Function at 0x449a38
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1674
call fcn.00459800
mov eax, dword [0x576510]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
push 0x1046
mov word [ebp - 0x1664], ax
xor esi, esi
lea eax, [ebp - 0x1662]
push esi
push eax
call fcn.00457450
xor eax, eax
mov ebx, 0x206
push ebx
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push esi
push eax
call fcn.00457450
add esp, 0x18
push 1
push str.Software360ChromeChrome
push 0x80000001
lea ecx, [ebp - 0x1674]
mov dword [ebp - 0x1668], 0x104
mov dword [ebp - 0x1674], esi
mov dword [ebp - 0x1670], esi
call fcn.00448c65
test eax, eax
jne 0x449add
lea eax, [ebp - 0x1668]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0x4e2090
lea ecx, [ebp - 0x1674]
call fcn.00448cde
xor eax, eax
cmp ax, word [ebp - 0x20c]
jne 0x449b06
push str.360se
push 0x4e1b84
lea eax, [ebp - 0x20c]
push 0x103
push eax
call fcn.0045972c
add esp, 0x10
call fcn.00449837
cmp dword [eax + 0x18], 0x10
jb 0x449b16
mov edi, dword [eax + 4]
jmp 0x449b19
lea edi, [eax + 4]
cmp edi, esi
jne 0x449b25
mov dword [ebp - 0x166c], esi
jmp 0x449b5a
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
cmp esi, 0x3fffffff
jle 0x449b40
and dword [ebp - 0x166c], 0
jmp 0x449b5a
lea eax, [esi + esi]
call fcn.00459700
mov eax, esp
push 3
push esi
push edi
push eax
call fcn.00448c12
mov dword [ebp - 0x166c], eax
mov esi, 0x57bd48
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x449b7a
and dword [ebp - 0x1668], 0
jmp 0x449b94
lea eax, [edi + edi]
call fcn.00459700
mov eax, esp
push 3
push edi
push esi
push eax
call fcn.00448c12
mov dword [ebp - 0x1668], eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x449baa
xor eax, eax
jmp 0x449bbe
lea eax, [edi + edi]
call fcn.00459700
mov eax, esp
push 3
push edi
push esi
push eax
call fcn.00448c12
lea ecx, [ebp - 0x20c]
push ecx
push dword [ebp - 0x166c]
mov ecx, 0x57a4e8
push dword [ebp - 0x1668]
xor edi, edi
push 0x57b320
push 0x57b118
push 0x57af10
push 0x57ad08
push 0x57ab00
push 0x57a8f8
push ecx
push 0x57a0d8
push edi
push edi
push ecx
push eax
push str.http:__pvstat.qihoo.com_dimana.gif__pdt360chromebq_dim_kpid__guid__ver_dim_v360chrome___s___sm_dmts_diname_sifver_simod_simodver_sicode_sioff_sios_siie_smid_spt_spid_s
lea eax, [ebp - 0x1664]
push 0x823
push eax
call fcn.0045972c
add esp, 0x48
lea eax, [ebp - 0x1664]
mov esi, 0x57bed8
push eax
mov ecx, esi
call fcn.00449630
xor eax, eax
push ebx
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push edi
push eax
call fcn.00457450
xor eax, eax
push ebx
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push edi
push eax
call fcn.00457450
add esp, 0x18
lea eax, [ebp - 0x61c]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x4e1ee4
lea eax, [ebp - 0x61c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
lea eax, [ebp - 0x414]
push eax
mov ecx, esi
call fcn.00449662
mov ecx, esi
mov dword [0x57e340], 1
mov dword [0x57e580], 0x1388
call fcn.0044f607
mov ecx, esi
call fcn.0044a2f1
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, esi
call fcn.0044c626
lea ecx, [ebp - 0x1674]
call fcn.00448c4a
lea esp, [ebp - 0x1680]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045759d
leave
ret