Function at 0x433210
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x557768
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
push edi
mov eax, dword [0x5c7cec]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x14], edi
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
lea esi, [edi + 0x10]
mov dword [edi], vtable.acrobat_broker::ExecProcessDispatcher.0
mov ecx, esi
mov dword [ebp - 4], 0
mov dword [ebp - 0x18], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004068f0
mov dword [esi], eax
push 0
push 0
mov byte [ebp - 4], 1
mov dword [edi + 0x30], 0
mov dword [ebp - 0x28], 0x46a440
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
call fcn.0040f7b0
movups xmm0, xmmword [ebp - 0x28]
movzx eax, al
lea ecx, [edi + 0x38]
push eax
push 0x469ed0
sub esp, 0x10
mov eax, esp
push 0x463b50
movups xmmword [eax], xmm0
call fcn.00433810
push 1
push 1
push 0
push 0
sub esp, 0x10
mov dword [ebp - 0x28], fcn.00442800
mov eax, esp
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
lea ecx, [edi + 0x440]
mov dword [ebp - 0x1c], 0
movups xmm0, xmmword [ebp - 0x28]
push 0x4f2ea0
movups xmmword [eax], xmm0
call fcn.00433810
mov eax, dword [ebp + 8]
mov dword [edi + 0x848], eax
mov dword [edi + 0x84c], 0
mov dword [edi + 0x850], 0
mov dword [edi + 0x854], 0
lea esi, [edi + 0x85c]
mov word [edi + 0x858], 0
lea eax, [esi + 4]
mov byte [ebp - 4], 4
push eax
mov dword [esi], vtable.REKaizenStubWorkflow::CDownloadStatusCallback.0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [edi + 0x18]
mov byte [ebp - 4], 5
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [esi]
push dword [0x5cb420]
push esi
mov esi, dword [eax + 0x3c]
mov ecx, esi
call dword [0x5677a4]
call esi
mov edi, dword [0x5ccda4]
lea esi, [edi + 4]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [edi + 0x5d]
mov byte [ebp - 0xd], al
push esi
mov byte [ebp - 4], 6
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 0xd], 0
mov byte [ebp - 4], 5
je 0x4333f7
mov edi, dword [0x5ccda4]
lea esi, [edi + 4]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [edi + 0x39]
mov byte [ebp - 0xd], al
push esi
mov byte [ebp - 4], 7
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 0xd], 0
mov byte [ebp - 4], 5
je 0x4333f7
mov al, 1
jmp 0x4333f9
xor al, al
mov edi, dword [ebp - 0x14]
mov byte [edi + 0x858], al
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x433450
movups xmm0, xmmword [0x596cf8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596d08]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596d18]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596d28]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596d38]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596d40]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43345e
push 0x596cf8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4334ac
movups xmm0, xmmword [0x596d48]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596d58]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596d68]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596d78]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596d88]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596d90]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4334ba
push 0x596d48
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x433508
movups xmm0, xmmword [0x596d98]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596da8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596db8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596dc8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596dd8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596de0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x433516
push 0x596d98
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x433564
movups xmm0, xmmword [0x596de8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596df8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596e08]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596e18]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596e28]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596e30]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x433572
push 0x596de8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4335c0
movups xmm0, xmmword [0x596e38]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596e48]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596e58]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596e68]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596e78]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596e80]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4335ce
push 0x596e38
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x43361c
movups xmm0, xmmword [0x596e88]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596e98]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596ea8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596eb8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596ec8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596ed0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43362a
push 0x596e88
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x433678
movups xmm0, xmmword [0x596ed8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596ee8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596ef8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596f08]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596f18]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596f20]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x433686
push 0x596ed8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4336d4
movups xmm0, xmmword [0x596f28]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596f38]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596f48]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596f58]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596f68]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596f70]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4336e2
push 0x596f28
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x433730
movups xmm0, xmmword [0x596f78]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596f88]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596f98]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596fa8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x596fb8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x596fc0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43373e
push 0x596f78
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x43378c
movups xmm0, xmmword [0x596fc8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x596fd8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x596fe8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x596ff8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x597008]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x597010]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43379a
push 0x596fc8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4337e8
movups xmm0, xmmword [0x597018]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x597028]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x597038]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x597048]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x597058]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x597060]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4337f6
push 0x597018
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4