Function at 0x41c740
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, dword [0x46f06c]
xor eax, ebp
mov dword [ebp - 8], eax
push esi
mov dword [ebp - 0x54], 0
mov esi, edx
cmp byte [0x472e0d], 0
push edi
mov dword [ebp - 0x54], 0
je 0x41c798
lea eax, [ebp - 0x54]
push eax
push ecx
mov ecx, 0x4d6400
call fcn.00424f90
test eax, eax
setne al
test al, al
je 0x41c798
mov ecx, dword [ebp - 8]
mov eax, 1
pop edi
xor ecx, ebp
pop esi
call fcn.0043223c
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
xor ecx, ecx
mov dword [ebp - 0xc], 7
mov dword [ebp - 0x10], 0
mov word [ebp - 0x20], cx
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], ecx
cmp ax, 0x804
jne 0x41c941
xor eax, eax
mov edi, 0x467f88
mov word [ebp - 0x38], ax
test esi, esi
je 0x41c802
cmp word [esi], ax
je 0x41c7ef
mov ecx, esi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41c7e0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x38]
call fcn.00401881
cmp dword [ebp - 0x24], 8
mov eax, dword [ebp - 0x38]
jae 0x41c805
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x50]
push 0x467f98
push eax
call fcn.0041eb20
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x20]
cmp eax, esi
je 0x41c892
mov ecx, dword [ebp - 0xc]
cmp ecx, 8
jb 0x41c875
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x20]
cmp eax, 0x7fffffff
ja 0x41ca14
add eax, eax
cmp eax, 0x1000
jb 0x41c86c
test cl, 0x1f
jne 0x41ca19
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x41ca1e
sub ecx, eax
cmp ecx, 4
jb 0x41ca23
cmp ecx, 0x23
ja 0x41ca28
mov ecx, eax
push ecx
call fcn.00432237
add esp, 4
xor eax, eax
mov dword [ebp - 0xc], 7
push esi
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x10], 0
mov word [ebp - 0x20], ax
call fcn.00404aa8
mov eax, dword [ebp - 0x3c]
cmp eax, 8
jb 0x41c8e5
mov ecx, dword [ebp - 0x50]
inc eax
cmp eax, 0x7fffffff
ja 0x41ca2d
add eax, eax
cmp eax, 0x1000
jb 0x41c8dc
test cl, 0x1f
jne 0x41ca32
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x41ca37
sub ecx, eax
cmp ecx, 4
jb 0x41ca3c
cmp ecx, 0x23
ja 0x41ca41
mov ecx, eax
push ecx
call fcn.00432237
add esp, 4
mov eax, dword [ebp - 0x24]
cmp eax, 8
jb 0x41ca87
mov ecx, dword [ebp - 0x38]
inc eax
cmp eax, 0x7fffffff
ja 0x41ca46
add eax, eax
cmp eax, 0x1000
jb 0x41c933
test cl, 0x1f
jne 0x41ca4b
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x41ca50
sub ecx, eax
cmp ecx, 4
jb 0x41ca55
cmp ecx, 0x23
ja 0x41ca5a
mov ecx, eax
push ecx
call fcn.00432237
add esp, 4
jmp 0x41ca87
push 7
xor eax, eax
lea ecx, [ebp - 0x38]
push str.Upgrade
mov edi, str.Tips
mov word [ebp - 0x38], ax
call fcn.00401881
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x50]
push str._s_program_file_that_the_360Chrome_has_been_damaged__not_the_original_file.__r_nFor_your_safe__the_program_will_automatically_exit.__r_nSuggest_you_re_install__and_the_Trojan_scan.
push eax
call fcn.0041eb20
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x20]
cmp eax, esi
je 0x41c9f3
mov ecx, dword [ebp - 0xc]
cmp ecx, 8
jb 0x41c9d6
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x20]
cmp eax, 0x7fffffff
ja 0x41ca5f
add eax, eax
cmp eax, 0x1000
jb 0x41c9cd
test cl, 0x1f
jne 0x41ca64
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x41ca69
sub ecx, eax
cmp ecx, 4
jb 0x41ca6e
cmp ecx, 0x23
ja 0x41ca73
mov ecx, eax
push ecx
call fcn.00432237
add esp, 4
xor eax, eax
mov dword [ebp - 0xc], 7
push esi
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x10], 0
mov word [ebp - 0x20], ax
call fcn.00404aa8
mov eax, dword [ebp - 0x3c]
cmp eax, 8
jb 0x41ca0a
push 2
inc eax
push eax
push dword [ebp - 0x50]
call fcn.004013ff
add esp, 0xc
mov eax, dword [ebp - 0x24]
cmp eax, 8
jb 0x41ca87
jmp 0x41ca78
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
push 2
inc eax
push eax
push dword [ebp - 0x38]
call fcn.004013ff
add esp, 0xc
cmp dword [ebp - 0xc], 8
lea eax, [ebp - 0x20]
push 0x40
cmovae eax, dword [ebp - 0x20]
push edi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00437a92
int3