Function at 0x41560b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff88
mov dword [ebp - 0x44], edx
mov dword [ebp - 4], eax
mov eax, 0x51840c
call fcn.00505774
mov dword [ebp - 0x4c], 1
lea edx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.00512fe4
inc dword [ebp - 0x4c]
mov word [ebp - 0x58], 0xc
mov word [ebp - 0x58], 0x18
lea eax, [ebp - 8]
call fcn.0040af7c
inc dword [ebp - 0x4c]
mov word [ebp - 0x58], 0xc
mov word [ebp - 0x58], 0x24
lea eax, [ebp - 0xc]
call fcn.0040af7c
inc dword [ebp - 0x4c]
mov word [ebp - 0x58], 0xc
mov word [ebp - 0x58], 0x30
lea eax, [ebp - 0x10]
call fcn.0040af7c
inc dword [ebp - 0x4c]
mov word [ebp - 0x58], 0xc
mov word [ebp - 0x58], 0x3c
lea eax, [ebp - 0x14]
call fcn.0040af7c
inc dword [ebp - 0x4c]
mov word [ebp - 0x58], 0xc
lea edx, [ebp - 4]
lea eax, [ebp - 0x14]
call fcn.0051314c
mov word [ebp - 0x58], 0x48
lea eax, [ebp - 0x18]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
lea eax, [ebp - 0x14]
call fcn.0051333c
lea edx, [ebp - 0x18]
lea eax, [ebp - 8]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00513124
xor ecx, ecx
mov dword [ebp - 0x6c], ecx
mov word [ebp - 0x58], 0xc
mov byte [ebp - 0x6d], 0
mov word [ebp - 0x58], 0xc
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x74], eax
mov word [ebp - 0x58], 0xc
cmp dword [ebp - 0x74], 9
jge 0x415a18
mov word [ebp - 0x58], 0x54
lea eax, [ebp - 0x1c]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, dword [ebp - 0x74]
shl eax, 2
add eax, 0x517d90
call fcn.0051333c
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0xc]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00513124
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
call fcn.005132a4
mov dword [ebp - 0x78], eax
mov word [ebp - 0x58], 0xc
cmp dword [ebp - 0x78], 0
jle 0x415a0b
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x6c], ecx
mov byte [ebp - 0x6d], 1
mov eax, dword [ebp - 0x74]
cmp eax, 8
ja case.default.0x415777
jmp dword [eax*4 + 0x41577e]
mov edx, sym.Setup.exe__InstallPath
lea eax, [ebp - 0x10]
call fcn.0051314c
jmp case.default.0x415777
mov word [ebp - 0x58], 0x60
lea eax, [ebp - 0x20]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, 0x2b
call sym.Setup.exe__GetFilePath_qqri
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x10]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00513124
jmp case.default.0x415777
mov word [ebp - 0x58], 0x6c
lea eax, [ebp - 0x24]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, 0x14
call sym.Setup.exe__GetFilePath_qqri
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x10]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00513124
jmp case.default.0x415777
mov word [ebp - 0x58], 0x78
lea eax, [ebp - 0x28]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, 0x26
call sym.Setup.exe__GetFilePath_qqri
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x10]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00513124
jmp case.default.0x415777
mov word [ebp - 0x58], 0x84
lea eax, [ebp - 0x2c]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, 0x25
call sym.Setup.exe__GetFilePath_qqri
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x10]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00513124
jmp case.default.0x415777
mov word [ebp - 0x58], 0x90
lea eax, [ebp - 0x30]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, 0x24
call sym.Setup.exe__GetFilePath_qqri
lea edx, [ebp - 0x30]
lea eax, [ebp - 0x10]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00513124
jmp case.default.0x415777
mov word [ebp - 0x58], 0x9c
lea eax, [ebp - 0x34]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, 0x10
call sym.Setup.exe__GetFilePath_qqri
lea edx, [ebp - 0x34]
lea eax, [ebp - 0x10]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00513124
jmp case.default.0x415777
mov word [ebp - 0x58], 0xa8
lea eax, [ebp - 0x38]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, 0x10
call sym.Setup.exe__GetFilePath_qqri
lea edx, [ebp - 0x38]
lea eax, [ebp - 0x10]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00513124
mov word [ebp - 0x58], 0xb4
mov edx, str.MicrosoftInternet_ExplorerQuick_Launch_
lea eax, [ebp - 0x3c]
call fcn.00512fa4
inc dword [ebp - 0x4c]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x10]
call fcn.00513160
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00513124
jmp case.default.0x415777
mov word [ebp - 0x58], 0xc0
lea eax, [ebp - 0x40]
call fcn.0040af7c
mov edx, eax
inc dword [ebp - 0x4c]
mov eax, 0x17
call sym.Setup.exe__GetFilePath_qqri
lea edx, [ebp - 0x40]
lea eax, [ebp - 0x10]
call fcn.0051314c
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00513124
lea eax, [ebp - 0xc]
call fcn.00410c00
mov ecx, eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x78]
call fcn.0051327c
lea eax, [ebp - 0xc]
call fcn.00410c00
mov ecx, eax
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x78]
call fcn.0051327c
lea edx, [ebp - 0x10]
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0x78]
call fcn.00513268
lea edx, [ebp - 0x10]
lea eax, [ebp - 0x14]
mov ecx, dword [ebp - 0x78]
call fcn.00513268
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 9
jl 0x415704
cmp byte [ebp - 0x6d], 0
je 0x415a23
jmp 0x4156e4
mov word [ebp - 0x58], 0xcc
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x44]
call fcn.0051314c
mov eax, dword [ebp - 0x44]
mov word [ebp - 0x58], 0xd8
push eax
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00513124
dec dword [ebp - 0x4c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00513124
dec dword [ebp - 0x4c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00513124
dec dword [ebp - 0x4c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00513124
dec dword [ebp - 0x4c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00513124
pop eax
mov word [ebp - 0x58], 0xcc
inc dword [ebp - 0x4c]
mov edx, dword [ebp - 0x68]
mov dword fs:[0], edx
mov esp, ebp
pop ebp
ret