Function at 0x442e50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x49b525
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x4bd450]
xor eax, esp
mov dword [esp + 0xd8], eax
push ebx
push esi
push edi
mov eax, dword [0x4bd450]
xor eax, esp
push eax
lea eax, [esp + 0xf0]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi]
mov esi, edx
mov edx, dword [eax + 8]
xor ebx, ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], ebx
call edx
test eax, eax
je 0x44366f
cmp esi, ebx
je 0x44366f
cmp dword [edi + 0x60], ebx
jne 0x442fcf
mov ecx, dword [esi + 8]
lea eax, [esi + 0xc]
lea edx, [esp + 0x30]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x34], eax
push edx
lea eax, [esp + 0xb0]
lea ebx, [esi + 0x241c]
push eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x40], ebx
call fcn.00448a90
mov dword [esp + 0xf8], 0
lea ecx, [esp + 0xac]
push ecx
lea edx, [esp + 0x34]
push edx
lea eax, [edi + 0x40]
push eax
call fcn.004482d0
mov dword [esp + 0xf8], 0xffffffff
lea ecx, [esp + 0xac]
push ecx
call fcn.00443760
cmp dword [edi + 0x64], 0
jne 0x442f5f
push str.safemonhlp.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x442f5f
push str.qhadproc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [edi + 0x64], eax
test eax, eax
jne 0x442f5f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [edi + 0x64]
test edi, edi
je 0x442fcf
push 0x30
lea edx, [esp + 0xb0]
push 0
push edx
call fcn.00476ef0
mov ecx, dword [esi + 4]
lea edx, [esi + 0x214]
lea eax, [esi + 0x41c]
mov dword [esp + 0xcc], edx
add esp, 0xc
mov dword [esp + 0xc4], eax
mov eax, dword [esi + 8]
mov dword [esp + 0xbc], ecx
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0xac]
push edx
mov dword [esp + 0xb0], 1
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
call edi
call fcn.00403ae0
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x4430cc
call fcn.00403ae0
mov ecx, dword [eax + 0x14]
sub ecx, dword [eax + 0x10]
add eax, 4
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4430cc
xor ebx, ebx
call fcn.00403ae0
mov ecx, dword [eax + 0x14]
sub ecx, dword [eax + 0x10]
add eax, 4
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
je 0x4430cc
mov dword [esp + 0x14], ebx
call fcn.00403ae0
mov esi, eax
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
add esi, 4
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x44305f
call fcn.004726ec
mov esi, dword [esi + 0xc]
add esi, dword [esp + 0x14]
cmp dword [esi + 0x18], 8
jb 0x443071
mov esi, dword [esi + 4]
jmp 0x443074
add esi, 4
mov edi, esi
mov esi, dword [esp + 0x18]
add esi, 0xc
call fcn.00426cc0
test eax, eax
je 0x44309d
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 8]
push edx
call fcn.004483d0
mov esi, eax
call fcn.0044a930
add esp, 4
add dword [esp + 0x14], 0x1c
inc ebx
call fcn.00403ae0
mov ecx, dword [eax + 0x14]
sub ecx, dword [eax + 0x10]
add eax, 4
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x443033
mov esi, dword [esp + 0x18]
add esi, 0xc
mov edi, str.360tray.exe
call fcn.00426cc0
test eax, eax
je 0x443165
push 0x517930
mov edi, esi
call fcn.00405520
test eax, eax
je 0x443165
mov ebx, dword [esp + 0x10]
mov edi, 1
mov dword [ebx + 0x60], edi
call fcn.00424b20
push 0
push 0x4a6ae0
mov ecx, str.SYSTEMCurrentControlSetServices360bpsvc
call fcn.0040e760
add esp, 8
push edi
sub esp, 0x1c
mov edx, str.trayExistUninstallBroProt
mov eax, esp
mov dword [esp + 0x3c], esp
call fcn.004028a0
mov dword [esp + 0x118], edi
sub esp, 0x1c
mov edx, str.trayExistUninstallBroProt
mov eax, esp
mov dword [esp + 0x50], esp
call fcn.004028a0
mov byte [esp + 0x134], 2
mov dword [esp + 0x134], 0xffffffff
call fcn.00408160
add esp, 0x3c
jmp 0x443169
mov ebx, dword [esp + 0x10]
cmp dword [ebx + 0x78], 0
je 0x44318b
mov edi, str.SystemSettings.exe
call fcn.00426cc0
test eax, eax
je 0x44318b
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 8]
mov esi, ebx
call fcn.00443850
mov edx, dword [0x515fd8]
cmp dword [edx + 0x34], 0
mov ecx, dword [0x517dd0]
mov esi, dword [0x517dcc]
mov dword [esp + 0x1c], 0
je 0x443245
mov edi, ecx
sub edi, esi
mov eax, 0x81c635bd
imul edi
add edx, edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
xor ebx, ebx
add eax, edx
je 0x443245
xor edi, edi
mov dword [esp + 0x10], edi
cmp ebx, eax
jb 0x4431e5
call fcn.004726ec
mov ecx, dword [0x517dd0]
mov esi, dword [0x517dcc]
cmp dword [edi + esi + 4], 0
mov eax, 0x81c635bd
jne 0x443695
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x443214
call fcn.004726ec
mov esi, dword [0x517dcc]
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x1c]
add esi, edi
push esi
call fcn.00444b90
mov ecx, dword [0x517dd0]
mov esi, dword [0x517dcc]
add esp, 8
mov dword [esp + 0x1c], eax
cmp eax, 1
jne 0x443717
mov dword [esp + 0x28], eax
mov eax, dword [0x515fd8]
xor ebx, ebx
cmp dword [eax + 0x3c], ebx
je 0x44366f
mov edi, ecx
sub edi, esi
mov eax, 0x81c635bd
imul edi
add edx, edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], ebx
je 0x44366f
mov dword [esp + 0x10], ebx
mov edi, dword [esp + 0x14]
cmp edi, eax
jb 0x443293
call fcn.004726ec
mov ecx, dword [0x517dd0]
mov esi, dword [0x517dcc]
mov edx, dword [esp + 0x10]
cmp dword [edx + esi + 4], 3
jne 0x443642
cmp dword [esp + 0x28], ebx
jne 0x443642
cmp dword [esp + 0x24], ebx
jne 0x443642
mov esi, 7
xor eax, eax
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], ax
mov dword [esp + 0xf8], 3
xor ecx, ecx
mov dword [esp + 0x8c], esi
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], cx
mov byte [esp + 0xf8], 4
mov ecx, dword [0x517dd0]
sub ecx, dword [0x517dcc]
mov eax, 0x81c635bd
imul ecx
add edx, ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x44331a
call fcn.004726ec
mov edx, dword [0x517dcc]
mov ecx, dword [esp + 0x10]
lea eax, [ecx + edx]
mov ecx, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x40]
push edx
mov edx, dword [esp + 0x20]
push eax
lea ecx, [esp + 0x80]
call fcn.0043e9a0
add esp, 0xc
test eax, eax
je 0x4435cd
cmp dword [esp + 0x8c], 8
mov edx, dword [esp + 0x78]
jae 0x44335f
lea edx, [esp + 0x78]
sub esp, 0x1c
mov esi, esp
xor eax, eax
mov dword [esi + 0x18], 7
mov dword [esi + 0x14], ebx
mov word [esi + 4], ax
mov eax, edx
mov dword [esp + 0x3c], esp
lea edi, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x443380
sub eax, edi
sar eax, 1
push eax
push edx
call fcn.00402bd0
mov byte [esp + 0x114], 5
mov byte [esp + 0x114], 4
lea edi, [esp + 0xc8]
call fcn.0043aae0
mov byte [esp + 0xf8], 6
cmp dword [esp + 0x54], 8
mov ecx, dword [esp + 0x40]
jae 0x4433c9
lea ecx, [esp + 0x40]
sub esp, 0x1c
mov esi, esp
xor edx, edx
mov eax, ecx
mov dword [esi + 0x18], 7
mov dword [esi + 0x14], ebx
mov dword [esp + 0x3c], esp
mov word [esi + 4], dx
lea edi, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x4433e7
sub eax, edi
sar eax, 1
push eax
push ecx
call fcn.00402bd0
mov byte [esp + 0x114], 7
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x64], esp
mov edi, 7
push edi
xor eax, eax
mov dword [esi + 0x18], edi
mov dword [esi + 0x14], ebx
push str.procact
mov word [esi + 4], ax
call fcn.00402bd0
mov byte [esp + 0x130], 8
mov byte [esp + 0x130], 6
lea ecx, [esp + 0xe4]
call fcn.0043b220
xor ecx, ecx
mov dword [esp + 0xa8], edi
mov dword [esp + 0xa4], ebx
mov word [esp + 0x94], cx
mov byte [esp + 0xf8], 9
xor edx, edx
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], ebx
mov word [esp + 0x5c], dx
mov byte [esp + 0xf8], 0xa
lea edi, [esp + 0x58]
call fcn.0040e270
test eax, eax
je 0x44350d
cmp dword [esp + 0x70], 8
mov edi, dword [esp + 0x5c]
jae 0x44349d
lea edi, [esp + 0x5c]
lea ecx, [esp + 0x90]
call fcn.0040cae0
test eax, eax
je 0x44350d
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x48], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0xb4]
xor ecx, ecx
mov dword [eax + 0x18], 7
mov dword [eax + 0x14], ebx
push edx
mov word [eax + 4], cx
call fcn.00402a90
mov byte [esp + 0x114], 0xb
sub esp, 0x1c
mov edx, str.brover
mov eax, esp
mov dword [esp + 0x58], esp
call fcn.004028a0
mov byte [esp + 0x130], 0xc
mov byte [esp + 0x130], 0xa
lea ecx, [esp + 0xe4]
call fcn.0043b220
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x48], esp
push ebx
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push 0x4a5b1c
mov byte [ecx + 4], 0
call fcn.00403290
mov byte [esp + 0x114], 0xd
mov byte [esp + 0x114], 0xa
lea esi, [esp + 0xc8]
call fcn.0043acf0
mov byte [esp + 0xf8], 9
mov edi, 8
cmp dword [esp + 0x70], edi
jb 0x44356b
mov eax, dword [esp + 0x5c]
push eax
call fcn.00471eaf
add esp, 4
mov esi, 7
xor ecx, ecx
mov dword [esp + 0x70], esi
mov dword [esp + 0x6c], ebx
mov word [esp + 0x5c], cx
mov byte [esp + 0xf8], 6
cmp dword [esp + 0xa8], edi
jb 0x4435a0
mov edx, dword [esp + 0x94]
push edx
call fcn.00471eaf
add esp, 4
xor eax, eax
mov dword [esp + 0xa8], esi
mov dword [esp + 0xa4], ebx
mov word [esp + 0x94], ax
mov byte [esp + 0xf8], 4
lea ecx, [esp + 0xac]
push ecx
call fcn.0043ac50
mov byte [esp + 0xf8], 3
mov edi, 8
cmp dword [esp + 0x8c], edi
jb 0x4435f0
mov edx, dword [esp + 0x78]
push edx
call fcn.00471eaf
add esp, 4
xor eax, eax
mov dword [esp + 0x8c], esi
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], ax
mov dword [esp + 0xf8], 0xffffffff
cmp dword [esp + 0x54], edi
jb 0x443623
mov ecx, dword [esp + 0x40]
push ecx
call fcn.00471eaf
add esp, 4
mov ecx, dword [0x517dd0]
mov esi, dword [0x517dcc]
xor edx, edx
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], dx
inc dword [esp + 0x14]
add dword [esp + 0x10], 0x7e4
mov edi, ecx
sub edi, esi
mov eax, 0x81c635bd
imul edi
add edx, edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x14], eax
jb 0x44327a
xor eax, eax
mov ecx, dword [esp + 0xf0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd8]
xor ecx, esp
call fcn.00471eba
mov esp, ebp
pop ebp
ret
mov edi, ecx
sub edi, esi
imul edi
add edx, edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x4436bc
call fcn.004726ec
mov ecx, dword [0x517dd0]
mov esi, dword [0x517dcc]
mov edi, dword [esp + 0x10]
cmp dword [edi + esi + 4], 5
jne 0x443717
sub ecx, esi
mov eax, 0x81c635bd
imul ecx
add edx, ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebx, ecx
jb 0x4436eb
call fcn.004726ec
mov esi, dword [0x517dcc]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x20]
push edx
add esi, edi
push esi
call fcn.00446b40
mov ecx, dword [0x517dd0]
mov esi, dword [0x517dcc]
add esp, 8
test eax, eax
je 0x443717
mov dword [esp + 0x24], 1
cmp dword [esp + 0x24], 0
jne 0x443245
add dword [esp + 0x10], 0x7e4
mov edi, ecx
sub edi, esi
mov eax, 0x81c635bd
imul edi
add edx, edi
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
inc ebx
add eax, edx
cmp ebx, eax
jae 0x443245
mov edi, dword [esp + 0x10]
jmp 0x4431d0