Function at 0x42aea0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e1462
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x5246a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x54], ebx
push 0x13
xor eax, eax
mov edi, 7
push str.bDisableCryptBroker
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
call fcn.00406040
xor ecx, ecx
push 0x3b
mov word [ebp - 0x2c], cx
push str.SoftwarePoliciesAdobeAcrobat_Reader11.0FeatureLockDown
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
call fcn.00406040
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 0x80000002
mov dword [ebp - 4], 1
mov dword [ebp - 0x54], 3
call fcn.0041cb80
add esp, 0x10
test al, al
je 0x42af4f
mov byte [ebp - 0x49], 1
cmp dword [ebp - 0x50], ebx
jne 0x42af53
mov byte [ebp - 0x49], 0
mov ebx, 8
cmp dword [ebp - 0x18], ebx
jb 0x42af69
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00406d09
add esp, 4
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], ebx
jb 0x42af91
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00406d09
add esp, 4
push 0x29
push 0x4d4970
push 2
push 0x504a04
xor edx, edx
push str.Crypt32.dll
mov ecx, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], dx
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x2a
push 0x4d6530
push 2
push 0x5049d4
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x2b
push 0x4d6740
push 2
push 0x5049bc
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x2c
push 0x4d6950
push 2
push 0x5049a8
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x2d
push 0x4d6a70
push 2
push 0x504998
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x2e
push 0x4d6c40
push 2
push 0x504988
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x2f
push 0x4d6d60
push 2
push 0x504974
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x30
push 0x4d6ea0
push 2
push 0x504960
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x31
push 0x4d7020
push 2
push 0x504950
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
cmp byte [ebp - 0x49], 0
mov al, 1
jne 0x42b6a9
push 0x35
push 0x4d72b0
push 2
push 0x504938
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x36
push 0x4d98a0
push 2
push 0x50491c
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x37
push 0x4d7440
push 2
push 0x5048fc
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x38
push 0x4d7550
push 2
push 0x5048dc
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x39
push 0x4d76d0
push 2
push 0x5048b8
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x3a
push 0x4d7860
push 2
push 0x5048a8
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x3b
push 0x4d79e0
push 2
push 0x50488c
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x3c
push 0x4d7b50
push 2
push 0x504868
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x3d
push 0x4d7cd0
push 2
push 0x504844
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x3e
push 0x4d7ec0
push 2
push 0x504828
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x3f
push 0x4d80b0
push 2
push 0x504810
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x40
push 0x4d8240
push 2
push 0x5047f4
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x41
push 0x4d83b0
push 2
push 0x5047e4
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x42
push 0x4d89b0
push 2
push 0x5047d0
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x43
push 0x4d84d0
push 2
push 0x5047bc
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x44
push 0x4d8650
push 2
push 0x5047a8
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x45
push 0x4d87c0
push 2
push 0x504798
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x46
push 0x4d8ae0
push 2
push 0x504774
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x47
push 0x4d8d90
push 2
push 0x50475c
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x48
push 0x4d8f10
push 2
push 0x50474c
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x49
push 0x4d9070
push 2
push 0x504738
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x4a
push 0x4d91d0
push 2
push 0x504720
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x4b
push 0x4d9310
push 2
push 0x504708
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x4c
push 0x4d94d0
push 2
push 0x5046f8
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x4d
push 0x4d5120
push 2
push 0x5046e4
push str.Crypt32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x32
push 0x4d7120
push 2
push 0x5046d4
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x33
push 0x4d9730
push 2
push 0x5046c4
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x34
push 0x4d9610
push 2
push 0x5046b0
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x4e
push 0x4d9ac0
push 2
push 0x5046a0
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x4f
push 0x4d9c90
push 2
push 0x504690
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x50
push 0x4d9dd0
push 2
push 0x50467c
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x51
push 0x4d9ef0
push 2
push 0x50466c
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x52
push 0x4da040
push 2
push 0x50465c
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x53
push 0x4da190
push 2
push 0x504648
push str.Advapi32.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x54
push 0x4da2f0
push 2
push 0x50462c
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x55
push 0x4da410
push 2
push 0x504600
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x56
push 0x4da580
push 2
push 0x5045ec
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x57
push 0x4da6d0
push 2
push 0x5045dc
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x58
push 0x4da810
push 2
push 0x5045cc
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x59
push 0x4da9a0
push 2
push 0x5045bc
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x5a
push 0x4dac30
push 2
push 0x5045a4
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x5b
push 0x4dad80
push 2
push 0x504594
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x5c
push 0x4daf10
push 2
push 0x504584
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
push 0x5d
push 0x4db0b0
push 2
push 0x504570
push str.Ncrypt.dll
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x42b6a7
mov al, 1
jmp 0x42b6a9
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401306
mov esp, ebp
pop ebp
ret