Function at 0x43edc0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x290
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x5135f0
mov dword [ebp - 0x20], ecx
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
call fcn.00406c70
cmp eax, 3
jl 0x43f0d5
sub esp, 0x1c
movsd xmm0, qword [0x658194]
lea esi, [ebp - 0x29c]
movsd qword [esp + 0xc], xmm0
movsd xmm0, qword [0x65818c]
movsd qword [esp + 4], xmm0
mov dword [esp], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], str.AdobeAcrobatDC
call fcn.00442940
add esp, 0x1c
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 4
push 0
mov dword [ebp - 0x3c], esi
push esi
call fcn.00442b10
mov ecx, dword [ebp - 0x288]
cmp ecx, 8
jb 0x43ee97
mov eax, dword [ebp - 0x29c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43ee8d
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441849
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x10], 0xffffffff
sub esp, 0x1c
movsd xmm0, qword [0x658194]
lea esi, [ebp - 0x29c]
movsd qword [esp + 0xc], xmm0
movsd xmm0, qword [0x65818c]
movsd qword [esp + 4], xmm0
mov dword [esp], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], str.AdobeLinguistics
call fcn.00442940
add esp, 0x1c
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 5
push 0
push esi
call fcn.00442b10
mov ecx, dword [ebp - 0x288]
cmp ecx, 8
jb 0x43ef31
mov eax, dword [ebp - 0x29c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43ef27
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441855
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov eax, dword [ebp - 0x20]
cmp byte [eax + 4], 0
jne 0x43f0d5
mov dword [ebp - 0x10], 0xffffffff
sub esp, 0x1c
movsd xmm0, qword [0x658194]
lea eax, [ebp - 0x29c]
movsd qword [esp + 0xc], xmm0
movsd xmm0, qword [0x65818c]
movsd qword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], str.MicrosoftIMJP
call fcn.00442940
add esp, 0x1c
cmp dword [ebp - 0x28c], 0
je 0x43efc4
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x288], 7
mov esi, dword [eax]
jbe 0x43efa5
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x3c], eax
mov eax, dword [esi]
mov edi, dword [eax + 0x60]
mov ecx, edi
call dword [0x64689c]
mov dword [ebp - 0x10], 6
mov ecx, esi
push dword [ebp - 0x3c]
push 0
push 0
call edi
mov ecx, dword [ebp - 0x288]
cmp ecx, 8
jb 0x43f00c
mov eax, dword [ebp - 0x29c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43effb
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441921
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xffffffff
sub esp, 0x1c
movsd xmm0, qword [0x658194]
lea ebx, [ebp - 0x29c]
movsd qword [esp + 0xc], xmm0
movsd xmm0, qword [0x65818c]
movsd qword [esp + 4], xmm0
mov dword [esp], ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], str.MicrosoftIME
call fcn.00442940
add esp, 0x1c
cmp dword [ebp - 0x28c], 0
je 0x43f08d
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x288], 7
mov esi, dword [eax]
jbe 0x43f070
mov ebx, dword [ebp - 0x29c]
mov eax, dword [esi]
mov edi, dword [eax + 0x60]
mov ecx, edi
call dword [0x64689c]
mov dword [ebp - 0x10], 7
mov ecx, esi
push ebx
push 0
push 0
call edi
mov ecx, dword [ebp - 0x288]
cmp ecx, 8
jb 0x43f0ce
mov eax, dword [ebp - 0x29c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f0c4
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x44192d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xffffffff
push 0x442c40
push 0x6d2738
call fcn.0041dac0
add esp, 8
test al, al
je 0x43f395
lea esi, [ebp - 0x29c]
push 0x20a
push 0
push esi
call fcn.0061e8c0
add esp, 0xc
push esi
push 0
push 0
push 0x28
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43f14a
cmp word [ebp - 0x29c], 0
je 0x43f14a
push str..ms_ad
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43f189
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
jmp 0x43f1a5
mov eax, esi
mov dword [ebp - 0x44], esi
lea ecx, [ebp - 0x54]
add eax, esi
push eax
push edi
push ecx
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xb
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43f1f5
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f1eb
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441861
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
lea esi, [ebp - 0x29c]
push esi
call fcn.0061e8c0
add esp, 0xc
mov dword [ebp - 0x10], 0xffffffff
push esi
push 0
push 0
push 0x1c
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43f250
cmp word [ebp - 0x29c], 0
je 0x43f250
push str.MicrosoftRMSLocalStorage
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43f292
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43f2ae
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xc
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43f2fb
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f2f1
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x44186d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x10], 0xffffffff
sub esp, 0x1c
movsd xmm0, qword [0x658194]
lea esi, [ebp - 0x29c]
movsd qword [esp + 0xc], xmm0
movsd xmm0, qword [0x65818c]
movsd qword [esp + 4], xmm0
mov dword [esp], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], str.MicrosoftRMSLocalStorage
call fcn.00442940
add esp, 0x1c
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xd
push 0
push esi
call fcn.00442b10
mov ecx, dword [ebp - 0x288]
cmp ecx, 8
jb 0x43f395
mov eax, dword [ebp - 0x29c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f38b
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441879
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
lea eax, [ebp - 0x29c]
push 0x20a
push 0
mov dword [ebp - 0x3c], eax
push eax
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43f3f9
cmp word [ebp - 0x29c], 0
je 0x43f3f9
push str.AdobeAcrobatDC
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43f438
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
jmp 0x43f454
mov eax, esi
mov dword [ebp - 0x44], esi
lea ecx, [ebp - 0x54]
add eax, esi
push eax
push edi
push ecx
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x19
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43f4a4
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f49a
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441765
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
push dword [ebp - 0x3c]
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1c
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43f501
cmp word [ebp - 0x29c], 0
je 0x43f501
push str.AdobeAcrobatDC
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43f543
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43f55f
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x1a
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43f5ac
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f5a2
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441771
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
push dword [ebp - 0x3c]
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1c
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43f609
cmp word [ebp - 0x29c], 0
je 0x43f609
push str.AdobeColor
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43f64b
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43f667
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x1b
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43f6b4
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f6aa
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x44177d
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
push dword [ebp - 0x3c]
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43f711
cmp word [ebp - 0x29c], 0
je 0x43f711
push str.AdobeLinguistics
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43f753
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43f76f
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x1c
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43f7bc
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f7b2
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441789
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
push dword [ebp - 0x3c]
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43f819
cmp word [ebp - 0x29c], 0
je 0x43f819
push str.com.adobe.dunamis_f2eb6c79_671d_4de2_b7be_3b2eea7abc47
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43f85b
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43f877
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x1d
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43f8c4
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f8ba
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x441795
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
push dword [ebp - 0x3c]
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43f921
cmp word [ebp - 0x29c], 0
je 0x43f921
push str.com.adobe.dunamis56079431_ea46_4833_94f9_1ff5658cdb1c
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43f963
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43f97f
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x1e
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43f9cc
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43f9c2
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4417a1
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
push dword [ebp - 0x3c]
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43fa29
cmp word [ebp - 0x29c], 0
je 0x43fa29
push str.com.adobe.dunamis61f56613_c62c_4b17_84dd_62b60d5776aa
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43fa6b
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43fa87
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x1f
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43fad4
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43faca
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4417ad
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
push dword [ebp - 0x3c]
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43fb31
cmp word [ebp - 0x29c], 0
je 0x43fb31
push str.com.adobe.dunamis6d9d9777_7ded_4768_8191_9a707d72b009
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43fb73
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43fb8f
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x20
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43fbdc
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43fbd2
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4417b9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
push 0x20a
push 0
push dword [ebp - 0x3c]
call fcn.0061e8c0
add esp, 0xc
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x10], 0xffffffff
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
mov edi, 0x658578
js 0x43fc39
cmp word [ebp - 0x29c], 0
je 0x43fc39
push str.AdobeLogTransport2
lea esi, [ebp - 0x29c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
mov edi, 0x658578
cmovne edi, esi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x43fc7b
sub esp, 0xc
mov al, byte [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
lea edi, [ebp - 0x54]
jmp 0x43fc97
mov eax, esi
mov dword [ebp - 0x44], esi
add eax, esi
push eax
push edi
lea edi, [ebp - 0x54]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x54], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x21
push 0
push edi
call fcn.00442b10
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x43fce4
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x43fcda
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4417c5
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
invalid