Function at 0x403630
Capabilities:
Get common file path
Print debug messages

Disassembly:
sub esp, 0x20c
mov eax, dword [0x443430]
xor eax, esp
mov dword [esp + 0x208], eax
push 0x103
lea eax, [esp + 0x109]
push 0
push eax
mov byte [esp + 0x110], 0
call fcn.00420b80
add esp, 0xc
push 0x104
lea ecx, [esp + 0x108]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [esp + 0x104]
add eax, 0xffffffff
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x403680
mov edx, dword [str.qzdm]
mov cx, word [0x43ab4c]
mov dword [eax], edx
push 0x103
lea edx, [esp + 5]
push 0
push edx
mov word [eax + 4], cx
mov byte [esp + 0xc], 0
call fcn.00420b80
add esp, 0xc
xor eax, eax
jmp 0x4036c0
mov cl, byte [esp + eax + 0x104]
mov byte [esp + eax], cl
add eax, 1
test cl, cl
jne 0x4036c0
lea eax, [esp]
add eax, 0xffffffff
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x4036d7
mov ecx, dword [str.QzdmArchive.exe]
mov edx, dword [0x43ac80]
mov dword [eax], ecx
mov ecx, dword [0x43ac84]
mov dword [eax + 4], edx
mov edx, dword [0x43ac88]
mov dword [eax + 8], ecx
mov cl, byte [0x43ac8c]
mov dword [eax + 0xc], edx
lea edx, [esp]
push 0
push edx
mov byte [eax + 0x10], cl
call fcn.0041f5fa
add esp, 8
cmp eax, 0xffffffff
jne 0x403742
push str.Archive1
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
mov ecx, dword [esp + 0x208]
xor ecx, esp
call fcn.0041f2bf
add esp, 0x20c
ret
xor eax, eax
jmp 0x403750
mov cl, byte [esp + eax + 0x104]
mov byte [esp + eax], cl
add eax, 1
test cl, cl
jne 0x403750
push edi
lea edi, [esp + 4]
add edi, 0xffffffff
lea esp, [esp]
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x403770
push esi
mov ecx, 6
mov esi, str.ClipboardHookExtx32.dll
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 8]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.0041f5fa
add esp, 8
cmp eax, 0xffffffff
jne 0x4037c0
push str.ClipboardHookExt2
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop esi
xor eax, eax
pop edi
mov ecx, dword [esp + 0x208]
xor ecx, esp
call fcn.0041f2bf
add esp, 0x20c
ret
xor eax, eax
mov cl, byte [esp + eax + 0x10c]
mov byte [esp + eax + 8], cl
add eax, 1
test cl, cl
jne 0x4037c2
lea edi, [esp + 8]
add edi, 0xffffffff
jmp 0x4037e0
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x4037e0
mov ecx, 6
mov esi, str.ClipboardHookExtx64.dll
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 8]
push 0
push ecx
movsb byte es:[edi], byte [esi]
call fcn.0041f5fa
add esp, 8
cmp eax, 0xffffffff
jne 0x40382f
push str.ClipboardHookExt3
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop esi
xor eax, eax
pop edi
mov ecx, dword [esp + 0x208]
xor ecx, esp
call fcn.0041f2bf
add esp, 0x20c
ret
xor eax, eax
mov cl, byte [esp + eax + 0x10c]
mov byte [esp + eax + 8], cl
add eax, 1
test cl, cl
jne 0x403831
lea eax, [esp + 8]
add eax, 0xffffffff
lea ebx, [ebx]
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x403850
mov edx, dword [str.ImageHoldModuleExt.dll]
mov ecx, dword [0x43ad00]
mov dword [eax], edx
mov edx, dword [0x43ad04]
mov dword [eax + 4], ecx
mov ecx, dword [0x43ad08]
mov dword [eax + 8], edx
mov edx, dword [0x43ad0c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x43ad10]
mov dword [eax + 0x10], edx
lea edx, [esp + 8]
push 0
push edx
mov dword [eax + 0x14], ecx
call fcn.0041f5fa
add esp, 8
cmp eax, 0xffffffff
jne 0x4038c7
push str.ImageHoldModuleExt4
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop esi
xor eax, eax
pop edi
mov ecx, dword [esp + 0x208]
xor ecx, esp
call fcn.0041f2bf
add esp, 0x20c
ret
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x10c]
mov byte [esp + eax + 8], cl
add eax, 1
test cl, cl
jne 0x4038d0
lea edi, [esp + 8]
add edi, 0xffffffff
lea esp, [esp]
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x4038f0
mov ecx, 6
mov esi, str.ImageHoldModuleExtx64.dll
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [esp + 8]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.0041f5fa
add esp, 8
cmp eax, 0xffffffff
jne 0x403941
push str.ImageHoldModuleExtx5
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop esi
xor eax, eax
pop edi
mov ecx, dword [esp + 0x208]
xor ecx, esp
call fcn.0041f2bf
add esp, 0x20c
ret
mov ecx, dword [esp + 0x210]
pop esi
pop edi
xor ecx, esp
mov eax, 1
call fcn.0041f2bf
add esp, 0x20c
ret