Function at 0x415fff
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x220
lea ebp, [esp - 4]
mov eax, dword [0x59d300]
xor eax, ebp
mov dword [ebp + 0x220], eax
push 0x18c
mov eax, 0x531135
call fcn.00506664
push str.http:__stats.avg.com_services_i.asmx_install_failures_ClientID_GUID_MachineID_MID_DistributionSource_DISTSOURCE_Profile_PROFILE_Version_TBVERSION_pid_PID_sg_SG_Language_LANG_AdditionalInfoXMLEventType_EVENTTYPE_LastStep_LASTSTEP_FailureReason_LASTSTEPREASON_
lea esi, [ebp + 0x204]
mov dword [ebp - 4], 4
call fcn.0040b812
push str.uninstall
lea esi, [ebp + 0x1e8]
mov byte [ebp - 4], 5
call fcn.0040b812
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp + 0x22c]
push eax
lea eax, [ebp + 0x1a4]
push eax
mov byte [ebp - 4], 0x3e
call fcn.0040e8c0
mov edi, 0x54323c
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x3f
call fcn.0040b812
push str.ClientID
lea esi, [ebp + 0x1c]
mov byte [ebp - 4], 0x40
call fcn.0040b812
mov eax, esi
push eax
lea eax, [ebp + 0x1a4]
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp + 0x80]
mov byte [ebp - 4], 0x41
call fcn.0040f3b5
xor ebx, ebx
push ebx
push 1
call fcn.0040dac5
push ebx
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.0040dac5
push edi
lea esi, [ebp]
call fcn.0040b812
push str.DistributionSource
lea esi, [ebp + 0x38]
mov byte [ebp - 4], 0x45
call fcn.0040b812
mov eax, esi
push eax
lea eax, [ebp + 0x1a4]
push eax
lea ecx, [ebp]
lea edx, [ebp + 0x9c]
mov byte [ebp - 4], 0x46
call fcn.0040f3b5
push ebx
push 1
call fcn.0040dac5
push ebx
mov byte [ebp - 4], 0x49
push 1
lea esi, [ebp]
call fcn.0040dac5
push edi
lea esi, [ebp + 0x1c]
call fcn.0040b812
push str.ToolbarVersion
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x4a
call fcn.0040b812
mov eax, esi
push eax
lea eax, [ebp + 0x1a4]
push eax
lea ecx, [ebp + 0x1c]
lea edx, [ebp + 0xd4]
mov byte [ebp - 4], 0x4b
call fcn.0040f3b5
push ebx
push 1
call fcn.0040dac5
push ebx
push 1
lea esi, [ebp + 0x1c]
mov byte [ebp - 4], 0x4e
call fcn.0040dac5
push edi
lea esi, [ebp - 0x10c]
call fcn.0040b812
push str.Profile
lea esi, [ebp]
mov byte [ebp - 4], 0x4f
call fcn.0040b812
mov eax, esi
push eax
lea eax, [ebp + 0x1a4]
push eax
lea ecx, [ebp - 0x10c]
lea edx, [ebp + 0x10c]
mov byte [ebp - 4], 0x50
call fcn.0040f3b5
push ebx
push 1
call fcn.0040dac5
push ebx
push 1
lea esi, [ebp - 0x10c]
mov byte [ebp - 4], 0x53
call fcn.0040dac5
push edi
lea esi, [ebp - 0x17c]
call fcn.0040b812
push str.Lang
lea esi, [ebp + 0x38]
mov byte [ebp - 4], 0x54
call fcn.0040b812
mov eax, esi
push eax
lea eax, [ebp + 0x1a4]
push eax
lea ecx, [ebp - 0x17c]
lea edx, [ebp + 0x128]
mov byte [ebp - 4], 0x55
call fcn.0040f3b5
push ebx
push 1
call fcn.0040dac5
mov byte [ebp - 4], 0x58
push ebx
push 1
lea esi, [ebp - 0x17c]
call fcn.0040dac5
lea eax, [ebp + 0xb8]
push str.TEMP
push eax
call fcn.004208f1
sub esp, 0x14
mov byte [ebp - 4], 0x59
mov esi, esp
mov dword [ebp + 0x7c], esp
push edi
call fcn.0040b812
push ebx
sub esp, 0x1c
mov byte [ebp - 4], 0x5a
lea eax, [ebp + 0xb8]
mov esi, esp
mov dword [ebp + 0x70], esp
push eax
call fcn.0040be1c
lea eax, [ebp + 0x144]
push eax
mov byte [ebp - 4], 0x59
call fcn.00414743
add esp, 0x40
push str._GUID_
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 0x5b
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0x80]
mov edi, esi
mov byte [ebp - 4], 0x5c
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x5b
call fcn.0040dac5
push str._MID_
lea esi, [ebp - 0xf0]
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0x144]
mov edi, esi
mov byte [ebp - 4], 0x5d
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x5b
call fcn.0040dac5
push str._PROFILE_
lea esi, [ebp - 0x128]
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0x10c]
mov edi, esi
mov byte [ebp - 4], 0x5e
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x5b
call fcn.0040dac5
push str._DISTSOURCE_
lea esi, [ebp - 0x80]
call fcn.0040b812
mov byte [ebp - 4], 0x5f
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0x9c]
mov edi, esi
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x5b
call fcn.0040dac5
push str._TBVERSION_
lea esi, [ebp - 0x64]
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0xd4]
mov edi, esi
mov byte [ebp - 4], 0x60
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x5b
call fcn.0040dac5
push str._LANG_
lea esi, [ebp + 0x54]
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0x128]
mov edi, esi
mov byte [ebp - 4], 0x61
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x5b
call fcn.0040dac5
push 0x54323c
lea esi, [ebp - 0x48]
call fcn.0040b812
push 0x545154
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 0x62
call fcn.0040b812
push str._SG_
lea esi, [ebp + 0x54]
mov byte [ebp - 4], 0x63
call fcn.0040b812
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x1a4]
push eax
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0x64
call fcn.0040f3b5
lea ecx, [ebp + 0x204]
push ecx
mov ebx, eax
mov edi, esi
mov byte [ebp - 4], 0x65
call fcn.0041a036
pop ecx
xor edi, edi
xor ebx, ebx
push edi
inc ebx
push ebx
lea esi, [ebp - 0x80]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp + 0x54]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp - 0x64]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x5b
call fcn.0040dac5
push 0x544d50
lea esi, [ebp - 0x9c]
call fcn.0040b812
push str.Partner_PartnerIdentifier
lea esi, [ebp + 0x54]
mov byte [ebp - 4], 0x66
call fcn.0040b812
push str.CONFIGXML
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x67
call fcn.0040b812
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0xf0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x68
call fcn.00417b55
add esp, 0xc
push edi
push ebx
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp + 0x54]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x6c
call fcn.0040dac5
push str._PID_
lea esi, [ebp - 0x144]
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0xf0]
mov edi, esi
mov byte [ebp - 4], 0x6d
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x6c
call fcn.0040dac5
push str._EVENTTYPE_
lea esi, [ebp - 0x198]
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0x1e8]
mov edi, esi
mov byte [ebp - 4], 0x6e
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x6c
call fcn.0040dac5
push str._LASTSTEP_
lea esi, [ebp - 0xd4]
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0x264]
mov edi, esi
mov byte [ebp - 4], 0x6f
call fcn.0041a036
pop ecx
push 0
push 1
mov byte [ebp - 4], 0x6c
call fcn.0040dac5
push str._LASTSTEPREASON_
lea esi, [ebp - 0x160]
call fcn.0040b812
lea eax, [ebp + 0x204]
push eax
lea ebx, [ebp + 0x280]
mov edi, esi
mov byte [ebp - 4], 0x70
call fcn.0041a036
pop ecx
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0xf0]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x144]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0xb8]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x128]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x10c]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0xd4]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x9c]
call fcn.0040dac5
push ebx
push edi
lea esi, [ebp + 0x80]
call fcn.0040dac5
lea ecx, [ebp + 0x1a4]
call fcn.0040b7c8
push ebx
push edi
lea esi, [ebp + 0x1e8]
mov byte [ebp - 4], 5
call fcn.0040dac5
call fcn.0040dbda
cmp byte [eax], bl
jne 0x41672c
lea eax, [ebp + 0x160]
push eax
call fcn.0040d9e1
lea eax, [ebp + 0x204]
push eax
push 0x543368
lea eax, [ebp + 0x168]
push str.CInstallerHelper:SendInstallFailStat:_stats_URL:
push eax
mov byte [ebp - 4], 0x71
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
lea eax, [ebp + 0x1e8]
push eax
lea ecx, [ebp + 0x160]
call fcn.0040bf31
lea edi, [ebp + 0x1e8]
mov byte [ebp - 4], 0x72
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp + 0x160]
mov byte [ebp - 4], 5
call fcn.0040c22b
mov dword [ebp + 0x70], vtable.CHttpClient.0
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x204]
push eax
lea eax, [ebp + 0x1e8]
mov byte [ebp - 4], 0x7a
push eax
lea ebx, [ebp + 0x78]
mov dword [ebp + 0x7c], 0xc8
call fcn.004294af
xor edi, edi
xor ebx, ebx
push edi
inc ebx
push ebx
lea ecx, [ebp + 0x1e8]
call fcn.0040cdb3
push edi
push ebx
lea esi, [ebp + 0x204]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp + 0x22c]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp + 0x248]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp + 0x264]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp + 0x280]
call fcn.0040dac5
push edi
push ebx
lea esi, [ebp + 0x29c]
call fcn.0040dac5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x220]
xor ecx, ebp
call fcn.004ffa47
add ebp, 0x224
leave
ret
lea eax, [ebp + 0x168]
push eax
mov byte [ebp - 4], 0x73
call fcn.0040b935
mov byte [ebp - 4], 0x74
call fcn.0040dbda
lea ecx, [ebp + 0x1e8]
call fcn.0040b84b
mov byte [ebp - 4], 0x75
cmp dword [eax + 0x18], 8
jb 0x41675f
mov esi, dword [eax + 4]
jmp 0x416762
lea esi, [eax + 4]
lea eax, [ebp + 0x168]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CInstallerHelper:SendInstallFailStat:_stats_URL:
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
lea ecx, [ebp + 0x204]
push ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
push ebx
push edi
lea esi, [ebp + 0x1e8]
mov byte [ebp - 4], 0x74
call fcn.0040dac5
lea eax, [ebp + 0x74]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 0x74]
mov byte [ebp - 4], 0x76
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
cmp al, bl
je 0x41681c
lea eax, [ebp + 0x1e8]
push eax
lea ecx, [ebp + 0x168]
call fcn.0040b831
push 0x272
push str..InstallerHelper.cpp
push eax
push esi
lea ecx, [ebp + 0x74]
mov byte [ebp - 4], 0x77
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push edi
lea esi, [ebp + 0x1e8]
call fcn.0040dac5
lea ecx, [ebp + 0x74]
mov byte [ebp - 4], 0x74
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp + 0x168]
mov byte [ebp - 4], 0x73
call fcn.0040b8a0
mov dword [ebp - 4], 5
jmp 0x41667d