Function at 0x40da32
Capabilities:
Create thread
Link many functions at runtime
Query environment variable
Query or enumerate registry value
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb6c
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xb68], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [esp + 0x20], eax
mov eax, dword [0x6b6778]
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x14], ebx
test eax, 0xfffffffe
jne 0x40da8a
mov esi, 0x6b6778
call fcn.0040f78c
test al, al
je 0x40da8a
mov dword [0x6b677c], 0x63ed08
mov dword [0x6b6778], 0x6b677c
mov eax, dword [0x6b6778]
mov dword [0x6b7cec], eax
call fcn.0040f7ae
test al, al
je 0x40dab4
xor eax, eax
mov ecx, dword [esp + 0xb74]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00403fc1
mov esp, ebp
pop ebp
ret
mov byte [esp + 0x1a], 1
call fcn.0040fa77
test al, al
jne 0x40e251
mov esi, dword [0x6b6b8c]
push 4
push str.type
lea ecx, [esp + 0x4e0]
mov dword [esp + 0x4f4], 0xf
mov dword [esp + 0x4f0], ebx
mov byte [esp + 0x4e0], bl
call fcn.0040f910
lea eax, [esp + 0x388]
push eax
push esi
lea ecx, [esp + 0x4e0]
call fcn.0040fad5
push ebx
push 1
lea ecx, [esp + 0x4e0]
call fcn.0040d17d
cmp dword [esp + 0x398], ebx
je 0x40db39
push ebx
push 1
lea ecx, [esp + 0x390]
call fcn.0040d17d
jmp 0x40e251
lea eax, [esp + 0xaf8]
push eax
lea ecx, [esp + 0x50]
mov dword [esp + 0x50], str.HOTLINE_INFO
mov dword [esp + 0x54], 0xc
call fcn.0040d1c3
cmp dword [eax + 0x14], 8
pop ecx
jb 0x40db63
mov eax, dword [eax]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x40db7e
call fcn.004a6462
mov byte [esp + 0x13], 1
test al, al
jne 0x40db82
mov byte [esp + 0x13], bl
push 1
xor edi, edi
lea esi, [esp + 0xafc]
mov dword [esp + 0x18], ebx
call fcn.0040bad4
cmp byte [esp + 0x13], bl
je 0x40dc0d
mov dword [esp + 0x1c], ebx
call fcn.0040fd3d
mov esi, eax
mov eax, dword [esi]
push str.HOTLINE_INFO
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi]
push str.CHROME_CRASHED
mov ecx, esi
call dword [eax + 0x10]
lea eax, [esp + 0x1c]
push eax
push 0x63ed40
push 0x31
push 0x63ed58
push 0x63ed6c
push ebx
call sym.360se.exe_CrashMessageBox
add esp, 0x18
cmp eax, 1
setne byte [esp + 0x1a]
cmp dword [esp + 0x1c], ebx
je 0x40dbf1
call fcn.004badb9
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
push ebx
push 1
lea ecx, [esp + 0x390]
call fcn.0040d17d
jmp 0x40e247
lea eax, [esp + 0xb30]
push eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x68], str.CRASH_CAUSED_BY_MS_IME
mov dword [esp + 0x6c], 0x16
call fcn.0040d1c3
cmp dword [eax + 0x14], 8
pop ecx
jb 0x40dc37
mov eax, dword [eax]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 1
xor edi, edi
lea esi, [esp + 0xb34]
mov dword [esp + 0x30], eax
call fcn.0040bad4
cmp dword [esp + 0x2c], ebx
je 0x40ddf0
call fcn.0040fd3d
mov esi, eax
mov eax, dword [esi]
push str.CRASH_CAUSED_BY_MS_IME
mov ecx, esi
mov dword [esp + 0x30], esi
call dword [eax + 0x10]
mov eax, dword [esi]
push str.CHROME_CRASHED
mov ecx, esi
call dword [eax + 0x10]
push 0x31
push 0x63ed58
push 0x63edc0
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x40ddd4
xor eax, eax
mov word [esp + 0x510], ax
lea eax, [esp + 0x510]
push eax
mov dword [esp + 0x528], 7
mov dword [esp + 0x524], ebx
call fcn.004ad497
pop ecx
test eax, eax
je 0x40dd30
lea eax, [esp + 0x510]
push eax
lea edi, [esp + 0xe4]
call fcn.004b693a
push str._DOWNLOADSOFT151
lea esi, [esp + 0x824]
call fcn.0040beca
mov eax, esi
push eax
call fcn.0040c6f5
lea eax, [esp + 0x190]
call fcn.004bb43a
mov ecx, edi
push ecx
mov ecx, eax
call fcn.004bb3f2
pop ecx
push 1
xor edi, edi
call fcn.0040bad4
lea eax, [esp + 0xf0]
call fcn.004a9f7d
lea eax, [esp + 0xe0]
jmp 0x40ddba
mov eax, dword [0x6b6b8c]
push dword [eax]
lea eax, [esp + 0x85c]
call fcn.0040c917
lea eax, [esp + 0x858]
push eax
lea edi, [esp + 0x9c]
call fcn.004b693a
push 1
xor edi, edi
lea esi, [esp + 0x85c]
call fcn.0040bad4
push str.http:__download.microsoft.com_download_F_F_F_FFFECF33_D8A0_4949_838B_703FF05E58CA_IME2010_zh_cn.exe
lea esi, [esp + 0x894]
call fcn.0040beca
mov eax, esi
push eax
lea edi, [esp + 0x9c]
call fcn.0040c6f5
lea eax, [esp + 0x170]
call fcn.004bb43a
mov ecx, edi
push ecx
mov ecx, eax
call fcn.004bb3f2
pop ecx
push 1
xor edi, edi
call fcn.0040bad4
lea eax, [esp + 0xa8]
call fcn.004a9f7d
lea eax, [esp + 0x98]
push eax
call fcn.0040c88d
push 1
xor edi, edi
lea esi, [esp + 0x514]
call fcn.0040bad4
mov esi, dword [esp + 0x2c]
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
push ebx
push 1
lea ecx, [esp + 0x390]
call fcn.0040d17d
jmp 0x40da9d
lea eax, [esp + 0xa6c]
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x58], str.CRASH_CAUSED_BY_IME
mov dword [esp + 0x5c], 0x13
call fcn.0040d1c3
cmp dword [eax + 0x14], 8
pop ecx
jb 0x40de1a
mov eax, dword [eax]
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 1
xor edi, edi
lea esi, [esp + 0xa70]
mov dword [esp + 0x20], eax
call fcn.0040bad4
xor ecx, ecx
cmp dword [esp + 0x1c], ebx
jbe 0x40e105
mov eax, dword [esp + 0x1c]
push 2
inc eax
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004013b3
pop ecx
mov dword [esp + 0x30], eax
cmp eax, ebx
je 0x40dddc
lea eax, [esp + 0xaa4]
push eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], str.CRASH_CAUSED_BY_IME
mov dword [esp + 0x64], 0x13
call fcn.0040d1c3
cmp dword [eax + 0x14], 8
pop ecx
jb 0x40de91
mov eax, dword [eax]
push dword [esp + 0x1c]
push dword [esp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 1
xor edi, edi
lea esi, [esp + 0xaa8]
call fcn.0040bad4
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x30]
xor eax, eax
mov word [edi + ecx*2], ax
call fcn.0040fd3d
mov esi, eax
mov eax, dword [esi]
push str.CRASH_CAUSED_BY_IME
mov ecx, esi
mov dword [esp + 0x30], esi
call dword [eax + 0x10]
mov eax, dword [esi]
push str.CHROME_CRASHED
mov ecx, esi
call dword [eax + 0x10]
push edi
lea esi, [esp + 0x3a8]
call fcn.0040beca
xor eax, eax
mov word [esp + 0x350], ax
push 0x63ef00
mov eax, esi
mov dword [esp + 0x368], 7
mov dword [esp + 0x364], ebx
call fcn.0040cb3a
test eax, eax
jne 0x40df24
push 0x63ef10
jmp 0x40dfb5
push 0x63ef1c
lea eax, [esp + 0x3a8]
call fcn.0040cb3a
test eax, eax
jne 0x40df40
push 0x63ef34
jmp 0x40dfb5
push 0x63ef40
lea eax, [esp + 0x3a8]
call fcn.0040cb3a
test eax, eax
jne 0x40df5c
push 0x63ef54
jmp 0x40dfb5
push 0x63ef80
lea eax, [esp + 0x3a8]
call fcn.0040cb3a
test eax, eax
jne 0x40df78
push 0x63ef90
jmp 0x40dfb5
push 0x63ef9c
lea eax, [esp + 0x3a8]
call fcn.0040cb3a
test eax, eax
jne 0x40df94
push 0x63efbc
jmp 0x40dfb5
push 0x63efc8
lea eax, [esp + 0x3a8]
call fcn.0040cb3a
test eax, eax
jne 0x40dfb0
push 0x63efdc
jmp 0x40dfb5
push 0x63efe8
lea eax, [esp + 0x354]
push eax
call fcn.0040beee
push 0x63eff0
lea edi, [esp + 0x354]
lea eax, [esp + 0xb18]
call fcn.0040d6af
mov dword [esp], 0x63f000
push eax
call fcn.0040d6fd
push eax
lea esi, [esp + 0x70c]
call fcn.0040ba53
push 1
xor edi, edi
lea esi, [esp + 0xb18]
call fcn.0040bad4
push dword [esp + 0x30]
call fcn.00404e46
cmp dword [esp + 0x720], 8
mov eax, dword [esp + 0x70c]
pop ecx
jae 0x40e026
lea eax, [esp + 0x708]
push 0x31
push 0x63ed58
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x40e0ce
mov eax, dword [0x6b6b8c]
push dword [eax]
lea eax, [esp + 0x8cc]
call fcn.0040c917
lea eax, [esp + 0x8c8]
push eax
lea edi, [esp + 0xc0]
call fcn.004b693a
push 1
xor edi, edi
lea esi, [esp + 0x8cc]
call fcn.0040bad4
push str.http:__bbs.360safe.com_thread_4452447_1_1.html
lea esi, [esp + 0x904]
call fcn.0040beca
mov eax, esi
push eax
lea edi, [esp + 0xc0]
call fcn.0040c6f5
lea eax, [esp + 0x1b0]
call fcn.004bb43a
mov ecx, edi
push ecx
mov ecx, eax
call fcn.004bb3f2
pop ecx
push 1
xor edi, edi
call fcn.0040bad4
lea eax, [esp + 0xcc]
call fcn.004a9f7d
lea eax, [esp + 0xbc]
push eax
call fcn.0040c88d
push 1
xor edi, edi
lea esi, [esp + 0x70c]
call fcn.0040bad4
push 1
lea esi, [esp + 0x354]
call fcn.0040bad4
push 1
lea esi, [esp + 0x3a8]
call fcn.0040bad4
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx]
jmp 0x40ddd8
push 7
pop eax
lea edx, [esp + 0x37]
push edx
mov dword [esp + 0x42c], eax
mov dword [esp + 0x464], eax
lea edx, [esp + 0x418]
mov word [esp + 0x418], cx
mov ecx, dword [0x6b7cec]
xor eax, eax
push edx
lea edx, [esp + 0x454]
mov dword [esp + 0x42c], ebx
mov dword [esp + 0x464], ebx
mov word [esp + 0x454], ax
mov eax, dword [ecx]
push edx
call dword [eax + 0xc]
test al, al
jne 0x40e17d
push 1
xor edi, edi
lea esi, [esp + 0x450]
call fcn.0040bad4
push 1
lea esi, [esp + 0x418]
call fcn.0040bad4
jmp 0x40db25
mov dword [esp + 0x24], 0x31
cmp byte [esp + 0x37], bl
je 0x40e193
mov dword [esp + 0x24], 0x180031
lea eax, [esp + 0x44c]
push eax
lea esi, [esp + 0x6f0]
call fcn.0040c759
cmp dword [esp + 0x700], 8
mov edi, dword [esp + 0x6ec]
jae 0x40e1ba
mov edi, esi
lea eax, [esp + 0x414]
push eax
lea esi, [esp + 0x728]
call fcn.0040c759
cmp dword [esp + 0x738], 8
mov eax, dword [esp + 0x724]
jae 0x40e1e1
mov eax, esi
lea ecx, [esp + 0x1a]
push ecx
push dword [esp + 0x28]
push edi
push eax
call fcn.004ad58f
add esp, 0x10
push 1
xor edi, edi
lea esi, [esp + 0x728]
mov byte [esp + 0x1f], al
call fcn.0040bad4
push 1
lea esi, [esp + 0x6f0]
call fcn.0040bad4
push 1
lea esi, [esp + 0x450]
call fcn.0040bad4
push 1
lea esi, [esp + 0x418]
call fcn.0040bad4
push ebx
push 1
lea ecx, [esp + 0x390]
call fcn.0040d17d
cmp byte [esp + 0x1b], bl
je 0x40e251
cmp byte [esp + 0x1a], bl
jne 0x40da9d
mov esi, dword [0x6b6b8c]
push 0xf
pop edi
push 4
push str.type
lea ecx, [esp + 0x550]
mov dword [esp + 0x24], esi
mov dword [esp + 0x564], edi
mov dword [esp + 0x560], ebx
mov byte [esp + 0x550], bl
call fcn.0040f910
lea eax, [esp + 0x334]
push eax
push esi
lea ecx, [esp + 0x550]
call fcn.0040fad5
push ebx
push 1
lea ecx, [esp + 0x550]
call fcn.0040d17d
cmp dword [esp + 0x344], ebx
jne 0x40e2f9
push 7
push str.preheat
lea ecx, [esp + 0x588]
mov dword [esp + 0x59c], edi
mov dword [esp + 0x598], ebx
mov byte [esp + 0x588], bl
call fcn.0040f910
lea eax, [esp + 0x580]
push eax
mov dword [esp + 0x18], 1
call fcn.0040f9c2
mov byte [esp + 0x13], 1
test al, al
jne 0x40e2fd
mov byte [esp + 0x13], bl
test byte [esp + 0x14], 1
je 0x40e318
and dword [esp + 0x14], 0xfffffffe
push ebx
push 1
lea ecx, [esp + 0x588]
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40e374
push str.seappmgr.dll
lea esi, [esp + 0x93c]
call fcn.0040beca
push 1
mov ecx, esi
call fcn.00421657
pop ecx
push 1
xor edi, edi
call fcn.0040bad4
push str.chrome.dll
lea esi, [esp + 0x974]
call fcn.0040beca
push ebx
mov ecx, esi
call fcn.00421657
pop ecx
xor edi, edi
push 1
call fcn.0040bad4
push ebx
push 1
lea ecx, [esp + 0x33c]
jmp 0x40dde6
cmp dword [esp + 0x344], ebx
je 0x40e3d9
push 0xb
push str.in_chromeie
lea ecx, [esp + 0x5c0]
mov dword [esp + 0x5d4], edi
mov dword [esp + 0x5d0], ebx
mov byte [esp + 0x5c0], bl
call fcn.0040f910
mov esi, dword [esp + 0x1c]
or dword [esp + 0x14], 2
lea eax, [esp + 0x5b8]
push eax
call fcn.0040f9c2
test al, al
jne 0x40e3d9
push str.plugin
lea edx, [esp + 0x338]
call fcn.004134c1
pop ecx
mov byte [esp + 0x13], bl
test al, al
je 0x40e3de
mov byte [esp + 0x13], 1
test byte [esp + 0x14], 2
je 0x40e3f9
and dword [esp + 0x14], 0xfffffffd
push ebx
push 1
lea ecx, [esp + 0x5c0]
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40e4b9
push str.Q360MonMutex
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
cmp eax, ebx
je 0x40e458
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.IsWow64Process
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [esp + 0x3c], ebx
cmp esi, ebx
je 0x40e4b9
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
test eax, eax
je 0x40e4b9
cmp dword [esp + 0x3c], ebx
je 0x40e4b9
call fcn.00413508
mov dword [esp + 0x2c], eax
cmp eax, ebx
je 0x40e4b9
mov edx, dword [eax]
lea ecx, [esp + 0x5f0]
push ecx
mov ecx, eax
call dword [edx + 0x30]
cmp dword [esp + 0x600], ebx
je 0x40e49c
cmp dword [esp + 0x604], 8
mov eax, dword [esp + 0x5f0]
jae 0x40e495
lea eax, [esp + 0x5f0]
push eax
call fcn.004145c8
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0x5f4]
call fcn.0040bad4
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx]
push 1
call dword [eax]
push 0xf
pop edi
push 0xb
push str.in_chromeie
lea ecx, [esp + 0x630]
mov dword [esp + 0x644], edi
mov dword [esp + 0x640], ebx
mov byte [esp + 0x630], bl
call fcn.0040f910
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x628]
push eax
call fcn.0040f9c2
push ebx
push 1
lea ecx, [esp + 0x630]
mov byte [esp + 0x23], al
call fcn.0040d17d
cmp byte [esp + 0x1b], bl
je 0x40e510
call fcn.004a4d94
mov byte [esp + 0x1b], bl
cmp dword [esp + 0x344], ebx
jne 0x40e8e6
call fcn.00414892
test eax, eax
je 0x40e5af
push 0x14
push str.make_default_browser
lea ecx, [esp + 0x6a0]
mov dword [esp + 0x6b4], edi
mov dword [esp + 0x6b0], ebx
mov byte [esp + 0x6a0], bl
call fcn.0040f910
or dword [esp + 0x14], 4
lea eax, [esp + 0x698]
push eax
call fcn.0040f9c2
test al, al
jne 0x40e5af
push 0x18
push 0x61b630
lea ecx, [esp + 0x668]
mov dword [esp + 0x67c], edi
mov dword [esp + 0x678], ebx
mov byte [esp + 0x668], bl
call fcn.0040f910
or dword [esp + 0x14], 8
lea eax, [esp + 0x660]
push eax
call fcn.0040f9c2
mov byte [esp + 0x13], 1
test al, al
je 0x40e5b3
mov byte [esp + 0x13], bl
test byte [esp + 0x14], 8
je 0x40e5ce
and dword [esp + 0x14], 0xfffffff7
push ebx
push 1
lea ecx, [esp + 0x668]
call fcn.0040d17d
test byte [esp + 0x14], 4
je 0x40e5e9
and dword [esp + 0x14], 0xfffffffb
push ebx
push 1
lea ecx, [esp + 0x6a0]
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40e8e6
push dword [esp + 0x1c]
lea edi, [esp + 0x78]
call fcn.004a9f00
push 0xf
pop esi
push 0xc
push str.v3pendupdate
lea ecx, [esp + 0x3e4]
mov dword [esp + 0x3f8], esi
mov dword [esp + 0x3f4], ebx
mov byte [esp + 0x3e4], bl
call fcn.0040f910
push 8
push str.v3reboot
lea ecx, [esp + 0x438]
mov dword [esp + 0x44c], esi
mov dword [esp + 0x448], ebx
mov byte [esp + 0x438], bl
call fcn.0040f910
push 0x10
push str.v3highprivilidge
lea ecx, [esp + 0x400]
mov dword [esp + 0x414], esi
mov dword [esp + 0x410], ebx
mov byte [esp + 0x400], bl
call fcn.0040f910
push 0xa
push str.v3seProcId
lea ecx, [esp + 0x3c8]
mov dword [esp + 0x3dc], esi
mov dword [esp + 0x3d8], ebx
mov byte [esp + 0x3c8], bl
call fcn.0040f910
push 1
mov edi, 0x63f1c0
push edi
lea ecx, [esp + 0x6d8]
mov dword [esp + 0x6ec], esi
mov dword [esp + 0x6e8], ebx
mov byte [esp + 0x6d8], bl
call fcn.0040f910
lea eax, [esp + 0x6d0]
push eax
lea edx, [esp + 0x3e0]
lea ecx, [esp + 0x78]
call fcn.004b6c44
push ebx
push 1
lea ecx, [esp + 0x6d8]
call fcn.0040d17d
push 1
push edi
lea ecx, [esp + 0x64c]
mov dword [esp + 0x660], esi
mov dword [esp + 0x65c], ebx
mov byte [esp + 0x64c], bl
call fcn.0040f910
lea eax, [esp + 0x644]
push eax
lea edx, [esp + 0x434]
lea ecx, [esp + 0x78]
call fcn.004b6c44
push ebx
push 1
lea ecx, [esp + 0x64c]
call fcn.0040d17d
mov byte [esp + 0xb68], bl
xor eax, eax
lea edi, [esp + 0xb69]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea eax, [esp + 0xb6c]
push 0x63f1d0
push eax
call fcn.005e8338
add esp, 0xc
mov dword [esp + 0x498], esi
mov dword [esp + 0x494], ebx
lea eax, [esp + 0xb68]
mov byte [esp + 0x484], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e78c
sub eax, edi
push eax
lea eax, [esp + 0xb6c]
push eax
lea ecx, [esp + 0x48c]
call fcn.0040f910
lea eax, [esp + 0x484]
push eax
lea edx, [esp + 0x3c4]
lea ecx, [esp + 0x78]
call fcn.004b6c44
push ebx
push 1
lea ecx, [esp + 0x48c]
call fcn.0040d17d
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [esp + 0x54]
push ebx
push eax
call fcn.00418e14
add esp, 0x1c
cmp dword [esp + 0x40], 6
jb 0x40e7fe
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x40e7fe
call fcn.004aed26
test eax, eax
je 0x40e84d
push 1
push 0x63f1c0
lea ecx, [esp + 0x4a8]
mov dword [esp + 0x4bc], esi
mov dword [esp + 0x4b8], ebx
mov byte [esp + 0x4a8], bl
call fcn.0040f910
lea eax, [esp + 0x4a0]
push eax
lea edx, [esp + 0x3fc]
lea ecx, [esp + 0x78]
call fcn.004b6c44
push ebx
push 1
lea ecx, [esp + 0x4a8]
call fcn.0040d17d
lea eax, [esp + 0xadc]
push eax
lea eax, [esp + 0x78]
push eax
call fcn.004b6993
push eax
push dword [esp + 0x2c]
call fcn.004aea70
neg eax
pop ecx
sbb al, al
pop ecx
inc al
push 1
xor edi, edi
lea esi, [esp + 0xae0]
mov byte [esp + 0x17], al
call fcn.0040bad4
xor esi, esi
push ebx
inc esi
lea ecx, [esp + 0x3c4]
push esi
call fcn.0040d17d
push ebx
lea ecx, [esp + 0x3fc]
push esi
call fcn.0040d17d
push ebx
lea ecx, [esp + 0x434]
push esi
call fcn.0040d17d
push ebx
lea ecx, [esp + 0x3e0]
push esi
call fcn.0040d17d
lea eax, [esp + 0x84]
call fcn.004a9f7d
lea eax, [esp + 0x74]
push eax
call fcn.0040c88d
cmp byte [esp + 0x13], bl
je 0x40e8e3
push ebx
push esi
jmp 0x40e368
push 0xf
pop edi
push edi
push str.360seautoupdate
lea ecx, [esp + 0x4c4]
mov dword [esp + 0x4d8], edi
mov dword [esp + 0x4d4], ebx
mov byte [esp + 0x4c4], bl
call fcn.0040f910
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x4bc]
push eax
call fcn.0040f9c2
push ebx
push 1
lea ecx, [esp + 0x4c4]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40ea19
push esi
lea edi, [esp + 0x108]
call fcn.004a9f00
push 0xf
pop esi
push 0xc
push str.v3autoupdate
lea ecx, [esp + 0x4fc]
mov dword [esp + 0x510], esi
mov dword [esp + 0x50c], ebx
mov byte [esp + 0x4fc], bl
call fcn.0040f910
push 1
push 0x63f1c0
lea ecx, [esp + 0x5dc]
mov dword [esp + 0x5f0], esi
mov dword [esp + 0x5ec], ebx
mov byte [esp + 0x5dc], bl
call fcn.0040f910
lea eax, [esp + 0x5d4]
push eax
lea edx, [esp + 0x4f8]
mov ecx, edi
call fcn.004b6c44
push ebx
push 1
lea ecx, [esp + 0x5dc]
call fcn.0040d17d
lea eax, [esp + 0xb4c]
push eax
mov eax, edi
push eax
call fcn.004b6993
push eax
push dword [esp + 0x2c]
call fcn.004aea70
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xb50]
call fcn.0040bad4
push ebx
push 1
lea ecx, [esp + 0x4fc]
call fcn.0040d17d
lea eax, [esp + 0x114]
call fcn.004a9f7d
lea eax, [esp + 0x104]
push eax
call fcn.0040c88d
jmp 0x40e365
push 0x1e
push str.360se_safe_browsing_autoupdate
lea ecx, [esp + 0x6bc]
mov dword [esp + 0x6d0], edi
mov dword [esp + 0x6cc], ebx
mov byte [esp + 0x6bc], bl
call fcn.0040f910
lea eax, [esp + 0x6b4]
push eax
call fcn.0040f9c2
push ebx
push 1
lea ecx, [esp + 0x6bc]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40eb43
push esi
lea edi, [esp + 0x150]
call fcn.004a9f00
push 0xf
pop esi
push 0x1a
push str.v3safe_browsing_autoupdate
lea ecx, [esp + 0x614]
mov dword [esp + 0x628], esi
mov dword [esp + 0x624], ebx
mov byte [esp + 0x614], bl
call fcn.0040f910
push 1
push 0x63f1c0
lea ecx, [esp + 0x534]
mov dword [esp + 0x548], esi
mov dword [esp + 0x544], ebx
mov byte [esp + 0x534], bl
call fcn.0040f910
lea eax, [esp + 0x52c]
push eax
lea edx, [esp + 0x610]
mov ecx, edi
call fcn.004b6c44
push ebx
push 1
lea ecx, [esp + 0x534]
call fcn.0040d17d
lea eax, [esp + 0xa88]
push eax
mov eax, edi
push eax
call fcn.004b6993
push eax
push dword [esp + 0x2c]
call fcn.004aea70
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xa8c]
call fcn.0040bad4
push ebx
push 1
lea ecx, [esp + 0x614]
call fcn.0040d17d
lea eax, [esp + 0x15c]
call fcn.004a9f7d
lea eax, [esp + 0x14c]
jmp 0x40ea0e
push 0x19
push str.360se_safe_browsing_white
lea ecx, [esp + 0x56c]
mov dword [esp + 0x580], edi
mov dword [esp + 0x57c], ebx
mov byte [esp + 0x56c], bl
call fcn.0040f910
lea eax, [esp + 0x564]
push eax
call fcn.0040f9c2
push ebx
push 1
lea ecx, [esp + 0x56c]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40ec6d
push esi
lea edi, [esp + 0x12c]
call fcn.004a9f00
push 0xf
pop esi
push 0x15
push str.v3safe_browsing_white
lea ecx, [esp + 0x470]
mov dword [esp + 0x484], esi
mov dword [esp + 0x480], ebx
mov byte [esp + 0x470], bl
call fcn.0040f910
push 1
push 0x63f1c0
lea ecx, [esp + 0x684]
mov dword [esp + 0x698], esi
mov dword [esp + 0x694], ebx
mov byte [esp + 0x684], bl
call fcn.0040f910
lea eax, [esp + 0x67c]
push eax
lea edx, [esp + 0x46c]
mov ecx, edi
call fcn.004b6c44
push ebx
push 1
lea ecx, [esp + 0x684]
call fcn.0040d17d
lea eax, [esp + 0xac0]
push eax
mov eax, edi
push eax
call fcn.004b6993
push eax
push dword [esp + 0x2c]
call fcn.004aea70
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xac4]
call fcn.0040bad4
push ebx
push 1
lea ecx, [esp + 0x470]
call fcn.0040d17d
lea eax, [esp + 0x138]
call fcn.004a9f7d
lea eax, [esp + 0x128]
jmp 0x40ea0e
cmp dword [esp + 0x344], ebx
jne 0x40ed94
push edi
push str.360seautoupdate
lea ecx, [esp + 0x5a4]
mov dword [esp + 0x5b8], edi
mov dword [esp + 0x5b4], ebx
mov byte [esp + 0x5a4], bl
call fcn.0040f910
or dword [esp + 0x14], 0x10
lea eax, [esp + 0x59c]
push eax
call fcn.0040f9c2
test al, al
jne 0x40ed94
push str.360se_safe_browsing_autoupdate
lea ecx, [esp + 0x798]
call fcn.0040fcf9
or dword [esp + 0x14], 0x20
lea eax, [esp + 0x794]
push eax
call fcn.0040f9c2
test al, al
jne 0x40ed94
push str.360se_safe_browsing_white
lea ecx, [esp + 0xa54]
call fcn.0040fcf9
or dword [esp + 0x14], 0x40
lea eax, [esp + 0xa50]
push eax
call fcn.0040f9c2
test al, al
jne 0x40ed94
push str.uninstall_cud_disabledlg
lea ecx, [esp + 0xa1c]
call fcn.0040fcf9
or dword [esp + 0x14], 0x80
lea eax, [esp + 0xa18]
push eax
call fcn.0040f9c2
test al, al
jne 0x40ed94
push str.make_default_browser
lea ecx, [esp + 0x9e4]
call fcn.0040fcf9
or dword [esp + 0x14], 0x100
lea eax, [esp + 0x9e0]
push eax
call fcn.0040f9c2
test al, al
jne 0x40ed94
push str.video_mode
lea ecx, [esp + 0x9ac]
call fcn.0040fcf9
or dword [esp + 0x14], 0x200
lea eax, [esp + 0x9a8]
push eax
call fcn.0040f9c2
mov byte [esp + 0x13], 1
test al, al
je 0x40ed98
mov byte [esp + 0x13], bl
test dword [esp + 0x14], 0x200
je 0x40edb9
and dword [esp + 0x14], 0xfffffdff
push ebx
push 1
lea ecx, [esp + 0x9b0]
call fcn.0040d17d
test dword [esp + 0x14], 0x100
je 0x40edda
and dword [esp + 0x14], 0xfffffeff
push ebx
push 1
lea ecx, [esp + 0x9e8]
call fcn.0040d17d
test byte [esp + 0x14], 0x80
je 0x40edf8
and dword [esp + 0x14], 0xffffff7f
push ebx
push 1
lea ecx, [esp + 0xa20]
call fcn.0040d17d
test byte [esp + 0x14], 0x40
je 0x40ee13
and dword [esp + 0x14], 0xffffffbf
push ebx
push 1
lea ecx, [esp + 0xa58]
call fcn.0040d17d
test byte [esp + 0x14], 0x20
je 0x40ee2e
and dword [esp + 0x14], 0xffffffdf
push ebx
push 1
lea ecx, [esp + 0x79c]
call fcn.0040d17d
test byte [esp + 0x14], 0x10
je 0x40ee49
and dword [esp + 0x14], 0xffffffef
push ebx
push 1
lea ecx, [esp + 0x5a4]
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40ee87
call fcn.00414ae5
test al, al
jne 0x40ee7d
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x28], ebx
call fcn.004af00a
or dword [esp + 0x28], 4
pop ecx
push dword [esp + 0x24]
call fcn.004af769
pop ecx
mov byte [0x6b6b39], 1
call fcn.00414b9c
mov byte [esp + 0x1b], 1
call fcn.0040fd56
mov edi, 0x400
cmp dword [esp + 0x344], ebx
je 0x40eeca
push str.in_chromeie
lea ecx, [esp + 0x7ec]
call fcn.0040fcf9
mov esi, dword [esp + 0x1c]
or dword [esp + 0x14], edi
lea eax, [esp + 0x7e8]
push eax
call fcn.0040f9c2
test al, al
jne 0x40eece
mov byte [esp + 0x13], bl
jmp 0x40eed3
mov esi, dword [esp + 0x1c]
mov byte [esp + 0x13], 1
test dword [esp + 0x14], edi
je 0x40eef0
and dword [esp + 0x14], 0xfffffbff
push ebx
push 1
lea ecx, [esp + 0x7f0]
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40ef84
call fcn.00410222
push ebx
xor edi, edi
lea esi, [esp + 0xa00]
mov dword [esp + 0x28], eax
call fcn.0040bad4
push ebx
lea esi, [esp + 0x744]
call fcn.0040bad4
lea eax, [esp + 0x9fc]
push eax
push dword [esp + 0x28]
mov ecx, esi
call fcn.0041023f
cmp dword [esp + 0x24], ebx
je 0x40ef42
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
push 1
call dword [eax]
push str.360base.dll
lea eax, [esp + 0x744]
push eax
call fcn.0040d6fd
cmp dword [eax + 0x14], 8
jb 0x40ef5c
mov eax, dword [eax]
push eax
call fcn.00414c5f
push 1
xor edi, edi
lea esi, [esp + 0x744]
call fcn.0040bad4
push 1
lea esi, [esp + 0xa00]
call fcn.0040bad4
mov esi, dword [esp + 0x1c]
cmp dword [esp + 0x344], ebx
jne 0x40efca
push ebx
push ebx
xor edi, edi
inc edi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 0x4b81ff
call fcn.00417f51
mov dword [esp], 0x4b06fa
call fcn.00417fc4
mov dword [esp], 0x4b06fa
call fcn.00417feb
pop ecx
mov ecx, esi
mov dword [0x6b7fe0], edi
call fcn.00418012
push 0x63f298
lea ecx, [esp + 0x7d0]
mov byte [esp + 0x1e], 1
call fcn.0040fcf9
lea eax, [esp + 0x7cc]
push eax
call fcn.0040f9c2
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [esp + 0x7d4]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40f00c
mov byte [esp + 0x1a], bl
push str.uninstall_cud_disabledlg
lea ecx, [esp + 0x920]
call fcn.0040fcf9
lea eax, [esp + 0x91c]
push eax
call fcn.0040f9c2
push ebx
push edi
lea ecx, [esp + 0x924]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40f046
mov byte [esp + 0x1a], bl
push str.first_run
lea ecx, [esp + 0x760]
call fcn.0040fcf9
lea eax, [esp + 0x75c]
push eax
call fcn.0040f9c2
push ebx
push edi
lea ecx, [esp + 0x764]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40f080
mov byte [esp + 0x1a], bl
push str.uninstall
lea ecx, [esp + 0x808]
call fcn.0040fcf9
lea eax, [esp + 0x804]
push eax
call fcn.0040f9c2
push ebx
push edi
lea ecx, [esp + 0x80c]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40f0ba
mov byte [esp + 0x1a], bl
push str.doctor
lea ecx, [esp + 0x9c8]
call fcn.0040fcf9
lea eax, [esp + 0x9c4]
push eax
call fcn.0040f9c2
push ebx
push edi
lea ecx, [esp + 0x9cc]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x40f0f4
mov byte [esp + 0x1a], bl
push str.silent_install
lea ecx, [esp + 0x840]
call fcn.0040fcf9
lea eax, [esp + 0x83c]
push eax
lea eax, [esp + 0x370]
push eax
push esi
call fcn.0040fb41
push ebx
push edi
lea ecx, [esp + 0x844]
call fcn.0040d17d
cmp dword [esp + 0x37c], 5
jne 0x40f155
cmp dword [esp + 0x380], 8
mov eax, dword [esp + 0x36c]
jae 0x40f14b
lea eax, [esp + 0x36c]
cmp word [eax], 0x33
jne 0x40f155
mov byte [esp + 0x1a], bl
push str.use_external_ui_dll
lea ecx, [esp + 0x958]
mov byte [esp + 0x17], bl
call fcn.0040fcf9
lea eax, [esp + 0x954]
push eax
call fcn.0040f9c2
push ebx
push edi
lea ecx, [esp + 0x95c]
mov byte [esp + 0x2b], al
call fcn.0040d17d
cmp byte [esp + 0x23], bl
je 0x40f194
mov byte [esp + 0x13], 1
cmp dword [esp + 0x344], ebx
jne 0x40f6c0
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [esp + 0x6c]
push eax
mov dword [esp + 0x70], 8
mov dword [esp + 0x74], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call fcn.00418080
cmp byte [esp + 0x13], bl
je 0x40f2ee
push str.360se6ui.dll
lea esi, [esp + 0x878]
call fcn.0040beca
push ebx
mov ecx, esi
call fcn.00421657
pop ecx
push 1
xor edi, edi
mov dword [esp + 0x40], eax
call fcn.0040bad4
cmp dword [esp + 0x3c], ebx
jne 0x40f22f
push 0x10
push ebx
push str.load_360se6ui.dll_failed
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004a9982
call dword [sym.imp.ole32.dll_CoUninitialize]
lea esi, [esp + 0x36c]
jmp 0x40e35c
mov edi, dword [esp + 0x3c]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.SeuiPreInitialize
push edi
call esi
push str.SeuiInitialize
push edi
mov dword [0x6b674c], eax
call esi
push str.SeuiUninitialize
push edi
mov dword [0x6b6750], eax
call esi
push str.SeuiSetLogicalChannel
push edi
mov dword [0x6b6754], eax
call esi
push str.SeuiSetAppManagerChannel
push edi
mov dword [0x6b6758], eax
call esi
push str.CreateCommandChannel
push edi
mov dword [0x6b675c], eax
call esi
push str.DestroyCommandChannel
push edi
mov dword [0x6b6760], eax
call esi
push str.SeuiTranslateAccelerator
push edi
mov dword [0x6b6764], eax
call esi
mov dword [0x6b6768], eax
cmp dword [0x6b674c], ebx
je 0x40f2e1
cmp dword [0x6b6750], ebx
je 0x40f2e1
cmp dword [0x6b6754], ebx
je 0x40f2e1
cmp dword [0x6b6758], ebx
je 0x40f2e1
cmp dword [0x6b6760], ebx
je 0x40f2e1
cmp dword [0x6b6764], ebx
je 0x40f2e1
cmp dword [0x6b675c], ebx
je 0x40f2e1
cmp eax, ebx
jne 0x40f3a9
push 0x10
push ebx
push str.load_invalid_360se6ui.dll
jmp 0x40f211
mov dword [0x6b674c], 0x4180f1
mov dword [0x6b6750], 0x4188f4
mov dword [0x6b6754], 0x569e05
mov dword [0x6b6758], 0x421b13
mov dword [0x6b675c], 0x42d25d
mov dword [0x6b6760], 0x418110
mov dword [0x6b6764], 0x4d8a3e
mov dword [0x6b6768], 0x45f61c
call fcn.00410222
push 0x1c
mov dword [esp + 0x44], eax
call fcn.004013b3
mov esi, eax
pop ecx
cmp esi, ebx
je 0x40f365
push ebx
xor edi, edi
call fcn.0040bad4
mov dword [0x6b4468], esi
jmp 0x40f36b
mov dword [0x6b4468], ebx
push 0x1c
call fcn.004013b3
mov esi, eax
pop ecx
cmp esi, ebx
je 0x40f385
push ebx
xor edi, edi
call fcn.0040bad4
mov ecx, esi
jmp 0x40f387
xor ecx, ecx
push dword [0x6b4468]
mov esi, dword [esp + 0x44]
push esi
mov dword [0x6b446c], ecx
call fcn.0041023f
cmp esi, ebx
je 0x40f3a9
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
call dword [0x6b674c]
test dword [esp + 0x14], 0x800
mov dword [0x6d1eb8], eax
je 0x40f3d2
and dword [esp + 0x14], 0xfffff7ff
lea esi, [esp + 0x1d0]
call fcn.004b94fd
push ebx
push ebx
push dword [esp + 0x30]
push 0x4215b5
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0x30], eax
cmp eax, ebx
jne 0x40f419
mov dword [esp + 0x24], ebx
push 1
xor edi, edi
lea esi, [esp + 0x370]
call fcn.0040bad4
push ebx
push 1
lea ecx, [esp + 0x33c]
call fcn.0040d17d
mov eax, dword [esp + 0x24]
jmp 0x40da9f
push str.video_mode
lea ecx, [esp + 0xa38]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x4c], 3
call fcn.0040fcf9
test dword [esp + 0x14], 0x100000
je 0x40f450
lea esi, [esp + 0x280]
call fcn.004b94fd
mov esi, dword [0x6b6b8c]
lea eax, [esp + 0xa34]
push eax
call fcn.0040f9c2
mov dword [esp + 0x24], str.UIPersistData_videomode
test al, al
jne 0x40f477
mov dword [esp + 0x24], str.UIPersistData
push ebx
push 1
lea ecx, [esp + 0xa3c]
call fcn.0040d17d
mov esi, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
lea eax, [esp + 0x38]
push eax
push ebx
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x30]
mov edi, 0x80000001
push str.Software360360se6default
push edi
call esi
test eax, eax
jne 0x40f4de
cmp dword [esp + 0x38], ebx
je 0x40f4de
push dword [esp + 0x38]
call fcn.004013b3
pop ecx
mov dword [esp + 0x28], eax
cmp eax, ebx
je 0x40f4de
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x2c]
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x30]
push str.Software360360se6default
push edi
call esi
call fcn.00418858
push str.360se_no_chrome
lea ecx, [esp + 0x8b0]
movzx edi, al
call fcn.0040fcf9
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x8ac]
push eax
call fcn.0040f9c2
push ebx
push 1
lea ecx, [esp + 0x8b4]
mov byte [esp + 0x2b], al
call fcn.0040d17d
cmp byte [esp + 0x23], bl
je 0x40f55d
cmp byte [esp + 0x1a], bl
je 0x40f554
cmp edi, ebx
sete byte [esp + 0x1a]
cmp byte [esp + 0x1a], bl
je 0x40f554
call fcn.004a9d2e
neg al
sbb al, al
inc al
mov byte [esp + 0x1a], al
je 0x40f554
call fcn.004a9dca
neg al
sbb al, al
inc al
mov byte [esp + 0x1a], al
movzx eax, byte [esp + 0x1a]
push edi
push eax
jmp 0x40f55f
push edi
push ebx
push dword [esp + 0x40]
push dword [esp + 0x34]
call dword [0x6b6750]
add esp, 0x10
cmp dword [esp + 0x28], ebx
je 0x40f580
push dword [esp + 0x28]
call fcn.00404e46
pop ecx
mov esi, str.Shell32.dll
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp eax, ebx
jne 0x40f597
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.SetCurrentProcessExplicitAppUserModelID
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
cmp edi, ebx
je 0x40f5f1
push str.video_mode
lea ecx, [esp + 0x990]
call fcn.0040fcf9
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x98c]
push eax
call fcn.0040f9c2
push ebx
push 1
lea ecx, [esp + 0x994]
mov byte [esp + 0x2b], al
call fcn.0040d17d
mov eax, str.360ve
cmp byte [esp + 0x23], bl
jne 0x40f5ee
mov eax, str.360se
push eax
call edi
mov edi, dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push ebx
call fcn.0045b1f6
test eax, eax
jne 0x40f5f7
push 0x1cff
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x3c]
push eax
push 1
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov dword [esp + 0x40], eax
cmp eax, ebx
je 0x40f623
cmp eax, 0xffffffff
jne 0x40f5f7
push str.360se_no_chrome
lea ecx, [esp + 0x8e8]
call fcn.0040fcf9
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x8e4]
push eax
call fcn.0040f9c2
push ebx
push 1
lea ecx, [esp + 0x8ec]
mov byte [esp + 0x2b], al
call fcn.0040d17d
cmp byte [esp + 0x23], bl
je 0x40f67e
cmp dword [esp + 0x40], ebx
jne 0x40f67e
lea eax, [esp + 0x2c]
push eax
push dword [esp + 0x34]
mov dword [esp + 0x34], ebx
call edi
cmp dword [esp + 0x2c], 6
je 0x40f5f7
cmp byte [esp + 0x1b], bl
je 0x40f689
call fcn.004a359c
lea eax, [esp + 0x44]
push eax
push dword [esp + 0x34]
mov dword [esp + 0x4c], ebx
call edi
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
jmp 0x40f3f1
push str.renderer
lea edx, [esp + 0x338]
call fcn.004134c1
pop ecx
mov edi, 0x2000
test al, al
je 0x40f730
push str.360se_crash_renderer
lea ecx, [esp + 0x7b4]
call fcn.0040fcf9
or dword [esp + 0x14], 0x1000
lea eax, [esp + 0x7b0]
push eax
call fcn.0040f9c2
test al, al
je 0x40f730
push str.no_sandbox
lea ecx, [esp + 0x77c]
call fcn.0040fcf9
or dword [esp + 0x14], edi
lea eax, [esp + 0x778]
push eax
call fcn.0040f9c2
mov byte [esp + 0x1b], 1
test al, al
je 0x40f734
mov byte [esp + 0x1b], bl
test dword [esp + 0x14], edi
je 0x40f751
and dword [esp + 0x14], 0xffffdfff
push ebx
push 1
lea ecx, [esp + 0x780]
call fcn.0040d17d
test dword [esp + 0x14], 0x1000
je 0x40f76a
push ebx
push 1
lea ecx, [esp + 0x7b8]
call fcn.0040d17d
cmp byte [esp + 0x1b], bl
je 0x40f77d
mov dword [esp + 0x24], 0x360
jmp 0x40f3f1
push dword [esp + 0x28]
call fcn.00410b90
pop ecx
jmp 0x40f6b7