Function at 0x404477
Capabilities:
Get common file path

Disassembly:
push 0x42c
mov eax, 0x42fc4c
call fcn.00419b03
mov eax, dword [ebp + 8]
xor ebx, ebx
mov esi, ecx
mov dword [ebp - 0x430], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x438], ebx
mov edi, 0x104
cmp dword [esi + 0x3c], ebx
je 0x404569
mov eax, dword [esi + 0x38]
cmp dword [eax - 0xc], ebx
je 0x404569
xor eax, eax
push 0x206
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push ebx
push eax
mov dword [ebp - 0x434], edi
call fcn.00419e20
mov eax, dword [esi + 0x14]
add esp, 0xc
lea ecx, [ebp - 0x434]
push ecx
lea ecx, [ebp - 0x420]
push ecx
push str.PackageCode
push eax
call sub.msi.dll_MsiGetPropertyW
cmp eax, ebx
jne 0x404533
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00401ab4
push eax
lea eax, [esi + 0x18]
push eax
mov dword [ebp - 0x430], 1
call fcn.00403640
pop ecx
pop ecx
mov byte [ebp - 0x421], 1
test al, al
jne 0x404539
mov byte [ebp - 0x421], bl
test byte [ebp - 0x430], 1
je 0x404557
mov ecx, dword [ebp - 0x42c]
and dword [ebp - 0x430], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00401039
cmp byte [ebp - 0x421], bl
je 0x404569
mov dword [ebp - 0x438], 1
mov ecx, dword [ebp - 0x428]
call fcn.00401326
or dword [ebp - 0x430], 2
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
mov dword [ebp - 4], ebx
call fcn.00419e20
add esp, 0xc
push edi
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
lea eax, [ebp - 0x218]
je 0x4045bb
push str.msiexec.exe
jmp 0x4045c0
push 0x433a2c
push edi
push eax
call fcn.00419fab
mov edi, dword [ebp - 0x428]
add esp, 0xc
lea eax, [ebp - 0x218]
cmp dword [ebp - 0x438], ebx
je 0x404696
push dword [esi + 8]
push dword [esi + 0x14]
push eax
push str.__s___i__s__s_REBOOT_ReallySuppress_
push edi
call fcn.00401480
add esp, 0x14
cmp dword [0x442410], ebx
je 0x40460b
push str._SUPPRESS_APP_LAUNCH_Yes_
mov ecx, edi
call fcn.00403eab
lea eax, [esi + 0x38]
push eax
lea eax, [ebp - 0x434]
push 0x433990
push eax
call fcn.00403e56
push 0x43398c
push eax
lea eax, [ebp - 0x42c]
push eax
mov dword [ebp - 4], 1
call fcn.00401a35
add esp, 0x18
push eax
mov ecx, edi
mov byte [ebp - 4], 2
call fcn.004040a4
mov ecx, dword [ebp - 0x42c]
add ecx, 0xfffffff0
call fcn.00401039
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
mov byte [ebp - 4], bl
call fcn.00401039
cmp dword [0x442414], ebx
je 0x40467b
push str.__qn
mov ecx, edi
jmp 0x4047b4
cmp dword [0x442418], ebx
jne 0x40468f
mov eax, dword [esi + 8]
cmp dword [eax - 0xc], ebx
jne 0x4047b9
mov ecx, edi
jmp 0x4047af
push dword [esi + 8]
push dword [esi + 4]
push eax
push str.__s___i___s___s_REBOOT_ReallySuppress_
push edi
call fcn.00401480
add esp, 0x14
cmp dword [0x442410], ebx
je 0x4046bf
push str._SUPPRESS_APP_LAUNCH_Yes_
mov ecx, edi
call fcn.00403eab
cmp dword [0x442424], ebx
je 0x404700
push 0x442408
lea eax, [ebp - 0x42c]
push str._IGNOREVC10RT1_VC10RTERROR
push eax
call fcn.00403e56
add esp, 0xc
push eax
mov ecx, edi
mov dword [ebp - 4], 3
call fcn.004040a4
mov ecx, dword [ebp - 0x42c]
add ecx, 0xfffffff0
mov byte [ebp - 4], bl
call fcn.00401039
cmp dword [0x442428], ebx
je 0x404714
push str._IGNOREVC10RT1
mov ecx, edi
call fcn.00403eab
cmp dword [esi + 0x3c], ebx
je 0x404725
mov eax, dword [esi + 0x38]
cmp dword [eax - 0xc], ebx
je 0x4047b9
lea eax, [esi + 0x38]
mov ecx, dword [eax]
cmp dword [ecx - 0xc], ebx
je 0x40478c
push eax
lea eax, [ebp - 0x434]
push 0x433990
push eax
call fcn.00403e56
push 0x43398c
push eax
lea eax, [ebp - 0x42c]
push eax
mov dword [ebp - 4], 4
call fcn.00401a35
add esp, 0x18
mov ecx, dword [ebp - 0x428]
push eax
mov byte [ebp - 4], 5
call fcn.004040a4
mov ecx, dword [ebp - 0x42c]
add ecx, 0xfffffff0
call fcn.00401039
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
mov byte [ebp - 4], bl
call fcn.00401039
cmp dword [0x442414], ebx
je 0x4047a1
mov ecx, dword [ebp - 0x428]
push str.__qn
jmp 0x4047b4
cmp dword [0x442418], ebx
je 0x4047b9
mov ecx, dword [ebp - 0x428]
push str.__qb
call fcn.00403eab
mov eax, dword [ebp - 0x428]
call fcn.00419b86
ret 4