Function at 0x42b5b0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2d8
push esi
mov eax, dword [ebp + 8]
mov dword [eax], 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0
lea ecx, [ebp - 0x18]
call fcn.0042e670
lea ecx, [ebp - 0x38]
call fcn.0042e050
lea edx, [ebp - 0x94]
push edx
call fcn.00420ef0
add esp, 4
push eax
mov ecx, dword [ebp + 0x10]
call fcn.0041c8e0
lea ecx, [ebp - 0x94]
call fcn.0040f740
mov ecx, dword [ebp + 0x10]
call fcn.0047e110
push ecx
mov ecx, esp
push 0x550ccc
call fcn.0041c8a0
push ecx
push esp
lea ecx, [ebp - 0x18]
call fcn.0042efe0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
call fcn.0042e910
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42b659
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42b659
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 1
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.iexplore.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42b682
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 1
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 1
push 0
push ecx
mov ecx, esp
push str.SoftwareRuanMeiSaaYaa3
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42b762
push ecx
mov ecx, esp
push 0x550d5c
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x550d60
call fcn.0041c8a0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xac]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42b733
push ecx
mov ecx, esp
push str.SaaYaa.exe
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x18]
call fcn.0042e910
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xb8]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42b762
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42b762
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 2
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.saayaa.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42b78b
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 2
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 2
push 0
push ecx
mov ecx, esp
push str.SoftwareMaxthon3
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42b86b
push ecx
mov ecx, esp
push 0x550dcc
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Folder
call fcn.0041c8a0
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xc8]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42b83c
push ecx
mov ecx, esp
push str.binMaxthon.exe
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x18]
call fcn.0042e910
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xd4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42b86b
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42b86b
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 4
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.maxthon.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42b894
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 4
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 4
push 0
push ecx
mov ecx, esp
push 0x550e18
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42ba67
lea ecx, [ebp - 0x1c]
call fcn.0041cb30
lea ecx, [ebp - 0x44]
call fcn.0048b020
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x38]
call fcn.00431250
lea ecx, [ebp - 0x5c]
call fcn.0042e050
mov dword [ebp - 0x60], 0
jmp 0x42b8f3
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
lea ecx, [ebp - 0x44]
call fcn.0048b1c0
cmp dword [ebp - 0x60], eax
jge 0x42ba1b
push 0
mov edx, dword [ebp - 0x60]
push edx
lea ecx, [ebp - 0x44]
call fcn.0048b2e0
push ecx
mov esi, esp
push eax
push 0x550e60
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x38]
call fcn.0047d8c0
push eax
lea ecx, [ebp - 0xe8]
push ecx
call fcn.0041ca60
add esp, 0xc
push eax
push esi
call fcn.0041ca00
add esp, 0xc
push SysReAllocString
lea ecx, [ebp - 0x5c]
call fcn.0042e1a0
mov dword [ebp - 0xdc], eax
lea ecx, [ebp - 0xe8]
call fcn.0040f740
lea ecx, [ebp - 0xe4]
call fcn.0040f740
cmp dword [ebp - 0xdc], 0
je 0x42ba16
push ecx
mov ecx, esp
push 0x550e64
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x550e68
call fcn.0041c8a0
lea edx, [ebp - 0xf4]
push edx
lea ecx, [ebp - 0x5c]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xf4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42b9c8
jmp 0x42ba1b
push ecx
mov ecx, esp
push 0x550ea4
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x550ea8
call fcn.0041c8a0
lea ecx, [ebp - 0x100]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x100]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx edx, al
test edx, edx
jne 0x42ba16
jmp 0x42ba1b
jmp 0x42b8ea
push 0x550eec
lea ecx, [ebp - 0x1c]
call fcn.0047e330
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42ba57
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42ba57
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 8
mov eax, dword [ebp + 8]
mov dword [eax], edx
lea ecx, [ebp - 0x5c]
call fcn.0042e110
lea ecx, [ebp - 0x44]
call fcn.004bf0e0
call fcn.0042e0c0
test eax, eax
je 0x42ba91
push 0
push ecx
mov ecx, esp
push 0x550ef0
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42bab0
push 0
push ecx
mov ecx, esp
push str.SoftwareGoogleUpdateClientState
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42bc8d
lea ecx, [ebp - 0x1c]
call fcn.0041cb30
lea ecx, [ebp - 0x6c]
call fcn.0048b020
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00431250
lea ecx, [ebp - 0x84]
call fcn.0042e050
lea ecx, [ebp - 0x84]
call fcn.0042e130
mov dword [ebp - 0x88], 0
jmp 0x42bb07
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
lea ecx, [ebp - 0x6c]
call fcn.0048b1c0
cmp dword [ebp - 0x88], eax
jge 0x42bc3e
push 0
mov eax, dword [ebp - 0x88]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0048b2e0
push ecx
mov esi, esp
push eax
push 0x550f98
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0047d8c0
push eax
lea edx, [ebp - 0x118]
push edx
call fcn.0041ca60
add esp, 0xc
push eax
push esi
call fcn.0041ca00
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x84]
call fcn.0042e1a0
mov dword [ebp - 0x10c], eax
lea ecx, [ebp - 0x118]
call fcn.0040f740
lea ecx, [ebp - 0x114]
call fcn.0040f740
cmp dword [ebp - 0x10c], 0
je 0x42bc39
push ecx
mov ecx, esp
push 0x550f9c
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x550fa0
call fcn.0041c8a0
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x84]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x124]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42bbe8
jmp 0x42bc3e
push ecx
mov ecx, esp
push 0x550fdc
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.LastInstallerSuccessLaunchCmdLine
call fcn.0041c8a0
lea edx, [ebp - 0x130]
push edx
lea ecx, [ebp - 0x84]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x130]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42bc39
jmp 0x42bc3e
jmp 0x42baf8
push 0x551024
lea ecx, [ebp - 0x1c]
call fcn.0047e330
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42bc7a
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42bc7a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 8
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
lea ecx, [ebp - 0x84]
call fcn.0042e110
lea ecx, [ebp - 0x6c]
call fcn.004bf0e0
call fcn.0042e0c0
test eax, eax
je 0x42bcb7
push 0
push ecx
mov ecx, esp
push 0x551028
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42bcd6
push 0
push ecx
mov ecx, esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42bd50
lea ecx, [ebp - 0x1c]
call fcn.0041cb30
push ecx
mov ecx, esp
push 0x5510c4
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x55114c
call fcn.0041c8a0
lea edx, [ebp - 0x144]
push edx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x144]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42bd50
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42bd50
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 8
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push str.chrome.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42bd79
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 8
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 8
call fcn.0042e0c0
test eax, eax
je 0x42bda3
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeSogouExplorer
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42bdc2
push 0
push ecx
mov ecx, esp
push str.SOFTWARESogouExplorer
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42be83
push ecx
mov ecx, esp
push 0x551184
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x551200
call fcn.0041c8a0
lea edx, [ebp - 0x158]
push edx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x158]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42be54
push ecx
mov ecx, esp
push 0x551204
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x18]
call fcn.0042e910
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x164]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42be83
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42be83
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x10
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.sogouexplorer.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jge 0x42bea9
push 0
push str.sogoue1.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42bebf
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x10
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x10
call fcn.0042e0c0
test eax, eax
je 0x42bee9
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeMozillaMozilla_Firefox
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42bf08
push 0
push ecx
mov ecx, esp
push str.SOFTWAREMozillaMozilla_Firefox
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c06d
push ecx
mov ecx, esp
push 0x5512c4
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x55130c
call fcn.0041c8a0
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
lea ecx, [ebp - 0x8c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42c033
call fcn.0042e0c0
test eax, eax
je 0x42bfa6
push 0
push ecx
mov esi, esp
push 0x55132c
lea edx, [ebp - 0x8c]
push edx
push str.SOFTWAREWow6432NodeMozillaMozilla_Firefox_
lea eax, [ebp - 0x17c]
push eax
call fcn.0047e630
add esp, 0xc
push eax
push esi
call fcn.0041ca60
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x17c]
call fcn.0040f740
jmp 0x42bff0
push 0
push ecx
mov esi, esp
push str.Main
lea ecx, [ebp - 0x8c]
push ecx
push str.SOFTWAREMozillaMozilla_Firefox_
lea edx, [ebp - 0x184]
push edx
call fcn.0047e630
add esp, 0xc
push eax
push esi
call fcn.0041ca60
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x184]
call fcn.0040f740
cmp dword [ebp - 0x20], 0
je 0x42c033
push ecx
mov ecx, esp
push 0x5513e4
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.PathToExe
call fcn.0041c8a0
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x190]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42c062
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c062
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x20
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
lea ecx, [ebp - 0x8c]
call fcn.0040f740
push 0
push str.firefox.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42c096
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x20
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x20
call fcn.0042e0c0
test eax, eax
je 0x42c0c0
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeApple_Computer__Inc.Safari
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42c0df
push 0
push ecx
mov ecx, esp
push str.SOFTWAREApple_Computer__Inc.Safari
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c151
push ecx
mov ecx, esp
push 0x551414
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.BrowserExe
call fcn.0041c8a0
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1a4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42c151
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c151
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x40
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.safari.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42c17a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x40
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x40
push 0
push ecx
mov ecx, esp
push str.SoftwareOpera_Software
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c2e7
push ecx
mov ecx, esp
push 0x5514ac
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Last_Install_Path
call fcn.0041c8a0
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1b4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
je 0x42c22c
push ecx
mov ecx, esp
push 0x551550
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Last_Stable_Install_Path
call fcn.0041c8a0
lea edx, [ebp - 0x1c0]
push edx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1c0]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42c2e7
push ecx
mov ecx, esp
push 0x551588
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x18]
call fcn.0042e910
push ecx
mov ecx, esp
push 0x55159c
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x18]
call fcn.0042e910
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1d4]
call fcn.0040f740
lea ecx, [ebp - 0x90]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x42c2cc
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c2dc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x80
mov eax, dword [ebp + 8]
mov dword [eax], edx
lea ecx, [ebp - 0x90]
call fcn.0040f740
push 0
push str.launcher.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jge 0x42c30d
push 0
push str.opera.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42c326
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x80
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x80
call fcn.0042e0c0
test eax, eax
je 0x42c350
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionUninstall23F3F476_BE34_4f48_9C77_2806A8393EC4
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42c36f
push 0
push ecx
mov ecx, esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall23F3F476_BE34_4f48_9C77_2806A8393EC4
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c3e4
push ecx
mov ecx, esp
push 0x551770
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.DisplayIcon
call fcn.0041c8a0
lea edx, [ebp - 0x1e8]
push edx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1e8]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42c3e4
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c3e4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x100
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push ecx
mov ecx, esp
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall360se6
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c4d0
push ecx
mov ecx, esp
push 0x55178c
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.InstallLocation
call fcn.0041c8a0
lea ecx, [ebp - 0x1f8]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1f8]
call fcn.0040f740
push 0x551828
push 1
lea edx, [ebp - 0x200]
push edx
lea ecx, [ebp - 0x1c]
call fcn.0047e5c0
push eax
call fcn.0047e6f0
add esp, 8
mov byte [ebp - 0x1f9], al
lea ecx, [ebp - 0x200]
call fcn.0040f740
movzx eax, byte [ebp - 0x1f9]
test eax, eax
je 0x42c492
push 0x55182c
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x551830
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42c4d0
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c4d0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x100
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.360se.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42c4fb
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x100
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x100
push 0
push ecx
mov ecx, esp
push str.Software360chromechrome
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c5e8
push ecx
mov ecx, esp
push 0x55188c
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.last_install_path
call fcn.0041c8a0
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x210]
call fcn.0040f740
push 0x5518b4
push 1
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.0047e5c0
push eax
call fcn.0047e6f0
add esp, 8
mov byte [ebp - 0x211], al
lea ecx, [ebp - 0x218]
call fcn.0040f740
movzx edx, byte [ebp - 0x211]
test edx, edx
je 0x42c5a9
push 0x5518b8
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push str.360ChromeChromeApplication360chrome.exe
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42c5e8
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c5e8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x400
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push 0x5518bc
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42c614
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x400
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x400
call fcn.0042e0c0
test eax, eax
je 0x42c63e
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432Nodeliebao
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42c65d
push 0
push ecx
mov ecx, esp
push str.SOFTWAREliebao
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c737
push ecx
mov ecx, esp
push 0x551988
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Install_Path_Dir
call fcn.0041c8a0
lea edx, [ebp - 0x22c]
push edx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x22c]
call fcn.0040f740
push ecx
mov ecx, esp
push str.LBBrowserliebao.exe
call fcn.0041c8a0
push ecx
mov ecx, esp
lea eax, [ebp - 0x1c]
push eax
call fcn.0041c880
lea ecx, [ebp - 0x238]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0042e910
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x238]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x42c705
push 0x5519dc
push str.LBBrowser_
lea ecx, [ebp - 0x1c]
call fcn.0047dd80
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx edx, al
test edx, edx
jne 0x42c737
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c737
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x200
mov edx, dword [ebp + 8]
mov dword [edx], ecx
push 0
push str.liebao.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42c763
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x200
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x200
push 0
push ecx
mov ecx, esp
push str.Softwarehao123JuziBrowser
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c84f
push ecx
mov ecx, esp
push 0x551a48
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.lastinstpath
call fcn.0041c8a0
lea ecx, [ebp - 0x248]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x248]
call fcn.0040f740
push 0x551a68
push 1
lea edx, [ebp - 0x250]
push edx
lea ecx, [ebp - 0x1c]
call fcn.0047e5c0
push eax
call fcn.0047e6f0
add esp, 8
mov byte [ebp - 0x249], al
lea ecx, [ebp - 0x250]
call fcn.0040f740
movzx eax, byte [ebp - 0x249]
test eax, eax
je 0x42c811
push 0x551a6c
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x551a70
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42c84f
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c84f
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x800
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.hao123juzi.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42c87a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x800
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x800
push 0
push ecx
mov ecx, esp
push str.SoftwareTencentQQBrowser
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42c967
push ecx
mov ecx, esp
push 0x551ae8
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x551aec
call fcn.0041c8a0
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x260]
call fcn.0040f740
push 0x551af0
push 1
lea ecx, [ebp - 0x268]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.0047e5c0
push eax
call fcn.0047e6f0
add esp, 8
mov byte [ebp - 0x261], al
lea ecx, [ebp - 0x268]
call fcn.0040f740
movzx edx, byte [ebp - 0x261]
test edx, edx
je 0x42c928
push 0x551af4
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x551af8
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42c967
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42c967
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x1000
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push str.qqbrowser.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jge 0x42c98d
push 0
push str.qqbrow1.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42c9a6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x1000
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x1000
push 0
push ecx
mov ecx, esp
push str.SoftwareTheWorld6
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42ca47
push ecx
mov ecx, esp
push 0x551b74
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.InstallerSuccessLaunchCmdLine
call fcn.0041c8a0
lea edx, [ebp - 0x278]
push edx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x278]
call fcn.0040f740
push 0x551bb4
lea ecx, [ebp - 0x1c]
call fcn.0047e330
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42ca47
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42ca47
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x2000
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push 0x551bb8
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42ca73
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x2000
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x2000
call fcn.0042e0c0
test eax, eax
je 0x42ca9d
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432Node2345Explorer
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42cabc
push 0
push ecx
mov ecx, esp
push str.SOFTWARE2345Explorer
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42cb8a
push ecx
mov ecx, esp
push 0x551c44
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Path
call fcn.0041c8a0
lea edx, [ebp - 0x28c]
push edx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x28c]
call fcn.0040f740
push 0x551c54
push 1
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0047e5c0
push eax
call fcn.0047e6f0
add esp, 8
mov byte [ebp - 0x28d], al
lea ecx, [ebp - 0x294]
call fcn.0040f740
movzx ecx, byte [ebp - 0x28d]
test ecx, ecx
je 0x42cb4b
push 0x551c58
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x551c5c
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx edx, al
test edx, edx
jne 0x42cb8a
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42cb8a
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x4000
mov edx, dword [ebp + 8]
mov dword [edx], ecx
push 0
push str.2345explorer.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42cbb6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x4000
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4000
push 0
push ecx
mov ecx, esp
push str.SoftwareTaoBrowser.exe
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42cc4a
push ecx
mov ecx, esp
push 0x551cd4
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x551cd8
call fcn.0041c8a0
lea ecx, [ebp - 0x2a4]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x2a4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx edx, al
test edx, edx
jne 0x42cc4a
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42cc4a
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x8000
mov edx, dword [ebp + 8]
mov dword [edx], ecx
push 0
push str.taobrowser.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42cc76
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x8000
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x8000
push 0
push ecx
mov ecx, esp
push str.SoftwareAvant_Browser
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42cd62
push ecx
mov ecx, esp
push 0x551d2c
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.InstallPath
call fcn.0041c8a0
lea ecx, [ebp - 0x2b4]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x2b4]
call fcn.0040f740
push 0x551d48
push 1
lea edx, [ebp - 0x2bc]
push edx
lea ecx, [ebp - 0x1c]
call fcn.0047e5c0
push eax
call fcn.0047e6f0
add esp, 8
mov byte [ebp - 0x2b5], al
lea ecx, [ebp - 0x2bc]
call fcn.0040f740
movzx eax, byte [ebp - 0x2b5]
test eax, eax
je 0x42cd24
push 0x551d4c
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x551d50
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x42cd62
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42cd62
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x10000
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.avant.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42cd8d
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x10000
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x10000
call fcn.0042e0c0
test eax, eax
je 0x42cdb7
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeBaiduBaiduBrowser
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
jmp 0x42cdd6
push 0
push ecx
mov ecx, esp
push str.SOFTWAREBaiduBaiduBrowser
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.0042e1a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42cea4
push ecx
mov ecx, esp
push 0x551e00
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.installDir
call fcn.0041c8a0
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x38]
call fcn.0042e400
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x2d0]
call fcn.0040f740
push 0x551e1c
push 1
lea ecx, [ebp - 0x2d8]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.0047e5c0
push eax
call fcn.0047e6f0
add esp, 8
mov byte [ebp - 0x2d1], al
lea ecx, [ebp - 0x2d8]
call fcn.0040f740
movzx edx, byte [ebp - 0x2d1]
test edx, edx
je 0x42ce65
push 0x551e20
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x551e24
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x42cea4
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42cea4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x20000
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push str.baidubrowser.exe
mov ecx, dword [ebp + 0x10]
call fcn.0047e090
test eax, eax
jl 0x42ced0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x20000
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x20000
lea ecx, [ebp - 0x1c]
call fcn.0040f740
lea ecx, [ebp - 0x38]
call fcn.0042e110
lea ecx, [ebp - 0x18]
call fcn.0042e690
pop esi
mov esp, ebp
pop ebp
ret