Function at 0x417a33
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1e0
mov eax, 0x44e4c0
call fcn.00448385
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
and dword [ebp - 0x16c], 0
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x148]
mov esi, ecx
push eax
mov dword [ebp - 0x190], esi
call fcn.00404718
mov dword [ebp - 4], 1
mov edi, 0x4549ec
push edi
lea eax, [ebp - 0x11c]
push eax
call fcn.00401415
mov byte [ebp - 4], 2
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x138]
push ecx
mov ebx, eax
call fcn.00413c9b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x11c]
call fcn.00401452
mov eax, dword [ebp - 0x138]
cmp dword [eax - 0xc], 0
je 0x417b90
push str.Arguments.v.installcompleteurl
lea eax, [ebp - 0x11c]
push eax
mov byte [ebp - 0x11d], 0
call fcn.00401415
mov byte [ebp - 4], 5
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x11d]
push ecx
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x140]
push ecx
mov ebx, eax
call fcn.00413ce4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x11c]
call fcn.00401452
cmp byte [ebp - 0x11d], 0
jne 0x417b7e
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x138]
call fcn.004187eb
pop ecx
mov ebx, eax
mov byte [ebp - 4], 8
push edi
lea eax, [ebp - 0x128]
push eax
call fcn.00408221
mov byte [ebp - 4], 9
push dword [ebx]
push dword [eax]
lea eax, [ebp - 0x148]
push 0x458234
call fcn.00408570
add esp, 0xc
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x128]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x124]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x140]
add eax, 0xfffffff0
call fcn.0040114e
lea eax, [ebp - 0x1ec]
push eax
call fcn.0041c4bc
mov byte [ebp - 4], 0xd
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
call dword [eax]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.0041c4ce
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.0041c7a4
mov byte [ebp - 4], 0xe
xor ebx, ebx
inc ebx
test byte [0x470050], bl
jne 0x417bf9
or dword [0x470050], ebx
mov byte [ebp - 4], 0xf
push 0x47004c
call fcn.00404718
push 0x4507b7
call fcn.004356e0
pop ecx
mov byte [ebp - 4], 0xe
mov eax, dword [0x47004c]
cmp dword [eax - 0xc], 0
jne 0x417c7f
push str.Install
lea eax, [ebp - 0x124]
push eax
call fcn.00401415
mov byte [ebp - 4], 0x10
push str.HKLMSoftwareMicrosoftNET_Framework_SetupNDP_v2.0.50727
lea eax, [ebp - 0x11c]
push eax
call fcn.00401415
mov byte [ebp - 4], 0x11
push 0
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.0042e2ee
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x11c]
call fcn.00401452
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x124]
call fcn.00401452
mov eax, 0x454224
cmp edi, ebx
je 0x417c74
mov eax, str.nud
push eax
mov eax, 0x47004c
call fcn.0040476c
push dword [ebp - 0x134]
call fcn.00404718
push 0x4540d8
lea eax, [ebp - 0x124]
push eax
mov dword [ebp - 0x16c], ebx
call fcn.00401415
mov byte [ebp - 4], 0x12
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x124]
push ecx
lea ecx, [ebp - 0x14c]
push ecx
mov ebx, eax
call fcn.00413c9b
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x124]
call fcn.00401452
push 0x458080
lea edi, [ebp - 0x128]
call fcn.00415b38
mov byte [ebp - 4], 0x15
push 0x4540f8
lea eax, [ebp - 0x11c]
push eax
call fcn.00401415
mov byte [ebp - 4], 0x16
push 0x454488
lea eax, [ebp - 0x124]
push eax
call fcn.00401415
mov byte [ebp - 4], 0x17
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x130]
push ecx
mov ebx, eax
call fcn.00413c9b
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x12c]
push ecx
mov ecx, eax
call fcn.004187eb
pop ecx
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 0x19
push dword [esi + 0xc]
lea eax, [ebp - 0x13c]
push eax
call fcn.00408221
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x144]
push ecx
mov ecx, eax
call fcn.004187eb
pop ecx
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
call dword [eax]
push dword [eax + 0x9c]
lea eax, [ebp - 0x188]
push eax
call fcn.0042f4c6
pop ecx
pop ecx
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
call dword [eax]
lea esi, [ebp - 0x180]
call fcn.0041aa7f
mov byte [ebp - 4], 0x1d
push dword [eax]
lea eax, [ebp - 0x178]
push eax
call fcn.00408221
mov dword [ebp - 0x140], eax
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [ebp - 0x124]
push ecx
lea ecx, [ebp - 0x170]
push ecx
mov ebx, eax
call fcn.00413c9b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x168]
push ecx
mov ecx, eax
call fcn.004187eb
mov ebx, eax
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x14c]
call fcn.004187eb
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x158]
push str.hdid
push ecx
mov ecx, eax
call fcn.0040fb21
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x18c]
push str.osex
push ecx
mov esi, eax
call fcn.004189d3
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1a4]
push ebx
push ecx
mov edi, eax
call fcn.00413a46
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x184]
push str.xid
push ecx
mov esi, eax
call fcn.004189d3
mov byte [ebp - 4], 0x25
push dword [ebp - 0x140]
lea ecx, [ebp - 0x1b0]
push ecx
mov edi, eax
call fcn.00413a46
mov byte [ebp - 4], 0x26
push str.activetimebias
lea ecx, [ebp - 0x17c]
push ecx
mov esi, eax
call fcn.004189d3
mov byte [ebp - 4], 0x27
push dword [ebp - 0x198]
lea ecx, [ebp - 0x19c]
push ecx
mov edi, eax
call fcn.00413a46
add esp, 0x40
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x174]
push str.defaultbrowser
push ecx
mov esi, eax
call fcn.004189d3
mov byte [ebp - 4], 0x29
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x1ac]
push ecx
mov edi, eax
call fcn.00413a46
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x154]
push str.cscid
push ecx
mov esi, eax
call fcn.004189d3
mov byte [ebp - 4], 0x2b
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x194]
push ecx
mov edi, eax
call fcn.00413a46
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x164]
push str.n2
push ecx
mov esi, eax
call fcn.004189d3
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1b4]
push 0x47004c
push ecx
mov edi, eax
call fcn.00413a46
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x148]
push ecx
lea ecx, [ebp - 0x15c]
push ecx
mov edi, eax
call fcn.00413a46
mov byte [ebp - 4], 0x2f
mov eax, dword [eax]
lea ecx, [ebp - 0x128]
push ecx
push eax
lea eax, [ebp - 0x1b8]
push eax
call fcn.00415bef
add esp, 0x44
mov byte [ebp - 4], 0x30
mov esi, dword [eax]
test esi, esi
je 0x417f95
cmp dword [esi + 4], 0
jne 0x417f90
push dword [esi]
call fcn.00447050
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x417f97
xor esi, esi
lea eax, [ebp - 0x1bc]
push esi
push eax
lea ecx, [ebp - 0x150]
call fcn.0040fb21
pop ecx
pop ecx
mov byte [ebp - 4], 0x31
mov edi, dword [ebp - 0x134]
call fcn.00409fa0
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x1bc]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x2f
lea edi, [ebp - 0x1b8]
call fcn.00415c67
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x15c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x1b4]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x164]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x194]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x154]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x1ac]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x174]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x19c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x17c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x184]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x1a4]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x18c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x158]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x160]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x168]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x170]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x178]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x180]
call fcn.00401452
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x188]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x144]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x13c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x130]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x124]
call fcn.00401452
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x11c]
call fcn.00401452
mov byte [ebp - 4], 0x14
lea edi, [ebp - 0x128]
call fcn.00415c67
lea ecx, [ebp - 0x144]
call fcn.0042b231
mov byte [ebp - 4], 0x4a
mov eax, dword [eax]
push 3
push eax
lea eax, [ebp - 0x118]
lea ecx, [ebp - 0x114]
push eax
mov dword [ebp - 0x118], ecx
call fcn.00418a34
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x13c]
call fcn.0042b080
mov byte [ebp - 4], 0x4c
mov eax, dword [eax]
push 3
push eax
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], ecx
call fcn.00418a34
mov byte [ebp - 4], 0x4d
push dword [ebp - 0x94]
lea eax, [ebp - 0x12c]
push eax
call fcn.004081d8
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x130]
push 0x458318
push ecx
mov esi, eax
call fcn.004189d3
mov byte [ebp - 4], 0x4f
push dword [ebp - 0x118]
lea ecx, [ebp - 0x128]
push ecx
mov esi, eax
call fcn.004189d3
add esp, 0x10
mov byte [ebp - 4], 0x51
mov eax, dword [ebp - 0x130]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x53
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x90]
cmp dword [ebp - 0x94], eax
je 0x41829c
push dword [ebp - 0x94]
call fcn.00435254
pop ecx
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x13c]
call fcn.00401452
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x114]
cmp dword [ebp - 0x118], eax
je 0x4182c9
push dword [ebp - 0x118]
call fcn.00435254
pop ecx
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x144]
call fcn.00401452
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x128]
call fcn.004187eb
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x130]
mov dword [esp], str.hdid2
push ecx
mov ecx, eax
call fcn.0040fb21
pop ecx
pop ecx
mov byte [ebp - 4], 0x5a
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
mov eax, dword [ebp - 0x134]
call fcn.0040a0ee
mov byte [ebp - 4], 0x59
mov eax, dword [ebp - 0x130]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x58
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x128]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x14c]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x150]
add eax, 0xfffffff0
call fcn.0040114e
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1ec]
push eax
call fcn.004089d1
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff0
call fcn.0040114e
and dword [ebp - 4], 0
mov eax, dword [ebp - 0x148]
add eax, 0xfffffff0
call fcn.0040114e
mov eax, dword [ebp - 0x134]
call fcn.00448408
ret 4