 0x41bb40
mov word [ebp - 0x688], ax
mov eax, 0x41b4e0
mov edx, 0x200064
movd xmm0, esi
movd xmm2, eax
mov eax, 0x41b920
mov dword [ebp - 0x68c], edx
movd xmm3, eax
punpckldq xmm1, xmm2
punpckldq xmm0, xmm3
punpcklqdq xmm0, xmm1
movaps xmmword [ebp - 0x678], xmm0
mov dword [esp], ebx
call dword [sym.imp.user32.dll_GetMenu]
mov edx, 0x162
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x6a0], eax
mov ebx, eax
mov eax, 0x30
sub esp, 4
mov dword [ebp - 0x668], eax
lea eax, [ebp - 0x226]
mov dword [ebp - 0x644], eax
mov eax, dword [sym.imp.user32.dll_RemoveMenu]
mov dword [ebp - 0x664], edx
mov dword [ebp - 0x658], 0x3ed
mov dword [esp + 8], 0
mov dword [esp + 4], 0x3f1
mov dword [esp], ebx
mov dword [ebp - 0x6a8], eax
call eax
mov dword [ebp - 0x69c], edi
sub esp, 0xc
mov edi, dword [ebp - 0x69c]
lea eax, [ebp - 0x684]
mov ebx, edi
add edi, 1
add ebx, 0x3ed
mov dword [ebp - 0x69c], edi
mov dword [esp + 8], edi
mov dword [esp + 4], str.File_d
mov dword [esp], eax
call dword [sym.imp.user32.dll_wsprintfW]
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x6a0]
mov dword [esp], eax
mov eax, dword [ebp - 0x6a8]
call eax
mov esi, dword [ebp + edi*4 - 0x67c]
lea eax, [ebp - 0x694]
sub esp, 0xc
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x684]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], esi
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x698]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40592a
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x648], esi
lea ebx, [ebp - 0x636]
mov dword [esp + 8], eax
lea eax, [ebp - 0x690]
mov dword [esp + 4], eax
lea eax, [ebp - 0x226]
mov dword [esp], eax
call dword [sym.imp.user32.dll_wsprintfW]
xor eax, eax
lea esi, [esi]
movzx edx, word [esi + eax]
mov word [ebx + eax], dx
add eax, 2
test dx, dx
jne 0x405808
lea edi, [ebp - 0x42e]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], 0
call dword [sym.imp.shell32.dll_SHGetFolderPathW]
sub esp, 0x14
mov dword [esp], ebx
call fcn.0040dcf0
mov esi, eax
xor eax, eax
mov word [esi - 2], ax
mov dword [esp + 4], edi
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_lstrcmpiW]
sub esp, 8
test eax, eax
je 0x40589c
movzx eax, word [esi]
mov word [ebp - 0x6a2], ax
test ax, ax
je 0x405990
mov eax, esi
lea esi, [esi]
nop
add eax, 2
cmp word [eax], 0
jne 0x405888
sub eax, esi
cmp eax, 0x42
jle 0x405990
mov eax, 0x5c
mov word [esi - 2], ax
cmp word [ebp - 0x226], 0
lea edx, [ebp - 0x226]
je 0x4058c1
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x4058b8
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4058c8
lea esi, [esi]
nop
lea eax, [ebp - 0x668]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x3e8
mov eax, dword [ebp - 0x6a0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_InsertMenuItemW]
mov dword [ebp - 0x694], 0x208
add dword [ebp - 0x658], 1
sub esp, 0x10
cmp dword [ebp - 0x69c], 4
jne 0x405735
mov eax, 0x102
mov edx, 0x800
mov dword [ebp - 0x664], eax
lea eax, [ebp - 0x668]
mov dword [ebp - 0x660], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x3e8
mov eax, dword [ebp - 0x6a0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_InsertMenuItemW]
mov eax, dword [ebp - 0x698]
sub esp, 0x10
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov edi, 0x5c
mov word [esi - 2], di
cmp ebx, esi
jae 0x405a05
xor ecx, ecx
mov eax, ebx
jmp 0x4059b5
cmp dx, 0x2f
je 0x4059be
add eax, 2
cmp eax, esi
jae 0x4059fd
movzx edx, word [eax]
cmp dx, 0x5c
jne 0x4059a8
mov edi, eax
sub edi, ebx
sar edi, 1
mov edx, edi
test ecx, ecx
jne 0x405a3d
cmp word [ebp - 0x6a2], 0
je 0x4059ef
mov edx, esi
lea esi, [esi]
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x4059e0
sub edx, esi
sar edx, 1
add edx, edi
cmp edx, 0x21
jg 0x405a05
mov ecx, eax
add eax, 2
cmp eax, esi
jb 0x4059b5
cmp esi, ecx
je 0x4058a5
cmp word [ebp - 0x226], 0
lea edx, [ebp - 0x226]
je 0x405a21
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x405a18
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x405a28
jmp 0x4058e0
cmp word [ebp - 0x6a2], 0
mov dword [ebp - 0x6b0], edi
je 0x405bb8
mov edx, esi
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x405a58
mov edi, dword [ebp - 0x6b0]
sub edx, esi
sar edx, 1
add edx, edi
cmp edx, 0x21
jg 0x4059fd
mov ecx, esi
xor edi, edi
cmp esi, eax
jb 0x405a05
mov dword [ebp - 0x6ac], edi
jmp 0x405a95
cmp dx, 0x2f
je 0x405a9e
sub ecx, 2
cmp ecx, eax
jb 0x405ae8
movzx edx, word [ecx]
cmp dx, 0x5c
jne 0x405a88
cmp word [ebp - 0x6a2], 0
je 0x405bad
mov edi, dword [ebp - 0x6ac]
mov edx, esi
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x405ab8
mov dword [ebp - 0x6ac], edi
mov edi, dword [ebp - 0x6b0]
sub edx, esi
sar edx, 1
add edx, edi
lea edx, [esi + edx*2]
sub edx, ecx
cmp edx, 0x42
jg 0x405ae8
mov dword [ebp - 0x6ac], ecx
jmp 0x405a8e
mov edi, dword [ebp - 0x6ac]
movzx edx, word [ebp - 0x226]
cmp esi, eax
je 0x4058a5
cmp eax, edi
je 0x405a05
test edi, edi
je 0x405a05
xor ecx, ecx
test dx, dx
mov word [eax + 2], cx
lea edx, [ebp - 0x226]
je 0x405b29
nop
add edx, 2
cmp word [edx], 0
jne 0x405b20
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x405b30
cmp word [ebp - 0x226], 0
lea edx, [ebp - 0x226]
je 0x405b59
add edx, 2
cmp word [edx], 0
jne 0x405b50
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [eax + 0x411580]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x405b60
cmp word [ebp - 0x226], 0
lea edx, [ebp - 0x226]
je 0x405b91
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x405b88
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [edi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x405b98
jmp 0x4058e0
mov edx, dword [ebp - 0x6b0]
jmp 0x405ad3
mov edx, dword [ebp - 0x6b0]
jmp 0x405a6d