Function at 0x4356f0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4facc9
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push ebp
push esi
push edi
mov eax, dword [0x52e028]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov ebx, ecx
lea ecx, [esp + 0x18]
call dword [0x4fff58]
mov dword [esp + 0x50], 0
push 0
push 8
push 0x105
lea ecx, [esp + 0x24]
call dword [0x4fff30]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
mov esi, eax
call dword [0x4ffef8]
test esi, esi
jne 0x435787
mov dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x18]
call dword [0x4fff34]
xor eax, eax
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
push str.SOFTWAREkingsoftOffice6.0wpsRecentFiles_files
lea ecx, [esp + 0x20]
call dword [0x4fff2c]
mov byte [esp + 0x50], 1
lea eax, [esp + 0x2c]
push eax
call fcn.0043b940
mov byte [esp + 0x50], 2
lea esi, [esp + 0x2c]
call fcn.004364e0
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
cmp esi, eax
jbe 0x4357c9
call dword [0x4ff3d0]
mov eax, dword [esp + 0x3c]
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x24], ebp
mov edi, esi
mov dword [esp + 0x28], edi
mov esi, eax
cmp dword [esp + 0x38], eax
jbe 0x4357e5
call dword [0x4ff3d0]
test ebp, ebp
je 0x4357ef
cmp ebp, dword [esp + 0x2c]
je 0x4357f5
call dword [0x4ff3d0]
cmp edi, esi
je 0x4358ed
push 0x28
call fcn.004ef114
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x50], 3
test eax, eax
je 0x43581e
push eax
call fcn.00434c90
mov esi, eax
jmp 0x435820
xor esi, esi
mov byte [esp + 0x50], 2
test ebp, ebp
jne 0x435871
call dword [0x4ff3d0]
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x43583c
call dword [0x4ff3d0]
mov eax, dword [edi]
push eax
lea ecx, [esi + 0x1c]
mov dword [esi + 0x18], SysReAllocString
call dword [0x4fff04]
mov edx, dword [esi]
mov eax, dword [edx + 4]
push 1
mov ecx, esi
mov dword [esi + 0x20], 4
call eax
test eax, eax
jne 0x435876
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
jmp 0x4358c5
mov eax, dword [ebp]
jmp 0x435831
test ebx, ebx
je 0x43587f
lea eax, [ebx + 0x58]
jmp 0x435881
xor eax, eax
mov edx, dword [esi]
mov dword [esi + 0x10], eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov dword [esp + 0x20], esi
mov esi, dword [ebx + 0xbc]
mov edx, dword [esi + 4]
lea ebp, [ebx + 0xa8]
lea ecx, [esp + 0x20]
push ecx
push edx
push esi
call fcn.00453e00
mov ecx, ebp
mov edi, eax
call fcn.0046e570
mov ebp, dword [esp + 0x24]
mov dword [esi + 4], edi
mov eax, dword [edi + 4]
mov dword [eax], edi
mov edi, dword [esp + 0x28]
test ebp, ebp
jne 0x4358e8
call dword [0x4ff3d0]
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x4358dc
call dword [0x4ff3d0]
mov eax, dword [esp + 0x3c]
add edi, 4
jmp 0x4357d3
mov eax, dword [ebp]
jmp 0x4358d1
mov ecx, dword [esp + 0x18]
lea edi, [ebx + 0x5c]
push ecx
lea ecx, [edi + 0x18]
call dword [0x4fff04]
mov edx, dword [esp + 0x1c]
lea esi, [ebx + 0x80]
mov dword [edi + 0x20], 0x65
push edx
lea ecx, [esi + 0x1c]
mov dword [esi + 0x18], SysReAllocString
call dword [0x4fff04]
mov dword [esi + 0x20], 4
mov eax, dword [edi]
mov edx, dword [eax + 4]
push 1
mov ecx, edi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 4]
push 1
mov ecx, esi
call edx
lea eax, [ebx + 0x58]
mov dword [ebx + 0x6c], eax
mov dword [ebx + 0x90], eax
mov eax, dword [edi]
mov edx, dword [eax + 8]
mov ecx, edi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov byte [esp + 0x50], 4
mov esi, dword [esp + 0x38]
xor ebx, ebx
cmp esi, ebx
je 0x43598e
mov edi, dword [esp + 0x3c]
cmp esi, edi
je 0x435985
mov ecx, esi
call dword [0x4fff34]
add esi, 4
cmp esi, edi
jne 0x435972
mov esi, dword [esp + 0x38]
push esi
call fcn.004ef10e
add esp, 4
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov byte [esp + 0x50], 1
mov eax, dword [esp + 0x2c]
push eax
call fcn.004ef10e
add esp, 4
mov byte [esp + 0x50], 0
lea ecx, [esp + 0x1c]
call dword [0x4fff34]
mov dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x18]
call dword [0x4fff34]
mov eax, 1
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret