Function at 0x41d35e
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x46a55a
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4add60]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
call fcn.0043ce9a
push eax
lea ecx, [esp + 0x20]
call fcn.00413a25
xor ebx, ebx
mov dword [esp + 0x30], ebx
cmp dword [0x4b27c8], 2
mov esi, dword [0x4b27ac]
jne 0x41d3f3
cmp esi, ebx
jne 0x41d3be
cmp dword [0x4b2bb0], 0x249f0
jne 0x41d3f3
push 0x4b28c8
lea ecx, [esp + 0x20]
call fcn.00406b64
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], ebx
jne 0x41d468
mov eax, 0x491998
cmp esi, ebx
jne 0x41d3e7
mov eax, str.http:__www.adobe.com_go_update_error_win
push eax
lea ecx, [esp + 0x20]
call fcn.00401356
jmp 0x41d468
cmp dword [0x4b2868], ebx
jne 0x41d408
mov eax, 0x4b2884
cmp dword [0x4b28bc], ebx
je 0x41d40d
mov eax, 0x4b28cc
push eax
lea ecx, [esp + 0x20]
call fcn.00406b64
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], ebx
jne 0x41d442
mov edi, 0x4b27dc
call fcn.00401baa
test eax, eax
mov eax, 0x4b26a4
jne 0x41d438
mov eax, 0x4b26a0
push eax
lea ecx, [esp + 0x20]
call fcn.00406b64
cmp dword [0x4b2868], ebx
je 0x41d468
lea eax, [esp + 0x17]
push eax
push ebx
push 0x4731d4
push str.Upgrade_WhatsNew
mov esi, 0x4b26d8
mov byte [esp + 0x27], bl
call fcn.00406bc3
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x24]
call fcn.00401326
mov esi, dword [ebp + 8]
lea eax, [esp + 0x20]
add esi, 0x58
push eax
mov ecx, esi
mov byte [esp + 0x34], 1
call fcn.00406b64
mov byte [esp + 0x30], bl
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004017ba
push 0x4748e0
lea ecx, [esp + 0x1c]
call fcn.004012e2
push 1
push ebx
push ebx
mov byte [esp + 0x3c], 2
mov eax, dword [esi]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edi, eax
cmp edi, 0x21
jge 0x41d593
sub eax, ebx
je 0x41d521
dec eax
dec eax
je 0x41d513
dec eax
je 0x41d50c
dec eax
dec eax
je 0x41d521
sub eax, 3
je 0x41d505
sub eax, 0x12
je 0x41d4fe
sub eax, 6
lea ecx, [esp + 0x18]
je 0x41d4f7
push str.All_other_non_caught_scenarios
jmp 0x41d51c
push str.The_specified_DLL_was_not_found.
jmp 0x41d51c
push str.A_sharing_violation_occurred.
jmp 0x41d518
push str.There_was_not_enough_memory_to_complete_the_operation.
jmp 0x41d518
push str.The_specified_path_was_not_found.
jmp 0x41d518
push str.The_specified_file_was_not_found.
lea ecx, [esp + 0x1c]
call fcn.00401356
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x41d593
push str.Failed_to_navigate_to_URL:
lea ecx, [esp + 0x24]
call fcn.004012e2
push edi
push esi
lea eax, [esp + 0x28]
push eax
push 1
mov byte [esp + 0x40], 3
call fcn.00410886
mov byte [esp + 0x40], 2
mov ecx, dword [esp + 0x30]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
push str.___Error_message:
lea ecx, [esp + 0x24]
call fcn.004012e2
push ebx
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
push 1
mov byte [esp + 0x40], 4
call fcn.00410886
mov ecx, dword [esp + 0x30]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.004017ba
xor eax, eax
inc eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4