Function at 0x404ac4
Capabilities:
Create directory
Get common file path

Disassembly:
push 0x238
mov eax, 0x4346fb
call fcn.0041aa70
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x224]
mov edi, dword [ebp + 0xc]
push str.CreateCachedArmMsi...
mov dword [ebp - 0x234], esi
call fcn.004020dd
xor ebx, ebx
lea eax, [ebp - 0x224]
push ebx
push eax
push 2
mov dword [ebp - 4], ebx
call fcn.00403231
mov ecx, dword [ebp - 0x224]
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ecx - 0x10]
call fcn.00401a54
lea eax, [ebp - 0x218]
push eax
push ebx
push ebx
push 0x2b
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x404b4b
push eax
push str.Self_Update_Init_Error
push 0x436f68
push str.SHGetFolderPath_failed
call fcn.00407ac4
add esp, 0x10
jmp 0x404fc7
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.004020dd
push str.AdobeARM1.0Cache
mov dword [ebp - 4], 1
call main
pop ecx
push eax
push str.AdobeARM1.0Cache
lea ecx, [ebp - 0x230]
call main
push ebx
push dword [ebp - 0x230]
push ebx
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
cmp eax, 0xa1
je 0x404f9c
cmp eax, 3
je 0x404f9c
mov eax, dword [esi]
sub eax, 0x10
push eax
call main
lea esi, [eax + 0x10]
mov dword [ebp - 0x228], esi
push 0x2d
push esi
mov byte [ebp - 4], 2
call main
mov ecx, eax
add esp, 0xc
test ecx, ecx
je 0x404f74
sub ecx, esi
sar ecx, 1
cmp ecx, 0xffffffff
je 0x404f74
mov eax, dword [esi - 0xc]
sub eax, ecx
lea ecx, [ebp - 0x228]
dec eax
push eax
lea eax, [ebp - 0x220]
push eax
call main
push eax
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 3
call main
mov ecx, dword [ebp - 0x220]
mov byte [ebp - 4], 2
lea ecx, [ecx - 0x10]
call fcn.00401a54
push 0x7d
lea ecx, [ebp - 0x228]
call main
call fcn.0040bd69
push eax
lea ecx, [ebp - 0x224]
call main
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 4
push 4
push eax
call fcn.00405cbd
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x21c]
push 0x4387c8
push eax
call fcn.0040405d
push 0x4387c4
push eax
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 5
push eax
call fcn.0040229e
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 6
push ecx
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00402249
push str..msi
push eax
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 7
push eax
call fcn.0040229e
add esp, 0x38
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.00401a54
mov ecx, dword [ebp - 0x238]
lea ecx, [ecx - 0x10]
call fcn.00401a54
mov ecx, dword [ebp - 0x21c]
mov byte [ebp - 4], 0xb
lea ecx, [ecx - 0x10]
call fcn.00401a54
push 0x437078
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.0040229e
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x23c]
push ecx
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.00402249
add esp, 0x18
mov ecx, dword [ebp - 0x234]
lea ecx, [ecx - 0x10]
call fcn.00401a54
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push dword [edi]
call dword [sym.imp.kernel32.dll_CreateFileW]
mov edx, eax
mov dword [ebp - method.AutoHandle.virtual_0], vtable.AutoHandle.0
mov dword [ebp - 0x234], edx
mov dword [ebp - 0x240], edx
mov byte [ebp - 4], 0xf
test edx, edx
je 0x404d54
mov cl, 1
cmp edx, 0xffffffff
jne 0x404d56
mov cl, bl
mov eax, dword [edi]
test cl, cl
je 0x404f55
push str.2_16_17_18_19_52_53_54_63_68_81_82_83_84_85_86_87_88_89_90_91_92_93_97
push edx
push eax
call main
mov ecx, dword [edi]
add esp, 0xc
test eax, eax
je 0x404f43
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 0x10
push eax
push ebx
push ecx
mov dword [ebp - 0x21c], ebx
call sub.msi.dll_MsiOpenProductW
test eax, eax
jne 0x404f23
call fcn.0040bd69
push eax
lea ecx, [ebp - 0x220]
call main
push str.UpgradeCode
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x11
call fcn.004020dd
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x21c]
call fcn.00405b26
mov ecx, dword [ebp - 0x238]
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ecx - 0x10]
call fcn.00401a54
push dword [ebp - 0x21c]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
mov esi, dword [ebp - 0x220]
cmp dword [esi - 0xc], 0
je 0x404efb
push str.A6EADE66_0804_0000_1959_000000000000
push esi
call main
pop ecx
pop ecx
test eax, eax
jne 0x404efb
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 0x10
call fcn.00401a54
push 1
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x234]
call main
add esp, 0xc
test eax, eax
jne 0x404eec
push str.File_copied:
lea ecx, [ebp - 0x220]
call fcn.004020dd
push ebx
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x220]
push eax
push 1
call fcn.00402aef
mov ecx, dword [ebp - 0x220]
add esp, 0x10
mov byte [ebp - 4], 0x10
lea ecx, [ecx - 0x10]
call fcn.00401a54
lea eax, [ebp - 0x22c]
mov ecx, edi
push eax
call main
cmp dword [ebp - 0x21c], 0
je 0x404eac
push dword [ebp - 0x21c]
call sub.msi.dll_MsiConfigureFeatureFromDescriptorA
lea ecx, [ebp - 0x244]
call fcn.00403f95
mov ecx, dword [ebp - 0x22c]
lea ecx, [ecx - 0x10]
call fcn.00401a54
mov ecx, dword [ebp - 0x23c]
lea ecx, [ecx - 0x10]
call fcn.00401a54
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.00401a54
mov esi, dword [ebp - 0x228]
jmp 0x404f92
push eax
push str.Self_Update_Init_Error
push dword [edi]
push str.File_copy_failed:
jmp 0x404f34
push 0x3ee
push str.Self_Update_Init_Error
push dword [edi]
push str.empty_or_invalid_UpgradeCode
call fcn.00407ac4
add esp, 0x10
lea ecx, [esi - 0x10]
mov ebx, eax
call fcn.00401a54
jmp 0x404e98
push 0x3ee
push str.Self_Update_Init_Error
push dword [edi]
push str.failed_to_open_db:
call fcn.00407ac4
mov ebx, eax
add esp, 0x10
jmp 0x404e98
push 0x3ee
push str.Self_Update_Init_Error
push ecx
push str.file_not_valid:
jmp 0x404f65
push 0x3ee
push str.Self_Update_Init_Error
push eax
push str.failed_to_lock_for_validation:
call fcn.00407ac4
mov ebx, eax
add esp, 0x10
jmp 0x404eac
mov eax, dword [ebp - 0x234]
push 0xd
push str.Self_Update_Init_Error
push dword [eax]
push str.invalid_product_code_format:
call fcn.00407ac4
add esp, 0x10
mov ebx, eax
lea ecx, [esi - 0x10]
call fcn.00401a54
jmp 0x404fb7
push eax
push str.Self_Update_Init_Error
push dword [ebp - 0x230]
push str.Failed_arm_cache_folder:
call fcn.00407ac4
add esp, 0x10
mov ebx, eax
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.00401a54
mov eax, ebx
call fcn.0041aa1a
ret