Function at 0x4349a7
Capabilities:
Get common file path

Disassembly:
push 0x43c
mov eax, 0x45f5c8
call fcn.00449f2b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp + 0xc]
push str.GetFinalCommandLineForSM...
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x434], eax
call fcn.0040130b
xor ebx, ebx
push ebx
lea eax, [ebp - 0x424]
push eax
push 2
mov dword [ebp - 4], ebx
call fcn.0040fcf3
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x424]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
call fcn.004366fe
push eax
lea ecx, [ebp - 0x43c]
call fcn.00411d53
xor eax, eax
mov esi, 0x206
mov dword [ebp - 4], 1
push esi
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push ebx
push eax
call fcn.00448000
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push ebx
push ebx
push 0x2b
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edi, eax
cmp edi, ebx
jne 0x434def
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x43c]
call fcn.0040137f
push str.AdobeARM1.0_armsvc.exe
lea ecx, [ebp - 0x43c]
call fcn.00406262
call fcn.004366fe
push eax
lea ecx, [ebp - 0x438]
call fcn.00411d53
xor eax, eax
mov byte [ebp - 4], 3
push esi
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.00448000
mov edi, dword [ebp - 0x43c]
add esp, 0xc
push ebx
push ebx
lea eax, [ebp - 0x448]
push eax
lea eax, [ebp - 0x218]
push eax
push edi
mov dword [ebp - 0x448], 0x104
call sub.msi.dll_MsiMessageBoxW
mov esi, eax
cmp esi, ebx
jne 0x434da1
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.0040137f
push str.found_service_version:
lea ecx, [ebp - 0x424]
call fcn.0040130b
push ebx
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x424]
push eax
push 2
mov byte [ebp - 4], 4
call fcn.0040f821
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x424]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
push str.1.701.999.9999
lea ecx, [ebp - 0x444]
mov byte [ebp - 0x425], bl
call fcn.0040130b
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 6
call fcn.00430303
pop ecx
pop ecx
test eax, eax
je 0x434c7b
push str.installed_service_is_legacy_version
lea ecx, [ebp - 0x424]
call fcn.0040130b
push ebx
lea eax, [ebp - 0x424]
push eax
push 2
mov byte [ebp - 4], 7
call fcn.0040fcf3
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x424]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov edi, dword [ebp - 0x42c]
push str._Svc
xor ecx, ecx
mov esi, edi
mov byte [ebp - 0x425], 1
call fcn.00406198
cmp eax, 0xffffffff
jne 0x434bc1
push str.__Svc
mov ecx, edi
call fcn.00406262
push edi
lea ecx, [ebp - 0x424]
call fcn.0040134f
push str._USER:
xor ecx, ecx
lea esi, [ebp - 0x424]
mov byte [ebp - 4], 8
call fcn.00406198
cmp eax, 0xffffffff
jne 0x434c20
push dword [ebp - 0x434]
lea eax, [ebp - 0x434]
push str.__USER:
push eax
call fcn.0040107c
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00401115
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
call fcn.004017c4
mov esi, dword [ebp - 0x424]
mov eax, dword [esi - 0xc]
add eax, eax
cmp eax, 0x104
jb 0x434c6d
push str.cmd_line_limit_reached_for_legacy_service:
lea ecx, [ebp - 0x42c]
call fcn.0040130b
push ebx
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x42c]
push eax
push 2
mov byte [ebp - 4], 0xa
call fcn.0040f821
mov ecx, dword [ebp - 0x42c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 6
call fcn.004017c4
jmp 0x434c81
mov edi, dword [ebp - 0x42c]
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
add eax, eax
cmp eax, 0x104
jb 0x434d70
push str.final_cmd_line_limit_is_reached:
lea ecx, [ebp - 0x42c]
call fcn.0040130b
push ebx
push edi
lea eax, [ebp - 0x42c]
push eax
push 2
mov byte [ebp - 4], 0xb
call fcn.0040f821
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x42c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
cmp byte [ebp - 0x425], bl
jne 0x434d70
push 0x4a66e8
lea eax, [ebp - 0x434]
push str._FOLDER:_
push eax
call fcn.0040107c
add esp, 0xc
push 0x46b7f0
push eax
lea eax, [ebp - 0x430]
push eax
mov byte [ebp - 4], 0xc
call fcn.004061c9
add esp, 0xc
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
call fcn.004017c4
push 0x46d230
push dword [ebp - 0x430]
push edi
call fcn.0040601e
push str.final_cmd_line_for_arm_next_service:
lea ecx, [ebp - 0x440]
call fcn.0040130b
push ebx
push edi
lea eax, [ebp - 0x440]
push eax
push 2
mov byte [ebp - 4], 0xf
call fcn.0040f821
mov ecx, dword [ebp - 0x440]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x444]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x438]
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x43c]
add ecx, 0xfffffff0
call fcn.004017c4
xor eax, eax
jmp 0x434e33
push str.unable_to_determine_service_version:
lea ecx, [ebp - 0x430]
call fcn.0040130b
push esi
lea eax, [ebp - 0x430]
push eax
push 2
mov byte [ebp - 4], 5
call fcn.0040fcf3
mov ecx, dword [ebp - 0x430]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x438]
add ecx, 0xfffffff0
call fcn.004017c4
lea ecx, [edi - 0x10]
call fcn.004017c4
mov eax, esi
jmp 0x434e33
push str.SHGetFolderPath_failed:
lea ecx, [ebp - 0x430]
call fcn.0040130b
push edi
lea eax, [ebp - 0x430]
push eax
push 2
mov byte [ebp - 4], 2
call fcn.0040fcf3
mov ecx, dword [ebp - 0x430]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017c4
mov ecx, dword [ebp - 0x43c]
add ecx, 0xfffffff0
call fcn.004017c4
mov eax, edi
call fcn.00449fae
ret