Function at 0x428ed0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57f6a8
mov eax, dword fs:[0]
push eax
sub esp, 0x30
push ebx
push esi
push edi
mov eax, dword [0x6459b8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp + 8]
xor esi, esi
cmp eax, esi
je 0x4293e0
lea ecx, [eax + 0x14]
call fcn.0056e67e
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], esi
lea edi, [esi + 1]
mov byte [ebp - 4], 1
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], esi
cmp eax, esi
jle 0x4293b9
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
call fcn.004261b0
test eax, eax
jne 0x4293b9
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0x18]
push edx
push esi
call fcn.0056e80c
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x2c], str.name
mov dword [ebp - 0x28], 4
call fcn.0056c001
test al, al
je 0x428fb1
mov eax, dword [ebp - 0x10]
lea esi, [eax + 0xc]
test eax, eax
jne 0x428f8a
mov esi, 0x616ba8
lea ecx, [ebx + 4]
test esi, esi
jne 0x428f9f
xor eax, eax
push eax
push esi
call fcn.004050c0
jmp 0x4293a8
mov eax, esi
lea edi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x428fa4
jmp 0x42900b
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x34], str.title
mov dword [ebp - 0x30], 5
call fcn.0056c001
test al, al
je 0x429020
mov eax, dword [ebp - 0x10]
lea esi, [eax + 0xc]
test eax, eax
jne 0x428fde
mov esi, 0x616ba8
lea ecx, [ebx + 0x38]
test esi, esi
jne 0x428ff3
xor eax, eax
push eax
push esi
call fcn.004050c0
jmp 0x4293a8
mov eax, esi
lea edi, [eax + 2]
jmp 0x429000
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x429000
sub eax, edi
sar eax, 1
push eax
push esi
mov edi, 1
call fcn.004050c0
jmp 0x4293a8
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x3c], 0x595c70
mov dword [ebp - 0x38], 7
call fcn.0056c001
test al, al
je 0x42905d
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x429050
add eax, 0xc
lea ecx, [ebx + 8]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 8]
jmp 0x4293a2
push str.size
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x42908d
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x429080
add eax, 0xc
lea ecx, [ebx + 0x10]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0x10]
jmp 0x4293a2
push str.description
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x4290bd
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4290b0
add eax, 0xc
lea ecx, [ebx + 0xc]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0xc]
jmp 0x4293a2
push 0x599898
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x4290ed
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4290e0
add eax, 0xc
lea ecx, [ebx + 0x14]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0x14]
jmp 0x4293a2
push str.regkey
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x42911d
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x429110
add eax, 0xc
lea ecx, [ebx + 0x1c]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0x1c]
jmp 0x4293a2
push str.level
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x42914d
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x429140
add eax, 0xc
lea ecx, [ebx + 0x18]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0x18]
jmp 0x4293a2
push str.result
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x429178
push str.true
lea ecx, [ebp - 0x10]
call fcn.0056d0c5
neg eax
sbb eax, eax
inc eax
mov dword [ebx + 0x20], eax
jmp 0x4293a8
push str.module_type
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x4291a8
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x42919b
add eax, 0xc
lea ecx, [ebx + 0x30]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0x30]
jmp 0x4293a2
push str.plugin
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x4291d3
push str.true
lea ecx, [ebp - 0x10]
call fcn.0056d0c5
neg eax
sbb eax, eax
inc eax
mov dword [ebx + 0x3c], eax
jmp 0x4293a8
push str.isnew
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x4291fe
push str.true
lea ecx, [ebp - 0x10]
call fcn.0056d0c5
neg eax
sbb eax, eax
inc eax
mov dword [ebx + 0x40], eax
jmp 0x4293a8
push str.iscommon
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x429229
push str.true
lea ecx, [ebp - 0x10]
call fcn.0056d0c5
neg eax
sbb eax, eax
inc eax
mov dword [ebx + 0x44], eax
jmp 0x4293a8
push str.parent
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x429259
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x42924c
add eax, 0xc
lea ecx, [ebx + 0x34]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0x34]
jmp 0x4293a2
push str.update_mode
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x42929b
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x429285
add eax, 0xc
push eax
call fcn.00546f3e
add esp, 4
mov dword [ebx + 0x48], eax
jmp 0x4293a8
mov eax, 0x616ba8
push eax
call fcn.00546f3e
add esp, 4
mov dword [ebx + 0x48], eax
jmp 0x4293a8
push str.isInternalService
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x4292cb
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4292be
add eax, 0xc
lea ecx, [ebx + 0x50]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0x50]
jmp 0x4293a2
push str.PhantomPDFStandard
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x429308
push 0x5977b4
lea ecx, [ebx + 0x54]
call fcn.00406060
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4292fb
add eax, 0xc
lea ecx, [ebx + 0x5c]
jmp 0x4293a2
mov eax, 0x616ba8
lea ecx, [ebx + 0x5c]
jmp 0x4293a2
push str.forcedUpgrade
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x42932f
push 0x5977b4
lea ecx, [ebp - 0x10]
call fcn.0056d0c5
test eax, eax
jne 0x4293a8
mov dword [ebx + 0x60], edi
jmp 0x4293a8
push str.SilentInstall
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x429356
push 0x5977b4
lea ecx, [ebp - 0x10]
call fcn.0056d0c5
test eax, eax
jne 0x4293a8
mov dword [ebx + 0x78], edi
jmp 0x4293a8
push str.downloader
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x42937d
push 0x5977b4
lea ecx, [ebp - 0x10]
call fcn.0056d0c5
test eax, eax
jne 0x4293a8
mov dword [ebx + 0x70], edi
jmp 0x4293a8
push 0x5997e0
lea ecx, [ebp - 0x14]
call fcn.00425f80
test al, al
je 0x4293a8
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x42939a
add eax, 0xc
jmp 0x42939f
mov eax, 0x616ba8
lea ecx, [ebx + 0x74]
push eax
call fcn.00406060
mov esi, dword [ebp - 0x1c]
add esi, edi
mov dword [ebp - 0x1c], esi
cmp esi, dword [ebp - 0x24]
jl 0x428f38
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.0056bf07
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.0056bf07
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0056bf07
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8