Function at 0x4078be
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x48
mov eax, 0x44ee2a
call fcn.0044831c
push 0x454fb0
lea eax, [ebp - 0x34]
push eax
call fcn.00401415
and dword [ebp - 4], 0
mov esi, dword [ebp + 8]
inc dword [esi + 4]
push str._request__installreport_version__s___sessionstart__s__sessionstart__c_scid__s__cscid__hdid__s__hdid__page_index__d__count__d____page__manifestinfo___manifestinfo__softwarelist___softwarelist___installreport___request_
lea eax, [ebp - 0x24]
push eax
call fcn.004081d8
push 0x454fa0
push 0x455098
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 1
call fcn.00408294
lea eax, [ebp - 0x20]
push eax
call fcn.00404718
push 0x4540d8
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 2
call fcn.00401415
push 0x4540f8
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 3
call fcn.00401415
mov byte [ebp - 4], 4
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x44]
push ecx
mov ebx, eax
call fcn.00413c9b
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 5
call fcn.00430126
pop ecx
pop ecx
mov edi, eax
mov byte [ebp - 4], 6
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x3c]
push ecx
mov ebx, eax
call fcn.00413c9b
push eax
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 7
call fcn.00430126
pop ecx
pop ecx
mov ebx, eax
mov byte [ebp - 4], 8
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x14]
push ecx
call fcn.0041ab8e
mov byte [ebp - 4], 9
push dword [eax]
lea eax, [ebp - 0x28]
push eax
call fcn.00408221
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0xa
call fcn.00430126
mov byte [ebp - 4], 0xb
push dword [esi + 8]
push dword [esi + 4]
push dword [edi]
push dword [ebx]
push dword [eax]
lea eax, [ebp - 0x20]
push dword [ebp - 0x34]
push dword [ebp - 0x24]
call fcn.00408570
add esp, 0x24
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0xa
call fcn.00404747
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 9
call fcn.00404747
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.0040114e
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 7
call fcn.00404747
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00404747
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 5
call fcn.00404747
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 4
call fcn.00404747
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.0040114e
lea edi, [esi + 0xc]
call fcn.00432634
mov edx, dword [edi]
xor eax, eax
push eax
push eax
push dword [ebp - 0x20]
mov ecx, edi
mov dword [esi + 0x44], eax
call dword [edx + 8]
mov eax, edi
call fcn.0040778f
push str.installreport
mov dword [esi + 0x54], eax
call fcn.004077b3
mov dword [esi + 0x58], eax
push str.manifestinfo
call fcn.004077b3
mov dword [esi + 0x5c], eax
mov eax, dword [esi + 0x58]
push str.softwarelist
call fcn.004077b3
mov dword [esi + 0x60], eax
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax]
push dword [eax + 0xa0]
lea eax, [ebp - 0x30]
push 0x454dc0
push eax
call fcn.0042f02b
add esp, 0xc
push str.ucikind
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xc
call fcn.00401415
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xd
push dword [esi + 0x5c]
call fcn.004080de
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.0040114e
push 0x4550dc
lea eax, [ebp - 0x1c]
push eax
call fcn.00401415
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xe
call fcn.00407f1e
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.0040114e
push str.ICName
lea eax, [ebp - 0x1c]
push eax
call fcn.00401415
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xf
mov edi, esi
call fcn.00407f1e
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.0040114e
push str.ICVersion
lea eax, [ebp + 8]
push eax
call fcn.00401415
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x10
call fcn.00407f1e
mov byte [ebp - 4], 0xc
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.0040114e
push str.ICBrandId
lea eax, [ebp + 8]
push eax
call fcn.00401415
mov byte [ebp - 4], 0x11
lea eax, [ebp + 8]
push eax
call fcn.00407f1e
mov byte [ebp - 4], 0xc
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.0040114e
push 0x4549ec
lea eax, [ebp + 8]
push eax
call fcn.00401415
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x12
call fcn.00407f1e
mov byte [ebp - 4], 0xc
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.0040114e
lea eax, [ebp - 0x54]
push eax
call fcn.0042fa3d
push str.Arguments
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x13
call fcn.00401415
mov byte [ebp - 4], 0x14
mov eax, dword [edi]
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp + 8]
push eax
mov eax, dword [ecx]
call dword [eax]
mov ecx, eax
call fcn.0041a340
jmp 0x407c2b
lea eax, [ebp + 8]
push eax
lea esi, [ebp - 0x54]
call fcn.0042fef5
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x15
call fcn.00407f1e
mov byte [ebp - 4], 0x13
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.0040114e
lea esi, [ebp - 0x54]
call fcn.0042fe74
test al, al
jne 0x407c10
mov eax, dword [edi]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax]
mov ebx, eax
call fcn.0041a7d0
test eax, 0x1000
je 0x407caf
push 0x454094
lea eax, [ebp - 0x1c]
push eax
call fcn.00401415
push str.pixeltest
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x16
call fcn.00401415
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x17
push dword [edi + 0x5c]
call fcn.004080de
mov byte [ebp - 4], 0x16
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.0040114e
mov ebx, dword [edi]
mov eax, dword [ebx + 0x28]
and dword [ebx + 0x34], 0
or dword [ebx + 0x38], 0xffffffff
mov dword [ebx + 0x30], eax
mov eax, dword [ebx + 0x30]
test eax, eax
setns dl
test dl, dl
je 0x407eb4
mov esi, dword [ebx + 0x34]
test esi, esi
je 0x407cee
mov ecx, dword [ebx + 0x38]
test ecx, ecx
je 0x407cee
cmp ecx, 0xffffffff
jne 0x407ce8
dec esi
mov dword [ebx + 0x38], esi
jmp 0x407d1b
dec ecx
mov dword [ebx + 0x38], ecx
jmp 0x407d1b
or dword [ebx + 0x38], 0xffffffff
dec eax
mov dword [ebx + 0x30], eax
js 0x407d19
test eax, eax
js 0x407ea3
cmp eax, dword [ebx + 0x28]
jge 0x407ea3
mov ecx, dword [ebx + 0x24]
lea eax, [ecx + eax*4]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
mov dword [ebx + 0x34], eax
jmp 0x407d1b
xor dl, dl
test dl, dl
je 0x407eb4
mov esi, dword [ebx + 0x28]
xor eax, eax
mov dword [ebp - 0x18], eax
test esi, esi
jle 0x407d5b
mov ecx, dword [ebx + 0x30]
test ecx, ecx
js 0x407d5b
cmp ecx, esi
jge 0x407d5b
mov edx, dword [ebx + 0x38]
mov eax, ecx
mov dword [ebp - 0x18], edx
cmp eax, esi
jge 0x407ea3
mov ecx, dword [ebx + 0x24]
lea ecx, [ecx + eax*4]
mov ecx, dword [ecx]
cmp edx, dword [ecx + 0x60]
jle 0x407d5b
or dword [ebp - 0x18], 0xffffffff
cmp eax, esi
jge 0x407ea3
mov ecx, dword [ebx + 0x24]
lea eax, [ecx + eax*4]
mov esi, dword [eax]
push str.InstallEndDateTimeText
lea eax, [ebp - 0x28]
push eax
mov dword [ebp + 8], esi
call fcn.00401415
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x18
call fcn.0040ad9f
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
call fcn.0040114e
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
je 0x407e8f
push str.InstallStartDateTimeText
lea eax, [ebp - 0x2c]
push eax
call fcn.00401415
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040ad9f
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
call fcn.0040114e
mov eax, dword [section..data]
mov ecx, section..data
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x18]
test eax, eax
js 0x407e3e
mov ecx, esi
cmp eax, dword [ecx + 0x60]
jge 0x407ea3
mov ecx, dword [ecx + 0x5c]
lea eax, [ecx + eax*4]
mov eax, dword [eax]
mov esi, dword [eax + 4]
mov ecx, esi
and cl, 0x40
cmp cl, 0x40
sete cl
test cl, cl
jne 0x407e2c
mov ecx, esi
and ecx, 0x80
cmp cl, 0x80
sete cl
test cl, cl
je 0x407e71
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
push esi
push eax
push edi
call fcn.00407f67
jmp 0x407e71
mov eax, dword [ebp + 8]
lea esi, [ebp - 0x44]
call fcn.0040b052
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp + 8]
push dword [ecx + 0x10]
push eax
push edi
call fcn.00407f67
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x40]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.0040114e
jmp 0x407cbf
push 0
push 0
push 1
push 0xc000008c
call dword [sym.imp.KERNEL32.DLL_RaiseException]
lea esi, [ebp - 0x54]
mov byte [ebp - 4], 0xc
call fcn.0042fc88
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
call fcn.0040114e
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 1
call fcn.00404747
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0
call fcn.00404747
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
call fcn.0040114e
call fcn.004483f4
ret 4