Function at 0x42fc20
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f6752
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x53c948]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x54], ebx
push 0x13
xor eax, eax
mov edi, 7
push 0x5021d4
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
call fcn.00406210
xor ecx, ecx
push 0x3b
mov word [ebp - 0x2c], cx
push str.SoftwarePoliciesAdobeAcrobat_Reader11.0FeatureLockDown
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
call fcn.00406210
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 0x80000002
mov dword [ebp - 4], 1
mov dword [ebp - 0x54], 3
call fcn.00410010
add esp, 0x10
test al, al
je 0x42fccf
mov byte [ebp - 0x49], 1
cmp dword [ebp - 0x50], ebx
jne 0x42fcd3
mov byte [ebp - 0x49], 0
mov ebx, 8
cmp dword [ebp - 0x18], ebx
jb 0x42fce9
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00406ed9
add esp, 4
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], ebx
jb 0x42fd11
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00406ed9
add esp, 4
push 0x29
push 0x4e9f50
push 2
push 0x51c5f0
xor edx, edx
push 0x51c5d8
mov ecx, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], dx
call fcn.0042f350
test al, al
je 0x430427
push 0x2a
push 0x4eafd0
push 2
push 0x51c5c0
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x2b
push 0x41cba0
push 2
push 0x51c5a8
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x2c
push 0x4eb1e0
push 2
push 0x51c594
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x2d
push 0x4eb300
push 2
push 0x51c584
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x2e
push 0x4eb4d0
push 2
push 0x51c574
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x2f
push 0x4eb5f0
push 2
push 0x51c560
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x30
push 0x4eb720
push 2
push 0x51c54c
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x31
push 0x41ddd0
push 2
push 0x51c53c
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
cmp byte [ebp - 0x49], 0
mov al, 1
jne 0x430429
push 0x35
push 0x4eba30
push 2
push 0x51c524
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x36
push 0x4ee030
push 2
push 0x51c508
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x37
push 0x4ebbc0
push 2
push 0x51c4e8
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x38
push 0x4ebcd0
push 2
push 0x51c4c8
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x39
push 0x4ebe50
push 2
push 0x51c4a4
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x3a
push 0x4ebfe0
push 2
push 0x51c494
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x3b
push 0x4ec160
push 2
push 0x51c478
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x3c
push 0x4ec2d0
push 2
push 0x51c454
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x3d
push 0x4ec450
push 2
push 0x51c430
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x3e
push 0x4ec640
push 2
push 0x51c414
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x3f
push 0x4ec830
push 2
push 0x51c3fc
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x40
push 0x4ec9c0
push 2
push 0x51c3e0
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x41
push 0x4ecb30
push 2
push 0x51c3d0
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x42
push 0x4ed130
push 2
push 0x51c3bc
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x43
push 0x4ecc50
push 2
push 0x51c3a8
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x44
push 0x4ecdd0
push 2
push 0x51c394
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x45
push 0x4ecf40
push 2
push 0x51c384
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x46
push 0x4ed260
push 2
push 0x51c360
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x47
push 0x4ed510
push 2
push 0x51c348
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x48
push 0x4ed6a0
push 2
push 0x51c338
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x49
push 0x4ed800
push 2
push 0x51c324
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x4a
push 0x4ed960
push 2
push 0x51c30c
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x4b
push 0x4edaa0
push 2
push 0x51c2f4
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x4c
push 0x4edc60
push 2
push 0x51c2e4
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x4d
push 0x41e470
push 2
push 0x51c2d0
push 0x51c5d8
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x32
push 0x4eb8a0
push 2
push 0x51c2c0
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x33
push 0x4edec0
push 2
push 0x51c2b0
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x34
push 0x4edda0
push 2
push 0x51c29c
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x4e
push 0x4ee250
push 2
push 0x51c28c
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x4f
push 0x4ee420
push 2
push 0x51c27c
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x50
push 0x4ee540
push 2
push 0x51c268
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x51
push 0x4ee660
push 2
push 0x51c258
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x52
push 0x4ee7b0
push 2
push 0x51c248
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x53
push 0x4ee900
push 2
push 0x51c234
push str.Advapi32.dll
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x54
push 0x4eea60
push 2
push 0x51c218
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x55
push 0x4eeb80
push 2
push 0x51c1ec
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x56
push 0x4eecf0
push 2
push 0x51c1d8
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x57
push 0x4eee40
push 2
push 0x51c1c8
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x58
push 0x4eef80
push 2
push 0x51c1b8
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x59
push 0x4ef110
push 2
push 0x51c1a8
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x5a
push 0x4ef3a0
push 2
push 0x51c190
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x5b
push 0x4ef4f0
push 2
push 0x51c180
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x5c
push 0x4ef680
push 2
push 0x51c170
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
push 0x5d
push 0x4ef820
push 2
push 0x51c15c
push 0x51c200
mov ecx, esi
call fcn.0042f350
test al, al
je 0x430427
mov al, 1
jmp 0x430429
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401316
mov esp, ebp
pop ebp
ret