Function at 0x43b5b0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51f7a2
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x579630]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x18], 0
xor eax, eax
push 0x13
push str.bDisableCryptBroker
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], ax
call fcn.00407750
push 0x39
xor eax, eax
mov dword [ebp - 4], 0
push str.SoftwarePoliciesAdobeAcrobat_ReaderDCFeatureLockDown
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
mov word [ebp - 0x30], ax
call fcn.00407750
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x48]
mov dword [ebp - 0x18], 3
push eax
lea eax, [ebp - 0x30]
push eax
push 0x80000002
call fcn.00413490
add esp, 0x10
test al, al
je 0x43b674
cmp dword [ebp - 0x14], 0
je 0x43b674
mov bl, 1
jmp 0x43b676
xor bl, bl
cmp dword [ebp - 0x1c], 8
jb 0x43b687
push dword [ebp - 0x30]
call fcn.004085be
add esp, 4
xor eax, eax
mov dword [ebp - 0x1c], 7
cmp dword [ebp - 0x34], 8
mov dword [ebp - 0x20], 0
mov word [ebp - 0x30], ax
mov dword [ebp - 4], 0xffffffff
jb 0x43b6b3
push dword [ebp - 0x48]
call fcn.004085be
add esp, 4
push 0x2c
push 0x5171e0
push 2
push 0x5512d4
xor eax, eax
mov dword [ebp - 0x34], 7
push str.Crypt32.dll
mov ecx, esi
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], ax
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x2d
push 0x515750
push 2
push 0x551300
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x2e
push 0x515970
push 2
push 0x551318
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x2f
push 0x517390
push 2
push 0x551330
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x30
push 0x516970
push 2
push 0x551344
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x31
push 0x516000
push 2
push 0x551354
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x32
push 0x516560
push 2
push 0x551364
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x33
push 0x517710
push 2
push 0x551378
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x34
push 0x5162d0
push 2
push 0x55138c
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
mov al, 1
test bl, bl
jne 0x43bdef
push 0x38
push 0x5155c0
push 2
push 0x55139c
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x39
push 0x5147c0
push 2
push 0x5513b4
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x3a
push 0x5143f0
push 2
push 0x5513d0
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x3b
push 0x5144d0
push 2
push 0x5513f0
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x3c
push 0x514da0
push 2
push 0x551410
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x3d
push 0x514030
push 2
push 0x551434
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x3e
push 0x514ae0
push 2
push 0x551444
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x3f
push 0x513ed0
push 2
push 0x551460
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x40
push 0x513d40
push 2
push 0x551484
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x41
push 0x514620
push 2
push 0x5514a8
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x42
push 0x514c20
push 2
push 0x5514c4
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x43
push 0x5149c0
push 2
push 0x5514dc
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x44
push 0x5141f0
push 2
push 0x5514f8
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x45
push 0x5142f0
push 2
push 0x551508
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x46
push 0x514f00
push 2
push 0x55151c
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x47
push 0x515050
push 2
push 0x551530
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x48
push 0x5151a0
push 2
push 0x551544
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x49
push 0x515380
push 2
push 0x551554
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x4a
push 0x516120
push 2
push 0x551578
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x4b
push 0x516b40
push 2
push 0x551590
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x4c
push 0x516c50
push 2
push 0x5515a0
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x4d
push 0x516d90
push 2
push 0x5515b4
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x4e
push 0x516ee0
push 2
push 0x5515cc
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x4f
push 0x5170b0
push 2
push 0x5515e4
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x50
push 0x517b60
push 2
push 0x5515f4
push str.Crypt32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x35
push 0x5166a0
push 2
push 0x551608
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x36
push 0x515d60
push 2
push 0x551618
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x37
push 0x517620
push 2
push 0x551628
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x51
push 0x515b90
push 2
push 0x55163c
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x52
push 0x516830
push 2
push 0x55164c
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x53
push 0x515ee0
push 2
push 0x55165c
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x54
push 0x5178a0
push 2
push 0x551670
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x55
push 0x517a00
push 2
push 0x551680
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x56
push 0x5163f0
push 2
push 0x551690
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x57
push 0x5174b0
push 2
push 0x5516a4
push str.Advapi32.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x58
push 0x518740
push 2
push 0x5516b8
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x59
push 0x5182d0
push 2
push 0x5516ec
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x5a
push 0x5189c0
push 2
push 0x551700
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x5b
push 0x5185f0
push 2
push 0x551714
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x5c
push 0x518450
push 2
push 0x551724
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x5d
push 0x517f60
push 2
push 0x551734
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x5e
push 0x518860
push 2
push 0x551744
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x5f
push 0x517dd0
push 2
push 0x55175c
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x60
push 0x518b20
push 2
push 0x55176c
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
push 0x61
push 0x5181f0
push 2
push 0x55177c
push str.Ncrypt.dll
mov ecx, esi
call fcn.0043aaf0
test al, al
je 0x43bded
mov al, 1
jmp 0x43bdef
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401590
mov esp, ebp
pop ebp
ret