Function at 0x1001d9c0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1021bb09
mov eax, dword fs:[0]
push eax
sub esp, 0x334
mov eax, dword [0x102e91c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor ebx, ebx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x2e4], ebx
cmp edi, 0x1d
je 0x1001da55
cmp edi, 0x23
je 0x1001da55
cmp edi, 0x24
je 0x1001da55
cmp edi, 0x25
je 0x1001da55
cmp edi, 0x26
je 0x1001da55
mov esi, dword [0x102eec30]
test esi, esi
je 0x1001da4e
push edi
push str.Inside_getPackagesDetails._Invalid_path_type:__d
push 0x1025b044
push 0x1025b044
push str.AppVersionManager
push str.c3containerBL
push 0x1e
mov ecx, esi
call dword [0x1024852c]
call esi
add esp, 0x1c
xor al, al
jmp 0x1001e5d3
xor eax, eax
mov dword [ebp - 0x28c], ebx
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x278], 7
mov word [ebp - 0x28c], ax
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x2f4]
call fcn.10150080
cmp dword [ebp - 0x2e8], 2
jne 0x1001daa9
lea ecx, [ebp - 0x28c]
call fcn.1014d440
test al, al
je 0x1001db04
push 0x15
push str.Adobe_Desktop_Common
jmp 0x1001daf9
push 0
push 0x2b
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x1001db04
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001dad0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x28c]
call fcn.10010360
push 0x1b
push str.AdobeAdobe_Desktop_Common
lea ecx, [ebp - 0x28c]
call fcn.10010650
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x25c]
call fcn.1000fe90
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x23c]
push 4
push str.Core
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
call fcn.1000aef0
mov byte [ebp - 4], 2
mov esi, 2
mov ecx, dword [ebp - 0x24c]
test ecx, ecx
je 0x1001dc0a
mov eax, dword [ebp - 0x22c]
test eax, eax
je 0x1001dc0a
add ecx, 0xb
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x2e8], eax
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.101dc6a1
mov esi, eax
add esp, 4
test esi, esi
je 0x1001dc05
cmp dword [ebp - 0x248], 8
lea ecx, [ebp - 0x25c]
cmovae ecx, dword [ebp - 0x25c]
push ecx
push dword [ebp - 0x2e8]
push esi
call fcn.101dc63d
add esp, 0xc
lea eax, [ebp - 0x23c]
cmp dword [ebp - 0x228], 8
cmovae eax, dword [ebp - 0x23c]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001dbe0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x25c]
call fcn.10010360
push esi
call fcn.101dbd83
add esp, 4
mov esi, 2
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 1
call fcn.1000ae90
push 0xc
push str.AdobePIM.dll
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
call fcn.1000aef0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x24c]
test ecx, ecx
je 0x1001dcf8
mov eax, dword [ebp - 0x22c]
test eax, eax
je 0x1001dcf8
add ecx, 0xb
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x2e8], eax
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.101dc6a1
mov esi, eax
add esp, 4
test esi, esi
je 0x1001dcf8
cmp dword [ebp - 0x248], 8
lea ecx, [ebp - 0x25c]
cmovae ecx, dword [ebp - 0x25c]
push ecx
push dword [ebp - 0x2e8]
push esi
call fcn.101dc63d
add esp, 0xc
lea eax, [ebp - 0x23c]
cmp dword [ebp - 0x228], 8
cmovae eax, dword [ebp - 0x23c]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001dcd3
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x25c]
call fcn.10010360
push esi
call fcn.101dbd83
add esp, 4
lea ecx, [ebp - 0x23c]
call fcn.1000ae90
mov dword [ebp - 0x21c], 0
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.101743c0
test al, al
jne 0x1001dd81
mov esi, dword [0x102eec30]
test esi, esi
je 0x1001dd76
cmp dword [ebp - 0x248], 8
lea eax, [ebp - 0x25c]
mov ecx, esi
cmovae eax, dword [ebp - 0x25c]
push eax
push str.Inside_getPackagesDetails._Failed_to_load_PIM_library_at_path:__s
push 0x1025b044
push 0x1025b044
push str.AppVersionManager
push str.c3containerBL
push 0x28
call dword [0x1024852c]
call esi
mov esi, dword [ebp - 0x21c]
jmp 0x1001e5ab
mov esi, dword [ebp - 0x21c]
jmp 0x1001e5ae
mov esi, dword [ebp - 0x21c]
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2e8], esi
test esi, esi
je 0x1001ddad
push str.pim_createLibraryRef
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], 0
test esi, esi
je 0x1001ddcd
push str.pim_freeLibraryRef
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2ec], eax
xor eax, eax
mov dword [ebp - 0x2e4], eax
test esi, esi
je 0x1001ddeb
push str.pim_getInstalledPackagesInfo
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2f0], 0
je 0x1001e54f
cmp dword [ebp - 0x2ec], 0
je 0x1001e54f
test eax, eax
je 0x1001e54f
xor eax, eax
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 7
mov word [ebp - 0x2a4], ax
push ecx
lea edx, [ebp - 0x2a4]
mov byte [ebp - 4], 5
mov ecx, edi
call fcn.1014d9e0
mov edi, dword [ebp - 0x2f0]
lea eax, [ebp - 0x2a4]
add esp, 4
mov ecx, edi
cmp dword [ebp - 0x290], 8
cmovae eax, dword [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x2d8]
push eax
call dword [0x1024852c]
call edi
add esp, 8
test eax, eax
je 0x1001ded8
test esi, esi
je 0x1001de94
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor ecx, ecx
test eax, eax
cmovne esi, ecx
mov dword [ebp - 0x21c], esi
mov edi, dword [0x102eec30]
test edi, edi
je 0x1001dec6
push str.Inside_getPackagesDetails._error_in_pim_createLibraryRef
push 0x1025b044
push 0x1025b044
push str.AppVersionManager
push str.c3containerBL
push 0x28
mov ecx, edi
call dword [0x1024852c]
call edi
add esp, 0x18
lea ecx, [ebp - 0x2a4]
xor bl, bl
call fcn.1000ae90
jmp 0x1001e5b0
mov edi, dword [ebp - 0x2e4]
lea eax, [ebp - 0x2dc]
push eax
push dword [ebp - 0x2d8]
mov ecx, edi
call dword [0x1024852c]
call edi
xor ecx, ecx
mov dword [ebp - 0x274], 0
add esp, 8
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 7
mov word [ebp - 0x274], cx
mov byte [ebp - 4], 6
test eax, eax
jne 0x1001df5c
mov edx, dword [ebp - 0x2dc]
test edx, edx
je 0x1001df5c
mov ecx, edx
lea edi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1001df40
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x274]
call fcn.10010360
mov edi, dword [ebp - 0x2ec]
lea eax, [ebp - 0x2d8]
push eax
mov ecx, edi
call dword [0x1024852c]
call edi
add esp, 4
test esi, esi
je 0x1001df94
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor ecx, ecx
test eax, eax
cmovne esi, ecx
mov dword [ebp - 0x2e8], esi
mov dword [ebp - 0x21c], esi
cmp dword [ebp - 0x2e4], 0
mov edi, dword [0x102eec30]
je 0x1001dfd6
test edi, edi
je 0x1001dfcf
push str.Inside_getPackagesDetails._error_in_pim_getInstalledPackagesInfo
push 0x1025b044
push 0x1025b044
push str.AppVersionManager
push str.c3containerBL
push 0x28
mov ecx, edi
call dword [0x1024852c]
call edi
add esp, 0x18
xor bl, bl
jmp 0x1001e537
test edi, edi
je 0x1001e017
cmp dword [ebp - 0x260], 8
lea eax, [ebp - 0x274]
mov ecx, edi
cmovae eax, dword [ebp - 0x274]
push eax
push str.Inside_getPackagesDetails._All_installed_products_from_PIM__s
push 0x1025b044
push 0x1025b044
push str.AppVersionManager
push str.c3containerBL
push 0x1e
call dword [0x1024852c]
call edi
add esp, 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x244], xmm0
push 0xc8
mov dword [ebp - 0x240], 0
call fcn.101cff73
add esp, 4
mov edi, eax
mov dword [ebp - 0x2f4], edi
push 0xc8
push 0
push edi
call fcn.101d28f0
add esp, 0xc
mov ecx, edi
call fcn.1017ce20
mov ecx, eax
mov dword [ebp - 0x244], ecx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x274]
cmp dword [ebp - 0x260], 8
cmovae eax, dword [ebp - 0x274]
mov edi, eax
mov dword [ebp - 0x2e4], eax
lea edx, [edi + 2]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x1001e083
sub edi, edx
sar edi, 1
call fcn.1017cf30
mov ecx, dword [ebp - 0x244]
call fcn.1017ceb0
mov eax, dword [ebp - 0x244]
mov edx, dword [eax]
add eax, 4
push eax
push 0
push 0
push 8
push ecx
lea eax, [edi + edi]
push eax
push dword [ebp - 0x2e4]
lea ecx, [ebp - 0x230]
push edx
call fcn.1017c490
add esp, 0x20
cmp dword [ebp - 0x230], 0
je 0x1001e116
mov edi, dword [0x102eec30]
test edi, edi
je 0x1001e109
push str.Inside_getPackagesDetails._invalid_xml
push 0x1025b044
push 0x1025b044
push str.AppVersionManager
push str.c3containerBL
push 0x28
mov ecx, edi
call dword [0x1024852c]
call edi
add esp, 0x18
xor al, al
mov byte [ebp - 0x2dd], al
jmp 0x1001e512
push 0x34
xorps xmm0, xmm0
mov dword [ebp - 0x2ec], 0
push str._package_installation_info_installed_package_element
lea ecx, [ebp - 0x340]
movq qword [ebp - 0x230], xmm0
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x32c], 0
call fcn.1000aef0
lea eax, [ebp - 0x2e4]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x244]
call fcn.1014beb0
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0xa
call fcn.1000ae90
cmp dword [ebp - 0x2ec], 0
jle 0x1001e4e1
mov eax, dword [ebp - 0x22c]
mov edi, dword [ebp - 0x230]
sub eax, edi
sar eax, 2
mov ecx, edi
mov dword [ebp - 0x2f4], eax
xor esi, esi
mov dword [ebp - 0x2f0], ecx
cmp eax, esi
ja 0x1001e1df
xor ecx, ecx
jmp 0x1001e1ef
test esi, esi
mov eax, edi
cmovg eax, ecx
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
cmovne ecx, eax
push ecx
lea eax, [ebp - 0x224]
xorps xmm0, xmm0
push eax
movlpd qword [ebp - 0x224], xmm0
call fcn.1014c2f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x30c]
push 4
push 0x10268f74
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f8], 0
call fcn.1000aef0
lea eax, [ebp - 0x30c]
mov byte [ebp - 4], 0xc
or ebx, 1
lea ecx, [ebp - 0x224]
push eax
mov dword [ebp - 0x2e4], ebx
call fcn.1000fbe0
cmp dword [eax + 0x10], 0
je 0x1001e2bf
push 7
push str.version
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 0
call fcn.1000aef0
lea eax, [ebp - 0x328]
mov dword [ebp - 4], 0xd
or ebx, 2
lea ecx, [ebp - 0x224]
push eax
mov dword [ebp - 0x2e4], ebx
call fcn.1000fbe0
mov byte [ebp - 0x2dd], 1
cmp dword [eax + 0x10], 0
jne 0x1001e2c6
mov byte [ebp - 0x2dd], 0
test bl, 2
je 0x1001e2d9
lea ecx, [ebp - 0x328]
and ebx, 0xfffffffd
call fcn.1000ae90
mov dword [ebp - 4], 0xb
test bl, 1
je 0x1001e2f3
lea ecx, [ebp - 0x30c]
and ebx, 0xfffffffe
call fcn.1000ae90
cmp byte [ebp - 0x2dd], 0
je 0x1001e48e
push 7
push str.version
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f8], 0
call fcn.1000aef0
lea eax, [ebp - 0x30c]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x224]
call fcn.1000fbe0
push eax
lea ecx, [ebp - 0x2d4]
call fcn.1000fe90
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 0x10
call fcn.1000ae90
push 9
push str.packageid
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 0
call fcn.1000aef0
lea eax, [ebp - 0x328]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x224]
call fcn.1000fbe0
push eax
lea ecx, [ebp - 0x2bc]
call fcn.1000fe90
lea ecx, [ebp - 0x328]
call fcn.1000ae90
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x30c]
push 4
push 0x10268f74
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f8], 0
call fcn.1000aef0
lea eax, [ebp - 0x30c]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x224]
call fcn.1000fbe0
mov ecx, dword [ebp - 0x310]
push eax
call fcn.1001eb10
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 0x2e4], eax
cmp eax, ecx
je 0x1001e446
cmp dword [ebp - 0x2c0], 8
push dword [ebp - 0x2c4]
cmovae ecx, dword [ebp - 0x2d4]
push ecx
mov ecx, eax
call fcn.10010360
mov eax, dword [ebp - 0x2e4]
lea ecx, [eax + 0x18]
lea eax, [ebp - 0x2bc]
cmp ecx, eax
je 0x1001e46d
cmp dword [ebp - 0x2a8], 8
push dword [ebp - 0x2ac]
cmovae eax, dword [ebp - 0x2bc]
push eax
call fcn.10010360
lea ecx, [ebp - 0x30c]
call fcn.1000ae90
lea ecx, [ebp - 0x2bc]
call fcn.1000ae90
lea ecx, [ebp - 0x2d4]
call fcn.1000ae90
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x224]
push dword [eax + 4]
lea eax, [ebp - 0x224]
push eax
mov ecx, eax
call fcn.10010e30
push 0x40
push dword [ebp - 0x224]
call fcn.101d02bd
mov ecx, dword [ebp - 0x2f0]
inc esi
mov eax, dword [ebp - 0x2f4]
add ecx, 4
add esp, 8
mov dword [ebp - 0x2f0], ecx
cmp esi, dword [ebp - 0x2ec]
jl 0x1001e1d7
mov esi, dword [ebp - 0x2e8]
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x2dd], 1
call fcn.10010270
mov edi, dword [ebp - 0x240]
test edi, edi
je 0x1001e512
mov ecx, edi
call fcn.1017cf30
push 0xc8
push edi
call fcn.101d02bd
add esp, 8
mov ebx, dword [ebp - 0x244]
test ebx, ebx
je 0x1001e531
mov ecx, ebx
call fcn.1017cf30
push 0xc8
push ebx
call fcn.101d02bd
add esp, 8
mov bl, byte [ebp - 0x2dd]
lea ecx, [ebp - 0x274]
call fcn.1000ae90
lea ecx, [ebp - 0x2a4]
call fcn.1000ae90
jmp 0x1001e5b0
test esi, esi
je 0x1001e567
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor ecx, ecx
test eax, eax
cmovne esi, ecx
mov dword [ebp - 0x21c], esi
mov edi, dword [0x102eec30]
test edi, edi
je 0x1001e5ae
cmp dword [ebp - 0x248], 8
lea eax, [ebp - 0x25c]
mov ecx, edi
cmovae eax, dword [ebp - 0x25c]
push eax
push str.Inside_getPackagesDetails._Invalid_PIM_library_at_path:__s
push 0x1025b044
push 0x1025b044
push str.AppVersionManager
push str.c3containerBL
push 0x28
call dword [0x1024852c]
call edi
add esp, 0x1c
xor bl, bl
test esi, esi
je 0x1001e5bb
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x25c]
call fcn.1000ae90
lea ecx, [ebp - 0x28c]
call fcn.1000ae90
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101cff65
mov esp, ebp
pop ebp
ret 8