Function at 0x405400
Capabilities:
Get common file path
Query or enumerate registry value

Disassembly:
push ebp
xor edx, edx
mov ebp, esp
mov ecx, str.Recent_file_list
push edi
push esi
push ebx
lea eax, [ebp - 0x698]
sub esp, 0x6bc
call sym._registry_get_handle
test eax, eax
je 0x405430
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, eax
mov eax, 0x250026
mov dword [ebp - 0x68e], eax
mov eax, 0x200064
xor edx, edx
mov dword [ebp - 0x68a], eax
mov eax, 0x41a4c0
mov ecx, 0x41ab20
mov dword [ebp - 0x66c], eax
mov eax, 0x208
mov ebx, 0x41a900
mov dword [ebp - 0x694], eax
mov eax, dword [ebp + 8]
mov edi, 0x41a6e0
mov word [ebp - 0x686], dx
mov dword [ebp - 0x678], ecx
mov dword [ebp - 0x674], ebx
xor ebx, ebx
mov dword [esp], eax
mov dword [ebp - 0x670], edi
lea edi, [ebp - 0x226]
call sym._GetMenu_4
mov edx, 0x30
mov ecx, 0x162
mov dword [ebp - 0x668], edx
xor edx, edx
mov dword [ebp - 0x664], ecx
mov ecx, 0x3f1
mov dword [ebp - 0x644], edi
mov edi, 0x3ed
mov dword [ebp - 0x658], edi
lea edi, [ebp - 0x636]
mov dword [ebp - 0x660], ebx
mov dword [ebp - 0x6a0], eax
sub esp, 4
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym._RemoveMenu_12
mov dword [ebp - 0x69c], esi
sub esp, 0xc
mov esi, dword [ebp - 0x69c]
lea eax, [ebp - 0x684]
mov ecx, str.File_d
mov dword [esp + 4], ecx
mov dword [esp], eax
mov ebx, esi
inc esi
mov dword [esp + 8], esi
add ebx, 0x3ed
mov dword [ebp - 0x69c], esi
call sym._wsprintfW
xor eax, eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x6a0]
mov dword [esp + 4], ebx
mov dword [esp], eax
call sym._RemoveMenu_12
lea eax, [ebp - 0x694]
mov ebx, dword [ebp + esi*4 - 0x67c]
sub esp, 0xc
mov dword [esp + 0x14], eax
xor eax, eax
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [esp + 8], eax
lea eax, [ebp - 0x684]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x698]
mov dword [esp + 0x10], ebx
mov dword [esp], eax
call sym._RegQueryValueExW_24
sub esp, 0x18
test eax, eax
jne 0x4056c7
mov dword [ebp - 0x648], ebx
mov eax, dword [ebp - 0x69c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x68e]
mov dword [esp + 4], eax
lea eax, [ebp - 0x226]
mov dword [esp], eax
call sym._wsprintfW
xor eax, eax
movzx edx, word [ebx + eax]
mov word [edi + eax], dx
add eax, 2
test edx, edx
jne 0x4055b0
xor eax, eax
xor ebx, ebx
mov dword [esp + 8], eax
lea esi, [ebp - 0x42e]
mov eax, 5
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 4], eax
mov dword [esp], 0
call sym._SHGetFolderPathW_20
sub esp, 0x14
mov dword [esp], edi
call sym._file_basename
mov word [eax - 2], 0
mov ebx, eax
mov dword [esp + 4], esi
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_lstrcmpiW]
sub esp, 8
test eax, eax
je 0x405644
movzx eax, word [ebx]
mov dword [ebp - 0x6a4], eax
test eax, eax
je 0x405720
mov eax, ebx
lea esi, [esi]
lea edi, [edi]
add eax, 2
cmp word [eax], 0
jne 0x405630
sub eax, ebx
cmp eax, 0x42
jle 0x405720
mov word [ebx - 2], 0x5c
movzx eax, word [ebp - 0x226]
lea edx, [ebp - 0x226]
test eax, eax
je 0x405669
nop
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x405660
xor eax, eax
nop
lea esi, [esi]
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test ecx, ecx
jne 0x405670
lea eax, [ebp - 0x668]
mov edx, 0x3e8
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x6a0]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._InsertMenuItemW_16
mov ecx, 0x208
inc dword [ebp - 0x658]
mov dword [ebp - 0x694], ecx
sub esp, 0x10
cmp dword [ebp - 0x69c], 4
jne 0x4054f7
mov eax, 0x800
mov edx, 0x3e8
mov dword [ebp - 0x660], eax
mov eax, 0x102
mov dword [ebp - 0x664], eax
lea eax, [ebp - 0x668]
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x6a0]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._InsertMenuItemW_16
mov eax, dword [ebp - 0x698]
sub esp, 0x10
mov dword [esp], eax
call sym._RegCloseKey_4
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov word [ebx - 2], 0x5c
cmp ebx, edi
jbe 0x4057d4
xor esi, esi
mov eax, edi
jmp 0x405744
cmp edx, 0x2f
je 0x40574c
add eax, 2
cmp ebx, eax
jbe 0x40578d
movzx edx, word [eax]
cmp edx, 0x5c
jne 0x405738
mov edx, eax
sub edx, edi
sar edx, 1
test esi, esi
mov ecx, edx
jne 0x4057dd
mov esi, dword [ebp - 0x6a4]
test esi, esi
je 0x40577f
mov ecx, ebx
nop
lea esi, [esi]
add ecx, 2
cmp word [ecx], 0
jne 0x405770
sub ecx, ebx
sar ecx, 1
add ecx, edx
cmp ecx, 0x21
jg 0x4057d4
mov esi, eax
add eax, 2
cmp ebx, eax
ja 0x405744
movzx eax, word [ebp - 0x226]
cmp esi, ebx
mov edx, eax
je 0x405651
lea ecx, [ebp - 0x226]
test edx, edx
je 0x4057b9
nop
lea esi, [esi]
add ecx, 2
cmp word [ecx], 0
jne 0x4057b0
xor eax, eax
nop
lea esi, [esi]
movzx edx, word [edi + eax]
mov word [ecx + eax], dx
add eax, 2
test edx, edx
jne 0x4057c0
jmp 0x40567f
movzx edx, word [ebp - 0x226]
jmp 0x40579e
mov ecx, dword [ebp - 0x6a4]
test ecx, ecx
je 0x40593b
mov ecx, ebx
lea esi, [esi]
add ecx, 2
cmp word [ecx], 0
jne 0x4057f0
sub ecx, ebx
sar ecx, 1
add ecx, edx
cmp ecx, 0x21
jg 0x40578d
xor ecx, ecx
cmp ebx, eax
mov esi, ebx
jb 0x4057d4
mov dword [ebp - 0x6a8], ecx
jmp 0x405824
cmp ecx, 0x2f
je 0x40582c
sub esi, 2
cmp esi, eax
jb 0x405861
movzx ecx, word [esi]
cmp ecx, 0x5c
jne 0x405818
mov ecx, dword [ebp - 0x6a4]
test ecx, ecx
je 0x405934
mov ecx, ebx
lea esi, [esi]
add ecx, 2
cmp word [ecx], 0
jne 0x405840
sub ecx, ebx
sar ecx, 1
add ecx, edx
lea ecx, [ebx + ecx*2]
sub ecx, esi
cmp ecx, 0x42
jg 0x405861
mov dword [ebp - 0x6a8], esi
jmp 0x40581d
cmp ebx, eax
mov ecx, dword [ebp - 0x6a8]
je 0x405945
test ecx, ecx
movzx edx, word [ebp - 0x226]
je 0x40579e
cmp eax, ecx
je 0x40579e
mov word [eax + 2], 0
test edx, edx
lea edx, [ebp - 0x226]
je 0x4058a9
lea esi, [esi]
lea edi, [edi]
add edx, 2
cmp word [edx], 0
jne 0x4058a0
xor eax, eax
nop
lea esi, [esi]
movzx ebx, word [edi + eax]
mov word [edx + eax], bx
add eax, 2
test ebx, ebx
jne 0x4058b0
cmp word [ebp - 0x226], 0
lea edx, [ebp - 0x226]
je 0x4058d9
nop
add edx, 2
cmp word [edx], 0
jne 0x4058d0
xor eax, eax
nop
lea esi, [esi]
movzx ebx, word [eax + 0x410540]
mov word [edx + eax], bx
add eax, 2
test ebx, ebx
jne 0x4058e0
cmp word [ebp - 0x226], 0
lea edx, [ebp - 0x226]
je 0x405919
lea esi, [esi]
lea edi, [edi]
add edx, 2
cmp word [edx], 0
jne 0x405910
xor eax, eax
nop
lea esi, [esi]
movzx ebx, word [ecx + eax]
mov word [edx + eax], bx
add eax, 2
test ebx, ebx
jne 0x405920
jmp 0x40567f
mov ecx, edx
jmp 0x40584f
mov ecx, edx
lea esi, [esi]
jmp 0x4057ff
movzx eax, word [ebp - 0x226]
jmp 0x405651