Function at 0x412bb0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x718
mov eax, dword [0x629688]
xor eax, esp
mov dword [esp + 0x714], eax
mov eax, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [esp + 0x34], eax
xor eax, eax
push 0x3ff
push eax
mov dword [esp + 0x38], eax
mov byte [esp + 0x320], al
lea eax, [esp + 0x321]
push eax
mov dword [esp + 0x2c], esi
call fcn.005877c0
xor ecx, ecx
add esp, 0xc
cmp byte [str.RegistrationBalloon], cl
mov edi, 0x13
mov eax, edi
cmove eax, ecx
push eax
push str.RegistrationBalloon
lea ecx, [esp + 0x2a8]
mov byte [esp + 0x1d], 0
mov byte [esp + 0x20], 0
mov dword [esp + 0x2bc], 0xf
mov dword [esp + 0x2b8], 0
mov byte [esp + 0x2a8], 0
call fcn.004082e0
cmp byte [esi], 0
jne 0x412c59
xor ecx, ecx
jmp 0x412c69
mov ecx, esi
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412c60
sub ecx, edx
push ecx
push 0
push esi
lea ecx, [esp + 0x2ac]
call fcn.00414920
cmp eax, 0xffffffff
je 0x412c85
mov byte [esp + 0x15], 1
jmp 0x412ce4
xor ecx, ecx
cmp byte [str.SilentActivator], cl
mov eax, 0xf
cmove eax, ecx
push eax
push str.SilentActivator
lea ecx, [esp + 0x2a8]
call fcn.004082e0
cmp byte [esi], 0
jne 0x412cb0
xor ecx, ecx
jmp 0x412cbe
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412cb5
sub ecx, edx
push ecx
push 0
push esi
lea ecx, [esp + 0x2ac]
call fcn.00414920
mov ecx, dword [esp + 0x18]
movzx ecx, cl
cmp eax, 0xffffffff
mov eax, 1
cmovne ecx, eax
mov dword [esp + 0x18], ecx
push 0
push 0x5e0874
lea ecx, [esp + 0x120]
mov dword [esp + 0x134], 0xf
mov dword [esp + 0x130], 0
mov byte [esp + 0x120], 0
call fcn.00414f90
lea eax, [esp + 0x318]
push 2
push eax
call fcn.004016a0
add esp, 8
cmp byte [esp + 0x318], 0
jne 0x412d35
xor ecx, ecx
jmp 0x412d49
lea ecx, [esp + 0x318]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412d40
sub ecx, edx
push ecx
lea eax, [esp + 0x31c]
push eax
lea ecx, [esp + 0x120]
call fcn.00414f90
push 1
push 0x5e0864
lea ecx, [esp + 0x120]
call fcn.00414e60
xor ecx, ecx
cmp byte [esp + 0x15], cl
jne 0x412dab
cmp byte [esp + 0x18], cl
jne 0x412d95
cmp byte [str.OOBEPDAppcorePDApp.exe], cl
mov eax, 0x19
cmove eax, ecx
push eax
push str.OOBEPDAppcorePDApp.exe
jmp 0x412dbf
cmp byte [str.OOBEPDAppP7_adobe_licutil.exe], cl
mov eax, 0x1f
cmove eax, ecx
push eax
push str.OOBEPDAppP7_adobe_licutil.exe
jmp 0x412dbf
cmp byte [str.OOBEPDAppP7AAM_Registration_Notifier.exe], cl
mov eax, 0x2b
cmove eax, ecx
push eax
push str.OOBEPDAppP7AAM_Registration_Notifier.exe
lea ecx, [esp + 0x120]
call fcn.00414e60
xor ecx, ecx
cmp byte [str.Updater], cl
mov eax, 7
cmove eax, ecx
push eax
push str.Updater
lea ecx, [esp + 0x218]
mov byte [esp + 0x1e], 1
mov dword [esp + 0x22c], 0xf
mov dword [esp + 0x228], 0
mov byte [esp + 0x218], 0
call fcn.004082e0
cmp byte [esi], 0
jne 0x412e19
xor ecx, ecx
jmp 0x412e29
mov ecx, esi
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412e20
sub ecx, edx
push ecx
push 0
push esi
lea ecx, [esp + 0x21c]
call fcn.00414920
movzx ecx, byte [esp + 0x16]
push dword [esp + 0x1c]
xor edx, edx
cmp eax, 0xffffffff
cmove ecx, edx
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x1ac]
mov dword [esp + 0x28], edx
call fcn.004244b0
lea ecx, [esp + 0x1c8]
push 0
push 0x5e0874
mov dword [esp + 0x1e4], 0xf
mov dword [esp + 0x1e0], 0
mov byte [esp + 0x1d0], 0
call fcn.004082e0
lea eax, [esp + 0x1c8]
push eax
push str.RefreshWF
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x1e], 0
call fcn.004246a0
test al, al
je 0x412ee5
xor eax, eax
cmp byte [0x5e1b6c], al
lea ecx, [esp + 0x1c8]
setne al
push eax
push 0
push 0x5e1b6c
call fcn.00414920
cmp eax, 0xffffffff
push ecx
lea ecx, [esp + 0x1ac]
setne byte [esp + 0x1a]
call fcn.004247e0
push 0
push 0x5e0874
lea ecx, [esp + 0x1e8]
mov dword [esp + 0x1fc], 0xf
mov dword [esp + 0x1f8], 0
mov byte [esp + 0x1e8], 0
call fcn.004082e0
lea eax, [esp + 0x1e0]
push eax
push str.ForcedActivation
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x24], 0
call fcn.004246a0
test al, al
je 0x412f6d
xor eax, eax
cmp byte [0x5e1b6c], al
lea ecx, [esp + 0x1e0]
setne al
push eax
push 0
push 0x5e1b6c
call fcn.00414920
mov ecx, dword [esp + 0x1c]
movzx ecx, cl
cmp eax, 0xffffffff
mov eax, 1
cmovne ecx, eax
mov dword [esp + 0x1c], ecx
push ecx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x1b0]
call fcn.004248a0
push 5
push 0x5e1bbc
lea ecx, [esp + 0xf0]
mov dword [esp + 0x104], 0xf
mov dword [esp + 0x100], 0
mov byte [esp + 0xf0], 0
call fcn.004082e0
push 0x14
push str.Photoshop_CS5_Win_GM
lea ecx, [esp + 0x138]
mov dword [esp + 0x14c], 0xf
mov dword [esp + 0x148], 0
mov byte [esp + 0x138], 0
call fcn.004082e0
xor ecx, ecx
cmp byte [str.DeActivation], cl
mov eax, 0xc
cmove eax, ecx
push eax
push str.DeActivation
lea ecx, [esp + 0x108]
mov dword [esp + 0x11c], 0xf
mov dword [esp + 0x118], 0
mov byte [esp + 0x108], 0
call fcn.004082e0
push 0xa
push str.dummy_code
lea ecx, [esp + 0x180]
mov dword [esp + 0x194], 0xf
mov dword [esp + 0x190], 0
mov byte [esp + 0x180], 0
call fcn.004082e0
push 0xa
push str.dummy_code
lea ecx, [esp + 0x260]
mov dword [esp + 0x274], 0xf
mov dword [esp + 0x270], 0
mov byte [esp + 0x260], 0
call fcn.004082e0
push 0
push 0x5e0874
lea ecx, [esp + 0x168]
mov dword [esp + 0x17c], 0xf
mov dword [esp + 0x178], 0
mov byte [esp + 0x168], 0
call fcn.004082e0
push 0xa
push str.dummy_code
lea ecx, [esp + 0x200]
mov dword [esp + 0x214], 0xf
mov dword [esp + 0x210], 0
mov byte [esp + 0x200], 0
call fcn.004082e0
push 0
push 0x5e0874
lea ecx, [esp + 0x198]
mov dword [esp + 0x1ac], 0xf
mov dword [esp + 0x1a8], 0
mov byte [esp + 0x198], 0
call fcn.004082e0
push 0x14
push str.Photoshop_CS5_Win_GM
lea ecx, [esp + 0x2d8]
mov dword [esp + 0x2ec], 0xf
mov dword [esp + 0x2e8], 0
mov byte [esp + 0x2d8], 0
call fcn.004082e0
push 0x14
push str.Photoshop_CS5_Win_GM
lea ecx, [esp + 0x290]
mov dword [esp + 0x2a4], 0xf
mov dword [esp + 0x2a0], 0
mov byte [esp + 0x290], 0
call fcn.004082e0
mov dword [esp + 0x284], 0xf
mov dword [esp + 0x280], 0
push 0
push 0x5e0874
lea ecx, [esp + 0x278]
mov byte [esp + 0x278], 0
call fcn.004082e0
lea eax, [esp + 0x160]
push eax
push str.AppName
lea ecx, [esp + 0x1b0]
call fcn.004246a0
test al, al
jne 0x4131d9
push 0xd
push str.Adobe_Product
lea ecx, [esp + 0x168]
call fcn.004082e0
cmp byte [esp + 0x28], 0
jne 0x41332c
cmp byte [esp + 0x18], 0
jne 0x413395
lea eax, [esp + 0xe8]
push eax
push str.AppRunningLocale
lea ecx, [esp + 0x1b0]
call fcn.004246a0
test al, al
jne 0x41321f
push 5
push 0x5e1bbc
lea ecx, [esp + 0xf0]
call fcn.004082e0
cmp byte [esi], 0
jne 0x413228
xor ecx, ecx
jmp 0x413239
mov ecx, esi
lea edx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413230
sub ecx, edx
push ecx
push 0
push esi
lea ecx, [esp + 0x10c]
call fcn.00414920
push 0xd
lea ecx, [esp + 0x104]
cmp eax, 0xffffffff
jne 0x413298
push str.Provisioning_
call fcn.004082e0
lea eax, [esp + 0x178]
push eax
push str.AdobeCode
lea ecx, [esp + 0x1b0]
call fcn.004246a0
test al, al
jne 0x41328f
push str.dummy_code
lea ecx, [esp + 0x17c]
call fcn.004080a0
lea eax, [esp + 0x178]
jmp 0x4132ee
push str.Deactivation_
call fcn.004082e0
lea eax, [esp + 0x190]
push eax
push str.LastLoggedInPersonGUIDWithAuthSource
lea ecx, [esp + 0x1b0]
call fcn.004246a0
cmp dword [esp + 0x1a0], 0
je 0x4132ce
lea eax, [esp + 0x190]
jmp 0x4132ee
lea eax, [esp + 0x1f8]
push eax
push str.PersonGUID
lea ecx, [esp + 0x1b0]
call fcn.004246a0
lea eax, [esp + 0x1f8]
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x10c]
call fcn.00414b60
cmp byte [esp + 0x15], 0
je 0x4133c3
xor eax, eax
cmp byte [str.RegistrationBalloon], al
lea ecx, [esp + 0x100]
cmove edi, eax
push edi
push str.RegistrationBalloon
call fcn.004082e0
jmp 0x4133c3
cmp byte [esp + 0x18], 0
jne 0x413395
lea eax, [esp + 0xe8]
push eax
push str.__appLocale
lea ecx, [esp + 0x1b0]
call fcn.004246a0
test al, al
jne 0x413363
push 5
push 0x5e1bbc
lea ecx, [esp + 0xf0]
call fcn.004082e0
lea eax, [esp + 0x130]
push eax
push str.__appLEID
lea ecx, [esp + 0x1b0]
call fcn.004246a0
test al, al
jne 0x4133c3
push 0x14
push str.Photoshop_CS5_Win_GM
lea ecx, [esp + 0x138]
call fcn.004082e0
jmp 0x4133c3
lea eax, [esp + 0xe8]
push eax
push str.AppRunningLocale
lea ecx, [esp + 0x1b0]
call fcn.004246a0
test al, al
jne 0x4133c3
push 0x5e1bbc
lea ecx, [esp + 0xec]
call fcn.004080a0
cmp dword [esp + 0x12c], 0x10
lea eax, [esp + 0x118]
cmovae eax, dword [esp + 0x118]
push eax
call fcn.00401100
add esp, 4
mov edi, eax
push 0
push edi
call fcn.0058c478
push edi
mov esi, eax
call fcn.005864b7
add esp, 0xc
test esi, esi
jne 0x4139fa
push 0x44
lea eax, [esp + 0x3c]
push esi
push eax
call fcn.005877c0
add esp, 0xc
xorps xmm0, xmm0
push 0x5e1c18
lea ecx, [esp + 0x84]
mov dword [esp + 0x3c], 0x44
movdqa xmmword [esp + 0xb4], xmm0
call fcn.00407fb0
cmp dword [esp + 0x12c], 0x10
lea eax, [esp + 0x118]
cmovae eax, dword [esp + 0x118]
push eax
call fcn.00401100
mov esi, eax
add esp, 4
cmp word [esi], 0
jne 0x413461
xor ecx, ecx
jmp 0x413475
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413466
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [esp + 0x88]
call fcn.0040d120
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 2
push 0x5e1c1c
call fcn.0040d120
cmp byte [esp + 0x28], 0
jne 0x41371a
cmp byte [esp + 0x15], 0
jne 0x413629
cmp byte [esp + 0x18], 0
jne 0x4138df
push str.__appletIDLWA_UI
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__appletVersion3.0
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__workflow
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
cmp dword [esp + 0x114], 0x10
lea eax, [esp + 0x100]
cmovae eax, dword [esp + 0x100]
push eax
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__locale
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
cmp dword [esp + 0xfc], 0x10
lea eax, [esp + 0xe8]
cmovae eax, dword [esp + 0xe8]
push eax
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__amtlibXMLFile
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
jmp 0x41391d
cmp byte [esp + 0x18], 0
jne 0x4138df
push str.__workflow
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
cmp dword [esp + 0x114], 0x10
lea eax, [esp + 0x100]
cmovae eax, dword [esp + 0x100]
push eax
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__locale
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
cmp dword [esp + 0xfc], 0x10
lea eax, [esp + 0xe8]
cmovae eax, dword [esp + 0xe8]
push eax
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__argsXMLPath
jmp 0x41360d
cmp byte [esp + 0x18], 0
jne 0x4138df
push str.__appletIDUWA_UI
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__appletVersion1.0
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__workflowUpdater
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__modeManual
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__appLocale
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
cmp dword [esp + 0xfc], 0x10
lea eax, [esp + 0xe8]
cmovae eax, dword [esp + 0xe8]
push eax
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e0ee4
call fcn.0040b6b0
push str.__appLEID
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
cmp dword [esp + 0x144], 0x10
lea eax, [esp + 0x130]
cmovae eax, dword [esp + 0x130]
push eax
call fcn.00401100
add esp, 4
mov esi, eax
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
mov eax, dword [esp + 0x28]
add esp, 4
test eax, eax
je 0x413971
push eax
call fcn.005aca6e
jmp 0x41396e
push str.__amtlibXMLFile
call fcn.00401100
mov esi, eax
add esp, 4
cmp word [esi], 0
jne 0x4138f8
xor ecx, ecx
jmp 0x41390f
mov ecx, esi
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413900
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [esp + 0x88]
call fcn.0040d120
push esi
call fcn.005864b7
mov eax, dword [esp + 0x28]
add esp, 4
test eax, eax
je 0x413971
push eax
call fcn.00401100
add esp, 4
lea ecx, [esp + 0x80]
push 0x5e1c18
mov esi, eax
call fcn.0040b6b0
push esi
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push 0x5e1c18
lea ecx, [esp + 0x84]
call fcn.0040b6b0
push esi
call fcn.005864b7
add esp, 4
lea edx, [esp + 0xb0]
push edx
xor ecx, ecx
cmp byte [esp + 0x1c], cl
lea edx, [esp + 0x3c]
push edx
push 0
push 0
mov eax, 0x8000000
cmovne ecx, eax
cmp dword [esp + 0xa4], 8
push ecx
push 0
push 0
lea eax, [esp + 0x9c]
cmovae eax, dword [esp + 0x9c]
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4139c6
lea esi, [eax + 2]
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x4139e0
push dword [esp + 0xb0]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [esp + 0xb4]
call esi
xor esi, esi
cmp dword [esp + 0x94], 8
jb 0x41417f
push dword [esp + 0x80]
jmp 0x414177
mov eax, dword [esp + 0x24]
test eax, eax
je 0x413a0b
push eax
call fcn.005aca6e
add esp, 4
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
call fcn.00415720
cmp dword [esp + 0x174], 0x10
lea edx, [esp + 0x160]
cmovae edx, dword [esp + 0x160]
mov dword [esp + 0x28], eax
mov dword [esp + 0x23c], 0xf
mov dword [esp + 0x238], 0
mov byte [esp + 0x228], 0
cmp byte [edx], 0
jne 0x413a66
xor ecx, ecx
jmp 0x413a79
mov ecx, edx
lea esi, [ecx + 1]
jmp 0x413a70
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413a70
sub ecx, esi
push ecx
push edx
lea ecx, [esp + 0x230]
call fcn.00414f90
push 0x4f
push str.Your_application_install_seems_to_be_damaged__Please_reinstall_the_application.
lea ecx, [esp + 0xb8]
mov dword [esp + 0xcc], 0xf
mov dword [esp + 0xc8], 0
mov byte [esp + 0xb8], 0
call fcn.00414f90
push 2
push 0x5e1c78
lea ecx, [esp + 0x248]
mov dword [esp + 0x25c], 0xf
mov dword [esp + 0x258], 0
mov byte [esp + 0x248], 0
call fcn.00414f90
mov edx, dword [esp + 0x20]
mov dword [esp + 0x94], 0xf
cmp byte [edx], 0
mov dword [esp + 0x90], 0
mov byte [esp + 0x80], 0
jne 0x413b14
xor ecx, ecx
jmp 0x413b29
mov ecx, edx
lea esi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413b20
sub ecx, esi
push ecx
push edx
lea ecx, [esp + 0x88]
call fcn.004082e0
push 0
push 0x5e0874
lea ecx, [esp + 0x150]
mov byte [esp + 0x1f], 0
mov dword [esp + 0x164], 0xf
mov dword [esp + 0x160], 0
mov byte [esp + 0x150], 0
call fcn.004082e0
mov edi, dword [esp + 0x90]
xor eax, eax
cmp byte [str.SilentActivator], al
mov esi, 0xf
cmove esi, eax
cmp dword [esp + 0x94], 0x10
lea ecx, [esp + 0x80]
cmovae ecx, dword [esp + 0x80]
mov eax, esi
cmp edi, esi
cmovb eax, edi
push eax
push str.SilentActivator
push ecx
call fcn.004129e0
add esp, 0xc
test eax, eax
jne 0x413bdb
cmp edi, esi
jb 0x413bdb
cmp edi, esi
setne al
test eax, eax
jne 0x413bdb
lea eax, [esp + 0x80]
push eax
push str.SubWorkFlowType
lea ecx, [esp + 0x1b0]
call fcn.004246a0
xor ecx, ecx
cmp byte [str.ManageMyAccount], cl
mov eax, 0xf
cmove eax, ecx
push eax
push ecx
push str.ManageMyAccount
lea ecx, [esp + 0x8c]
call fcn.00414920
cmp eax, 0xffffffff
je 0x413c21
lea eax, [esp + 0x148]
push eax
push str.ExtendedProfileRegURL
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x1f], 1
call fcn.004246a0
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x108]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.004086b0
lea ecx, [esp + 0x2d0]
call fcn.00414530
cmp dword [esp + 0x2e4], 0x10
lea eax, [esp + 0x2d0]
cmovae eax, dword [esp + 0x2d0]
push eax
call fcn.00401100
add esp, 0x1c
mov edi, eax
push 0
push edi
call fcn.0058c478
push edi
mov esi, eax
call fcn.005864b7
add esp, 0xc
test esi, esi
jne 0x413f70
push 0x28
call fcn.00585fec
mov esi, eax
add esp, 4
test esi, esi
je 0x413d05
push str._oobe_provisioning_
lea ecx, [esp + 0x2ec]
call fcn.00407ed0
mov eax, 3
mov dword [esp + 0x30], eax
lea eax, [esp + 0x2e8]
push eax
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x10c]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.004086b0
lea ecx, [esp + 0x31c]
call fcn.00414530
add esp, 0x18
mov ecx, esi
push eax
call fcn.00521930
mov esi, eax
jmp 0x413d07
xor esi, esi
mov eax, dword [esp + 0x30]
test al, 2
je 0x413d51
and eax, 0xfffffffd
cmp dword [esp + 0x314], 0x10
mov dword [esp + 0x30], eax
jb 0x413d33
push dword [esp + 0x300]
call fcn.0058603b
mov eax, dword [esp + 0x34]
add esp, 4
mov dword [esp + 0x314], 0xf
mov dword [esp + 0x310], 0
mov byte [esp + 0x300], 0
test al, 1
je 0x413d8c
cmp dword [esp + 0x2fc], 0x10
jb 0x413d6e
push dword [esp + 0x2e8]
call fcn.0058603b
add esp, 4
mov dword [esp + 0x2fc], 0xf
mov dword [esp + 0x2f8], 0
mov byte [esp + 0x2e8], 0
test esi, esi
je 0x413f70
xor ecx, ecx
cmp byte [str.First_Launch], cl
mov eax, 0xc
cmove eax, ecx
push eax
push ecx
push str.First_Launch
lea ecx, [esp + 0x8c]
call fcn.00414920
cmp eax, 0xffffffff
je 0x413dde
cmp byte [esp + 0x1c], 0
lea ecx, [esp + 0x98]
jne 0x413dd4
push str.First_Launch
jmp 0x413f1f
push str.Subsequent_Launch_FA
jmp 0x413f1f
push 0
push str.Updater
lea ecx, [esp + 0x88]
call fcn.004147a0
cmp eax, 0xffffffff
je 0x413e00
push str.Updater
jmp 0x413f18
push 0
push str.DeActivation
lea ecx, [esp + 0x88]
call fcn.004147a0
cmp eax, 0xffffffff
je 0x413e22
push str.DeActivation
jmp 0x413f18
push 0
push str.Activation_Failed_TooMany
lea ecx, [esp + 0x88]
call fcn.004147a0
cmp eax, 0xffffffff
je 0x413e44
push str.Activation_Failed_TooMany
jmp 0x413f18
push 0
push str.Activation_Failed_Refused
lea ecx, [esp + 0x88]
call fcn.004147a0
cmp eax, 0xffffffff
je 0x413e66
push str.Activation_Failed_TooMany
jmp 0x413f18
push 0
push str.AdobeID
lea ecx, [esp + 0x88]
call fcn.004147a0
cmp eax, 0xffffffff
je 0x413e88
push str.AdobeID
jmp 0x413f18
push 0
push str.EULA
lea ecx, [esp + 0x88]
call fcn.004147a0
cmp eax, 0xffffffff
je 0x413ea7
push str.EULA
jmp 0x413f18
push 0
push str.Subsequent_Launch
lea ecx, [esp + 0x88]
call fcn.004147a0
cmp eax, 0xffffffff
je 0x413ed8
cmp byte [esp + 0x1c], 0
lea ecx, [esp + 0x98]
jne 0x413dd4
push str.Subsequent_Launch
jmp 0x413f1f
push 0
push str.SilentActivator
lea ecx, [esp + 0x88]
call fcn.004147a0
cmp eax, 0xffffffff
je 0x413ef7
push str.SilentActivator
jmp 0x413f18
push str.SignIn
lea ecx, [esp + 0x84]
call fcn.004147e0
test eax, eax
jne 0x413f13
push str.SignIn
jmp 0x413f18
push str.Default
lea ecx, [esp + 0x9c]
call fcn.00407ed0
lea eax, [esp + 0x98]
push eax
lea eax, [esp + 0xd4]
push eax
mov ecx, esi
call fcn.00521d10
push eax
lea ecx, [esp + 0xb4]
call fcn.00414850
lea ecx, [esp + 0xd0]
call fcn.00414890
lea ecx, [esp + 0x98]
call fcn.00407f30
mov ecx, esi
call fcn.00521b40
push esi
call fcn.0058603b
add esp, 4
cmp byte [esp + 0x15], 0
jne 0x413fde
cmp byte [esp + 0x16], 0
jne 0x413fde
cmp byte [esp + 0x17], 0
jne 0x413fe5
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x260]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00414a30
sub esp, 0x18
lea eax, [esp + 0xe0]
mov ecx, esp
push eax
call fcn.00414820
sub esp, 0x18
lea eax, [esp + 0x270]
mov ecx, esp
push eax
call fcn.00414820
mov ecx, dword [esp + 0x7c]
call fcn.00412a50
add esp, 0x48
jmp 0x41400f
cmp byte [esp + 0x17], 0
je 0x41400f
cmp dword [esp + 0x158], 0
je 0x41400f
cmp dword [esp + 0x15c], 0x10
lea eax, [esp + 0x148]
cmovae eax, dword [esp + 0x148]
push eax
call fcn.00503630
add esp, 4
cmp dword [esp + 0x2cc], 0x10
mov esi, 1
jb 0x41402d
push dword [esp + 0x2b8]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x15c], 0x10
mov dword [esp + 0x2cc], 0xf
mov dword [esp + 0x2c8], 0
mov byte [esp + 0x2b8], 0
jb 0x414064
push dword [esp + 0x148]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x94], 0x10
mov dword [esp + 0x15c], 0xf
mov dword [esp + 0x158], 0
mov byte [esp + 0x148], 0
jb 0x41409b
push dword [esp + 0x80]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x254], 0x10
mov dword [esp + 0x94], 0xf
mov dword [esp + 0x90], 0
mov byte [esp + 0x80], 0
jb 0x4140d2
push dword [esp + 0x240]
call fcn.005864b7
add esp, 4
cmp dword [esp + 0xc4], 0x10
mov dword [esp + 0x254], 0xf
mov dword [esp + 0x250], 0
mov byte [esp + 0x240], 0
jb 0x414109
push dword [esp + 0xb0]
call fcn.005864b7
add esp, 4
cmp dword [esp + 0x23c], 0x10
mov dword [esp + 0xc4], 0xf
mov dword [esp + 0xc0], 0
mov byte [esp + 0xb0], 0
jb 0x414140
push dword [esp + 0x228]
call fcn.005864b7
add esp, 4
mov eax, dword [esp + 0x28]
push eax
mov dword [esp + 0x240], 0xf
mov dword [esp + 0x23c], 0
mov byte [esp + 0x22c], 0
push dword [eax]
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x34]
call fcn.00414da0
push dword [esp + 0x28]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x284], 0x10
jb 0x414198
push dword [esp + 0x270]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x29c], 0x10
mov dword [esp + 0x284], 0xf
mov dword [esp + 0x280], 0
mov byte [esp + 0x270], 0
jb 0x4141cf
push dword [esp + 0x288]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x2e4], 0x10
mov dword [esp + 0x29c], 0xf
mov dword [esp + 0x298], 0
mov byte [esp + 0x288], 0
jb 0x414206
push dword [esp + 0x2d0]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x1a4], 0x10
mov dword [esp + 0x2e4], 0xf
mov dword [esp + 0x2e0], 0
mov byte [esp + 0x2d0], 0
jb 0x41423d
push dword [esp + 0x190]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x20c], 0x10
mov dword [esp + 0x1a4], 0xf
mov dword [esp + 0x1a0], 0
mov byte [esp + 0x190], 0
jb 0x414274
push dword [esp + 0x1f8]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x174], 0x10
mov dword [esp + 0x20c], 0xf
mov dword [esp + 0x208], 0
mov byte [esp + 0x1f8], 0
jb 0x4142ab
push dword [esp + 0x160]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x26c], 0x10
mov dword [esp + 0x174], 0xf
mov dword [esp + 0x170], 0
mov byte [esp + 0x160], 0
jb 0x4142e2
push dword [esp + 0x258]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x18c], 0x10
mov dword [esp + 0x26c], 0xf
mov dword [esp + 0x268], 0
mov byte [esp + 0x258], 0
jb 0x414319
push dword [esp + 0x178]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x114], 0x10
mov dword [esp + 0x18c], 0xf
mov dword [esp + 0x188], 0
mov byte [esp + 0x178], 0
jb 0x414350
push dword [esp + 0x100]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x144], 0x10
mov dword [esp + 0x114], 0xf
mov dword [esp + 0x110], 0
mov byte [esp + 0x100], 0
jb 0x414387
push dword [esp + 0x130]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0xfc], 0x10
mov dword [esp + 0x144], 0xf
mov dword [esp + 0x140], 0
mov byte [esp + 0x130], 0
jb 0x4143be
push dword [esp + 0xe8]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x1f4], 0x10
mov dword [esp + 0xfc], 0xf
mov dword [esp + 0xf8], 0
mov byte [esp + 0xe8], 0
jb 0x4143f5
push dword [esp + 0x1e0]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x1dc], 0x10
mov dword [esp + 0x1f4], 0xf
mov dword [esp + 0x1f0], 0
mov byte [esp + 0x1e0], 0
jb 0x41442c
push dword [esp + 0x1c8]
call fcn.0058603b
add esp, 4
lea ecx, [esp + 0x1a8]
mov dword [esp + 0x1dc], 0xf
mov dword [esp + 0x1d8], 0
mov byte [esp + 0x1c8], 0
call fcn.00424630
cmp dword [esp + 0x224], 0x10
jb 0x41446f
push dword [esp + 0x210]
call fcn.0058603b
add esp, 4
cmp dword [esp + 0x12c], 0x10
mov dword [esp + 0x224], 0xf
mov dword [esp + 0x220], 0
mov byte [esp + 0x210], 0
jb 0x4144a6
push dword [esp + 0x118]
call fcn.005864b7
add esp, 4
cmp dword [esp + 0x2b4], 0x10
mov dword [esp + 0x12c], 0xf
mov dword [esp + 0x128], 0
mov byte [esp + 0x118], 0
jb 0x4144dd
push dword [esp + 0x2a0]
call fcn.0058603b
add esp, 4
mov ecx, dword [esp + 0x71c]
pop edi
mov eax, esi
pop esi
xor ecx, esp
call fcn.00586d1b
mov esp, ebp
pop ebp
ret