Function at 0x41023f
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1d4
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x1d0], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0xffffffffffffffff
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0xc]
mov esi, ecx
mov dword [esp + 0xa4], ebx
push ebx
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], esi
push 0x6c7480
cmp byte [0x6b6b38], bl
je 0x4102a2
call fcn.0040c386
push 0xffffffffffffffff
push ebx
push 0x6c749c
mov eax, esi
call fcn.0040c386
jmp 0x410673
mov byte [0x6b6b38], 1
call fcn.0040c386
push 0xffffffffffffffff
push ebx
push 0x6c749c
mov eax, esi
call fcn.0040c386
lea eax, [esp + 0x30]
push eax
call fcn.0041068a
pop ecx
push eax
lea eax, [esp + 0xc0]
call fcn.0040c917
push 1
xor edi, edi
lea esi, [esp + 0x34]
call fcn.0040bad4
lea eax, [esp + 0xbc]
push eax
lea esi, [esp + 0x6c]
call fcn.0040c759
mov ecx, esi
call fcn.00410750
mov ecx, esi
call fcn.0041085b
test al, al
je 0x410329
push 0xffffffffffffffff
mov eax, esi
push ebx
push eax
mov esi, 0x6c749c
mov eax, esi
call fcn.0040c386
mov eax, dword [esp + 0x24]
push 0xffffffffffffffff
push ebx
push esi
call fcn.0040c386
jmp 0x410658
mov esi, dword [0x6b6b8c]
push 0xe
xor eax, eax
mov edi, str.chrome_version
push edi
lea ecx, [esp + 0x38]
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], ebx
mov word [esp + 0x54], ax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
call fcn.0040f910
lea eax, [esp + 0x30]
push eax
call fcn.0040f9c2
push ebx
push 1
lea ecx, [esp + 0x38]
mov byte [esp + 0x1b], al
call fcn.0040d17d
cmp byte [esp + 0x13], bl
je 0x410432
push 0xe
push edi
lea ecx, [esp + 0x38]
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
call fcn.0040f910
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0xa4]
push eax
push esi
call fcn.0040fb41
push eax
lea eax, [esp + 0x50]
call fcn.0040ba78
push 1
xor edi, edi
lea esi, [esp + 0xa4]
call fcn.0040bad4
push ebx
push 1
lea ecx, [esp + 0x38]
call fcn.0040d17d
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x30]
call fcn.0040cd55
push eax
lea edi, [esp + 0xa4]
call fcn.004b9d2e
push eax
lea eax, [esp + 0x18]
call fcn.004aff07
mov esi, edi
call fcn.0042235e
push ebx
push 1
lea ecx, [esp + 0x38]
call fcn.0040d17d
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x18]
jne 0x4105b6
jmp 0x410642
call fcn.00413508
mov dword [esp + 0xa0], eax
cmp eax, ebx
je 0x4104ba
mov edx, dword [eax]
lea ecx, [esp + 0x30]
push ecx
mov ecx, eax
call dword [edx + 0x30]
push eax
lea eax, [esp + 0x50]
call fcn.0040ba78
push 1
xor edi, edi
lea esi, [esp + 0x34]
call fcn.0040bad4
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x84]
call fcn.0040cd55
push eax
lea edi, [esp + 0x34]
call fcn.004b9d2e
push eax
lea eax, [esp + 0x18]
call fcn.004aff07
mov esi, edi
call fcn.0042235e
push ebx
push 1
lea ecx, [esp + 0x8c]
call fcn.0040d17d
mov ecx, dword [esp + 0xa0]
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x14], eax
jne 0x4105b6
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0xa4]
mov dword [esp + 0xa4], str.CHROME_VERSION
mov dword [esp + 0xa8], 0xe
call fcn.0040d1c3
cmp dword [eax + 0x14], 8
pop ecx
jb 0x4104ed
mov eax, dword [eax]
mov esi, 0x80
push esi
lea ecx, [esp + 0xdc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, ebx
je 0x410523
cmp eax, esi
jae 0x410523
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.0040beee
mov byte [esp + 0x13], 1
jmp 0x410527
mov byte [esp + 0x13], bl
push 1
xor edi, edi
lea esi, [esp + 0x88]
call fcn.0040bad4
cmp byte [esp + 0x13], bl
je 0x410577
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x84]
call fcn.0040cd55
push eax
lea edi, [esp + 0x34]
call fcn.004b9d2e
push eax
lea eax, [esp + 0x18]
call fcn.004aff07
mov esi, edi
call fcn.0042235e
push ebx
push 1
lea ecx, [esp + 0x8c]
call fcn.0040d17d
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x14], eax
jne 0x4105b6
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x84]
push eax
call fcn.004ae9ac
push eax
lea eax, [esp + 0x50]
call fcn.0040ba78
push 1
xor edi, edi
lea esi, [esp + 0x88]
call fcn.0040bad4
cmp dword [esp + 0x5c], ebx
je 0x410642
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x54]
call fcn.004108b7
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.00422755
push 1
xor edi, edi
lea esi, [esp + 0x88]
call fcn.0040bad4
lea ecx, [esp + 0x68]
call fcn.00410750
lea ecx, [esp + 0x68]
call fcn.0041085b
test al, al
je 0x410642
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x70]
push eax
mov edi, 0x6c749c
mov eax, edi
call fcn.0040c386
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x54]
push eax
mov esi, 0x6c7480
mov eax, esi
call fcn.0040c386
mov eax, dword [esp + 0x24]
push 0xffffffffffffffff
push ebx
push edi
call fcn.0040c386
mov eax, dword [esp + 0x2c]
push 0xffffffffffffffff
push ebx
push esi
call fcn.0040c386
lea esi, [esp + 0x14]
call fcn.0042235e
push 1
xor edi, edi
lea esi, [esp + 0x50]
call fcn.0040bad4
push 1
xor edi, edi
lea esi, [esp + 0x6c]
call fcn.0040bad4
push 1
lea esi, [esp + 0xc0]
call fcn.0040bad4
mov ecx, dword [esp + 0x1dc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00403fc1
mov esp, ebp
pop ebp
ret 8