Function at 0x4495da
Capabilities:
Get common file path

Disassembly:
push 0x28
mov eax, 0x4b2d90
call fcn.00468fa8
push str.ProcessReportedData...
lea ecx, [ebp - 0x20]
call fcn.00402829
xor edi, edi
lea edx, [ebp - 0x20]
push edi
mov dword [ebp - 4], edi
call fcn.00413819
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea eax, [ebp - 0x30]
mov dword [ebp - 0x2c], edi
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], edi
push eax
mov ebx, 0x4ca238
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push str.iTestDisablePings
mov edx, ebx
call fcn.0043fc1c
add esp, 0xc
test eax, eax
jne 0x44965d
xor esi, esi
inc esi
cmp dword [ebp - 0x2c], esi
jne 0x44965d
push str.Pings_disabled_in_ARM_registry_by_iTestDisablePings
lea ecx, [ebp - 0x20]
call fcn.00402829
push edi
push 2
mov dword [ebp - 4], esi
pop ecx
jmp 0x449a12
cmp dword [0x514e30], edi
jne 0x4499fe
cmp dword [0x514e34], edi
jne 0x4499fe
call fcn.00440dee
test eax, eax
je 0x4496a0
push str.AUSST_overwrite_file_found__will_not_process_reported_data
lea ecx, [ebp - 0x20]
call fcn.00402829
push edi
lea edx, [ebp - 0x20]
mov dword [ebp - 4], 3
call fcn.00413819
jmp 0x449a1a
lea eax, [ebp - 0x30]
mov dword [ebp - 0x28], 0x270f
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x30], edi
push eax
push str.iRandom
mov edx, ebx
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.0043fc1c
add esp, 0xc
cmp dword [ebp - 0x28], 0xcc3
jbe 0x4496f6
push str.did_not_pass_throttle_check:
lea ecx, [ebp - 0x20]
call fcn.00402829
mov dword [ebp - 4], 4
lea edx, [ebp - 0x20]
push dword [ebp - 0x28]
push 2
pop ecx
call fcn.00413882
jmp 0x449a1a
call fcn.0044f181
push eax
lea ecx, [ebp - 0x20]
call fcn.00402899
mov esi, 0x104
mov dword [ebp - 4], 5
push esi
lea ecx, [ebp - 0x20]
call fcn.00402bd2
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.00409889
test esi, esi
jne 0x44975a
push str.failed_to_get_Temp_folder
lea ecx, [ebp - 0x24]
call fcn.00402829
mov byte [ebp - 4], 6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edx, [ebp - 0x24]
call fcn.00413819
pop ecx
mov ecx, dword [ebp - 0x24]
jmp 0x4499f4
call fcn.0044f181
push eax
lea ecx, [ebp - 0x14]
call fcn.00402899
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 7
push eax
mov esi, 0x514d30
push str.SessionApplication
mov ecx, esi
call fcn.00409d04
test eax, eax
jne 0x4499f1
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
je 0x4499f1
push 0x4c9910
lea ecx, [ebp - 0x14]
call fcn.0040969f
test eax, eax
je 0x4497d6
push str.Acrobat
lea ecx, [ebp - 0x14]
call fcn.0040969f
test eax, eax
je 0x4497d6
push 0x4ca1f8
lea ecx, [ebp - 0x14]
call fcn.0040969f
test eax, eax
je 0x4497d6
push str.Services
lea ecx, [ebp - 0x14]
call fcn.0040286d
push str.http:__acroipm2.adobe.com_assets_arm_analytics_
lea ecx, [ebp - 0x24]
call fcn.00402829
mov byte [ebp - 4], 8
call fcn.0044f181
push eax
lea ecx, [ebp - 0x1c]
call fcn.00402899
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x30], edi
push eax
push str.ReportedDataUrlOverwrite
mov edx, ebx
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.0043fb5d
add esp, 0xc
test eax, eax
jne 0x449860
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 0xc], 0
je 0x449860
push str.Found_ReportedDataUrlOverwrite:
lea ecx, [ebp - 0x18]
call fcn.00402829
push ecx
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x18]
call fcn.0041384b
pop ecx
pop ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x24]
call fcn.00402e14
call fcn.0044f181
push eax
lea ecx, [ebp - 0x18]
call fcn.00402899
mov byte [ebp - 4], 0xb
call fcn.0044f181
push eax
lea ecx, [ebp - 0x10]
call fcn.00402899
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xc
push eax
push str.PingFilesList
mov ecx, esi
call fcn.00409d04
test eax, eax
mov eax, dword [ebp - 0x10]
jne 0x449901
cmp dword [eax - 0xc], 0
je 0x449907
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004024b8
push 0x4e54c4
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xd
push eax
call fcn.00402459
add esp, 0x18
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.00402e14
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x20]
call fcn.00449a2e
pop ecx
jmp 0x449931
cmp dword [eax - 0xc], 0
jne 0x449931
push str.no_values_in_PingFileList
lea ecx, [ebp - 0x30]
call fcn.00402829
push edi
lea edx, [ebp - 0x30]
mov byte [ebp - 4], 0xf
call fcn.00413819
pop ecx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [ebp - 0x10]
call fcn.00402a6b
lea eax, [ebp - 0x10]
mov ecx, esi
push eax
push str.PingFilesListSU
call fcn.00409d04
mov esi, dword [ebp - 0x10]
test eax, eax
jne 0x44999c
cmp dword [esi - 0xc], 0
je 0x4499a2
push str.AdobeARM_
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00402459
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call fcn.00402e14
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x20]
call fcn.00449a2e
mov esi, dword [ebp - 0x10]
pop ecx
jmp 0x4499c8
cmp dword [esi - 0xc], 0
jne 0x4499c8
push str.no_values_in_PingFileListSU
lea ecx, [ebp - 0x30]
call fcn.00402829
push edi
lea edx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.00413819
pop ecx
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [esi - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00402e64
jmp 0x449a1b
push str.disabled_for_RUM_and_OnDemand
lea ecx, [ebp - 0x20]
call fcn.00402829
push 2
pop ecx
mov dword [ebp - 4], ecx
push edi
lea edx, [ebp - 0x20]
call fcn.004137d1
pop ecx
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00402e64
xor eax, eax
call fcn.00468f71
ret