Function at 0x436e90
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50a6d2
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x553948]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x54], ebx
push 0x13
xor eax, eax
mov edi, 7
push 0x5177a4
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
call fcn.004063e0
xor ecx, ecx
push 0x3b
mov word [ebp - 0x2c], cx
push str.SoftwarePoliciesAdobeAcrobat_Reader11.0FeatureLockDown
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
call fcn.004063e0
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 0x80000002
mov dword [ebp - 4], 1
mov dword [ebp - 0x54], 3
call fcn.00410270
add esp, 0x10
test al, al
je 0x436f3f
mov byte [ebp - 0x49], 1
cmp dword [ebp - 0x50], ebx
jne 0x436f43
mov byte [ebp - 0x49], 0
mov ebx, 8
cmp dword [ebp - 0x18], ebx
jb 0x436f59
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00406fa9
add esp, 4
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], ebx
jb 0x436f81
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00406fa9
add esp, 4
push 0x29
push 0x4fd850
push 2
push 0x531358
xor edx, edx
push str.Crypt32.dll
mov ecx, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], dx
call fcn.004365c0
test al, al
je 0x437697
push 0x2a
push 0x4feb40
push 2
push 0x531328
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x2b
push 0x41d9b0
push 2
push 0x531310
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x2c
push 0x4fed50
push 2
push 0x5312fc
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x2d
push 0x4fee70
push 2
push 0x5312ec
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x2e
push 0x4ff040
push 2
push 0x5312dc
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x2f
push 0x4ff160
push 2
push 0x5312c8
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x30
push 0x4ff290
push 2
push 0x5312b4
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x31
push 0x41e7f0
push 2
push 0x5312a4
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
cmp byte [ebp - 0x49], 0
mov al, 1
jne 0x437699
push 0x35
push 0x4ff5a0
push 2
push 0x53128c
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x36
push 0x501ba0
push 2
push 0x531270
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x37
push 0x4ff730
push 2
push 0x531250
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x38
push 0x4ff840
push 2
push 0x531230
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x39
push 0x4ff9c0
push 2
push 0x53120c
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x3a
push 0x4ffb50
push 2
push 0x5311fc
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x3b
push 0x4ffcd0
push 2
push 0x5311e0
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x3c
push 0x4ffe40
push 2
push 0x5311bc
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x3d
push 0x4fffc0
push 2
push 0x531198
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x3e
push 0x5001b0
push 2
push 0x53117c
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x3f
push 0x5003a0
push 2
push 0x531164
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x40
push 0x500530
push 2
push 0x531148
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x41
push 0x5006a0
push 2
push 0x531138
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x42
push 0x500ca0
push 2
push 0x531124
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x43
push 0x5007c0
push 2
push 0x531110
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x44
push 0x500940
push 2
push 0x5310fc
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x45
push 0x500ab0
push 2
push 0x5310ec
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x46
push 0x500dd0
push 2
push 0x5310c8
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x47
push 0x501080
push 2
push 0x5310b0
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x48
push 0x501210
push 2
push 0x5310a0
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x49
push 0x501370
push 2
push 0x53108c
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x4a
push 0x5014d0
push 2
push 0x531074
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x4b
push 0x501610
push 2
push 0x53105c
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x4c
push 0x5017d0
push 2
push 0x53104c
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x4d
push 0x41eb30
push 2
push 0x531038
push str.Crypt32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x32
push 0x4ff410
push 2
push 0x531028
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x33
push 0x501a30
push 2
push 0x531018
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x34
push 0x501910
push 2
push 0x531004
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x4e
push 0x501dc0
push 2
push 0x530ff4
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x4f
push 0x501f90
push 2
push 0x530fe4
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x50
push 0x5020b0
push 2
push 0x530fd0
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x51
push 0x5021d0
push 2
push 0x530fc0
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x52
push 0x502320
push 2
push 0x530fb0
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x53
push 0x502470
push 2
push 0x530f9c
push str.Advapi32.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x54
push 0x5025d0
push 2
push 0x530f80
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x55
push 0x5026f0
push 2
push 0x530f54
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x56
push 0x502860
push 2
push 0x530f40
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x57
push 0x5029b0
push 2
push 0x530f30
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x58
push 0x502af0
push 2
push 0x530f20
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x59
push 0x502c80
push 2
push 0x530f10
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x5a
push 0x502f10
push 2
push 0x530ef8
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x5b
push 0x503060
push 2
push 0x530ee8
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x5c
push 0x5031f0
push 2
push 0x530ed8
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
push 0x5d
push 0x503390
push 2
push 0x530ec4
push str.Ncrypt.dll
mov ecx, esi
call fcn.004365c0
test al, al
je 0x437697
mov al, 1
jmp 0x437699
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401316
mov esp, ebp
pop ebp
ret