Function at 0x43371f
Capabilities:
Get common file path

Disassembly:
push 0x43c
mov eax, 0x45d4ec
call fcn.00447dc4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp + 0xc]
push str.GetFinalCommandLineForSM...
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x434], eax
call fcn.00402060
xor ebx, ebx
push ebx
lea eax, [ebp - 0x424]
push eax
push 2
mov dword [ebp - 4], ebx
call fcn.00411fad
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x424]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
call fcn.00434582
push eax
lea ecx, [ebp - 0x43c]
call fcn.0040210b
xor eax, eax
mov esi, 0x206
mov dword [ebp - 4], 1
push esi
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push ebx
push eax
call fcn.00445f90
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push ebx
push ebx
push 0x2b
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edi, eax
cmp edi, ebx
jne 0x433b67
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x43c]
call fcn.004020d4
push str.AdobeARM1.0_armsvc.exe
lea ecx, [ebp - 0x43c]
call fcn.00409019
call fcn.00434582
push eax
lea ecx, [ebp - 0x438]
call fcn.0040210b
xor eax, eax
mov byte [ebp - 4], 3
push esi
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.00445f90
mov edi, dword [ebp - 0x43c]
add esp, 0xc
push ebx
push ebx
lea eax, [ebp - 0x448]
push eax
lea eax, [ebp - 0x218]
push eax
push edi
mov dword [ebp - 0x448], 0x104
call sub.msi.dll_MsiMessageBoxW
mov esi, eax
cmp esi, ebx
jne 0x433b19
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.004020d4
push str.found_service_version:
lea ecx, [ebp - 0x424]
call fcn.00402060
push ebx
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x424]
push eax
push 2
mov byte [ebp - 4], 4
call fcn.00411b27
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x424]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
push str.1.701.999.9999
lea ecx, [ebp - 0x444]
mov byte [ebp - 0x425], bl
call fcn.00402060
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 6
call fcn.0042f629
pop ecx
pop ecx
test eax, eax
je 0x4339f3
push str.installed_service_is_legacy_version
lea ecx, [ebp - 0x424]
call fcn.00402060
push ebx
lea eax, [ebp - 0x424]
push eax
push 2
mov byte [ebp - 4], 7
call fcn.00411fad
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x424]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
mov edi, dword [ebp - 0x42c]
push 0x486c94
xor ecx, ecx
mov esi, edi
mov byte [ebp - 0x425], 1
call fcn.00408f4f
cmp eax, 0xffffffff
jne 0x433939
push str.__Svc
mov ecx, edi
call fcn.00409019
push edi
lea ecx, [ebp - 0x424]
call fcn.004020a4
push str._USER:
xor ecx, ecx
lea esi, [ebp - 0x424]
mov byte [ebp - 4], 8
call fcn.00408f4f
cmp eax, 0xffffffff
jne 0x433998
push dword [ebp - 0x434]
lea eax, [ebp - 0x434]
push str.__USER:
push eax
call fcn.00401dd1
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00401e6a
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
call fcn.0040253e
mov esi, dword [ebp - 0x424]
mov eax, dword [esi - 0xc]
add eax, eax
cmp eax, 0x104
jb 0x4339e5
push str.cmd_line_limit_reached_for_legacy_service:
lea ecx, [ebp - 0x42c]
call fcn.00402060
push ebx
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x42c]
push eax
push 2
mov byte [ebp - 4], 0xa
call fcn.00411b27
mov ecx, dword [ebp - 0x42c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 6
call fcn.0040253e
jmp 0x4339f9
mov edi, dword [ebp - 0x42c]
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
add eax, eax
cmp eax, 0x104
jb 0x433ae8
push str.final_cmd_line_limit_is_reached:
lea ecx, [ebp - 0x42c]
call fcn.00402060
push ebx
push edi
lea eax, [ebp - 0x42c]
push eax
push 2
mov byte [ebp - 4], 0xb
call fcn.00411b27
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x42c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
cmp byte [ebp - 0x425], bl
jne 0x433ae8
push 0x49c560
lea eax, [ebp - 0x434]
push str._FOLDER:_
push eax
call fcn.00401dd1
add esp, 0xc
push 0x467c38
push eax
lea eax, [ebp - 0x430]
push eax
mov byte [ebp - 4], 0xc
call fcn.00408f80
add esp, 0xc
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
call fcn.0040253e
push 0x469238
push dword [ebp - 0x430]
push edi
call fcn.00408dd5
push str.final_cmd_line_for_arm_next_service:
lea ecx, [ebp - 0x440]
call fcn.00402060
push ebx
push edi
lea eax, [ebp - 0x440]
push eax
push 2
mov byte [ebp - 4], 0xf
call fcn.00411b27
mov ecx, dword [ebp - 0x440]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x444]
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x438]
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x43c]
add ecx, 0xfffffff0
call fcn.0040253e
xor eax, eax
jmp 0x433bab
push str.unable_to_determine_service_version:
lea ecx, [ebp - 0x430]
call fcn.00402060
push esi
lea eax, [ebp - 0x430]
push eax
push 2
mov byte [ebp - 4], 5
call fcn.00411fad
mov ecx, dword [ebp - 0x430]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x438]
add ecx, 0xfffffff0
call fcn.0040253e
lea ecx, [edi - 0x10]
call fcn.0040253e
mov eax, esi
jmp 0x433bab
push str.SHGetFolderPath_failed:
lea ecx, [ebp - 0x430]
call fcn.00402060
push edi
lea eax, [ebp - 0x430]
push eax
push 2
mov byte [ebp - 4], 2
call fcn.00411fad
mov ecx, dword [ebp - 0x430]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x43c]
add ecx, 0xfffffff0
call fcn.0040253e
mov eax, edi
call fcn.00447e47
ret