Function at 0x42b960
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x487a8a
mov eax, dword fs:[0]
push eax
sub esp, 0x3c0
mov eax, dword [0x4b3014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2bc], ecx
push str.CApplication::ReadAdvDataFromExec
push str._s_Enter
push 0
push 0
call fcn.00458400
add esp, 0x10
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x220]
push 0x4983ec
call fcn.0042d660
xorps xmm0, xmm0
mov dword [ebp - 4], 0
movups xmmword [ebp - 0x254], xmm0
mov dword [ebp - 0x254], 0
movups xmmword [ebp - 0x264], xmm0
mov dword [ebp - 0x264], 0xffffffff
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x228]
push 0x4983ec
mov dword [ebp - 0x228], 0
call fcn.0042d660
push 0x104
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 2
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
or edi, 0xffffffff
test eax, eax
jne 0x42ba91
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x220]
push str.getWebInstallerInfo_GetModuleFileName__d
push eax
call fcn.0042fc90
push str.CApplication::ReadAdvDataFromExec
push str._s_GetModuleFileName_error
push 3
push 0
call fcn.00458400
add esp, 0x1c
jmp 0x42c1fc
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42baa0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x228]
call fcn.0042ee80
mov eax, dword [ebp - 0x228]
cmp dword [eax - 0xc], 0
jne 0x42bae9
push str.CApplication::ReadAdvDataFromExec
push str._s_No_base_file_to_read_the_data_from
push 0
push 0
call fcn.00458400
add esp, 0x10
jmp 0x42c1fc
push 0
push 0
sub esp, 0xc
lea ecx, [ebp - 0x264]
push 3
push SysReAllocStringLen
push eax
call fcn.00455bf0
mov esi, eax
test esi, esi
je 0x42bba9
call fcn.0040f790
mov ecx, eax
test ecx, ecx
jne 0x42bb22
push 0x80004005
call fcn.0041ffc0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x21c], eax
push esi
mov byte [ebp - 4], 3
lea eax, [ebp - 0x21c]
push dword [ebp - 0x228]
push str.readAdvDataFromExec_openFile__s__d
push eax
call fcn.0042fc90
add esp, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x220]
push eax
call fcn.0042e6b0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_open_file_err___s_
push 3
push 0
call fcn.00458400
mov byte [ebp - 4], 2
add esp, 0x14
mov edx, dword [ebp - 0x21c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c1fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42c1fc
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
movq qword [ebp - 0x240], xmm0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x240]
mov esi, dword [ebp - 0x258]
push esi
call fcn.0042c290
lea eax, [ebp - 0x220]
mov dword [ebp - 0x244], 0
push eax
lea eax, [ebp - 0x244]
push eax
push esi
mov esi, dword [ebp - 0x240]
lea ecx, [ebp - 0x264]
push esi
call fcn.004560e0
test al, al
jne 0x42bcc3
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
call fcn.0042ccc0
mov byte [ebp - 4], 5
mov ecx, 0x4983ec
mov eax, dword [ebp - 0x220]
cmp dword [eax - 0xc], 0
cmovne ecx, eax
lea eax, [ebp - 0x21c]
push ecx
push dword [ebp - 0x228]
push str.readAdvDataFromExec_ReadBinaricFile__s__s
push eax
call fcn.0042fc90
add esp, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x220]
push eax
call fcn.0042e6b0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_read_file_err___s_
push 3
push 0
call fcn.00458400
mov byte [ebp - 4], 4
add esp, 0x14
mov edx, dword [ebp - 0x21c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c1f1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42c1f1
movups xmm0, xmmword [esi + 0x10]
mov ecx, 0x5a4d
movups xmm1, xmmword [esi]
movups xmmword [ebp - 0x2a4], xmm0
movups xmm0, xmmword [esi + 0x20]
movd eax, xmm1
movups xmmword [ebp - 0x294], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebp - 0x284], xmm0
cmp cx, ax
je 0x42bd2b
movzx eax, ax
push eax
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ImageDosHeader__x
push eax
call fcn.0042fc90
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_memcopy_IMAGE_DOS_HEADER_err___s_
push 3
push 0
call fcn.00458400
add esp, 0x20
jmp 0x42c1f1
add esi, dword [ebp - 0x278]
lea edi, [ebp - 0x3cc]
mov ecx, 0x3e
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3cc]
cmp eax, 0x4550
je 0x42bd7e
push eax
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ImageNtHeader__x
push eax
call fcn.0042fc90
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_memcopy_IMAGE_NT_HEADERS_err___s_
push 3
push 0
call fcn.00458400
add esp, 0x20
jmp 0x42c1ee
mov edi, dword [ebp - 0x334]
test edi, edi
jne 0x42bdd8
push 0x4550
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_nosignuture
push eax
call fcn.0042fc90
add esp, 8
mov ecx, esp
push 0x49a904
call fcn.0042d660
lea ecx, [ebp - 0x220]
call fcn.004448c0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwCertificateAddress_err___s_
push 3
push edi
call fcn.00458400
add esp, 0x18
jmp 0x42c1ee
xorps xmm0, xmm0
mov dword [ebp - 0x22c], 0
movq qword [ebp - 0x234], xmm0
add edi, 0xfffffff4
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
push 0xc
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 6
call fcn.0042c290
mov edx, dword [ebp - 0x234]
mov esi, dword [ebp - 0x240]
movq xmm0, qword [esi + edi]
movq qword [edx], xmm0
mov eax, dword [esi + edi + 8]
mov dword [edx + 8], eax
movzx eax, byte [edx]
movzx ecx, byte [edx + 1]
shl eax, 8
or ecx, eax
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 3]
movzx edx, byte [edx + 4]
shl ecx, 8
or ecx, eax
shl edx, 8
mov dword [ebp - 0x21c], ecx
mov ecx, dword [ebp - 0x234]
movzx eax, byte [ecx + 5]
or edx, eax
movzx eax, byte [ecx + 6]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 7]
movzx ecx, byte [ecx + 8]
shl edx, 8
or edx, eax
shl ecx, 8
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x2b8], edx
movzx eax, byte [eax + 9]
or ecx, eax
mov eax, dword [ebp - 0x234]
shl ecx, 8
movzx eax, byte [eax + 0xa]
or ecx, eax
mov eax, dword [ebp - 0x234]
shl ecx, 8
movzx eax, byte [eax + 0xb]
or ecx, eax
mov dword [ebp - 0x224], ecx
cmp edx, 1
jne 0x42c186
cmp ecx, 0x50545472
jne 0x42c186
sub edi, dword [ebp - 0x21c]
js 0x42bee6
cmp edi, 0x2710
jle 0x42bf15
push edi
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_advSize_error__d
push eax
call fcn.0042fc90
add esp, 8
mov ecx, esp
push 0x49a904
call fcn.0042d660
lea ecx, [ebp - 0x220]
call fcn.004448c0
add esp, 4
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x234]
push edi
mov dword [ebp - 0x230], eax
call fcn.0042c290
mov eax, dword [ebp - 0x21c]
mov edx, dword [ebp - 0x230]
add eax, esi
mov ecx, dword [ebp - 0x234]
sub edx, ecx
push edi
push eax
call fcn.0041fe70
xorps xmm0, xmm0
xor esi, esi
movups xmmword [ebp - 0x274], xmm0
add esp, 8
mov dword [ebp - 0x268], esi
psrldq xmm0, 8
movd eax, xmm0
and eax, 0xfffffe00
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 8
test edi, edi
jle 0x42c0c3
nop
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x224]
add eax, esi
mov dword [ebp - 0x224], 0
push eax
call fcn.0042cc30
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x224]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x42c0b8
inc eax
mov dword [ebp - 0x21c], 0
add esi, eax
lea ecx, [ebp - 0x21c]
mov eax, dword [ebp - 0x234]
add eax, esi
push eax
call fcn.0042cc30
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax - 0xc]
test ecx, ecx
je 0x42c05f
inc esi
add esi, ecx
cmp dword [eax - 4], 1
jle 0x42c000
push ecx
lea ecx, [ebp - 0x21c]
call fcn.0042e4c0
mov eax, dword [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.0044e750
lea eax, [ebp - 0x2cc]
mov byte [ebp - 4], 0xb
push eax
push ecx
push dword [ebp - 0x224]
lea ecx, [ebp - 0x274]
call fcn.0044f1c0
mov ecx, eax
call fcn.0044ea70
lea ecx, [ebp - 0x2cc]
call fcn.0044e9b0
lea ecx, [ebp - 0x21c]
call fcn.0042cc10
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 8
call fcn.0042cc10
cmp esi, edi
jl 0x42bf80
jmp 0x42c0c3
push esi
push dword [ebp - 0x224]
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ReadParamsValueError__s__d
push eax
call fcn.0042fc90
add esp, 0xc
mov ecx, esp
push 0x49a904
call fcn.0042d660
lea ecx, [ebp - 0x220]
call fcn.004448c0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwCertificateAddress_err___s_
push 3
push 0
call fcn.00458400
add esp, 0x18
lea ecx, [ebp - 0x21c]
call fcn.0042cc10
lea ecx, [ebp - 0x224]
call fcn.0042cc10
mov eax, dword [ebp - 0x220]
cmp dword [eax - 0xc], 0
jne 0x42c179
mov dword [ebp - method.Json::FastWriter.virtual_0], vtable.Json::FastWriter.0
mov dword [ebp - 0x27c], 0xf
mov dword [ebp - 0x280], 0
mov byte [ebp - 0x290], 0
mov byte [ebp - 0x278], 0
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x294]
call fcn.004512d0
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 0x10
jb 0x42c128
mov eax, dword [eax]
mov esi, dword [ebp - 0x2bc]
add esi, 0x1a8
push eax
mov ecx, esi
call fcn.0042d470
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0xc
call fcn.0042c470
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax - 0xc]
dec eax
push eax
call fcn.0042d780
cmp ax, 0xa
jne 0x42c16e
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax - 0xc]
dec eax
push eax
call fcn.0042d720
lea ecx, [ebp - 0x294]
call fcn.00428680
lea ecx, [ebp - 0x274]
call fcn.0044e9b0
jmp 0x42c1e3
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
call fcn.0042ccc0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x21c]
push dword [ebp - 0x224]
push dword [ebp - 0x2b8]
push str.no_valid_advData_version_d_marker_x
push eax
call fcn.0042fc90
push dword [ebp - 0x21c]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwAdvVersion_err___s_
push 3
push 0
call fcn.00458400
add esp, 0x24
lea ecx, [ebp - 0x21c]
call fcn.0042cc10
lea ecx, [ebp - 0x234]
call fcn.0042db70
or edi, 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.0042db70
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x228]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c21d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x25c]
test eax, eax
je 0x42c22e
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x260]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, 0xffffffff
je 0x42c242
push eax
call esi
mov eax, dword [ebp - 0x264]
cmp eax, 0xffffffff
je 0x42c250
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x220]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x42c272
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045f48f
mov esp, ebp
pop ebp
ret