Function at 0x42ddd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4cb380
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x4ffeb0]
xor eax, esp
mov dword [esp + 0x58], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ffeb0]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x88]
xor ebx, ebx
dec eax
mov dword [esp + 0x14], ebx
cmp eax, 0x69
ja case.0x42de2e.5
movzx eax, byte [eax + 0x42e100]
jmp dword [eax*4 + 0x42e0d0]
push str.360se
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.360se6
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.360chrome
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.opera
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.yandex
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.firefox
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.googlechrome
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push 0x4e3914
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.microsoftedge
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.amigo
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
push str.opera360e
mov ecx, esi
call fcn.00406560
jmp 0x42e0af
cmp edi, ebx
je 0x42e091
mov eax, edi
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x42df00
sub eax, edx
sar eax, 1
je 0x42e091
mov ebp, 7
xor ecx, ecx
mov dword [esp + 0x68], ebp
mov dword [esp + 0x64], ebx
mov word [esp + 0x54], cx
push edi
mov dword [esp + 0x7c], ebx
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
xor edx, edx
mov ecx, eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], dx
lea ebp, [ecx + 2]
jmp 0x42df50
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x42df50
sub ecx, ebp
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x20]
call fcn.004069f0
mov byte [esp + 0x78], 1
cmp dword [esp + 0x2c], ebx
jne 0x42df87
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call fcn.004050c0
jmp 0x42e033
push edi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
xor ecx, ecx
mov word [esp + 0x38], cx
mov ebp, 7
mov ecx, eax
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x42dfa7
sub ecx, edi
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x3c]
call fcn.004069f0
mov byte [esp + 0x78], 2
cmp dword [esp + 0x48], ebx
jne 0x42dfe4
lea ecx, [esp + 0x34]
call fcn.004050c0
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call fcn.004050c0
jmp 0x42e033
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x5c]
call fcn.004068c0
mov edi, 8
cmp dword [esp + 0x4c], edi
jb 0x42e00d
mov eax, dword [esp + 0x38]
push eax
call fcn.0049c830
add esp, 4
xor ecx, ecx
mov byte [esp + 0x78], bl
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], cx
cmp dword [esp + 0x30], edi
jb 0x42e033
mov edx, dword [esp + 0x1c]
push edx
call fcn.0049c830
add esp, 4
cmp dword [esp + 0x64], ebx
je 0x42e080
push str.unkn_
lea ecx, [esp + 0x1c]
call fcn.00406560
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x84], 3
call fcn.00406690
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004065a0
lea ecx, [esp + 0x18]
call fcn.004050c0
lea ecx, [esp + 0x50]
call fcn.004050c0
jmp 0x42e0af
lea ecx, [esp + 0x50]
mov dword [esp + 0x78], 0xffffffff
call fcn.004050c0
push 4
xor edx, edx
mov dword [esi + 0x18], 7
mov dword [esi + 0x14], ebx
push str.unkn
mov ecx, esi
mov word [esi + 4], dx
call fcn.004069f0
mov eax, esi
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.004a0e91
add esp, 0x68
ret