Function at 0x434720
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe6c
mov eax, dword [0x66c214]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push str.Thread_PerformSelfUpdate_...
push 0
push 4
push str.AGSService
push dword [0x679bb8]
call fcn.00496770
push 0x44
lea eax, [ebp - 0xe68]
push 0
push eax
call fcn.00579420
push 0x200
lea eax, [ebp - 0x608]
mov dword [ebp - 0xe68], 0x44
xorps xmm0, xmm0
push 0
push eax
movups xmmword [ebp - 0xe1c], xmm0
call fcn.00579420
push 0x200
lea eax, [ebp - 0x208]
push 0
push eax
call fcn.00579420
push 0x200
lea eax, [ebp - 0x408]
push 0
push eax
call fcn.00579420
add esp, 0x44
lea eax, [ebp - 0x608]
push 1
push eax
call fcn.00443520
add esp, 8
lea eax, [ebp - 0xe0c]
mov esi, 0x104
lea ecx, [ebp - 0x608]
mov edx, esi
push eax
call fcn.004429a0
test eax, eax
js 0x4347fb
push ecx
push str.AdobeGCClient_agshelper.exe
push ecx
mov edx, esi
lea ecx, [ebp - 0x608]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
lea eax, [ebp - 0x408]
push 1
push eax
call fcn.00443520
add esp, 8
lea eax, [ebp - 0xe0c]
mov edx, esi
lea ecx, [ebp - 0x408]
push eax
call fcn.004429a0
test eax, eax
js 0x434844
push ecx
push str.AdobeGCClient
push ecx
mov edx, esi
lea ecx, [ebp - 0x408]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
push 1
push 0x63eedc
lea eax, [ebp - 0x208]
push 0x104
push eax
call fcn.0058e951
add esp, 0x10
lea eax, [ebp - 0xe0c]
mov edx, esi
lea ecx, [ebp - 0x208]
push eax
call fcn.004429a0
test eax, eax
js 0x434899
push ecx
lea eax, [ebp - 0x608]
mov edx, esi
sub edx, dword [ebp - 0xe0c]
push eax
push ecx
lea ecx, [ebp - 0x208]
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.004429a0
test eax, eax
js 0x4348d1
push ecx
push 0x63eedc
push ecx
mov edx, esi
lea ecx, [ebp - 0x208]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.004429a0
test eax, eax
js 0x434909
push ecx
push 0x63eeac
push ecx
mov edx, esi
lea ecx, [ebp - 0x208]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.004429a0
test eax, eax
js 0x434941
push ecx
push 0x63eedc
push ecx
mov edx, esi
lea ecx, [ebp - 0x208]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.004429a0
test eax, eax
js 0x43497b
push ecx
lea eax, [ebp - 0x408]
mov edx, esi
sub edx, dword [ebp - 0xe0c]
push eax
push ecx
lea ecx, [ebp - 0x208]
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.004429a0
test eax, eax
js 0x4349b3
push ecx
push str._temp
push ecx
mov edx, esi
lea ecx, [ebp - 0x208]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.004429a0
test eax, eax
js 0x4349eb
sub esi, dword [ebp - 0xe0c]
push ecx
push 0x63eedc
push ecx
lea ecx, [ebp - 0x208]
mov edx, esi
add ecx, dword [ebp - 0xe0c]
call fcn.004429f0
push 0x400
lea eax, [ebp - 0xe08]
push 0
push eax
call fcn.00579420
push 0x400
lea eax, [ebp - 0xa08]
push 0
push eax
call fcn.00579420
lea ecx, [ebp - 0x208]
add esp, 0x18
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x434a20
sub ecx, edx
lea eax, [ebp - 0x208]
push ecx
push eax
lea eax, [ebp - 0xe08]
push eax
call fcn.0058d0cb
lea ecx, [ebp - 0x408]
add esp, 0xc
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x434a50
sub ecx, edx
lea eax, [ebp - 0x408]
push ecx
push eax
lea eax, [ebp - 0xa08]
push eax
call fcn.0058d0cb
add esp, 0xc
lea eax, [ebp - 0xe1c]
push eax
lea eax, [ebp - 0xe68]
push eax
lea eax, [ebp - 0xa08]
push eax
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xe08]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x434ab7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x208]
push eax
push str.Launch_Failed__s_d
jmp 0x434aca
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x208]
push eax
push str.Launched__s_d
push 0
push 4
push str.AGSService
push dword [0x679bb8]
call fcn.00496770
mov ecx, dword [ebp - 4]
add esp, 0x1c
xor ecx, ebp
pop esi
call fcn.00562e44
mov esp, ebp
pop ebp
ret