Function at 0x435b0c
Capabilities:
Get common file path

Disassembly:
push 0x3a4
mov eax, 0x47e8d3
call fcn.00450887
mov esi, ecx
push 0x208
xor ebx, ebx
push ebx
lea eax, [ebp - 0x21c]
push eax
call fcn.00452e20
add esp, 0xc
push 0x104
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x435f06
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x264]
call fcn.0040724b
mov dword [ebp - 4], ebx
push str.ImagePath
lea ecx, [ebp - 0x27c]
call fcn.0040724b
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24c]
call fcn.00407270
mov byte [ebp - 4], 2
mov dword [ebp - 0x304], ebx
mov byte [ebp - 4], 3
mov dword [ebp - 0x300], ebx
mov byte [ebp - 4], 4
mov byte [ebp - 4], 5
push str.HKEY_LOCAL_MACHINESystemCurrentControlSet_servicesRiftEnabler
lea ecx, [ebp - 0x234]
call fcn.0040724b
mov byte [ebp - 4], 6
push 0x201
lea edx, [ebp - 0x234]
lea ecx, [ebp - 0x308]
call fcn.0043a43c
pop ecx
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x304]
call fcn.0043a415
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x308]
call fcn.0043a400
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x234]
call fcn.00407241
mov dword [ebp - 4], 4
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x304]
call fcn.0043ab76
mov byte [ebp - 4], 0xc
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x24c]
call fcn.0040748a
lea ecx, [ebp - 0x24c]
call fcn.00407327
mov edi, eax
cmp dword [edi], ebx
jbe 0x435cdf
lea eax, [ebp - 0x24c]
push eax
mov edx, 0x4914c0
lea ecx, [ebp - 0x234]
call fcn.00423478
pop ecx
mov byte [ebp - 4], 0xd
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x264]
call fcn.00407889
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x234]
call fcn.00407241
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.00436084
test al, al
jne 0x435cdb
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2bc]
call fcn.00411c10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x300]
call fcn.0043a400
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x304]
call fcn.0043a400
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24c]
call fcn.00407241
mov byte [ebp - 4], bl
jmp 0x435eec
mov byte [esi + 0x28], 1
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2bc]
call fcn.00411c10
mov dword [ebp - 4], 4
cmp word [ebp - 0x21c], 0
jne 0x435d03
mov eax, ebx
jmp 0x435d10
lea eax, [ebp - 0x21c]
push eax
call fcn.00459e88
pop ecx
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x264]
call fcn.00407411
mov byte [ebp - 4], 0x11
push str.HKEY_LOCAL_MACHINESystemCurrentControlSet_servicesOCUSBVID
lea ecx, [ebp - 0x234]
call fcn.0040724b
mov byte [ebp - 4], 0x12
push 0x201
lea edx, [ebp - 0x234]
lea ecx, [ebp - 0x308]
call fcn.0043a43c
pop ecx
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x300]
call fcn.0043a415
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x308]
call fcn.0043a400
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x234]
call fcn.00407241
mov dword [ebp - 4], 4
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x2fc]
push eax
lea ecx, [ebp - 0x300]
call fcn.0043ab76
mov byte [ebp - 4], 0x18
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2ec]
push eax
lea ecx, [ebp - 0x24c]
call fcn.0040748a
cmp dword [edi], 0
jbe 0x435e23
lea eax, [ebp - 0x24c]
push eax
mov edx, 0x4914c0
lea ecx, [ebp - 0x234]
call fcn.00423478
pop ecx
mov byte [ebp - 4], 0x19
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x264]
call fcn.00407889
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x234]
call fcn.00407241
lea eax, [esi + 0x2c]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.00436084
test al, al
jne 0x435e1f
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2fc]
jmp 0x435ca1
mov byte [esi + 0x44], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2fc]
call fcn.00411c10
mov dword [ebp - 4], 3
jmp 0x435caa
lea ecx, [ebp - 0x27c]
call fcn.00407241
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.00407241
call fcn.004507d4
ret