Function at 0x4229b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4fbe71
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
mov eax, dword [0x530790]
xor eax, esp
mov dword [esp + 0xa0], eax
push ebx
push esi
push edi
mov eax, dword [0x530790]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
xor edi, edi
mov esi, ecx
push edi
xor eax, eax
mov ebx, 7
push 0x511a94
lea ecx, [esp + 0x9c]
mov dword [esp + 0x48], esi
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb0], edi
mov word [esp + 0xa0], ax
call fcn.0041c0c0
mov dword [esp + 0xc0], edi
call fcn.004228a0
test al, al
je 0x422aad
lea ebx, [esp + 0x94]
call fcn.004227d0
xor ecx, ecx
push 0x11
mov word [esp + 0x24], cx
xor ebx, ebx
push str.Internet_Explorer
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], ebx
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
mov edx, esi
mov byte [esp + 0xc0], 1
call fcn.00423eb0
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x9c]
push edx
mov ecx, eax
call fcn.0041bfc0
mov byte [esp + 0xc0], bl
cmp dword [esp + 0x34], 8
jb 0x422aa8
mov eax, dword [esp + 0x20]
push eax
call fcn.004ccb07
add esp, 4
xor edi, edi
lea ebx, [edi + 7]
lea ecx, [esp + 0x94]
call fcn.0041bd90
mov edx, str.InstallerSuccessLaunchCmdLine
mov ecx, str.SOFTWAREYandexYandexBrowser
call fcn.0041e610
test al, al
jne 0x422ad5
call fcn.00420960
test al, al
je 0x422b41
lea ecx, [esp + 0x94]
call fcn.00420cd0
xor ecx, ecx
push 6
mov word [esp + 0x24], cx
push str.Yandex
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edi
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
mov edx, esi
mov byte [esp + 0xc0], 2
call fcn.00423eb0
push 0xffffffffffffffff
push edi
lea edx, [esp + 0x9c]
push edx
mov ecx, eax
call fcn.0041bfc0
mov byte [esp + 0xc0], 0
cmp dword [esp + 0x34], 8
jb 0x422b41
mov eax, dword [esp + 0x20]
push eax
call fcn.004ccb07
add esp, 4
lea ecx, [esp + 0x94]
call fcn.0041bd90
mov edx, str.UninstallString
mov ecx, str.SOFTWAREGoogleUpdateClientState8A69D345_D564_463c_AFF1_A69D9E530F96
call fcn.0041e610
test al, al
je 0x422bd6
lea ebx, [esp + 0x94]
call fcn.00422210
xor ecx, ecx
push 0xd
mov word [esp + 0x24], cx
xor ebx, ebx
push str.Google_Chrome
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], ebx
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
mov edx, esi
mov byte [esp + 0xc0], 3
call fcn.00423eb0
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x9c]
push edx
mov ecx, eax
call fcn.0041bfc0
mov byte [esp + 0xc0], bl
cmp dword [esp + 0x34], 8
jb 0x422bd1
mov eax, dword [esp + 0x20]
push eax
call fcn.004ccb07
add esp, 4
xor edi, edi
lea ebx, [edi + 7]
lea ecx, [esp + 0x94]
call fcn.0041bd90
mov edx, str.InstallerSuccessLaunchCmdLine
mov ecx, str.SOFTWAREYandexYandexBrowser
call fcn.0041e610
test al, al
jne 0x422bfe
call fcn.00420b50
test al, al
je 0x422c6a
lea ecx, [esp + 0x94]
call fcn.00420c20
xor ecx, ecx
push 5
mov word [esp + 0x24], cx
push str.Amigo
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edi
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
mov edx, esi
mov byte [esp + 0xc0], 4
call fcn.00423eb0
push 0xffffffffffffffff
push edi
lea edx, [esp + 0x9c]
push edx
mov ecx, eax
call fcn.0041bfc0
mov byte [esp + 0xc0], 0
cmp dword [esp + 0x34], 8
jb 0x422c6a
mov eax, dword [esp + 0x20]
push eax
call fcn.004ccb07
add esp, 4
lea ecx, [esp + 0x94]
call fcn.0041bd90
call fcn.0041f360
test al, al
je 0x422ceb
lea ecx, [esp + 0x94]
call fcn.00420d80
xor ecx, ecx
push 5
mov word [esp + 0x24], cx
push str.Opera
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edi
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
mov edx, esi
mov byte [esp + 0xc0], 5
call fcn.00423eb0
push 0xffffffffffffffff
push edi
lea edx, [esp + 0x9c]
push edx
mov ecx, eax
call fcn.0041bfc0
mov byte [esp + 0xc0], 0
cmp dword [esp + 0x34], 8
jb 0x422ceb
mov eax, dword [esp + 0x20]
push eax
call fcn.004ccb07
add esp, 4
lea ecx, [esp + 0x94]
call fcn.0041bd90
call fcn.0042c3f0
test al, al
je 0x422d6d
lea edi, [esp + 0x94]
call fcn.00422940
xor ecx, ecx
push ebx
mov word [esp + 0x24], cx
push str.Firefox
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], 0
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
mov edx, esi
mov byte [esp + 0xc0], 6
call fcn.00423eb0
push 0xffffffffffffffff
push 0
mov edx, edi
push edx
mov ecx, eax
call fcn.0041bfc0
mov byte [esp + 0xc0], 0
cmp dword [esp + 0x34], 8
jb 0x422d6b
mov eax, dword [esp + 0x20]
push eax
call fcn.004ccb07
add esp, 4
xor edi, edi
lea ecx, [esp + 0x4c]
push ecx
call fcn.00424750
mov byte [esp + 0xc0], bl
push 9
xor edx, edx
push str.360se.exe
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edi
mov word [esp + 0x28], dx
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x4c]
mov byte [esp + 0xc0], 8
call fcn.00423eb0
push 5
push str.360se
mov ecx, eax
call fcn.0041c0c0
mov esi, 8
mov byte [esp + 0xc0], bl
cmp dword [esp + 0x34], esi
jb 0x422ddf
mov eax, dword [esp + 0x20]
push eax
call fcn.004ccb07
add esp, 4
xor ecx, ecx
push 0xb
mov word [esp + 0x24], cx
push str.360se_3.exe
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edi
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x4c]
mov byte [esp + 0xc0], 9
call fcn.00423eb0
push 6
push str.360se3
mov ecx, eax
call fcn.0041c0c0
mov byte [esp + 0xc0], bl
cmp dword [esp + 0x34], esi
jb 0x422e3b
mov edx, dword [esp + 0x20]
push edx
call fcn.004ccb07
add esp, 4
push 0xa
xor eax, eax
push str.360se6.exe
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edi
mov word [esp + 0x28], ax
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x4c]
mov byte [esp + 0xc0], 0xa
call fcn.00423eb0
push 6
push str.360se6
mov ecx, eax
call fcn.0041c0c0
mov byte [esp + 0xc0], bl
cmp dword [esp + 0x34], esi
jb 0x422e97
mov ecx, dword [esp + 0x20]
push ecx
call fcn.004ccb07
add esp, 4
push 0xd
xor edx, edx
push str.360chrome.exe
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edi
mov word [esp + 0x28], dx
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x4c]
mov byte [esp + 0xc0], 0xb
call fcn.00423eb0
push 9
push str.360Chrome
mov ecx, eax
call fcn.0041c0c0
mov byte [esp + 0xc0], bl
cmp dword [esp + 0x34], esi
jb 0x422ef3
mov eax, dword [esp + 0x20]
push eax
call fcn.004ccb07
add esp, 4
xor ecx, ecx
push 0xe
mov word [esp + 0x24], cx
push str.360browser.exe
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edi
call fcn.0041c0c0
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x4c]
mov byte [esp + 0xc0], 0xc
call fcn.00423eb0
push 0xa
push str.360Browser
mov ecx, eax
call fcn.0041c0c0
mov byte [esp + 0xc0], bl
cmp dword [esp + 0x34], esi
jb 0x422f4f
mov edx, dword [esp + 0x20]
push edx
call fcn.004ccb07
add esp, 4
lea eax, [esp + 0x6c]
push eax
call fcn.00424750
lea esi, [esp + 0x6c]
mov byte [esp + 0xc0], 0xd
call fcn.00422530
mov ecx, dword [esp + 0x84]
mov esi, dword [ecx]
lea ecx, [esp + 0x14]
call fcn.004017e0
lea edx, [esp + 0x6c]
push edx
lea ecx, [esp + 0x18]
mov dword [esp + 0x1c], esi
call fcn.00401160
mov eax, dword [esp + 0x84]
mov esi, dword [eax]
lea ecx, [esp + 0x38]
call fcn.004017e0
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x40], esi
call fcn.00401160
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
jmp 0x422fd0
mov esi, dword [esp + 0x84]
lea ecx, [esp + 0x38]
call fcn.004017e0
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x40], esi
call fcn.00401160
lea ecx, [esp + 0x14]
call fcn.004011d0
test al, al
je 0x423011
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x18]
call fcn.004011b0
test al, al
jne 0x423016
call fcn.004cea36
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x3c]
je 0x42319b
mov esi, dword [esp + 0x64]
lea ecx, [esp + 0x44]
call fcn.004017e0
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x4c], esi
call fcn.00401160
lea ecx, [esp + 0x14]
call fcn.004011d0
test al, al
jne 0x423055
call fcn.004cea36
lea ecx, [esp + 0x14]
call fcn.00401180
mov edx, dword [esp + 0x18]
cmp edx, dword [eax + 0x18]
jne 0x42306c
call fcn.004cea36
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x8c]
add eax, 0x28
push ecx
lea esi, [esp + 0x50]
call fcn.00424100
mov esi, eax
mov ecx, esi
call fcn.004011d0
test al, al
je 0x4230a1
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.004011b0
test al, al
jne 0x4230a6
call fcn.004cea36
mov eax, dword [esi + 4]
lea ecx, [esp + 0x14]
cmp eax, dword [esp + 0x48]
je 0x423111
call fcn.004011d0
test al, al
jne 0x4230c1
call fcn.004cea36
lea ecx, [esp + 0x14]
call fcn.00401180
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x18]
jne 0x4230d8
call fcn.004cea36
mov esi, dword [esp + 0x18]
lea ecx, [esp + 0x14]
add esi, 0xc
call fcn.004011d0
test al, al
jne 0x4230f1
call fcn.004cea36
lea ecx, [esp + 0x14]
call fcn.00401180
mov edx, dword [esp + 0x18]
cmp edx, dword [eax + 0x18]
jne 0x423108
call fcn.004cea36
mov ecx, dword [esp + 0x18]
add ecx, 0x28
jmp 0x42316d
call fcn.004011d0
test al, al
jne 0x42311f
call fcn.004cea36
lea ecx, [esp + 0x14]
call fcn.00401180
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x18]
jne 0x423136
call fcn.004cea36
mov esi, dword [esp + 0x18]
lea ecx, [esp + 0x14]
add esi, 0xc
call fcn.004011d0
test al, al
jne 0x42314f
call fcn.004cea36
lea ecx, [esp + 0x14]
call fcn.00401180
mov edx, dword [esp + 0x18]
cmp edx, dword [eax + 0x18]
jne 0x423166
call fcn.004cea36
mov ecx, dword [esp + 0x18]
add ecx, 0xc
lea edx, [esp + 0x4c]
call fcn.00423eb0
mov edx, dword [esp + 0x40]
mov ecx, eax
call fcn.00423eb0
push 0xffffffffffffffff
push 0
push esi
mov ecx, eax
call fcn.0041bfc0
lea esi, [esp + 0x14]
call fcn.00425d80
jmp 0x422fd0
lea eax, [esp + 0x6c]
mov byte [esp + 0xc0], 0xe
call fcn.00424a50
mov eax, dword [esp + 0x6c]
push 1
push eax
lea ecx, [esp + 0x78]
call fcn.0040c230
lea ecx, [esp + 0x6c]
call fcn.00401150
lea eax, [esp + 0x4c]
mov byte [esp + 0xc0], 0xf
call fcn.00424a50
mov ecx, dword [esp + 0x4c]
push 1
push ecx
lea ecx, [esp + 0x58]
call fcn.0040c230
lea ecx, [esp + 0x4c]
call fcn.00401150
cmp dword [esp + 0xac], 8
jb 0x423209
mov edx, dword [esp + 0x98]
push edx
call fcn.004ccb07
add esp, 4
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.004cd040
mov esp, ebp
pop ebp
ret