Function at 0x43c505
Capabilities:
Create process on windows
Query environment variable
Self delete

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x930
mov eax, dword [0x6f4e3c]
xor eax, ebp
mov dword [esp + 0x928], eax
xor eax, eax
lea ecx, [esp + 0x30]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
push ecx
call fcn.00446db4
add esp, 4
test al, al
jne 0x43c54b
lea ecx, [esp + 0x30]
push 0x6390a0
call fcn.0046930c
cmp byte [ebp + 0x14], 0
je 0x43c560
push 1
call fcn.0043f831
add esp, 4
jmp 0x43cbbb
lea esi, [esp + 0xc0]
mov ecx, esi
call fcn.0046ed20
push esi
push 0x6f
call fcn.00476650
add esp, 8
mov eax, dword [0x899a44]
mov dword [esp + 8], eax
lea ecx, [esp + 0x54]
push str.360ChromeNotify
call fcn.00401a6c
lea ebx, [esp + 0x48]
mov ecx, ebx
push str.__Uninstall:360Chrome
call fcn.00401a6c
lea edi, [esp + 0x3c]
mov ecx, edi
push 0x64b454
call fcn.00401a6c
movzx eax, byte [edi + 0xb]
test al, al
jns 0x43c5c0
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x60]
mov ecx, esi
push eax
push edi
mov edi, edx
push edx
call fcn.0046fbd0
push edi
call fcn.00482720
add esp, 4
test al, al
je 0x43c804
lea esi, [esp + 0xfc]
mov ecx, esi
push edi
call fcn.00468aa8
movzx eax, byte [esp + 0x53]
test al, al
cmovs eax, dword [esp + 0x4c]
cmovs ebx, dword [esp + 0x48]
mov ecx, esi
push eax
push ebx
call fcn.00468fc8
xorps xmm0, xmm0
movups xmmword [esp + 0x12c], xmm0
movups xmmword [esp + 0x13c], xmm0
movups xmmword [esp + 0x11c], xmm0
movups xmmword [esp + 0x10c], xmm0
mov dword [esp + 0x108], 0x44
mov dword [esp + 0x134], 1
mov word [esp + 0x138], 0
cmp byte [esi + 0xb], 0
jns 0x43c65a
mov esi, dword [esp + 0xfc]
sub esp, 0x28
lea eax, [esp + 0xa4]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x130]
mov dword [esp + 0x20], eax
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x43c7eb
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esp + 0x80]
call esi
push 0x1388
push dword [esp + 0x80]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea edi, [esp + 0x20]
mov dword [edi], 0xffffffff
push edi
push dword [esp + 0x80]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [esp + 0x7c]
call esi
cmp dword [edi], 0
jne 0x43c7eb
lea esi, [esp + 0xf0]
lea ebx, [esp + 0x60]
mov ecx, ebx
push esi
call fcn.0046f820
sub esp, 0x14
movaps xmm0, xmmword [0x64af90]
movups xmmword [esp + 4], xmm0
mov dword [esp], esi
call fcn.00484740
add esp, 0x14
mov ecx, esi
call fcn.0046ee40
lea esi, [esp + 0xf0]
mov ecx, esi
push 0xf003f
push str.software
push SysReAllocStringLen
call fcn.00485170
cmp dword [esi], 0
je 0x43c751
cmp byte [esp + 0x5f], 0
lea eax, [esp + 0x54]
jns 0x43c744
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0xf0]
push eax
call fcn.00485500
lea esi, [esp + 0xe4]
mov ecx, esi
push ebx
call fcn.0046ed40
cmp dword [esp + 8], 0
je 0x43c7a6
lea esi, [esp + 0xcc]
lea ebx, [esp + 0xe4]
mov ecx, ebx
push esi
call fcn.0046f6e0
lea edi, [esp + 0xd8]
mov ecx, esi
push edi
call fcn.0046f6e0
mov ecx, ebx
push edi
call fcn.0046ee80
mov ecx, edi
call fcn.0046ee40
mov ecx, esi
lea esi, [esp + 0xe4]
jmp 0x43c7ca
mov ebx, esi
lea esi, [esp + 0xd8]
lea edi, [esp + 0xe4]
mov ecx, edi
push esi
call fcn.0046f6e0
mov ecx, edi
push esi
call fcn.0046ee80
mov ecx, esi
mov esi, ebx
call fcn.0046ee40
push esi
call fcn.00482020
add esp, 4
mov ecx, esi
call fcn.0046ee40
lea ecx, [esp + 0xf0]
call fcn.00485370
cmp byte [esp + 0x107], 0
jns 0x43c804
push dword [esp + 0xfc]
call fcn.00517bd6
add esp, 4
lea edi, [esp + 0x60]
mov ecx, edi
call fcn.0046ee40
cmp byte [esp + 0x47], 0
jns 0x43c822
push dword [esp + 0x3c]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x53], 0
jns 0x43c835
push dword [esp + 0x48]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x5f], 0
jns 0x43c848
push dword [esp + 0x54]
call fcn.00517bd6
add esp, 4
lea ecx, [esp + 0xc0]
call fcn.0046ee40
cmp byte [ebp + 0x10], 0
je 0x43cbbb
movzx eax, byte [esp + 0x3b]
test al, al
jns 0x43c86b
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x43c9f5
call fcn.0043fa88
test al, al
jne 0x43c9f5
lea esi, [esp + 0x108]
mov ecx, esi
push dword [0x6f4c6c]
call fcn.00401a6c
mov ecx, esi
push 0x6391f0
call fcn.00469188
mov ecx, esi
push str.360se6.exe
call fcn.00469188
cmp byte [esi + 0xb], 0
jns 0x43c8b9
mov esi, dword [esp + 0x108]
lea ebx, [esp + 0x7c]
mov ecx, ebx
push 0x20019
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00485170
xor eax, eax
lea esi, [esp + 0x60]
mov dword [esi + 4], eax
mov dword [esi], eax
mov dword [esi + 8], eax
mov ecx, ebx
push esi
push 0x6390a0
call fcn.00485a20
test eax, eax
jne 0x43c9b6
movzx eax, byte [esp + 0x6b]
test al, al
jns 0x43c8ff
mov eax, dword [esp + 0x64]
cmp eax, 3
jb 0x43c9b6
call fcn.004175be
lea edx, [esp + 0xfc]
mov ecx, eax
push edx
call fcn.0041760e
lea ebx, [esp + 0xf0]
mov ecx, ebx
push str.360chrome.exe
call fcn.00401a6c
push ebx
lea eax, [esp + 0x100]
push eax
call fcn.00442e67
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x43c955
push dword [esp + 0xf0]
call fcn.00517bd6
add esp, 4
movzx eax, byte [esp + 0x107]
test al, al
lea edx, [esp + 0xfc]
jns 0x43c976
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x100]
movzx ecx, byte [esp + 0x6b]
test cl, cl
jns 0x43c987
mov esi, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
push eax
push edx
push ecx
push esi
call fcn.0047a420
add esp, 0x10
cmp byte [esp + 0x107], 0
jns 0x43c9b0
push dword [esp + 0xfc]
mov ebx, eax
call fcn.00517bd6
mov eax, ebx
add esp, 4
mov bl, 1
test al, al
jne 0x43c9b8
xor ebx, ebx
cmp byte [esp + 0x6b], 0
jns 0x43c9cb
push dword [esp + 0x60]
call fcn.00517bd6
add esp, 4
lea ecx, [esp + 0x7c]
call fcn.00485370
cmp byte [esp + 0x113], 0
jns 0x43c9ed
push dword [esp + 0x108]
call fcn.00517bd6
add esp, 4
test bl, bl
je 0x43cbbb
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x43cbbb
call fcn.00488190
cmp eax, 3
jl 0x43cbbb
mov ecx, dword [ebp + 0x18]
push str.run_as_admin
call fcn.0046bdb0
test al, al
jne 0x43cbbb
lea esi, [esp + 0x7c]
mov ecx, dword [ebp + 0x18]
push esi
call fcn.0046bd30
lea ecx, [esp + 0x108]
push esi
call fcn.00468aa8
mov ecx, esi
call fcn.0046ee40
lea ebx, [esp + 0x7c]
mov ecx, ebx
push dword [ebp + 0x1c]
call fcn.00401a6c
mov esi, 0x642d2c
mov ecx, ebx
push esi
call fcn.00469188
mov ecx, ebx
push 0x649410
call fcn.00469188
mov ecx, ebx
push esi
call fcn.00469188
mov ecx, ebx
push str.remove_chrome_registration
call fcn.00469188
movzx eax, byte [esp + 0x3b]
test al, al
jns 0x43ca8f
mov eax, dword [esp + 0x34]
test eax, eax
je 0x43cb74
lea esi, [esp + 0x7c]
mov ecx, esi
push 0x642d2c
call fcn.00469188
mov ebx, str.register_chrome_browser_suffix
push ebx
call fcn.0061fdf0
add esp, 4
push eax
push ebx
push edi
call fcn.0047d060
add esp, 0xc
movzx eax, byte [esp + 0x6b]
test al, al
jns 0x43cad1
mov eax, dword [esp + 0x64]
mov edi, dword [esp + 0x60]
mov ecx, esi
push eax
push edi
call fcn.00468fc8
cmp byte [esp + 0x6b], 0
jns 0x43caed
push dword [esp + 0x60]
call fcn.00517bd6
add esp, 4
lea esi, [esp + 0xfc]
lea eax, [esp + 0x30]
push eax
push 0x64b1d0
push esi
call fcn.0040c34f
add esp, 0xc
mov ecx, esi
push 0x63acd4
call fcn.00469188
mov ecx, dword [eax + 8]
lea esi, [esp + 0x60]
mov dword [esi + 8], ecx
movsd xmm0, qword [eax]
movsd qword [esi], xmm0
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
movzx eax, byte [esi + 0xb]
test al, al
cmovs eax, dword [esi + 4]
mov edx, dword [esi]
cmovns edx, esi
lea ecx, [esp + 0x7c]
push eax
push edx
call fcn.00468fc8
cmp byte [esi + 0xb], 0
jns 0x43cb5b
push dword [esp + 0x60]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x107], 0
jns 0x43cb74
push dword [esp + 0xfc]
call fcn.00517bd6
add esp, 4
lea eax, [esp + 0x60]
mov dword [eax], 0x16
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x110]
push eax
call fcn.0043c254
add esp, 0xc
cmp byte [esp + 0x87], 0
jns 0x43cbad
push dword [esp + 0x7c]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x113], 0
js 0x43e0d0
call fcn.0043aa4e
mov ecx, eax
call fcn.0043af66
lea edi, [esp + 0x108]
mov ecx, edi
push 0xf003f
push str.Software360ChromeChrome
push SysReAllocStringLen
call fcn.00485170
mov ecx, edi
push 0x64912e
call fcn.00485960
mov ecx, edi
call fcn.00485370
push 0x104
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x43cd02
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x43cd02
cmp word [esp + 0x108], 0
mov eax, 0
je 0x43cc3e
xor ecx, ecx
lea eax, [ecx + 1]
cmp word [esp + ecx*2 + 0x10a], 0
mov ecx, eax
jne 0x43cc2e
lea esi, [esp + 0x7c]
mov ecx, esi
push eax
push edi
call fcn.0046ed80
lea ebx, [esp + 0xfc]
mov ecx, esi
push ebx
call fcn.0046f6e0
lea edi, [esp + 0x60]
mov ecx, ebx
push edi
call fcn.0046f6e0
mov ecx, esi
push edi
call fcn.0046ee80
mov ecx, edi
call fcn.0046ee40
mov ecx, ebx
call fcn.0046ee40
push str.Local360chrome_icon_singleton
xor eax, eax
push eax
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ebx, eax
test eax, eax
je 0x43cc9a
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea ecx, [esp + 0x7c]
push 0x11
push str.smart_preheat.dll
push edi
call fcn.0046fbd0
push edi
call fcn.00482720
add esp, 4
test al, al
je 0x43cce5
push edi
call fcn.00482720
add esp, 4
test al, al
je 0x43cce5
mov esi, 0xa
push edi
call fcn.00481cb0
add esp, 4
test al, al
jne 0x43cce5
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
dec esi
jne 0x43ccca
test ebx, ebx
je 0x43ccf0
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x60]
call fcn.0046ee40
lea ecx, [esp + 0x7c]
call fcn.0046ee40
lea edi, [esp + 0x108]
mov ecx, edi
push 0xf003f
push str.Software360ChromeChrome
push SysReAllocStringLen
call fcn.00485170
mov ecx, edi
push str.ie_popwindow_newtab
call fcn.00485960
mov ecx, edi
call fcn.00485370
call fcn.0043f089
call fcn.004175be
lea ebx, [esp + 0x54]
mov ecx, eax
push ebx
call fcn.00417e5c
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x43cd58
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x58]
lea esi, [esp + 0x48]
mov ecx, esi
push eax
push ebx
call fcn.0046ed80
movzx eax, word [0x649740]
test ax, ax
je 0x43cd85
xor ecx, ecx
lea eax, [ecx + 1]
cmp word [ecx + ecx + 0x649742], 0
mov ecx, eax
jne 0x43cd73
jmp 0x43cd87
xor eax, eax
mov ecx, esi
push eax
push 0x649740
push edi
call fcn.0046fbd0
mov ecx, esi
push edi
call fcn.0046ee80
mov ecx, edi
call fcn.0046ee40
push 1
mov ebx, dword [ebp + 0xc]
push ebx
push esi
call fcn.0040ce9e
add esp, 0xc
lea eax, [esp + 0x3c]
mov ecx, 0x770d84
push eax
call fcn.0043fcfc
mov ecx, edi
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall360Chrome
call fcn.00401a6c
push 0
push edi
push SysReAllocStringLen
call fcn.0049868c
add esp, 0xc
cmp byte [esp + 0x113], 0
jns 0x43cdf7
push dword [esp + 0x108]
call fcn.00517bd6
add esp, 4
mov ecx, 0x770d84
push edi
call fcn.0041043e
push 0
push edi
push SysReAllocStringLen
call fcn.0049868c
add esp, 0xc
cmp byte [esp + 0x113], 0
jns 0x43ce2b
push dword [esp + 0x108]
call fcn.00517bd6
add esp, 4
lea esi, [esp + 0x2c]
mov dword [esi], 0x16
push esi
lea eax, [esp + 0x34]
push eax
push SysReAllocStringLen
call fcn.0043e654
add esp, 0xc
push esi
call fcn.0043ef77
add esp, 4
cmp byte [ebp + 0x10], 0
je 0x43cef3
lea ecx, [esp + 0x108]
push 0xf003f
push 0x6390a0
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00485170
lea esi, [esp + 0x7c]
mov ecx, esi
push str.SoftwareMicrosoftMediaPlayerShimInclusionList
call fcn.00401a6c
lea ebx, [esp + 0x60]
mov ecx, ebx
push str.360chrome.exe
call fcn.00401a6c
push ebx
push esi
call fcn.00442e67
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x43ceb2
push dword [esp + 0x60]
call fcn.00517bd6
add esp, 4
push 0
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0049868c
add esp, 0xc
lea ecx, [esp + 0x108]
call fcn.00485340
cmp byte [esp + 0x87], 0
jns 0x43cee4
push dword [esp + 0x7c]
call fcn.00517bd6
add esp, 4
lea ecx, [esp + 0x108]
call fcn.00485370
mov ebx, dword [ebp + 0xc]
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x43cefe
mov eax, dword [ebx + 4]
test eax, eax
je 0x43d09a
mov ecx, dword [ebp + 0x18]
push str.delete_profile
call fcn.0046bdb0
mov eax, dword [0x899a44]
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0x13
lea ecx, [esp + 0x1c]
call fcn.0040a6ec
call fcn.004175be
mov ecx, eax
push edi
call fcn.004181aa
movzx eax, byte [esp + 0x113]
test al, al
jns 0x43cf62
mov edi, dword [esp + 0x108]
mov eax, dword [esp + 0x10c]
lea ebx, [esp + 0x7c]
mov ecx, ebx
push eax
push edi
call fcn.0046ed80
push ebx
call fcn.00482020
add esp, 4
mov ecx, ebx
call fcn.0046ee40
cmp byte [esp + 0x113], 0
jns 0x43cf98
push dword [esp + 0x108]
call fcn.00517bd6
add esp, 4
lea esi, [esp + 0x1c]
mov ecx, esi
call fcn.0040a7ee
mov ecx, esi
call fcn.0040afd4
cmp byte [ebp + 0x10], 0
je 0x43cfe1
movzx eax, byte [esp + 0x3b]
test al, al
jns 0x43cfbd
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x43cfca
call fcn.0043fa88
test al, al
je 0x43cfe1
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x34]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0043e654
add esp, 0xc
call fcn.00488190
cmp eax, 2
jg 0x43cff0
call fcn.00439fad
push dword [ebp + 0xc]
call fcn.0043fedc
add esp, 4
call fcn.0043f778
push SysReAllocStringLen
call fcn.0043f685
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0043f685
add esp, 4
call fcn.004175be
lea esi, [esp + 0xfc]
mov ecx, eax
push esi
call fcn.0041760e
movzx eax, byte [esi + 0xb]
test al, al
jns 0x43d03d
mov eax, dword [esp + 0x100]
test eax, eax
je 0x43d0a4
mov esi, dword [ebp + 8]
push 0
call fcn.00473360
add esp, 4
test al, al
je 0x43d10d
lea edi, [esp + 0x108]
mov ecx, edi
push 0
push 0x15c
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x1a
push str.install_destination_path:
push eax
call fcn.00403cc6
add esp, 0xc
cmp byte [esp + 0x107], 0
jns 0x43d0f5
mov ecx, dword [esp + 0xfc]
jmp 0x43d0fc
mov esi, 0x13
jmp 0x43e076
xor edi, edi
inc edi
push 2
call fcn.00473360
add esp, 4
test al, al
je 0x43d0ed
lea esi, [esp + 0x108]
mov ecx, esi
push 2
push 0x158
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x2c
push str.Could_not_get_installation_destination_path.
push eax
call fcn.00403cc6
add esp, 0xc
mov ecx, esi
call fcn.00473790
mov bh, byte [ebp + 0x14]
jmp 0x43df8d
lea ecx, [esp + 0xfc]
push ecx
push eax
call fcn.00473e90
add esp, 8
mov ecx, edi
call fcn.00473790
lea edi, [esp + 0xf0]
mov ecx, edi
push esi
call fcn.00468aa8
lea ecx, [esp + 0xe4]
mov dword [esp + 0x14], ecx
call fcn.0046ed20
lea esi, [esp + 0xd8]
mov ecx, esi
call fcn.0046ed20
push esi
call fcn.00471440
add esp, 4
test al, al
je 0x43d30b
lea ecx, [esp + 0xd8]
push ebx
call fcn.00470a90
cmp byte [esp + 0xfb], 0
jns 0x43d169
mov edi, dword [esp + 0xf0]
movzx eax, word [edi]
push eax
call fcn.0061b9f3
add esp, 4
mov esi, eax
cmp byte [esp + 0x87], 0
jns 0x43d185
mov ebx, dword [esp + 0x7c]
movzx eax, word [ebx]
push eax
call fcn.0061b9f3
add esp, 4
cmp si, ax
lea edi, [esp + 0xfc]
lea esi, [esp + 0xd8]
je 0x43d2ef
lea ecx, [esp + 0xe4]
push esi
call fcn.0046ee60
call fcn.004175be
mov edi, esi
lea esi, [esp + 0x60]
mov ecx, eax
push esi
call fcn.0041760e
movzx eax, byte [esi + 0xb]
test al, al
jns 0x43d1d8
mov esi, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
lea ebx, [esp + 0x108]
mov ecx, ebx
push eax
push esi
call fcn.0046ed80
mov ecx, edi
push ebx
call fcn.0046ee80
mov ecx, ebx
call fcn.0046ee40
cmp byte [esp + 0x6b], 0
jns 0x43d20a
push dword [esp + 0x60]
call fcn.00517bd6
add esp, 4
lea edi, [esp + 0xd8]
mov ecx, edi
push ebx
call fcn.0046f6e0
mov ecx, edi
push ebx
call fcn.0046ee80
mov ecx, ebx
call fcn.0046ee40
mov ecx, edi
push ebx
call fcn.0046f6e0
mov ecx, edi
push ebx
call fcn.0046ee80
mov ecx, ebx
call fcn.0046ee40
mov ecx, edi
push ebx
call fcn.0046f6e0
mov ecx, edi
push ebx
call fcn.0046ee80
mov ecx, ebx
call fcn.0046ee40
push 0xc8
push 0
push ebx
call fcn.006030b0
add esp, 0xc
call fcn.0061f846
mov esi, eax
call fcn.0061f846
push esi
push eax
push str._d__d.tmp
push 0xffffffffffffffff
push 0x64
push ebx
call fcn.00401af6
add esp, 0x18
lea esi, [esp + 0xcc]
mov ecx, esi
push ebx
call fcn.00401a6c
movzx eax, byte [esi + 0xb]
test al, al
jns 0x43d2ab
mov esi, dword [esp + 0xcc]
mov eax, dword [esp + 0xd0]
lea ebx, [esp + 0x60]
mov ecx, edi
push eax
push esi
push ebx
call fcn.0046fbd0
mov ecx, edi
push ebx
call fcn.0046ee80
mov ecx, ebx
call fcn.0046ee40
cmp byte [esp + 0xd7], 0
jns 0x43d2e1
push dword [esp + 0xcc]
call fcn.00517bd6
add esp, 4
lea edi, [esp + 0xfc]
lea esi, [esp + 0xd8]
movzx eax, byte [esp + 0xfb]
test al, al
jns 0x43d361
mov edx, dword [esp + 0xf0]
mov eax, dword [esp + 0xf4]
jmp 0x43d368
push 2
call fcn.00473360
add esp, 4
test al, al
lea edi, [esp + 0xfc]
je 0x43d457
lea esi, [esp + 0x108]
mov ecx, esi
push 2
push 0x164
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x2e
push str.Failed_to_create_temporary_file_for_setup.exe.
push eax
call fcn.00403cc6
add esp, 0xc
mov ecx, esi
call fcn.00473790
jmp 0x43d457
lea edx, [esp + 0xf0]
lea ebx, [esp + 0x60]
mov ecx, ebx
push eax
push edx
call fcn.0046ed80
push esi
push ebx
call fcn.00470c60
add esp, 8
test al, al
jne 0x43d438
push 0
call fcn.00473360
add esp, 4
test al, al
je 0x43d438
lea edi, [esp + 0x108]
mov ecx, edi
push 0
push 0x17e
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x11
push str.move_setup_from_:
push eax
call fcn.00403cc6
add esp, 0xc
cmp byte [esp + 0x6b], 0
jns 0x43d3d5
mov ebx, dword [esp + 0x60]
push ebx
push eax
call fcn.00473e90
add esp, 8
push 5
push str._to:
push eax
call fcn.00403cc6
add esp, 0xc
cmp byte [esp + 0xe3], 0
jns 0x43d400
mov esi, dword [esp + 0xd8]
push esi
push eax
call fcn.00473e90
add esp, 8
push 0x13
push str.failed._ErrorCode:
push eax
call fcn.00403cc6
add esp, 0xc
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, esi
push eax
call fcn.00453080
mov ecx, edi
call fcn.00473790
lea edi, [esp + 0xfc]
lea ecx, [esp + 0x60]
call fcn.0046ee40
cmp byte [esp + 0x87], 0
jns 0x43d457
push dword [esp + 0x7c]
call fcn.00517bd6
add esp, 4
lea ecx, [esp + 0xcc]
call fcn.0046ed20
lea ebx, [esp + 0x108]
mov word [ebx], 0
lea ecx, [esp + 0x7c]
mov dword [esp + 0x10], ecx
call fcn.0046ed20
push 0x104
push ebx
push str.CHROME_INSTALL_DIR
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov esi, eax
test eax, eax
mov dword [esp + 0x18], eax
je 0x43d4c1
lea esi, [esp + 0x60]
mov ecx, esi
push ebx
call fcn.00401a6c
mov al, byte [esi + 0xb]
test al, al
js 0x43d521
cmp al, 2
jne 0x43d5e6
mov al, 2
cmp word [esp + 0x62], 0x3a
je 0x43d53b
jmp 0x43d5e6
lea ecx, [esp + 0x7c]
call fcn.0046ee40
mov dword [esp + 8], 0
push 2
call fcn.00473360
add esp, 4
test al, al
je 0x43d8fb
lea esi, [esp + 0x108]
mov ecx, esi
push 2
push 0x1bf
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x2c
push str.Could_not_retrieve_users_profile_directory.
push eax
call fcn.00403cc6
add esp, 0xc
mov ecx, esi
call fcn.00473790
jmp 0x43d8fb
cmp dword [esp + 0x64], 2
jne 0x43d5e6
mov esi, dword [esp + 0x60]
cmp word [esi + 2], 0x3a
jne 0x43d5e6
lea edi, [esp + 0xc0]
xor eax, eax
mov dword [edi + 4], eax
mov dword [edi], eax
mov dword [edi + 8], eax
lea ecx, [esp + 0xc0]
mov byte [ecx + 0xb], 2
mov eax, dword [esi]
mov dword [ecx], eax
mov word [ecx + 4], 0
push 1
push 0x6391f0
call fcn.00468fc8
cmp byte [esp + 0x6b], 0
js 0x43d582
mov word [esp + 0x60], 0
mov byte [esp + 0x6b], 0
jmp 0x43d5ae
mov eax, dword [esp + 0x60]
mov word [eax], 0
mov dword [esp + 0x64], 0
cmp byte [esp + 0x6b], 0
jns 0x43d5ae
push dword [esp + 0x60]
call fcn.00517bd6
add esp, 4
mov dword [esp + 0x68], 0
mov eax, dword [edi + 8]
mov dword [esp + 0x68], eax
movsd xmm0, qword [edi]
movsd qword [esp + 0x60], xmm0
xor eax, eax
mov dword [edi + 4], eax
mov dword [edi], eax
mov dword [edi + 8], eax
cmp byte [esp + 0xcb], 0
jns 0x43d5e2
push dword [esp + 0xc0]
call fcn.00517bd6
add esp, 4
mov al, byte [esp + 0x6b]
test al, al
lea ecx, [esp + 0x60]
mov edx, dword [ecx]
cmovns edx, ecx
movzx eax, al
cmovs eax, dword [ecx + 4]
lea edi, [esp + 0xc0]
mov ecx, edi
push eax
push edx
call fcn.0046ed80
lea ebx, [esp + 0x7c]
mov ecx, ebx
push edi
call fcn.0046ee80
mov ecx, edi
call fcn.0046ee40
mov ecx, ebx
push 0x10
push str.360ChromeChrome
push edi
call fcn.0046fbd0
mov ecx, ebx
push edi
call fcn.0046ee80
mov ecx, edi
call fcn.0046ee40
cmp word [0x639024], 0
je 0x43d657
xor ecx, ecx
lea eax, [ecx + 1]
cmp word [ecx + ecx + 0x639026], 0
mov ecx, eax
jne 0x43d645
jmp 0x43d659
xor eax, eax
mov ecx, ebx
push eax
push 0x639024
push edi
call fcn.0046fbd0
mov ecx, ebx
push edi
call fcn.0046ee80
mov ecx, edi
call fcn.0046ee40
lea ecx, [esp + 0xcc]
push ebx
call fcn.0046ee60
cmp byte [esp + 0x6b], 0
jns 0x43d696
push dword [esp + 0x60]
call fcn.00517bd6
add esp, 4
lea ecx, [esp + 0x7c]
call fcn.0046ee40
xor esi, esi
mov dword [esp + 8], 0
cmp dword [esp + 0xc], 0
lea edi, [esp + 0xfc]
je 0x43d822
xor edi, edi
cmp word [0x6497a2], 0
mov eax, 0
lea edx, [esp + 0x108]
je 0x43d6e5
xor ecx, ecx
lea eax, [ecx + 1]
cmp word [ecx + ecx + 0x6497a4], 0
mov ecx, eax
jne 0x43d6d5
lea ecx, [esp + 0xcc]
push eax
push 0x6497a2
push edx
call fcn.0046fbd0
cmp word [str.Preferences], 0
je 0x43d714
xor eax, eax
lea edi, [eax + 1]
cmp word [eax + eax + 0x6497b4], 0
mov eax, edi
jne 0x43d704
lea ecx, [esp + 0x108]
push edi
push str.Preferences
lea ebx, [esp + 0x68]
push ebx
call fcn.0046fbd0
lea ecx, [esp + 0x108]
call fcn.0046ee40
lea edi, [esp + 0xc0]
mov ecx, edi
call fcn.0046ed20
mov ecx, ebx
mov edx, edi
call fcn.0043e337
xor ecx, ecx
test al, al
je 0x43d802
xor edi, edi
cmp word [str.Cache], 0
mov eax, 0
je 0x43d77b
xor ecx, ecx
lea eax, [ecx + 1]
cmp word [ecx + ecx + 0x6497cc], 0
mov ecx, eax
jne 0x43d76b
lea ecx, [esp + 0xc0]
push eax
push str.Cache
lea ebx, [esp + 0x110]
push ebx
call fcn.0046fbd0
cmp word [str.Media_Cache], 0
je 0x43d7b1
xor eax, eax
lea edi, [eax + 1]
cmp word [eax + eax + 0x6497d8], 0
mov eax, edi
jne 0x43d7a1
lea ecx, [esp + 0xc0]
push edi
push str.Media_Cache
lea edi, [esp + 0x84]
push edi
call fcn.0046fbd0
push ebx
call fcn.00482020
add esp, 4
test al, al
je 0x43d7e5
push edi
call fcn.00482020
add esp, 4
mov ebx, eax
jmp 0x43d7e7
xor ebx, ebx
lea ecx, [esp + 0x7c]
call fcn.0046ee40
lea ecx, [esp + 0x108]
call fcn.0046ee40
xor bl, 1
movzx ecx, bl
mov dword [esp + 8], ecx
lea ecx, [esp + 0xc0]
call fcn.0046ee40
lea ecx, [esp + 0x60]
call fcn.0046ee40
lea edi, [esp + 0xfc]
cmp word [str.Local_State], 0
lea ebx, [esp + 0x108]
je 0x43d845
xor eax, eax
lea esi, [eax + 1]
cmp word [eax + eax + 0x63900e], 0
mov eax, esi
jne 0x43d835
lea ecx, [esp + 0xcc]
push esi
push str.Local_State
lea eax, [esp + 0x84]
push eax
call fcn.0046fbd0
movzx eax, byte [esp + 0x2b]
test al, al
jns 0x43d872
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
jmp 0x43d876
lea edx, [esp + 0x20]
lea esi, [esp + 0x60]
mov ecx, esi
push eax
push edx
call fcn.0046ed80
push esi
call fcn.00471440
add esp, 4
test al, al
je 0x43d8a3
push esi
lea eax, [esp + 0x80]
push eax
call fcn.00483530
add esp, 8
jmp 0x43d8e9
push 2
call fcn.00473360
add esp, 4
test al, al
je 0x43d8e9
lea esi, [esp + 0x108]
mov ecx, esi
push 2
push 0x1b9
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x30
push str.Failed_to_create_temporary_file_for_Local_State.
push eax
call fcn.00403cc6
add esp, 0xc
mov ecx, esi
call fcn.00473790
lea ecx, [esp + 0x60]
call fcn.0046ee40
lea ecx, [esp + 0x7c]
call fcn.0046ee40
push 0
call fcn.00473360
add esp, 4
test al, al
je 0x43d961
lea esi, [esp + 0x108]
mov ecx, esi
push 0
push 0x1c2
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x16
push str.Deleting_install_path
push eax
call fcn.00403cc6
add esp, 0xc
lea edi, [esp + 0xfc]
cmp byte [edi + 0xb], 0
mov ecx, edi
jns 0x43d950
mov ecx, dword [esp + 0xfc]
push ecx
push eax
call fcn.00473e90
add esp, 8
mov ecx, esi
call fcn.00473790
movzx eax, byte [esp + 0x107]
mov edx, edi
test al, al
jns 0x43d97d
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x100]
mov ecx, ebx
push eax
push edx
call fcn.0046ed80
push ebx
call fcn.00482020
add esp, 4
test al, al
je 0x43d9a4
lea ecx, [esp + 0x108]
call fcn.0046ee40
jmp 0x43db17
movzx eax, byte [esp + 0x107]
mov edx, edi
test al, al
jns 0x43d9c0
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x100]
lea esi, [esp + 0x7c]
mov ecx, esi
push eax
push edx
call fcn.0046ed80
push esi
call fcn.004827a0
add esp, 4
mov ebx, eax
mov ecx, esi
call fcn.0046ee40
lea esi, [esp + 0x108]
mov ecx, esi
call fcn.0046ee40
test bl, bl
je 0x43db17
push 1
call fcn.0043f831
add esp, 4
cmp byte [esp + 0x107], 0
mov eax, edi
jns 0x43da12
mov eax, dword [esp + 0xfc]
push eax
call fcn.00401b54
add esp, 4
movzx eax, byte [esp + 0x107]
mov edx, edi
test al, al
jns 0x43da37
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x100]
mov ecx, esi
push eax
push edx
call fcn.0046ed80
push esi
call fcn.00482020
add esp, 4
test al, al
je 0x43da5b
lea ecx, [esp + 0x108]
call fcn.0046ee40
jmp 0x43dab9
movzx eax, byte [esp + 0x107]
mov edx, edi
test al, al
jns 0x43da77
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x100]
lea esi, [esp + 0x7c]
mov ecx, esi
push eax
push edx
call fcn.0046ed80
push esi
call fcn.004827a0
add esp, 4
mov ebx, eax
mov ecx, esi
call fcn.0046ee40
lea ecx, [esp + 0x108]
call fcn.0046ee40
xor eax, eax
inc eax
test bl, bl
mov ecx, dword [esp + 8]
cmovne ecx, eax
mov dword [esp + 8], ecx
lea esi, [esp + 0x108]
movzx eax, byte [esp + 0x107]
mov ebx, edi
mov edx, edi
test al, al
jns 0x43dad7
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x100]
lea edi, [esp + 0x7c]
mov ecx, edi
push eax
push edx
call fcn.0046ed80
mov edx, dword [ebp + 0xc]
movzx eax, byte [edx + 0xb]
test al, al
jns 0x43daf4
mov eax, dword [edx + 4]
mov edx, dword [edx]
mov ecx, edi
push eax
push edx
push esi
call fcn.0046fbd0
push esi
call fcn.00482020
add esp, 4
mov ecx, esi
call fcn.0046ee40
mov ecx, edi
call fcn.0046ee40
mov edi, ebx
mov bh, byte [ebp + 0x14]
cmp dword [esp + 0xc], 0
je 0x43ddf8
lea esi, [esp + 0x7c]
mov ecx, esi
call fcn.0046ed20
push esi
push 0x70
call fcn.00476650
add esp, 8
test al, al
je 0x43dce0
xor ebx, ebx
mov eax, 0
cmp word [0x649740], 0
je 0x43db66
xor ecx, ecx
lea eax, [ecx + 1]
cmp word [ecx + ecx + 0x649742], 0
mov ecx, eax
jne 0x43db56
mov dword [esp + 0xc], edi
lea edx, [esp + 0x60]
lea esi, [esp + 0x7c]
mov ecx, esi
push eax
push 0x649740
push edx
call fcn.0046fbd0
cmp word [str.User_Data], 0
je 0x43db9c
xor eax, eax
lea ebx, [eax + 1]
cmp word [eax + eax + 0x649790], 0
mov eax, ebx
jne 0x43db8c
lea edi, [esp + 0x60]
mov ecx, edi
push ebx
push str.User_Data
lea ebx, [esp + 0x110]
push ebx
call fcn.0046fbd0
mov ecx, esi
push ebx
call fcn.0046ee80
mov ecx, ebx
call fcn.0046ee40
mov ecx, edi
call fcn.0046ee40
push esi
call fcn.00482020
add esp, 4
test al, al
mov edi, dword [esp + 0xc]
jne 0x43dc45
xor eax, eax
inc eax
mov dword [esp + 8], eax
push 2
call fcn.00473360
add esp, 4
test al, al
je 0x43dc45
lea edi, [esp + 0x108]
mov ecx, edi
push 2
push 0x1db
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x1b
push str.Failed_to_delete_apps_dir:
push eax
call fcn.00403cc6
add esp, 0xc
cmp byte [esp + 0x87], 0
jns 0x43dc30
mov esi, dword [esp + 0x7c]
push esi
push eax
call fcn.00473e90
add esp, 8
mov ecx, edi
call fcn.00473790
mov edi, dword [esp + 0xc]
lea esi, [esp + 0x7c]
mov ecx, esi
lea ebx, [esp + 0x108]
push ebx
call fcn.0046f6e0
mov ecx, esi
push ebx
call fcn.0046ee80
mov ecx, ebx
mov bh, byte [ebp + 0x14]
call fcn.0046ee40
push esi
call fcn.00481cb0
add esp, 4
test al, al
jne 0x43dce0
xor eax, eax
inc eax
mov dword [esp + 8], eax
push 2
call fcn.00473360
add esp, 4
test al, al
je 0x43dce0
lea edi, [esp + 0x108]
mov ecx, edi
push 2
push 0x1e0
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x1b
push str.Failed_to_delete_apps_dir:
push eax
call fcn.00403cc6
add esp, 0xc
cmp byte [esp + 0x87], 0
jns 0x43dccb
mov esi, dword [esp + 0x7c]
push esi
push eax
call fcn.00473e90
add esp, 8
mov ecx, edi
call fcn.00473790
mov edi, dword [esp + 0xc]
lea ecx, [esp + 0x7c]
call fcn.0046ee40
cmp dword [esp + 0x18], 0
je 0x43ddf8
push 0
call fcn.00473360
add esp, 4
test al, al
je 0x43dd5e
lea esi, [esp + 0x108]
mov ecx, esi
push 0
push 0x1e7
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x15
push str.Deleting_user_profile
push eax
call fcn.00403cc6
add esp, 0xc
cmp byte [esp + 0xd7], 0
jns 0x43dd46
mov ecx, dword [esp + 0xcc]
jmp 0x43dd4d
lea ecx, [esp + 0xcc]
push ecx
push eax
call fcn.00473e90
add esp, 8
mov ecx, esi
call fcn.00473790
lea esi, [esp + 0xcc]
push esi
call fcn.00482720
add esp, 4
test al, al
je 0x43ddec
push esi
call fcn.00482020
add esp, 4
test al, al
jne 0x43ddec
xor eax, eax
inc eax
mov dword [esp + 8], eax
push 2
call fcn.00473360
add esp, 4
test al, al
je 0x43ddec
mov ebx, esi
lea esi, [esp + 0x108]
mov ecx, esi
push 2
push 0x1ea
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x23
push str.Failed_to_delete_user_profile_dir:
push eax
call fcn.00403cc6
add esp, 0xc
cmp byte [esp + 0xd7], 0
jns 0x43ddd8
mov ebx, dword [esp + 0xcc]
push ebx
push eax
call fcn.00473e90
add esp, 8
mov ecx, esi
call fcn.00473790
mov bh, byte [ebp + 0x14]
lea ecx, [esp + 0xcc]
call fcn.004417aa
movzx eax, byte [esp + 0x107]
test al, al
jns 0x43de12
mov edi, dword [esp + 0xfc]
mov eax, dword [esp + 0x100]
lea esi, [esp + 0x108]
mov ecx, esi
push eax
push edi
call fcn.0046ed80
mov ecx, esi
call fcn.004417aa
mov ecx, esi
call fcn.0046ee40
movzx eax, byte [esp + 0xef]
test al, al
jns 0x43de43
mov eax, dword [esp + 0xe8]
test eax, eax
mov edi, dword [esp + 8]
je 0x43df50
lea eax, [esp + 0xe4]
push eax
lea eax, [esp + 0xdc]
push eax
call fcn.00470c60
add esp, 8
test al, al
je 0x43df50
push 0x820
push 0
push esi
call fcn.006030b0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
lea ecx, [esp + 0xd8]
lea eax, [esp + 0x7c]
push eax
call fcn.00470a90
cmp byte [esp + 0x87], 0
jns 0x43deaa
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x10], eax
cmp byte [esp + 0xef], 0
jns 0x43debf
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x14], eax
push edi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push str._s___del_setup_exe__s____origin_setup_exe_handle_d
push 0xffffffffffffffff
push 0x410
push esi
call fcn.00401af6
add esp, 0x1c
cmp byte [esp + 0x87], 0
jns 0x43def3
push dword [esp + 0x7c]
call fcn.00517bd6
add esp, 4
xorps xmm0, xmm0
lea eax, [esp + 0x7c]
movups xmmword [eax + 0x34], xmm0
movups xmmword [eax + 0x24], xmm0
movups xmmword [eax + 0x14], xmm0
movups xmmword [eax + 4], xmm0
lea ecx, [esp + 0x60]
movaps xmmword [ecx], xmm0
mov dword [eax], 0x44
mov dword [eax + 0x2c], 0x81
sub esp, 0x28
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
movaps xmm0, xmmword [0x6392a0]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edi, dword [esp + 8]
lea ecx, [esp + 0xcc]
call fcn.0046ee40
lea ecx, [esp + 0xd8]
call fcn.0046ee40
lea ecx, [esp + 0xe4]
call fcn.0046ee40
cmp byte [esp + 0xfb], 0
jns 0x43df8d
push dword [esp + 0xf0]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x107], 0
jns 0x43dfa6
push dword [esp + 0xfc]
call fcn.00517bd6
add esp, 4
cmp edi, 2
je 0x43dfb9
test edi, edi
je 0x43dfc1
mov dword [esp + 0x2c], 0x14
jmp 0x43dfc1
mov dword [esp + 0x2c], 0x1d
test bh, bh
jne 0x43e00b
push 0
call fcn.00473360
add esp, 4
test al, al
je 0x43e00b
lea esi, [esp + 0x108]
mov ecx, esi
push 0
push 0x55f
push str..._.._chrome_installer_tdsetup_tdsetup_ee_uninstall_uninstall.cc
call fcn.004733f0
lea eax, [esp + 0x110]
push 0x34
push str.Uninstallation_complete._Launching_Uninstall_survey.
push eax
call fcn.00403cc6
add esp, 0xc
mov ecx, esi
call fcn.00473790
movzx ecx, byte [esp + 0x2b]
mov eax, ecx
test cl, cl
jns 0x43e01a
mov eax, dword [esp + 0x24]
test eax, eax
je 0x43e04c
test cl, cl
jns 0x43e028
mov edx, dword [esp + 0x20]
jmp 0x43e02c
lea edx, [esp + 0x20]
lea esi, [esp + 0x108]
mov ecx, esi
push eax
push edx
call fcn.0046ed80
push esi
call fcn.00481cb0
add esp, 4
mov ecx, esi
call fcn.0046ee40
cmp dword [0x899a44], 0
je 0x43e05f
call fcn.004175be
call fcn.00417fa4
mov esi, dword [esp + 0x2c]
cmp byte [esp + 0x2b], 0
jns 0x43e076
push dword [esp + 0x20]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x47], 0
jns 0x43e089
push dword [esp + 0x3c]
call fcn.00517bd6
add esp, 4
lea ecx, [esp + 0x48]
call fcn.0046ee40
cmp byte [esp + 0x5f], 0
jns 0x43e0a5
push dword [esp + 0x54]
call fcn.00517bd6
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x43e0b8
push dword [esp + 0x30]
call fcn.00517bd6
add esp, 4
mov ecx, dword [esp + 0x928]
xor ecx, ebp
call fcn.00517c1a
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push dword [esp + 0x108]
call fcn.00517bd6
jmp 0x43c558