Function at 0x40288e
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d296a
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x2684
call fcn.0045f530
mov eax, dword [0x4fa654]
xor eax, esp
mov dword [esp + 0x2680], eax
push ebx
push esi
push edi
mov eax, dword [0x4fa654]
xor eax, esp
push eax
lea eax, [esp + 0x2698]
mov dword fs:[0], eax
xor esi, esi
xor eax, eax
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], esi
mov word [esp + 0x50], ax
lea eax, [esp + 0x68c]
push eax
push 0x1000
mov dword [esp + 0x26a8], esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x40294e
lea eax, [esp + 0x68c]
push eax
lea eax, [esp + 0xfc]
push eax
call fcn.00404c84
push 0xffffffffffffffff
push esi
lea eax, [esp + 0x100]
lea ecx, [esp + 0x58]
mov byte [esp + 0x26a8], 1
call fcn.00405528
push 1
xor edi, edi
lea esi, [esp + 0xfc]
mov byte [esp + 0x26a4], 0
call fcn.00401198
mov esi, str.UpdatusInstall.log
push esi
call fcn.00447827
pop ecx
mov edi, eax
push esi
lea eax, [esp + 0x54]
call fcn.0040594f
push 8
pop ebx
push ebx
call fcn.00447c3b
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x26a0], 2
test eax, eax
je 0x402998
mov ecx, dword [esp + 0x50]
cmp dword [esp + 0x64], ebx
jae 0x40298e
lea ecx, [esp + 0x50]
push ecx
mov esi, eax
call fcn.00401000
jmp 0x40299a
xor eax, eax
mov byte [esp + 0x26a0], 0
mov dword [esp + 0x14], eax
mov byte [esp + 0x26a0], 3
mov ecx, dword [0x4ff46c]
mov dword [0x4ff46c], eax
mov dword [esp + 0x14], ecx
lea eax, [esp + 0x14]
mov byte [esp + 0x26a0], 0
call fcn.00405403
lea eax, [esp + 0xdc]
push eax
call fcn.004018c2
pop ecx
mov byte [esp + 0x26a0], 4
cmp dword [eax + 0x14], ebx
jb 0x4029eb
mov eax, dword [eax]
mov ecx, dword [0x4ff46c]
push eax
push str.Daemon_type:__s
call fcn.0040102f
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xe0]
mov byte [esp + 0x26a4], 0
call fcn.00401198
or dword [esp + 0x26a0], 0xffffffff
push 1
lea esi, [esp + 0x54]
call fcn.00401198
xor eax, eax
push 0x208
push eax
mov word [esp + 0x484], ax
lea eax, [esp + 0x486]
push eax
call fcn.00447b70
add esp, 0xc
push 0x105
lea eax, [esp + 0x480]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x402ab7
lea eax, [esp + 0xdc]
push eax
call fcn.00420059
pop ecx
mov dword [esp + 0x26a0], 5
cmp dword [eax + 0x14], ebx
jb 0x402a81
mov eax, dword [eax]
mov ecx, dword [0x4ff46c]
push eax
push str.Unable_to_GetModuleFileName:__s
call fcn.0040102f
or dword [esp + 0x26a8], 0xffffffff
pop ecx
xor ebx, ebx
pop ecx
inc ebx
push ebx
xor edi, edi
lea esi, [esp + 0xe0]
call fcn.00401198
mov dword [esp + 0x10], ebx
jmp 0x403b13
mov ecx, dword [0x4ff46c]
push str.Opening_SC_manager...
call fcn.0040102f
pop ecx
push 3
xor esi, esi
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [esp + 0x28], eax
cmp eax, esi
jne 0x402b1b
lea eax, [esp + 0xdc]
push eax
call fcn.00420059
pop ecx
push 6
pop ebx
mov dword [esp + 0x26a0], ebx
cmp dword [eax + 0x14], 8
jb 0x402afc
mov eax, dword [eax]
mov ecx, dword [0x4ff46c]
push eax
push str.OpenSCManager_failed:__s
call fcn.0040102f
or dword [esp + 0x26a8], 0xffffffff
pop ecx
pop ecx
push 1
jmp 0x402aa0
push 0x100b6
push str.nvUpdatusService
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [esp + 0x18], eax
cmp eax, esi
je 0x402b59
push eax
call fcn.00402681
pop ecx
mov dword [esp + 0x10], eax
cmp eax, esi
je 0x402b59
mov ecx, dword [0x4ff46c]
push str.StopService_failed
call fcn.0040102f
pop ecx
jmp 0x403af8
mov ecx, dword [0x4ff46c]
push str.Installing_COM...
call fcn.0040102f
push 7
pop eax
xor ecx, ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], esi
mov word [esp + 0x54], cx
mov dword [esp + 0x26a4], eax
lea eax, [esp + 0x54]
push eax
call fcn.0041e757
pop ecx
pop ecx
test al, al
invalid