Function at 0x439080
Capabilities:
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x154]
sub esp, 0x154
push 0xffffffffffffffff
push 0x63a0f0
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x6eed24]
xor eax, ebp
mov dword [ebp + 0x150], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [edi + 0x58], 0
mov bl, 1
je 0x439162
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
push 1
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0
push eax
lea esi, [edi + 0x54]
push esi
call fcn.0040ce00
add esp, 0xc
test al, al
je 0x439144
mov eax, dword [ebp - 0x2c]
test eax, eax
sete bl
test eax, eax
je 0x439144
mov ecx, dword [esi]
test ecx, ecx
jne 0x439110
mov ecx, 0x649aa0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x43911c
mov eax, 0x649aa0
mov edx, dword [edi + 0x14]
test edx, edx
jne 0x439128
mov edx, 0x649aa0
push ecx
push eax
push edx
push str.__Product__s_ignored_due_to_existing_value__s_in_registry_key__u__s___
push 4
push 0x18a
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x1c
mov eax, dword [ebp - 0x30]
mov dword [ebp - 4], 1
test eax, eax
je 0x43915b
push eax
call fcn.00446420
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x4c], 0
je 0x4391fc
xor bl, bl
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
push 1
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push eax
lea esi, [edi + 0x48]
push esi
call fcn.0040ce00
add esp, 0xc
test al, al
je 0x4391ac
mov eax, dword [ebp - 0x2c]
test eax, eax
setne bl
test eax, eax
jne 0x4391de
mov eax, dword [esi]
test eax, eax
jne 0x4391b7
mov eax, 0x649aa0
mov ecx, dword [edi + 0x14]
test ecx, ecx
jne 0x4391c3
mov ecx, 0x649aa0
push eax
push ecx
push str.__Product__s_ignored_due_to_empty_registry_key__u__s___
push 4
push 0x193
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [ebp - 0x30]
mov dword [ebp - 4], 3
test eax, eax
je 0x4391f5
push eax
call fcn.00446420
add esp, 4
mov dword [ebp - 4], 0xffffffff
test bl, bl
jne 0x439211
and dword [edi + 0xa4], 0xfffffaff
xor al, al
jmp 0x4398ad
cmp dword [edi + 0x40], 0
je 0x439389
mov eax, dword [0x6f50f8]
lea esi, [edi + 0x94]
push 1
shr eax, 0x14
lea ebx, [edi + 0x3c]
and al, 1
push esi
push ebx
mov byte [edi + 0xa8], al
call fcn.0040ce00
add esp, 0xc
test al, al
jne 0x43929f
cmp byte [edi + 0xa8], al
je 0x43929f
push 0
push esi
push ebx
call fcn.0040ce00
add esp, 0xc
test al, al
je 0x439265
mov byte [edi + 0xa8], 0
jmp 0x439273
cmp byte [edi + 0xa8], 0
mov ecx, str._r_not
jne 0x439278
mov ecx, 0x64a4b8
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x439284
mov eax, 0x649aa0
push ecx
push eax
push str.__Product__s_folder_path_is__sfound____in_32_bit_hive_of_Registry
push 4
push 0x1a3
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [edi + 0x98]
test eax, eax
je 0x439347
mov edx, dword [esi]
mov ecx, 0x649aa0
test edx, edx
je 0x4392ba
mov ecx, edx
cmp word [ecx + eax*2 - 2], 0x5c
je 0x439347
mov eax, dword [esi + 8]
mov ebx, dword [esi + 4]
sub eax, ebx
cmp eax, 1
jb 0x4392d7
mov eax, ebx
jmp 0x43930c
lea eax, [ebx + 0x21]
and eax, 0xffffffe0
mov dword [ebp - 0x14], eax
add eax, eax
push eax
push edx
call fcn.00446560
mov edx, eax
add esp, 8
test edx, edx
je 0x439347
cmp dword [esi], 0
jne 0x439300
mov ecx, dword [esi + 4]
xor eax, eax
mov word [edx + ecx*2], ax
mov eax, dword [ebp - 0x14]
dec eax
mov dword [esi], edx
mov dword [esi + 8], eax
mov eax, dword [esi + 4]
cmp ebx, eax
jbe 0x439312
mov ebx, eax
lea ecx, [edx + ebx*2]
mov dword [ebp - 0x14], ecx
cmp ebx, eax
jae 0x439331
sub eax, ebx
add eax, eax
push eax
push ecx
lea eax, [ecx + 2]
push eax
call fcn.004b4200
mov ecx, dword [ebp - 0x14]
add esp, 0xc
mov eax, 0x5c
mov word [ecx], ax
inc dword [esi + 4]
xor edx, edx
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov word [eax + ecx*2], dx
cmp dword [edi + 0x98], 0
jne 0x439357
mov eax, 0x649c60
jmp 0x439362
mov eax, dword [esi]
test eax, eax
jne 0x439362
mov eax, 0x649aa0
mov ecx, dword [edi + 0x14]
test ecx, ecx
jne 0x43936e
mov ecx, 0x649aa0
push eax
push ecx
push str.__Product__s_have_folder_path__u__s___
push 4
push 0x1a7
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [0x6f50f8]
and eax, 0x100000
neg eax
sbb eax, eax
neg eax
inc eax
cmp byte [edi + 0xa8], 0
mov dword [edi + 0xc4], eax
jne 0x4393b7
test al, 2
je 0x4393b7
mov dword [edi + 0xc4], 1
xor bl, bl
mov dword [edi + 0xa0], 0
cmp dword [edi + 0x7c], 0
je 0x439419
lea eax, [edi + 0xac]
mov ecx, edi
push eax
lea esi, [edi + 0x78]
push esi
call fcn.00439de0
mov bl, al
mov ecx, 0x64a4b8
test bl, bl
jne 0x4393eb
mov ecx, str._r_Not
mov eax, dword [esi]
test eax, eax
jne 0x4393f6
mov eax, 0x649aa0
push ecx
push eax
push str.__Looking_up_CheckUninstall_value__s_in_list_SOFTWAREMicrosoftWindowsCurrentVersionUninstall____sFound___
push 4
push 0x1b8
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x18
test bl, bl
jne 0x439532
cmp dword [edi + 0x64], 0
je 0x4394df
push 0x4e
lea eax, [ebp + 0x100]
push 0
push eax
call fcn.004b40a0
mov eax, dword [edi + 0x60]
add esp, 0xc
test eax, eax
jne 0x439442
mov eax, 0x649aa0
lea ecx, [ebp + 0x100]
push ecx
push 0
push 0
push eax
call sub.msi.dll_MsiSourceListClearAllW
push 0x100
mov esi, eax
lea eax, [ebp]
push 0
push eax
call fcn.004b40a0
add esp, 0xc
mov dword [ebp - 0x14], 0x80
test esi, esi
js 0x4394a8
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp]
push eax
push str.VersionString
lea eax, [ebp + 0x100]
push eax
call sub.msi.dll_MsiGetPropertyW
push 0
lea eax, [ebp]
lea ecx, [edi + 0xac]
push eax
call fcn.00409b10
mov bl, al
mov ecx, 0x64a4b8
test bl, bl
jne 0x4394ad
mov ecx, str._r_Not
mov eax, dword [edi + 0x60]
test eax, eax
jne 0x4394b9
mov eax, 0x649aa0
lea edx, [ebp + 0x100]
push edx
push ecx
push eax
push str.__CheckMsi_value__s__sFound____in_MSI_registry_in_product__s
push 4
push 0x1c8
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x1c
test bl, bl
jne 0x439532
cmp dword [edi + 0x70], 0
je 0x439532
movzx eax, byte [edi + 0xa8]
lea esi, [edi + 0x6c]
push eax
lea ecx, [edi + 0xac]
push esi
call fcn.00409e20
mov bl, al
mov ecx, 0x64a4b8
test bl, bl
jne 0x43950c
mov ecx, str._r_Not
mov eax, dword [esi]
test eax, eax
jne 0x439517
mov eax, 0x649aa0
push ecx
push eax
push str.__CheckRegistry_value__s__sFound____in_Registry
push 4
push 0x1d0
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x18
mov eax, dword [edi + 0x94]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
test eax, eax
jne 0x439556
mov eax, 0x649aa0
push dword [edi + 0x98]
lea ecx, [ebp - 0x24]
push eax
call fcn.00403940
mov dword [ebp - 4], 4
test bl, bl
jne 0x4396cc
cmp dword [edi + 0x98], 0
je 0x4396a1
cmp dword [edi + 0x88], 0
je 0x4396a1
mov ebx, dword [edi + 0x84]
mov esi, dword [edi + 0x88]
test ebx, ebx
jne 0x4395a3
mov ebx, 0x649aa0
test esi, esi
jns 0x4395c5
test ebx, ebx
je 0x439642
mov esi, ebx
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4395b4
sub esi, ecx
sar esi, 1
test esi, esi
je 0x439642
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
sub eax, ecx
cmp esi, eax
jbe 0x439614
lea eax, [ecx + 0x20]
add eax, esi
and eax, 0xffffffe0
mov dword [ebp - 0x14], eax
add eax, eax
push eax
push dword [ebp - 0x24]
call fcn.00446560
mov edx, eax
add esp, 8
test edx, edx
je 0x439642
cmp dword [ebp - 0x24], 0
jne 0x439605
mov ecx, dword [ebp - 0x20]
xor eax, eax
mov word [edx + ecx*2], ax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x1c], eax
jmp 0x439617
mov edx, dword [ebp - 0x24]
lea eax, [edx + ecx*2]
mov dword [ebp - 0x14], eax
test esi, esi
jle 0x439637
lea eax, [esi + esi]
push eax
push ebx
push dword [ebp - 0x14]
call fcn.004b3b20
mov ecx, dword [ebp - 0x20]
add esp, 0xc
mov edx, dword [ebp - 0x24]
add ecx, esi
xor eax, eax
mov dword [ebp - 0x20], ecx
mov word [edx + ecx*2], ax
lea eax, [ebp - 0x24]
push eax
lea ecx, [edi + 0xac]
call fcn.00409c80
mov bl, al
test bl, bl
jne 0x439671
lea eax, [ebp - 0x24]
push eax
lea ecx, [edi + 0xac]
call fcn.00409db0
mov bl, al
mov ecx, str._r_Not
test bl, bl
je 0x439676
mov ecx, 0x64a4b8
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x439682
mov eax, 0x649aa0
push ecx
push eax
push str.__Extracting_version_from_file__s____sSuccesfull___
push 4
push 0x1de
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x18
test bl, bl
jne 0x4396cc
mov eax, dword [edi + 8]
test eax, eax
jne 0x4396ad
mov eax, 0x649aa0
push eax
push str.__Product__s__b_not_found___
push 4
push 0x1f5
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
add esp, 0x14
jmp 0x43988a
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 5
lea ecx, [edi + 0xac]
push eax
call fcn.00409f30
mov ecx, dword [edi + 8]
test ecx, ecx
jne 0x439702
mov ecx, 0x649aa0
push eax
push ecx
push str.__Product__s_found_version:__b__s___
push 4
push 0x1e4
push str.e:workprgpdf5_builds_rc.328_trackerupdateupdatecontainer.cpp
call fcn.00431810
or dword [edi + 0xa4], 0x100
add esp, 0x18
cmp dword [edi + 0x98], 0
je 0x439853
mov eax, dword [0x6f50f8]
and eax, 0x100000
neg eax
sbb eax, eax
neg eax
inc eax
mov dword [edi + 0xc4], eax
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x439757
mov eax, 0x649aa0
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x439853
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 2
lea eax, [ebp - 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x43984c
cmp dword [ebp - 0x18], 2
jne 0x43984c
mov eax, 0x5a4d
cmp ax, word [ebp - 0x10]
jne 0x43984c
push 0
push 0
push 0x3c
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
je 0x43984c
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x43984c
cmp dword [ebp - 0x18], 2
jne 0x43984c
movzx eax, word [ebp - 0x10]
push 0
push 0
add eax, 4
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
je 0x43984c
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x43984c
cmp dword [ebp - 0x18], 2
jne 0x43984c
mov ax, word [ebp - 0x10]
mov ecx, 0x8664
cmp ax, cx
jne 0x439838
mov dword [edi + 0xc4], 2
jmp 0x43984c
mov ecx, 0x14c
cmp ax, cx
jne 0x43984c
mov dword [edi + 0xc4], 1
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
call fcn.0043a090
mov ecx, edi
call fcn.004398d0
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 6
test eax, eax
je 0x439875
push eax
call fcn.00446420
add esp, 4
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
and dword [edi + 0xa4], 0xfffffbff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 4], 7
test eax, eax
je 0x4398ab
push eax
call fcn.00446420
add esp, 4
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x150]
xor ecx, ebp
call fcn.004b2558
lea esp, [ebp + 0x154]
pop ebp
ret