Function at 0x42bdd0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48614a
mov eax, dword fs:[0]
push eax
sub esp, 0x3c0
mov eax, dword [0x4b1014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2bc], ecx
push str.CApplication::ReadAdvDataFromExec
push str._s_Enter
push 0
push 0
call fcn.00458800
add esp, 0x10
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x220]
push 0x4973c4
call fcn.0042dad0
xorps xmm0, xmm0
mov dword [ebp - 4], 0
movups xmmword [ebp - 0x254], xmm0
mov dword [ebp - 0x254], 0
movups xmmword [ebp - 0x264], xmm0
mov dword [ebp - 0x264], 0xffffffff
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x228]
push 0x4973c4
mov dword [ebp - 0x228], 0
call fcn.0042dad0
push 0x104
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 2
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
or edi, 0xffffffff
test eax, eax
jne 0x42bf01
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x220]
push str.getWebInstallerInfo_GetModuleFileName__d
push eax
call fcn.00430100
push str.CApplication::ReadAdvDataFromExec
push str._s_GetModuleFileName_error
push 3
push 0
call fcn.00458800
add esp, 0x1c
jmp 0x42c66c
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42bf10
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x228]
call fcn.0042f2f0
mov eax, dword [ebp - 0x228]
cmp dword [eax - 0xc], 0
jne 0x42bf59
push str.CApplication::ReadAdvDataFromExec
push str._s_No_base_file_to_read_the_data_from
push 0
push 0
call fcn.00458800
add esp, 0x10
jmp 0x42c66c
push 0
push 0
sub esp, 0xc
lea ecx, [ebp - 0x264]
push 3
push SysReAllocStringLen
push eax
call fcn.00456050
mov esi, eax
test esi, esi
je 0x42c019
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x42bf92
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x21c], eax
push esi
mov byte [ebp - 4], 3
lea eax, [ebp - 0x21c]
push dword [ebp - 0x228]
push str.readAdvDataFromExec_openFile__s__d
push eax
call fcn.00430100
add esp, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x220]
push eax
call fcn.0042eb20
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_open_file_err___s_
push 3
push 0
call fcn.00458800
mov byte [ebp - 4], 2
add esp, 0x14
mov edx, dword [ebp - 0x21c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c66c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42c66c
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
movq qword [ebp - 0x240], xmm0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x240]
mov esi, dword [ebp - 0x258]
push esi
call fcn.0042c700
lea eax, [ebp - 0x220]
mov dword [ebp - 0x244], 0
push eax
lea eax, [ebp - 0x244]
push eax
push esi
mov esi, dword [ebp - 0x240]
lea ecx, [ebp - 0x264]
push esi
call fcn.00456540
test al, al
jne 0x42c133
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
call fcn.0042d130
mov byte [ebp - 4], 5
mov ecx, 0x4973c4
mov eax, dword [ebp - 0x220]
cmp dword [eax - 0xc], 0
cmovne ecx, eax
lea eax, [ebp - 0x21c]
push ecx
push dword [ebp - 0x228]
push str.readAdvDataFromExec_ReadBinaricFile__s__s
push eax
call fcn.00430100
add esp, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x220]
push eax
call fcn.0042eb20
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_read_file_err___s_
push 3
push 0
call fcn.00458800
mov byte [ebp - 4], 4
add esp, 0x14
mov edx, dword [ebp - 0x21c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c661
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42c661
movups xmm0, xmmword [esi + 0x10]
mov ecx, 0x5a4d
movups xmm1, xmmword [esi]
movups xmmword [ebp - 0x2a4], xmm0
movups xmm0, xmmword [esi + 0x20]
movd eax, xmm1
movups xmmword [ebp - 0x294], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebp - 0x284], xmm0
cmp cx, ax
je 0x42c19b
movzx eax, ax
push eax
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ImageDosHeader__x
push eax
call fcn.00430100
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_memcopy_IMAGE_DOS_HEADER_err___s_
push 3
push 0
call fcn.00458800
add esp, 0x20
jmp 0x42c661
add esi, dword [ebp - 0x278]
lea edi, [ebp - 0x3cc]
mov ecx, 0x3e
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3cc]
cmp eax, 0x4550
je 0x42c1ee
push eax
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ImageNtHeader__x
push eax
call fcn.00430100
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_memcopy_IMAGE_NT_HEADERS_err___s_
push 3
push 0
call fcn.00458800
add esp, 0x20
jmp 0x42c65e
mov edi, dword [ebp - 0x334]
test edi, edi
jne 0x42c248
push 0x4550
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_nosignuture
push eax
call fcn.00430100
add esp, 8
mov ecx, esp
push 0x4998d4
call fcn.0042dad0
lea ecx, [ebp - 0x220]
call fcn.00444d30
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwCertificateAddress_err___s_
push 3
push edi
call fcn.00458800
add esp, 0x18
jmp 0x42c65e
xorps xmm0, xmm0
mov dword [ebp - 0x22c], 0
movq qword [ebp - 0x234], xmm0
add edi, 0xfffffff4
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
push 0xc
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 6
call fcn.0042c700
mov edx, dword [ebp - 0x234]
mov esi, dword [ebp - 0x240]
movq xmm0, qword [esi + edi]
movq qword [edx], xmm0
mov eax, dword [esi + edi + 8]
mov dword [edx + 8], eax
movzx eax, byte [edx]
movzx ecx, byte [edx + 1]
shl eax, 8
or ecx, eax
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 3]
movzx edx, byte [edx + 4]
shl ecx, 8
or ecx, eax
shl edx, 8
mov dword [ebp - 0x21c], ecx
mov ecx, dword [ebp - 0x234]
movzx eax, byte [ecx + 5]
or edx, eax
movzx eax, byte [ecx + 6]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 7]
movzx ecx, byte [ecx + 8]
shl edx, 8
or edx, eax
shl ecx, 8
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x2b8], edx
movzx eax, byte [eax + 9]
or ecx, eax
mov eax, dword [ebp - 0x234]
shl ecx, 8
movzx eax, byte [eax + 0xa]
or ecx, eax
mov eax, dword [ebp - 0x234]
shl ecx, 8
movzx eax, byte [eax + 0xb]
or ecx, eax
mov dword [ebp - 0x224], ecx
cmp edx, 1
jne 0x42c5f6
cmp ecx, 0x50545472
jne 0x42c5f6
sub edi, dword [ebp - 0x21c]
js 0x42c356
cmp edi, 0x2710
jle 0x42c385
push edi
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_advSize_error__d
push eax
call fcn.00430100
add esp, 8
mov ecx, esp
push 0x4998d4
call fcn.0042dad0
lea ecx, [ebp - 0x220]
call fcn.00444d30
add esp, 4
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x234]
push edi
mov dword [ebp - 0x230], eax
call fcn.0042c700
mov eax, dword [ebp - 0x21c]
mov edx, dword [ebp - 0x230]
add eax, esi
mov ecx, dword [ebp - 0x234]
sub edx, ecx
push edi
push eax
call fcn.0041fed0
xorps xmm0, xmm0
xor esi, esi
movups xmmword [ebp - 0x274], xmm0
add esp, 8
mov dword [ebp - 0x268], esi
psrldq xmm0, 8
movd eax, xmm0
and eax, 0xfffffe00
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 8
test edi, edi
jle 0x42c533
nop
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x224]
add eax, esi
mov dword [ebp - 0x224], 0
push eax
call fcn.0042d0a0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x224]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x42c528
inc eax
mov dword [ebp - 0x21c], 0
add esi, eax
lea ecx, [ebp - 0x21c]
mov eax, dword [ebp - 0x234]
add eax, esi
push eax
call fcn.0042d0a0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax - 0xc]
test ecx, ecx
je 0x42c4cf
inc esi
add esi, ecx
cmp dword [eax - 4], 1
jle 0x42c470
push ecx
lea ecx, [ebp - 0x21c]
call fcn.0042e930
mov eax, dword [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.0044ebd0
lea eax, [ebp - 0x2cc]
mov byte [ebp - 4], 0xb
push eax
push ecx
push dword [ebp - 0x224]
lea ecx, [ebp - 0x274]
call fcn.0044f640
mov ecx, eax
call fcn.0044eef0
lea ecx, [ebp - 0x2cc]
call fcn.0044ee30
lea ecx, [ebp - 0x21c]
call fcn.0042d080
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 8
call fcn.0042d080
cmp esi, edi
jl 0x42c3f0
jmp 0x42c533
push esi
push dword [ebp - 0x224]
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ReadParamsValueError__s__d
push eax
call fcn.00430100
add esp, 0xc
mov ecx, esp
push 0x4998d4
call fcn.0042dad0
lea ecx, [ebp - 0x220]
call fcn.00444d30
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwCertificateAddress_err___s_
push 3
push 0
call fcn.00458800
add esp, 0x18
lea ecx, [ebp - 0x21c]
call fcn.0042d080
lea ecx, [ebp - 0x224]
call fcn.0042d080
mov eax, dword [ebp - 0x220]
cmp dword [eax - 0xc], 0
jne 0x42c5e9
mov dword [ebp - method.Json::FastWriter.virtual_0], vtable.Json::FastWriter.0
mov dword [ebp - 0x27c], 0xf
mov dword [ebp - 0x280], 0
mov byte [ebp - 0x290], 0
mov byte [ebp - 0x278], 0
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x294]
call fcn.00451720
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 0x10
jb 0x42c598
mov eax, dword [eax]
mov esi, dword [ebp - 0x2bc]
add esi, 0x1a8
push eax
mov ecx, esi
call fcn.0042d8e0
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0xc
call fcn.0042c8e0
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax - 0xc]
dec eax
push eax
call fcn.0042dbf0
cmp ax, 0xa
jne 0x42c5de
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax - 0xc]
dec eax
push eax
call fcn.0042db90
lea ecx, [ebp - 0x294]
call fcn.004286e0
lea ecx, [ebp - 0x274]
call fcn.0044ee30
jmp 0x42c653
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
call fcn.0042d130
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x21c]
push dword [ebp - 0x224]
push dword [ebp - 0x2b8]
push str.no_valid_advData_version_d_marker_x
push eax
call fcn.00430100
push dword [ebp - 0x21c]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwAdvVersion_err___s_
push 3
push 0
call fcn.00458800
add esp, 0x24
lea ecx, [ebp - 0x21c]
call fcn.0042d080
lea ecx, [ebp - 0x234]
call fcn.0042dfe0
or edi, 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.0042dfe0
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x228]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c68d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x25c]
test eax, eax
je 0x42c69e
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x260]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, 0xffffffff
je 0x42c6b2
push eax
call esi
mov eax, dword [ebp - 0x264]
cmp eax, 0xffffffff
je 0x42c6c0
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x220]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x42c6e2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045daaf
mov esp, ebp
pop ebp
ret