Function at 0x44ef50
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2d8
push esi
mov eax, dword [ebp + 8]
mov dword [eax], 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0
lea ecx, [ebp - 0x18]
call fcn.004524b0
lea ecx, [ebp - 0x38]
call fcn.00451e90
lea edx, [ebp - 0x94]
push edx
call fcn.004444e0
add esp, 4
push eax
mov ecx, dword [ebp + 0x10]
call fcn.0041c8e0
lea ecx, [ebp - 0x94]
call fcn.0040f740
mov ecx, dword [ebp + 0x10]
call fcn.004a5b10
push ecx
mov ecx, esp
push 0x57f20c
call fcn.0041c8a0
push ecx
push esp
lea ecx, [ebp - 0x18]
call fcn.00452e20
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
call fcn.00452750
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44eff9
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44eff9
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 1
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.iexplore.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44f022
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 1
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 1
push 0
push ecx
mov ecx, esp
push str.SoftwareRuanMeiSaaYaa3
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44f102
push ecx
mov ecx, esp
push 0x57f29c
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x57f2a0
call fcn.0041c8a0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xac]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44f0d3
push ecx
mov ecx, esp
push str.SaaYaa.exe
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x18]
call fcn.00452750
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xb8]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44f102
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44f102
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 2
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.saayaa.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44f12b
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 2
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 2
push 0
push ecx
mov ecx, esp
push str.SoftwareMaxthon3
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44f20b
push ecx
mov ecx, esp
push 0x57f30c
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Folder
call fcn.0041c8a0
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xc8]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44f1dc
push ecx
mov ecx, esp
push str.binMaxthon.exe
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x18]
call fcn.00452750
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xd4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44f20b
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44f20b
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 4
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.maxthon.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44f234
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 4
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 4
push 0
push ecx
mov ecx, esp
push 0x57f358
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44f407
lea ecx, [ebp - 0x1c]
call fcn.0041cb30
lea ecx, [ebp - 0x44]
call fcn.004b2990
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x38]
call fcn.004550f0
lea ecx, [ebp - 0x5c]
call fcn.00451e90
mov dword [ebp - 0x60], 0
jmp 0x44f293
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
lea ecx, [ebp - 0x44]
call fcn.004b2b30
cmp dword [ebp - 0x60], eax
jge 0x44f3bb
push 0
mov edx, dword [ebp - 0x60]
push edx
lea ecx, [ebp - 0x44]
call fcn.004b2c50
push ecx
mov esi, esp
push eax
push 0x57f3a0
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x38]
call fcn.004a52c0
push eax
lea ecx, [ebp - 0xe8]
push ecx
call fcn.0041ca60
add esp, 0xc
push eax
push esi
call fcn.0041ca00
add esp, 0xc
push SysReAllocString
lea ecx, [ebp - 0x5c]
call fcn.00451fe0
mov dword [ebp - 0xdc], eax
lea ecx, [ebp - 0xe8]
call fcn.0040f740
lea ecx, [ebp - 0xe4]
call fcn.0040f740
cmp dword [ebp - 0xdc], 0
je 0x44f3b6
push ecx
mov ecx, esp
push 0x57f3a4
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x57f3a8
call fcn.0041c8a0
lea edx, [ebp - 0xf4]
push edx
lea ecx, [ebp - 0x5c]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0xf4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x44f368
jmp 0x44f3bb
push ecx
mov ecx, esp
push 0x57f3e4
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x57f3e8
call fcn.0041c8a0
lea ecx, [ebp - 0x100]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x100]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx edx, al
test edx, edx
jne 0x44f3b6
jmp 0x44f3bb
jmp 0x44f28a
push 0x57f42c
lea ecx, [ebp - 0x1c]
call fcn.004a5d30
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x44f3f7
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44f3f7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 8
mov eax, dword [ebp + 8]
mov dword [eax], edx
lea ecx, [ebp - 0x5c]
call fcn.00451f50
lea ecx, [ebp - 0x44]
call fcn.004ea9f0
call fcn.00451f00
test eax, eax
je 0x44f431
push 0
push ecx
mov ecx, esp
push 0x57f430
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x44f450
push 0
push ecx
mov ecx, esp
push str.SoftwareGoogleUpdateClientState
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44f62d
lea ecx, [ebp - 0x1c]
call fcn.0041cb30
lea ecx, [ebp - 0x6c]
call fcn.004b2990
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004550f0
lea ecx, [ebp - 0x84]
call fcn.00451e90
lea ecx, [ebp - 0x84]
call fcn.00451f70
mov dword [ebp - 0x88], 0
jmp 0x44f4a7
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
lea ecx, [ebp - 0x6c]
call fcn.004b2b30
cmp dword [ebp - 0x88], eax
jge 0x44f5de
push 0
mov eax, dword [ebp - 0x88]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004b2c50
push ecx
mov esi, esp
push eax
push 0x57f4d8
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004a52c0
push eax
lea edx, [ebp - 0x118]
push edx
call fcn.0041ca60
add esp, 0xc
push eax
push esi
call fcn.0041ca00
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x84]
call fcn.00451fe0
mov dword [ebp - 0x10c], eax
lea ecx, [ebp - 0x118]
call fcn.0040f740
lea ecx, [ebp - 0x114]
call fcn.0040f740
cmp dword [ebp - 0x10c], 0
je 0x44f5d9
push ecx
mov ecx, esp
push 0x57f4dc
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x57f4e0
call fcn.0041c8a0
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x84]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x124]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44f588
jmp 0x44f5de
push ecx
mov ecx, esp
push 0x57f51c
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.LastInstallerSuccessLaunchCmdLine
call fcn.0041c8a0
lea edx, [ebp - 0x130]
push edx
lea ecx, [ebp - 0x84]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x130]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x44f5d9
jmp 0x44f5de
jmp 0x44f498
push 0x57f564
lea ecx, [ebp - 0x1c]
call fcn.004a5d30
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44f61a
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44f61a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 8
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
lea ecx, [ebp - 0x84]
call fcn.00451f50
lea ecx, [ebp - 0x6c]
call fcn.004ea9f0
call fcn.00451f00
test eax, eax
je 0x44f657
push 0
push ecx
mov ecx, esp
push 0x57f568
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x44f676
push 0
push ecx
mov ecx, esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallGoogle_Chrome
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44f6f0
lea ecx, [ebp - 0x1c]
call fcn.0041cb30
push ecx
mov ecx, esp
push 0x57f604
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x57f68c
call fcn.0041c8a0
lea edx, [ebp - 0x144]
push edx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x144]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x44f6f0
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44f6f0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 8
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push str.chrome.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44f719
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 8
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 8
call fcn.00451f00
test eax, eax
je 0x44f743
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeSogouExplorer
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x44f762
push 0
push ecx
mov ecx, esp
push str.SOFTWARESogouExplorer
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44f823
push ecx
mov ecx, esp
push 0x57f6c4
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x57f740
call fcn.0041c8a0
lea edx, [ebp - 0x158]
push edx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x158]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x44f7f4
push ecx
mov ecx, esp
push 0x57f744
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x18]
call fcn.00452750
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x164]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44f823
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44f823
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x10
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.sogouexplorer.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jge 0x44f849
push 0
push str.sogoue1.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44f85f
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x10
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x10
call fcn.00451f00
test eax, eax
je 0x44f889
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeMozillaMozilla_Firefox
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x44f8a8
push 0
push ecx
mov ecx, esp
push str.SOFTWAREMozillaMozilla_Firefox
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44fa0d
push ecx
mov ecx, esp
push 0x57f804
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x57f84c
call fcn.0041c8a0
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
lea ecx, [ebp - 0x8c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44f9d3
call fcn.00451f00
test eax, eax
je 0x44f946
push 0
push ecx
mov esi, esp
push 0x57f86c
lea edx, [ebp - 0x8c]
push edx
push str.SOFTWAREWow6432NodeMozillaMozilla_Firefox_
lea eax, [ebp - 0x17c]
push eax
call fcn.004a6030
add esp, 0xc
push eax
push esi
call fcn.0041ca60
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x17c]
call fcn.0040f740
jmp 0x44f990
push 0
push ecx
mov esi, esp
push str.Main
lea ecx, [ebp - 0x8c]
push ecx
push str.SOFTWAREMozillaMozilla_Firefox_
lea edx, [ebp - 0x184]
push edx
call fcn.004a6030
add esp, 0xc
push eax
push esi
call fcn.0041ca60
add esp, 0xc
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x184]
call fcn.0040f740
cmp dword [ebp - 0x20], 0
je 0x44f9d3
push ecx
mov ecx, esp
push 0x57f924
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.PathToExe
call fcn.0041c8a0
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x190]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44fa02
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44fa02
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x20
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
lea ecx, [ebp - 0x8c]
call fcn.0040f740
push 0
push str.firefox.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44fa36
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x20
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x20
call fcn.00451f00
test eax, eax
je 0x44fa60
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeApple_Computer__Inc.Safari
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x44fa7f
push 0
push ecx
mov ecx, esp
push str.SOFTWAREApple_Computer__Inc.Safari
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44faf1
push ecx
mov ecx, esp
push 0x57f954
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.BrowserExe
call fcn.0041c8a0
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1a4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44faf1
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44faf1
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x40
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.safari.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44fb1a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x40
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x40
push 0
push ecx
mov ecx, esp
push str.SoftwareOpera_Software
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44fc87
push ecx
mov ecx, esp
push 0x57f9ec
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Last_Install_Path
call fcn.0041c8a0
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1b4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
je 0x44fbcc
push ecx
mov ecx, esp
push 0x57fa90
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Last_Stable_Install_Path
call fcn.0041c8a0
lea edx, [ebp - 0x1c0]
push edx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1c0]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x44fc87
push ecx
mov ecx, esp
push 0x57fac8
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x18]
call fcn.00452750
push ecx
mov ecx, esp
push 0x57fadc
call fcn.0041c8a0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0041c880
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x18]
call fcn.00452750
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1d4]
call fcn.0040f740
lea ecx, [ebp - 0x90]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x44fc6c
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44fc7c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x80
mov eax, dword [ebp + 8]
mov dword [eax], edx
lea ecx, [ebp - 0x90]
call fcn.0040f740
push 0
push str.launcher.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jge 0x44fcad
push 0
push str.opera.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44fcc6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x80
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x80
call fcn.00451f00
test eax, eax
je 0x44fcf0
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionUninstall23F3F476_BE34_4f48_9C77_2806A8393EC4
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x44fd0f
push 0
push ecx
mov ecx, esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall23F3F476_BE34_4f48_9C77_2806A8393EC4
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44fd84
push ecx
mov ecx, esp
push 0x57fcb0
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.DisplayIcon
call fcn.0041c8a0
lea edx, [ebp - 0x1e8]
push edx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1e8]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x44fd84
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44fd84
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x100
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push ecx
mov ecx, esp
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall360se6
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44fe70
push ecx
mov ecx, esp
push 0x57fccc
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.InstallLocation
call fcn.0041c8a0
lea ecx, [ebp - 0x1f8]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x1f8]
call fcn.0040f740
push 0x57fd68
push 1
lea edx, [ebp - 0x200]
push edx
lea ecx, [ebp - 0x1c]
call fcn.004a5fc0
push eax
call fcn.004a60d0
add esp, 8
mov byte [ebp - 0x1f9], al
lea ecx, [ebp - 0x200]
call fcn.0040f740
movzx eax, byte [ebp - 0x1f9]
test eax, eax
je 0x44fe32
push 0x57fd6c
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x57fd70
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x44fe70
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44fe70
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x100
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.360se.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44fe9b
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x100
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], pe_nt_image_headers32
push 0
push ecx
mov ecx, esp
push str.Software360chromechrome
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44ff88
push ecx
mov ecx, esp
push 0x57fdcc
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.last_install_path
call fcn.0041c8a0
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x210]
call fcn.0040f740
push 0x57fdf4
push 1
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.004a5fc0
push eax
call fcn.004a60d0
add esp, 8
mov byte [ebp - 0x211], al
lea ecx, [ebp - 0x218]
call fcn.0040f740
movzx edx, byte [ebp - 0x211]
test edx, edx
je 0x44ff49
push 0x57fdf8
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push str.360ChromeChromeApplication360chrome.exe
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x44ff88
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44ff88
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x400
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push 0x57fdfc
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x44ffb4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x400
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x400
call fcn.00451f00
test eax, eax
je 0x44ffde
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432Nodeliebao
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x44fffd
push 0
push ecx
mov ecx, esp
push str.SOFTWAREliebao
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4500d7
push ecx
mov ecx, esp
push 0x57fec8
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Install_Path_Dir
call fcn.0041c8a0
lea edx, [ebp - 0x22c]
push edx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x22c]
call fcn.0040f740
push ecx
mov ecx, esp
push str.LBBrowserliebao.exe
call fcn.0041c8a0
push ecx
mov ecx, esp
lea eax, [ebp - 0x1c]
push eax
call fcn.0041c880
lea ecx, [ebp - 0x238]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00452750
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x238]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4500a5
push 0x57ff1c
push str.LBBrowser_
lea ecx, [ebp - 0x1c]
call fcn.004a5780
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx edx, al
test edx, edx
jne 0x4500d7
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4500d7
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x200
mov edx, dword [ebp + 8]
mov dword [edx], ecx
push 0
push str.liebao.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x450103
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x200
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x200
push 0
push ecx
mov ecx, esp
push str.Softwarehao123JuziBrowser
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4501ef
push ecx
mov ecx, esp
push 0x57ff88
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.lastinstpath
call fcn.0041c8a0
lea ecx, [ebp - 0x248]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x248]
call fcn.0040f740
push 0x57ffa8
push 1
lea edx, [ebp - 0x250]
push edx
lea ecx, [ebp - 0x1c]
call fcn.004a5fc0
push eax
call fcn.004a60d0
add esp, 8
mov byte [ebp - 0x249], al
lea ecx, [ebp - 0x250]
call fcn.0040f740
movzx eax, byte [ebp - 0x249]
test eax, eax
je 0x4501b1
push 0x57ffac
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x57ffb0
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x4501ef
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4501ef
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x800
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.hao123juzi.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x45021a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x800
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x800
push 0
push ecx
mov ecx, esp
push str.SoftwareTencentQQBrowser
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x450307
push ecx
mov ecx, esp
push 0x580028
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x58002c
call fcn.0041c8a0
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x260]
call fcn.0040f740
push 0x580030
push 1
lea ecx, [ebp - 0x268]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.004a5fc0
push eax
call fcn.004a60d0
add esp, 8
mov byte [ebp - 0x261], al
lea ecx, [ebp - 0x268]
call fcn.0040f740
movzx edx, byte [ebp - 0x261]
test edx, edx
je 0x4502c8
push 0x580034
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x580038
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x450307
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x450307
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x1000
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push str.qqbrowser.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jge 0x45032d
push 0
push str.qqbrow1.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x450346
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x1000
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x1000
push 0
push ecx
mov ecx, esp
push str.SoftwareTheWorld6
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4503e7
push ecx
mov ecx, esp
push 0x5800b4
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.InstallerSuccessLaunchCmdLine
call fcn.0041c8a0
lea edx, [ebp - 0x278]
push edx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x278]
call fcn.0040f740
push 0x5800f4
lea ecx, [ebp - 0x1c]
call fcn.004a5d30
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x4503e7
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4503e7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x2000
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push 0x5800f8
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x450413
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x2000
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x2000
call fcn.00451f00
test eax, eax
je 0x45043d
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432Node2345Explorer
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x45045c
push 0
push ecx
mov ecx, esp
push str.SOFTWARE2345Explorer
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x45052a
push ecx
mov ecx, esp
push 0x580184
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.Path
call fcn.0041c8a0
lea edx, [ebp - 0x28c]
push edx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x28c]
call fcn.0040f740
push 0x580194
push 1
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004a5fc0
push eax
call fcn.004a60d0
add esp, 8
mov byte [ebp - 0x28d], al
lea ecx, [ebp - 0x294]
call fcn.0040f740
movzx ecx, byte [ebp - 0x28d]
test ecx, ecx
je 0x4504eb
push 0x580198
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x58019c
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx edx, al
test edx, edx
jne 0x45052a
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x45052a
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x4000
mov edx, dword [ebp + 8]
mov dword [edx], ecx
push 0
push str.2345explorer.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x450556
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x4000
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4000
push 0
push ecx
mov ecx, esp
push str.SoftwareTaoBrowser.exe
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4505ea
push ecx
mov ecx, esp
push 0x580214
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x580218
call fcn.0041c8a0
lea ecx, [ebp - 0x2a4]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x2a4]
call fcn.0040f740
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx edx, al
test edx, edx
jne 0x4505ea
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4505ea
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x8000
mov edx, dword [ebp + 8]
mov dword [edx], ecx
push 0
push str.taobrowser.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x450616
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
or ecx, 0x8000
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x8000
push 0
push ecx
mov ecx, esp
push str.SoftwareAvant_Browser
call fcn.0041c8a0
push SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x450702
push ecx
mov ecx, esp
push 0x58026c
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.InstallPath
call fcn.0041c8a0
lea ecx, [ebp - 0x2b4]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x2b4]
call fcn.0040f740
push 0x580288
push 1
lea edx, [ebp - 0x2bc]
push edx
lea ecx, [ebp - 0x1c]
call fcn.004a5fc0
push eax
call fcn.004a60d0
add esp, 8
mov byte [ebp - 0x2b5], al
lea ecx, [ebp - 0x2bc]
call fcn.0040f740
movzx eax, byte [ebp - 0x2b5]
test eax, eax
je 0x4506c4
push 0x58028c
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x580290
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx ecx, al
test ecx, ecx
jne 0x450702
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x450702
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x10000
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
push 0
push str.avant.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x45072d
mov edx, dword [ebp + 8]
mov eax, dword [edx]
or eax, 0x10000
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x10000
call fcn.00451f00
test eax, eax
je 0x450757
push 0
push ecx
mov ecx, esp
push str.SOFTWAREWow6432NodeBaiduBaiduBrowser
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
jmp 0x450776
push 0
push ecx
mov ecx, esp
push str.SOFTWAREBaiduBaiduBrowser
call fcn.0041c8a0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x38]
call fcn.00451fe0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x450844
push ecx
mov ecx, esp
push 0x580340
call fcn.0041c8a0
push ecx
mov ecx, esp
push str.installDir
call fcn.0041c8a0
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x38]
call fcn.00452240
push eax
lea ecx, [ebp - 0x1c]
call fcn.0041c8e0
lea ecx, [ebp - 0x2d0]
call fcn.0040f740
push 0x58035c
push 1
lea ecx, [ebp - 0x2d8]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.004a5fc0
push eax
call fcn.004a60d0
add esp, 8
mov byte [ebp - 0x2d1], al
lea ecx, [ebp - 0x2d8]
call fcn.0040f740
movzx edx, byte [ebp - 0x2d1]
test edx, edx
je 0x450805
push 0x580360
lea ecx, [ebp - 0x1c]
call fcn.0041c900
push 0x580364
lea ecx, [ebp - 0x1c]
call fcn.0041c900
lea ecx, [ebp - 0x1c]
call fcn.0041cc40
movzx eax, al
test eax, eax
jne 0x450844
lea ecx, [ebp - 0x1c]
call fcn.0041cb20
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x450844
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x20000
mov eax, dword [ebp + 8]
mov dword [eax], edx
push 0
push str.baidubrowser.exe
mov ecx, dword [ebp + 0x10]
call fcn.004a5a90
test eax, eax
jl 0x450870
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
or edx, 0x20000
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x20000
lea ecx, [ebp - 0x1c]
call fcn.0040f740
lea ecx, [ebp - 0x38]
call fcn.00451f50
lea ecx, [ebp - 0x18]
call fcn.004524d0
pop esi
mov esp, ebp
pop ebp
ret