Function at 0x416283
Capabilities:
Get common file path

Disassembly:
push 0x244
mov eax, 0x465e79
call fcn.0044584f
mov edi, ecx
mov eax, dword [0x4958a8]
test eax, eax
je 0x41686f
push 0x4808e8
push edi
call eax
push str.localrootsectionver
push edi
mov esi, eax
call dword [0x4958a8]
push esi
push 0
mov ebx, eax
call fcn.00429ff7
pop ecx
pop ecx
test eax, eax
jg 0x4162d0
and dword [ebp - 0x24c], 0
jmp 0x4162e5
push esi
push 0
call fcn.00429ff7
pop ecx
pop ecx
call fcn.00448470
mov dword [ebp - 0x24c], esp
push esi
push 0
call fcn.00429ff7
shr eax, 1
push eax
push dword [ebp - 0x24c]
push esi
xor esi, esi
push esi
call fcn.00429fa9
add esp, 0x18
lea ecx, [ebp - 0x230]
push eax
call fcn.00401720
push 0x47b858
mov dword [ebp - 4], esi
call fcn.004012f1
pop ecx
push eax
push 0x47b858
lea ecx, [ebp - 0x230]
call fcn.00402a5c
push ebx
push esi
call fcn.00429ff7
pop ecx
pop ecx
test eax, eax
jle 0x41634a
push ebx
push esi
call fcn.00429ff7
pop ecx
pop ecx
call fcn.00448470
mov esi, esp
push ebx
push 0
call fcn.00429ff7
shr eax, 1
push eax
push esi
push ebx
push 0
call fcn.00429fa9
mov esi, eax
push esi
call fcn.004012f1
add esp, 0x1c
lea ecx, [ebp - 0x230]
push eax
push esi
call fcn.00402a5c
mov eax, dword [ebp - 0x220]
lea ecx, [ebp - 0x230]
push 8
pop ebx
cmp dword [ebp - 0x21c], ebx
lea edx, [ebp - 0x230]
push fcn.00442ef1
cmovae ecx, dword [ebp - 0x230]
cmovae edx, dword [ebp - 0x230]
push edx
lea eax, [ecx + eax*2]
push eax
lea ecx, [ebp - 0x230]
cmovae ecx, dword [ebp - 0x230]
lea eax, [ebp - 0x24c]
push ecx
push eax
call fcn.00404d64
add esp, 0x14
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], ebx
cmovae eax, dword [ebp - 0x230]
push eax
push str.strWebEx_s
push 0
push 2
push str.UpdateMgr.cpp
push 0x1a7
call fcn.0042ab69
add esp, 0x18
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], ebx
lea ebx, [edi + 0x50]
mov ecx, ebx
cmovae eax, dword [ebp - 0x230]
push dword [ebp - 0x220]
push 0xffffffffffffffff
push eax
call fcn.00402904
cmp eax, 0xffffffff
je 0x41644f
push eax
push 0
lea eax, [ebp - 0x248]
mov ecx, ebx
push eax
call fcn.004027da
mov esi, 0x495a24
push eax
mov ecx, esi
call fcn.0040439d
push 0
push 1
lea ecx, [ebp - 0x248]
call fcn.00401833
jmp 0x416464
mov esi, 0x495a24
cmp ebx, esi
je 0x416464
push 0xffffffffffffffff
push 0
push ebx
mov ecx, esi
call fcn.00401bb1
cmp dword [0x495a38], 8
mov ecx, esi
mov ebx, dword [0x495a24]
mov eax, dword [0x495a34]
cmovae ecx, ebx
push 0x5c
pop edx
cmp word [ecx + eax*2 - 2], dx
mov edx, dword [0x495a38]
je 0x4164ac
mov ebx, 0x47b858
push ebx
call fcn.004012f1
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00402a5c
mov edx, dword [0x495a38]
mov ebx, dword [0x495a24]
cmp edx, 8
mov eax, esi
cmovae eax, ebx
xor ebx, ebx
push eax
push str.WebEx_Path_Primary:__s
push ebx
push 2
push str.UpdateMgr.cpp
push 0x1af
call fcn.0042ab69
mov ecx, 0x495a08
add esp, 0x18
cmp ecx, esi
je 0x4164e3
push 0xffffffffffffffff
push ebx
push esi
call fcn.00401bb1
mov esi, 0x4959b4
cmp dword [edi + 0x78], ebx
je 0x416550
push dword [ebp - 0x220]
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push 0xffffffffffffffff
cmovae eax, dword [ebp - 0x230]
add edi, 0x68
push eax
mov ecx, edi
call fcn.00402904
cmp eax, 0xffffffff
je 0x416541
push eax
push ebx
lea eax, [ebp - 0x248]
mov ecx, edi
push eax
call fcn.004027da
push eax
mov ecx, esi
call fcn.0040439d
push ebx
push 1
lea ecx, [ebp - 0x248]
call fcn.00401833
jmp 0x416550
cmp edi, esi
je 0x416550
push 0xffffffffffffffff
push ebx
push edi
mov ecx, esi
call fcn.00401bb1
cmp dword [0x4959c8], 8
mov ecx, esi
mov edi, dword [0x4959b4]
mov eax, dword [0x4959c4]
cmovae ecx, edi
push 0x5c
pop edx
cmp word [ecx + eax*2 - 2], dx
mov edx, dword [0x4959c8]
je 0x416598
mov edi, 0x47b858
push edi
call fcn.004012f1
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00402a5c
mov edx, dword [0x4959c8]
mov edi, dword [0x4959b4]
cmp edx, 8
cmovae esi, edi
push esi
push str.WebEx_Path_Secondary:__s
push ebx
push 2
push str.UpdateMgr.cpp
push 0x1bc
call fcn.0042ab69
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.00447ae0
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [ebp - 0x218]
add esp, 0x24
push 0x104
push eax
call ebx
lea eax, [ebp - 0x218]
push eax
call fcn.004012f1
pop ecx
push eax
lea eax, [ebp - 0x218]
mov esi, 0x4959d4
push eax
mov ecx, esi
call fcn.00401a41
mov edx, dword [0x4959e8]
mov ecx, esi
mov edi, dword [0x4959d4]
cmp edx, 8
mov eax, dword [0x4959e4]
cmovae ecx, edi
push 0x5c
pop ebx
cmp word [ecx + eax*2 - 2], bx
je 0x41664d
mov edi, 0x47b858
push edi
call fcn.004012f1
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00402a5c
mov edx, dword [0x4959e8]
mov edi, dword [0x4959d4]
cmp edx, 8
cmovae esi, edi
push esi
push str.System_Path:__s
push 0
push 2
push str.UpdateMgr.cpp
push 0x1c3
call fcn.0042ab69
add esp, 0x18
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea eax, [ebp - 0x218]
push eax
call fcn.004012f1
pop ecx
push eax
lea eax, [ebp - 0x218]
mov esi, 0x495984
push eax
mov ecx, esi
call fcn.00401a41
mov edx, dword [0x495998]
mov ecx, esi
mov edi, dword [0x495984]
cmp edx, 8
mov eax, dword [0x495994]
cmovae ecx, edi
push 0x5c
pop ebx
cmp word [ecx + eax*2 - 2], bx
je 0x4166e6
mov edi, 0x47b858
push edi
call fcn.004012f1
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00402a5c
mov edx, dword [0x495998]
mov edi, dword [0x495984]
cmp edx, 8
cmovae esi, edi
push esi
push str.Windows_Path:__s
xor esi, esi
push esi
push 2
push str.UpdateMgr.cpp
push 0x1c9
call fcn.0042ab69
add esp, 0x18
call fcn.004041f1
lea eax, [ebp - 0x250]
mov dword [ebp - 0x250], esi
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 1
push esi
push esi
call dword [sym.imp.WINSPOOL.DRV_GetPrinterDriverDirectoryW]
lea eax, [ebp - 0x218]
push eax
call fcn.004012f1
pop ecx
push eax
lea eax, [ebp - 0x218]
mov esi, 0x49599c
push eax
mov ecx, esi
call fcn.00401a41
mov edx, dword [0x4959b0]
mov ecx, esi
mov edi, dword [0x49599c]
cmp edx, 8
mov eax, dword [0x4959ac]
cmovae ecx, edi
push 0x5c
pop ebx
cmp word [ecx + eax*2 - 2], bx
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
je 0x41679c
mov edi, 0x47b858
push edi
call fcn.004012f1
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00402a5c
mov edx, dword [0x4959b0]
mov edi, dword [0x49599c]
cmp edx, 8
cmovae esi, edi
push esi
push str.Print_Driver_Path:__s
push 0
push 2
push str.UpdateMgr.cpp
push 0x1d1
call fcn.0042ab69
add esp, 0x18
lea eax, [ebp - 0x218]
push 0x104
push eax
call ebx
lea eax, [ebp - 0x218]
push eax
call fcn.004012f1
pop ecx
push eax
lea eax, [ebp - 0x218]
mov esi, 0x4959f0
push eax
mov ecx, esi
call fcn.00401a41
cmp dword [0x495a04], 8
mov ecx, esi
mov eax, dword [0x495a00]
cmovae ecx, dword [0x4959f0]
push 0x5c
pop edx
cmp word [ecx + eax*2 - 2], dx
je 0x416821
mov ebx, 0x47b858
push ebx
call fcn.004012f1
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00402a5c
mov edi, str.drivers_
push edi
call fcn.004012f1
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00402a5c
cmp dword [0x495a04], 8
cmovae esi, dword [0x4959f0]
push esi
push str.Dirver_Path:__s
push 0
push 2
push str.UpdateMgr.cpp
push 0x1d8
call fcn.0042ab69
add esp, 0x18
lea ecx, [ebp - 0x230]
push 0
push 1
call fcn.00401833
lea esp, [ebp - 0x260]
call fcn.004457fe
ret