Function at 0x40bea0
Capabilities:
Get common file path
Query or enumerate registry value

Disassembly:
push ebp
mov ecx, str.Recent_file_list
xor edx, edx
mov ebp, esp
push edi
push esi
lea eax, [ebp - 0x698]
push ebx
sub esp, 0x6cc
call sym._registry_get_handle
mov dword [ebp - 0x69c], eax
test eax, eax
je 0x40bed0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
xor eax, eax
lea edi, [ebp - 0x226]
mov dword [ebp - 0x68e], 0x250026
mov word [ebp - 0x686], ax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68a], 0x200064
mov dword [ebp - 0x678], 0x4103c0
mov dword [ebp - 0x674], 0x4105e0
mov dword [ebp - 0x670], 0x410800
mov dword [ebp - 0x66c], 0x410a20
mov dword [ebp - 0x694], 0x208
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetMenu]
mov dword [ebp - 0x644], edi
lea edi, [ebp - 0x636]
sub esp, 4
mov dword [ebp - 0x6a0], eax
mov dword [esp], eax
mov eax, dword [sym.imp.user32.dll_RemoveMenu]
mov dword [ebp - 0x668], 0x30
mov dword [ebp - 0x664], 0x162
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x658], 0x3ed
mov dword [esp + 8], 0
mov dword [esp + 4], 0x3f1
mov dword [ebp - 0x6a8], eax
call eax
sub esp, 0xc
mov esi, dword [ebp - 0x69c]
lea eax, [ebp - 0x684]
mov dword [esp + 4], str.File_d
mov dword [esp], eax
mov ebx, esi
inc esi
mov dword [esp + 8], esi
add ebx, 0x3ed
mov dword [ebp - 0x69c], esi
call dword [sym.imp.user32.dll_wsprintfW]
mov eax, dword [ebp - 0x6a0]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
mov dword [esp], eax
mov eax, dword [ebp - 0x6a8]
call eax
lea eax, [ebp - 0x694]
mov ebx, dword [ebp + esi*4 - 0x67c]
sub esp, 0xc
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x684]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x698]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40c179
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x648], ebx
mov dword [esp + 8], eax
lea eax, [ebp - 0x68e]
mov dword [esp + 4], eax
lea eax, [ebp - 0x226]
mov dword [esp], eax
call dword [sym.imp.user32.dll_wsprintfW]
xor eax, eax
lea esi, [esi]
movzx edx, word [ebx + eax]
mov word [edi + eax], dx
add eax, 2
test dx, dx
jne 0x40c058
lea esi, [ebp - 0x42e]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], 0
call dword [sym.imp.shell32.dll_SHGetFolderPathW]
sub esp, 0x14
mov dword [esp], edi
call sym._file_basename
mov ebx, eax
xor eax, eax
mov word [ebx - 2], ax
mov dword [esp + 4], esi
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_lstrcmpiW]
movzx ecx, word [ebx]
sub esp, 8
test eax, eax
je 0x40c0e4
test cx, cx
je 0x40c1d8
mov eax, ebx
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x40c0d0
sub eax, ebx
cmp eax, 0x42
jle 0x40c1d8
mov eax, 0x5c
mov word [ebx - 2], ax
cmp word [ebp - 0x226], 0
lea eax, [ebp - 0x226]
je 0x40c11b
lea esi, [esi]
add eax, 2
cmp word [eax], 0
je 0x40c11b
add eax, 2
cmp word [eax], 0
jne 0x40c100
jmp 0x40c11b
movzx ecx, word [ebx]
add eax, 2
add ebx, 2
mov word [eax - 2], cx
test cx, cx
jne 0x40c118
lea esi, [esi]
lea eax, [ebp - 0x668]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x6a0]
mov dword [esp + 4], 0x3e8
mov dword [esp], eax
call dword [sym.imp.user32.dll_InsertMenuItemW]
inc dword [ebp - 0x658]
mov dword [ebp - 0x694], 0x208
sub esp, 0x10
cmp dword [ebp - 0x69c], 4
jne 0x40bf91
lea eax, [ebp - 0x668]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x660], 0x800
mov dword [ebp - 0x664], 0x102
mov dword [esp + 4], 0x3e8
mov dword [esp], eax
call dword [sym.imp.user32.dll_InsertMenuItemW]
mov eax, dword [ebp - 0x698]
sub esp, 0x10
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, 0x5c
mov word [ebx - 2], si
cmp ebx, edi
jbe 0x40c25c
mov word [ebp - 0x6a2], cx
xor esi, esi
mov edx, edi
jmp 0x40c205
cmp ax, 0x2f
je 0x40c20e
add edx, 2
cmp ebx, edx
jbe 0x40c24d
movzx eax, word [edx]
cmp ax, 0x5c
jne 0x40c1f8
mov ecx, edx
sub ecx, edi
sar ecx, 1
mov eax, ecx
test esi, esi
jne 0x40c295
cmp word [ebp - 0x6a2], 0
je 0x40c23f
mov eax, ebx
lea esi, [esi]
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x40c230
sub eax, ebx
sar eax, 1
add eax, ecx
cmp eax, 0x21
jg 0x40c25c
mov esi, edx
add edx, 2
cmp ebx, edx
ja 0x40c205
movzx ecx, word [ebp - 0x6a2]
cmp esi, ebx
je 0x40c0ed
cmp word [ebp - 0x226], 0
lea edx, [ebp - 0x226]
je 0x40c279
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40c270
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [edi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40c280
jmp 0x40c130
mov dword [ebp - 0x6ac], ecx
movzx ecx, word [ebp - 0x6a2]
test cx, cx
je 0x40c410
mov eax, ebx
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x40c2b0
sub eax, ebx
sar eax, 1
add eax, dword [ebp - 0x6ac]
cmp eax, 0x21
jg 0x40c254
mov dword [ebp - 0x6b0], ebx
xor eax, eax
cmp ebx, edx
jb 0x40c25c
mov esi, eax
mov word [ebp - 0x6a2], cx
mov eax, dword [ebp - 0x6b0]
jmp 0x40c2f8
cmp cx, 0x2f
je 0x40c2fe
sub eax, 2
cmp eax, edx
jb 0x40c331
movzx ecx, word [eax]
cmp cx, 0x5c
jne 0x40c2e8
cmp word [ebp - 0x6a2], 0
je 0x40c405
mov ecx, ebx
nop
add ecx, 2
cmp word [ecx], 0
jne 0x40c310
sub ecx, ebx
sar ecx, 1
add ecx, dword [ebp - 0x6ac]
lea ecx, [ebx + ecx*2]
sub ecx, eax
cmp ecx, 0x42
jg 0x40c331
mov esi, eax
jmp 0x40c2ee
movzx ecx, word [ebp - 0x6a2]
mov eax, esi
cmp ebx, edx
je 0x40c0ed
test esi, esi
je 0x40c25c
cmp edx, esi
je 0x40c25c
xor ecx, ecx
cmp word [ebp - 0x226], 0
mov word [edx + 2], cx
lea ecx, [ebp - 0x226]
je 0x40c379
lea esi, [esi]
nop
add ecx, 2
cmp word [ecx], 0
jne 0x40c370
xor edx, edx
lea esi, [esi]
nop
movzx ebx, word [edi + edx]
mov word [ecx + edx], bx
add edx, 2
test bx, bx
jne 0x40c380
cmp word [ebp - 0x226], 0
lea ecx, [ebp - 0x226]
je 0x40c3a9
add ecx, 2
cmp word [ecx], 0
jne 0x40c3a0
xor edx, edx
mov ebx, 0x2e
jmp 0x40c3bf
movzx ebx, word [edx + 0x41c1d8]
mov word [ecx + edx], bx
add edx, 2
test bx, bx
jne 0x40c3b8
cmp word [ebp - 0x226], 0
lea ecx, [ebp - 0x226]
je 0x40c3e9
lea esi, [esi]
nop
add ecx, 2
cmp word [ecx], 0
jne 0x40c3e0
xor edx, edx
lea esi, [esi]
nop
movzx ebx, word [eax + edx]
mov word [ecx + edx], bx
add edx, 2
test bx, bx
jne 0x40c3f0
jmp 0x40c130
mov ecx, dword [ebp - 0x6ac]
jmp 0x40c323
mov eax, dword [ebp - 0x6ac]
jmp 0x40c2c3