Function at 0x433a24
Capabilities:
Get common file path

Disassembly:
push 0x43c
mov eax, 0x45d7f6
call fcn.004480d4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp + 0xc]
push str.GetFinalCommandLineForSM...
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x434], eax
call fcn.00402060
xor ebx, ebx
push ebx
lea eax, [ebp - 0x424]
push eax
push 2
mov dword [ebp - 4], ebx
call fcn.00411fb7
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x424]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
call fcn.00434892
push eax
lea ecx, [ebp - 0x43c]
call fcn.0040210b
xor eax, eax
mov esi, 0x206
mov dword [ebp - 4], 1
push esi
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push ebx
push eax
call fcn.004462a0
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push ebx
push ebx
push 0x2b
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edi, eax
cmp edi, ebx
jne 0x433e6c
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x43c]
call fcn.004020d4
push str.AdobeARM1.0_armsvc.exe
lea ecx, [ebp - 0x43c]
call fcn.00409023
call fcn.00434892
push eax
lea ecx, [ebp - 0x438]
call fcn.0040210b
xor eax, eax
mov byte [ebp - 4], 3
push esi
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.004462a0
mov edi, dword [ebp - 0x43c]
add esp, 0xc
push ebx
push ebx
lea eax, [ebp - 0x448]
push eax
lea eax, [ebp - 0x218]
push eax
push edi
mov dword [ebp - 0x448], 0x104
call sub.msi.dll_MsiMessageBoxW
mov esi, eax
cmp esi, ebx
jne 0x433e1e
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.004020d4
push str.found_service_version:
lea ecx, [ebp - 0x424]
call fcn.00402060
push ebx
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x424]
push eax
push 2
mov byte [ebp - 4], 4
call fcn.00411b31
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x424]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
push str.1.701.999.9999
lea ecx, [ebp - 0x444]
mov byte [ebp - 0x425], bl
call fcn.00402060
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 6
call fcn.0042f92e
pop ecx
pop ecx
test eax, eax
je 0x433cf8
push str.installed_service_is_legacy_version
lea ecx, [ebp - 0x424]
call fcn.00402060
push ebx
lea eax, [ebp - 0x424]
push eax
push 2
mov byte [ebp - 4], 7
call fcn.00411fb7
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x424]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
mov edi, dword [ebp - 0x42c]
push 0x487c84
xor ecx, ecx
mov esi, edi
mov byte [ebp - 0x425], 1
call fcn.00408f59
cmp eax, 0xffffffff
jne 0x433c3e
push str.__Svc
mov ecx, edi
call fcn.00409023
push edi
lea ecx, [ebp - 0x424]
call fcn.004020a4
push str._USER:
xor ecx, ecx
lea esi, [ebp - 0x424]
mov byte [ebp - 4], 8
call fcn.00408f59
cmp eax, 0xffffffff
jne 0x433c9d
push dword [ebp - 0x434]
lea eax, [ebp - 0x434]
push str.__USER:
push eax
call fcn.00401dd1
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00401e6a
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
call fcn.0040253e
mov esi, dword [ebp - 0x424]
mov eax, dword [esi - 0xc]
add eax, eax
cmp eax, 0x104
jb 0x433cea
push str.cmd_line_limit_reached_for_legacy_service:
lea ecx, [ebp - 0x42c]
call fcn.00402060
push ebx
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x42c]
push eax
push 2
mov byte [ebp - 4], 0xa
call fcn.00411b31
mov ecx, dword [ebp - 0x42c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 6
call fcn.0040253e
jmp 0x433cfe
mov edi, dword [ebp - 0x42c]
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
add eax, eax
cmp eax, 0x104
jb 0x433ded
push str.final_cmd_line_limit_is_reached:
lea ecx, [ebp - 0x42c]
call fcn.00402060
push ebx
push edi
lea eax, [ebp - 0x42c]
push eax
push 2
mov byte [ebp - 4], 0xb
call fcn.00411b31
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x42c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
cmp byte [ebp - 0x425], bl
jne 0x433ded
push 0x49d560
lea eax, [ebp - 0x434]
push str._FOLDER:_
push eax
call fcn.00401dd1
add esp, 0xc
push 0x468c38
push eax
lea eax, [ebp - 0x430]
push eax
mov byte [ebp - 4], 0xc
call fcn.00408f8a
add esp, 0xc
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
call fcn.0040253e
push 0x46a238
push dword [ebp - 0x430]
push edi
call fcn.00408ddf
push str.final_cmd_line_for_arm_next_service:
lea ecx, [ebp - 0x440]
call fcn.00402060
push ebx
push edi
lea eax, [ebp - 0x440]
push eax
push 2
mov byte [ebp - 4], 0xf
call fcn.00411b31
mov ecx, dword [ebp - 0x440]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x444]
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x438]
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x43c]
add ecx, 0xfffffff0
call fcn.0040253e
xor eax, eax
jmp 0x433eb0
push str.unable_to_determine_service_version:
lea ecx, [ebp - 0x430]
call fcn.00402060
push esi
lea eax, [ebp - 0x430]
push eax
push 2
mov byte [ebp - 4], 5
call fcn.00411fb7
mov ecx, dword [ebp - 0x430]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x438]
add ecx, 0xfffffff0
call fcn.0040253e
lea ecx, [edi - 0x10]
call fcn.0040253e
mov eax, esi
jmp 0x433eb0
push str.SHGetFolderPath_failed:
lea ecx, [ebp - 0x430]
call fcn.00402060
push edi
lea eax, [ebp - 0x430]
push eax
push 2
mov byte [ebp - 4], 2
call fcn.00411fb7
mov ecx, dword [ebp - 0x430]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x43c]
add ecx, 0xfffffff0
call fcn.0040253e
mov eax, edi
call fcn.00448157
ret