Function at 0x42fe9a
Capabilities:
Hide graphical window

Disassembly:
push 0x2c
mov eax, 0x483183
call fcn.00460309
mov edi, ecx
mov dword [ebp - 0x24], edi
and dword [ebp - 4], 0
mov byte [ebp - 4], 3
call fcn.0043deb6
push eax
lea ecx, [ebp - 0x18]
call fcn.0042debc
lea eax, [ebp + 0xc]
push eax
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.0042faa6
lea eax, [ebp + 0xc]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str._ytd_accepted
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.ytd_accepted
mov byte [ebp - 4], 5
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.ytdownloader
mov byte [ebp - 4], 6
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
mov esi, str.browser_safeguard
push esi
mov byte [ebp - 4], 7
call fcn.00404279
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.0042fbb1
lea eax, [ebp + 0xc]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str._searchprotect_w_rt_accepted
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.searchprotect_w_rt_accepted
mov byte [ebp - 4], 8
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.searchprotect_w_rt
mov byte [ebp - 4], 9
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push esi
mov byte [ebp - 4], 0xa
call fcn.00404279
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.0042fbb1
lea eax, [ebp + 0xc]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str._outfox_accepted
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.outfox_accepted
mov byte [ebp - 4], 0xb
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.outfox
mov byte [ebp - 4], 0xc
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push esi
mov byte [ebp - 4], 0xd
call fcn.00404279
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.0042fbb1
lea eax, [ebp + 0xc]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str._oo_combo_accepted
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.websearchy_nonadmin_accepted
mov byte [ebp - 4], 0xe
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.websearchy_nonadmin
mov byte [ebp - 4], 0xf
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push esi
mov byte [ebp - 4], 0x10
call fcn.00404279
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.0042fbb1
lea eax, [ebp + 0xc]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str._ws_google
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.websearchy_google_accepted
mov byte [ebp - 4], 0x11
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.websearchy_google
mov byte [ebp - 4], 0x12
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.browser_safeguard_rockettab_nonadmin
mov byte [ebp - 4], 0x13
call fcn.00404279
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.0042fbb1
push 0
push str..msi
lea ecx, [ebp + 8]
call fcn.0040364d
cmp eax, 0xffffffff
push str.TEMPPATH
jle 0x430168
lea eax, [ebp - 0x34]
push eax
call fcn.0042d41c
pop ecx
pop ecx
mov edi, eax
mov esi, 0x4b1b48
push esi
lea eax, [ebp - 0x30]
push str.msiexec__i
push eax
mov byte [ebp - 4], 0x14
call fcn.00403b2a
add esp, 0xc
push edi
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x15
call fcn.00403a7b
add esp, 0xc
lea ecx, [ebp + 8]
push ecx
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x16
call fcn.00403a7b
add esp, 0xc
push esi
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x17
call fcn.00403a7b
add esp, 0xc
lea ecx, [ebp + 0xc]
push ecx
push eax
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 0x18
call fcn.00403a7b
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x19
call fcn.004039fe
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x34]
jmp 0x4301e4
lea eax, [ebp - 0x28]
push eax
call fcn.0042d41c
pop ecx
pop ecx
lea ecx, [ebp + 8]
push ecx
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00403a7b
add esp, 0xc
push 0x4b1b48
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00403a7b
add esp, 0xc
lea ecx, [ebp + 0xc]
push ecx
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00403a7b
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1d
call fcn.004039fe
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
mov byte [ebp - 4], 4
call fcn.00401240
xor bl, bl
call fcn.0043deb6
push eax
lea ecx, [ebp - 0x1c]
call fcn.0042debc
xor esi, esi
push esi
mov edi, 0x492900
push edi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x1e
call fcn.0040364d
cmp eax, 0xffffffff
jle 0x430258
mov eax, dword [ebp + 8]
mov esi, dword [eax - 0xc]
push 0
push edi
lea ecx, [ebp + 8]
call fcn.0040364d
sub esi, eax
push esi
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 8]
call fcn.004038b8
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1f
call fcn.004039fe
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x1e
call fcn.00401240
xor esi, esi
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 0xc], esi
je 0x430294
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str..txt_.pdf_.jpg_.jpeg_.png
call fcn.00404279
push ecx
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x20
call fcn.004036f7
mov byte [ebp - 4], 0x1e
call fcn.004279d6
pop ecx
pop ecx
test al, al
je 0x430294
mov bl, 1
lea ecx, [ebp - 0x11]
call fcn.0043df2d
mov eax, dword [0x4b1894]
mov byte [ebp - 4], 0x21
cmp eax, esi
je 0x4302e4
push 9
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 3
push esi
push esi
push esi
push esi
push 0xffffffffffffffff
push dword [0x4b1894]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edi, dword [ebp - 0x24]
add edi, 0x100
mov esi, 0x4b1884
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
and dword [0x4b1894], 0
jmp 0x430416
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edi, eax
lea ecx, [ebp - 0x11]
test bl, bl
je 0x430304
push dword [ebp - 0x18]
push str.open
call fcn.00436e1c
jmp 0x430317
mov eax, dword [ebp - 0x24]
push 0
add eax, 0x100
push eax
push dword [ebp - 0x18]
call fcn.00436dc5
test al, al
jne 0x43038a
xor esi, esi
push esi
push esi
lea eax, [ebp - 0x34]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0x1100
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push dword [ebp - 0x34]
call fcn.00404279
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.i_temp.temp
mov byte [ebp - 4], 0x22
call fcn.00404279
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
lea ecx, [ebp + 0x10]
push ecx
push str.error_product_install_
push eax
mov byte [ebp - 4], 0x23
call fcn.00403b2a
add esp, 0xc
mov byte [ebp - 4], 0x21
call fcn.00425123
add esp, 0xc
jmp 0x430416
push edi
call esi
push eax
call fcn.004249dd
fstp qword [ebp - 0x38]
pop ecx
pop ecx
call fcn.0043deb6
push eax
lea ecx, [ebp - 0x20]
call fcn.0042debc
fld qword [ebp - 0x38]
push ecx
push ecx
fstp qword [esp]
push dword [ebp + 8]
lea eax, [ebp - 0x20]
push str._s_install_took__.4f_seconds
push eax
mov byte [ebp - 4], 0x24
call fcn.00403a68
add esp, 0x14
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.004036f7
push ecx
lea eax, [ebp + 0x10]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x25
call fcn.004036f7
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.install_time
mov byte [ebp - 4], 0x26
call fcn.00404279
mov byte [ebp - 4], 0x24
mov ecx, dword [0x4b187c]
call fcn.0042c118
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401240
lea ecx, [ebp - 0x11]
mov byte [ebp - 4], 0x1e
call fcn.00441f9d
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.00401240
call fcn.004603ae
ret 0xc