Function at 0x41cf94
Capabilities:
Create directory
Get common file path

Disassembly:
push 0x430
mov eax, 0x4ac00b
call fcn.00468fdc
mov ebx, ecx
mov dword [ebp - 0x434], ebx
push str.InitOnDemandDownload...
lea ecx, [ebp - 0x430]
call fcn.00402829
xor esi, esi
lea edx, [ebp - 0x430]
push esi
push 2
pop ecx
mov dword [ebp - 4], esi
call fcn.004137d1
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, dword [ebp - 0x430]
lea ecx, [ecx - 0x10]
call fcn.00402e64
push 0x105
lea eax, [ebp - 0x21c]
push esi
push eax
call fcn.00481750
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push esi
push esi
push 0x801c
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov esi, eax
test esi, esi
jns 0x41d042
push str.SHGetFolderPath_CSIDL_LOCAL_APPDATA_failed:
lea ecx, [ebp - 0x434]
call fcn.00402829
xor ecx, ecx
inc ecx
mov dword [ebp - 4], ecx
lea edx, [ebp - 0x434]
push esi
call fcn.004137d1
pop ecx
mov ecx, dword [ebp - 0x434]
mov esi, eax
jmp 0x41d42c
lea eax, [ebp - 0x21c]
lea edi, [ebx + 8]
push eax
mov ecx, edi
call fcn.0040286d
push 0x105
xor esi, esi
lea eax, [ebp - 0x428]
push esi
push eax
call fcn.00481750
add esp, 0xc
lea eax, [ebp - 0x428]
push eax
push esi
push esi
push 0x8023
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov esi, eax
test esi, esi
jns 0x41d0a1
push str.SHGetFolderPath_CSIDL_COMMON_APPDATA_failed:
lea ecx, [ebp - 0x434]
call fcn.00402829
xor ecx, ecx
mov dword [ebp - 4], 2
inc ecx
jmp 0x41d028
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebx + 0xc]
call fcn.0040286d
call fcn.0044f181
push eax
lea ecx, [ebp - 0x438]
call fcn.00402899
lea eax, [ebp - 0x438]
mov dword [ebp - 4], 3
push eax
mov ecx, 0x5152ac
call fcn.004163b2
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x430]
push str.AdobeARMOnDemand_
push eax
call fcn.004023f1
mov esi, 0x4cc6b0
mov byte [ebp - 4], 4
push esi
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.00402459
add esp, 0x18
mov byte [ebp - 4], 5
mov ecx, edi
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.004025c6
mov ecx, dword [ebp - 0x42c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x430]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x430]
push str.AdobeARMOnDemand_
push eax
call fcn.004023f1
push esi
push eax
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 6
push eax
call fcn.00402459
add esp, 0x18
mov byte [ebp - 4], 7
lea ecx, [ebx + 0xc]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.004025c6
mov ecx, dword [ebp - 0x42c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x430]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ebx, dword [ebp - 0x434]
lea eax, [ebp - 0x42c]
and dword [ebp - 0x42c], 0
mov edx, 0x4ca238
push eax
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebx + 0x30]
push esi
push str.OnDemandManifestURL_Dev
call fcn.0043fb5d
mov eax, dword [esi]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x41d237
and dword [ebp - 0x42c], 0
lea eax, [ebp - 0x42c]
push eax
push esi
push str.OnDemandManifestURL
mov edx, 0x4ca238
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.0043fb5d
mov eax, dword [esi]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x41d237
push str.ArmOnDemand3.msi
lea eax, [ebp - 0x42c]
push 0x514cf8
push eax
call fcn.00402459
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.00402e14
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x42c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x430]
push edi
push eax
call fcn.004024b8
push str..msi
push eax
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 9
push eax
call fcn.00402459
add esp, 0x18
add ebx, 0x2c
mov byte [ebp - 4], 0xa
push eax
mov ecx, ebx
call fcn.00402e14
mov ecx, dword [ebp - 0x42c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x430]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov esi, 0x5152ac
mov ecx, esi
call fcn.00403251
test eax, eax
je 0x41d395
call fcn.0044f181
push eax
lea ecx, [ebp - 0x430]
call fcn.00402899
lea eax, [ebp - 0x430]
mov byte [ebp - 4], 0xb
push eax
mov ecx, esi
call fcn.0041621b
mov esi, dword [ebp - 0x430]
cmp dword [esi - 0xc], 0
je 0x41d32b
push str.manifest_path_from_cmd:
lea ecx, [ebp - 0x42c]
call fcn.00402829
push 0
lea eax, [ebp - 0x430]
mov byte [ebp - 4], 0xc
push eax
push 2
lea edx, [ebp - 0x42c]
pop ecx
call fcn.004130a0
pop ecx
pop ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x42c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea eax, [ebp - 0x430]
mov ecx, ebx
push eax
call fcn.00402e14
mov esi, dword [ebp - 0x430]
jmp 0x41d389
lea eax, [ebp - 0x438]
push eax
mov eax, dword [ebp - 0x434]
add eax, 0xc
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.004024b8
push str..msi
push eax
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 0xd
push eax
call fcn.00402459
add esp, 0x18
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xe
call fcn.00402e14
mov ecx, dword [ebp - 0x42c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x43c]
lea ecx, [ecx - 0x10]
call fcn.00402e64
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 3
call fcn.00402e64
xor ebx, ebx
push ebx
push dword [edi]
push ebx
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov esi, eax
cmp esi, 0xa1
je 0x41d3f0
cmp esi, 3
je 0x41d3f0
push ebx
mov ebx, dword [ebp - 0x434]
add ebx, 0xc
push dword [ebx]
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov esi, eax
cmp esi, 0xa1
je 0x41d3d8
cmp esi, 3
je 0x41d3d8
xor esi, esi
inc esi
jmp 0x41d426
push str.SHCreateDirectoryEx___failed:
lea ecx, [ebp - 0x42c]
call fcn.00402829
push esi
mov byte [ebp - 4], 0x10
push ebx
jmp 0x41d406
push str.SHCreateDirectoryEx___failed:
lea ecx, [ebp - 0x42c]
call fcn.00402829
push esi
mov byte [ebp - 4], 0xf
push edi
xor ecx, ecx
lea edx, [ebp - 0x42c]
inc ecx
call fcn.004130a0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x42c]
mov esi, eax
lea ecx, [ecx - 0x10]
call fcn.00402e64
mov ecx, dword [ebp - 0x438]
add ecx, 0xfffffff0
call fcn.00402e64
mov eax, esi
call fcn.00468f86
ret