Function at 0x4198c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x98
mov eax, dword [0x520014]
xor eax, ebp
mov dword [esp + 0x90], eax
xor eax, eax
dec eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
push section.Shared
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a38e
mov ebx, eax
cmp eax, 5
jae 0x419944
lea esi, [esp + 0x84]
mov byte [esi + 0xb], bl
cmp ebx, 3
jne 0x41a248
movzx eax, word [0x538004]
mov word [esp + 0x88], ax
mov eax, dword [section.Shared]
mov dword [esp + 0x84], eax
jmp 0x419986
lea edi, [ebx + 8]
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
call fcn.0048e8dd
add esp, 4
mov esi, eax
mov dword [esp + 0x84], eax
or edi, 0x80000000
mov dword [esp + 0x8c], edi
mov dword [esp + 0x88], ebx
mov eax, ebx
add eax, ebx
push eax
push section.Shared
push esi
call fcn.00491bb0
add esp, 0xc
mov word [esi + ebx*2], 0
movzx eax, byte [esp + 0x8f]
test al, al
jns 0x41999f
mov eax, dword [esp + 0x88]
test eax, eax
mov esi, 0xffffffff
je 0x4199b8
lea eax, [esp + 0x84]
mov ecx, dword [ebp + 8]
push eax
call fcn.004d5e90
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], esi
mov dword [esp + 0x80], esi
push 0x538828
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a39a
mov ebx, eax
cmp eax, 5
jae 0x419a0d
lea edi, [esp + 0x78]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x41a255
movzx eax, word [0x53882c]
mov word [esp + 0x7c], ax
mov eax, dword [0x538828]
mov dword [esp + 0x78], eax
jmp 0x419a4c
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov edi, eax
mov dword [esp + 0x78], eax
or esi, 0x80000000
mov dword [esp + 0x80], esi
xor esi, esi
dec esi
mov dword [esp + 0x7c], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x538828
push edi
call fcn.00491bb0
add esp, 0xc
mov word [edi + ebx*2], 0
movzx eax, byte [esp + 0x83]
test al, al
jns 0x419a62
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x419a96
lea edi, [esp + 0x6c]
mov ecx, edi
push str.installerdata
call fcn.004b9300
lea eax, [esp + 0x78]
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.0044aef0
cmp byte [edi + 0xb], 0
jns 0x419a96
push dword [esp + 0x6c]
call fcn.0048e90d
add esp, 4
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
push 0x53820a
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a3a3
mov ebx, eax
cmp eax, 5
jae 0x419ae8
lea edi, [esp + 0x6c]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x41a262
movzx eax, word [0x53820e]
mov word [esp + 0x70], ax
mov eax, dword [0x53820a]
mov dword [esp + 0x6c], eax
jmp 0x419b24
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov edi, eax
mov dword [esp + 0x6c], eax
or esi, 0x80000000
mov dword [esp + 0x74], esi
xor esi, esi
dec esi
mov dword [esp + 0x70], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x53820a
push edi
call fcn.00491bb0
add esp, 0xc
mov word [edi + ebx*2], 0
movzx eax, byte [esp + 0x77]
test al, al
jns 0x419b37
mov eax, dword [esp + 0x70]
test eax, eax
je 0x419b6b
lea edi, [esp + 0x60]
mov ecx, edi
push str.clids_file
call fcn.004b9300
lea eax, [esp + 0x6c]
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.0044aef0
cmp byte [edi + 0xb], 0
jns 0x419b6b
push dword [esp + 0x60]
call fcn.0048e90d
add esp, 4
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x68], esi
push 0x538414
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a3ac
mov ebx, eax
cmp eax, 5
jae 0x419bbd
lea edi, [esp + 0x60]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x41a26f
movzx eax, word [0x538418]
mov word [esp + 0x64], ax
mov eax, dword [0x538414]
mov dword [esp + 0x60], eax
jmp 0x419bf9
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov edi, eax
mov dword [esp + 0x60], eax
or esi, 0x80000000
mov dword [esp + 0x68], esi
xor esi, esi
dec esi
mov dword [esp + 0x64], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x538414
push edi
call fcn.00491bb0
add esp, 0xc
mov word [edi + ebx*2], 0
movzx eax, byte [esp + 0x6b]
test al, al
jns 0x419c0c
mov eax, dword [esp + 0x64]
test eax, eax
je 0x419c40
lea edi, [esp + 0x54]
mov ecx, edi
push str.clids_searchband_file
call fcn.004b9300
lea eax, [esp + 0x60]
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.0044aef0
cmp byte [edi + 0xb], 0
jns 0x419c40
push dword [esp + 0x54]
call fcn.0048e90d
add esp, 4
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
push 0x53861e
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a3b5
mov ebx, eax
cmp eax, 5
jae 0x419c92
lea edi, [esp + 0x54]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x41a27c
movzx eax, word [0x538622]
mov word [esp + 0x58], ax
mov eax, dword [0x53861e]
mov dword [esp + 0x54], eax
jmp 0x419cce
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov edi, eax
mov dword [esp + 0x54], eax
or esi, 0x80000000
mov dword [esp + 0x5c], esi
xor esi, esi
dec esi
mov dword [esp + 0x58], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x53861e
push edi
call fcn.00491bb0
add esp, 0xc
mov word [edi + ebx*2], 0
xor eax, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x50], eax
movzx ecx, byte [esp + 0x5f]
mov eax, ecx
test cl, cl
jns 0x419cf1
mov eax, dword [esp + 0x58]
test eax, eax
je 0x419d7a
test cl, cl
jns 0x419d03
mov edx, dword [esp + 0x54]
jmp 0x419d07
lea edx, [esp + 0x54]
lea edi, [esp + 0x3c]
mov ecx, edi
push eax
push edx
call fcn.00443e60
lea eax, [esp + 0x48]
push eax
push edi
call fcn.00444f70
add esp, 8
test al, al
je 0x419d71
movzx ebx, byte [esp + 0x53]
test bl, bl
jns 0x419d33
mov ebx, dword [esp + 0x4c]
lea edi, [esp + 0x3c]
mov ecx, edi
call fcn.0046c2c0
test ebx, ebx
je 0x419d7a
mov ecx, edi
push str.yandex_website_icon_file
call fcn.004b9300
lea eax, [esp + 0x54]
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.0044aef0
cmp byte [esp + 0x47], 0
jns 0x419d7a
push dword [esp + 0x3c]
call fcn.0048e90d
add esp, 4
jmp 0x419d7a
lea ecx, [esp + 0x3c]
call fcn.0046c2c0
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
push 0x538a32
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a3be
mov ebx, eax
cmp eax, 5
jae 0x419dcc
lea edi, [esp + 0x3c]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x41a289
movzx eax, word [0x538a36]
mov word [esp + 0x40], ax
mov eax, dword [0x538a32]
mov dword [esp + 0x3c], eax
jmp 0x419e08
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov edi, eax
mov dword [esp + 0x3c], eax
or esi, 0x80000000
mov dword [esp + 0x44], esi
xor esi, esi
dec esi
mov dword [esp + 0x40], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x538a32
push edi
call fcn.00491bb0
add esp, 0xc
mov word [edi + ebx*2], 0
movzx eax, byte [esp + 0x47]
test al, al
jns 0x419e1b
mov eax, dword [esp + 0x40]
test eax, eax
je 0x419e4f
lea edi, [esp + 0x30]
mov ecx, edi
push str.brand_package
call fcn.004b9300
lea eax, [esp + 0x3c]
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.0044aef0
cmp byte [edi + 0xb], 0
jns 0x419e4f
push dword [esp + 0x30]
call fcn.0048e90d
add esp, 4
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
push 0x538c3c
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a3c7
mov ebx, eax
cmp eax, 5
jae 0x419ea1
lea edi, [esp + 0x30]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x41a296
movzx eax, word [0x538c40]
mov word [esp + 0x34], ax
mov eax, dword [0x538c3c]
mov dword [esp + 0x30], eax
jmp 0x419edd
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov edi, eax
mov dword [esp + 0x30], eax
or esi, 0x80000000
mov dword [esp + 0x38], esi
xor esi, esi
dec esi
mov dword [esp + 0x34], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x538c3c
push edi
call fcn.00491bb0
add esp, 0xc
mov word [edi + ebx*2], 0
movzx eax, byte [esp + 0x3b]
test al, al
jns 0x419ef0
mov eax, dword [esp + 0x34]
test eax, eax
je 0x419f24
lea edi, [esp + 0x24]
mov ecx, edi
push str.partner_package
call fcn.004b9300
lea eax, [esp + 0x30]
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.0044aef0
cmp byte [edi + 0xb], 0
jns 0x419f24
push dword [esp + 0x24]
call fcn.0048e90d
add esp, 4
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
push 0x538e46
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a3d0
mov ebx, eax
cmp eax, 5
jae 0x419f76
lea edi, [esp + 0x24]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x41a2a3
movzx eax, word [0x538e4a]
mov word [esp + 0x28], ax
mov eax, dword [0x538e46]
mov dword [esp + 0x24], eax
jmp 0x419fb2
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov edi, eax
mov dword [esp + 0x24], eax
or esi, 0x80000000
mov dword [esp + 0x2c], esi
xor esi, esi
dec esi
mov dword [esp + 0x28], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x538e46
push edi
call fcn.00491bb0
add esp, 0xc
mov word [edi + ebx*2], 0
movzx eax, byte [esp + 0x2f]
test al, al
jns 0x419fc5
mov eax, dword [esp + 0x28]
test eax, eax
je 0x419ff9
lea edi, [esp + 0x18]
mov ecx, edi
push str.override_partner_package
call fcn.004b9300
lea eax, [esp + 0x24]
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.0044aef0
cmp byte [edi + 0xb], 0
jns 0x419ff9
push dword [esp + 0x18]
call fcn.0048e90d
add esp, 4
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
push 0x539092
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a3d9
mov ebx, eax
cmp eax, 5
jae 0x41a04b
lea edi, [esp + 0x18]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x41a2b0
movzx eax, word [0x539096]
mov word [esp + 0x1c], ax
mov eax, dword [0x539092]
mov dword [esp + 0x18], eax
jmp 0x41a084
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov edi, eax
mov dword [esp + 0x18], eax
or esi, 0x80000000
mov dword [esp + 0x20], esi
mov dword [esp + 0x1c], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x539092
push edi
call fcn.00491bb0
add esp, 0xc
mov word [edi + ebx*2], 0
movzx eax, byte [esp + 0x23]
test al, al
jns 0x41a097
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x41a0cb
lea edi, [esp + 0xc]
mov ecx, edi
push str.install_start_time_no_uac
call fcn.004b9300
lea eax, [esp + 0x18]
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.0044aef0
cmp byte [edi + 0xb], 0
jns 0x41a0cb
push dword [esp + 0xc]
call fcn.0048e90d
add esp, 4
movzx esi, byte [0x5390d4]
lea edi, [esp + 0xc]
mov ecx, edi
push str.send_statistics
call fcn.004b9300
mov ecx, dword [ebp + 8]
push edi
push esi
call fcn.004d5dc0
cmp byte [edi + 0xb], 0
jns 0x41a0fe
push dword [esp + 0xc]
call fcn.0048e90d
add esp, 4
movzx esi, byte [0x5390d5]
mov ecx, edi
push str.make_browser_default_after_import
call fcn.004b9300
mov ecx, dword [ebp + 8]
push edi
push esi
call fcn.004d5dc0
cmp byte [esp + 0x17], 0
jns 0x41a12e
push dword [esp + 0xc]
call fcn.0048e90d
add esp, 4
movzx esi, byte [0x5390d6]
mov ecx, edi
push str.create_alice_shortcut_in_taskbar
call fcn.004b9300
mov ecx, dword [ebp + 8]
push edi
push esi
call fcn.004d5dc0
cmp byte [esp + 0x17], 0
jns 0x41a15e
push dword [esp + 0xc]
call fcn.0048e90d
add esp, 4
call fcn.00410430
test al, al
je 0x41a2bd
cmp byte [esp + 0x23], 0
jns 0x41a17e
push dword [esp + 0x18]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x2f], 0
jns 0x41a191
push dword [esp + 0x24]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x41a1a4
push dword [esp + 0x30]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x47], 0
jns 0x41a1b7
push dword [esp + 0x3c]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x53], 0
jns 0x41a1ca
push dword [esp + 0x48]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x5f], 0
jns 0x41a1dd
push dword [esp + 0x54]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x6b], 0
jns 0x41a1f0
push dword [esp + 0x60]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x77], 0
jns 0x41a203
push dword [esp + 0x6c]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x83], 0
jns 0x41a219
push dword [esp + 0x78]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x8f], 0
jns 0x41a232
push dword [esp + 0x84]
call fcn.0048e90d
add esp, 4
mov ecx, dword [esp + 0x90]
xor ecx, ebp
call fcn.0048f468
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
test ebx, ebx
jne 0x419973
jmp 0x419986
test ebx, ebx
jne 0x419a39
jmp 0x419a4c
test ebx, ebx
jne 0x419b11
jmp 0x419b24
test ebx, ebx
jne 0x419be6
jmp 0x419bf9
test ebx, ebx
jne 0x419cbb
jmp 0x419cce
test ebx, ebx
jne 0x419df5
jmp 0x419e08
test ebx, ebx
jne 0x419eca
jmp 0x419edd
test ebx, ebx
jne 0x419f9f
jmp 0x419fb2
test ebx, ebx
jne 0x41a071
jmp 0x41a084
push 0x539050
call fcn.004a81e6
add esp, 4
cmp eax, 0x7ffffff0
jae 0x41a3e2
mov ebx, eax
cmp eax, 5
jae 0x41a302
mov byte [esp + 0x17], bl
cmp ebx, 3
jne 0x41a386
movzx eax, word [0x539054]
mov word [esp + 0x10], ax
mov eax, dword [0x539050]
mov dword [esp + 0xc], eax
mov esi, edi
jmp 0x41a33b
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0048e8dd
add esp, 4
mov dword [esp + 0xc], eax
or esi, 0x80000000
mov dword [esp + 0x14], esi
mov esi, eax
mov dword [esp + 0x10], ebx
mov eax, ebx
add eax, ebx
push eax
push 0x539050
push esi
call fcn.00491bb0
add esp, 0xc
mov word [esi + ebx*2], 0
mov ebx, esp
mov ecx, ebx
push str.histogram_download_time
call fcn.004b9300
mov ecx, dword [ebp + 8]
push edi
push ebx
call fcn.0044aef0
cmp byte [ebx + 0xb], 0
jns 0x41a36a
push dword [esp]
call fcn.0048e90d
add esp, 4
cmp byte [esp + 0x17], 0
jns 0x41a16b
push dword [esp + 0xc]
call fcn.0048e90d
add esp, 4
jmp 0x41a16b
mov esi, edi
test ebx, ebx
jne 0x41a328
jmp 0x41a33b
lea ecx, [esp + 0x84]
call fcn.004d0930
lea ecx, [esp + 0x78]
call fcn.004d0930
lea ecx, [esp + 0x6c]
call fcn.004d0930
lea ecx, [esp + 0x60]
call fcn.004d0930
lea ecx, [esp + 0x54]
call fcn.004d0930
lea ecx, [esp + 0x3c]
call fcn.004d0930
lea ecx, [esp + 0x30]
call fcn.004d0930
lea ecx, [esp + 0x24]
call fcn.004d0930
lea ecx, [esp + 0x18]
call fcn.004d0930
lea ecx, [esp + 0xc]
call fcn.004d0930
int3