Function at 0x41387b
Capabilities:
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
push esi
push edi
call fcn.00407829
mov esi, 0x104
push esi
push 0x457ea0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push esi
push 0x4580a8
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push str._ClearAV_::_init_pathes:
call fcn.0040a84b
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
pop ecx
xor ebx, ebx
push ebx
push 0x26
mov edi, 0x4584b8
push edi
push ebx
call esi
push edi
push str._ClearAV_::_CSIDL_PROGRAM_FILES___s
call fcn.0040a84b
pop ecx
pop ecx
push ebx
push 0x2b
mov edi, 0x4588c8
push edi
push ebx
call esi
push edi
push str._ClearAV_::_CSIDL_PROGRAM_FILES_COMMON___s
call fcn.0040a84b
pop ecx
pop ecx
push ebx
push 0x23
push 0x458cd8
push ebx
call esi
push 0x458cd8
push str._ClearAV_::_CSIDL_COMMON_APPDATA___s
call fcn.0040a84b
pop ecx
pop ecx
push ebx
push 0x17
push 0x458ee0
push ebx
call esi
push 0x458ee0
push str._ClearAV_::_CSIDL_COMMON_PROGRAMS___s
call fcn.0040a84b
pop ecx
pop ecx
push ebx
push 2
push 0x4590e8
push ebx
call esi
push 0x4590e8
push str._ClearAV_::_CSIDL_PROGRAMS___s
call fcn.0040a84b
pop ecx
pop ecx
mov esi, 0x455d90
push edi
mov ecx, esi
call fcn.00405145
lea eax, [ebp - 0x38]
push 0x455a50
push eax
call fcn.0040aa05
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
call fcn.004045fa
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00403f19
cmp dword [0x455da8], 8
mov eax, dword [0x455d94]
jae 0x413985
mov eax, 0x455d94
push eax
push str._ClearAV_::_SE_Path___s
call fcn.0040a84b
pop ecx
pop ecx
mov esi, 0x455dc8
push 0x457ea0
mov ecx, esi
call fcn.00405145
push str.drivers
mov ecx, esi
call fcn.00405121
cmp dword [0x455de0], 8
mov eax, dword [0x455dcc]
jae 0x4139c2
mov eax, 0x455dcc
push eax
push str._ClearAV_::_Drivers_dir___s
call fcn.0040a84b
lea eax, [ebp - 0x38]
push eax
call fcn.0040b3a6
add esp, 0xc
cmp dword [eax + 0x18], 8
jb 0x4139e4
mov eax, dword [eax + 4]
jmp 0x4139e7
add eax, 4
push eax
push 0x104
mov esi, 0x457c98
push esi
call fcn.004148ac
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00403f19
push esi
call dword [sym.imp.SHLWAPI.dll_PathRemoveBackslashW]
push esi
push str._ClearAV_::_Dr.Web_Install_Path___s
call fcn.0040a84b
pop ecx
pop ecx
call fcn.004109a1
call fcn.00410a8e
call fcn.0041270e
call fcn.00412cee
call fcn.00412050
call fcn.00411cca
call fcn.0040f9b8
call fcn.00410b0b
call fcn.0040f3c5
call fcn.0040f624
call fcn.0040f883
call fcn.00410cf7
call fcn.00410f1e
call fcn.00411356
call fcn.00411905
call fcn.00412270
call fcn.00412388
call fcn.0040fb42
call fcn.00412ea5
call fcn.0041378e
call fcn.0040fcd1
call fcn.0041015c
call fcn.0040b6d7
call fcn.004120fc
call fcn.0040fe2f
lea ecx, [ebp - 0x1c]
call fcn.00419459
sub esp, 0x18
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 4], esp
push eax
call fcn.0041a2e6
push 0x458cd8
lea eax, [ebp - 0x38]
push 0x448104
push eax
call fcn.00409311
add esp, 0xc
push eax
call fcn.0040e5d0
add esp, 0x1c
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00403f19
push esi
lea ecx, [ebp - 0x38]
call fcn.00405457
lea eax, [ebp - 0x38]
push eax
call fcn.0040e42d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00403f19
mov esi, 0x4584b8
push esi
lea eax, [ebp - 0x38]
push str._sDrWeb
push eax
call fcn.00409311
push eax
call fcn.0040e42d
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00403f19
push esi
lea eax, [ebp - 0x38]
push str._sDrWeb_Enterprise_Suite
push eax
call fcn.00409311
push eax
call fcn.0040e42d
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00403f19
push edi
lea eax, [ebp - 0x38]
push str._sDoctor_Web
push eax
call fcn.00409311
push eax
call fcn.0040e42d
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00403f19
push ebx
sub esp, 0x10
mov esi, 0x455d70
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040b851
add esp, 0x14
push 1
sub esp, 0x10
mov esi, 0x455d80
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040b851
add esp, 0x14
call fcn.00407829
push 2
pop esi
cmp dword [0x457c94], ebx
je 0x413ba5
push 0xa
pop esi
lea ecx, [ebp - 0x1c]
call fcn.0041968a
push dword [ebp - 0x1c]
call fcn.004205ee
pop ecx
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret