Function at 0x408d6c
Capabilities:
Create process on windows

Disassembly:
push 0x238
mov eax, 0x4394d8
call fcn.0041ea10
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x228]
push str.ProcessRequestFromArmService...
call fcn.004020ed
xor ebx, ebx
lea eax, [ebp - 0x228]
push ebx
push eax
push 2
mov dword [ebp - 4], ebx
call fcn.00403025
mov ecx, dword [ebp - 0x228]
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ecx - 0x10]
call fcn.00401a64
lea ecx, [ebp - 0x244]
call fcn.0040be6e
xor edi, edi
lea ecx, [ebp - 0x240]
inc edi
push esi
mov dword [ebp - 4], edi
call fcn.00402209
lea ecx, [ebp - 0x21c]
call fcn.00401369
mov byte [ebp - 4], 2
call fcn.0040fd19
push eax
lea ecx, [ebp - 0x22c]
call fcn.00401330
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 3
push eax
call fcn.00405bd7
pop ecx
test eax, eax
jne 0x408e4b
push str.Helper_finished__get_adobearm.exe_path_failed
lea ecx, [ebp - 0x228]
call fcn.004020ed
push 6
pop ebx
push ebx
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 4
push eax
push edi
call fcn.00403025
mov ecx, dword [ebp - 0x228]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.00401a64
push ebx
call fcn.0040a158
pop ecx
jmp 0x40924a
call fcn.0040fd19
push eax
lea ecx, [ebp - 0x238]
call fcn.00401330
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x244]
call fcn.0040c293
push str.SYSTEM
push dword [ebp - 0x238]
call fcn.00423b8e
pop ecx
pop ecx
test eax, eax
mov dword [ebp - 0x234], ebx
push 1
mov edi, ebx
pop eax
cmove edi, eax
test edi, edi
jne 0x408ebb
lea eax, [ebp - 0x230]
mov dword [ebp - 0x230], ebx
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.00406954
add esp, 0xc
mov eax, dword [esi]
sub eax, 0x10
push eax
call fcn.00402458
pop ecx
lea esi, [eax + 0x10]
mov dword [ebp - 0x228], esi
push 6
pop ebx
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], bl
call fcn.00407c3f
test eax, eax
jne 0x408fa0
lea ecx, [ebp - 0x244]
call fcn.00407ca7
neg eax
sbb eax, eax
and eax, 0xfffeb3f8
add eax, 0x15f90
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.0040b57d
pop ecx
pop ecx
test eax, eax
je 0x408f7e
push str.Helper_finished__wait_for_adobearm.exe_to_exit_failed
lea ecx, [ebp - 0x220]
call fcn.004020ed
push 3
pop edi
push edi
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 7
push eax
xor eax, eax
inc eax
push eax
call fcn.00403025
mov ecx, dword [ebp - 0x220]
add esp, 0xc
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00401a64
push edi
call fcn.0040a158
pop ecx
lea eax, [ebp - 0x221]
mov byte [ebp - 0x221], 0
push eax
push edi
push str.Launcher_Error
lea ecx, [ebp - 0x21c]
call fcn.00401bdc
mov ebx, edi
jmp 0x409234
lea ecx, [ebp - 0x244]
call fcn.00407cf5
test eax, eax
je 0x408fa0
lea eax, [ebp - 0x228]
push eax
call fcn.0040aad7
mov esi, dword [ebp - 0x228]
pop ecx
call fcn.0040fd19
push eax
lea ecx, [ebp - 0x23c]
call fcn.00401330
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x244]
call fcn.0040c190
lea eax, [ebp - 0x23c]
push 0x451860
push eax
call fcn.00403ea1
mov ebx, str._BackFromArmUpdate
pop ecx
pop ecx
test al, al
jne 0x4091f1
push ebx
push esi
call fcn.00423b8e
pop ecx
pop ecx
test eax, eax
je 0x4091f1
test edi, edi
je 0x409124
push 5
xor ebx, ebx
push ebx
push esi
push dword [ebp - 0x22c]
push ebx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x220]
cmp eax, 0x21
jb 0x40905c
push str.ShellExecute_succeeded
call fcn.004020ed
push ebx
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0xa
push eax
push 2
call fcn.00403025
mov ecx, dword [ebp - 0x220]
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ecx - 0x10]
call fcn.00401a64
jmp 0x4091b3
push str.ShellExecute_failed
call fcn.004020ed
push 2
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0xb
push eax
xor eax, eax
inc eax
push eax
call fcn.00403025
mov ecx, dword [ebp - 0x220]
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ecx - 0x10]
call fcn.00401a64
push 2
pop ebx
push 0x43bfd8
lea ecx, [ebp - 0x230]
call fcn.004020ed
push str.Helper_failed
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0xe
call fcn.004020ed
push ebx
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x220]
push eax
xor eax, eax
inc eax
push eax
call fcn.00402ada
mov ecx, dword [ebp - 0x220]
add esp, 0x10
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov ecx, dword [ebp - 0x230]
mov byte [ebp - 4], 8
lea ecx, [ecx - 0x10]
call fcn.00401a64
lea eax, [ebp - 0x221]
mov byte [ebp - 0x221], 0
push eax
push ebx
push str.Launcher_Error
lea ecx, [ebp - 0x21c]
call fcn.00401bdc
mov eax, ebx
push eax
call fcn.0040a158
pop ecx
jmp 0x409226
cmp dword [ebp - 0x234], 0
jne 0x40918c
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.00406f7f
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
jne 0x409150
cmp dword [ebp - 0x234], eax
jne 0x40918c
push str.Unable_to_get_valid_token
lea ecx, [ebp - 0x220]
call fcn.004020ed
push ebx
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0xc
push eax
xor eax, eax
inc eax
push eax
call fcn.00403025
mov ecx, dword [ebp - 0x220]
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ecx - 0x10]
call fcn.00401a64
jmp 0x4091ab
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.0040868d
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x409094
push str.Helper_succeeded
lea ecx, [ebp - 0x220]
call fcn.004020ed
push 0
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0xd
push eax
xor eax, eax
inc eax
push eax
call fcn.00403025
mov ecx, dword [ebp - 0x220]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.00401a64
xor eax, eax
jmp 0x409118
push ebx
lea ecx, [ebp - 0x230]
call fcn.004020ed
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.00408537
pop ecx
pop ecx
mov ecx, dword [ebp - 0x230]
mov ebx, eax
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov ecx, dword [ebp - 0x23c]
lea ecx, [ecx - 0x10]
call fcn.00401a64
lea ecx, [esi - 0x10]
call fcn.00401a64
mov ecx, dword [ebp - 0x238]
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov ecx, dword [ebp - 0x22c]
add ecx, 0xfffffff0
call fcn.00401a64
lea ecx, [ebp - 0x21c]
call fcn.004014c3
lea ecx, [ebp - 0x244]
call fcn.0040be91
mov eax, ebx
call fcn.0041e9ba
ret