Function at 0x4070a0
Capabilities:
Check if file exists
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x497aac
mov eax, dword fs:[0]
push eax
sub esp, 0x2a4
mov eax, dword [0x4c4014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
push 0x104
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 2
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x407a45
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x407a45
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407173
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x248]
call fcn.00402e00
mov edi, dword [ebp - 0x238]
mov esi, 2
test edi, edi
je 0x407260
xor ecx, ecx
lea eax, [edi + 1]
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00479701
mov esi, eax
add esp, 4
test esi, esi
je 0x40725b
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x248]
lea eax, [edi + 1]
cmovae ecx, dword [ebp - 0x248]
push ecx
push eax
push esi
call fcn.0047969d
lea eax, [edi - 1]
add esp, 0xc
cmp word [esi + eax*2], 0x5c
lea eax, [esi + eax*2]
jne 0x40721e
xor ecx, ecx
mov word [eax], cx
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407202
sub ecx, edx
lea eax, [esi - 2]
sar ecx, 1
cmp word [eax + ecx*2], 0x5c
lea eax, [eax + ecx*2]
je 0x4071f8
push esi
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x407231
push esi
call fcn.00469c94
jmp 0x407258
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407236
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x248]
call fcn.00402e00
push esi
call fcn.00479682
add esp, 4
mov esi, 2
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
push dword [ebp - 0x238]
cmovae eax, dword [ebp - 0x248]
lea ecx, [ebp - 0x260]
push eax
call fcn.00402e00
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
push dword [ebp - 0x238]
cmovae eax, dword [ebp - 0x248]
lea ecx, [ebp - 0x278]
push eax
call fcn.00402e00
push 0x17
push 0x4b02d0
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0
call fcn.00402060
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x238]
test ecx, ecx
je 0x407385
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x407385
lea edi, [ecx + 0xb]
xor ecx, ecx
add edi, eax
mov eax, edi
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00479701
mov esi, eax
add esp, 4
test esi, esi
je 0x407385
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x248]
cmovae ecx, dword [ebp - 0x248]
push ecx
push edi
push esi
call fcn.0047969d
add esp, 0xc
lea eax, [ebp - 0x2ac]
cmp dword [ebp - 0x298], 8
cmovae eax, dword [ebp - 0x2ac]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407360
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x248]
call fcn.00402e00
push esi
call fcn.00479682
add esp, 4
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x298]
cmp ecx, 8
jb 0x4073c9
mov edx, dword [ebp - 0x2ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4073bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407bbd
push ecx
push edx
call fcn.00469a08
add esp, 8
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4074f4
lea edx, [ebp - 0x2b0]
lea ecx, [ebp - 0x294]
call fcn.00438590
cmp dword [ebp - 0x2b0], 2
jne 0x407413
lea ecx, [ebp - 0x278]
call fcn.00426ef0
jmp 0x407467
push 0
push 0x26
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x407467
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x407433
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x278]
call fcn.00402e00
push 0x1b
push str.AdobeAdobe_Creative_Cloud
lea ecx, [ebp - 0x278]
call fcn.00402f10
lea edx, [ebp - 0x2b0]
lea ecx, [ebp - 0x294]
call fcn.00438590
cmp dword [ebp - 0x2b0], 2
jne 0x407499
lea ecx, [ebp - 0x260]
call fcn.00426d10
test al, al
je 0x4074f4
push 0x15
push str.Adobe_Desktop_Common
jmp 0x4074e9
push 0
push 0x2b
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x4074f4
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4074c0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x260]
call fcn.00402e00
push 0x1b
push str.AdobeAdobe_Desktop_Common
lea ecx, [ebp - 0x260]
call fcn.00402f10
push 4
push str.ADS
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0
call fcn.00402060
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x250]
test ecx, ecx
je 0x4075d5
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4075d5
lea edi, [ecx + 0xb]
mov edx, 2
add edi, eax
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00479701
mov esi, eax
add esp, 4
test esi, esi
je 0x4075d5
cmp dword [ebp - 0x24c], 8
lea ecx, [ebp - 0x260]
cmovae ecx, dword [ebp - 0x260]
push ecx
push edi
push esi
call fcn.0047969d
add esp, 0xc
lea eax, [ebp - 0x2ac]
cmp dword [ebp - 0x298], 8
cmovae eax, dword [ebp - 0x2ac]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, esi
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4075b0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x260]
call fcn.00402e00
push esi
call fcn.00479682
add esp, 4
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x298]
cmp ecx, 8
jb 0x407619
mov edx, dword [ebp - 0x2ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40760f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407bc2
push ecx
push edx
call fcn.00469a08
add esp, 8
push 4
push str.ACC
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0
call fcn.00402060
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x268]
test ecx, ecx
je 0x4076f5
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4076f5
lea edi, [ecx + 0xb]
mov edx, 2
add edi, eax
xor ecx, ecx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00479701
mov esi, eax
add esp, 4
test esi, esi
je 0x4076f5
cmp dword [ebp - 0x264], 8
lea ecx, [ebp - 0x278]
cmovae ecx, dword [ebp - 0x278]
push ecx
push edi
push esi
call fcn.0047969d
add esp, 0xc
lea eax, [ebp - 0x2ac]
cmp dword [ebp - 0x298], 8
cmovae eax, dword [ebp - 0x2ac]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, esi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4076d0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x278]
call fcn.00402e00
push esi
call fcn.00479682
add esp, 4
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x298]
cmp ecx, 8
jb 0x407739
mov edx, dword [ebp - 0x2ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40772f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407bc7
push ecx
push edx
call fcn.00469a08
add esp, 8
xor eax, eax
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], 7
mov word [ebp - 0x290], ax
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 8
test eax, eax
jne 0x4077b6
push 0x21
push str...UtilsCreativeCloudSet_Up.exe
lea ecx, [ebp - 0x290]
call fcn.00402e00
cmp dword [ebp - 0x264], 8
lea eax, [ebp - 0x278]
push dword [ebp - 0x268]
cmovae eax, dword [ebp - 0x278]
jmp 0x4077e7
cmp eax, 1
jne 0x4077f3
push 0x2e
push str...ElevationManagerAdobeServiceInstaller.exe
lea ecx, [ebp - 0x290]
call fcn.00402e00
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
push dword [ebp - 0x250]
cmovae eax, dword [ebp - 0x260]
push eax
lea ecx, [ebp - 0x230]
call fcn.00402e00
push ecx
lea edx, [ebp - 0x290]
lea ecx, [ebp - 0x230]
call fcn.004271a0
add esp, 4
test al, al
je 0x407913
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x407913
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4078b5
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
lea eax, [ebp - 0x230]
cmp ebx, eax
je 0x4078ae
cmp dword [ebp - 0x21c], 8
mov ecx, ebx
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.00402e00
mov bl, 1
jmp 0x407989
mov eax, dword [0x4c8c88]
test eax, eax
jne 0x4078f4
push 0x84
call fcn.004699d8
mov esi, eax
mov dword [ebp - 0x294], esi
push 0x84
push 0
push esi
mov byte [ebp - 4], 0xa
call fcn.0046bbb0
add esp, 0x10
mov ecx, esi
call fcn.00405c80
mov byte [ebp - 4], 8
mov dword [0x4c8c88], eax
cmp dword [ebp - 0x21c], 8
lea ecx, [eax + 4]
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
push str.App_does_not_exist_at_path:
jmp 0x40796f
mov eax, dword [0x4c8c88]
test eax, eax
jne 0x407952
push 0x84
call fcn.004699d8
mov esi, eax
mov dword [ebp - 0x294], esi
push 0x84
push 0
push esi
mov byte [ebp - 4], 9
call fcn.0046bbb0
add esp, 0x10
mov ecx, esi
call fcn.00405c80
mov byte [ebp - 4], 8
mov dword [0x4c8c88], eax
cmp dword [ebp - 0x21c], 8
lea ecx, [eax + 4]
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
push str.Failed_to_detect_App_presence_in_ACC_Location__at_path
mov esi, dword [ecx]
push 0x4aea60
push ecx
mov esi, dword [esi + 0x24]
mov ecx, esi
call dword [0x49e2d4]
call esi
add esp, 0x10
xor bl, bl
mov ecx, dword [ebp - 0x27c]
cmp ecx, 8
jb 0x4079c9
mov edx, dword [ebp - 0x290]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4079bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407bcc
push ecx
push edx
call fcn.00469a08
add esp, 8
mov ecx, dword [ebp - 0x21c]
xor eax, eax
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 7
mov word [ebp - 0x290], ax
cmp ecx, 8
jb 0x407a26
mov edx, dword [ebp - 0x230]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407a1c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407bcc
push ecx
push edx
call fcn.00469a08
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
jmp 0x407aa7
mov eax, dword [0x4c8c88]
test eax, eax
jne 0x407a84
push 0x84
call fcn.004699d8
mov esi, eax
mov dword [ebp - 0x294], esi
push 0x84
push 0
push esi
mov byte [ebp - 4], 3
call fcn.0046bbb0
add esp, 0x10
mov ecx, esi
call fcn.00405c80
mov byte [ebp - 4], 2
mov dword [0x4c8c88], eax
mov ecx, dword [eax + 4]
add eax, 4
push str.Could_not_find_current_runnning_directory_path
push 0x4aea60
push eax
mov esi, dword [ecx + 0x24]
mov ecx, esi
call dword [0x49e2d4]
call esi
add esp, 0xc
xor bl, bl
mov ecx, dword [ebp - 0x234]
cmp ecx, 8
jb 0x407ae7
mov edx, dword [ebp - 0x248]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407add
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407bcc
push ecx
push edx
call fcn.00469a08
add esp, 8
mov ecx, dword [ebp - 0x24c]
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
cmp ecx, 8
jb 0x407b44
mov edx, dword [ebp - 0x260]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407b3a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407bcc
push ecx
push edx
call fcn.00469a08
add esp, 8
mov ecx, dword [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
cmp ecx, 8
jb 0x407b9d
mov edx, dword [ebp - 0x278]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407b93
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407bcc
push ecx
push edx
call fcn.00469a08
add esp, 8
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004699ca
mov esp, ebp
pop ebp
ret 8
call fcn.00479631
call fcn.00479631
call fcn.00479631
call fcn.00479631
int3