Function at 0x10033336
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10082f47
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x100b02c0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov edi, ecx
call fcn.1001a54d
mov esi, eax
call fcn.1001aba4
mov byte [esp + 0x13], al
mov eax, dword [0x100b27b4]
mov ecx, 0x100b27b4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
xor ebx, ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x14], str.track_encapsulated_offer_download_started
cmp byte [esp + 0x13], bl
jne 0x100333a4
mov dword [esp + 0x14], str.track_offer_download_started
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [esp + 0x24]
push eax
call fcn.1000724e
pop ecx
pop ecx
mov esi, eax
lea eax, [esp + 0x1c]
push eax
push ecx
mov byte [esp + 0x38], 1
call fcn.1001a54d
pop ecx
push eax
call fcn.1001fc4d
mov byte [esp + 0x30], 2
push dword [esi]
push dword [eax]
lea eax, [esp + 0x20]
push dword [esp + 0x1c]
push str._track__method__s__method__mstime__s__mstime__offerid__s__offerid___track_
call fcn.1000261c
mov eax, dword [esp + 0x2c]
add esp, 0x10
add eax, 0xfffffff0
call fcn.10002b29
mov byte [esp + 0x30], bl
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
call fcn.10002b29
mov eax, dword [esp + 0x18]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov esi, esp
mov dword [esp + 0x20], eax
call fcn.10002aac
add eax, 0x10
mov dword [esi], eax
push ecx
mov byte [esp + 0x38], 3
call fcn.1001a54d
pop ecx
mov esi, eax
mov byte [esp + 0x34], bl
call fcn.1001f7e2
xor esi, esi
cmp byte [esp + 0x13], bl
jne 0x100334f8
cmp byte [0x100b4020], bl
je 0x100335b6
push 0x28
call fcn.1005fc55
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x30], 4
cmp eax, ebx
je 0x1003348d
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x20]
mov edx, dword [edi + 8]
mov esi, dword [edi]
mov edi, dword [edi + 0x18]
push eax
push ecx
push 0x1009db7c
push edx
push esi
push edi
push dword [esp + 0x38]
call fcn.1002e220
mov edi, eax
jmp 0x1003348f
xor edi, edi
mov eax, dword [ebp + 8]
mov byte [esp + 0x30], bl
push dword [eax]
push str.offer_id
push edi
call fcn.1002e3ee
push ecx
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, str.track_offer_download_started
call fcn.10002a34
push edi
call fcn.1002e816
push ebx
push edi
call fcn.1001a54d
mov ecx, eax
call fcn.1001f31a
mov esi, eax
cmp edi, ebx
je 0x100334d6
mov eax, edi
call fcn.10024016
push ebx
push ebx
push ecx
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
mov ecx, str.Status_OK._The_OpenCandy_download_manager_has_started_to_download.
call fcn.10002a34
push 1
mov byte [esp + 0x40], 5
push 4
jmp 0x100335a4
cmp byte [0x100b4025], bl
je 0x100335b6
push 0x28
call fcn.1005fc55
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x30], 6
cmp eax, ebx
je 0x1003353e
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x20]
mov edx, dword [edi + 8]
mov esi, dword [edi]
mov edi, dword [edi + 0x18]
push eax
push ecx
push 0x1009dc14
push edx
push esi
push edi
push dword [esp + 0x38]
call fcn.1002e220
mov edi, eax
jmp 0x10033540
xor edi, edi
mov eax, dword [ebp + 8]
mov byte [esp + 0x30], bl
push dword [eax]
push str.offer_id
push edi
call fcn.1002e3ee
push ecx
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, str.track_encapsulated_offer_download_started
call fcn.10002a34
push edi
call fcn.1002e816
push ebx
push edi
call fcn.1001a54d
mov ecx, eax
call fcn.1001f31a
mov esi, eax
cmp edi, ebx
je 0x10033587
mov eax, edi
call fcn.10024016
push ebx
push ebx
push ecx
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
mov ecx, str.Status_OK._The_accepted_offer_has_started_to_download.
call fcn.10002a34
push 1
mov byte [esp + 0x40], 7
push 5
push ecx
call fcn.1001a54d
pop ecx
mov ecx, eax
mov byte [esp + 0x44], bl
call fcn.1001f748
mov eax, dword [esp + 0x1c]
call fcn.10002b29
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4