Function at 0x432990
Capabilities:
Create a process with modified i/o handles and window
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5539c0
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x59de30]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 4], 0
push str.Invoking_GC_client_completed
push 0
push 4
push str.AdobeGCUpdaterIC
push dword [esi + 4]
call fcn.0044d8e0
xor ebx, ebx
xor eax, eax
add esp, 0x14
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], ebx
mov word [ebp - 0x5c], ax
mov byte [ebp - 4], 2
cmp dword [ebp + 0x1c], eax
je 0x432d34
cmp dword [ebp + 0x34], eax
je 0x432d34
push 0x557600
lea ecx, [ebp - 0x2c]
call fcn.00405af0
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x44], bl
mov byte [ebp - 4], 4
lea eax, [ebp - 0x44]
mov ecx, esi
cmp byte [ebp + 8], bl
je 0x432a34
push 1
jmp 0x432a36
push 0
push eax
call fcn.00427ac0
cmp dword [ebp - 0x34], 0
je 0x432ce0
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.00404340
mov edi, eax
add esp, 4
cmp word [edi], 0
jne 0x432a66
xor ecx, ecx
jmp 0x432a7f
mov ecx, edi
lea edx, [ecx + 2]
jmp 0x432a70
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432a70
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00403ad0
push edi
call fcn.004dbc6f
add esp, 4
lea ecx, [ebp - 0x2c]
push 1
push 0x57e068
call fcn.00403ad0
push str.__xmlFilePath
call fcn.00404340
mov edi, eax
add esp, 4
cmp word [edi], 0
jne 0x432aba
xor ecx, ecx
jmp 0x432acf
mov ecx, edi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432ac0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00403ad0
push edi
call fcn.004dbc6f
add esp, 4
cmp dword [ebp + 0x20], 0x10
lea eax, [ebp + 0xc]
cmovae eax, dword [ebp + 0xc]
push eax
call fcn.00404340
add esp, 4
lea ecx, [ebp - 0x2c]
push 1
push 0x57dc88
mov edi, eax
call fcn.00403ad0
cmp word [edi], 0
jne 0x432b11
xor ecx, ecx
jmp 0x432b25
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432b16
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00403ad0
push 1
push 0x57dc88
lea ecx, [ebp - 0x2c]
call fcn.00403ad0
push edi
call fcn.004dbc6f
add esp, 4
lea ecx, [ebp - 0x2c]
push 1
push 0x57e068
call fcn.00403ad0
push str.__workflowInitiator
call fcn.00404340
mov edi, eax
add esp, 4
cmp word [edi], 0
jne 0x432b6f
xor ecx, ecx
jmp 0x432b83
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432b74
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00403ad0
push edi
call fcn.004dbc6f
add esp, 4
cmp dword [ebp + 0x38], 0x10
lea eax, [ebp + 0x24]
cmovae eax, dword [ebp + 0x24]
push eax
call fcn.00404340
mov edi, eax
add esp, 4
cmp word [edi], 0
jne 0x432bb6
xor ecx, ecx
jmp 0x432bcf
mov ecx, edi
lea edx, [ecx + 2]
jmp 0x432bc0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432bc0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00403ad0
push edi
call fcn.004dbc6f
add esp, 4
mov dword [ebp - 0x60], 0xf
mov dword [ebp - 0x64], 0
mov byte [ebp - 0x74], 0
mov byte [ebp - 4], 5
mov eax, dword [esi + 0xc]
mov ecx, esi
cmp dword [eax], 1
lea eax, [ebp - 0x74]
jne 0x432c09
push 1
jmp 0x432c0b
push 0
push eax
call fcn.00427c10
cmp dword [ebp - 0x60], 0x10
lea eax, [ebp - 0x74]
cmovae eax, dword [ebp - 0x74]
push eax
call fcn.00404340
mov edi, eax
add esp, 4
cmp word [edi], 0
jne 0x432c31
xor ecx, ecx
jmp 0x432c45
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432c36
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.00403d70
push edi
call fcn.004dbc6f
add esp, 4
lea eax, [ebp - 0xbc]
push 0x44
push 0
push eax
call fcn.004de2a0
add esp, 0xc
cmp dword [ebp - 0x48], 8
lea edx, [ebp - 0xcc]
push edx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x18], 8
push eax
push 0
push 0x8000000
push 0
push 0
lea ecx, [ebp - 0x2c]
cmovae ecx, dword [ebp - 0x2c]
push 0
xorps xmm0, xmm0
push ecx
push 0
mov dword [ebp - 0xbc], 0x44
movq qword [ebp - 0xcc], xmm0
movq qword [ebp - 0xc4], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
mov ecx, 0x109
cmove ebx, ecx
cmp dword [ebp - 0x60], 0x10
jb 0x432cfe
push dword [ebp - 0x74]
call fcn.004daf24
add esp, 4
jmp 0x432cfe
push str.GC_client_not_found__
push 0
push 2
push str.AdobeGCUpdaterIC
push dword [esi + 4]
call fcn.0044d8e0
add esp, 0x14
mov ebx, 0x103
cmp dword [ebp - 0x30], 0x10
jb 0x432d0f
push dword [ebp - 0x44]
call fcn.004daf24
add esp, 4
cmp dword [ebp - 0x18], 8
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x44], 0
jb 0x432d52
push dword [ebp - 0x2c]
call fcn.004daf24
add esp, 4
jmp 0x432d52
push str.Invalid_params
push 0
push 5
push str.AdobeGCUpdaterIC
push dword [esi + 4]
call fcn.0044d8e0
add esp, 0x14
mov ebx, 0x101
push str.Invoking_GC_client_completed
push 0
push 4
push str.AdobeGCUpdaterIC
push dword [esi + 4]
call fcn.0044d8e0
add esp, 0x14
cmp dword [ebp - 0x48], 8
jb 0x432d7c
push dword [ebp - 0x5c]
call fcn.004daf24
add esp, 4
xor eax, eax
cmp dword [ebp + 0x20], 0x10
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], 0
mov word [ebp - 0x5c], ax
jb 0x432da1
push dword [ebp + 0xc]
call fcn.004daf24
add esp, 4
cmp dword [ebp + 0x38], 0x10
mov dword [ebp + 0x20], 0xf
mov dword [ebp + 0x1c], 0
mov byte [ebp + 0xc], 0
jb 0x432dc4
push dword [ebp + 0x24]
call fcn.004daf24
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004da4c1
mov esp, ebp
pop ebp
ret 0x34