Function at 0x43791c
Capabilities:
Create process on windows
Query environment variable
Self delete

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xca4
mov eax, dword [0x5c2460]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
lea eax, [ebp - 0xb70]
xor ebx, ebx
push edi
push eax
mov esi, ecx
mov dword [ebp - 0xc58], ebx
call fcn.0041fa7f
mov ecx, eax
call fcn.0041faa6
push 2
pop edi
cmp dword [ebp - 0xb60], ebx
jne 0x4379a0
cmp dword [0x768ca0], edi
jg 0x437986
push edi
push 0x1bf
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
inc ebx
call fcn.0045ce90
mov edx, str.Could_not_get_installation_destination_path.
lea ecx, [eax + 8]
call fcn.00405723
test bl, 1
je 0x437996
lea ecx, [ebp - 0xb8]
call fcn.0045cee0
xor esi, esi
inc esi
xor ebx, ebx
jmp 0x438d32
cmp dword [0x768ca0], ebx
jg 0x4379ea
push 0
push 0x1c3
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
mov ebx, edi
call fcn.0045ce90
mov edx, str.install_destination_path:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xb5c], 8
mov edx, dword [ebp - 0xb70]
jae 0x4379e3
lea edx, [ebp - 0xb70]
mov ecx, eax
call fcn.0045d6f0
test bl, 2
je 0x4379fd
lea ecx, [ebp - 0xb8]
and ebx, 0xfffffffd
call fcn.0045cee0
push esi
lea ecx, [ebp - 0xc00]
call fcn.00409846
and dword [ebp - 0xbc0], 0
lea ecx, [ebp - 0xb88]
xor eax, eax
and dword [ebp - 0xb78], eax
push 7
pop esi
mov dword [ebp - 0xbbc], esi
mov word [ebp - 0xbd0], ax
mov dword [ebp - 0xb74], esi
mov word [ebp - 0xb88], ax
call fcn.00457e00
test al, al
jne 0x437a8e
cmp dword [0x768ca0], edi
jg 0x437a72
push edi
push 0x1cb
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 4
call fcn.0045ce90
mov edx, str.Failed_to_create_temporary_file_for_setup.exe.
lea ecx, [eax + 8]
call fcn.00405723
test bl, 4
je 0x437d3c
lea ecx, [ebp - 0xb8]
and ebx, 0xfffffffb
call fcn.0045cee0
jmp 0x437d3c
lea eax, [ebp - 0xb58]
push eax
lea ecx, [ebp - 0xb88]
call fcn.0045a010
cmp dword [ebp - 0xbec], 8
mov ecx, dword [ebp - 0xc00]
jae 0x437ab5
lea ecx, [ebp - 0xc00]
cmp dword [ebp - 0xb44], 8
mov eax, dword [ebp - 0xb58]
jae 0x437aca
lea eax, [ebp - 0xb58]
mov dword [ebp - 0xc54], eax
movzx eax, word [ecx]
push eax
call fcn.0050559c
mov si, ax
mov eax, dword [ebp - 0xc54]
pop ecx
movzx ecx, word [eax]
push ecx
call fcn.0050559c
pop ecx
cmp si, ax
je 0x437c43
push 0xffffffffffffffff
xor esi, esi
lea eax, [ebp - 0xb88]
push esi
push eax
lea ecx, [ebp - 0xbd0]
call fcn.004059ba
lea eax, [ebp - 0xb40]
push eax
call fcn.0041fa7f
mov ecx, eax
call fcn.0041faa6
push ecx
push ecx
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0xb10]
call fcn.00458fb0
push eax
lea ecx, [ebp - 0xb88]
call fcn.00459060
lea ecx, [ebp - 0xb10]
call fcn.00459030
push esi
push 1
lea ecx, [ebp - 0xb40]
call fcn.0040536f
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xb88]
call fcn.00459820
push eax
lea ecx, [ebp - 0xb88]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xb88]
call fcn.00459820
push eax
lea ecx, [ebp - 0xb88]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
xor eax, eax
push 0xc6
mov word [ebp - 0xd0], ax
lea eax, [ebp - 0xce]
push esi
push eax
call fcn.005091d0
add esp, 0xc
call fcn.0050544d
push eax
call fcn.0050544d
push eax
push str._d__d.tmp
push 0xffffffffffffffff
lea eax, [ebp - 0xd0]
push 0x64
push eax
call fcn.005038e8
add esp, 0x18
lea eax, [ebp - 0xd0]
lea ecx, [ebp - 0xb10]
push eax
call fcn.004058f0
push ecx
push ecx
mov ecx, esp
push eax
call fcn.004050d6
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xb88]
call fcn.00459bb0
push eax
lea ecx, [ebp - 0xb88]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
push esi
push 1
lea ecx, [ebp - 0xb10]
call fcn.0040536f
jmp 0x437c45
xor esi, esi
push ecx
push ecx
lea eax, [ebp - 0xc00]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0xb28]
call fcn.00458fb0
lea edx, [ebp - 0xb88]
lea ecx, [ebp - 0xb28]
call fcn.00462030
test al, al
jne 0x437d1f
cmp dword [0x768ca0], 0
jg 0x437d0c
push esi
push 0x1e2
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 8
call fcn.0045ce90
mov edx, str.move_setup_from_:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xb14], 8
mov edx, dword [ebp - 0xb28]
jae 0x437cc1
lea edx, [ebp - 0xb28]
mov ecx, eax
call fcn.0045d6f0
mov edx, str._to:
mov ecx, eax
call fcn.00405723
cmp dword [ebp - 0xb74], 8
mov edx, dword [ebp - 0xb88]
jae 0x437ce9
lea edx, [ebp - 0xb88]
mov ecx, eax
call fcn.0045d6f0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, str.failed._ErrorCode:
mov ecx, esi
call fcn.00405723
mov ecx, eax
call fcn.0040761a
test bl, 8
je 0x437d1f
lea ecx, [ebp - 0xb8]
and ebx, 0xfffffff7
call fcn.0045cee0
lea ecx, [ebp - 0xb28]
call fcn.00459030
push 0
push 1
lea ecx, [ebp - 0xb58]
call fcn.0040536f
push 7
pop esi
xor eax, eax
mov dword [ebp - 0xb8c], esi
mov word [ebp - 0xba0], ax
xor ecx, ecx
mov word [ebp - 0x2d8], ax
mov word [ebp - 0xb28], ax
lea eax, [ebp - 0x2d8]
push 0x104
push eax
push str.CHROME_INSTALL_DIR
mov dword [ebp - 0xb90], ecx
mov byte [ebp - 0xc4a], cl
mov dword [ebp - 0xb14], esi
mov dword [ebp - 0xb18], ecx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x437ed4
lea eax, [ebp - 0x2d8]
push eax
lea ecx, [ebp - 0xb10]
call fcn.004058f0
cmp dword [ebp - 0xb00], edi
jne 0x437dfa
cmp dword [ebp - 0xafc], 8
mov eax, dword [ebp - 0xb10]
jae 0x437dc1
lea eax, [ebp - 0xb10]
cmp word [eax + 2], 0x3a
jne 0x437dfa
push 0x53fe1c
lea edx, [ebp - 0xb10]
lea ecx, [ebp - 0xb40]
call fcn.0041540b
pop ecx
push eax
lea ecx, [ebp - 0xb10]
call fcn.004075c9
push 0
push 1
lea ecx, [ebp - 0xb40]
call fcn.0040536f
push ecx
push ecx
lea eax, [ebp - 0xb10]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0xb40]
call fcn.00458fb0
push eax
lea ecx, [ebp - 0xb28]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
push ecx
push ecx
mov esi, esp
mov eax, 0x53fe28
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [ebp - 0xb28]
lea eax, [ebp - 0xb40]
push eax
call fcn.00459bb0
push eax
lea ecx, [ebp - 0xb28]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
push ecx
push ecx
mov esi, esp
mov eax, str.User_Data
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [ebp - 0xb28]
lea eax, [ebp - 0xb40]
push eax
call fcn.00459bb0
push eax
lea ecx, [ebp - 0xb28]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xb28]
push eax
lea ecx, [ebp - 0xba0]
call fcn.004059ba
push 0
push 1
lea ecx, [ebp - 0xb10]
mov byte [ebp - 0xc4a], 1
call fcn.0040536f
lea ecx, [ebp - 0xb28]
call fcn.00459030
xor esi, esi
cmp byte [ebp - 0xc4a], 0
mov dword [ebp - 0xc50], esi
je 0x438070
cmp byte [ebp + 0xc], 0
je 0x437fb1
push ecx
push ecx
mov esi, esp
mov eax, str.Preferences
push eax
mov dword [esi], eax
call fcn.004049e1
mov dword [esi + 4], eax
lea eax, [ebp - 0xb58]
pop ecx
push eax
push ecx
push ecx
mov esi, esp
mov eax, str.Default
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [ebp - 0xba0]
lea eax, [ebp - 0xb40]
push eax
call fcn.00459bb0
mov ecx, eax
call fcn.00459bb0
lea ecx, [ebp - 0xb40]
call fcn.00459030
and dword [ebp - 0xb18], 0
lea edx, [ebp - 0xb28]
xor eax, eax
mov dword [ebp - 0xb14], 7
lea ecx, [ebp - 0xb58]
mov word [ebp - 0xb28], ax
call fcn.00437788
test al, al
je 0x437f9b
lea ecx, [ebp - 0xb28]
call fcn.004376ef
test al, al
jne 0x437f9b
mov dword [ebp - 0xc50], 1
lea ecx, [ebp - 0xb28]
call fcn.00459030
lea ecx, [ebp - 0xb58]
call fcn.00459030
push ecx
push ecx
mov esi, esp
mov eax, str.Local_State
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [ebp - 0xba0]
lea eax, [ebp - 0xb28]
push eax
call fcn.00459bb0
push ecx
push ecx
mov ecx, esp
push dword [ebp + 8]
call fcn.004050d6
lea ecx, [ebp - 0xb58]
call fcn.00458fb0
lea ecx, [ebp - 0xb58]
call fcn.00457e00
test al, al
jne 0x438041
cmp dword [0x768ca0], edi
jg 0x43802c
push edi
push 0x21c
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 0x10
call fcn.0045ce90
mov edx, str.Failed_to_create_temporary_file_for_Local_State.
lea ecx, [eax + 8]
call fcn.00405723
test bl, 0x10
je 0x438052
lea ecx, [ebp - 0xb8]
and ebx, 0xffffffef
call fcn.0045cee0
jmp 0x438052
lea edx, [ebp - 0xb58]
lea ecx, [ebp - 0xb28]
call fcn.004588b0
lea ecx, [ebp - 0xb58]
call fcn.00459030
lea ecx, [ebp - 0xb28]
call fcn.00459030
mov esi, dword [ebp - 0xc50]
jmp 0x4380b1
cmp dword [0x768ca0], edi
jg 0x43809e
push edi
push 0x222
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 0x20
call fcn.0045ce90
mov edx, str.Could_not_retrieve_users_profile_directory.
lea ecx, [eax + 8]
call fcn.00405723
test bl, 0x20
je 0x4380b1
lea ecx, [ebp - 0xb8]
and ebx, 0xffffffdf
call fcn.0045cee0
cmp dword [0x768ca0], 0
jg 0x4380fd
push 0
push 0x225
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 0x40
call fcn.0045ce90
mov edx, str.Deleting_install_path
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xb5c], 8
mov edx, dword [ebp - 0xb70]
jae 0x4380f6
lea edx, [ebp - 0xb70]
mov ecx, eax
call fcn.0045d6f0
test bl, 0x40
je 0x438110
lea ecx, [ebp - 0xb8]
and ebx, 0xffffffbf
call fcn.0045cee0
push ecx
push ecx
lea eax, [ebp - 0xb70]
mov ecx, esp
push eax
or ebx, 0x80
call fcn.004050d6
lea ecx, [ebp - 0xb58]
call fcn.00458fb0
mov dl, 1
mov ecx, eax
call fcn.004575a0
test al, al
jne 0x438171
push ecx
push ecx
lea eax, [ebp - 0xb70]
mov ecx, esp
push eax
or ebx, 0x100
call fcn.004050d6
lea ecx, [ebp - 0xb40]
call fcn.00458fb0
mov ecx, eax
call fcn.00457b60
mov byte [ebp - 0xc49], 1
test al, al
jne 0x438178
mov byte [ebp - 0xc49], 0
test ebx, 0x100
je 0x438191
lea ecx, [ebp - 0xb40]
and ebx, 0xfffffeff
call fcn.00459030
test bl, bl
jns 0x4381a6
lea ecx, [ebp - 0xb58]
and ebx, 0xffffff7f
call fcn.00459030
cmp byte [ebp - 0xc49], 0
je 0x43827e
call fcn.0043b34e
cmp dword [ebp - 0xb5c], 8
mov ecx, dword [ebp - 0xb70]
jae 0x4381cd
lea ecx, [ebp - 0xb70]
call fcn.0040b818
push ecx
push ecx
lea eax, [ebp - 0xb70]
mov ecx, esp
push eax
or ebx, 0x200
call fcn.004050d6
lea ecx, [ebp - 0xb58]
call fcn.00458fb0
mov dl, 1
mov ecx, eax
call fcn.004575a0
test al, al
jne 0x438233
push ecx
push ecx
lea eax, [ebp - 0xb70]
mov ecx, esp
push eax
or ebx, 0x400
call fcn.004050d6
lea ecx, [ebp - 0xb40]
call fcn.00458fb0
mov ecx, eax
call fcn.00457b60
mov byte [ebp - 0xc49], 1
test al, al
jne 0x43823a
mov byte [ebp - 0xc49], 0
test ebx, 0x400
je 0x438253
lea ecx, [ebp - 0xb40]
and ebx, 0xfffffbff
call fcn.00459030
test ebx, 0x200
je 0x43826c
lea ecx, [ebp - 0xb58]
and ebx, 0xfffffdff
call fcn.00459030
cmp byte [ebp - 0xc49], 0
je 0x43827e
xor esi, esi
inc esi
mov dword [ebp - 0xc50], esi
lea eax, [ebp - 0xc48]
push eax
push ecx
push ecx
lea eax, [ebp - 0xb70]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0xb40]
call fcn.00458fb0
mov ecx, eax
call fcn.00459820
lea ecx, [ebp - 0xb40]
call fcn.00459030
lea ecx, [ebp - 0xc48]
call fcn.0043667d
test al, al
jne 0x43830b
cmp dword [0x768ca0], edi
jg 0x4382f2
push edi
push 0x235
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 0x800
call fcn.0045ce90
mov edx, str.Failed_to_delete_other_dir_in_project_dir.
lea ecx, [eax + 8]
call fcn.00405723
test ebx, 0x800
je 0x43830b
lea ecx, [ebp - 0xb8]
and ebx, 0xfffff7ff
call fcn.0045cee0
call fcn.00436715
test al, al
jne 0x43835e
cmp dword [0x768ca0], edi
jg 0x438345
push edi
push 0x237
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 0x1000
call fcn.0045ce90
mov edx, str.Failed_to_delete_other_dir_in_appdata_dir.
lea ecx, [eax + 8]
call fcn.00405723
test ebx, 0x1000
je 0x43835e
lea ecx, [ebp - 0xb8]
and ebx, 0xffffefff
call fcn.0045cee0
cmp byte [ebp + 0xc], 0
je 0x4383fd
call fcn.004367ef
test al, al
jne 0x4383b8
mov esi, 0x2000
cmp dword [0x768ca0], edi
jg 0x4383a3
push edi
push 0x23a
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, esi
call fcn.0045ce90
mov edx, str.Failed_to_delete_other_dir_in_appdata_dir_when_del_user_data.
lea ecx, [eax + 8]
call fcn.00405723
test esi, ebx
je 0x4383b8
lea ecx, [ebp - 0xb8]
and ebx, 0xffffdfff
call fcn.0045cee0
push ecx
push ecx
mov esi, esp
mov eax, str.User_Data_videomode
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [ebp - 0xc48]
lea eax, [ebp - 0xb58]
push eax
call fcn.00459bb0
mov dl, 1
lea ecx, [ebp - 0xb58]
call fcn.004575a0
lea ecx, [ebp - 0xb58]
call fcn.00459030
mov esi, dword [ebp - 0xc50]
push str.apps
lea ecx, [ebp - 0xc18]
call fcn.004058f0
push ecx
push ecx
lea eax, [ebp - 0xc18]
mov ecx, esp
push eax
call fcn.004050d6
lea eax, [ebp - 0xbe8]
push eax
push ecx
lea eax, [ebp - 0xb40]
push eax
push ecx
push ecx
lea eax, [ebp - 0xb70]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0xb58]
call fcn.00458fb0
mov ecx, eax
call fcn.00459820
pop ecx
mov ecx, eax
call fcn.00459bb0
lea ecx, [ebp - 0xb40]
call fcn.00459030
lea ecx, [ebp - 0xb58]
call fcn.00459030
cmp byte [ebp + 0xc], 0
mov dword [ebp - 0xb04], 0x54d434
mov dword [ebp - 0xb00], str.logs
mov dword [ebp - 0xafc], str.temp
je 0x43864d
mov dl, 1
lea ecx, [ebp - 0xbe8]
call fcn.004575a0
test al, al
jne 0x438511
mov esi, 0x4000
cmp dword [0x768ca0], edi
jg 0x4384f3
push edi
push 0x247
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, esi
call fcn.0045ce90
mov edx, str.Failed_to_delete_apps_dir:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xbd4], 8
mov edx, dword [ebp - 0xbe8]
jae 0x4384ec
lea edx, [ebp - 0xbe8]
mov ecx, eax
call fcn.0045d6f0
test esi, ebx
je 0x438508
lea ecx, [ebp - 0xb8]
and ebx, 0xffffbfff
call fcn.0045cee0
xor esi, esi
inc esi
mov dword [ebp - 0xc50], esi
and dword [ebp - 0xb00], 0
lea edx, [ebp - 0xb10]
xor eax, eax
mov dword [ebp - 0xafc], 7
push 0x6d
pop ecx
mov word [ebp - 0xb10], ax
call fcn.0045c120
test al, al
je 0x43863d
push ecx
push ecx
mov esi, esp
mov eax, 0x53fe28
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [ebp - 0xb10]
lea eax, [ebp - 0xb40]
push eax
call fcn.00459bb0
push eax
lea ecx, [ebp - 0xb10]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
push ecx
push ecx
lea eax, [ebp - 0xc18]
mov ecx, esp
push eax
call fcn.004050d6
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xb10]
call fcn.00459bb0
push eax
lea ecx, [ebp - 0xb10]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
mov dl, 1
lea ecx, [ebp - 0xb10]
call fcn.004575a0
test al, al
jne 0x438637
mov esi, 0x8000
cmp dword [0x768ca0], edi
jg 0x438617
push edi
push 0x24f
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, esi
call fcn.0045ce90
mov edx, str.Failed_to_delete_apps_dir:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xafc], 8
mov edx, dword [ebp - 0xb10]
jae 0x438610
lea edx, [ebp - 0xb10]
mov ecx, eax
call fcn.0045d6f0
test esi, ebx
je 0x43862c
lea ecx, [ebp - 0xb8]
and ebx, 0xffff7fff
call fcn.0045cee0
xor esi, esi
inc esi
mov dword [ebp - 0xc50], esi
jmp 0x43863d
mov esi, dword [ebp - 0xc50]
lea ecx, [ebp - 0xb10]
call fcn.00459030
jmp 0x438893
xor eax, eax
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp + eax*4 - 0xb04]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0xc58], ecx
mov dword [ecx], eax
test eax, eax
je 0x438679
push eax
call fcn.004049e1
pop ecx
mov ecx, dword [ebp - 0xc58]
mov dword [ecx + 4], eax
lea eax, [ebp - 0xb58]
push eax
lea ecx, [ebp - 0xbe8]
call fcn.00459bb0
mov dl, 1
lea ecx, [ebp - 0xb58]
call fcn.004575a0
test al, al
jne 0x43870e
cmp dword [0x768ca0], edi
jg 0x4386ec
push edi
push 0x258
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 0x10000
call fcn.0045ce90
mov edx, str.Failed_to_delete_apps_dir:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xb44], 8
mov edx, dword [ebp - 0xb58]
jae 0x4386e5
lea edx, [ebp - 0xb58]
mov ecx, eax
call fcn.0045d6f0
test ebx, 0x10000
je 0x438705
lea ecx, [ebp - 0xb8]
and ebx, 0xfffeffff
call fcn.0045cee0
xor esi, esi
inc esi
mov dword [ebp - 0xc50], esi
and dword [ebp - 0xb18], 0
lea edx, [ebp - 0xb28]
xor eax, eax
mov dword [ebp - 0xb14], 7
push 0x6d
pop ecx
mov word [ebp - 0xb28], ax
call fcn.0045c120
test al, al
je 0x438867
push ecx
push ecx
mov ecx, dword [ebp - 0xc54]
mov esi, esp
mov eax, dword [ebp + ecx*4 - 0xb04]
mov dword [esi], eax
test eax, eax
je 0x43875c
push eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea eax, [ebp - 0xb40]
push eax
push ecx
push ecx
lea eax, [ebp - 0xc18]
mov ecx, esp
push eax
call fcn.004050d6
lea eax, [ebp - 0xc30]
push eax
push ecx
push ecx
mov esi, esp
mov eax, 0x54a6b8
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [ebp - 0xb28]
lea eax, [ebp - 0xbb8]
push eax
call fcn.00459bb0
mov ecx, eax
call fcn.00459bb0
mov ecx, eax
call fcn.00459bb0
push eax
lea ecx, [ebp - 0xb28]
call fcn.00459060
lea ecx, [ebp - 0xb40]
call fcn.00459030
lea ecx, [ebp - 0xc30]
call fcn.00459030
lea ecx, [ebp - 0xbb8]
call fcn.00459030
mov dl, 1
lea ecx, [ebp - 0xb28]
call fcn.004575a0
test al, al
jne 0x438861
cmp dword [0x768ca0], edi
jg 0x43883d
push edi
push 0x261
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 0x20000
call fcn.0045ce90
mov edx, str.Failed_to_delete_apps_dir:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xb14], 8
mov edx, dword [ebp - 0xb28]
jae 0x438836
lea edx, [ebp - 0xb28]
mov ecx, eax
call fcn.0045d6f0
test ebx, 0x20000
je 0x438856
lea ecx, [ebp - 0xb8]
and ebx, 0xfffdffff
call fcn.0045cee0
xor esi, esi
inc esi
mov dword [ebp - 0xc50], esi
jmp 0x438867
mov esi, dword [ebp - 0xc50]
lea ecx, [ebp - 0xb28]
call fcn.00459030
lea ecx, [ebp - 0xb58]
call fcn.00459030
mov eax, dword [ebp - 0xc54]
inc eax
mov dword [ebp - 0xc54], eax
cmp eax, 3
jb 0x438655
cmp byte [ebp + 0xc], 0
je 0x438a63
and dword [ebp - 0xb00], 0
lea edx, [ebp - 0xb10]
xor eax, eax
mov dword [ebp - 0xafc], 7
push 0x6d
pop ecx
mov word [ebp - 0xb10], ax
call fcn.0045c120
test al, al
je 0x438a58
push ecx
push ecx
mov esi, esp
mov eax, 0x54a690
push eax
mov dword [esi], eax
call fcn.004049e1
mov dword [esi + 4], eax
lea eax, [ebp - 0xbb8]
pop ecx
push eax
push ecx
push ecx
mov esi, esp
mov eax, 0x54a6b8
push eax
mov dword [esi], eax
call fcn.004049e1
pop ecx
mov dword [esi + 4], eax
lea ecx, [ebp - 0xb10]
lea eax, [ebp - 0xc30]
push eax
call fcn.00459bb0
mov ecx, eax
call fcn.00459bb0
push eax
lea ecx, [ebp - 0xb10]
call fcn.00459060
lea ecx, [ebp - 0xbb8]
call fcn.00459030
lea ecx, [ebp - 0xc30]
call fcn.00459030
mov dl, 1
lea ecx, [ebp - 0xb10]
call fcn.004575a0
test al, al
jne 0x4389b2
mov esi, 0x40000
cmp dword [0x768ca0], edi
jg 0x438998
push edi
push 0x270
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, esi
call fcn.0045ce90
mov edx, str.Failed_to_delete_apps_dir:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xafc], 8
mov edx, dword [ebp - 0xb10]
jae 0x438991
lea edx, [ebp - 0xb10]
mov ecx, eax
call fcn.0045d6f0
test esi, ebx
je 0x4389ad
lea ecx, [ebp - 0xb8]
and ebx, 0xfffbffff
call fcn.0045cee0
xor esi, esi
inc esi
jmp 0x4389b8
mov esi, dword [ebp - 0xc50]
lea eax, [ebp - 0xbb8]
push eax
lea ecx, [ebp - 0xb10]
call fcn.00459820
push eax
lea ecx, [ebp - 0xb10]
call fcn.00459060
lea ecx, [ebp - 0xbb8]
call fcn.00459030
xor dl, dl
lea ecx, [ebp - 0xb10]
call fcn.004575a0
test al, al
jne 0x438a58
mov esi, 0x80000
cmp dword [0x768ca0], edi
jg 0x438a40
push edi
push 0x275
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, esi
call fcn.0045ce90
mov edx, str.Failed_to_delete_apps_dir:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xafc], 8
mov edx, dword [ebp - 0xb10]
jae 0x438a39
lea edx, [ebp - 0xb10]
mov ecx, eax
call fcn.0045d6f0
test esi, ebx
je 0x438a55
lea ecx, [ebp - 0xb8]
and ebx, 0xfff7ffff
call fcn.0045cee0
xor esi, esi
inc esi
lea ecx, [ebp - 0xb10]
call fcn.00459030
lea ecx, [ebp - 0xb70]
call fcn.004368dd
cmp byte [ebp + 0xc], 0
je 0x438b83
cmp byte [ebp - 0xc4a], 0
je 0x438b83
cmp dword [0x768ca0], 0
jg 0x438ad4
push 0
push 0x27e
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, 0x100000
call fcn.0045ce90
mov edx, str.Deleting_user_profile
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xb8c], 8
mov edx, dword [ebp - 0xba0]
jae 0x438acd
lea edx, [ebp - 0xba0]
mov ecx, eax
call fcn.0045d6f0
test ebx, 0x100000
je 0x438aed
lea ecx, [ebp - 0xb8]
and ebx, 0xffefffff
call fcn.0045cee0
lea ecx, [ebp - 0xba0]
call fcn.00457b40
test al, al
je 0x438b6d
mov dl, 1
lea ecx, [ebp - 0xba0]
call fcn.004575a0
test al, al
jne 0x438b6d
mov esi, 0x200000
cmp dword [0x768ca0], edi
jg 0x438b5b
push edi
push 0x281
push str.e:360chrome37_srcchromeinstaller_tdsetupuninstalluninstall.cc
lea ecx, [ebp - 0xb8]
or ebx, esi
call fcn.0045ce90
mov edx, str.Failed_to_delete_user_profile_dir:
lea ecx, [eax + 8]
call fcn.00405723
cmp dword [ebp - 0xb8c], 8
mov edx, dword [ebp - 0xba0]
jae 0x438b54
lea edx, [ebp - 0xba0]
mov ecx, eax
call fcn.0045d6f0
test esi, ebx
je 0x438b6a
lea ecx, [ebp - 0xb8]
call fcn.0045cee0
xor esi, esi
inc esi
lea ecx, [ebp - 0xba0]
cmp esi, edi
jne 0x438b7e
call fcn.0043746f
jmp 0x438b87
call fcn.00437586
cmp esi, edi
jne 0x438bab
push ecx
push ecx
lea eax, [ebp - 0xb70]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0xbb8]
call fcn.00458fb0
mov ecx, eax
call fcn.0043746f
jmp 0x438bcd
push ecx
push ecx
lea eax, [ebp - 0xb70]
mov ecx, esp
push eax
call fcn.004050d6
lea ecx, [ebp - 0xbb8]
call fcn.00458fb0
mov ecx, eax
call fcn.00437586
lea ecx, [ebp - 0xbb8]
call fcn.00459030
cmp dword [ebp - 0xbc0], 0
je 0x438cdd
lea edx, [ebp - 0xbd0]
lea ecx, [ebp - 0xb88]
call fcn.00462030
test al, al
je 0x438cdd
xor eax, eax
push 0x81e
push eax
mov word [ebp - 0xaf8], ax
lea eax, [ebp - 0xaf6]
push eax
call fcn.005091d0
add esp, 0xc
lea eax, [ebp - 0xbb8]
lea ecx, [ebp - 0xb88]
push eax
call fcn.0045a010
mov edi, eax
cmp dword [edi + 0x14], 8
jb 0x438c38
mov edi, dword [edi]
cmp dword [ebp - 0xbbc], 8
mov ebx, dword [ebp - 0xbd0]
jae 0x438c4d
lea ebx, [ebp - 0xbd0]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push edi
push ebx
push str._s___del_setup_exe__s____origin_setup_exe_handle_d
push 0xffffffffffffffff
lea eax, [ebp - 0xaf8]
push 0x410
push eax
call fcn.005038e8
add esp, 0x1c
lea ecx, [ebp - 0xbb8]
xor ebx, ebx
push ebx
push 1
call fcn.0040536f
push 0x40
lea eax, [ebp - 0xc9c]
push ebx
push eax
call fcn.005091d0
xor eax, eax
mov dword [ebp - 0xb08], ebx
add esp, 0xc
mov dword [ebp - 0xca0], 0x44
lea edi, [ebp - 0xb04]
mov dword [ebp - 0xc74], 0x81
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xb08]
push eax
lea eax, [ebp - 0xca0]
push eax
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0xaf8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
jmp 0x438cdf
xor ebx, ebx
lea ecx, [ebp - 0xbe8]
call fcn.00459030
push ebx
push 1
lea ecx, [ebp - 0xc18]
call fcn.0040536f
lea ecx, [ebp - 0xc48]
call fcn.00459030
lea ecx, [ebp - 0xba0]
call fcn.00459030
lea ecx, [ebp - 0xb88]
call fcn.00459030
lea ecx, [ebp - 0xbd0]
call fcn.00459030
push ebx
push 1
lea ecx, [ebp - 0xc00]
call fcn.0040536f
push ebx
push 1
lea ecx, [ebp - 0xb70]
call fcn.0040536f
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00501d03
mov esp, ebp
pop ebp
ret