Function at 0x404dc9
Capabilities:
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2bc
mov eax, dword [0x4b206c]
xor eax, esp
mov dword [esp + 0x2b8], eax
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
mov dword [esp + 0x10], eax
push esi
mov dword [esp + 0xc], ebx
push edi
cmp dword [0x4b6964], ebx
jne 0x404e00
call fcn.0040ff80
push str.chrome_elf.dll
lea ecx, [esp + 0x9c]
call fcn.0040197a
lea ecx, [esp + 0x98]
call fcn.00404756
push ebx
push 1
lea ecx, [esp + 0xa0]
mov esi, eax
call fcn.004019ef
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test esi, esi
je 0x404e46
push str.SignalInitializeCrashReporting
push esi
call ebx
test eax, eax
je 0x404e46
call eax
mov edi, dword [0x4b6964]
mov eax, 0x4936c8
push eax
mov dword [esp + 0x14], eax
call fcn.0040124c
pop ecx
mov dword [esp + 0x14], eax
mov ecx, edi
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.004106a0
call fcn.00404245
cmp dword [esp + 0x78], 0
jne 0x404e9d
call fcn.00404692
test al, al
je 0x404e98
call fcn.00404d00
test al, al
jne 0x404e9d
xor eax, eax
mov esi, eax
jmp 0x4052b2
call fcn.00404d78
lea ecx, [esp + 0x10]
call fcn.004196d0
push str.chrome_elf.dll
lea ecx, [esp + 0x84]
call fcn.0040197a
lea ecx, [esp + 0x80]
call fcn.00404756
mov esi, eax
lea ecx, [esp + 0x80]
xor eax, eax
push eax
push 1
call fcn.004019ef
test esi, esi
je 0x404ee8
push str.SignalChromeElf
push esi
call ebx
test eax, eax
je 0x404ee8
call eax
lea ecx, [esp + 0x1c]
call fcn.00418f20
call fcn.004150e0
push 2
pop esi
push 4
pop ecx
cmp eax, 3
jge 0x404f16
cmp dword [0x4b4100], 5
jl 0x404f16
mov dword [0x4b4100], esi
mov dword [0x4b2070], ecx
cmp eax, ecx
jl 0x404f1f
call fcn.004041e3
mov ecx, edi
call fcn.00404068
xor ebx, ebx
test al, al
jne 0x4052a5
cmp dword [edi + 0x10], ebx
jne 0x404fcd
push 0x20a
lea eax, [esp + 0xb4]
push ebx
push eax
call fcn.00463e50
add esp, 0xc
lea eax, [esp + 0xb0]
push ebx
push 0x1a
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x404fc0
lea eax, [esp + 0xb0]
push eax
call fcn.0046914f
pop ecx
lea ecx, [esp + 0xb0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, esi
cmp ax, bx
jne 0x404f7d
sub ecx, edx
sar ecx, 1
cmp ecx, 4
jb 0x404fc0
lea eax, [esp + 0xb0]
push str.system32config_systemprofile
push eax
call fcn.0046218f
pop ecx
pop ecx
test eax, eax
jne 0x404fc0
lea eax, [esp + 0xb0]
push str.localservice_application_data
push eax
call fcn.0046218f
pop ecx
pop ecx
test eax, eax
je 0x404fcd
call fcn.00409388
test al, al
jne 0x4052a5
mov ecx, edi
call fcn.0040496b
test al, al
jne 0x4052a5
call fcn.0040130b
test al, al
jne 0x4052a5
cmp dword [esp + 0x78], ebx
jne 0x40500b
lea ecx, [esp + 0xf]
mov byte [esp + 0xf], 1
call fcn.0040140b
test al, al
je 0x40500b
cmp byte [esp + 0xf], bl
jne 0x4052a5
mov ecx, dword [esp + 0x18]
call fcn.004042e6
test al, al
jne 0x4052a5
mov ecx, edi
cmp dword [esp + 0x78], ebx
jne 0x4050b9
push str.360chromeautoupdate
call fcn.00410600
test al, al
jne 0x4050d9
push str.360chrome_safe_browsing_autoupdate
mov ecx, edi
call fcn.00410600
test al, al
jne 0x4050d9
push str.360chrome_safe_browsing_white
mov ecx, edi
call fcn.00410600
test al, al
jne 0x4050d9
push 0x49338c
mov ecx, edi
call fcn.00410600
test al, al
jne 0x4050d9
push str.make_default_browser
mov ecx, edi
call fcn.00410600
test al, al
jne 0x4050d9
call fcn.0043a1b9
test al, al
je 0x405090
call fcn.0043a331
test al, al
je 0x4050b0
xor eax, eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], eax
call fcn.00439883
mov ecx, dword [esp + 0x10]
or ecx, 4
call fcn.00439c8b
call fcn.0043a3b7
call fcn.0043a2bc
mov bl, 1
jmp 0x4050d9
push str.in_chromeie
call fcn.00410600
test al, al
jne 0x4050d9
mov edx, str.plugin
lea ecx, [esp + 0x68]
call fcn.0040632e
test al, al
je 0x40514c
push str.Q360MonMutex
xor eax, eax
push eax
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
je 0x405100
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00415130
test al, al
je 0x40514c
call fcn.00418640
mov esi, eax
test esi, esi
je 0x40514c
push 0x493a9c
lea eax, [esp + 0x54]
mov ecx, esi
push eax
call fcn.00418c00
cmp dword [esp + 0x60], 0
je 0x405136
cmp dword [esp + 0x64], 8
lea ecx, [esp + 0x50]
cmovae ecx, dword [esp + 0x50]
call fcn.004025f1
xor eax, eax
lea ecx, [esp + 0x50]
push eax
push 1
call fcn.004019ef
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
mov esi, str.in_chromeie
mov ecx, edi
push esi
call fcn.00410600
test al, al
je 0x405162
call fcn.004036c8
cmp dword [esp + 0x78], 0
je 0x405179
push esi
mov ecx, edi
call fcn.00410600
test al, al
je 0x40520a
call fcn.00408eba
mov esi, eax
xor edx, edx
xor eax, eax
mov dword [esp + 0x90], edx
push 7
pop ecx
mov word [esp + 0x80], ax
mov word [esp + 0x50], ax
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x84]
mov dword [esp + 0x98], ecx
push eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], edx
call fcn.004087a4
test esi, esi
je 0x4051c8
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
mov esi, str.360base.dll
push esi
call fcn.004011e1
pop ecx
push eax
push esi
lea ecx, [esp + 0x58]
call fcn.00401d59
cmp dword [eax + 0x14], 8
jb 0x4051e7
mov eax, dword [eax]
push eax
call fcn.0041abc0
xor esi, esi
lea ecx, [esp + 0x50]
push esi
push 1
call fcn.004019ef
push esi
push 1
lea ecx, [esp + 0x88]
call fcn.004019ef
cmp dword [esp + 0x78], 0
jne 0x405235
mov ecx, dword [esp + 0x18]
call fcn.0040477d
mov esi, eax
test bl, bl
je 0x405225
call fcn.0043a23f
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x4052a7
mov edx, str.renderer
lea ecx, [esp + 0x68]
call fcn.0040632e
test al, al
je 0x40526e
push str.360se_crash_renderer
mov ecx, edi
call fcn.00410600
test al, al
je 0x40526e
push str.no_sandbox
mov ecx, edi
call fcn.00410600
test al, al
jne 0x40526e
mov esi, 0x360
jmp 0x4052a7
call fcn.00408eba
lea ecx, [esp + 0x10]
mov edi, eax
call fcn.004196d0
mov ecx, edi
push dword [eax + 4]
push dword [eax]
push dword [esp + 0x20]
call fcn.00408548
mov ecx, edi
mov esi, eax
call fcn.00408649
test edi, edi
je 0x4052a7
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax]
jmp 0x4052a7
mov esi, ebx
lea ecx, [esp + 0x1c]
call fcn.00418fa0
xor eax, eax
push eax
push 1
lea ecx, [esp + 0x70]
call fcn.00401abf
mov ecx, dword [esp + 0x2c4]
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00460c27
mov esp, ebp
pop ebp
ret 0x10