Function at 0x404e4a
Capabilities:
Get common file path
Read .ini file

Disassembly:
push 0x240
mov eax, 0x438a4e
call fcn.0041ea10
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x248]
mov esi, dword [ebp + 8]
and dword [ebp - 0x220], 0
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x228], eax
call main
and dword [ebp - 4], 0
lea ecx, [ebp - 0x224]
push esi
call fcn.004020ed
xor ebx, ebx
lea eax, [ebp - 0x224]
inc ebx
lea ecx, [ebp - 0x244]
push eax
mov dword [ebp - 0x21c], ebx
mov byte [ebp - 4], bl
call main
mov ecx, dword [ebp - 0x224]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00401a64
lea ecx, [ebp - 0x248]
call fcn.00407d0f
test eax, eax
je 0x405360
call fcn.0040fd19
push eax
lea ecx, [ebp - 0x22c]
call main
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x248]
call fcn.0040c190
push str.Reader
push dword [ebp - 0x22c]
call main
pop ecx
pop ecx
test eax, eax
jne 0x404f39
mov eax, dword [0x45184c]
add eax, 0xfffffff0
push eax
call main
pop ecx
lea esi, [eax + 0x10]
mov dword [ebp - 0x224], esi
mov edi, dword [ebp - 0x224]
mov eax, esi
mov byte [ebp - 4], 3
jmp 0x404fbf
push str.Acrobat
push dword [ebp - 0x22c]
call main
pop ecx
pop ecx
test eax, eax
jne 0x404f72
mov eax, dword [0x451848]
add eax, 0xfffffff0
push eax
call main
add eax, 0x10
pop ecx
mov dword [ebp - 0x238], eax
mov dword [ebp - 4], 4
push 2
jmp 0x404f8d
push str.Adobe_Updater
lea ecx, [ebp - 0x240]
call fcn.004020ed
mov eax, dword [eax]
mov dword [ebp - 4], 5
push 4
pop ebx
add eax, 0xfffffff0
mov dword [ebp - 0x220], ebx
push eax
call main
add eax, 0x10
mov edi, eax
pop ecx
mov dword [ebp - 0x224], edi
mov esi, dword [ebp - 0x224]
or ebx, 8
mov dword [ebp - 4], 6
mov dword [ebp - 0x21c], ebx
add eax, 0xfffffff0
mov dword [ebp - 0x220], ebx
push eax
call main
mov ebx, eax
pop ecx
lea eax, [ebx + 0x10]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0x21c]
test al, 8
je 0x405008
and eax, 0xfffffff7
lea ecx, [edi - 0x10]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x220], eax
call fcn.00401a64
mov eax, dword [ebp - 0x21c]
test al, 4
je 0x40502f
mov ecx, dword [ebp - 0x240]
and eax, 0xfffffffb
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x220], eax
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov eax, dword [ebp - 0x21c]
test al, 2
je 0x405056
mov ecx, dword [ebp - 0x238]
and eax, 0xfffffffd
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x220], eax
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 0xb
test al, 1
je 0x405075
and eax, 0xfffffffe
lea ecx, [esi - 0x10]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x220], eax
call fcn.00401a64
call fcn.0040fd19
push eax
lea ecx, [ebp - 0x234]
call main
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x248]
call fcn.0040c07a
call fcn.0040fd19
push eax
lea ecx, [ebp - 0x224]
call main
mov edi, 0x104
mov byte [ebp - 4], 0xd
push edi
lea ecx, [ebp - 0x224]
call main
push eax
push edi
call dword [sym.imp.kernel32.dll_GetTempPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x224]
call main
mov esi, str.ArmUI.ini
push esi
call main
pop ecx
push eax
push esi
lea ecx, [ebp - 0x224]
call main
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0041ff30
add esp, 0xc
lea eax, [ebp - 0x218]
push dword [ebp - 0x224]
push edi
push eax
mov eax, dword [ebp - 0x23c]
push 0x43bfd8
push dword [ebp - 0x234]
push dword [eax]
call dword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.004020ed
mov eax, dword [ebp - 0x230]
mov byte [ebp - 4], 0xe
cmp dword [eax - 0xc], 0
jne 0x405160
push dword [ebp - 0x228]
lea ecx, [ebp - 0x230]
call main
push str.Reader
push dword [ebp - 0x22c]
call main
pop ecx
pop ecx
test eax, eax
jne 0x4051b4
mov eax, dword [0x451844]
add eax, 0xfffffff0
push eax
call main
pop ecx
lea esi, [eax + 0x10]
mov dword [ebp - 0x228], esi
mov eax, dword [ebp - 0x21c]
mov edi, dword [ebp - 0x228]
or eax, 0x10
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x220], eax
mov eax, esi
mov byte [ebp - 4], 0xf
jmp 0x405250
push str.Acrobat
push dword [ebp - 0x22c]
call main
pop ecx
pop ecx
test eax, eax
jne 0x4051f4
mov eax, dword [0x451840]
add eax, 0xfffffff0
push eax
call main
add eax, 0x10
pop ecx
mov dword [ebp - 0x23c], eax
mov esi, dword [ebp - 0x21c]
mov dword [ebp - 4], 0x10
or esi, 0x20
jmp 0x405216
push str.Adobe_Product
lea ecx, [ebp - 0x238]
call fcn.004020ed
mov esi, dword [ebp - 0x21c]
mov eax, dword [eax]
or esi, 0x40
mov dword [ebp - 4], 0x11
add eax, 0xfffffff0
mov dword [ebp - 0x220], esi
push eax
call main
add eax, 0x10
mov edi, eax
pop ecx
mov dword [ebp - 0x228], edi
or esi, 0x80
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x21c], esi
mov dword [ebp - 0x220], esi
mov esi, dword [ebp - 0x228]
add eax, 0xfffffff0
push eax
call main
mov dword [ebp - 0x228], eax
add eax, 0x10
pop ecx
mov dword [ebp - 0x240], eax
mov dword [ebp - 4], 0x13
mov eax, dword [ebp - 0x21c]
test al, al
jns 0x405293
and eax, 0xffffff7f
lea ecx, [edi - 0x10]
mov dword [ebp - 0x21c], eax
call fcn.00401a64
mov eax, dword [ebp - 0x21c]
test al, 0x40
je 0x4052b4
mov ecx, dword [ebp - 0x238]
and eax, 0xffffffbf
mov dword [ebp - 0x21c], eax
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov eax, dword [ebp - 0x21c]
test al, 0x20
je 0x4052d5
mov ecx, dword [ebp - 0x23c]
and eax, 0xffffffdf
mov dword [ebp - 0x21c], eax
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 0x17
test al, 0x10
je 0x4052e5
lea ecx, [esi - 0x10]
call fcn.00401a64
mov esi, dword [ebp - 0x228]
lea ecx, [ebp - 0x230]
add esi, 0x10
push esi
push str._SHORTPRODUCTNAME_
call main
push 0
lea edi, [ebx + 0x10]
push edi
push dword [ebp - 0x230]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esi - 0x10]
call fcn.00401a64
mov ecx, dword [ebp - 0x230]
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.00401a64
mov ecx, dword [ebp - 0x234]
lea ecx, [ecx - 0x10]
call fcn.00401a64
lea ecx, [edi - 0x10]
call fcn.00401a64
mov ecx, dword [ebp - 0x22c]
lea ecx, [ecx - 0x10]
call fcn.00401a64
lea ecx, [ebp - 0x248]
call fcn.0040be91
call fcn.0041e9ba
ret