Function at 0x43a3b5
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], 0x104
push 2
xor eax, eax
xor esi, esi
pop ebx
mov word [edi], ax
mov edx, 0x4094b0
push ebx
lea eax, [ebp - 0x10]
mov dword [ebp - 4], esi
push eax
lea eax, [ebp - 4]
mov ecx, 0x408de4
push eax
call fcn.00497511
cmp dword [ebp - 4], esi
je 0x43a4fe
push dword [ebp - 4]
mov edx, 0x102
mov ecx, edi
call fcn.0041f6cc
push dword [ebp - 4]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
test esi, esi
jns 0x43a451
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a779
test byte [eax + 0x1c], 1
je 0x43a779
cmp byte [eax + 0x19], bl
jb 0x43a779
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x11
jmp 0x43a76e
mov ecx, edi
xor edx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, ebx
cmp ax, dx
jne 0x43a458
sub ecx, esi
sar ecx, 1
cmp word [edi + ecx*2 - 2], 0x5c
je 0x43a4c1
push 0x40944c
mov edx, 0x104
mov ecx, edi
call fcn.0041f701
mov esi, eax
test esi, esi
jns 0x43a4c1
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a779
test byte [eax + 0x1c], 1
je 0x43a779
cmp byte [eax + 0x19], bl
jb 0x43a779
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x12
jmp 0x43a76e
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a5c7
test byte [eax + 0x1c], 1
je 0x43a5c7
cmp byte [eax + 0x19], 4
jb 0x43a5c7
call fcn.0042386b
push edi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x13
jmp 0x43a5bc
push ebx
push 0x204
push edi
push 0x407cfc
mov edx, 0x4094b0
mov ecx, 0x408de4
call fcn.004973da
cmp word [edi], si
je 0x43a5cf
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, ebx
cmp ax, si
jne 0x43a527
sub ecx, edx
sar ecx, 1
cmp word [edi + ecx*2 - 2], 0x5c
je 0x43a590
push 0x40944c
mov edx, 0x104
mov ecx, edi
call fcn.0041f701
mov esi, eax
test esi, esi
jns 0x43a590
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a779
test byte [eax + 0x1c], 1
je 0x43a779
cmp byte [eax + 0x19], bl
jb 0x43a779
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x14
jmp 0x43a76e
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a5c7
test byte [eax + 0x1c], 1
je 0x43a5c7
cmp byte [eax + 0x19], 4
jb 0x43a5c7
call fcn.0042386b
push edi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x15
mov edx, 0x409694
pop ecx
call fcn.004330da
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
push 5
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov esi, eax
test esi, esi
js 0x43a63b
cmp dword [ebp - 8], 0
je 0x43a63b
push edi
push dword [ebp - 8]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov ebx, eax
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
js 0x43a62e
mov eax, dword [ebp - 0xc]
push dword [ebp - 8]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x5035f0]
call esi
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5035f0]
call esi
test ebx, ebx
jne 0x43a6fc
push 2
pop ebx
jmp 0x43a671
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a6ab
test byte [eax + 0x1c], 1
je 0x43a676
cmp byte [eax + 0x19], bl
jb 0x43a676
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
mov edx, 0x409694
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x16
pop ecx
call fcn.00421fda
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a6ab
test byte [eax + 0x1c], 1
je 0x43a6ab
cmp byte [eax + 0x19], bl
jb 0x43a6ab
call fcn.0042386b
push 0x4094d8
push eax
mov eax, dword [section..data]
mov edx, 0x409694
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x17
pop ecx
call fcn.004330da
push edi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
jne 0x43a6fc
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a779
test byte [eax + 0x1c], 1
je 0x43a779
cmp byte [eax + 0x19], bl
jb 0x43a779
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x18
jmp 0x43a76e
mov ecx, edi
xor esi, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x43a703
sub ecx, edx
sar ecx, 1
cmp ecx, 1
jl 0x43a5c7
cmp word [edi + ecx*2 - 2], 0x5c
je 0x43a5c7
push 0x40944c
mov edx, 0x104
mov ecx, edi
call fcn.0041f701
mov esi, eax
test esi, esi
jns 0x43a5c7
mov eax, dword [section..data]
cmp eax, section..data
je 0x43a779
test byte [eax + 0x1c], 1
je 0x43a779
cmp byte [eax + 0x19], 2
jb 0x43a779
call fcn.0042386b
push esi
push eax
mov eax, dword [section..data]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x19
mov edx, 0x409694
pop ecx
call fcn.00421fda
xor eax, eax
jmp 0x43a5ca