Function at 0x4365a4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c8
mov eax, dword [0x4a02f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor esi, esi
push edi
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xd0], esi
call fcn.00417fc0
lea eax, [ebp - 0x58]
push eax
push 0x6c
call fcn.00413d60
pop ecx
pop ecx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x74]
call fcn.00401f50
push 7
pop edi
xor eax, eax
push str.360NotifyBin360seNotify.exe
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x3c], ax
call fcn.00401fb0
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x58]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x58]
call fcn.00401490
lea ecx, [ebp - 0x90]
call fcn.00401f80
xor ebx, ebx
push esi
inc ebx
push ebx
lea ecx, [ebp - 0x3c]
call fcn.00402b70
lea eax, [ebp - 0x58]
push eax
call fcn.00404eb0
pop ecx
test al, al
je 0x4367b4
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x58]
call fcn.00401c50
push str.__Uninstall:360Chrome
lea ecx, [ebp - 0x90]
call fcn.00406d00
push 0x40
lea eax, [ebp - 0x114]
push esi
push eax
call fcn.0046e0e0
xor eax, eax
add esp, 0xc
cmp dword [ebp - 0x7c], 8
mov word [ebp - 0xe8], ax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x118], 0x44
mov dword [ebp - 0xec], ebx
jae 0x4366a1
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x118]
push ecx
push esi
push esi
push esi
push esi
push esi
push esi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4367a4
push dword [ebp - 0x2c]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
push 0x1388
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [ebp - 0x30]
call ebx
cmp dword [ebp - 0xd4], esi
jne 0x4367a4
xor eax, eax
push str.360seNotify.exe
lea ecx, [ebp - 0x20]
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], esi
mov word [ebp - 0x20], ax
call fcn.00401fb0
push esi
push 2
mov eax, 0xf4240
push esi
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00413c10
add esp, 0x14
xor ebx, ebx
push esi
inc ebx
push ebx
lea ecx, [ebp - 0x20]
call fcn.00402b70
xor eax, eax
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], esi
lea ecx, [ebp - 0x20]
mov word [ebp - 0x20], ax
cmp dword [0x56acf0], ebx
jne 0x43675d
push str.360Notify
jmp 0x436762
push str.360Notify_bin
call fcn.00401fb0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x74]
call fcn.00401a30
push eax
lea ecx, [ebp - 0x74]
call fcn.00401490
lea ecx, [ebp - 0xc8]
call fcn.00401f80
push esi
push ebx
lea ecx, [ebp - 0x20]
call fcn.00402b70
lea eax, [ebp - 0x74]
push ebx
push eax
call fcn.00404360
pop ecx
pop ecx
xor ebx, ebx
push esi
inc ebx
push ebx
lea ecx, [ebp - 0x90]
call fcn.00402b70
xor eax, eax
push str.___uninstall_cud_disabledlg
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x9c], esi
mov word [ebp - 0xac], ax
call fcn.00401fb0
mov eax, 0x49bf98
cmp dword [0x56acf0], esi
jne 0x4367eb
mov eax, 0x4922e8
push eax
lea ecx, [ebp - 0xac]
call fcn.00406d00
mov dword [ebp - 0xcc], esi
call fcn.0040ab90
mov edi, str.installer_tdsetupuninstall.cc
test eax, eax
jg 0x436833
push esi
push 0x39a
push edi
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0xd0], ebx
call fcn.0040add0
add eax, 8
push str.Launching_Chrome_to_do_uninstall_tasks.
push eax
call fcn.00403540
pop ecx
pop ecx
mov ebx, dword [ebp - 0xd0]
test bl, 1
je 0x43684c
lea ecx, [ebp - 0x1c8]
and ebx, 0xfffffffe
call fcn.0040ae20
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xac]
push eax
push dword [ebp + 8]
call fcn.004404e8
add esp, 0xc
test al, al
je 0x43694b
call fcn.0040ab90
test eax, eax
jg 0x4368a8
push esi
push 0x39e
push edi
lea ecx, [ebp - 0x1c8]
or ebx, 2
call fcn.0040add0
push dword [ebp - 0xcc]
add eax, 8
push str.360chrome.exe_launched_for_uninstall_confirmation_returned:
push eax
call fcn.00403540
pop ecx
pop ecx
mov ecx, eax
call fcn.004066a0
test bl, 2
je 0x4368bb
lea ecx, [ebp - 0x1c8]
and ebx, 0xfffffffd
call fcn.0040ae20
mov eax, dword [ebp - 0xcc]
cmp eax, 9
je 0x436919
cmp eax, 0xa
je 0x436919
cmp eax, 2
je 0x436919
cmp eax, 0xb
jne 0x4368d9
push 0x12
jmp 0x43691b
call fcn.0040ab90
cmp eax, 2
jg 0x436909
push 2
push 0x3a8
push edi
lea ecx, [ebp - 0x1c8]
or ebx, 4
call fcn.0040add0
add eax, 8
push str.Failed_to_launch_360chrome.exe_for_uninstall_confirmation.
push eax
call fcn.00403540
pop ecx
pop ecx
test bl, 4
je 0x436919
lea ecx, [ebp - 0x1c8]
call fcn.0040ae20
push 0x15
pop edi
push esi
push 1
lea ecx, [ebp - 0xac]
call fcn.00402b70
lea ecx, [ebp - 0x74]
call fcn.00401f80
lea ecx, [ebp - 0x58]
call fcn.00401f80
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046e0cd
leave
ret
push 0x11
jmp 0x43691b