Function at 0x403ad0
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x42ea10
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push esi
push edi
push 0x104
push 0x43d998
call dword [sym.imp.KERNEL32.DLL_GetWindowsDirectoryA]
push 0x104
push 0x43da9c
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
push 0x104
push 0x43dba0
call fcn.00418aa0
add esp, 8
push 0x43dca4
push 0x104
call dword [sym.imp.KERNEL32.DLL_GetTempPathA]
push 0x104
push 0x43deac
call fcn.00419650
push 0
push 0x43dda8
call fcn.00419690
mov al, byte [esp + 0x1f]
add esp, 0x10
lea ecx, [esp + 0x28]
mov byte [esp + 0x28], al
push 0
call fcn.0040aae0
or esi, 0xffffffff
mov edi, str.SoftwareWindowsTab2data
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.SoftwareWindowsTab2data
lea ecx, [esp + 0x30]
call fcn.0040ad80
mov ecx, dword [0x4313b0]
lea edx, [esp + 0x28]
push ecx
push 0
push edx
mov ecx, 0x43e6f0
mov dword [esp + 0x8c], 0
call fcn.0040a8e0
push 1
lea ecx, [esp + 0x2c]
mov dword [esp + 0x84], esi
call fcn.0040aae0
mov al, byte [esp + 0xf]
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3c], al
call fcn.0040aae0
mov edi, str.WindowsTab2
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.WindowsTab2
lea ecx, [esp + 0x40]
call fcn.0040ad80
mov cl, byte [esp + 0xf]
push 0
mov byte [esp + 0x2c], cl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x84], 1
call fcn.0040aae0
mov edi, str.Softwareuninstall_
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.Softwareuninstall_
lea ecx, [esp + 0x30]
call fcn.0040ad80
lea edx, [esp + 0x38]
lea eax, [esp + 0x28]
push edx
lea ecx, [esp + 0x4c]
mov bl, 2
push eax
push ecx
mov byte [esp + 0x8c], bl
call fcn.0040baa0
add esp, 0xc
mov edx, dword [0x4313b0]
mov ecx, 0x43e6e0
push edx
push 0
push eax
mov byte [esp + 0x8c], 3
call fcn.0040a8e0
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x84], bl
call fcn.0040aae0
push 1
lea ecx, [esp + 0x2c]
mov byte [esp + 0x84], 1
call fcn.0040aae0
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x84], esi
call fcn.0040aae0
mov al, byte [esp + 0xf]
push 0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x4c], al
call fcn.0040aae0
mov edi, str.WindowsTab2
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.WindowsTab2
lea ecx, [esp + 0x50]
call fcn.0040ad80
mov cl, byte [esp + 0xf]
push 0
mov byte [esp + 0x2c], cl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x84], 4
call fcn.0040aae0
mov edi, 0x43817c
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x43817c
lea ecx, [esp + 0x30]
call fcn.0040ad80
mov dl, byte [esp + 0xf]
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x84], 5
mov byte [esp + 0x3c], dl
call fcn.0040aae0
mov edi, str._WRITE_DIR
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str._WRITE_DIR
lea ecx, [esp + 0x40]
call fcn.0040ad80
lea eax, [esp + 0x28]
lea ecx, [esp + 0x38]
push eax
lea edx, [esp + 0x5c]
push ecx
push edx
mov byte [esp + 0x8c], 6
call fcn.0040baa0
lea ecx, [esp + 0x54]
lea edx, [esp + 0x24]
push ecx
push eax
push edx
mov byte [esp + 0x98], 7
call fcn.0040baa0
add esp, 0x18
push 1
lea ecx, [esp + 0x5c]
mov byte [esp + 0x84], 0xc
call fcn.0040aae0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0x84], 0xb
call fcn.0040aae0
push 1
lea ecx, [esp + 0x2c]
mov byte [esp + 0x84], 0xa
call fcn.0040aae0
mov bl, 9
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x84], bl
call fcn.0040aae0
lea eax, [esp + 0x18]
lea ecx, [esp + 0x68]
push eax
push ecx
call fcn.004121b0
add esp, 8
mov edx, dword [0x4313b0]
lea ecx, [esp + 0x18]
push edx
push 0
push eax
mov byte [esp + 0x8c], 0xd
call fcn.0040a8e0
push 1
lea ecx, [esp + 0x6c]
mov byte [esp + 0x84], bl
call fcn.0040aae0
mov al, byte [esp + 0x18]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x20], esp
push 0
mov ecx, esi
mov byte [esi], al
call fcn.0040aae0
mov ecx, dword [0x4313b0]
lea edx, [esp + 0x28]
push ecx
push 0
push edx
mov ecx, esi
call fcn.0040a8e0
sub esp, 0x10
mov byte [esp + 0xa0], 0xe
mov ecx, esp
mov dword [esp + 0x34], esp
lea eax, [esp + 0x2f]
push eax
push str.ProgramFolder
call fcn.0040a5a0
lea ecx, [esp + 0x88]
mov byte [esp + 0xa0], bl
push ecx
call fcn.00413fc0
add esp, 0x24
mov edx, dword [0x4313b0]
mov ecx, 0x43e6d0
push edx
push 0
push eax
mov byte [esp + 0x8c], 0xf
call fcn.0040a8e0
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x403e9c
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x403e93
cmp al, 0xff
je 0x403e93
dec al
mov byte [ecx], al
jmp 0x403e9c
push ecx
call fcn.00420ca8
add esp, 4
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x403ec0
mov al, byte [ecx - 1]
test al, al
je 0x403eb6
cmp al, 0xff
je 0x403eb6
dec al
mov byte [ecx - 1], al
jmp 0x403ec0
dec ecx
push ecx
call fcn.00420ca8
add esp, 4
mov ecx, dword [esp + 0x78]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x78
ret