Function at 0x4019e9
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings

Disassembly:
push 0x1fc
mov eax, 0x4b1824
call fcn.0048d846
mov edi, ecx
mov esi, 0x4b9470
push esi
mov dword [ebp - 0x11c], edi
call fcn.00403d5d
lea ecx, [edi + 0x1c]
push esi
call fcn.00403d5d
mov ebx, 0x4b93b6
push ebx
lea ecx, [edi + 0x54]
call fcn.00403b27
push ebx
lea ecx, [edi + 0x70]
call fcn.00403b27
push esi
lea ecx, [edi + 0x8c]
call fcn.00403d5d
xor ebx, ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x118]
lea esi, [ebp - 0x84]
mov dword [edi + 0xa8], ebx
mov word [edi + 0xac], bx
mov dword [ebp - 0x118], 1
call fcn.00419170
lea ecx, [ebp - 0xbc]
push str.kometa.exe
push ecx
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00405536
pop ecx
pop ecx
push eax
lea ecx, [edi + 0x1c]
mov byte [ebp - 4], 2
call fcn.00403c3f
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.00403d84
push ebx
push 1
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.00403d84
cmp dword [edi + 0x30], 8
jb 0x401ab0
mov eax, dword [edi + 0x1c]
jmp 0x401ab3
lea eax, [edi + 0x1c]
call fcn.00419200
mov ecx, edi
mov byte [edi + 0xad], al
call fcn.00401944
or dword [ebp - 0x118], 0xffffffff
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
lea eax, [ebp - 0x118]
call fcn.0040e150
push 0xf
pop esi
push eax
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
call fcn.00403b27
mov byte [ebp - 4], 3
cmp dword [ebp - 0x38], 0x10
mov eax, dword [ebp - 0x4c]
jae 0x401b04
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], ebx
mov byte [ebp - 0xbc], bl
call fcn.00403b27
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x12c]
push eax
mov byte [ebp - 4], 4
call fcn.0049f2c0
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 6
call fcn.00403bad
mov eax, dword [ebp - 0x12c]
lea ecx, [ebp - 0x12c]
cmp eax, dword [ebp - 0x128]
je 0x402331
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.00403837
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x128]
je 0x40232b
mov eax, dword [0x4b88b8]
shr eax, 1
push eax
push ebx
lea ecx, [ebp - 0x110]
call fcn.0049e0d0
mov byte [ebp - 4], 7
call fcn.00405554
mov dword [ebp - 0x114], eax
call fcn.00405554
mov dword [ebp - 0x118], eax
call fcn.00405554
mov edi, eax
call fcn.00405554
mov esi, eax
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x110]
call fcn.0049cf40
push str.make_the_browser_as_default
push str.makedefault
mov ecx, eax
call fcn.0049e290
push str.do_import_history
push str.importhistory
mov ecx, eax
call fcn.0049e290
push str.install_start_panel
push str.installpanel
mov ecx, eax
call fcn.0049e290
push str.enable_update_mode
push str.update
mov ecx, eax
call fcn.0049e290
push str.we_have_rerun_from_admin_mode
push str.fromadminmode
mov ecx, eax
call fcn.0049e290
push str.open_given_URL_after_installing
push esi
push 0x4b9568
mov ecx, eax
call fcn.0049e3b0
mov esi, str.open_partner_URL_after_installing
push esi
push edi
push str.partnerurl
mov ecx, eax
call fcn.0049e3b0
push str.set_the_channel_for_distribution
push dword [ebp - 0x118]
mov ecx, eax
push str.channel
call fcn.0049e3b0
push esi
push dword [ebp - 0x114]
mov ecx, eax
push 0x4b95cc
call fcn.0049e3b0
lea ecx, [ebp - 0x164]
call fcn.00492ef0
lea esi, [ebp - 0x12c]
lea edi, [ebp - 0x78]
mov byte [ebp - 4], 8
call fcn.004071cb
push eax
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 9
call fcn.00499c00
mov ecx, edi
call fcn.00403e87
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0xa
call fcn.00498800
lea eax, [ebp - 0x110]
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x1a8], eax
call fcn.004987f0
lea esi, [ebp - 0x2c]
lea edi, [ebp - 0x208]
mov byte [ebp - 4], 0xb
call fcn.0040579b
push ebx
lea ecx, [ebp - 0x164]
push ecx
push eax
mov byte [ebp - 4], 0xc
call fcn.00493490
add esp, 0xc
mov ecx, esi
call fcn.00403f2d
push 0xf
pop edi
mov dword [ebp - 4], 0xa
push 0xb
push str.makedefault
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x10
call fcn.004038c2
mov esi, dword [ebp - 0x11c]
cmp eax, ebx
push ebx
seta al
push 1
lea ecx, [ebp - 0x30]
mov byte [esi + 0xa9], al
mov byte [ebp - 4], 0xa
call fcn.00403bad
push 0xd
push str.importhistory
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x11
call fcn.004038c2
cmp eax, ebx
push ebx
seta al
push 1
lea ecx, [ebp - 0x30]
mov byte [esi + 0xaa], al
mov byte [ebp - 4], 0xa
call fcn.00403bad
push 0xc
push str.installpanel
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x12
call fcn.004038c2
cmp eax, ebx
seta al
mov byte [esi + 0xab], al
mov byte [ebp - 4], 0xa
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403bad
push 6
push str.update
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x13
call fcn.004038c2
cmp eax, ebx
push ebx
seta al
push 1
lea ecx, [ebp - 0x30]
mov byte [esi + 0xac], al
mov byte [ebp - 4], 0xa
call fcn.00403bad
push 0xd
push str.fromadminmode
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x14
call fcn.004038c2
cmp eax, ebx
push ebx
seta al
push 1
lea ecx, [ebp - 0x30]
mov byte [esi + 0xa8], al
mov byte [ebp - 4], 0xa
call fcn.00403bad
mov ecx, str.SoftwareNetBoxKometaInstaller_
call fcn.00415880
cmp dword [esi + 0x10], ebx
jne 0x401f60
push 7
push str.channel
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x15
call fcn.004038c2
push ebx
push 1
lea ecx, [ebp - 0x30]
mov esi, eax
mov byte [ebp - 4], 0xa
call fcn.00403bad
cmp esi, ebx
je 0x401f60
mov byte [ebp - 4], 0x16
push 7
push str.channel
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x17
call fcn.00490400
mov ecx, eax
call fcn.004082a6
push eax
lea ecx, [ebp - 0x68]
call fcn.004035ea
push ebx
push 1
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x19
call fcn.00403bad
or dword [ebp - 0x114], 0xffffffff
cmp dword [ebp - 0x54], 0x10
mov edx, dword [ebp - 0x68]
jae 0x401f26
lea edx, [ebp - 0x68]
lea eax, [ebp - 0x114]
call fcn.0040e130
mov ecx, dword [ebp - 0x11c]
push eax
call fcn.00403d5d
push ebx
push 1
lea ecx, [ebp - 0x68]
call fcn.00403bad
mov dword [ebp - 4], 0xa
jmp 0x401f60
push 4
push 0x4b9568
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0xf
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x1b
call fcn.004038c2
push ebx
push 1
lea ecx, [ebp - 0x30]
mov esi, eax
mov byte [ebp - 4], 0xa
call fcn.00403bad
cmp esi, ebx
je 0x402013
mov byte [ebp - 4], 0x1c
push 4
push 0x4b9568
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0xf
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x1d
call fcn.00490400
mov ecx, eax
call fcn.004082a6
mov ecx, dword [ebp - 0x11c]
push 0xffffffffffffffff
push ebx
push eax
add ecx, 0x70
call fcn.00403a8e
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403bad
mov dword [ebp - 4], 0xa
jmp 0x402013
push 0xa
push str.partnerurl
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0xf
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x1f
call fcn.004038c2
push ebx
push 1
lea ecx, [ebp - 0x30]
mov esi, eax
mov byte [ebp - 4], 0xa
call fcn.00403bad
cmp esi, ebx
je 0x4020c4
push 0xa
pop esi
mov byte [ebp - 4], 0x20
push esi
push str.partnerurl
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0xf
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x21
call fcn.00490400
mov ecx, eax
call fcn.004082a6
mov ecx, dword [ebp - 0x11c]
push 0xffffffffffffffff
push ebx
push eax
add ecx, 0x54
call fcn.00403a8e
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00403bad
mov dword [ebp - 4], esi
jmp 0x4020c4
push 7
push 0x4b95cc
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0xf
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.004040a8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x23
call fcn.004038c2
push ebx
push 1
lea ecx, [ebp - 0x30]
mov esi, eax
call fcn.00403bad
cmp esi, ebx
je 0x4022e4
mov byte [ebp - 4], 0x24
push 7
push 0x4b95cc
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0xf
mov dword [ebp - 0x58], ebx
mov byte [ebp - 0x68], bl
call fcn.004040a8
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x25
call fcn.00490400
mov ecx, eax
call fcn.004082a6
push eax
lea ecx, [ebp - 0x30]
call fcn.004035ea
push ebx
push 1
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x27
call fcn.00403bad
cmp dword [ebp - 0x1c], 0x10
mov edi, dword [ebp - 0x30]
jae 0x402199
lea edi, [ebp - 0x30]
mov eax, edi
add eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], 0x10
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x114], eax
jae 0x40217d
lea esi, [ebp - 0x30]
cmp esi, eax
je 0x40219e
cmp esi, dword [ebp - 0x114]
je 0x40219e
movsx eax, byte [esi]
push eax
call fcn.00475d6a
mov byte [edi], al
inc esi
pop ecx
inc edi
jmp 0x402181
mov eax, dword [ebp - 0x30]
jmp 0x402168
mov ecx, 0x4b9650
mov eax, 0x4b9658
mov esi, str.yandex
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], ecx
mov edi, str.amigo
mov edx, str.firefox
mov ecx, str.operaold
mov eax, str.opera
mov dword [ebp - 0x190], esi
mov dword [ebp - 0x178], esi
mov dword [ebp - 0xa0], str.internetexplorer
mov dword [ebp - 0x9c], str.googlechrome
mov dword [ebp - 0x90], str.mozillafirefox
mov dword [ebp - 0x8c], str.opera12
mov dword [ebp - 0x88], str.opera25
mov dword [ebp - 0x84], 0x4b9688
mov dword [ebp - 0x80], 0x4b9690
mov dword [ebp - 0x74], 0x4b969c
mov dword [ebp - 0x70], 0x4b96a4
mov dword [ebp - 0x6c], 0x4b96a8
mov dword [ebp - 0x19c], 0x4b96b0
mov dword [ebp - 0x198], str.chrome
mov dword [ebp - 0x194], edi
mov dword [ebp - 0x18c], edx
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x174], edi
mov dword [ebp - 0x170], str.chrome
mov dword [ebp - 0x16c], 0x4b96b0
mov dword [ebp - 0x168], edx
xor esi, esi
lea ecx, [ebp - 0x30]
cmp esi, 0xe
jae 0x4022c4
push dword [ebp + esi*4 - 0xa0]
call fcn.004036ae
cmp eax, ebx
jne 0x4022c1
mov ecx, dword [ebp - 0x11c]
push dword [ebp + esi*4 - 0x19c]
add ecx, 0x8c
call fcn.00403d5d
inc esi
jmp 0x402291
push ebx
push 1
call fcn.00403bad
mov dword [ebp - 4], 0xa
jmp 0x4022e4
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x2a
call fcn.00403f06
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x29
call fcn.00403f06
lea ecx, [ebp - 0x208]
call fcn.00403e87
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 7
call fcn.004023f7
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 6
call fcn.004023b2
lea ecx, [ebp - 0x12c]
call fcn.00403e87
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.00403bad
mov al, 1
call fcn.0048d8a2
ret