Function at 0x100460e0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10191649
mov eax, dword fs:[0]
push eax
sub esp, 0x244
mov eax, dword [0x101f62b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov ebx, ecx
lea edx, [ebp - 0x234]
lea ecx, [ebp - 0x250]
call fcn.101081c0
test al, al
je 0x10046629
cmp dword [ebp - 0x234], 2
jne 0x10046629
lea eax, [ebx - 0x15]
cmp eax, 0x10
ja case.0x1004614b.22
movzx eax, byte [eax + 0x10046678]
jmp dword [eax*4 + 0x1004665c]
push 0
push 0x2c
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x100461ae
push str.Adobe
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.10174e77
lea ecx, [ebp - 0x218]
add esp, 0xc
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10046190
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
mov ecx, edi
call fcn.10001d60
push str.AdobeApplicationManager
lea ecx, [ebp - 0x230]
call fcn.10001cb0
push 0
lea eax, [ebp - 0x230]
mov dword [ebp - 4], 0
push eax
push edi
call fcn.100fd940
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x1004621e
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10046214
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10046651
push edx
push ecx
call fcn.1015cbd5
add esp, 8
push str.AAMRefs
lea ecx, [ebp - 0x230]
call fcn.10001cb0
mov dword [ebp - 4], 1
push 0
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100fd940
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x100465f9
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10046288
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10046656
push edx
push ecx
call fcn.1015cbd5
add esp, 8
jmp 0x100465f9
push 0
push 0x2c
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x100462ee
push str.Adobe
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.10174e77
lea ecx, [ebp - 0x218]
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100462d0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
mov ecx, edi
call fcn.10001d60
push 0x101c8d78
lea ecx, [ebp - 0x230]
call fcn.10001cb0
mov dword [ebp - 4], 2
jmp 0x10046235
push ecx
mov edx, edi
mov ecx, 0x2c
call fcn.100fc360
add esp, 4
lea ecx, [ebp - 0x230]
push 0x101c8d88
call fcn.10001cb0
push 0
lea eax, [ebp - 0x230]
mov dword [ebp - 4], 3
push eax
push edi
call fcn.100fd940
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x1004638a
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10046380
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10046656
push edx
push ecx
call fcn.1015cbd5
add esp, 8
push str.Adobe_Desktop_Common
lea ecx, [ebp - 0x230]
call fcn.10001cb0
mov dword [ebp - 4], 4
jmp 0x10046235
push ecx
mov edx, edi
mov ecx, 0x2a
call fcn.100fc360
add esp, 4
lea ecx, [ebp - 0x230]
push 0x101c8d88
call fcn.10001cb0
push 0
lea eax, [ebp - 0x230]
mov dword [ebp - 4], 5
push eax
push edi
call fcn.100fd940
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x10046426
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1004641c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10046656
push edx
push ecx
call fcn.1015cbd5
add esp, 8
push 0x101af38c
lea ecx, [ebp - 0x230]
call fcn.10001cb0
mov dword [ebp - 4], 6
jmp 0x10046235
push ecx
mov edx, edi
mov ecx, 0x2c
call fcn.100fc360
add esp, 4
lea ecx, [ebp - 0x230]
push 0x101c8d88
call fcn.10001cb0
push 0
lea eax, [ebp - 0x230]
mov dword [ebp - 4], 7
push eax
push edi
call fcn.100fd940
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x100464c2
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100464b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10046656
push edx
push ecx
call fcn.1015cbd5
add esp, 8
push str.OOBE
lea ecx, [ebp - 0x230]
call fcn.10001cb0
push 0
lea eax, [ebp - 0x230]
mov dword [ebp - 4], 8
push eax
push edi
call fcn.100fd940
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x10046532
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10046528
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10046656
push edx
push ecx
call fcn.1015cbd5
add esp, 8
push str.PDApp
lea ecx, [ebp - 0x230]
call fcn.10001cb0
mov dword [ebp - 4], 9
jmp 0x10046235
push ecx
mov edx, edi
mov ecx, 0x2c
call fcn.100fc360
add esp, 4
lea ecx, [ebp - 0x24c]
push 0x101c8d88
call fcn.10001cb0
push 0
lea eax, [ebp - 0x24c]
mov dword [ebp - 4], 0xa
push eax
push edi
call fcn.100fd940
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov edx, dword [ebp - 0x238]
cmp edx, 8
jb 0x100465ce
mov ecx, dword [ebp - 0x24c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100465c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10046656
push edx
push ecx
call fcn.1015cbd5
add esp, 8
xor eax, eax
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 7
mov word [ebp - 0x24c], ax
jmp 0x100465f9
push 0
push edi
push ebx
call fcn.100fcef0
add esp, 0xc
call fcn.1004cb70
cmp dword [edi + 0x14], 8
jb 0x10046606
mov edi, dword [edi]
mov esi, dword [eax]
push edi
push ebx
push str.Inside_getEmulatedPath__inPathType:_d__outPath:_s
mov esi, dword [esi + 0x44]
mov ecx, esi
push 0x101aee58
push eax
call dword [0x1019a4f8]
call esi
add esp, 0x14
mov al, 1
jmp 0x10046635
push 0
push edi
push ebx
call fcn.100fcef0
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1015c875
mov esp, ebp
pop ebp
ret
call fcn.101686f5
call fcn.101686f5
nop
dec esi
add al, 16
inc edx
add al, 16
push edx
popal
add al, 0x10
xchg edi, eax
bound eax, qword [eax + edx]
or ah, byte [ebx + 4]
adc byte [esi - 317717405], ah
add al, 0x10
add byte [esi], al
push es
push es
push es
push es
push es
push es
add dword [esi], eax
push es
add al, byte [ebx]
push es
add al, 6
add eax, -858993460
int3