Function at 0x47e1d7
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x54]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebx], 1
and dword [esi], 0
call fcn.00417833
lea ecx, [ebp - 0x3c]
call fcn.00417833
lea eax, [ebp - 8]
push eax
call fcn.0047c255
pop ecx
mov ecx, dword [ebp + 0x10]
push eax
call fcn.00418bac
mov ecx, dword [ebp - 8]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp + 0x10]
call fcn.004b2aeb
push ecx
mov ecx, esp
push str.Internet_Exploreriexplore.exe
call fcn.004177e7
push ecx
push esp
lea ecx, [ebp - 0x54]
call fcn.004e6873
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x54]
call fcn.0041934b
mov eax, dword [ebp - 4]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp dword [eax - 0xc], 0
je 0x47e261
push eax
call edi
test eax, eax
je 0x47e261
or dword [ebx], 1
mov ecx, dword [ebp + 0x10]
push 0
push str.iexplore.exe
call fcn.004713d7
test eax, eax
js 0x47e27b
xor eax, eax
inc eax
or dword [ebx], eax
mov dword [esi], eax
call fcn.00484028
cmp eax, 0x1f
jl 0x47e2ee
push ecx
mov ecx, esp
push str.SystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdge.exe
call fcn.00419d68
push ecx
push esp
lea ecx, [ebp - 0x54]
call fcn.0050809d
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x54]
call fcn.0041934b
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 8]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47e2d2
push eax
call edi
test eax, eax
je 0x47e2d2
or dword [ebx], 0x40000
mov ecx, dword [ebp + 0x10]
push 0
push str.launchwinapp.exe
call fcn.004713d7
test eax, eax
js 0x47e2ee
mov eax, 0x40000
or dword [ebx], eax
mov dword [esi], eax
push 0
push ecx
mov ecx, esp
push str.SoftwareRuanMeiSaaYaa3
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47e3ad
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Install_Dir
call fcn.004177e7
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47e3ad
push ecx
mov ecx, esp
push str.SaaYaa.exe
call fcn.004177e7
mov eax, dword [ebp - 4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00418dea
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 8]
push eax
call fcn.0041934b
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 8]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
mov esi, dword [ebp + 0xc]
cmp dword [eax - 0xc], 0
je 0x47e3ad
push eax
call edi
test eax, eax
je 0x47e3ad
or dword [ebx], 2
mov ecx, dword [ebp + 0x10]
push 0
push str.saayaa.exe
call fcn.004713d7
test eax, eax
js 0x47e3c7
push 2
pop eax
or dword [ebx], eax
mov dword [esi], eax
xor esi, esi
push esi
push ecx
mov ecx, esp
push str.SoftwareMaxthon3
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47e485
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Folder
call fcn.004177e7
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], esi
je 0x47e475
push ecx
mov ecx, esp
push str.binMaxthon.exe
call fcn.004177e7
mov eax, dword [ebp - 4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00418dea
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 8]
push eax
call fcn.0041934b
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 8]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
xor esi, esi
cmp dword [eax - 0xc], 0
je 0x47e485
push eax
call edi
test eax, eax
je 0x47e485
or dword [ebx], 4
mov ecx, dword [ebp + 0x10]
push esi
push str.maxthon.exe
call fcn.004713d7
test eax, eax
js 0x47e4a1
mov eax, dword [ebp + 0xc]
push 4
pop ecx
or dword [ebx], ecx
mov dword [eax], ecx
push esi
push ecx
mov ecx, esp
push str.SoftwareGoogleUpdateClientState
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47e645
lea ecx, [ebp - 4]
call fcn.00418ee0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], esi
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
call fcn.0048afd2
lea ecx, [ebp - 0x6c]
call fcn.00417833
cmp dword [ebp - 0x20], 0
mov dword [ebp - 8], esi
jle 0x47e601
mov eax, dword [ebp - 0x2c]
mov ebx, esi
add eax, 0xfffffff0
mov dword [ebp - 0x18], eax
push eax
call fcn.00418dea
pop ecx
push 0
push ebx
lea esi, [eax + 0x10]
lea ecx, [ebp - 0x24]
mov dword [ebp - 8], esi
call fcn.0044c702
push ecx
mov edi, esp
push eax
push 0x683cc4
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004227e4
add esp, 0xc
push eax
push edi
call fcn.004227ad
add esp, 0xc
lea ecx, [ebp - 0x6c]
push SysReAllocString
call fcn.004f7115
mov ecx, dword [ebp - 0xc]
mov edi, eax
add ecx, 0xfffffff0
call fcn.00419521
lea ecx, [esi - 0x10]
call fcn.00419521
test edi, edi
je 0x47e5e9
push ecx
mov ecx, esp
mov esi, 0x6809b0
push esi
call fcn.004177e7
push ecx
mov ecx, esp
push str.InstallerSuccessLaunchCmdLine
call fcn.004177e7
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
jne 0x47e5f6
push ecx
mov ecx, esp
push esi
call fcn.004177e7
push ecx
mov ecx, esp
push str.LastInstallerSuccessLaunchCmdLine
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
jne 0x47e5f6
mov eax, dword [ebp - 0x18]
inc ebx
cmp ebx, dword [ebp - 0x20]
jl 0x47e501
mov ebx, dword [ebp + 8]
xor esi, esi
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov eax, 0x68b394
lea ecx, [ebp - 4]
push eax
push eax
call fcn.00505c74
mov ecx, eax
call fcn.00505b8f
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47e62a
push eax
call edi
test eax, eax
je 0x47e62a
or dword [ebx], 8
lea ecx, [ebp - 0x6c]
call fcn.00418dd0
mov ecx, dword [ebp - 0x5c]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x24]
call fcn.004e8a9c
call fcn.004191ed
push esi
push ecx
mov ecx, esp
test eax, eax
je 0x47e659
push str.SoftwareWow6432NodeGoogleUpdateClientState
jmp 0x47e65e
push str.SoftwareGoogleUpdateClientState
call fcn.004177e7
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47e7fa
lea ecx, [ebp - 4]
call fcn.00418ee0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], esi
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
call fcn.0048afd2
lea ecx, [ebp - 0x6c]
call fcn.00417833
cmp dword [ebp - 0x20], 0
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x18], esi
jle 0x47e7b2
mov eax, dword [ebp - 0x2c]
mov ebx, esi
add eax, 0xfffffff0
mov dword [ebp - 8], eax
push eax
call fcn.00418dea
pop ecx
push 0
push ebx
lea esi, [eax + 0x10]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x18], esi
call fcn.0044c702
push ecx
mov edi, esp
push eax
push 0x683cc4
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004227e4
add esp, 0xc
push eax
push edi
call fcn.004227ad
add esp, 0xc
lea ecx, [ebp - 0x6c]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f7115
mov ecx, dword [ebp - 0x14]
mov edi, eax
add ecx, 0xfffffff0
call fcn.00419521
lea ecx, [esi - 0x10]
call fcn.00419521
test edi, edi
je 0x47e7a0
push ecx
mov ecx, esp
mov esi, 0x6809b0
push esi
call fcn.004177e7
push ecx
mov ecx, esp
push str.InstallerSuccessLaunchCmdLine
call fcn.004177e7
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
jne 0x47e7ad
push ecx
mov ecx, esp
push esi
call fcn.004177e7
push ecx
mov ecx, esp
push str.LastInstallerSuccessLaunchCmdLine
call fcn.004177e7
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
jne 0x47e7ad
mov eax, dword [ebp - 8]
inc ebx
cmp ebx, dword [ebp - 0x20]
jl 0x47e6b8
mov ebx, dword [ebp + 8]
xor esi, esi
mov eax, 0x68b394
lea ecx, [ebp - 4]
push eax
push eax
call fcn.00505c74
mov ecx, eax
call fcn.00505b8f
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47e7df
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47e7df
or dword [ebx], 8
lea ecx, [ebp - 0x6c]
call fcn.00418dd0
mov ecx, dword [ebp - 0x5c]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x24]
call fcn.004e8a9c
call fcn.004191ed
push esi
push ecx
mov ecx, esp
test eax, eax
je 0x47e80e
push str.SOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
jmp 0x47e813
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
call fcn.004177e7
mov esi, reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
push esi
call fcn.004f7115
test eax, eax
je 0x47e883
lea ecx, [ebp - 4]
call fcn.00418ee0
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.InstallLocation
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47e883
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47e883
or dword [ebx], 8
mov ecx, dword [ebp + 0x10]
push 0
push str.chrome.exe
call fcn.004713d7
mov edi, dword [ebp + 0xc]
test eax, eax
js 0x47e8a0
push 8
pop eax
or dword [ebx], eax
mov dword [edi], eax
call fcn.004191ed
push 0
push ecx
mov ecx, esp
test eax, eax
je 0x47e8b5
push str.SOFTWAREWow6432NodeSogouExplorer
jmp 0x47e8ba
push str.SOFTWARESogouExplorer
call fcn.004177e7
push esi
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47e969
push ecx
mov ecx, esp
mov esi, 0x6809b0
push esi
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47e969
push ecx
mov ecx, esp
push str.sogouexplorer.exe
call fcn.004177e7
mov eax, dword [ebp - 4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00418dea
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x18]
push eax
call fcn.0041934b
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47e969
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47e969
or dword [ebx], 0x10
xor esi, esi
push esi
push ecx
mov ecx, esp
push str.SoftwareSogouExplorer
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47ea2b
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], esi
je 0x47ea17
push ecx
mov ecx, esp
push str.sogouexplorer.exe
call fcn.004177e7
mov eax, dword [ebp - 4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00418dea
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x18]
push eax
call fcn.0041934b
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
xor esi, esi
cmp dword [eax - 0xc], 0
je 0x47ea2b
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47ea2b
or dword [ebx], 0x10
mov ecx, dword [ebp + 0x10]
push esi
push str.sogouexplorer.exe
call fcn.004713d7
test eax, eax
jns 0x47ea4f
mov ecx, dword [ebp + 0x10]
push esi
push str.sogoue1.exe
call fcn.004713d7
test eax, eax
js 0x47ea56
push 0x10
pop eax
or dword [ebx], eax
mov dword [edi], eax
call fcn.004191ed
push esi
push ecx
mov ecx, esp
test eax, eax
je 0x47ea6a
push str.SOFTWAREWow6432NodeMozillaMozilla_Firefox
jmp 0x47ea6f
push str.SOFTWAREMozillaMozilla_Firefox
call fcn.004177e7
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47eb6e
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.CurrentVersion
call fcn.004177e7
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
mov esi, dword [ebp - 8]
cmp dword [esi - 0xc], 0
je 0x47eb4d
call fcn.004191ed
push 0
push ecx
mov edi, esp
test eax, eax
lea eax, [ebp - 8]
push str.Main
push eax
lea eax, [ebp - 0x18]
je 0x47eadd
push str.SOFTWAREWow6432NodeMozillaMozilla_Firefox_
jmp 0x47eae2
push str.SOFTWAREMozillaMozilla_Firefox_
push eax
call fcn.0044c94c
add esp, 0xc
push eax
push edi
call fcn.004227e4
add esp, 0xc
lea ecx, [ebp - 0x3c]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004f7115
mov ecx, dword [ebp - 0x18]
mov edi, eax
add ecx, 0xfffffff0
call fcn.00419521
test edi, edi
je 0x47eb4d
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.PathToExe
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47eb64
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47eb64
or dword [ebx], 0x20
lea ecx, [esi - 0x10]
call fcn.00419521
xor esi, esi
mov ecx, dword [ebp + 0x10]
push esi
push str.firefox.exe
call fcn.004713d7
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
test eax, eax
js 0x47eb8d
push 0x20
pop eax
or dword [edi], eax
mov dword [ebx], eax
call fcn.004191ed
push esi
push ecx
mov ecx, esp
test eax, eax
je 0x47eba1
push str.SOFTWAREWow6432NodeApple_Computer__Inc.Safari
jmp 0x47eba6
push str.SOFTWAREApple_Computer__Inc.Safari
call fcn.004177e7
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47ec0d
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.BrowserExe
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47ec0d
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47ec0d
or dword [edi], 0x40
mov ecx, dword [ebp + 0x10]
push esi
push str.safari.exe
call fcn.004713d7
test eax, eax
js 0x47ec26
push 0x40
pop eax
or dword [edi], eax
mov dword [ebx], eax
push esi
push ecx
mov ecx, esp
push str.SoftwareOpera_Software
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47ed6e
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Last_Install_Path
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
jne 0x47ecd3
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Last_Stable_Install_Path
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47ed6e
push ecx
mov ecx, esp
push str.opera.exe
call fcn.004177e7
mov eax, dword [ebp - 4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00418dea
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x14]
push eax
call fcn.0041934b
push ecx
mov ecx, esp
push str.launcher.exe
call fcn.004177e7
mov eax, dword [ebp - 4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00418dea
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x18]
push eax
call fcn.0041934b
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47ed5e
push dword [ebp - 4]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47ed64
or dword [edi], 0x80
lea ecx, [esi - 0x10]
call fcn.00419521
xor esi, esi
mov ecx, dword [ebp + 0x10]
push esi
push str.launcher.exe
call fcn.004713d7
test eax, eax
jns 0x47ed92
mov ecx, dword [ebp + 0x10]
push esi
push str.opera.exe
call fcn.004713d7
test eax, eax
js 0x47ed9b
mov eax, 0x80
or dword [edi], eax
mov dword [ebx], eax
call fcn.004191ed
push esi
push ecx
mov ecx, esp
test eax, eax
je 0x47edaf
push str.SOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionUninstall23F3F476_BE34_4f48_9C77_2806A8393EC4
jmp 0x47edb4
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall23F3F476_BE34_4f48_9C77_2806A8393EC4
call fcn.004177e7
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47ee22
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.DisplayIcon
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 4]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp dword [eax - 0xc], 0
je 0x47ee28
push eax
call esi
test eax, eax
je 0x47ee28
or dword [edi], 0x100
jmp 0x47ee28
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push 0
push ecx
mov ecx, esp
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall360se6
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47eee4
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.InstallLocation
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x18]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47eec1
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.360se.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47eee4
push eax
call esi
test eax, eax
je 0x47eee4
or dword [edi], 0x100
mov ecx, dword [ebp + 0x10]
push 0
push str.360se.exe
call fcn.004713d7
test eax, eax
js 0x47ef06
mov eax, dword [ebp + 0xc]
or dword [edi], 0x100
mov dword [eax], 0x100
push 0
push ecx
mov ecx, esp
push str.Software360chromechrome
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47efc2
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.last_install_path
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x18]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47ef9f
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.360ChromeChromeApplication360chrome.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47efc2
push eax
call esi
test eax, eax
je 0x47efc2
or dword [edi], 0x400
mov ecx, dword [ebp + 0x10]
push 0
push str.360chrome.exe
call fcn.004713d7
mov ebx, dword [ebp + 0xc]
test eax, eax
js 0x47efe4
or dword [edi], 0x400
mov dword [ebx], 0x400
call fcn.004191ed
push 0
push ecx
mov ecx, esp
test eax, eax
je 0x47eff9
push str.SOFTWAREWow6432Nodeliebao
jmp 0x47effe
push str.SOFTWAREliebao
call fcn.004177e7
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f0cb
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Install_Path_Dir
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00419521
push ecx
mov ecx, esp
push str.LBBrowserliebao.exe
call fcn.004177e7
mov eax, dword [ebp - 4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00418dea
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x18]
push eax
call fcn.0041934b
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
push dword [ebp - 4]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call esi
test eax, eax
jne 0x47f0b5
push 0x6809b0
push str.LBBrowser_
lea ecx, [ebp - 4]
call fcn.004e936a
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47f0cb
push eax
call esi
test eax, eax
je 0x47f0cb
or dword [edi], 0x200
mov ecx, dword [ebp + 0x10]
push 0
push str.liebao.exe
call fcn.004713d7
test eax, eax
js 0x47f0e7
mov eax, 0x200
or dword [edi], eax
mov dword [ebx], eax
push 0
push ecx
mov ecx, esp
push str.Softwarehao123JuziBrowser
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f1a3
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.lastinstpath
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x14]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47f180
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.hao123juzi.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47f1a3
push eax
call esi
test eax, eax
je 0x47f1a3
or dword [edi], 0x800
mov ecx, dword [ebp + 0x10]
push 0
push str.hao123juzi.exe
call fcn.004713d7
test eax, eax
js 0x47f1c5
mov eax, dword [ebp + 0xc]
or dword [edi], 0x800
mov dword [eax], 0x800
push 0
push ecx
mov ecx, esp
push str.SoftwareTencentQQBrowser
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f27e
push ecx
mov ecx, esp
mov ebx, 0x6809b0
push ebx
call fcn.004177e7
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x14]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47f25b
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.QQBrowser.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47f27e
push eax
call esi
test eax, eax
je 0x47f27e
or dword [edi], 0x1000
mov ecx, dword [ebp + 0x10]
push 0
push str.qqbrowser.exe
call fcn.004713d7
test eax, eax
jns 0x47f2a4
mov ecx, dword [ebp + 0x10]
push 0
push str.qqbrow1.exe
call fcn.004713d7
test eax, eax
js 0x47f2b5
mov ebx, dword [ebp + 0xc]
or dword [edi], 0x1000
mov dword [ebx], 0x1000
jmp 0x47f2b8
mov ebx, dword [ebp + 0xc]
push 0
push ecx
mov ecx, esp
push str.SoftwareTheWorld6
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f33e
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.InstallerSuccessLaunchCmdLine
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, 0x68b394
lea ecx, [ebp - 4]
push eax
push eax
call fcn.00505c74
mov ecx, eax
call fcn.00505b8f
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47f33e
push eax
call esi
test eax, eax
je 0x47f33e
or dword [edi], 0x2000
mov ecx, dword [ebp + 0x10]
push 0
push str.theworld.exe
call fcn.004713d7
test eax, eax
js 0x47f35a
mov eax, 0x2000
or dword [edi], eax
mov dword [ebx], eax
call fcn.004191ed
push 0
push ecx
mov ecx, esp
test eax, eax
je 0x47f36f
push str.SOFTWAREWow6432Node2345Explorer
jmp 0x47f374
push str.SOFTWARE2345Explorer
call fcn.004177e7
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f426
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Path
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x14]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47f403
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.2345Explorer.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47f426
push eax
call esi
test eax, eax
je 0x47f426
or dword [edi], 0x4000
mov ecx, dword [ebp + 0x10]
push 0
push str.2345explorer.exe
call fcn.004713d7
mov ebx, dword [ebp + 0xc]
test eax, eax
js 0x47f448
or dword [edi], 0x4000
mov dword [ebx], 0x4000
push 0
push ecx
mov ecx, esp
push str.SoftwareTaoBrowser.exe
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f4b8
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47f4b8
push eax
call esi
test eax, eax
je 0x47f4b8
or dword [edi], 0x8000
mov ecx, dword [ebp + 0x10]
push 0
push str.taobrowser.exe
call fcn.004713d7
test eax, eax
js 0x47f4d4
mov eax, 0x8000
or dword [edi], eax
mov dword [ebx], eax
xor ebx, ebx
push ebx
push ecx
mov ecx, esp
push str.SoftwareAvant_Browser
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f592
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.InstallPath
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x14]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47f56e
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.avant.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
xor ebx, ebx
cmp dword [eax - 0xc], ebx
je 0x47f592
push eax
call esi
test eax, eax
je 0x47f592
or dword [edi], 0x10000
mov ecx, dword [ebp + 0x10]
push ebx
push str.avant.exe
call fcn.004713d7
test eax, eax
js 0x47f5b0
mov eax, dword [ebp + 0xc]
mov ecx, 0x10000
or dword [edi], ecx
mov dword [eax], ecx
call fcn.004191ed
push ebx
push ecx
mov ecx, esp
test eax, eax
je 0x47f5c4
push str.SOFTWAREWow6432NodeBaiduBaiduBrowser
jmp 0x47f5c9
push str.SOFTWAREBaiduBaiduBrowser
call fcn.004177e7
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f69c
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.installDir
call fcn.004177e7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], ebx
je 0x47f69c
push 1
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x18]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47f660
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.baidubrowser.exe
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004227e4
add esp, 0xc
push dword [eax]
call esi
mov ecx, dword [ebp - 0x18]
mov esi, eax
add ecx, 0xfffffff0
call fcn.00419521
test esi, esi
je 0x47f7b2
or dword [edi], 0x20000
xor ebx, ebx
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov edi, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
push ebx
push str.baidubrowser.exe
call fcn.004713d7
test eax, eax
js 0x47f6bd
mov eax, dword [ebp + 0xc]
mov ecx, 0x20000
or dword [edi], ecx
mov dword [eax], ecx
push ebx
push ecx
mov ecx, esp
push str.SOFTWARERuanMeiQiyu
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f779
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Install_NewPath
call fcn.004177e7
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x18]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47f755
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.qiyu.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
xor ebx, ebx
cmp dword [eax - 0xc], ebx
je 0x47f779
push eax
call esi
test eax, eax
je 0x47f779
or dword [edi], 0x80000
mov ecx, dword [ebp + 0x10]
push ebx
push str.qiyu.exe
call fcn.004713d7
test eax, eax
js 0x47f797
mov eax, dword [ebp + 0xc]
mov ecx, 0x80000
or dword [edi], ecx
mov dword [eax], ecx
call fcn.004191ed
push ebx
push ecx
mov ecx, esp
test eax, eax
je 0x47f84d
push str.SOFTWAREWow6432Node2345chrome
jmp 0x47f852
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Version
call fcn.004177e7
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
mov esi, dword [ebp - 8]
xor ebx, ebx
cmp dword [esi - 0xc], ebx
je 0x47f837
push str._baidubrowser.exe
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004227ad
add esp, 0xc
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004227e4
add esp, 0xc
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [ebp - 0x18]
mov edi, eax
add ecx, 0xfffffff0
call fcn.00419521
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
test edi, edi
mov edi, dword [ebp + 8]
je 0x47f83a
or dword [edi], 0x20000
jmp 0x47f83a
mov edi, dword [ebp + 8]
lea ecx, [esi - 0x10]
call fcn.00419521
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
jmp 0x47f69f
push str.SOFTWARE2345chrome
call fcn.004177e7
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f904
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Path
call fcn.004177e7
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x18]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47f8e1
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.2345chrome.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47f904
push eax
call esi
test eax, eax
je 0x47f904
or dword [edi], 0x100000
mov ecx, dword [ebp + 0x10]
push 0
push str.2345chrome.exe
call fcn.004713d7
test eax, eax
js 0x47f926
mov eax, dword [ebp + 0xc]
or dword [edi], 0x100000
mov dword [eax], 0x100000
push 0
push ecx
mov ecx, esp
push str.SoftwareUCBrowser
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x3c]
call fcn.004f7115
test eax, eax
je 0x47f9e2
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.Path
call fcn.004177e7
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004e6ef3
push eax
lea ecx, [ebp - 4]
call fcn.00418bac
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.00419521
push 1
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 4]
call fcn.00419539
push 0x683cc4
mov ecx, eax
call fcn.004229b4
mov ecx, dword [ebp - 0x18]
test eax, eax
setne bl
lea ecx, [ecx - 0x10]
call fcn.00419521
test bl, bl
je 0x47f9bf
push 0x683cc4
lea ecx, [ebp - 4]
call fcn.004228d4
push str.ucbrowser.exe
lea ecx, [ebp - 4]
call fcn.004228d4
mov eax, dword [ebp - 4]
cmp dword [eax - 0xc], 0
je 0x47f9e2
push eax
call esi
test eax, eax
je 0x47f9e2
or dword [edi], 0x200000
mov ecx, dword [ebp + 0x10]
push 0
push str.ucbrowser.exe
call fcn.004713d7
test eax, eax
js 0x47fa04
mov eax, dword [ebp + 0xc]
or dword [edi], 0x200000
mov dword [eax], 0x200000
call fcn.00479766
mov ecx, dword [ebp - 4]
or dword [edi], eax
lea ecx, [ecx - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x3c]
call fcn.00418dd0
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x54]
call fcn.00418dd0
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00419521
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret