Function at 0x430f80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x380
mov ecx, dword [ebp + 8]
mov eax, dword [0x603024]
xor eax, ebp
mov dword [esp + 0x378], eax
xor ebx, ebx
dec ebx
lea edi, [esp + 0x114]
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
lea esi, [ecx + 4]
mov eax, str.chrome.exe
push eax
call fcn.00520e34
add esp, 4
mov ecx, esi
push eax
mov eax, str.chrome.exe
push eax
push edi
call fcn.004e0200
lea esi, [esp + 0x108]
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
call fcn.0046e4f0
push dword [ebp + 0x10]
push eax
push esi
call fcn.00536750
add esp, 0xc
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], ebx
mov edi, dword [str.SoftwareClasses]
push edi
call fcn.00520e34
add esp, 4
cmp eax, 0x7ffffff0
jae 0x4326bb
mov ebx, eax
cmp eax, 5
jae 0x431053
lea esi, [esp + 0xfc]
mov byte [esi + 0xb], bl
cmp ebx, 3
jne 0x432635
movzx eax, word [edi + 4]
mov word [esp + 0x100], ax
mov eax, dword [edi]
mov dword [esp + 0xfc], eax
jmp 0x431097
mov dword [esp], edi
lea edi, [ebx + 8]
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
call fcn.0050397a
add esp, 4
mov esi, eax
mov dword [esp + 0xfc], eax
or edi, 0x80000000
mov dword [esp + 0x104], edi
mov edi, dword [esp]
mov dword [esp + 0x100], ebx
mov eax, ebx
add eax, ebx
push eax
push edi
push esi
call fcn.00506d50
add esp, 0xc
mov word [esi + ebx*2], 0
lea esi, [esp + 0xfc]
mov ecx, esi
push 0x5c
call fcn.004de330
movzx eax, byte [esp + 0x113]
test al, al
cmovs eax, dword [esp + 0x10c]
mov edx, dword [esp + 0x108]
lea ecx, [esp + 0x108]
cmovns edx, ecx
mov ecx, esi
push eax
push edx
call fcn.004de0e0
push 0
push esi
push dword [ebp + 0xc]
call fcn.00543370
add esp, 0xc
xor eax, eax
dec eax
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], eax
mov edi, dword [str.SoftwareClasses]
push edi
call fcn.00520e34
add esp, 4
cmp eax, 0x7ffffff0
jae 0x4326c7
mov ebx, eax
cmp eax, 5
jae 0x43114a
lea esi, [esp + 0xf0]
mov byte [esi + 0xb], bl
cmp ebx, 3
jne 0x432642
movzx eax, word [edi + 4]
mov word [esp + 0xf4], ax
mov eax, dword [edi]
mov dword [esp + 0xf0], eax
jmp 0x43118e
mov dword [esp], edi
lea edi, [ebx + 8]
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
call fcn.0050397a
add esp, 4
mov esi, eax
mov dword [esp + 0xf0], eax
or edi, 0x80000000
mov dword [esp + 0xf8], edi
mov edi, dword [esp]
mov dword [esp + 0xf4], ebx
mov eax, ebx
add eax, ebx
push eax
push edi
push esi
call fcn.00506d50
add esp, 0xc
mov word [esi + ebx*2], 0
lea esi, [esp + 0xf0]
mov ecx, esi
push 0x5c
call fcn.004de330
call fcn.0046e4d0
lea edi, [esp + 0x168]
push dword [ebp + 0x10]
push eax
push edi
call fcn.00536750
add esp, 0xc
movzx eax, byte [edi + 0xb]
test al, al
jns 0x4311d3
mov eax, dword [esp + 0x16c]
mov edi, dword [esp + 0x168]
mov ecx, esi
push eax
push edi
call fcn.004de0e0
cmp byte [esp + 0x173], 0
mov ebx, dword [ebp + 0xc]
jns 0x4311f8
push dword [esp + 0x168]
call fcn.005039aa
add esp, 4
push 0
push esi
push ebx
call fcn.00543370
add esp, 0xc
lea esi, [esp + 0xe4]
xor eax, eax
dec eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
push esi
call fcn.00472f00
add esp, 4
movzx eax, byte [esi + 0xb]
test al, al
jns 0x43122e
mov eax, dword [esp + 0xe8]
test eax, eax
jne 0x43127a
push 2
call fcn.004e0f90
add esp, 4
test al, al
je 0x431286
lea esi, [esp + 0x168]
mov ecx, esi
push 2
push 0x259
push str..._.._chrome_installer_setup_uninstall.cc
call fcn.0045d3f0
lea eax, [esp + 0x170]
push 0x31
push str.Cannot_retrieve_the_toast_activator_registry_path
push eax
call fcn.005364d0
add esp, 0xc
mov ecx, esi
call fcn.0045d7d0
jmp 0x431286
push 0
push esi
push ebx
call fcn.00543370
add esp, 0xc
pcmpeqd xmm0, xmm0
lea ecx, [esp + 0x80]
movdqa xmmword [ecx + 0x50], xmm0
movdqa xmmword [ecx + 0x40], xmm0
movdqa xmmword [ecx + 0x30], xmm0
movdqa xmmword [ecx + 0x20], xmm0
movdqa xmmword [ecx + 0x10], xmm0
movdqa xmmword [ecx], xmm0
lea eax, [esp + 0x114]
push eax
call fcn.00543840
xor esi, esi
lea eax, [esp + 0x158]
mov dword [eax + 4], esi
mov dword [eax], esi
mov dword [eax + 8], esi
lea eax, [esp + 0x148]
mov dword [eax + 4], esi
mov dword [eax], esi
mov dword [eax + 8], esi
lea eax, [esp + 0x138]
mov dword [eax + 4], esi
mov dword [eax], esi
mov dword [eax + 8], esi
lea edi, [esp + 0x168]
push 0x210
push 0xff
push edi
call fcn.005072d0
add esp, 0xc
mov ecx, edi
push dword [0x606fb4]
push ebx
call fcn.00468710
mov ecx, edi
call fcn.004686e0
test al, al
je 0x4315c4
lea ebx, [esp + 0x158]
mov ecx, ebx
lea eax, [esp + 0x170]
push eax
call fcn.0044a990
lea ecx, [esp + 0x148]
push dword [0x606fb4]
call fcn.0044a990
mov ecx, eax
push 0x5c
push 1
call fcn.004de430
movzx edx, byte [esp + 0x163]
test dl, dl
jns 0x43136e
mov edx, dword [esp + 0x15c]
mov ebx, dword [esp + 0x158]
mov ecx, eax
push edx
push ebx
call fcn.004de0e0
cmp byte [esp + 0x143], 0
movzx eax, byte [esp + 0x153]
js 0x43158f
test al, al
mov ebx, dword [ebp + 0xc]
jns 0x4313b4
lea edi, [esp + 0x138]
mov ecx, edi
push dword [esp + 0x14c]
push dword [esp + 0x14c]
call fcn.0044ae10
mov ecx, eax
jmp 0x4313dd
mov eax, dword [esp + 0x150]
mov dword [esp + 0x140], eax
movq xmm0, qword [esp + 0x148]
movq qword [esp + 0x138], xmm0
lea edi, [esp + 0x138]
mov ecx, edi
push dword [0x606fb0]
call fcn.0044afd0
lea eax, [esp + 0x80]
push eax
push esi
push esi
push edi
lea eax, [esp + 0x158]
push eax
push ebx
call fcn.005435e0
add esp, 0x18
test eax, eax
lea edi, [esp + 0x168]
je 0x431583
mov dword [esp + 0x70], 0x5dc490
cmp byte [esp + 0x163], 0
js 0x431442
mov eax, dword [esp + 0x160]
lea ecx, [esp + 0x74]
mov dword [ecx + 8], eax
movq xmm0, qword [esp + 0x158]
movq qword [ecx], xmm0
jmp 0x431459
lea ecx, [esp + 0x74]
push dword [esp + 0x15c]
push dword [esp + 0x15c]
call fcn.004de080
lea eax, [esp + 0x70]
push eax
push esi
push esi
push dword [0x606fb4]
push ebx
call fcn.005436d0
add esp, 0x14
mov dword [esp + 0x70], 0x5dc490
cmp byte [esp + 0x7f], 0
jns 0x43148a
push dword [esp + 0x74]
call fcn.005039aa
add esp, 4
cmp ebx, reloc.OLEAUT32.dll_SysReAllocString
jne 0x431583
mov dword [esp + 0x70], 0x5dc490
cmp byte [esp + 0x163], 0
js 0x4314c5
mov eax, dword [esp + 0x160]
lea ecx, [esp + 0x74]
mov dword [ecx + 8], eax
movq xmm0, qword [esp + 0x158]
movq qword [ecx], xmm0
jmp 0x4314dc
lea ecx, [esp + 0x74]
push dword [esp + 0x15c]
push dword [esp + 0x15c]
call fcn.004de080
push 0x20
call fcn.0050397a
add esp, 4
mov dword [esp + 0x12c], eax
mov dword [esp + 0x134], 0x80000010
mov dword [esp + 0x130], 9
movzx ecx, word [0x5dff1c]
mov word [eax + 0x10], cx
movdqu xmm0, xmmword [str..DEFAULT_]
movdqu xmmword [eax], xmm0
mov word [eax + 0x12], 0
lea ecx, [esp + 0x12c]
push dword [0x606fb4]
call fcn.0044afd0
cmp byte [eax + 0xb], 0
jns 0x43153a
mov eax, dword [eax]
lea ecx, [esp + 0x70]
push ecx
push esi
push esi
push eax
push VariantInit
call fcn.005436d0
add esp, 0x14
cmp byte [esp + 0x137], 0
jns 0x431568
push dword [esp + 0x12c]
call fcn.005039aa
add esp, 4
mov dword [esp + 0x70], 0x5dc490
cmp byte [esp + 0x7f], 0
jns 0x431583
push dword [esp + 0x74]
call fcn.005039aa
add esp, 4
mov ecx, edi
call fcn.004688a0
jmp 0x431312
test al, al
cmovs eax, dword [esp + 0x14c]
mov edx, dword [esp + 0x148]
lea ecx, [esp + 0x148]
cmovns edx, ecx
lea edi, [esp + 0x138]
mov ecx, edi
push eax
push edx
call fcn.0044ad00
mov ecx, eax
mov ebx, dword [ebp + 0xc]
jmp 0x4313dd
lea ecx, [esp + 0x168]
call fcn.00468810
cmp byte [esp + 0x143], 0
jns 0x4315e9
push dword [esp + 0x138]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x153], 0
jns 0x431602
push dword [esp + 0x148]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x163], 0
jns 0x43161b
push dword [esp + 0x158]
call fcn.005039aa
add esp, 4
lea esi, [esp + 0x80]
mov ecx, esi
call fcn.005439c0
lea eax, [esp + 0x168]
push eax
call fcn.00565950
add esp, 4
mov ecx, dword [ebp + 0x10]
movzx eax, byte [ecx + 0xb]
mov edx, ecx
test al, al
jns 0x43164b
mov eax, dword [ecx + 4]
mov edx, dword [ecx]
lea ecx, [esp + 0x168]
push eax
push edx
call fcn.004de0e0
mov edi, eax
mov eax, dword [str.SoftwareRegisteredApplications]
mov dword [esp + 4], eax
push eax
call fcn.00520e34
add esp, 4
cmp eax, 0x7ffffff0
jae 0x4326d3
mov ebx, eax
cmp eax, 5
mov dword [esp], edi
jae 0x4316af
mov byte [esp + 0x8b], bl
cmp ebx, 3
jne 0x43264f
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 4]
mov word [esp + 0x84], ax
mov eax, dword [ecx]
mov dword [esp + 0x80], eax
mov edi, esi
jmp 0x4316f7
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0050397a
add esp, 4
mov edi, eax
mov dword [esp + 0x80], eax
or esi, 0x80000000
mov dword [esp + 0x88], esi
lea esi, [esp + 0x80]
mov dword [esp + 0x84], ebx
mov eax, ebx
add eax, ebx
push eax
push dword [esp + 8]
push edi
call fcn.00506d50
add esp, 0xc
mov word [edi + ebx*2], 0
push dword [esp]
push 0
push esi
push dword [ebp + 0xc]
call fcn.005434d0
add esp, 0x10
cmp byte [esp + 0x8b], 0
jns 0x431727
push dword [esp + 0x80]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x173], 0
jns 0x431740
push dword [esp + 0x168]
call fcn.005039aa
add esp, 4
xor eax, eax
dec eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov edi, dword [str.SoftwareClasses]
push edi
call fcn.00520e34
add esp, 4
cmp eax, 0x7ffffff0
jae 0x4326df
mov ebx, eax
cmp eax, 5
jae 0x431791
lea esi, [esp + 0x64]
mov byte [esi + 0xb], bl
cmp ebx, 3
jne 0x43265e
movzx eax, word [edi + 4]
mov word [esp + 0x68], ax
mov eax, dword [edi]
mov dword [esp + 0x64], eax
jmp 0x4317cc
mov dword [esp], edi
lea edi, [ebx + 8]
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
call fcn.0050397a
add esp, 4
mov esi, eax
mov dword [esp + 0x64], eax
or edi, 0x80000000
mov dword [esp + 0x6c], edi
mov edi, dword [esp]
mov dword [esp + 0x68], ebx
mov eax, ebx
add eax, ebx
push eax
push edi
push esi
call fcn.00506d50
add esp, 0xc
mov word [esi + ebx*2], 0
mov edi, 0x5c
lea esi, [esp + 0x64]
mov ecx, esi
push edi
call fcn.004de330
mov ecx, esi
push str.Applications
call fcn.0044afd0
mov ecx, esi
push edi
call fcn.004de330
mov ecx, esi
push str.chrome.exe
call fcn.0044afd0
push 0
push esi
push dword [ebp + 0xc]
call fcn.00543370
add esp, 0xc
xor eax, eax
dec eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov edi, dword [str.SoftwareMicrosoftWindowsCurrentVersionApp_Paths]
push edi
call fcn.00520e34
add esp, 4
cmp eax, 0x7ffffff0
jae 0x4326e8
mov ebx, eax
cmp eax, 5
jae 0x431862
lea esi, [esp + 0x58]
mov byte [esi + 0xb], bl
cmp ebx, 3
jne 0x43266b
movzx eax, word [edi + 4]
mov word [esp + 0x5c], ax
mov eax, dword [edi]
mov dword [esp + 0x58], eax
jmp 0x43189d
mov dword [esp], edi
lea edi, [ebx + 8]
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
call fcn.0050397a
add esp, 4
mov esi, eax
mov dword [esp + 0x58], eax
or edi, 0x80000000
mov dword [esp + 0x60], edi
mov edi, dword [esp]
mov dword [esp + 0x5c], ebx
mov eax, ebx
add eax, ebx
push eax
push edi
push esi
call fcn.00506d50
add esp, 0xc
mov word [esi + ebx*2], 0
lea esi, [esp + 0x58]
mov ecx, esi
push 0x5c
call fcn.004de330
mov ecx, esi
push str.chrome.exe
call fcn.0044afd0
xor edi, edi
push edi
push esi
push dword [ebp + 0xc]
call fcn.00543370
add esp, 0xc
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x30], edi
cmp dword [str..htm], edi
jne 0x43194c
lea esi, [esp + 0x80]
push esi
call fcn.00565950
add esp, 4
mov ecx, dword [ebp + 0x10]
movzx eax, byte [ecx + 0xb]
mov edx, ecx
test al, al
jns 0x431919
mov eax, dword [ecx + 4]
mov edx, dword [ecx]
mov ecx, esi
push eax
push edx
call fcn.004de0e0
lea ecx, [esp + 0x16c]
mov dword [ecx - 4], 0x5dc490
cmp byte [eax + 0xb], 0
mov esi, dword [ebp + 0xc]
jns 0x431a9f
push dword [eax + 4]
push dword [eax]
call fcn.004de080
jmp 0x431aad
mov edi, 0x606fe4
lea ebx, [esp + 0x48]
mov ecx, ebx
push dword [0x606fb8]
call fcn.0044a990
mov ecx, ebx
mov esi, 0x5c
push esi
call fcn.004de330
mov ecx, ebx
push dword [edi - 4]
call fcn.0044afd0
mov ecx, ebx
push esi
call fcn.004de330
cmp byte [esp + 0x43], 0
movzx eax, byte [esp + 0x53]
js 0x431a5e
test al, al
lea esi, [esp + 0x38]
jns 0x4319aa
mov ecx, esi
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.0044ae10
jmp 0x4319be
mov eax, dword [esp + 0x50]
mov dword [esp + 0x40], eax
movq xmm0, qword [esp + 0x48]
movq qword [esp + 0x38], xmm0
lea ebx, [esp + 0x28]
mov ecx, esi
push str.OpenWithList
call fcn.0044afd0
mov ecx, esi
push 0x5c
call fcn.004de330
mov ecx, esi
push str.chrome.exe
call fcn.0044afd0
push 0
push esi
push dword [ebp + 0xc]
call fcn.00404d30
add esp, 0xc
cmp byte [esp + 0x33], 0
movzx eax, byte [esp + 0x53]
js 0x431a82
test al, al
jns 0x431a16
mov ecx, ebx
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.0044ae10
jmp 0x431a2a
mov eax, dword [esp + 0x50]
mov dword [esp + 0x30], eax
movq xmm0, qword [esp + 0x48]
movq qword [esp + 0x28], xmm0
mov ecx, ebx
push dword [0x607084]
call fcn.0044afd0
lea eax, [esp + 0x108]
push eax
push 0
push ebx
push dword [ebp + 0xc]
call fcn.005434d0
add esp, 0x10
cmp dword [edi], 0
lea edi, [edi + 4]
jne 0x431951
jmp 0x4318f7
test al, al
cmovs eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
lea ecx, [esp + 0x48]
cmovns edx, ecx
lea esi, [esp + 0x38]
mov ecx, esi
push eax
push edx
call fcn.0044ad00
jmp 0x4319be
test al, al
cmovs eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
lea ecx, [esp + 0x48]
cmovns edx, ecx
mov ecx, ebx
push eax
push edx
call fcn.0044ad00
jmp 0x431a2a
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
movq xmm0, qword [eax]
movq qword [ecx], xmm0
xor eax, eax
lea ecx, [esp + 0x168]
push ecx
push eax
push eax
push dword [0x606fb4]
push esi
call fcn.005436d0
add esp, 0x14
mov dword [esp + 0x168], 0x5dc490
cmp byte [esp + 0x177], 0
jns 0x431aec
push dword [esp + 0x16c]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x8b], 0
jns 0x431b05
push dword [esp + 0x80]
call fcn.005039aa
add esp, 4
pcmpeqd xmm0, xmm0
lea ecx, [esp + 0x80]
movdqa xmmword [ecx + 0x50], xmm0
movdqa xmmword [ecx + 0x40], xmm0
movdqa xmmword [ecx + 0x30], xmm0
movdqa xmmword [ecx + 0x20], xmm0
movdqa xmmword [ecx + 0x10], xmm0
movdqa xmmword [ecx], xmm0
lea eax, [esp + 0x114]
push eax
call fcn.00543840
xor eax, eax
dec eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov esi, dword [str.SoftwareClasses]
push esi
call fcn.00520e34
add esp, 4
cmp eax, 0x7ffffff0
jae 0x4326f1
mov ebx, eax
cmp eax, 5
jae 0x431b8b
lea edi, [esp + 0x1c]
mov byte [edi + 0xb], bl
cmp ebx, 3
jne 0x432678
movzx eax, word [esi + 4]
mov word [esp + 0x20], ax
mov eax, dword [esi]
mov dword [esp + 0x1c], eax
jmp 0x431bc6
mov dword [esp], esi
lea esi, [ebx + 8]
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
call fcn.0050397a
add esp, 4
mov edi, eax
mov dword [esp + 0x1c], eax
or esi, 0x80000000
mov dword [esp + 0x24], esi
mov esi, dword [esp]
mov dword [esp + 0x20], ebx
mov eax, ebx
add eax, ebx
push eax
push esi
push edi
call fcn.00506d50
add esp, 0xc
mov word [edi + ebx*2], 0
lea ebx, [esp + 0x1c]
mov ecx, ebx
push 0x5c
call fcn.004de330
movzx eax, byte [ebx + 0xb]
mov dword [esp], eax
test al, al
jns 0x431beb
mov eax, dword [esp + 0x20]
mov dword [esp], eax
xor esi, esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x18], esi
cmp dword [0x607014], esi
jne 0x431c5a
xor eax, eax
dec eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov esi, dword [str.SoftwareClasses]
push esi
call fcn.00520e34
add esp, 4
cmp eax, 0x7ffffff0
jae 0x4326fa
mov ebx, eax
cmp eax, 5
lea edi, [esp + 0x70]
jae 0x431d08
mov byte [esp + 0x7b], bl
cmp ebx, 3
jne 0x432685
movzx eax, word [esi + 4]
mov word [esp + 0x74], ax
mov eax, dword [esi]
mov dword [esp + 0x70], eax
jmp 0x431d3d
mov edi, 0x607018
mov ecx, ebx
push 0
push dword [esp + 4]
call fcn.004de750
mov ecx, ebx
push dword [edi - 4]
call fcn.0044afd0
cmp byte [esp + 0x1b], 0
movzx eax, byte [esp + 0x27]
js 0x431ceb
test al, al
lea ebx, [esp + 0x10]
jns 0x431c9d
mov ecx, ebx
push dword [esp + 0x20]
push dword [esp + 0x20]
call fcn.0044ae10
mov ecx, eax
jmp 0x431cb3
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
movq xmm0, qword [esp + 0x1c]
movq qword [esp + 0x10], xmm0
mov ecx, ebx
push dword [0x606fb0]
call fcn.0044afd0
lea eax, [esp + 0x80]
push eax
push esi
push esi
push ebx
lea ebx, [esp + 0x2c]
push ebx
push dword [ebp + 0xc]
call fcn.005435e0
add esp, 0x18
lea eax, [edi + 4]
cmp dword [edi], esi
mov edi, eax
jne 0x431c5f
jmp 0x431c01
test al, al
cmovs eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
cmovns edx, ebx
lea ebx, [esp + 0x10]
mov ecx, ebx
push eax
push edx
call fcn.0044ad00
jmp 0x431c99
lea edi, [ebx + 8]
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
call fcn.0050397a
add esp, 4
mov dword [esp + 0x70], eax
or edi, 0x80000000
mov dword [esp + 0x78], edi
mov edi, eax
mov dword [esp + 0x74], ebx
mov eax, ebx
add eax, ebx
push eax
push esi
push edi
call fcn.00506d50
add esp, 0xc
mov word [edi + ebx*2], 0
lea ecx, [esp + 0x70]
push 0x5c
call fcn.004de330
lea esi, [esp + 0x158]
xor eax, eax
dec eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
call fcn.0046e4f0
mov edi, dword [ebp + 0x10]
push edi
push eax
push esi
call fcn.00536750
add esp, 0xc
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov ecx, dword [ebp + 8]
call fcn.00453100
test al, al
mov ebx, dword [ebp + 0xc]
jne 0x431dac
movzx eax, byte [edi + 0xb]
test al, al
jns 0x431da4
mov eax, dword [edi + 4]
test eax, eax
je 0x432073
xor eax, eax
dec eax
mov dword [esp + 0x174], eax
mov dword [esp + 0x170], eax
mov dword [esp + 0x16c], eax
mov dword [esp + 0x168], 0x5dc490
cmp byte [esp + 0x163], 0
js 0x431df9
mov eax, dword [esp + 0x160]
lea ecx, [esp + 0x16c]
mov dword [ecx + 8], eax
movq xmm0, qword [esp + 0x158]
movq qword [ecx], xmm0
jmp 0x431e13
lea ecx, [esp + 0x16c]
push dword [esp + 0x15c]
push dword [esp + 0x15c]
call fcn.004de080
mov edi, dword [str..htm]
test edi, edi
je 0x432047
mov dword [esp + 4], str..htm
xor ecx, ecx
mov dword [esp + 8], ecx
xor eax, eax
mov dword [esp + 0x13c], eax
mov dword [esp + 0x138], eax
mov dword [esp + 0x140], eax
movzx ebx, byte [esp + 0x7b]
mov eax, ebx
test bl, bl
jns 0x431e55
mov eax, dword [esp + 0x74]
mov dword [esp], eax
push edi
call fcn.00520e34
add esp, 4
mov ecx, eax
lea edx, [esp + 0x70]
test bl, bl
jns 0x431e6f
mov edx, dword [esp + 0x70]
mov eax, dword [esp]
lea esi, [eax + ecx]
cmp esi, 0x7ffffff0
jae 0x432692
mov dword [esp + 0xc], edi
mov ebx, ecx
cmp esi, 4
ja 0x431e9c
mov byte [esp + 0x143], al
lea edi, [esp + 0x138]
jmp 0x431ed2
add esi, 8
and esi, 0xfffffff8
lea eax, [esi + esi]
push eax
mov edi, edx
call fcn.0050397a
mov edx, edi
add esp, 4
mov edi, eax
mov eax, dword [esp]
mov dword [esp + 0x138], edi
or esi, 0x80000000
mov dword [esp + 0x140], esi
mov dword [esp + 0x13c], eax
test eax, eax
je 0x431eea
mov eax, dword [esp]
add eax, eax
push eax
push edx
push edi
call fcn.00506d50
mov eax, dword [esp + 0xc]
add esp, 0xc
mov word [edi + eax*2], 0
lea esi, [esp + 0x138]
mov ecx, esi
push ebx
push dword [esp + 0x10]
call fcn.004de0e0
cmp byte [esp + 0x143], 0
jns 0x431f14
mov esi, dword [esp + 0x138]
lea ecx, [esp + 0x168]
push ecx
xor ecx, ecx
push ecx
push ecx
push esi
mov ebx, dword [ebp + 0xc]
push ebx
call fcn.005436d0
add esp, 0x14
mov edi, eax
cmp byte [esp + 0x143], 0
jns 0x431f48
push dword [esp + 0x138]
call fcn.005039aa
add esp, 4
cmp edi, 1
jne 0x431f71
mov ecx, dword [esp + 8]
cmp ecx, dword [esp + 0x150]
je 0x431f7a
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov dword [ecx], eax
add ecx, 4
mov dword [esp + 0x14c], ecx
jmp 0x43202f
mov ecx, dword [esp + 8]
jmp 0x43202f
mov edx, dword [esp + 0x148]
sub ecx, edx
mov ebx, ecx
sar ebx, 2
lea eax, [ebx + 1]
cmp eax, 0x40000000
jae 0x4326aa
mov esi, ecx
sar esi, 1
cmp esi, eax
cmovbe esi, eax
cmp ecx, 0x7ffffffc
mov eax, 0x3fffffff
cmovae esi, eax
test esi, esi
mov dword [esp], edx
je 0x431fdf
mov dword [esp + 8], ecx
cmp esi, 0x40000000
jae 0x4326b6
lea eax, [esi*4]
push eax
call fcn.0050397a
add esp, 4
mov edi, eax
mov ecx, dword [esp + 8]
mov edx, dword [esp]
jmp 0x431fe1
xor edi, edi
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov dword [edi + ebx*4], eax
test ecx, ecx
jle 0x431ffd
push ecx
push edx
push edi
call fcn.00506d50
mov edx, dword [esp + 0xc]
add esp, 0xc
lea eax, [edi + esi*4]
lea ecx, [edi + ebx*4]
add ecx, 4
mov dword [esp + 0x148], edi
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x150], eax
test edx, edx
je 0x43202c
push edx
mov esi, ecx
call fcn.005039aa
mov ecx, esi
add esp, 4
mov ebx, dword [ebp + 0xc]
mov eax, dword [esp + 4]
mov edi, dword [eax + 4]
add eax, 4
mov dword [esp + 4], eax
test edi, edi
jne 0x431e2b
jmp 0x432049
xor ecx, ecx
mov dword [esp + 0x168], 0x5dc490
cmp byte [esp + 0x177], 0
jns 0x4320d8
push dword [esp + 0x16c]
mov esi, ecx
call fcn.005039aa
mov ecx, esi
add esp, 4
jmp 0x4320d8
lea edi, [esp + 0x138]
push esi
lea eax, [esp + 0x74]
push eax
push edi
call fcn.00435360
add esp, 0xc
cmp byte [edi + 0xb], 0
jns 0x432096
mov edi, dword [esp + 0x138]
lea esi, [esp + 0x168]
mov ecx, esi
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00467dc0
mov edi, dword [esi]
mov ecx, esi
call fcn.00467f60
cmp byte [esp + 0x143], 0
jns 0x4320ce
push dword [esp + 0x138]
call fcn.005039aa
add esp, 4
xor ecx, ecx
test edi, edi
je 0x431dac
cmp ebx, reloc.OLEAUT32.dll_SysReAllocString
je 0x4320ee
mov esi, dword [esp + 0x148]
mov eax, esi
jmp 0x4324da
xor eax, eax
mov dword [esp + 0x13c], eax
mov dword [esp + 0x138], eax
mov dword [esp + 0x140], eax
mov esi, ecx
lea ecx, [esp + 0x12c]
xor eax, eax
dec eax
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
call fcn.00463100
mov ecx, esi
mov esi, dword [esp + 0x148]
cmp ecx, esi
je 0x4324b1
lea edi, [esp + 0x138]
xor ebx, ebx
mov ecx, edi
push dword [esi + ebx*4]
call fcn.0044a990
mov al, byte [esp + 0x143]
test al, al
mov ecx, dword [esp + 0x13c]
movzx edx, al
mov esi, edx
cmovs esi, ecx
cmp esi, 4
jne 0x43218a
mov ecx, edi
push 4
push str..htm
push 0xffffffffffffffff
push 0
call fcn.0044af50
test eax, eax
je 0x43227a
mov al, byte [esp + 0x143]
mov ecx, dword [esp + 0x13c]
movzx edx, al
test al, al
mov esi, edx
cmovs esi, ecx
cmp esi, 5
jne 0x4321c1
mov ecx, edi
push 5
push str..html
push 0xffffffffffffffff
push 0
call fcn.0044af50
test eax, eax
je 0x43227a
mov al, byte [esp + 0x143]
mov ecx, dword [esp + 0x13c]
movzx edx, al
test al, al
mov esi, edx
cmovs esi, ecx
cmp esi, 4
jne 0x4321f8
mov ecx, edi
push 4
push str..xht
push 0xffffffffffffffff
push 0
call fcn.0044af50
test eax, eax
je 0x432287
mov al, byte [esp + 0x143]
mov ecx, dword [esp + 0x13c]
movzx edx, al
test al, al
cmovs edx, ecx
cmp edx, 6
jne 0x432218
mov ecx, edi
push 6
push str..xhtml
push 0xffffffffffffffff
push 0
call fcn.0044af50
test eax, eax
je 0x432287
push 1
call fcn.004e0f90
add esp, 4
test al, al
je 0x432431
lea esi, [esp + 0x168]
mov ecx, esi
push 1
push 0x1bd
push str..._.._chrome_installer_setup_uninstall.cc
call fcn.0045d3f0
push 0x20
push str.No_known_replacement_ProgID_for
lea eax, [esp + 0x178]
push eax
call fcn.005364d0
add esp, 0xc
push edi
push eax
call fcn.0045dbd0
add esp, 8
push 7
push str._files.
push eax
call fcn.005364d0
add esp, 0xc
jmp 0x4324a8
mov dword [esp + 4], ebx
mov dword [esp], str.htmlfile
jmp 0x432292
mov dword [esp + 4], ebx
mov dword [esp], str.xhtmlfile
xor eax, eax
mov dword [esp + 0x16c], eax
mov dword [esp + 0x168], eax
mov dword [esp + 0x170], eax
movzx ebx, byte [esp + 0x7b]
mov esi, ebx
test bl, bl
jns 0x4322b8
mov esi, dword [esp + 0x74]
push dword [esp]
call fcn.00520e34
add esp, 4
mov ecx, eax
lea edx, [esp + 0x70]
test bl, bl
jns 0x4322d1
mov edx, dword [esp + 0x70]
lea edi, [esi + ecx]
cmp edi, 0x7ffffff0
jae 0x43269e
mov ebx, esi
cmp edi, 4
mov dword [esp + 8], ecx
ja 0x4322fb
mov byte [esp + 0x173], bl
lea esi, [esp + 0x168]
jmp 0x43232e
add edi, 8
and edi, 0xfffffff8
lea eax, [edi + edi]
push eax
mov esi, edx
call fcn.0050397a
mov edx, esi
add esp, 4
mov esi, eax
mov dword [esp + 0x168], eax
or edi, 0x80000000
mov dword [esp + 0x170], edi
mov dword [esp + 0x16c], ebx
lea edi, [esp + 0x138]
test ebx, ebx
je 0x432347
lea eax, [ebx + ebx]
push eax
push edx
push esi
call fcn.00506d50
add esp, 0xc
mov word [esi + ebx*2], 0
lea esi, [esp + 0x168]
mov ecx, esi
push dword [esp + 8]
push dword [esp + 4]
call fcn.004de0e0
cmp byte [esp + 0x173], 0
jns 0x432374
mov esi, dword [esp + 0x168]
lea ecx, [esp + 0x12c]
push 1
push esi
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00467ef0
test eax, eax
je 0x432390
xor ebx, ebx
jmp 0x432402
push edi
lea eax, [esp + 0x74]
push eax
lea esi, [esp + 0x128]
push esi
call fcn.00435360
add esp, 0xc
cmp byte [esp + 0x12b], 0
mov eax, esi
jns 0x4323b9
mov eax, dword [esp + 0x120]
lea ecx, [esp + 0x12c]
push 2
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00467ef0
mov bl, 1
test eax, eax
jne 0x4323e9
lea ecx, [esp + 0x12c]
push dword [esp]
push 0
call fcn.004683e0
test eax, eax
setne bl
cmp byte [esp + 0x12b], 0
jns 0x432402
push dword [esp + 0x120]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x173], 0
jns 0x43241b
push dword [esp + 0x168]
call fcn.005039aa
add esp, 4
test bl, bl
mov ebx, dword [esp + 4]
je 0x432431
push 2
call fcn.004e0f90
add esp, 4
test al, al
jne 0x432451
inc ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
sub eax, esi
sar eax, 2
mov ecx, esi
cmp ebx, eax
jb 0x432138
jmp 0x4324b1
lea esi, [esp + 0x168]
mov ecx, esi
push 2
push 0x1c8
push str..._.._chrome_installer_setup_uninstall.cc
call fcn.0045d3f0
push 0x34
push str.Failed_to_restore_system_level_filetype_association
lea eax, [esp + 0x178]
push eax
call fcn.005364d0
add esp, 0xc
push edi
push eax
call fcn.0045dbd0
add esp, 8
push 3
push 0x5e02e0
push eax
call fcn.005364d0
add esp, 0xc
push dword [esp]
push eax
call fcn.0055e150
add esp, 8
mov ecx, esi
call fcn.0045d7d0
jmp 0x432431
mov edi, ecx
lea ecx, [esp + 0x12c]
call fcn.00467f60
cmp byte [esp + 0x143], 0
jns 0x4324d8
push dword [esp + 0x138]
call fcn.005039aa
add esp, 4
mov eax, edi
test eax, eax
je 0x4324e7
push esi
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x163], 0
jns 0x432500
push dword [esp + 0x158]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x7b], 0
jns 0x432513
push dword [esp + 0x70]
call fcn.005039aa
add esp, 4
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x13
cmp byte [esp + 0x1b], 0
jns 0x43252f
push dword [esp + 0x10]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x27], 0
jns 0x432542
push dword [esp + 0x1c]
call fcn.005039aa
add esp, 4
lea ecx, [esp + 0x80]
call fcn.005439c0
cmp byte [esp + 0x33], 0
jns 0x432561
push dword [esp + 0x28]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x43], 0
jns 0x432574
push dword [esp + 0x38]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x53], 0
jns 0x432587
push dword [esp + 0x48]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x43259a
push dword [esp + 0x58]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x6f], 0
jns 0x4325ad
push dword [esp + 0x64]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0xef], 0
jns 0x4325c6
push dword [esp + 0xe4]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0xfb], 0
jns 0x4325df
push dword [esp + 0xf0]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x107], 0
jns 0x4325f8
push dword [esp + 0xfc]
call fcn.005039aa
add esp, 4
cmp byte [esp + 0x113], 0
jns 0x432611
push dword [esp + 0x108]
call fcn.005039aa
add esp, 4
lea ecx, [esp + 0x114]
call fcn.004dfb00
mov ecx, dword [esp + 0x378]
xor ecx, ebp
call fcn.00504b53
mov al, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
test ebx, ebx
jne 0x431088
jmp 0x431097
test ebx, ebx
jne 0x43117f
jmp 0x43118e
mov edi, esi
test ebx, ebx
jne 0x4316e5
jmp 0x4316f7
test ebx, ebx
jne 0x4317bd
jmp 0x4317cc
test ebx, ebx
jne 0x43188e
jmp 0x43189d
test ebx, ebx
jne 0x431bb7
jmp 0x431bc6
test ebx, ebx
jne 0x431d2e
jmp 0x431d3d
lea ecx, [esp + 0x138]
call fcn.0055adb0
lea ecx, [esp + 0x168]
call fcn.0055adb0
lea ecx, [esp + 0x148]
call fcn.00536260
call fcn.00518ff0
lea ecx, [esp + 0xfc]
call fcn.0055adb0
lea ecx, [esp + 0xf0]
call fcn.0055adb0
lea ecx, [esp + 0x80]
call fcn.0055adb0
lea ecx, [esp + 0x64]
call fcn.0055adb0
lea ecx, [esp + 0x58]
call fcn.0055adb0
lea ecx, [esp + 0x1c]
call fcn.0055adb0
lea ecx, [esp + 0x70]
call fcn.0055adb0
int3