Function at 0x443c00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x688
mov eax, 0x50326a
call fcn.0049ca93
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x1a8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x694], ebx
and dword [ebp - 0x688], 0
push str.avast.browser.protect
call fcn.0040a69b
mov esi, eax
push str.event
lea ecx, [ebp - 0x678]
mov dword [ebp - 4], 1
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x660]
mov byte [ebp - 4], 2
call fcn.004420c7
and dword [ebp - 0x680], 0
lea ecx, [ebp - 0x640]
push str.event_id
mov byte [ebp - 4], 3
mov dword [ebp - 0x684], edi
call fcn.0040a69b
lea eax, [ebp - 0x684]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x628]
call fcn.004422fb
push edi
mov byte [ebp - 4], 5
call fcn.00444ef5
pop ecx
push eax
lea ecx, [ebp - 0x190]
call fcn.0040a69b
mov esi, eax
push str.event_type
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 6
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 7
call fcn.004420c7
push 0x5343f0
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 8
call fcn.0040a69b
mov esi, eax
push 0x5347a0
lea ecx, [ebp - 0x5d0]
mov byte [ebp - 4], 9
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 0xa
call fcn.004420c7
push 0x5345b8
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xb
call fcn.0040a69b
mov esi, eax
push str.product_gitref
lea ecx, [ebp - 0x598]
mov byte [ebp - 4], 0xc
call fcn.0040a69b
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x580]
push esi
call fcn.004420c7
push 0x5343d0
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0xe
call fcn.0040a69b
mov esi, eax
push 0x5347c0
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0xf
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x10
call fcn.004420c7
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x11
push eax
call fcn.004449cc
mov esi, eax
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x12
mov dword [esp], str.user_id
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x13
call fcn.004420c7
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x14
push eax
call fcn.00444336
mov esi, eax
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 0x15
mov dword [esp], str.machine_id
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 0x16
call fcn.004420c7
mov byte [ebp - 4], 0x17
call fcn.004446af
push str.protection_level_id
lea ecx, [ebp - 0x4b8]
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x680], edx
call fcn.0040a69b
lea eax, [ebp - 0x684]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x4a0]
call fcn.004422fb
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x19
push eax
call fcn.004446b6
mov esi, eax
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x1a
mov dword [esp], str.protection_level
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x1b
call fcn.004420c7
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x690]
push eax
call fcn.00443961
mov esi, eax
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x1d
mov dword [esp], str.associations
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 0x1e
call fcn.00442209
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x1f
push str.InstallDate
push eax
call fcn.00444781
pop ecx
pop ecx
mov esi, eax
push str.install_date
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x20
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x21
call fcn.004420c7
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x22
push str.InstallTimestamp
push eax
call fcn.00444781
pop ecx
pop ecx
mov esi, eax
push str.install_timestamp
lea ecx, [ebp - 0x3d8]
mov byte [ebp - 4], 0x23
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x24
call fcn.004420c7
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x25
push str.CampaignId
push eax
call fcn.00444781
pop ecx
pop ecx
mov esi, eax
push str.campaign_id
lea ecx, [ebp - 0x3a0]
mov byte [ebp - 4], 0x26
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x388]
mov byte [ebp - 4], 0x27
call fcn.004420c7
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x28
push str.CampaignGroupId
push eax
call fcn.00444781
pop ecx
pop ecx
mov esi, eax
push str.campaign_group_id
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x29
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x2a
call fcn.004420c7
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x2b
push str.CampaignSource
push eax
call fcn.00444781
pop ecx
pop ecx
mov esi, eax
push str.campaign_source
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x2c
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0x2d
call fcn.004420c7
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x2e
push str.SearchProvider
push eax
call fcn.00444781
pop ecx
pop ecx
mov esi, eax
push str.search_provider
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 4], 0x2f
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 0x30
call fcn.004420c7
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x31
push str.A8504530_742B_42BC_895D_2BAD6406F698
push eax
call fcn.004439b6
pop ecx
pop ecx
mov esi, eax
push str.browser_version
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x32
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x33
call fcn.004420c7
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x34
push str.6D37C760_8FED_48A5_A4A4_CEC095B2D8DD
push eax
call fcn.004439b6
pop ecx
pop ecx
mov esi, eax
push str.omaha_version
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x35
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x36
call fcn.004420c7
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x37
push eax
call fcn.00443b40
mov esi, eax
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x38
mov dword [esp], str.os_last_update
call fcn.0040a69b
push esi
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x39
call fcn.004420c7
mov byte [ebp - 4], 0x3a
call fcn.0044430b
push str.os_64bit
lea ecx, [ebp - 0x218]
mov byte [ebp - 0x679], al
call fcn.0040a69b
lea eax, [ebp - 0x679]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x200]
call fcn.0044238f
push str.product_64bit
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x3c
mov byte [ebp - 0x679], 0
call fcn.0040a69b
lea eax, [ebp - 0x679]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0x1c8]
call fcn.0044238f
lea eax, [ebp - 0x1a8]
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x678]
push eax
push ecx
mov ecx, ebx
call fcn.004433a2
push 0x4435e4
push 0x16
push 0x38
lea eax, [ebp - 0x678]
mov dword [ebp - 0x688], 1
push eax
mov byte [ebp - 4], 0x4e
call fcn.0049d3c6
lea ecx, [ebp - 0x28]
call fcn.0040dd63
lea ecx, [ebp - 0x40]
call fcn.0040dd63
lea ecx, [ebp - 0x58]
call fcn.0040dd63
lea ecx, [ebp - 0x70]
call fcn.0040dd63
lea ecx, [ebp - 0x88]
call fcn.0040dd63
lea ecx, [ebp - 0xa0]
call fcn.0040dd63
lea ecx, [ebp - 0xb8]
call fcn.0040dd63
lea ecx, [ebp - 0xd0]
call fcn.0040dd63
lea ecx, [ebp - 0xe8]
call fcn.0040dd63
lea eax, [ebp - 0x690]
push eax
mov ecx, eax
call fcn.00401f28
lea ecx, [ebp - 0x100]
call fcn.0040dd63
lea ecx, [ebp - 0x118]
call fcn.0040dd63
lea ecx, [ebp - 0x130]
call fcn.0040dd63
lea ecx, [ebp - 0x148]
call fcn.0040dd63
lea ecx, [ebp - 0x160]
call fcn.0040dd63
lea ecx, [ebp - 0x178]
call fcn.0040dd63
lea ecx, [ebp - 0x190]
call fcn.0040dd63
lea ecx, [ebp - 0x1a8]
call fcn.0040dd63
mov eax, ebx
call fcn.0049ca42
ret