Function at 0x40da15
Capabilities:
Create thread
Link many functions at runtime
Query environment variable
Query or enumerate registry value
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb6c
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xb68], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [esp + 0x20], eax
mov eax, dword [0x6a1b28]
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x14], ebx
test eax, 0xfffffffe
jne 0x40da6d
mov esi, 0x6a1b28
call fcn.0040f76f
test al, al
je 0x40da6d
mov dword [0x6a1b2c], 0x62c100
mov dword [0x6a1b28], 0x6a1b2c
mov eax, dword [0x6a1b28]
mov dword [0x6a2cdc], eax
call fcn.0040f791
test al, al
je 0x40da97
xor eax, eax
mov ecx, dword [esp + 0xb74]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00403fc1
mov esp, ebp
pop ebp
ret
mov byte [esp + 0x1a], 1
call fcn.0040fa34
test al, al
jne 0x40e234
mov esi, dword [0x6a1b84]
push 4
push 0x6093d0
lea ecx, [esp + 0x4e0]
mov dword [esp + 0x4f4], 0xf
mov dword [esp + 0x4f0], ebx
mov byte [esp + 0x4e0], bl
call fcn.0040f8cd
lea eax, [esp + 0x388]
push eax
push esi
lea ecx, [esp + 0x4e0]
call fcn.0040fb2b
push ebx
push 1
lea ecx, [esp + 0x4e0]
call fcn.0040d0a1
cmp dword [esp + 0x398], ebx
je 0x40db1c
push ebx
push 1
lea ecx, [esp + 0x390]
call fcn.0040d0a1
jmp 0x40e234
lea eax, [esp + 0xaf8]
push eax
lea ecx, [esp + 0x50]
mov dword [esp + 0x50], str.HOTLINE_INFO
mov dword [esp + 0x54], 0xc
call fcn.0040d1a6
cmp dword [eax + 0x14], 8
pop ecx
jb 0x40db46
mov eax, dword [eax]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x40db61
call fcn.004a51d7
mov byte [esp + 0x13], 1
test al, al
jne 0x40db65
mov byte [esp + 0x13], bl
push 1
xor edi, edi
lea esi, [esp + 0xafc]
mov dword [esp + 0x18], ebx
call fcn.0040bab7
cmp byte [esp + 0x13], bl
je 0x40dbf0
mov dword [esp + 0x1c], ebx
call fcn.0040ff71
mov esi, eax
mov eax, dword [esi]
push str.HOTLINE_INFO
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi]
push str.CHROME_CRASHED
mov ecx, esi
call dword [eax + 0x10]
lea eax, [esp + 0x1c]
push eax
push 0x62c138
push 0x31
push 0x62c150
push 0x62c168
push ebx
call sym.360se.exe_CrashMessageBox
add esp, 0x18
cmp eax, 1
setne byte [esp + 0x1a]
cmp dword [esp + 0x1c], ebx
je 0x40dbd4
call fcn.004b495b
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
push ebx
push 1
lea ecx, [esp + 0x390]
call fcn.0040d0a1
jmp 0x40e22a
lea eax, [esp + 0xb30]
push eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x68], str.CRASH_CAUSED_BY_MS_IME
mov dword [esp + 0x6c], 0x16
call fcn.0040d1a6
cmp dword [eax + 0x14], 8
pop ecx
jb 0x40dc1a
mov eax, dword [eax]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 1
xor edi, edi
lea esi, [esp + 0xb34]
mov dword [esp + 0x30], eax
call fcn.0040bab7
cmp dword [esp + 0x2c], ebx
je 0x40ddd3
call fcn.0040ff71
mov esi, eax
mov eax, dword [esi]
push str.CRASH_CAUSED_BY_MS_IME
mov ecx, esi
mov dword [esp + 0x30], esi
call dword [eax + 0x10]
mov eax, dword [esi]
push str.CHROME_CRASHED
mov ecx, esi
call dword [eax + 0x10]
push 0x31
push 0x62c150
push 0x62c1c0
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x40ddb7
xor eax, eax
mov word [esp + 0x510], ax
lea eax, [esp + 0x510]
push eax
mov dword [esp + 0x528], 7
mov dword [esp + 0x524], ebx
call fcn.004a1743
pop ecx
test eax, eax
je 0x40dd13
lea eax, [esp + 0x510]
push eax
lea edi, [esp + 0xe4]
call fcn.004b35dc
push str._DOWNLOADSOFT151
lea esi, [esp + 0x824]
call fcn.0040bead
mov eax, esi
push eax
call fcn.0040c6d8
lea eax, [esp + 0x190]
call fcn.004b3483
mov ecx, edi
push ecx
mov ecx, eax
call fcn.004b343b
pop ecx
push 1
xor edi, edi
call fcn.0040bab7
lea eax, [esp + 0xf0]
call fcn.004a8bc3
lea eax, [esp + 0xe0]
jmp 0x40dd9d
mov eax, dword [0x6a1b84]
push dword [eax]
lea eax, [esp + 0x85c]
call fcn.0040c8fa
lea eax, [esp + 0x858]
push eax
lea edi, [esp + 0x9c]
call fcn.004b35dc
push 1
xor edi, edi
lea esi, [esp + 0x85c]
call fcn.0040bab7
push str.http:__download.microsoft.com_download_F_F_F_FFFECF33_D8A0_4949_838B_703FF05E58CA_IME2010_zh_cn.exe
lea esi, [esp + 0x894]
call fcn.0040bead
mov eax, esi
push eax
lea edi, [esp + 0x9c]
call fcn.0040c6d8
lea eax, [esp + 0x170]
call fcn.004b3483
mov ecx, edi
push ecx
mov ecx, eax
call fcn.004b343b
pop ecx
push 1
xor edi, edi
call fcn.0040bab7
lea eax, [esp + 0xa8]
call fcn.004a8bc3
lea eax, [esp + 0x98]
push eax
call fcn.0040c870
push 1
xor edi, edi
lea esi, [esp + 0x514]
call fcn.0040bab7
mov esi, dword [esp + 0x2c]
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
push ebx
push 1
lea ecx, [esp + 0x390]
call fcn.0040d0a1
jmp 0x40da80
lea eax, [esp + 0xa6c]
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x58], str.CRASH_CAUSED_BY_IME
mov dword [esp + 0x5c], 0x13
call fcn.0040d1a6
cmp dword [eax + 0x14], 8
pop ecx
jb 0x40ddfd
mov eax, dword [eax]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 1
xor edi, edi
lea esi, [esp + 0xa70]
mov dword [esp + 0x20], eax
call fcn.0040bab7
xor ecx, ecx
cmp dword [esp + 0x1c], ebx
jbe 0x40e0e8
mov eax, dword [esp + 0x1c]
push 2
inc eax
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004013b3
pop ecx
mov dword [esp + 0x30], eax
cmp eax, ebx
je 0x40ddbf
lea eax, [esp + 0xaa4]
push eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], str.CRASH_CAUSED_BY_IME
mov dword [esp + 0x64], 0x13
call fcn.0040d1a6
cmp dword [eax + 0x14], 8
pop ecx
jb 0x40de74
mov eax, dword [eax]
push dword [esp + 0x1c]
push dword [esp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 1
xor edi, edi
lea esi, [esp + 0xaa8]
call fcn.0040bab7
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x30]
xor eax, eax
mov word [edi + ecx*2], ax
call fcn.0040ff71
mov esi, eax
mov eax, dword [esi]
push str.CRASH_CAUSED_BY_IME
mov ecx, esi
mov dword [esp + 0x30], esi
call dword [eax + 0x10]
mov eax, dword [esi]
push str.CHROME_CRASHED
mov ecx, esi
call dword [eax + 0x10]
push edi
lea esi, [esp + 0x3a8]
call fcn.0040bead
xor eax, eax
mov word [esp + 0x350], ax
push 0x62c300
mov eax, esi
mov dword [esp + 0x368], 7
mov dword [esp + 0x364], ebx
call fcn.0040cb1d
test eax, eax
jne 0x40df07
push 0x62c310
jmp 0x40df98
push 0x62c31c
lea eax, [esp + 0x3a8]
call fcn.0040cb1d
test eax, eax
jne 0x40df23
push 0x62c334
jmp 0x40df98
push 0x62c340
lea eax, [esp + 0x3a8]
call fcn.0040cb1d
test eax, eax
jne 0x40df3f
push 0x62c354
jmp 0x40df98
push 0x62c360
lea eax, [esp + 0x3a8]
call fcn.0040cb1d
test eax, eax
jne 0x40df5b
push 0x62c370
jmp 0x40df98
push 0x62c37c
lea eax, [esp + 0x3a8]
call fcn.0040cb1d
test eax, eax
jne 0x40df77
push 0x62c39c
jmp 0x40df98
push 0x62c3a8
lea eax, [esp + 0x3a8]
call fcn.0040cb1d
test eax, eax
jne 0x40df93
push 0x62c3bc
jmp 0x40df98
push 0x62c3c8
lea eax, [esp + 0x354]
push eax
call fcn.0040bed1
push 0x62c3d0
lea edi, [esp + 0x354]
lea eax, [esp + 0xb18]
call fcn.0040d692
mov dword [esp], 0x62c3e0
push eax
call fcn.0040d6e0
push eax
lea esi, [esp + 0x70c]
call fcn.0040ba36
push 1
xor edi, edi
lea esi, [esp + 0xb18]
call fcn.0040bab7
push dword [esp + 0x30]
call fcn.00404e46
cmp dword [esp + 0x720], 8
mov eax, dword [esp + 0x70c]
pop ecx
jae 0x40e009
lea eax, [esp + 0x708]
push 0x31
push 0x62c150
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x40e0b1
mov eax, dword [0x6a1b84]
push dword [eax]
lea eax, [esp + 0x8cc]
call fcn.0040c8fa
lea eax, [esp + 0x8c8]
push eax
lea edi, [esp + 0xc0]
call fcn.004b35dc
push 1
xor edi, edi
lea esi, [esp + 0x8cc]
call fcn.0040bab7
push str.http:__bbs.360safe.com_thread_4452447_1_1.html
lea esi, [esp + 0x904]
call fcn.0040bead
mov eax, esi
push eax
lea edi, [esp + 0xc0]
call fcn.0040c6d8
lea eax, [esp + 0x1b0]
call fcn.004b3483
mov ecx, edi
push ecx
mov ecx, eax
call fcn.004b343b
pop ecx
push 1
xor edi, edi
call fcn.0040bab7
lea eax, [esp + 0xcc]
call fcn.004a8bc3
lea eax, [esp + 0xbc]
push eax
call fcn.0040c870
push 1
xor edi, edi
lea esi, [esp + 0x70c]
call fcn.0040bab7
push 1
lea esi, [esp + 0x354]
call fcn.0040bab7
push 1
lea esi, [esp + 0x3a8]
call fcn.0040bab7
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx]
jmp 0x40ddbb
push 7
pop eax
lea edx, [esp + 0x37]
push edx
mov dword [esp + 0x42c], eax
mov dword [esp + 0x464], eax
lea edx, [esp + 0x418]
mov word [esp + 0x418], cx
mov ecx, dword [0x6a2cdc]
xor eax, eax
push edx
lea edx, [esp + 0x454]
mov dword [esp + 0x42c], ebx
mov dword [esp + 0x464], ebx
mov word [esp + 0x454], ax
mov eax, dword [ecx]
push edx
call dword [eax + 0xc]
test al, al
jne 0x40e160
push 1
xor edi, edi
lea esi, [esp + 0x450]
call fcn.0040bab7
push 1
lea esi, [esp + 0x418]
call fcn.0040bab7
jmp 0x40db08
mov dword [esp + 0x24], 0x31
cmp byte [esp + 0x37], bl
je 0x40e176
mov dword [esp + 0x24], 0x180031
lea eax, [esp + 0x44c]
push eax
lea esi, [esp + 0x6f0]
call fcn.0040c73c
cmp dword [esp + 0x700], 8
mov edi, dword [esp + 0x6ec]
jae 0x40e19d
mov edi, esi
lea eax, [esp + 0x414]
push eax
lea esi, [esp + 0x728]
call fcn.0040c73c
cmp dword [esp + 0x738], 8
mov eax, dword [esp + 0x724]
jae 0x40e1c4
mov eax, esi
lea ecx, [esp + 0x1a]
push ecx
push dword [esp + 0x28]
push edi
push eax
call fcn.004a183b
add esp, 0x10
push 1
xor edi, edi
lea esi, [esp + 0x728]
mov byte [esp + 0x1f], al
call fcn.0040bab7
push 1
lea esi, [esp + 0x6f0]
call fcn.0040bab7
push 1
lea esi, [esp + 0x450]
call fcn.0040bab7
push 1
lea esi, [esp + 0x418]
call fcn.0040bab7
push ebx
push 1
lea ecx, [esp + 0x390]
call fcn.0040d0a1
cmp byte [esp + 0x1b], bl
je 0x40e234
cmp byte [esp + 0x1a], bl
jne 0x40da80
mov esi, dword [0x6a1b84]
push 0xf
pop edi
push 4
push 0x6093d0
lea ecx, [esp + 0x550]
mov dword [esp + 0x24], esi
mov dword [esp + 0x564], edi
mov dword [esp + 0x560], ebx
mov byte [esp + 0x550], bl
call fcn.0040f8cd
lea eax, [esp + 0x334]
push eax
push esi
lea ecx, [esp + 0x550]
call fcn.0040fb2b
push ebx
push 1
lea ecx, [esp + 0x550]
call fcn.0040d0a1
cmp dword [esp + 0x344], ebx
jne 0x40e2dc
push 7
push str.preheat
lea ecx, [esp + 0x588]
mov dword [esp + 0x59c], edi
mov dword [esp + 0x598], ebx
mov byte [esp + 0x588], bl
call fcn.0040f8cd
lea eax, [esp + 0x580]
push eax
mov dword [esp + 0x18], 1
call fcn.0040f97f
mov byte [esp + 0x13], 1
test al, al
jne 0x40e2e0
mov byte [esp + 0x13], bl
test byte [esp + 0x14], 1
je 0x40e2fb
and dword [esp + 0x14], 0xfffffffe
push ebx
push 1
lea ecx, [esp + 0x588]
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40e357
push str.seappmgr.dll
lea esi, [esp + 0x93c]
call fcn.0040bead
push 1
mov ecx, esi
call fcn.00422512
pop ecx
push 1
xor edi, edi
call fcn.0040bab7
push str.chrome.dll
lea esi, [esp + 0x974]
call fcn.0040bead
push ebx
mov ecx, esi
call fcn.00422512
pop ecx
xor edi, edi
push 1
call fcn.0040bab7
push ebx
push 1
lea ecx, [esp + 0x33c]
jmp 0x40ddc9
cmp dword [esp + 0x344], ebx
je 0x40e3bc
push 0xb
push str.in_chromeie
lea ecx, [esp + 0x5c0]
mov dword [esp + 0x5d4], edi
mov dword [esp + 0x5d0], ebx
mov byte [esp + 0x5c0], bl
call fcn.0040f8cd
mov esi, dword [esp + 0x1c]
or dword [esp + 0x14], 2
lea eax, [esp + 0x5b8]
push eax
call fcn.0040f97f
test al, al
jne 0x40e3bc
push str.plugin
lea edx, [esp + 0x338]
call fcn.00412f48
pop ecx
mov byte [esp + 0x13], bl
test al, al
je 0x40e3c1
mov byte [esp + 0x13], 1
test byte [esp + 0x14], 2
je 0x40e3dc
and dword [esp + 0x14], 0xfffffffd
push ebx
push 1
lea ecx, [esp + 0x5c0]
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40e49c
push str.Q360MonMutex
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
cmp eax, ebx
je 0x40e43b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.IsWow64Process
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [esp + 0x3c], ebx
cmp esi, ebx
je 0x40e49c
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
test eax, eax
je 0x40e49c
cmp dword [esp + 0x3c], ebx
je 0x40e49c
call fcn.00412f6f
mov dword [esp + 0x2c], eax
cmp eax, ebx
je 0x40e49c
mov edx, dword [eax]
lea ecx, [esp + 0x5f0]
push ecx
mov ecx, eax
call dword [edx + 0x30]
cmp dword [esp + 0x600], ebx
je 0x40e47f
cmp dword [esp + 0x604], 8
mov eax, dword [esp + 0x5f0]
jae 0x40e478
lea eax, [esp + 0x5f0]
push eax
call fcn.0041402f
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0x5f4]
call fcn.0040bab7
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx]
push 1
call dword [eax]
push 0xf
pop edi
push 0xb
push str.in_chromeie
lea ecx, [esp + 0x630]
mov dword [esp + 0x644], edi
mov dword [esp + 0x640], ebx
mov byte [esp + 0x630], bl
call fcn.0040f8cd
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x628]
push eax
call fcn.0040f97f
push ebx
push 1
lea ecx, [esp + 0x630]
mov byte [esp + 0x23], al
call fcn.0040d0a1
cmp byte [esp + 0x1b], bl
je 0x40e4f3
call fcn.004a1028
mov byte [esp + 0x1b], bl
cmp dword [esp + 0x344], ebx
jne 0x40e8c9
call fcn.004154ed
test eax, eax
je 0x40e592
push 0x14
push str.make_default_browser
lea ecx, [esp + 0x6a0]
mov dword [esp + 0x6b4], edi
mov dword [esp + 0x6b0], ebx
mov byte [esp + 0x6a0], bl
call fcn.0040f8cd
or dword [esp + 0x14], 4
lea eax, [esp + 0x698]
push eax
call fcn.0040f97f
test al, al
jne 0x40e592
push 0x18
push 0x609854
lea ecx, [esp + 0x668]
mov dword [esp + 0x67c], edi
mov dword [esp + 0x678], ebx
mov byte [esp + 0x668], bl
call fcn.0040f8cd
or dword [esp + 0x14], 8
lea eax, [esp + 0x660]
push eax
call fcn.0040f97f
mov byte [esp + 0x13], 1
test al, al
je 0x40e596
mov byte [esp + 0x13], bl
test byte [esp + 0x14], 8
je 0x40e5b1
and dword [esp + 0x14], 0xfffffff7
push ebx
push 1
lea ecx, [esp + 0x668]
call fcn.0040d0a1
test byte [esp + 0x14], 4
je 0x40e5cc
and dword [esp + 0x14], 0xfffffffb
push ebx
push 1
lea ecx, [esp + 0x6a0]
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40e8c9
push dword [esp + 0x1c]
lea edi, [esp + 0x78]
call fcn.004a8b46
push 0xf
pop esi
push 0xc
push str.v3pendupdate
lea ecx, [esp + 0x3e4]
mov dword [esp + 0x3f8], esi
mov dword [esp + 0x3f4], ebx
mov byte [esp + 0x3e4], bl
call fcn.0040f8cd
push 8
push str.v3reboot
lea ecx, [esp + 0x438]
mov dword [esp + 0x44c], esi
mov dword [esp + 0x448], ebx
mov byte [esp + 0x438], bl
call fcn.0040f8cd
push 0x10
push str.v3highprivilidge
lea ecx, [esp + 0x400]
mov dword [esp + 0x414], esi
mov dword [esp + 0x410], ebx
mov byte [esp + 0x400], bl
call fcn.0040f8cd
push 0xa
push str.v3seProcId
lea ecx, [esp + 0x3c8]
mov dword [esp + 0x3dc], esi
mov dword [esp + 0x3d8], ebx
mov byte [esp + 0x3c8], bl
call fcn.0040f8cd
push 1
mov edi, 0x62c5a0
push edi
lea ecx, [esp + 0x6d8]
mov dword [esp + 0x6ec], esi
mov dword [esp + 0x6e8], ebx
mov byte [esp + 0x6d8], bl
call fcn.0040f8cd
lea eax, [esp + 0x6d0]
push eax
lea edx, [esp + 0x3e0]
lea ecx, [esp + 0x78]
call fcn.004b38d0
push ebx
push 1
lea ecx, [esp + 0x6d8]
call fcn.0040d0a1
push 1
push edi
lea ecx, [esp + 0x64c]
mov dword [esp + 0x660], esi
mov dword [esp + 0x65c], ebx
mov byte [esp + 0x64c], bl
call fcn.0040f8cd
lea eax, [esp + 0x644]
push eax
lea edx, [esp + 0x434]
lea ecx, [esp + 0x78]
call fcn.004b38d0
push ebx
push 1
lea ecx, [esp + 0x64c]
call fcn.0040d0a1
mov byte [esp + 0xb68], bl
xor eax, eax
lea edi, [esp + 0xb69]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea eax, [esp + 0xb6c]
push 0x62c600
push eax
call fcn.005d60d4
add esp, 0xc
mov dword [esp + 0x498], esi
mov dword [esp + 0x494], ebx
lea eax, [esp + 0xb68]
mov byte [esp + 0x484], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e76f
sub eax, edi
push eax
lea eax, [esp + 0xb6c]
push eax
lea ecx, [esp + 0x48c]
call fcn.0040f8cd
lea eax, [esp + 0x484]
push eax
lea edx, [esp + 0x3c4]
lea ecx, [esp + 0x78]
call fcn.004b38d0
push ebx
push 1
lea ecx, [esp + 0x48c]
call fcn.0040d0a1
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [esp + 0x54]
push ebx
push eax
call fcn.00419a6f
add esp, 0x1c
cmp dword [esp + 0x40], 6
jb 0x40e7e1
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x40e7e1
call fcn.004aaf96
test eax, eax
je 0x40e830
push 1
push 0x62c5a0
lea ecx, [esp + 0x4a8]
mov dword [esp + 0x4bc], esi
mov dword [esp + 0x4b8], ebx
mov byte [esp + 0x4a8], bl
call fcn.0040f8cd
lea eax, [esp + 0x4a0]
push eax
lea edx, [esp + 0x3fc]
lea ecx, [esp + 0x78]
call fcn.004b38d0
push ebx
push 1
lea ecx, [esp + 0x4a8]
call fcn.0040d0a1
lea eax, [esp + 0xadc]
push eax
lea eax, [esp + 0x78]
push eax
call fcn.004b361f
push eax
push dword [esp + 0x2c]
call fcn.004aaca2
neg eax
pop ecx
sbb al, al
pop ecx
inc al
push 1
xor edi, edi
lea esi, [esp + 0xae0]
mov byte [esp + 0x17], al
call fcn.0040bab7
xor esi, esi
push ebx
inc esi
lea ecx, [esp + 0x3c4]
push esi
call fcn.0040d0a1
push ebx
lea ecx, [esp + 0x3fc]
push esi
call fcn.0040d0a1
push ebx
lea ecx, [esp + 0x434]
push esi
call fcn.0040d0a1
push ebx
lea ecx, [esp + 0x3e0]
push esi
call fcn.0040d0a1
lea eax, [esp + 0x84]
call fcn.004a8bc3
lea eax, [esp + 0x74]
push eax
call fcn.0040c870
cmp byte [esp + 0x13], bl
je 0x40e8c6
push ebx
push esi
jmp 0x40e34b
push 0xf
pop edi
push edi
push str.360seautoupdate
lea ecx, [esp + 0x4c4]
mov dword [esp + 0x4d8], edi
mov dword [esp + 0x4d4], ebx
mov byte [esp + 0x4c4], bl
call fcn.0040f8cd
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x4bc]
push eax
call fcn.0040f97f
push ebx
push 1
lea ecx, [esp + 0x4c4]
mov byte [esp + 0x1b], al
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40e9fc
push esi
lea edi, [esp + 0x108]
call fcn.004a8b46
push 0xf
pop esi
push 0xc
push str.v3autoupdate
lea ecx, [esp + 0x4fc]
mov dword [esp + 0x510], esi
mov dword [esp + 0x50c], ebx
mov byte [esp + 0x4fc], bl
call fcn.0040f8cd
push 1
push 0x62c5a0
lea ecx, [esp + 0x5dc]
mov dword [esp + 0x5f0], esi
mov dword [esp + 0x5ec], ebx
mov byte [esp + 0x5dc], bl
call fcn.0040f8cd
lea eax, [esp + 0x5d4]
push eax
lea edx, [esp + 0x4f8]
mov ecx, edi
call fcn.004b38d0
push ebx
push 1
lea ecx, [esp + 0x5dc]
call fcn.0040d0a1
lea eax, [esp + 0xb4c]
push eax
mov eax, edi
push eax
call fcn.004b361f
push eax
push dword [esp + 0x2c]
call fcn.004aaca2
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xb50]
call fcn.0040bab7
push ebx
push 1
lea ecx, [esp + 0x4fc]
call fcn.0040d0a1
lea eax, [esp + 0x114]
call fcn.004a8bc3
lea eax, [esp + 0x104]
push eax
call fcn.0040c870
jmp 0x40e348
push 0x1e
push str.360se_safe_browsing_autoupdate
lea ecx, [esp + 0x6bc]
mov dword [esp + 0x6d0], edi
mov dword [esp + 0x6cc], ebx
mov byte [esp + 0x6bc], bl
call fcn.0040f8cd
lea eax, [esp + 0x6b4]
push eax
call fcn.0040f97f
push ebx
push 1
lea ecx, [esp + 0x6bc]
mov byte [esp + 0x1b], al
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40eb26
push esi
lea edi, [esp + 0x150]
call fcn.004a8b46
push 0xf
pop esi
push 0x1a
push str.v3safe_browsing_autoupdate
lea ecx, [esp + 0x614]
mov dword [esp + 0x628], esi
mov dword [esp + 0x624], ebx
mov byte [esp + 0x614], bl
call fcn.0040f8cd
push 1
push 0x62c5a0
lea ecx, [esp + 0x534]
mov dword [esp + 0x548], esi
mov dword [esp + 0x544], ebx
mov byte [esp + 0x534], bl
call fcn.0040f8cd
lea eax, [esp + 0x52c]
push eax
lea edx, [esp + 0x610]
mov ecx, edi
call fcn.004b38d0
push ebx
push 1
lea ecx, [esp + 0x534]
call fcn.0040d0a1
lea eax, [esp + 0xa88]
push eax
mov eax, edi
push eax
call fcn.004b361f
push eax
push dword [esp + 0x2c]
call fcn.004aaca2
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xa8c]
call fcn.0040bab7
push ebx
push 1
lea ecx, [esp + 0x614]
call fcn.0040d0a1
lea eax, [esp + 0x15c]
call fcn.004a8bc3
lea eax, [esp + 0x14c]
jmp 0x40e9f1
push 0x19
push str.360se_safe_browsing_white
lea ecx, [esp + 0x56c]
mov dword [esp + 0x580], edi
mov dword [esp + 0x57c], ebx
mov byte [esp + 0x56c], bl
call fcn.0040f8cd
lea eax, [esp + 0x564]
push eax
call fcn.0040f97f
push ebx
push 1
lea ecx, [esp + 0x56c]
mov byte [esp + 0x1b], al
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40ec50
push esi
lea edi, [esp + 0x12c]
call fcn.004a8b46
push 0xf
pop esi
push 0x15
push str.v3safe_browsing_white
lea ecx, [esp + 0x470]
mov dword [esp + 0x484], esi
mov dword [esp + 0x480], ebx
mov byte [esp + 0x470], bl
call fcn.0040f8cd
push 1
push 0x62c5a0
lea ecx, [esp + 0x684]
mov dword [esp + 0x698], esi
mov dword [esp + 0x694], ebx
mov byte [esp + 0x684], bl
call fcn.0040f8cd
lea eax, [esp + 0x67c]
push eax
lea edx, [esp + 0x46c]
mov ecx, edi
call fcn.004b38d0
push ebx
push 1
lea ecx, [esp + 0x684]
call fcn.0040d0a1
lea eax, [esp + 0xac0]
push eax
mov eax, edi
push eax
call fcn.004b361f
push eax
push dword [esp + 0x2c]
call fcn.004aaca2
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xac4]
call fcn.0040bab7
push ebx
push 1
lea ecx, [esp + 0x470]
call fcn.0040d0a1
lea eax, [esp + 0x138]
call fcn.004a8bc3
lea eax, [esp + 0x128]
jmp 0x40e9f1
cmp dword [esp + 0x344], ebx
jne 0x40ed77
push edi
push str.360seautoupdate
lea ecx, [esp + 0x5a4]
mov dword [esp + 0x5b8], edi
mov dword [esp + 0x5b4], ebx
mov byte [esp + 0x5a4], bl
call fcn.0040f8cd
or dword [esp + 0x14], 0x10
lea eax, [esp + 0x59c]
push eax
call fcn.0040f97f
test al, al
jne 0x40ed77
push str.360se_safe_browsing_autoupdate
lea ecx, [esp + 0x798]
call fcn.0040fcb6
or dword [esp + 0x14], 0x20
lea eax, [esp + 0x794]
push eax
call fcn.0040f97f
test al, al
jne 0x40ed77
push str.360se_safe_browsing_white
lea ecx, [esp + 0xa54]
call fcn.0040fcb6
or dword [esp + 0x14], 0x40
lea eax, [esp + 0xa50]
push eax
call fcn.0040f97f
test al, al
jne 0x40ed77
push str.uninstall_cud_disabledlg
lea ecx, [esp + 0xa1c]
call fcn.0040fcb6
or dword [esp + 0x14], 0x80
lea eax, [esp + 0xa18]
push eax
call fcn.0040f97f
test al, al
jne 0x40ed77
push str.make_default_browser
lea ecx, [esp + 0x9e4]
call fcn.0040fcb6
or dword [esp + 0x14], 0x100
lea eax, [esp + 0x9e0]
push eax
call fcn.0040f97f
test al, al
jne 0x40ed77
push str.video_mode
lea ecx, [esp + 0x9ac]
call fcn.0040fcb6
or dword [esp + 0x14], 0x200
lea eax, [esp + 0x9a8]
push eax
call fcn.0040f97f
mov byte [esp + 0x13], 1
test al, al
je 0x40ed7b
mov byte [esp + 0x13], bl
test dword [esp + 0x14], 0x200
je 0x40ed9c
and dword [esp + 0x14], 0xfffffdff
push ebx
push 1
lea ecx, [esp + 0x9b0]
call fcn.0040d0a1
test dword [esp + 0x14], 0x100
je 0x40edbd
and dword [esp + 0x14], 0xfffffeff
push ebx
push 1
lea ecx, [esp + 0x9e8]
call fcn.0040d0a1
test byte [esp + 0x14], 0x80
je 0x40eddb
and dword [esp + 0x14], 0xffffff7f
push ebx
push 1
lea ecx, [esp + 0xa20]
call fcn.0040d0a1
test byte [esp + 0x14], 0x40
je 0x40edf6
and dword [esp + 0x14], 0xffffffbf
push ebx
push 1
lea ecx, [esp + 0xa58]
call fcn.0040d0a1
test byte [esp + 0x14], 0x20
je 0x40ee11
and dword [esp + 0x14], 0xffffffdf
push ebx
push 1
lea ecx, [esp + 0x79c]
call fcn.0040d0a1
test byte [esp + 0x14], 0x10
je 0x40ee2c
and dword [esp + 0x14], 0xffffffef
push ebx
push 1
lea ecx, [esp + 0x5a4]
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40ee6a
call fcn.00415740
test al, al
jne 0x40ee60
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x28], ebx
call fcn.004ab27a
or dword [esp + 0x28], 4
pop ecx
push dword [esp + 0x24]
call fcn.004ab9d9
pop ecx
mov byte [0x6a1b31], 1
call fcn.004157f7
mov byte [esp + 0x1b], 1
call fcn.0040fcd9
mov edi, 0x400
cmp dword [esp + 0x344], ebx
je 0x40eead
push str.in_chromeie
lea ecx, [esp + 0x7ec]
call fcn.0040fcb6
mov esi, dword [esp + 0x1c]
or dword [esp + 0x14], edi
lea eax, [esp + 0x7e8]
push eax
call fcn.0040f97f
test al, al
jne 0x40eeb1
mov byte [esp + 0x13], bl
jmp 0x40eeb6
mov esi, dword [esp + 0x1c]
mov byte [esp + 0x13], 1
test dword [esp + 0x14], edi
je 0x40eed3
and dword [esp + 0x14], 0xfffffbff
push ebx
push 1
lea ecx, [esp + 0x7f0]
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40ef67
call fcn.0040ff8a
push ebx
xor edi, edi
lea esi, [esp + 0xa00]
mov dword [esp + 0x28], eax
call fcn.0040bab7
push ebx
lea esi, [esp + 0x744]
call fcn.0040bab7
lea eax, [esp + 0x9fc]
push eax
push dword [esp + 0x28]
mov ecx, esi
call fcn.0040ffa7
cmp dword [esp + 0x24], ebx
je 0x40ef25
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
push 1
call dword [eax]
push str.360base.dll
lea eax, [esp + 0x744]
push eax
call fcn.0040d6e0
cmp dword [eax + 0x14], 8
jb 0x40ef3f
mov eax, dword [eax]
push eax
call fcn.004158ba
push 1
xor edi, edi
lea esi, [esp + 0x744]
call fcn.0040bab7
push 1
lea esi, [esp + 0xa00]
call fcn.0040bab7
mov esi, dword [esp + 0x1c]
cmp dword [esp + 0x344], ebx
jne 0x40efad
push ebx
push ebx
xor edi, edi
inc edi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 0x4b6fb7
call fcn.00418bac
mov dword [esp], 0x4ac9ad
call fcn.00418c1f
mov dword [esp], 0x4ac9ad
call fcn.00418c46
pop ecx
mov ecx, esi
mov dword [0x6a2f70], edi
call fcn.00418c6d
push 0x62c6c8
lea ecx, [esp + 0x7d0]
mov byte [esp + 0x1e], 1
call fcn.0040fcb6
lea eax, [esp + 0x7cc]
push eax
call fcn.0040f97f
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [esp + 0x7d4]
mov byte [esp + 0x1b], al
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40efef
mov byte [esp + 0x1a], bl
push str.uninstall_cud_disabledlg
lea ecx, [esp + 0x920]
call fcn.0040fcb6
lea eax, [esp + 0x91c]
push eax
call fcn.0040f97f
push ebx
push edi
lea ecx, [esp + 0x924]
mov byte [esp + 0x1b], al
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40f029
mov byte [esp + 0x1a], bl
push str.first_run
lea ecx, [esp + 0x760]
call fcn.0040fcb6
lea eax, [esp + 0x75c]
push eax
call fcn.0040f97f
push ebx
push edi
lea ecx, [esp + 0x764]
mov byte [esp + 0x1b], al
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40f063
mov byte [esp + 0x1a], bl
push str.uninstall
lea ecx, [esp + 0x808]
call fcn.0040fcb6
lea eax, [esp + 0x804]
push eax
call fcn.0040f97f
push ebx
push edi
lea ecx, [esp + 0x80c]
mov byte [esp + 0x1b], al
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40f09d
mov byte [esp + 0x1a], bl
push str.doctor
lea ecx, [esp + 0x9c8]
call fcn.0040fcb6
lea eax, [esp + 0x9c4]
push eax
call fcn.0040f97f
push ebx
push edi
lea ecx, [esp + 0x9cc]
mov byte [esp + 0x1b], al
call fcn.0040d0a1
cmp byte [esp + 0x13], bl
je 0x40f0d7
mov byte [esp + 0x1a], bl
push str.silent_install
lea ecx, [esp + 0x840]
call fcn.0040fcb6
lea eax, [esp + 0x83c]
push eax
lea eax, [esp + 0x370]
push eax
push esi
call fcn.0040fbce
push ebx
push edi
lea ecx, [esp + 0x844]
call fcn.0040d0a1
cmp dword [esp + 0x37c], 5
jne 0x40f138
cmp dword [esp + 0x380], 8
mov eax, dword [esp + 0x36c]
jae 0x40f12e
lea eax, [esp + 0x36c]
cmp word [eax], 0x33
jne 0x40f138
mov byte [esp + 0x1a], bl
push str.use_external_ui_dll
lea ecx, [esp + 0x958]
mov byte [esp + 0x17], bl
call fcn.0040fcb6
lea eax, [esp + 0x954]
push eax
call fcn.0040f97f
push ebx
push edi
lea ecx, [esp + 0x95c]
mov byte [esp + 0x2b], al
call fcn.0040d0a1
cmp byte [esp + 0x23], bl
je 0x40f177
mov byte [esp + 0x13], 1
cmp dword [esp + 0x344], ebx
jne 0x40f6a3
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [esp + 0x6c]
push eax
mov dword [esp + 0x70], 8
mov dword [esp + 0x74], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call fcn.00418cdb
cmp byte [esp + 0x13], bl
je 0x40f2d1
push str.360se6ui.dll
lea esi, [esp + 0x878]
call fcn.0040bead
push ebx
mov ecx, esi
call fcn.00422512
pop ecx
push 1
xor edi, edi
mov dword [esp + 0x40], eax
call fcn.0040bab7
cmp dword [esp + 0x3c], ebx
jne 0x40f212
push 0x10
push ebx
push str.load_360se6ui.dll_failed
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004a85f2
call dword [sym.imp.ole32.dll_CoUninitialize]
lea esi, [esp + 0x36c]
jmp 0x40e33f
mov edi, dword [esp + 0x3c]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.SeuiPreInitialize
push edi
call esi
push str.SeuiInitialize
push edi
mov dword [0x6a1afc], eax
call esi
push str.SeuiUninitialize
push edi
mov dword [0x6a1b00], eax
call esi
push str.SeuiSetLogicalChannel
push edi
mov dword [0x6a1b04], eax
call esi
push str.SeuiSetAppManagerChannel
push edi
mov dword [0x6a1b08], eax
call esi
push str.CreateCommandChannel
push edi
mov dword [0x6a1b0c], eax
call esi
push str.DestroyCommandChannel
push edi
mov dword [0x6a1b10], eax
call esi
push str.SeuiTranslateAccelerator
push edi
mov dword [0x6a1b14], eax
call esi
mov dword [0x6a1b18], eax
cmp dword [0x6a1afc], ebx
je 0x40f2c4
cmp dword [0x6a1b00], ebx
je 0x40f2c4
cmp dword [0x6a1b04], ebx
je 0x40f2c4
cmp dword [0x6a1b08], ebx
je 0x40f2c4
cmp dword [0x6a1b10], ebx
je 0x40f2c4
cmp dword [0x6a1b14], ebx
je 0x40f2c4
cmp dword [0x6a1b0c], ebx
je 0x40f2c4
cmp eax, ebx
jne 0x40f38c
push 0x10
push ebx
push str.load_invalid_360se6ui.dll
jmp 0x40f1f4
mov dword [0x6a1afc], 0x418d4c
mov dword [0x6a1b00], 0x41954f
mov dword [0x6a1b04], 0x557b0f
mov dword [0x6a1b08], 0x4228fc
mov dword [0x6a1b0c], 0x425a17
mov dword [0x6a1b10], 0x418d6b
mov dword [0x6a1b14], 0x4d4a92
mov dword [0x6a1b18], 0x45ea30
call fcn.0040ff8a
push 0x1c
mov dword [esp + 0x44], eax
call fcn.004013b3
mov esi, eax
pop ecx
cmp esi, ebx
je 0x40f348
push ebx
xor edi, edi
call fcn.0040bab7
mov dword [0x69f460], esi
jmp 0x40f34e
mov dword [0x69f460], ebx
push 0x1c
call fcn.004013b3
mov esi, eax
pop ecx
cmp esi, ebx
je 0x40f368
push ebx
xor edi, edi
call fcn.0040bab7
mov ecx, esi
jmp 0x40f36a
xor ecx, ecx
push dword [0x69f460]
mov esi, dword [esp + 0x44]
push esi
mov dword [0x69f464], ecx
call fcn.0040ffa7
cmp esi, ebx
je 0x40f38c
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
call dword [0x6a1afc]
test dword [esp + 0x14], 0x800
mov dword [0x6bcc20], eax
je 0x40f3b5
and dword [esp + 0x14], 0xfffff7ff
lea esi, [esp + 0x1d0]
call fcn.004b5cf8
push ebx
push ebx
push dword [esp + 0x30]
push 0x422470
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x30], eax
cmp eax, ebx
jne 0x40f3fc
mov dword [esp + 0x24], ebx
push 1
xor edi, edi
lea esi, [esp + 0x370]
call fcn.0040bab7
push ebx
push 1
lea ecx, [esp + 0x33c]
call fcn.0040d0a1
mov eax, dword [esp + 0x24]
jmp 0x40da82
push str.video_mode
lea ecx, [esp + 0xa38]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x4c], 3
call fcn.0040fcb6
test dword [esp + 0x14], 0x100000
je 0x40f433
lea esi, [esp + 0x280]
call fcn.004b5cf8
mov esi, dword [0x6a1b84]
lea eax, [esp + 0xa34]
push eax
call fcn.0040f97f
mov dword [esp + 0x24], str.UIPersistData_videomode
test al, al
jne 0x40f45a
mov dword [esp + 0x24], str.UIPersistData
push ebx
push 1
lea ecx, [esp + 0xa3c]
call fcn.0040d0a1
mov esi, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
lea eax, [esp + 0x38]
push eax
push ebx
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x30]
mov edi, 0x80000001
push str.Software360360se6default
push edi
call esi
test eax, eax
jne 0x40f4c1
cmp dword [esp + 0x38], ebx
je 0x40f4c1
push dword [esp + 0x38]
call fcn.004013b3
pop ecx
mov dword [esp + 0x28], eax
cmp eax, ebx
je 0x40f4c1
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x2c]
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x30]
push str.Software360360se6default
push edi
call esi
call fcn.004194b3
push str.360se_no_chrome
lea ecx, [esp + 0x8b0]
movzx edi, al
call fcn.0040fcb6
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x8ac]
push eax
call fcn.0040f97f
push ebx
push 1
lea ecx, [esp + 0x8b4]
mov byte [esp + 0x2b], al
call fcn.0040d0a1
cmp byte [esp + 0x23], bl
je 0x40f540
cmp byte [esp + 0x1a], bl
je 0x40f537
cmp edi, ebx
sete byte [esp + 0x1a]
cmp byte [esp + 0x1a], bl
je 0x40f537
call fcn.004a8974
neg al
sbb al, al
inc al
mov byte [esp + 0x1a], al
je 0x40f537
call fcn.004a8a10
neg al
sbb al, al
inc al
mov byte [esp + 0x1a], al
movzx eax, byte [esp + 0x1a]
push edi
push eax
jmp 0x40f542
push edi
push ebx
push dword [esp + 0x40]
push dword [esp + 0x34]
call dword [0x6a1b00]
add esp, 0x10
cmp dword [esp + 0x28], ebx
je 0x40f563
push dword [esp + 0x28]
call fcn.00404e46
pop ecx
mov esi, str.Shell32.dll
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp eax, ebx
jne 0x40f57a
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.SetCurrentProcessExplicitAppUserModelID
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
cmp edi, ebx
je 0x40f5d4
push str.video_mode
lea ecx, [esp + 0x990]
call fcn.0040fcb6
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x98c]
push eax
call fcn.0040f97f
push ebx
push 1
lea ecx, [esp + 0x994]
mov byte [esp + 0x2b], al
call fcn.0040d0a1
mov eax, str.360ve
cmp byte [esp + 0x23], bl
jne 0x40f5d1
mov eax, str.360se
push eax
call edi
mov edi, dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push ebx
call fcn.0045a7ae
test eax, eax
jne 0x40f5da
push 0x1cff
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x3c]
push eax
push 1
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov dword [esp + 0x40], eax
cmp eax, ebx
je 0x40f606
cmp eax, 0xffffffff
jne 0x40f5da
push str.360se_no_chrome
lea ecx, [esp + 0x8e8]
call fcn.0040fcb6
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x8e4]
push eax
call fcn.0040f97f
push ebx
push 1
lea ecx, [esp + 0x8ec]
mov byte [esp + 0x2b], al
call fcn.0040d0a1
cmp byte [esp + 0x23], bl
je 0x40f661
cmp dword [esp + 0x40], ebx
jne 0x40f661
lea eax, [esp + 0x2c]
push eax
push dword [esp + 0x34]
mov dword [esp + 0x34], ebx
call edi
cmp dword [esp + 0x2c], 6
je 0x40f5da
cmp byte [esp + 0x1b], bl
je 0x40f66c
call fcn.004a0181
lea eax, [esp + 0x44]
push eax
push dword [esp + 0x34]
mov dword [esp + 0x4c], ebx
call edi
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
jmp 0x40f3d4
push str.renderer
lea edx, [esp + 0x338]
call fcn.00412f48
pop ecx
mov edi, 0x2000
test al, al
je 0x40f713
push str.360se_crash_renderer
lea ecx, [esp + 0x7b4]
call fcn.0040fcb6
or dword [esp + 0x14], 0x1000
lea eax, [esp + 0x7b0]
push eax
call fcn.0040f97f
test al, al
je 0x40f713
push str.no_sandbox
lea ecx, [esp + 0x77c]
call fcn.0040fcb6
or dword [esp + 0x14], edi
lea eax, [esp + 0x778]
push eax
call fcn.0040f97f
mov byte [esp + 0x1b], 1
test al, al
je 0x40f717
mov byte [esp + 0x1b], bl
test dword [esp + 0x14], edi
je 0x40f734
and dword [esp + 0x14], 0xffffdfff
push ebx
push 1
lea ecx, [esp + 0x780]
call fcn.0040d0a1
test dword [esp + 0x14], 0x1000
je 0x40f74d
push ebx
push 1
lea ecx, [esp + 0x7b8]
call fcn.0040d0a1
cmp byte [esp + 0x1b], bl
je 0x40f760
mov dword [esp + 0x24], 0x360
jmp 0x40f3d4
push dword [esp + 0x28]
call fcn.00410b7d
pop ecx
jmp 0x40f69a