Function at 0x42b690
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48705a
mov eax, dword fs:[0]
push eax
sub esp, 0x3c0
mov eax, dword [0x4b3014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2bc], ecx
push str.CApplication::ReadAdvDataFromExec
push str._s_Enter
push 0
push 0
call fcn.00457970
add esp, 0x10
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x220]
push 0x4983ec
call fcn.0042d320
xorps xmm0, xmm0
mov dword [ebp - 4], 0
movups xmmword [ebp - 0x254], xmm0
mov dword [ebp - 0x254], 0
movups xmmword [ebp - 0x264], xmm0
mov dword [ebp - 0x264], 0xffffffff
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x228]
push 0x4983ec
mov dword [ebp - 0x228], 0
call fcn.0042d320
push 0x104
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 2
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
or edi, 0xffffffff
test eax, eax
jne 0x42b7c1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x220]
push str.getWebInstallerInfo_GetModuleFileName__d
push eax
call fcn.0042f8d0
push str.CApplication::ReadAdvDataFromExec
push str._s_GetModuleFileName_error
push 3
push 0
call fcn.00457970
add esp, 0x1c
jmp 0x42bf2c
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b7d0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x228]
call fcn.0042eac0
mov eax, dword [ebp - 0x228]
cmp dword [eax - 0xc], 0
jne 0x42b819
push str.CApplication::ReadAdvDataFromExec
push str._s_No_base_file_to_read_the_data_from
push 0
push 0
call fcn.00457970
add esp, 0x10
jmp 0x42bf2c
push 0
push 0
sub esp, 0xc
lea ecx, [ebp - 0x264]
push 3
push SysReAllocStringLen
push eax
call fcn.00455160
mov esi, eax
test esi, esi
je 0x42b8d9
call fcn.0040f790
mov ecx, eax
test ecx, ecx
jne 0x42b852
push 0x80004005
call fcn.0041ffc0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x21c], eax
push esi
mov byte [ebp - 4], 3
lea eax, [ebp - 0x21c]
push dword [ebp - 0x228]
push str.readAdvDataFromExec_openFile__s__d
push eax
call fcn.0042f8d0
add esp, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x220]
push eax
call fcn.0042e2f0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_open_file_err___s_
push 3
push 0
call fcn.00457970
mov byte [ebp - 4], 2
add esp, 0x14
mov edx, dword [ebp - 0x21c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42bf2c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42bf2c
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
movq qword [ebp - 0x240], xmm0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x240]
mov esi, dword [ebp - 0x258]
push esi
call fcn.0042bfc0
lea eax, [ebp - 0x220]
mov dword [ebp - 0x244], 0
push eax
lea eax, [ebp - 0x244]
push eax
push esi
mov esi, dword [ebp - 0x240]
lea ecx, [ebp - 0x264]
push esi
call fcn.00455650
test al, al
jne 0x42b9f3
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
call fcn.0042c9f0
mov byte [ebp - 4], 5
mov ecx, 0x4983ec
mov eax, dword [ebp - 0x220]
cmp dword [eax - 0xc], 0
cmovne ecx, eax
lea eax, [ebp - 0x21c]
push ecx
push dword [ebp - 0x228]
push str.readAdvDataFromExec_ReadBinaricFile__s__s
push eax
call fcn.0042f8d0
add esp, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x220]
push eax
call fcn.0042e2f0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_read_file_err___s_
push 3
push 0
call fcn.00457970
mov byte [ebp - 4], 4
add esp, 0x14
mov edx, dword [ebp - 0x21c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42bf21
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42bf21
movups xmm0, xmmword [esi + 0x10]
mov ecx, 0x5a4d
movups xmm1, xmmword [esi]
movups xmmword [ebp - 0x2a4], xmm0
movups xmm0, xmmword [esi + 0x20]
movd eax, xmm1
movups xmmword [ebp - 0x294], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebp - 0x284], xmm0
cmp cx, ax
je 0x42ba5b
movzx eax, ax
push eax
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ImageDosHeader__x
push eax
call fcn.0042f8d0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_memcopy_IMAGE_DOS_HEADER_err___s_
push 3
push 0
call fcn.00457970
add esp, 0x20
jmp 0x42bf21
add esi, dword [ebp - 0x278]
lea edi, [ebp - 0x3cc]
mov ecx, 0x3e
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3cc]
cmp eax, 0x4550
je 0x42baae
push eax
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ImageNtHeader__x
push eax
call fcn.0042f8d0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_memcopy_IMAGE_NT_HEADERS_err___s_
push 3
push 0
call fcn.00457970
add esp, 0x20
jmp 0x42bf1e
mov edi, dword [ebp - 0x334]
test edi, edi
jne 0x42bb08
push 0x4550
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_nosignuture
push eax
call fcn.0042f8d0
add esp, 8
mov ecx, esp
push 0x49a834
call fcn.0042d320
lea ecx, [ebp - 0x220]
call fcn.00443e20
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwCertificateAddress_err___s_
push 3
push edi
call fcn.00457970
add esp, 0x18
jmp 0x42bf1e
xorps xmm0, xmm0
mov dword [ebp - 0x22c], 0
movq qword [ebp - 0x234], xmm0
add edi, 0xfffffff4
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
push 0xc
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 6
call fcn.0042bfc0
mov edx, dword [ebp - 0x234]
mov esi, dword [ebp - 0x240]
movq xmm0, qword [esi + edi]
movq qword [edx], xmm0
mov eax, dword [esi + edi + 8]
mov dword [edx + 8], eax
movzx eax, byte [edx]
movzx ecx, byte [edx + 1]
shl eax, 8
or ecx, eax
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 3]
movzx edx, byte [edx + 4]
shl ecx, 8
or ecx, eax
shl edx, 8
mov dword [ebp - 0x21c], ecx
mov ecx, dword [ebp - 0x234]
movzx eax, byte [ecx + 5]
or edx, eax
movzx eax, byte [ecx + 6]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 7]
movzx ecx, byte [ecx + 8]
shl edx, 8
or edx, eax
shl ecx, 8
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x2b8], edx
movzx eax, byte [eax + 9]
or ecx, eax
mov eax, dword [ebp - 0x234]
shl ecx, 8
movzx eax, byte [eax + 0xa]
or ecx, eax
mov eax, dword [ebp - 0x234]
shl ecx, 8
movzx eax, byte [eax + 0xb]
or ecx, eax
mov dword [ebp - 0x224], ecx
cmp edx, 1
jne 0x42beb6
cmp ecx, 0x50545472
jne 0x42beb6
sub edi, dword [ebp - 0x21c]
js 0x42bc16
cmp edi, 0x2710
jle 0x42bc45
push edi
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_advSize_error__d
push eax
call fcn.0042f8d0
add esp, 8
mov ecx, esp
push 0x49a834
call fcn.0042d320
lea ecx, [ebp - 0x220]
call fcn.00443e20
add esp, 4
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x234]
push edi
mov dword [ebp - 0x230], eax
call fcn.0042bfc0
mov eax, dword [ebp - 0x21c]
mov edx, dword [ebp - 0x230]
add eax, esi
mov ecx, dword [ebp - 0x234]
sub edx, ecx
push edi
push eax
call fcn.0041fe70
xorps xmm0, xmm0
xor esi, esi
movups xmmword [ebp - 0x274], xmm0
add esp, 8
mov dword [ebp - 0x268], esi
psrldq xmm0, 8
movd eax, xmm0
and eax, 0xfffffe00
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 8
test edi, edi
jle 0x42bdf3
nop
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x224]
add eax, esi
mov dword [ebp - 0x224], 0
push eax
call fcn.0042c960
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x224]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x42bde8
inc eax
mov dword [ebp - 0x21c], 0
add esi, eax
lea ecx, [ebp - 0x21c]
mov eax, dword [ebp - 0x234]
add eax, esi
push eax
call fcn.0042c960
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax - 0xc]
test ecx, ecx
je 0x42bd8f
inc esi
add esi, ecx
cmp dword [eax - 4], 1
jle 0x42bd30
push ecx
lea ecx, [ebp - 0x21c]
call fcn.0042e100
mov eax, dword [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.0044dcb0
lea eax, [ebp - 0x2cc]
mov byte [ebp - 4], 0xb
push eax
push ecx
push dword [ebp - 0x224]
lea ecx, [ebp - 0x274]
call fcn.0044e720
mov ecx, eax
call fcn.0044dfd0
lea ecx, [ebp - 0x2cc]
call fcn.0044df10
lea ecx, [ebp - 0x21c]
call fcn.0042c940
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 8
call fcn.0042c940
cmp esi, edi
jl 0x42bcb0
jmp 0x42bdf3
push esi
push dword [ebp - 0x224]
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ReadParamsValueError__s__d
push eax
call fcn.0042f8d0
add esp, 0xc
mov ecx, esp
push 0x49a834
call fcn.0042d320
lea ecx, [ebp - 0x220]
call fcn.00443e20
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwCertificateAddress_err___s_
push 3
push 0
call fcn.00457970
add esp, 0x18
lea ecx, [ebp - 0x21c]
call fcn.0042c940
lea ecx, [ebp - 0x224]
call fcn.0042c940
mov eax, dword [ebp - 0x220]
cmp dword [eax - 0xc], 0
jne 0x42bea9
mov dword [ebp - method.Json::FastWriter.virtual_0], vtable.Json::FastWriter.0
mov dword [ebp - 0x27c], 0xf
mov dword [ebp - 0x280], 0
mov byte [ebp - 0x290], 0
mov byte [ebp - 0x278], 0
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x294]
call fcn.00450830
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 0x10
jb 0x42be58
mov eax, dword [eax]
mov esi, dword [ebp - 0x2bc]
add esi, 0x1a8
push eax
mov ecx, esi
call fcn.0042d130
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0xc
call fcn.0042c1a0
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax - 0xc]
dec eax
push eax
call fcn.0042d440
cmp ax, 0xa
jne 0x42be9e
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax - 0xc]
dec eax
push eax
call fcn.0042d3e0
lea ecx, [ebp - 0x294]
call fcn.00428680
lea ecx, [ebp - 0x274]
call fcn.0044df10
jmp 0x42bf13
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
call fcn.0042c9f0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x21c]
push dword [ebp - 0x224]
push dword [ebp - 0x2b8]
push str.no_valid_advData_version_d_marker_x
push eax
call fcn.0042f8d0
push dword [ebp - 0x21c]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwAdvVersion_err___s_
push 3
push 0
call fcn.00457970
add esp, 0x24
lea ecx, [ebp - 0x21c]
call fcn.0042c940
lea ecx, [ebp - 0x234]
call fcn.0042d830
or edi, 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.0042d830
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x228]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42bf4d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x25c]
test eax, eax
je 0x42bf5e
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x260]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, 0xffffffff
je 0x42bf72
push eax
call esi
mov eax, dword [ebp - 0x264]
cmp eax, 0xffffffff
je 0x42bf80
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x220]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x42bfa2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045ea7f
mov esp, ebp
pop ebp
ret