Function at 0x43ab43
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1a4
mov eax, dword [0x5c2460]
xor eax, esp
mov dword [esp + 0x1a0], eax
and dword [esp + 8], 0
xor eax, eax
and dword [esp + 0x120], 0
push ebx
push esi
mov esi, dword [ebp + 0x14]
mov ebx, edx
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x118]
push edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x130], 7
mov word [esp + 0x11c], ax
call fcn.0043e78b
test al, al
jne 0x43abbb
push 0x53fc30
call fcn.004049e1
pop ecx
push eax
push 0x53fc30
lea ecx, [esp + 0x124]
call fcn.00405941
cmp byte [ebp + 0xc], 0
je 0x43abcb
call fcn.0043b34e
jmp 0x43addc
call fcn.00438f5e
cmp byte [ebp + 8], 0
je 0x43addc
cmp dword [esp + 0x12c], 0
jne 0x43abfa
call fcn.004370c3
test al, al
jne 0x43abfa
call fcn.004372e1
test al, al
je 0x43addc
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x43addc
call fcn.00464040
cmp eax, 3
jl 0x43addc
push str.run_as_admin
mov ecx, edi
call fcn.0045f070
test al, al
jne 0x43addc
lea eax, [esp + 0xd4]
mov ecx, edi
push eax
call fcn.0045efa0
push eax
lea ecx, [esp + 0x138]
call fcn.00409846
lea ecx, [esp + 0xd4]
call fcn.00459030
push esi
lea ecx, [esp + 0xf0]
call fcn.004058f0
mov esi, 0x548e80
push esi
call fcn.004049e1
pop ecx
push eax
push esi
lea ecx, [esp + 0xf4]
call fcn.004152a1
mov esi, 0x54a610
push esi
call fcn.004049e1
pop ecx
push eax
push esi
lea ecx, [esp + 0xf4]
call fcn.004152a1
mov esi, 0x548e80
push esi
call fcn.004049e1
pop ecx
push eax
push esi
lea ecx, [esp + 0xf4]
call fcn.004152a1
mov esi, str.remove_chrome_registration
push esi
call fcn.004049e1
pop ecx
push eax
push esi
lea ecx, [esp + 0xf4]
call fcn.004152a1
cmp dword [esp + 0x12c], 0
je 0x43ad9b
mov esi, 0x548e80
push esi
call fcn.004049e1
pop ecx
push eax
push esi
lea ecx, [esp + 0xf4]
call fcn.004152a1
mov eax, str.register_chrome_browser_suffix
push eax
mov dword [esp + 0x108], eax
call fcn.00404a2a
pop ecx
lea edx, [esp + 0x104]
mov dword [esp + 0x108], eax
lea ecx, [esp + 0xd4]
call fcn.00461c00
push 0xffffffffffffffff
xor esi, esi
lea ecx, [esp + 0xf0]
push esi
push eax
call fcn.00415344
push esi
push 1
lea ecx, [esp + 0xdc]
call fcn.0040536f
lea eax, [esp + 0x11c]
mov edx, 0x54d81c
push 0x540808
push eax
lea ecx, [esp + 0x10c]
call fcn.00415489
pop ecx
mov edx, eax
lea ecx, [esp + 0xd8]
call fcn.0041545e
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [esp + 0xf8]
call fcn.00415344
push esi
push 1
lea ecx, [esp + 0xdc]
call fcn.0040536f
push esi
push 1
lea ecx, [esp + 0x10c]
call fcn.0040536f
jmp 0x43ad9d
xor esi, esi
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 9
push eax
lea edx, [esp + 0xf0]
lea ecx, [esp + 0x138]
call fcn.00444668
pop ecx
push esi
push 1
lea ecx, [esp + 0xf4]
call fcn.0040536f
push esi
push 1
lea ecx, [esp + 0x13c]
call fcn.0040536f
call fcn.004332be
push 0xf003f
push str.Software360360se6Chrome
push SysReAllocString
lea ecx, [esp + 0x110]
call fcn.0045b490
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push 0x5401cc
push dword [esp + 0x108]
call esi
lea ecx, [esp + 0x104]
call fcn.0045b550
cmp dword [0x768c2c], 0
je 0x43ae2a
call fcn.00439018
cmp dword [ebx + 0x10], 0
je 0x43ae37
mov ecx, ebx
call fcn.0043911f
push 0xf003f
push str.Software360360se6Chrome
push SysReAllocString
lea ecx, [esp + 0x110]
call fcn.0045b490
push str.smart_preheat
push dword [esp + 0x108]
call esi
lea ecx, [esp + 0x104]
call fcn.0045b550
push 0xf003f
push str.Software360360se6Chrome
push SysReAllocString
lea ecx, [esp + 0x110]
call fcn.0045b490
push str.ie_popwindow_newtab
push dword [esp + 0x108]
call esi
lea ecx, [esp + 0x104]
call fcn.0045b550
call fcn.0043eb21
call fcn.0043a28d
call fcn.0041fa7f
add eax, 0x18
lea ecx, [esp + 0x194]
push eax
call fcn.00409846
push ecx
push ecx
lea eax, [esp + 0x19c]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [esp + 0x16c]
call fcn.00458fb0
push ecx
push ecx
mov esi, esp
mov eax, str.360se6Application
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [esp + 0x16c]
lea eax, [esp + 0xdc]
push eax
call fcn.00459bb0
push eax
lea ecx, [esp + 0x168]
call fcn.00459060
lea ecx, [esp + 0xd4]
call fcn.00459030
push 1
mov edx, ebx
lea ecx, [esp + 0x168]
call fcn.00415f6f
pop ecx
call fcn.00444406
mov esi, eax
lea eax, [esp + 0x17c]
push SysReAllocString
push eax
mov ecx, esi
mov dword [esp + 0x10c], esi
mov edx, dword [esi]
call dword [edx + 0x48]
call fcn.004696a0
mov edx, dword [esi]
lea eax, [esp + 0xd4]
push 0
push eax
mov ecx, esi
call dword [edx + 0x50]
mov edx, eax
mov ecx, SysReAllocString
call fcn.004447e0
pop ecx
push 0
push 1
lea ecx, [esp + 0xdc]
call fcn.0040536f
push 0
push ecx
lea eax, [esp + 0xdc]
push eax
call fcn.00443cd3
pop ecx
mov edx, eax
mov ecx, SysReAllocString
call fcn.004447e0
pop ecx
push 0
push 1
lea ecx, [esp + 0xdc]
call fcn.0040536f
call fcn.00433c2e
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 9
push eax
lea edx, [esp + 0x120]
mov ecx, SysReAllocString
call fcn.00439a23
pop ecx
lea ecx, [esp + 0x10]
call fcn.0043a154
cmp byte [ebp + 8], 0
je 0x43b0b0
cmp dword [esp + 0x12c], 0
jne 0x43affd
call fcn.004370c3
test al, al
je 0x43b014
lea eax, [esp + 0x10]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push eax
lea edx, [esp + 0x120]
call fcn.00439a23
pop ecx
push 0xf003f
push 0x53fc30
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0xf8]
call fcn.0045b490
push str.SoftwareMicrosoftMediaPlayerShimInclusionList
lea ecx, [esp + 0x138]
call fcn.004058f0
push str.360se.exe
lea ecx, [esp + 0xd8]
call fcn.004058f0
lea edx, [esp + 0xd4]
lea ecx, [esp + 0x134]
call fcn.0043bf45
push 0
push 1
lea ecx, [esp + 0xdc]
call fcn.0040536f
push 0
lea edx, [esp + 0x138]
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.004447e0
pop ecx
lea ecx, [esp + 0xec]
call fcn.0045b7c0
push 0
push 1
lea ecx, [esp + 0x13c]
call fcn.0040536f
lea ecx, [esp + 0xec]
call fcn.0045b550
cmp dword [ebx + 0x10], 0
jne 0x43b0be
push 6
pop edi
jmp 0x43b2fb
push str.delete_profile
mov ecx, edi
call fcn.0045f070
cmp dword [0x768c2c], 0
push 6
setne byte [esp + 0x20]
mov dword [esp + 0x164], 7
and dword [esp + 0x160], 0
xor eax, eax
mov word [esp + 0x150], ax
lea eax, [esp + 0xd8]
pop edi
push eax
call fcn.0041fa7f
mov ecx, eax
call fcn.004202a2
push ecx
push ecx
lea eax, [esp + 0xdc]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [esp + 0x13c]
call fcn.00458fb0
mov dl, 1
mov ecx, eax
call fcn.004575a0
lea ecx, [esp + 0x134]
call fcn.00459030
push 0
push 1
lea ecx, [esp + 0xdc]
call fcn.0040536f
lea ecx, [esp + 0x10]
call fcn.004141ab
cmp byte [esp + 0x12], 0
je 0x43b161
call fcn.004143c1
lea ecx, [esp + 0x10]
call fcn.0041446e
call fcn.00464040
cmp eax, 3
jge 0x43b179
call fcn.00432b59
mov ecx, ebx
call fcn.0043b9b6
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x150]
push eax
call fcn.0043791c
pop ecx
pop ecx
xor ecx, ecx
inc ecx
cmp eax, ecx
jne 0x43b1a2
push 7
jmp 0x43b1a9
cmp eax, 2
jne 0x43b1aa
push 0xb
pop edi
cmp byte [ebp + 0xc], 0
jne 0x43b269
cmp dword [0x768ca0], 0
jg 0x43b1e3
push 0
push 0x5ae
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x28]
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
call fcn.0045ce90
mov edx, str.Uninstallation_complete._Launching_Uninstall_survey.
lea ecx, [eax + 8]
call fcn.00405723
test byte [esp + 0x14], 1
je 0x43b1f3
lea ecx, [esp + 0x20]
call fcn.0045cee0
mov esi, dword [esi]
lea eax, [esp + 0x17c]
push eax
push ecx
push ecx
lea eax, [esp + 0x158]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [esp + 0x140]
call fcn.00458fb0
push eax
mov edx, ebx
lea ecx, [esp + 0xdc]
call fcn.00461c40
push eax
lea ecx, [esp + 0xf8]
call fcn.004706f0
mov ecx, dword [esp + 0x10c]
push eax
call dword [esi + 4]
lea ecx, [esp + 0xec]
call fcn.004706c0
push 0
push 1
lea ecx, [esp + 0xdc]
call fcn.00405320
lea ecx, [esp + 0x134]
call fcn.00459030
cmp dword [esp + 0x15c], 0
je 0x43b2a5
push ecx
push ecx
lea eax, [esp + 0x154]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [esp + 0xdc]
call fcn.00458fb0
xor dl, dl
mov ecx, eax
call fcn.004575a0
lea ecx, [esp + 0xd4]
call fcn.00459030
cmp dword [0x768c2c], 0
je 0x43b2eb
call fcn.0041fa7f
push 0xf003f
push str.software
push SysReAllocString
lea ecx, [esp + 0xf8]
call fcn.0045b490
push str.360360se6
lea ecx, [esp + 0xf0]
call fcn.0045b800
lea ecx, [esp + 0xec]
call fcn.0045b550
push 0
push 1
lea ecx, [esp + 0x154]
call fcn.0040536f
push 0
push 1
lea ecx, [esp + 0x184]
call fcn.0040536f
lea ecx, [esp + 0x164]
call fcn.00459030
push 0
push 1
lea ecx, [esp + 0x19c]
call fcn.0040536f
push 0
push 1
lea ecx, [esp + 0x124]
call fcn.0040536f
mov ecx, dword [esp + 0x1ac]
mov eax, edi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00501d03
mov esp, ebp
pop ebp
ret