Function at 0x41e1bd
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x46e9b4
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4b2d60]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
call fcn.0043f3c0
push eax
lea ecx, [esp + 0x20]
call fcn.004013a1
xor ebx, ebx
mov dword [esp + 0x30], ebx
cmp dword [0x4b77c8], 2
mov esi, dword [0x4b77ac]
jne 0x41e252
cmp esi, ebx
jne 0x41e21d
cmp dword [0x4b7bdc], 0x249f0
jne 0x41e252
push 0x4b78c8
lea ecx, [esp + 0x20]
call fcn.004077b3
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], ebx
jne 0x41e2c7
mov eax, 0x495f38
cmp esi, ebx
jne 0x41e246
mov eax, str.http:__www.adobe.com_go_update_error_win
push eax
lea ecx, [esp + 0x20]
call fcn.00401356
jmp 0x41e2c7
cmp dword [0x4b7868], ebx
jne 0x41e267
mov eax, 0x4b7884
cmp dword [0x4b78bc], ebx
je 0x41e26c
mov eax, 0x4b78cc
push eax
lea ecx, [esp + 0x20]
call fcn.004077b3
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], ebx
jne 0x41e2a1
mov edi, 0x4b77dc
call fcn.00401be2
test eax, eax
mov eax, 0x4b76a4
jne 0x41e297
mov eax, 0x4b76a0
push eax
lea ecx, [esp + 0x20]
call fcn.004077b3
cmp dword [0x4b7868], ebx
je 0x41e2c7
lea eax, [esp + 0x17]
push eax
push ebx
push 0x4771e4
push str.Upgrade_WhatsNew
mov esi, 0x4b76d8
mov byte [esp + 0x27], bl
call fcn.00407812
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x24]
call fcn.00401326
mov esi, dword [ebp + 8]
lea eax, [esp + 0x20]
add esi, 0x58
push eax
mov ecx, esi
mov byte [esp + 0x34], 1
call fcn.004077b3
mov byte [esp + 0x30], bl
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004017df
push 0x478d20
lea ecx, [esp + 0x1c]
call fcn.004012e2
push 1
push ebx
push ebx
mov byte [esp + 0x3c], 2
mov eax, dword [esi]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edi, eax
cmp edi, 0x21
jge 0x41e3f2
sub eax, ebx
je 0x41e380
dec eax
dec eax
je 0x41e372
dec eax
je 0x41e36b
dec eax
dec eax
je 0x41e380
sub eax, 3
je 0x41e364
sub eax, 0x12
je 0x41e35d
sub eax, 6
lea ecx, [esp + 0x18]
je 0x41e356
push str.All_other_non_caught_scenarios
jmp 0x41e37b
push str.The_specified_DLL_was_not_found.
jmp 0x41e37b
push str.A_sharing_violation_occurred.
jmp 0x41e377
push str.There_was_not_enough_memory_to_complete_the_operation.
jmp 0x41e377
push str.The_specified_path_was_not_found.
jmp 0x41e377
push str.The_specified_file_was_not_found.
lea ecx, [esp + 0x1c]
call fcn.00401356
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x41e3f2
push str.Failed_to_navigate_to_URL:
lea ecx, [esp + 0x24]
call fcn.004012e2
push edi
push esi
lea eax, [esp + 0x28]
push eax
push 1
mov byte [esp + 0x40], 3
call fcn.00411336
mov byte [esp + 0x40], 2
mov ecx, dword [esp + 0x30]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017df
push str.___Error_message:
lea ecx, [esp + 0x24]
call fcn.004012e2
push ebx
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
push 1
mov byte [esp + 0x40], 4
call fcn.00411336
mov ecx, dword [esp + 0x30]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017df
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004017df
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.004017df
xor eax, eax
inc eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4