Function at 0x1001248f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x74
lea ebp, [esp - 4]
mov eax, dword [0x10071120]
xor eax, ebp
mov dword [ebp + 0x74], eax
push 0x38
mov eax, 0x1005aafa
call fcn.1002f7db
mov esi, ecx
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x18], ebx
push 0x1005e4d2
lea ecx, [ebp]
call fcn.100015f5
mov dword [ebp - 4], ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.AdobeUpdater
call fcn.100015f5
mov byte [ebp - 4], 1
lea eax, [ebp]
push eax
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.10011c93
mov byte [ebp - 4], 3
push ebx
xor edi, edi
inc edi
push edi
lea ecx, [ebp]
call fcn.100012ad
mov dword [esi], vtable.AdobeUpdaterPrefs.0
mov byte [ebp + 0x1f], 1
push str.AutoCheck
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 4
lea eax, [ebp + 0x1f]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x90]
call fcn.1000e832
mov byte [ebp - 4], 6
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov dword [ebp - 0x14], ebx
push str.AutoCheckType
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 7
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0xb8]
call fcn.1000e872
mov byte [ebp - 4], 9
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
push str.DownloadDir
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0x58]
push eax
call fcn.1000f5ac
pop ecx
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0xe0]
call fcn.1000e8b2
mov byte [ebp - 4], 0xd
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
mov byte [ebp - 4], 0xe
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
push str.DisplayLang
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0xf
push 0x1005e4d2
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x120]
call fcn.1000e8b2
mov byte [ebp - 4], 0x12
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
mov byte [ebp - 4], 0x13
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov byte [ebp + 0x1f], 1
push str.IsFirstRun
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x14
lea eax, [ebp + 0x1f]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x160]
call fcn.1000e832
mov byte [ebp - 4], 0x16
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov byte [ebp + 0x1f], bl
push str.InBackground
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x17
lea eax, [ebp + 0x1f]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x188]
call fcn.1000e832
mov byte [ebp - 4], 0x19
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov byte [ebp + 0x1f], bl
push str.InTrayIcon
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x1a
lea eax, [ebp + 0x1f]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x1b0]
call fcn.1000e832
mov byte [ebp - 4], 0x1c
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov dword [ebp - 0x14], edi
push str.AutoCheckFreq
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x1d8]
call fcn.1000e872
mov byte [ebp - 4], 0x1f
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
push str.LastDateCheck
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x20
push 0x1005e4d2
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x200]
call fcn.1000e8b2
mov byte [ebp - 4], 0x23
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
mov byte [ebp - 4], 0x24
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov byte [ebp + 0x1f], bl
push str.ShowNewProducts
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x25
lea eax, [ebp + 0x1f]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x240]
call fcn.1000e832
mov byte [ebp - 4], 0x27
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov byte [ebp + 0x1f], bl
push str.SilentCheck
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x28
lea eax, [ebp + 0x1f]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x268]
call fcn.1000e832
mov byte [ebp - 4], 0x2a
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
push str.ApplicationsEnabled
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x2b
lea eax, [ebp]
push eax
lea ecx, [esi + 0x290]
call fcn.1000e8f5
mov byte [ebp - 4], 0x2d
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
push str.NotificationMessage
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x2e
lea eax, [ebp]
push eax
lea ecx, [esi + 0x2b4]
call fcn.1000e929
mov byte [ebp - 4], 0x30
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
push 0x1005e4d2
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x31
push str.Launch
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x32
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp]
push eax
lea ecx, [esi + 0x2d8]
call fcn.1000e8b2
mov byte [ebp - 4], 0x34
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov byte [ebp - 4], 0x35
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
push 0x1005e4d2
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x36
push str.ProxyServer
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x37
lea eax, [ebp]
push eax
lea eax, [ebp + 0x58]
push eax
lea ecx, [esi + 0x318]
call fcn.1000e8b2
mov byte [ebp - 4], 0x39
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
mov byte [ebp - 4], 0x3a
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
push 0x1005e4d2
lea ecx, [ebp]
call fcn.100015f5
mov byte [ebp - 4], 0x3b
push str.ProxyPort
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x3c
lea eax, [ebp]
push eax
lea eax, [ebp + 0x58]
push eax
lea ecx, [esi + 0x358]
call fcn.1000e8b2
mov byte [ebp - 4], 0x3e
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
mov byte [ebp - 4], 0x3f
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov dword [ebp - 0x14], ebx
push str.ConnectionType
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 0x58]
push eax
lea ecx, [esi + 0x398]
call fcn.1000e872
mov byte [ebp - 4], 0x42
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
push str.logFile
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x43
lea eax, [ebp]
push eax
call fcn.1000f64f
pop ecx
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp + 0x58]
push eax
lea ecx, [esi + 0x3c0]
call fcn.1000e8b2
mov byte [ebp - 4], 0x46
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov byte [ebp - 4], 0x47
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
push str.logFileLib
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x48
lea eax, [ebp]
push eax
call fcn.1000f6d7
pop ecx
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp + 0x58]
push eax
lea ecx, [esi + 0x400]
call fcn.1000e8b2
mov byte [ebp - 4], 0x4b
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
mov byte [ebp - 4], 0x4c
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
push str.logLevel
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x4d
push 0x1005f7bc
lea eax, [ebp + 0x58]
push eax
lea ecx, [esi + 0x440]
call fcn.1000e872
mov byte [ebp - 4], 0x4f
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
push str.AdobeUpdater
lea ecx, [ebp + 0x58]
call fcn.100015f5
mov byte [ebp - 4], 0x50
lea ecx, [esi + 0x468]
push 0xbb8
lea eax, [ebp + 0x58]
push eax
call fcn.1001e28f
mov byte [ebp - 4], 0x52
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
mov dword [ebp + 0x38], 0xf
push ebx
lea ecx, [ebp + 0x20]
call fcn.10001291
mov byte [ebp - 4], 0x53
mov dword [esi + 0x94], esi
mov dword [esi + 0xbc], esi
mov dword [esi + 0xe4], esi
mov dword [esi + 0x124], esi
mov dword [esi + 0x164], esi
mov dword [esi + 0x18c], esi
mov dword [esi + 0x1b4], esi
mov dword [esi + 0x1dc], esi
mov dword [esi + 0x204], esi
mov dword [esi + 0x244], esi
mov dword [esi + 0x31c], esi
mov dword [esi + 0x35c], esi
mov dword [esi + 0x39c], esi
mov dword [esi + 0x294], esi
mov dword [esi + 0x2b8], esi
mov dword [esi + 0x3c4], esi
mov dword [esi + 0x404], esi
mov dword [esi + 0x444], esi
mov dword [esi + 0x2dc], esi
mov dword [esi + 0x26c], esi
lea eax, [ebp + 0x20]
push eax
call fcn.100017d8
pop ecx
lea ecx, [ebp + 0x58]
test al, al
je 0x10012c12
push str.AdobeUpdaterPrefs.dat
call fcn.100015f5
mov byte [ebp - 4], 0x54
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp]
push eax
call fcn.1001c001
add esp, 0xc
mov byte [ebp - 4], 0x55
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x20]
call fcn.100014d4
mov byte [ebp - 4], 0x54
push ebx
push edi
lea ecx, [ebp]
call fcn.100012ad
lea eax, [esi + 0x468]
push eax
mov ecx, esi
call fcn.1000daa5
mov byte [ebp - 4], 0x56
lea eax, [ebp + 0x20]
push eax
mov ecx, esi
call fcn.10011a2b
mov dword [ebp - 4], 0x54
jmp 0x10012b3c
mov byte [ebp - 4], 0x53
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
mov dword [ebp + 0x54], 0xf
push ebx
lea ecx, [ebp + 0x3c]
call fcn.10001291
mov byte [ebp - 4], 0x59
lea ecx, [esi + 0xe0]
mov eax, dword [ecx]
lea edx, [ebp + 0x3c]
push edx
call dword [eax + 4]
test al, al
je 0x10012b98
cmp dword [ebp + 0x50], ebx
je 0x10012b98
lea eax, [ebp + 0x58]
push eax
call fcn.1000f5ac
pop ecx
mov byte [ebp - 4], 0x5a
mov dword [ebp - 0x18], edi
push eax
lea ecx, [ebp + 0x3c]
call fcn.10005f7a
test eax, eax
mov byte [ebp + 0x1f], 1
je 0x10012b9b
mov byte [ebp + 0x1f], bl
mov dword [ebp - 4], 0x59
test byte [ebp - 0x18], 1
je 0x10012bb6
and dword [ebp - 0x18], 0xfffffffe
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.100012ad
cmp byte [ebp + 0x1f], bl
je 0x10012bd3
lea eax, [ebp + 0x3c]
push eax
call fcn.1001b10b
pop ecx
test al, al
jne 0x10012bd3
lea eax, [ebp + 0x3c]
push eax
call fcn.1001c3e6
pop ecx
mov byte [ebp - 4], 0x53
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.100012ad
mov byte [ebp - 4], 0x52
push ebx
push edi
lea ecx, [ebp + 0x20]
call fcn.100012ad
or dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x74]
xor ecx, ebp
call fcn.1002f799
add ebp, 0x78
leave
ret
push str.Unable_to_create_file_
call fcn.100015f5
mov byte [ebp - 4], 0x58
lea eax, [ebp + 0x58]
push eax
lea ecx, [ebp - 0x44]
call fcn.10002df1
push 0x100679b4
lea eax, [ebp - 0x44]
push eax
call fcn.1002fc04
int3