Function at 0x44e816
Capabilities:
Check if file exists
Get common file path
Get file attributes

Disassembly:
push 0x1c
mov eax, 0x4b6860
call fcn.0046c338
mov byte [ebp - 0xe], dl
mov byte [ebp - 0xd], cl
push str.CanProcessPdf...
lea ecx, [ebp - 0x14]
call fcn.00402829
xor ebx, ebx
lea edx, [ebp - 0x14]
push ebx
mov dword [ebp - 4], ebx
call fcn.00417519
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00402e64
cmp byte [ebp - 0xd], bl
mov ecx, str.iDisableProcessPdfExtension
mov eax, str.iDisableProcessMAU
cmove eax, ecx
lea ecx, [ebp - 0x18]
push eax
call fcn.00402829
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 1
mov edx, dword [0x518e2c]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x24], ebx
call fcn.0044448e
add esp, 0xc
cmp dword [ebp - 0x1c], ebx
jbe 0x44e8c7
push str.disabled_by_policy:
lea ecx, [ebp - 0x14]
call fcn.00402829
push ecx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0x14]
call fcn.0041754b
pop ecx
pop ecx
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
jmp 0x44ea5c
cmp byte [ebp - 0xe], 0
jne 0x44e9ab
mov cl, byte [ebp - 0xd]
mov edx, 0x2760
test cl, cl
mov eax, 0xa8c0
lea ecx, [ebp - 0x14]
cmovne eax, edx
mov edx, str.iLastProcessedPdfExtension
mov dword [ebp - 0x28], eax
mov eax, str.iLastProcessedMAU
cmove eax, edx
push eax
call fcn.00402829
mov byte [ebp - 4], 3
push ebx
mov dword [ebp - 0x20], ebx
call fcn.0048ab6e
mov esi, eax
mov dword [ebp - 0x24], ebx
lea eax, [ebp - 0x24]
mov edi, edx
push eax
lea eax, [ebp - 0x20]
mov edx, 0x4ce868
push eax
push dword [ebp - 0x14]
mov ecx, SysReAllocString
call fcn.0044448e
add esp, 0x10
test eax, eax
jne 0x44e98d
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x44e98d
cmp edi, ebx
jl 0x44e98d
jg 0x44e942
cmp esi, ecx
jbe 0x44e98d
mov eax, esi
sub eax, ecx
push ebx
push 0x3c
sbb edi, ebx
push edi
push eax
call fcn.0046c710
cmp edx, ebx
jg 0x44e98d
jl 0x44e95d
cmp eax, dword [ebp - 0x28]
ja 0x44e98d
push str._not_expired
lea ecx, [ebp - 0x24]
call fcn.00402829
push ecx
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x14]
call fcn.0041754b
pop ecx
pop ecx
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.00402e64
jmp 0x44e8bc
push esi
push dword [ebp - 0x14]
mov edx, 0x4ce868
mov ecx, SysReAllocString
call fcn.004444f0
pop ecx
pop ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
jmp 0x44e9cd
push str.New_Windows_Session__skipping_time_elapsed_check
lea ecx, [ebp - 0x24]
call fcn.00402829
push ebx
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.00417519
pop ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.00402e64
call fcn.004524e1
push eax
lea ecx, [ebp - 0x14]
call fcn.00402899
push 0x104
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 6
call fcn.00402bd2
push eax
push ebx
push ebx
push 0x2b
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
mov esi, eax
call fcn.00409d68
test esi, esi
jne 0x44ea54
push str.AdobeUpdaterResourcesAdobeUpdater.overrides
lea ecx, [ebp - 0x14]
call fcn.0040259d
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x44ea57
push str.disabled__AUSST_overwrite_file_found
lea ecx, [ebp - 0x24]
call fcn.00402829
push ebx
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.00417519
pop ecx
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.00402e64
jmp 0x44ea59
mov esi, dword [ebp - 0x14]
mov bl, 1
lea ecx, [esi - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402e64
mov al, bl
call fcn.0046c301
ret