Function at 0x422ff5
Capabilities:
Enumerate process modules
Get process image filename
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43c595
mov eax, dword fs:[0]
push eax
mov eax, 0x1970
call fcn.00437f50
mov eax, dword [0x45c040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1894], edi
xor ebx, ebx
mov dword [ebp - 0x1864], ebx
push 0x400
push ecx
lea ecx, [ebp - 0x1860]
mov dword [ebp - 4], ebx
call fcn.00404317
mov dword [ebp - 0x1848], ebx
mov dword [ebp - 0x1844], ebx
push ebx
push ebx
push ebx
xor eax, eax
lea ecx, [ebp - 0x1840]
inc eax
push 8
pop edx
mov dword [ebp - 4], eax
call fcn.0042f7a2
add esp, 0xc
push str.GoogleChromeUser_Data
lea ecx, [ebp - 0x1840]
mov byte [ebp - 4], 2
call fcn.0041d7af
push str.Local_State
lea edx, [ebp - 0x1840]
lea ecx, [ebp - 0x1888]
call fcn.0042a0b7
pop ecx
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1828]
call fcn.0040edac
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 0xf
jbe 0x4230b9
mov eax, dword [eax]
sub esp, 0xc
lea ecx, [ebp - 0xc8]
push eax
call fcn.0042905d
lea ecx, [ebp - 0x1828]
call fcn.004027a6
lea ecx, [ebp - 0x1888]
mov byte [ebp - 4], 7
call fcn.00402ab8
cmp dword [ebp - 0x6c], 0
jne 0x4230fe
lea ecx, [ebp - 0x58]
call fcn.0041d6f0
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
jmp 0x423580
push ecx
lea ecx, [ebp - 0x8c0]
call fcn.004040a1
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x8b0]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_streambuf_char__struct_std::char_traits_char____]
lea eax, [ebp - 0x1828]
push eax
lea ecx, [ebp - 0x8a8]
call fcn.0040427d
mov byte [ebp - 4], 9
lea eax, [ebp - 0x1828]
cmp dword [ebp - 0x1814], 0xf
lea ecx, [ebp - 0x1870]
cmova eax, dword [ebp - 0x1828]
push eax
call fcn.00404545
lea ecx, [ebp - 0x1828]
call fcn.004027a6
lea ecx, [ebp - 0x858]
call fcn.00403fcf
lea ecx, [ebp - 0x858]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.0041d6f0
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
push str.protocol_handler
lea ecx, [ebp - 0x1870]
call fcn.004292f4
push str.excluded_schemes
mov ecx, eax
call fcn.004292f4
mov edx, eax
mov dword [ebp - 0x1890], edx
mov ecx, dword [edx + 4]
mov esi, dword [edx]
shl ecx, 5
add ecx, esi
cmp esi, ecx
je 0x423268
xor edi, edi
add esi, 0xc
inc edi
mov eax, dword [esi]
shr eax, 0x14
test al, 1
je 0x423224
push dword [esi - 0xc]
lea ecx, [ebp - 0x1828]
call fcn.00402815
push ecx
push str.roblox
lea ecx, [ebp - 0x1828]
call fcn.0040fd9f
cmp eax, 0xffffffff
je 0x423213
cmp dword [esi + 0x10], 0x102
lea ecx, [esi + 4]
movzx ebx, bl
cmove ebx, edi
call fcn.00404140
mov dword [esi + 0x10], 0x101
lea ecx, [ebp - 0x1828]
call fcn.004027a6
mov edx, dword [ebp - 0x1890]
mov ecx, dword [edx + 4]
add esi, 0x20
shl ecx, 5
add ecx, dword [edx]
lea eax, [esi - 0xc]
cmp eax, ecx
jne 0x4231ca
mov edi, dword [ebp - 0x1894]
test bl, bl
je 0x423268
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x84]
test al, al
je 0x423268
push 0
push str.Blocked
push str.ChromeProtocolHandler
lea ecx, [edi + 0x150]
call fcn.0042eba1
add esp, 0xc
mov byte [ebp - 0x1889], 0
mov byte [ebp - 0x188a], 0
test bl, bl
je 0x423439
lea eax, [ebp - 0x1894]
push eax
push 0x1000
lea eax, [ebp - 0x1810]
push eax
call dword [sym.imp.PSAPI.DLL_EnumProcesses]
mov eax, dword [ebp - 0x1894]
xor ebx, ebx
shr eax, 2
mov dword [ebp - 0x1890], eax
test eax, eax
je 0x423439
push dword [ebp + ebx*4 - 0x1810]
xor eax, eax
cmp byte [ebp - 0x1889], al
push 0
setne al
add eax, 0x400
push eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x18b0], esi
push 0x400
lea eax, [ebp - 0x810]
mov byte [ebp - 4], 0xa
push eax
push esi
call dword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
test eax, eax
je 0x42333e
xor eax, eax
lea ecx, [ebp - 0x1828]
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x810]
push eax
call fcn.0040bb9e
push ecx
push str.chrome.exe
lea ecx, [ebp - 0x1828]
call fcn.0040ba4b
cmp eax, 0xffffffff
je 0x423333
cmp byte [ebp - 0x1889], 0
je 0x42335f
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea ecx, [ebp - 0x1828]
call fcn.00402ab8
mov byte [ebp - 4], 2
test esi, esi
je 0x42334d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc ebx
cmp ebx, dword [ebp - 0x1890]
jb 0x4232b0
jmp 0x423439
lea ecx, [ebp - 0x1828]
call fcn.00402ab8
mov byte [ebp - 4], 2
test esi, esi
je 0x423379
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp - 0x188a], 0
jne 0x42339e
mov ecx, dword [edi + 0x11c]
push 5
push 0x43ff90
push str.Please_close_all_instances_of_Google_Chrome_before_continuing.
mov eax, dword [ecx]
call dword [eax + 4]
cmp eax, 2
jne 0x423403
mov ecx, dword [edi + 0x11c]
push 3
push str.Warning
push str.Project_X_might_not_launch_correctly_if_Chrome_is_open_or_running_in_the_background_during_installation._n_nAutomatically_shutdown_all_instances_of_Chrome_and_continue_
mov eax, dword [ecx]
call dword [eax + 4]
cmp eax, 6
jne 0x4233ed
xor eax, eax
mov ecx, edi
inc eax
mov byte [ebp - 0x1889], al
mov eax, dword [edi]
call dword [eax + 0x84]
test al, al
je 0x423403
push 0
push str.AutoTerminate
push str.ChromeProtocolHandler
lea ecx, [edi + 0x150]
call fcn.0042eba1
add esp, 0xc
jmp 0x423403
cmp eax, 7
jne 0x4233fe
mov byte [ebp - 0x188a], 0
jmp 0x42327e
cmp eax, 2
je 0x423411
xor eax, eax
inc eax
mov byte [ebp - 0x188a], al
jmp 0x42327e
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x84]
test al, al
je 0x423439
push 0
push str.BlockedAndCanceled
push str.ChromeProtocolHandler
lea ecx, [edi + 0x150]
call fcn.0042eba1
add esp, 0xc
and dword [ebp - 0x189c], 0
xor eax, eax
inc eax
xorps xmm0, xmm0
mov esi, 0x100
push eax
movups xmmword [ebp - 0x18ac], xmm0
mov dword [ebp - 0x1898], esi
call fcn.004358da
push dword [ebp - 0x1898]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x18a8], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1898]
mov dword [ebp - 0x18a4], eax
mov dword [ebp - 0x18a0], eax
add eax, ecx
mov dword [ebp - 0x189c], eax
push esi
lea eax, [ebp - 0x18ac]
mov byte [ebp - 4], 0xb
push ecx
lea ecx, [ebp - 0x18c8]
mov dword [ebp - 0x18cc], eax
call fcn.00404317
lea eax, [ebp - 0x18cc]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x1870]
call fcn.0042a22e
push ecx
lea ecx, [ebp - 0x18ac]
call fcn.00429ea6
push str.Local_State
lea edx, [ebp - 0x1840]
lea ecx, [ebp - 0x1828]
mov byte [eax], 0
dec dword [ebp - 0x18a0]
mov esi, dword [ebp - 0x18a4]
call fcn.0042a0b7
pop ecx
mov edx, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1888]
call fcn.0040edac
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 0xf
jbe 0x423514
mov eax, dword [eax]
sub esp, 0xc
lea ecx, [ebp - 0x197c]
push eax
call fcn.004294b2
lea ecx, [ebp - 0x1888]
call fcn.004027a6
lea ecx, [ebp - 0x1828]
mov byte [ebp - 4], 0x11
call fcn.00402ab8
cmp dword [ebp - 0x192c], 0
je 0x423553
mov edx, esi
lea ecx, [ebp - 0x197c]
call fcn.00402fd0
lea ecx, [ebp - 0x1914]
call fcn.0040b8fc
lea ecx, [ebp - 0x1914]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x18c8]
call fcn.00404122
lea ecx, [ebp - 0x18ac]
call fcn.00429497
lea ecx, [ebp - 0x1840]
call fcn.00402ab8
lea ecx, [ebp - 0x1860]
call fcn.00404122
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004357ec
leave
ret