Function at 0x43c310
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59c9ac
mov eax, dword fs:[0]
push eax
sub esp, 0xabc
mov eax, dword [0x62cf50]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x80], ebx
lea esi, [ebx + 0x28]
push esi
mov dword [ebp - 0x48], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x1e
xor eax, eax
mov dword [ebp - 4], 0
push str.https:__acrobatoauth.adobe.com
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x37c], 7
mov word [ebp - 0x390], ax
call fcn.00409db0
push 0x24
xor eax, eax
mov byte [ebp - 4], 1
push str.https_3a_2f_2facrobatoauth.adobe.com
lea ecx, [ebp - 0x378]
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 7
mov word [ebp - 0x378], ax
call fcn.00409db0
push 0x1f
xor eax, eax
mov byte [ebp - 4], 2
push str.https:__acrobatoauth.adobe.com_
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x34c], 7
mov word [ebp - 0x360], ax
call fcn.00409db0
push 0x27
xor eax, eax
mov byte [ebp - 4], 3
push str.https_3a_2f_2facrobatoauth.adobe.com_2f
lea ecx, [ebp - 0x348]
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 7
mov word [ebp - 0x348], ax
call fcn.00409db0
push 0x16
xor eax, eax
mov byte [ebp - 4], 4
push str.https:__oobe.adobe.com
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 7
mov word [ebp - 0x330], ax
call fcn.00409db0
push 0x17
xor eax, eax
mov byte [ebp - 4], 5
push str.https:__oobe.adobe.com_
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x304], 7
mov word [ebp - 0x318], ax
call fcn.00409db0
push 0x1c
xor eax, eax
mov byte [ebp - 4], 6
push str.https_3a_2f_2foobe.adobe.com
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 7
mov word [ebp - 0x300], ax
call fcn.00409db0
xor eax, eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 7
mov word [ebp - 0x2e8], ax
push 0x1d
push str.https_3a_2f_2foobe.adobe.com_
lea ecx, [ebp - 0x2e8]
call fcn.00409db0
push 0xc
xor eax, eax
mov byte [ebp - 4], 8
push str.redirect_uri
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
lea edi, [ebx + 0x18]
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x2d0]
push ecx
lea ecx, [ebp - 0x390]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0xa
cmp eax, 8
jb 0x43c567
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 8
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x390]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 0xc
xor eax, eax
mov dword [ebp - 0x158], 0
push str.adobereader5
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x154], 7
mov word [ebp - 0x168], ax
call fcn.00409db0
push 0xc
xor eax, eax
mov byte [ebp - 4], 0xb
push str.adobereader9
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x150], ax
call fcn.00409db0
push 0xd
xor eax, eax
mov byte [ebp - 4], 0xc
push str.adobeacrobat5
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
call fcn.00409db0
push 0xd
xor eax, eax
mov byte [ebp - 4], 0xd
push str.adobeacrobat9
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 7
mov word [ebp - 0x120], ax
call fcn.00409db0
push 9
xor eax, eax
mov byte [ebp - 4], 0xe
push str.client_id
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0x168]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
cmp eax, 8
mov byte [ebp - 4], 0x10
jb 0x43c6d4
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 4
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x168]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 6
xor eax, eax
mov dword [ebp - 0x34], 0
push str.ctx_id
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
mov ecx, eax
push 0
push 0
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x12
cmp eax, 8
jb 0x43c76b
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push 0xe
xor eax, eax
mov byte [ebp - 4], 0
push str.create_account
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
call fcn.00409db0
push 8
xor eax, eax
mov byte [ebp - 4], 0x13
push str.login_t2
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
call fcn.00409db0
push 8
xor eax, eax
mov byte [ebp - 4], 0x14
push str.idp_flow
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x16
cmp eax, 8
jb 0x43c82c
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 2
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x7c]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 4
xor eax, eax
mov dword [ebp - 0x18], 0
push str.true
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.00409db0
push 2
xor eax, eax
mov byte [ebp - 4], 0x17
push 0x5e2e5c
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x19
cmp eax, 8
jb 0x43c8eb
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 1
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x28]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 6
xor eax, eax
mov dword [ebp - 0x18], 0
push str.device
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.00409db0
push 0xd
xor eax, eax
mov byte [ebp - 4], 0x1a
push str.response_type
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x1c
cmp eax, 8
jb 0x43c9aa
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 1
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x28]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 0xb7
xor eax, eax
mov dword [ebp - 0x6c], 0
push str.AdobeID__openid__skybox__sign_user_login__agreement_read__agreement_write__agreement_sign__sign_user_read__DCAPI__ab.manage__additional_info.projectedProductContext__dim.core.services
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
call fcn.00409db0
push 0xe3
xor eax, eax
mov byte [ebp - 4], 0x1d
push str.adobeid_2c_20openid_2c_20skybox_2c_20sign_user_login_2c_20agreement_read_2c_20agreement_write_2c_20agreement_sign_2c_20sign_user_read_2c_20dcapi_2c_20ab.manage_2c_20additional_info.projectedproductcontext_2c_20dim.core.services
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
call fcn.00409db0
push 5
xor eax, eax
mov byte [ebp - 4], 0x1e
push str.scope
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x20
cmp eax, 8
jb 0x43ca96
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 2
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x7c]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 0x1c
xor eax, eax
mov dword [ebp - 0x158], 0
push str.acrobat_reader_dc_on_windows
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x154], 7
mov word [ebp - 0x168], ax
call fcn.00409db0
push 0x24
xor eax, eax
mov byte [ebp - 4], 0x21
push str.acrobat_20reader_20dc_20on_20windows
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x150], ax
call fcn.00409db0
push 0x1b
xor eax, eax
mov byte [ebp - 4], 0x22
push str.acrobat_20dc_20on_20windows
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
call fcn.00409db0
push 0x15
xor eax, eax
mov byte [ebp - 4], 0x23
push str.acrobat_dc_on_windows
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 7
mov word [ebp - 0x120], ax
call fcn.00409db0
push 0xb
xor eax, eax
mov byte [ebp - 4], 0x24
push str.device_name
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0x168]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
cmp eax, 8
mov byte [ebp - 4], 0x26
jb 0x43cc00
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 4
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x168]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 5
xor eax, eax
mov dword [ebp - 0x18], 0
push str.false
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.00409db0
push 2
xor eax, eax
mov byte [ebp - 4], 0x27
push 0x5e32e8
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x29
cmp eax, 8
jb 0x43ccc2
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 1
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x28]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 4
xor eax, eax
mov dword [ebp - 0x18], 0
push str.true
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.00409db0
push 2
xor eax, eax
mov byte [ebp - 4], 0x2a
push 0x5e32fc
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00409db0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov ecx, edi
call fcn.0043fc90
mov ecx, eax
call fcn.0043fd90
push dword [ebp - 0x48]
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0043fef0
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0x2c
cmp eax, 8
jb 0x43cd81
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.0040a5e0
push fcn.0040a580
xor eax, eax
mov dword [ebp - 0x34], 0
push 1
mov word [ebp - 0x44], ax
mov byte [ebp - 4], al
lea eax, [ebp - 0x28]
push 0x18
push eax
mov dword [ebp - 0x30], 7
call fcn.00440124
push 5
xor eax, eax
mov dword [ebp - 0x18], 0
push str.force
lea ecx, [ebp - 0x28]
invalid
inc ebp