Function at 0x42b980
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4877ba
mov eax, dword fs:[0]
push eax
sub esp, 0x3c0
mov eax, dword [0x4b3014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2bc], ecx
push str.CApplication::ReadAdvDataFromExec
push str._s_Enter
push 0
push 0
call fcn.00458450
add esp, 0x10
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x220]
push 0x4983e4
call fcn.0042d680
xorps xmm0, xmm0
mov dword [ebp - 4], 0
movups xmmword [ebp - 0x254], xmm0
mov dword [ebp - 0x254], 0
movups xmmword [ebp - 0x264], xmm0
mov dword [ebp - 0x264], 0xffffffff
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x228]
push 0x4983e4
mov dword [ebp - 0x228], 0
call fcn.0042d680
push 0x104
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 2
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
or edi, 0xffffffff
test eax, eax
jne 0x42bab1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x220]
push str.getWebInstallerInfo_GetModuleFileName__d
push eax
call fcn.0042fcb0
push str.CApplication::ReadAdvDataFromExec
push str._s_GetModuleFileName_error
push 3
push 0
call fcn.00458450
add esp, 0x1c
jmp 0x42c21c
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42bac0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x228]
call fcn.0042eea0
mov eax, dword [ebp - 0x228]
cmp dword [eax - 0xc], 0
jne 0x42bb09
push str.CApplication::ReadAdvDataFromExec
push str._s_No_base_file_to_read_the_data_from
push 0
push 0
call fcn.00458450
add esp, 0x10
jmp 0x42c21c
push 0
push 0
sub esp, 0xc
lea ecx, [ebp - 0x264]
push 3
push SysReAllocStringLen
push eax
call fcn.00455c50
mov esi, eax
test esi, esi
je 0x42bbc9
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x42bb42
push 0x80004005
call fcn.0041ffd0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x21c], eax
push esi
mov byte [ebp - 4], 3
lea eax, [ebp - 0x21c]
push dword [ebp - 0x228]
push str.readAdvDataFromExec_openFile__s__d
push eax
call fcn.0042fcb0
add esp, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x220]
push eax
call fcn.0042e6d0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_open_file_err___s_
push 3
push 0
call fcn.00458450
mov byte [ebp - 4], 2
add esp, 0x14
mov edx, dword [ebp - 0x21c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c21c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42c21c
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
movq qword [ebp - 0x240], xmm0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x240]
mov esi, dword [ebp - 0x258]
push esi
call fcn.0042c2b0
lea eax, [ebp - 0x220]
mov dword [ebp - 0x244], 0
push eax
lea eax, [ebp - 0x244]
push eax
push esi
mov esi, dword [ebp - 0x240]
lea ecx, [ebp - 0x264]
push esi
call fcn.00456140
test al, al
jne 0x42bce3
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
call fcn.0042cce0
mov byte [ebp - 4], 5
mov ecx, 0x4983e4
mov eax, dword [ebp - 0x220]
cmp dword [eax - 0xc], 0
cmovne ecx, eax
lea eax, [ebp - 0x21c]
push ecx
push dword [ebp - 0x228]
push str.readAdvDataFromExec_ReadBinaricFile__s__s
push eax
call fcn.0042fcb0
add esp, 0x10
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0x220]
push eax
call fcn.0042e6d0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_read_file_err___s_
push 3
push 0
call fcn.00458450
mov byte [ebp - 4], 4
add esp, 0x14
mov edx, dword [ebp - 0x21c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c211
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42c211
movups xmm0, xmmword [esi + 0x10]
mov ecx, 0x5a4d
movups xmm1, xmmword [esi]
movups xmmword [ebp - 0x2a4], xmm0
movups xmm0, xmmword [esi + 0x20]
movd eax, xmm1
movups xmmword [ebp - 0x294], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebp - 0x284], xmm0
cmp cx, ax
je 0x42bd4b
movzx eax, ax
push eax
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ImageDosHeader__x
push eax
call fcn.0042fcb0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_memcopy_IMAGE_DOS_HEADER_err___s_
push 3
push 0
call fcn.00458450
add esp, 0x20
jmp 0x42c211
add esi, dword [ebp - 0x278]
lea edi, [ebp - 0x3cc]
mov ecx, 0x3e
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3cc]
cmp eax, 0x4550
je 0x42bd9e
push eax
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ImageNtHeader__x
push eax
call fcn.0042fcb0
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_memcopy_IMAGE_NT_HEADERS_err___s_
push 3
push 0
call fcn.00458450
add esp, 0x20
jmp 0x42c20e
mov edi, dword [ebp - 0x334]
test edi, edi
jne 0x42bdf8
push 0x4550
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_nosignuture
push eax
call fcn.0042fcb0
add esp, 8
mov ecx, esp
push 0x49a8f4
call fcn.0042d680
lea ecx, [ebp - 0x220]
call fcn.00444920
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwCertificateAddress_err___s_
push 3
push edi
call fcn.00458450
add esp, 0x18
jmp 0x42c20e
xorps xmm0, xmm0
mov dword [ebp - 0x22c], 0
movq qword [ebp - 0x234], xmm0
add edi, 0xfffffff4
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
push 0xc
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 6
call fcn.0042c2b0
mov edx, dword [ebp - 0x234]
mov esi, dword [ebp - 0x240]
movq xmm0, qword [esi + edi]
movq qword [edx], xmm0
mov eax, dword [esi + edi + 8]
mov dword [edx + 8], eax
movzx eax, byte [edx]
movzx ecx, byte [edx + 1]
shl eax, 8
or ecx, eax
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 3]
movzx edx, byte [edx + 4]
shl ecx, 8
or ecx, eax
shl edx, 8
mov dword [ebp - 0x21c], ecx
mov ecx, dword [ebp - 0x234]
movzx eax, byte [ecx + 5]
or edx, eax
movzx eax, byte [ecx + 6]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 7]
movzx ecx, byte [ecx + 8]
shl edx, 8
or edx, eax
shl ecx, 8
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x2b8], edx
movzx eax, byte [eax + 9]
or ecx, eax
mov eax, dword [ebp - 0x234]
shl ecx, 8
movzx eax, byte [eax + 0xa]
or ecx, eax
mov eax, dword [ebp - 0x234]
shl ecx, 8
movzx eax, byte [eax + 0xb]
or ecx, eax
mov dword [ebp - 0x224], ecx
cmp edx, 1
jne 0x42c1a6
cmp ecx, 0x50545472
jne 0x42c1a6
sub edi, dword [ebp - 0x21c]
js 0x42bf06
cmp edi, 0x2710
jle 0x42bf35
push edi
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_advSize_error__d
push eax
call fcn.0042fcb0
add esp, 8
mov ecx, esp
push 0x49a8f4
call fcn.0042d680
lea ecx, [ebp - 0x220]
call fcn.00444920
add esp, 4
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x234]
push edi
mov dword [ebp - 0x230], eax
call fcn.0042c2b0
mov eax, dword [ebp - 0x21c]
mov edx, dword [ebp - 0x230]
add eax, esi
mov ecx, dword [ebp - 0x234]
sub edx, ecx
push edi
push eax
call fcn.0041fe80
xorps xmm0, xmm0
xor esi, esi
movups xmmword [ebp - 0x274], xmm0
add esp, 8
mov dword [ebp - 0x268], esi
psrldq xmm0, 8
movd eax, xmm0
and eax, 0xfffffe00
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 8
test edi, edi
jle 0x42c0e3
nop
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x224]
add eax, esi
mov dword [ebp - 0x224], 0
push eax
call fcn.0042cc50
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x224]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x42c0d8
inc eax
mov dword [ebp - 0x21c], 0
add esi, eax
lea ecx, [ebp - 0x21c]
mov eax, dword [ebp - 0x234]
add eax, esi
push eax
call fcn.0042cc50
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax - 0xc]
test ecx, ecx
je 0x42c07f
inc esi
add esi, ecx
cmp dword [eax - 4], 1
jle 0x42c020
push ecx
lea ecx, [ebp - 0x21c]
call fcn.0042e4e0
mov eax, dword [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.0044e7b0
lea eax, [ebp - 0x2cc]
mov byte [ebp - 4], 0xb
push eax
push ecx
push dword [ebp - 0x224]
lea ecx, [ebp - 0x274]
call fcn.0044f220
mov ecx, eax
call fcn.0044ead0
lea ecx, [ebp - 0x2cc]
call fcn.0044ea10
lea ecx, [ebp - 0x21c]
call fcn.0042cc30
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 8
call fcn.0042cc30
cmp esi, edi
jl 0x42bfa0
jmp 0x42c0e3
push esi
push dword [ebp - 0x224]
lea eax, [ebp - 0x220]
push str.readAdvDataFromExec_ReadParamsValueError__s__d
push eax
call fcn.0042fcb0
add esp, 0xc
mov ecx, esp
push 0x49a8f4
call fcn.0042d680
lea ecx, [ebp - 0x220]
call fcn.00444920
push dword [ebp - 0x220]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwCertificateAddress_err___s_
push 3
push 0
call fcn.00458450
add esp, 0x18
lea ecx, [ebp - 0x21c]
call fcn.0042cc30
lea ecx, [ebp - 0x224]
call fcn.0042cc30
mov eax, dword [ebp - 0x220]
cmp dword [eax - 0xc], 0
jne 0x42c199
mov dword [ebp - method.Json::FastWriter.virtual_0], vtable.Json::FastWriter.0
mov dword [ebp - 0x27c], 0xf
mov dword [ebp - 0x280], 0
mov byte [ebp - 0x290], 0
mov byte [ebp - 0x278], 0
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x294]
call fcn.00451330
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 0x10
jb 0x42c148
mov eax, dword [eax]
mov esi, dword [ebp - 0x2bc]
add esi, 0x1a8
push eax
mov ecx, esi
call fcn.0042d490
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0xc
call fcn.0042c490
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax - 0xc]
dec eax
push eax
call fcn.0042d7a0
cmp ax, 0xa
jne 0x42c18e
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax - 0xc]
dec eax
push eax
call fcn.0042d740
lea ecx, [ebp - 0x294]
call fcn.004286a0
lea ecx, [ebp - 0x274]
call fcn.0044ea10
jmp 0x42c203
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
call fcn.0042cce0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x21c]
push dword [ebp - 0x224]
push dword [ebp - 0x2b8]
push str.no_valid_advData_version_d_marker_x
push eax
call fcn.0042fcb0
push dword [ebp - 0x21c]
push str.CApplication::ReadAdvDataFromExec
push str._s_dwAdvVersion_err___s_
push 3
push 0
call fcn.00458450
add esp, 0x24
lea ecx, [ebp - 0x21c]
call fcn.0042cc30
lea ecx, [ebp - 0x234]
call fcn.0042db90
or edi, 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.0042db90
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x228]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42c23d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x25c]
test eax, eax
je 0x42c24e
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x260]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, 0xffffffff
je 0x42c262
push eax
call esi
mov eax, dword [ebp - 0x264]
cmp eax, 0xffffffff
je 0x42c270
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x220]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x42c292
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045f17f
mov esp, ebp
pop ebp
ret