Function at 0x7813a4
Capabilities:
Get common file path

Disassembly:
push 0x260
mov eax, 0x7d8859
call fcn.00700ca1
mov ebx, ecx
mov esi, dword [ebp + 8]
xor eax, eax
mov edi, dword [ebp + 0xc]
mov ecx, esi
mov dword [ebp - 0x268], esi
mov dword [ebp - 0x26c], eax
mov dword [ebp - 4], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
lea eax, [ebx + 0x20]
push eax
call fcn.004c0690
and dword [ebp - 4], 0
lea eax, [ebp - 0x218]
push 0x208
push 0
push eax
mov dword [ebp - 0x26c], 1
call fcn.00719250
add esp, 0xc
mov ecx, edi
push str._uninstall_
call fcn.004d2b1c
test al, al
je 0x781421
lea eax, [ebx + 0x50]
mov ecx, esi
push eax
call fcn.004c3996
jmp 0x78168b
push str._system_
mov ecx, edi
call fcn.004d2b1c
test al, al
je 0x781445
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
jmp 0x7814a2
push str._windows_
mov ecx, edi
call fcn.004d2b1c
test al, al
je 0x781469
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x7814a2
push str._pdriver_
mov ecx, edi
call fcn.004d2b1c
test al, al
je 0x7814b5
call fcn.0077f7a3
lea eax, [ebp - 0x264]
xor ecx, ecx
push eax
push 0x104
lea eax, [ebp - 0x218]
mov dword [ebp - 0x264], ecx
push eax
push 1
push ecx
push ecx
call sub.WINSPOOL.DRV_GetPrinterDriverDirectoryW
lea eax, [ebp - 0x218]
mov ecx, esi
push eax
call fcn.004c097f
jmp 0x78168b
push str._kdriver_
mov ecx, edi
call fcn.004d2b1c
test al, al
je 0x781637
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
mov dword [ebp - 0x234], 7
xor edi, edi
mov word [ebp - 0x248], ax
push str.drivers
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], edi
call fcn.004c097f
xor eax, eax
mov dword [ebp - 4], 1
mov word [ebp - 0x230], ax
lea ecx, [ebp - 0x230]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x220], edi
push eax
mov dword [ebp - 0x21c], 7
call fcn.004c097f
push 0x5c
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.005126ee
add esp, 0x10
mov ecx, esi
push eax
call fcn.004c3974
lea ecx, [ebp - 0x260]
call fcn.004c0931
mov eax, dword [ebp - 0x21c]
cmp eax, 8
jb 0x7815c3
mov ecx, dword [ebp - 0x230]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], ecx
cmp eax, 0x1000
jb 0x7815ba
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x268]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x264]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x220], edi
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x21c], 7
cmp eax, 8
jb 0x78168b
mov ecx, dword [ebp - 0x248]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x268], ecx
cmp eax, 0x1000
jb 0x78162c
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x264]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x268]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
jmp 0x78168b
cmp dword [edi + 0x10], 0
je 0x78168b
lea eax, [ebp - 0x248]
push edi
push eax
call fcn.005044b2
push 0x5c
lea eax, [ebp - 0x248]
mov dword [ebp - 4], 3
push eax
lea eax, [ebx + 0x20]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.005126ee
add esp, 0x18
mov ecx, esi
push eax
call fcn.004c3974
lea ecx, [ebp - 0x260]
call fcn.004c0931
lea ecx, [ebp - 0x248]
call fcn.004c0931
mov eax, esi
call fcn.00700c4b
ret 8