Function at 0x44e5e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe6c
mov eax, dword [0x5df3f4]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push str.Thread_PerformSelfUpdate_...
push 0
push 4
push str.AGSService
push dword [0x5efb48]
call fcn.004a7700
push 0x44
lea eax, [ebp - 0xe68]
push 0
push eax
call fcn.00510680
push 0x200
lea eax, [ebp - 0x608]
mov dword [ebp - 0xe68], 0x44
xorps xmm0, xmm0
push 0
push eax
movups xmmword [ebp - 0xe1c], xmm0
call fcn.00510680
push 0x200
lea eax, [ebp - 0x208]
push 0
push eax
call fcn.00510680
push 0x200
lea eax, [ebp - 0x408]
push 0
push eax
call fcn.00510680
add esp, 0x44
lea eax, [ebp - 0x608]
push 1
push eax
call fcn.0045bd10
add esp, 4
lea eax, [ebp - 0xe0c]
mov esi, 0x104
lea ecx, [ebp - 0x608]
mov edx, esi
push eax
call fcn.0045ae80
test eax, eax
js 0x44e6bb
push ecx
push str.AdobeGCClient_agshelper.exe
push ecx
mov edx, esi
lea ecx, [ebp - 0x608]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
lea eax, [ebp - 0x408]
push 1
push eax
call fcn.0045bd10
add esp, 4
lea eax, [ebp - 0xe0c]
mov edx, esi
lea ecx, [ebp - 0x408]
push eax
call fcn.0045ae80
test eax, eax
js 0x44e704
push ecx
push str.AdobeGCClient
push ecx
mov edx, esi
lea ecx, [ebp - 0x408]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
push 1
push 0x5b404c
lea eax, [ebp - 0x208]
push 0x104
push eax
call fcn.00525541
add esp, 0xc
lea eax, [ebp - 0xe0c]
mov edx, esi
lea ecx, [ebp - 0x208]
push eax
call fcn.0045ae80
test eax, eax
js 0x44e759
push ecx
lea eax, [ebp - 0x608]
mov edx, esi
sub edx, dword [ebp - 0xe0c]
push eax
push ecx
lea ecx, [ebp - 0x208]
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
push ecx
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.0045ae80
test eax, eax
js 0x44e792
push ecx
push 0x5b404c
push ecx
mov edx, esi
lea ecx, [ebp - 0x208]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
push ecx
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.0045ae80
test eax, eax
js 0x44e7cb
push ecx
push 0x5b401c
push ecx
mov edx, esi
lea ecx, [ebp - 0x208]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
push ecx
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.0045ae80
test eax, eax
js 0x44e804
push ecx
push 0x5b404c
push ecx
mov edx, esi
lea ecx, [ebp - 0x208]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
push ecx
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.0045ae80
test eax, eax
js 0x44e83f
push ecx
lea eax, [ebp - 0x408]
mov edx, esi
sub edx, dword [ebp - 0xe0c]
push eax
push ecx
lea ecx, [ebp - 0x208]
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
push ecx
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.0045ae80
test eax, eax
js 0x44e878
push ecx
push str._temp
push ecx
mov edx, esi
lea ecx, [ebp - 0x208]
sub edx, dword [ebp - 0xe0c]
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
push ecx
lea eax, [ebp - 0xe0c]
mov edx, esi
push eax
lea ecx, [ebp - 0x208]
call fcn.0045ae80
test eax, eax
js 0x44e8b1
sub esi, dword [ebp - 0xe0c]
push ecx
push 0x5b404c
push ecx
lea ecx, [ebp - 0x208]
mov edx, esi
add ecx, dword [ebp - 0xe0c]
call fcn.0045aef0
push 0x400
lea eax, [ebp - 0xe08]
push 0
push eax
call fcn.00510680
push 0x400
lea eax, [ebp - 0xa08]
push 0
push eax
call fcn.00510680
lea ecx, [ebp - 0x208]
add esp, 0x18
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44e8e3
sub ecx, edx
lea eax, [ebp - 0x208]
push ecx
push eax
lea eax, [ebp - 0xe08]
push eax
call fcn.0052411b
lea ecx, [ebp - 0x408]
add esp, 0xc
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44e910
sub ecx, edx
lea eax, [ebp - 0x408]
push ecx
push eax
lea eax, [ebp - 0xa08]
push eax
call fcn.0052411b
add esp, 0xc
lea eax, [ebp - 0xe1c]
push eax
lea eax, [ebp - 0xe68]
push eax
lea eax, [ebp - 0xa08]
push eax
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xe08]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x44e977
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x208]
push eax
push str.Launch_Failed__s_d
jmp 0x44e98a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x208]
push eax
push str.Launched__s_d
push 0
push 4
push str.AGSService
push dword [0x5efb48]
call fcn.004a7700
mov ecx, dword [ebp - 4]
add esp, 0x1c
xor ecx, ebp
pop esi
call fcn.0050ad85
mov esp, ebp
pop ebp
ret