Function at 0x4360b0
Capabilities:
Check os version
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x618
mov eax, dword [0x4ba110]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x114
xor ebx, ebx
lea eax, [ebp - 0x3e4]
push ebx
push eax
mov edi, ecx
call fcn.00474610
add esp, 0xc
lea ecx, [ebp - 0x3e4]
push ecx
mov dword [ebp - 0x3e4], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x3e0], 5
jne 0x4362cd
push 0x24
mov dword [ebp - 0x604], ebx
call fcn.004740ea
add esp, 4
cmp eax, ebx
je 0x43629a
mov dword [ebp - 0x608], eax
mov dword [eax], eax
mov eax, dword [ebp - 0x608]
push 0xb
xor edx, edx
mov esi, 7
push str.__games_tab
lea ecx, [ebp - 0x228]
mov dword [eax + 4], eax
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], dx
call fcn.0040b930
mov eax, dword [ebp - 0x608]
lea ecx, [eax + 4]
mov dword [ebp - 0x5fc], ecx
mov ecx, dword [ecx]
lea edx, [ebp - 0x228]
push edx
push ecx
push eax
lea ecx, [ebp - 0x608]
call fcn.004166e0
mov edx, 0x9249248
sub edx, dword [ebp - 0x604]
cmp edx, 1
jae 0x436197
push str.list_T__too_long
call fcn.0045dc9c
inc dword [ebp - 0x604]
mov ecx, dword [ebp - 0x5fc]
mov dword [ecx], eax
mov edx, dword [eax + 4]
mov dword [edx], eax
cmp dword [ebp - 0x214], 8
jb 0x4361c2
mov eax, dword [ebp - 0x228]
push eax
call fcn.00473515
add esp, 4
xor ecx, ecx
push 0xe
mov word [ebp - 0x228], cx
push str.__send_install
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
call fcn.0040b930
mov eax, dword [ebp - 0x608]
mov ecx, dword [eax + 4]
lea esi, [eax + 4]
lea edx, [ebp - 0x228]
push edx
push ecx
push eax
lea ecx, [ebp - 0x608]
call fcn.004166e0
mov edx, 0x9249248
sub edx, dword [ebp - 0x604]
cmp edx, 1
jae 0x436223
push str.list_T__too_long
call fcn.0045dc9c
inc dword [ebp - 0x604]
mov dword [esi], eax
mov ecx, dword [eax + 4]
mov esi, 8
mov dword [ecx], eax
cmp dword [ebp - 0x214], esi
jb 0x43624c
mov edx, dword [ebp - 0x228]
push edx
call fcn.00473515
add esp, 4
mov edx, dword [edi]
mov edx, dword [edx + 0x24]
push ebx
lea eax, [ebp - 0x608]
push eax
lea eax, [ebp - 0x298]
push eax
mov ecx, edi
call edx
push eax
call fcn.00410270
add esp, 0xc
cmp dword [ebp - 0x284], esi
jb 0x436284
mov eax, dword [ebp - 0x298]
push eax
call fcn.00473515
add esp, 4
lea ecx, [ebp - 0x608]
call fcn.00416680
mov ecx, dword [ebp - 0x608]
jmp 0x4366f7
mov dword [ebp - 0x5fc], ebx
lea edx, [ebp - 0x5fc]
push edx
lea ecx, [ebp - 0x618]
call fcn.00473ffc
push 0x4b1784
lea eax, [ebp - 0x618]
push eax
mov dword [ebp - method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call fcn.0047416a
push 0x104
lea ecx, [ebp - 0x20c]
push ecx
push str._WINDIR_
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push 3
xor edx, edx
mov esi, 7
push 0x49b7b4
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 0x2a0], esi
mov dword [ebp - 0x2a4], ebx
mov word [ebp - 0x2b4], dx
call fcn.0040b930
push 0x1a
xor eax, eax
push str.__games_tab___send_install
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], ax
call fcn.0040b930
xor ecx, ecx
push 2
mov word [ebp - 0x27c], cx
push 0x49b774
lea ecx, [ebp - 0x27c]
mov dword [ebp - 0x268], esi
mov dword [ebp - 0x26c], ebx
call fcn.0040b930
mov edx, dword [edi]
mov edx, dword [edx + 0x28]
lea eax, [ebp - 0x2d0]
push eax
mov ecx, edi
call edx
push 4
push str.Temp
mov ecx, eax
call fcn.0040b810
xor ecx, ecx
mov word [ebp - 0x260], cx
push eax
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
call fcn.0040b1e0
lea edx, [ebp - 0x2b4]
push edx
mov edx, dword [edi]
mov edx, dword [edx + 0x24]
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x298]
push eax
mov ecx, edi
call edx
push eax
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x5f8]
call fcn.00411270
mov ecx, eax
call fcn.00411440
mov ecx, eax
call fcn.004114e0
mov ecx, eax
call fcn.00411400
mov ecx, eax
call fcn.00411520
lea ecx, [ebp - 0x5f8]
call fcn.004113d0
cmp dword [ebp - 0x24c], 8
jb 0x436414
mov edx, dword [ebp - 0x260]
push edx
call fcn.00473515
add esp, 4
xor eax, eax
cmp dword [ebp - 0x2bc], 8
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
mov word [ebp - 0x260], ax
jb 0x436441
mov ecx, dword [ebp - 0x2d0]
push ecx
call fcn.00473515
add esp, 4
xor edx, edx
cmp dword [ebp - 0x284], 8
mov dword [ebp - 0x2bc], esi
mov dword [ebp - 0x2c0], ebx
mov word [ebp - 0x2d0], dx
jb 0x43646e
mov eax, dword [ebp - 0x298]
push eax
call fcn.00473515
add esp, 4
xor ecx, ecx
cmp dword [ebp - 0x268], 8
mov dword [ebp - 0x284], esi
mov dword [ebp - 0x288], ebx
mov word [ebp - 0x298], cx
jb 0x43649b
mov edx, dword [ebp - 0x27c]
push edx
call fcn.00473515
add esp, 4
xor eax, eax
cmp dword [ebp - 0x230], 8
mov dword [ebp - 0x268], esi
mov dword [ebp - 0x26c], ebx
mov word [ebp - 0x27c], ax
jb 0x4364c8
mov ecx, dword [ebp - 0x244]
push ecx
call fcn.00473515
add esp, 4
xor edx, edx
cmp dword [ebp - 0x2a0], 8
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], dx
jb 0x4364f5
mov eax, dword [ebp - 0x2b4]
push eax
call fcn.00473515
add esp, 4
xor ecx, ecx
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x436513
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x20c]
push edx
lea ecx, [ebp - 0x228]
call fcn.0040b930
mov eax, dword [edi]
mov edx, dword [eax + 0x28]
lea ecx, [ebp - 0x298]
push ecx
mov ecx, edi
call edx
push 0xe
push str.explorer.exe
push ebx
mov ecx, eax
call fcn.0040d540
xor ecx, ecx
mov word [ebp - 0x260], cx
push eax
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
call fcn.0040b1e0
push 4
push str.Temp
lea ecx, [ebp - 0x260]
call fcn.0040b810
xor edx, edx
push eax
lea ecx, [ebp - 0x27c]
mov dword [ebp - 0x268], esi
mov dword [ebp - 0x26c], ebx
mov word [ebp - 0x27c], dx
call fcn.0040b1e0
push esi
push str.pf.lnk
lea ecx, [ebp - 0x27c]
call fcn.0040b810
xor ecx, ecx
mov word [ebp - 0x244], cx
push eax
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
call fcn.0040b1e0
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x244]
push edx
lea ecx, [ebp - 0x228]
call fcn.0040b700
cmp dword [ebp - 0x230], 8
jb 0x436607
mov eax, dword [ebp - 0x244]
push eax
call fcn.00473515
add esp, 4
xor ecx, ecx
cmp dword [ebp - 0x268], 8
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov word [ebp - 0x244], cx
jb 0x436634
mov edx, dword [ebp - 0x27c]
push edx
call fcn.00473515
add esp, 4
xor eax, eax
cmp dword [ebp - 0x24c], 8
mov dword [ebp - 0x268], esi
mov dword [ebp - 0x26c], ebx
mov word [ebp - 0x27c], ax
jb 0x436661
mov ecx, dword [ebp - 0x260]
push ecx
call fcn.00473515
add esp, 4
xor edx, edx
cmp dword [ebp - 0x284], 8
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
mov word [ebp - 0x260], dx
jb 0x43668e
mov eax, dword [ebp - 0x298]
push eax
call fcn.00473515
add esp, 4
push 0x24
mov dword [ebp - 0x604], ebx
call fcn.004740ea
add esp, 4
cmp eax, ebx
je 0x436786
mov dword [ebp - 0x608], eax
push ebx
lea ecx, [ebp - 0x608]
mov dword [eax], eax
mov eax, dword [ebp - 0x608]
push ecx
lea edx, [ebp - 0x228]
push edx
mov dword [eax + 4], eax
call fcn.00410270
add esp, 0xc
lea ecx, [ebp - 0x608]
call fcn.00416680
mov eax, dword [ebp - 0x608]
push eax
call fcn.00473515
add esp, 4
cmp dword [ebp - 0x214], 8
jb 0x436700
mov ecx, dword [ebp - 0x228]
push ecx
call fcn.00473515
add esp, 4
mov ecx, edi
mov dword [ebp - 0x5fc], ebx
call fcn.0041fdf0
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x60c], eax
jmp 0x436726
mov eax, dword [ebp - 0x60c]
cmp dword [ebp - 0x5fc], 0x96
jge 0x436775
cmp eax, 1
jne 0x43673e
push str.PlayFree_Welcome___PlayFree_Browser
jmp 0x43675a
cmp eax, 2
je 0x436755
push str.PlayFree_Welcome___PlayFree_Browser
push str.Chrome_WidgetWin_1
call edi
mov esi, eax
cmp esi, ebx
jne 0x436763
push str.PlayFree_Welcome
push str.Chrome_WidgetWin_1
call edi
mov esi, eax
push 0x28
call dword [sym.imp.KERNEL32.dll_Sleep]
inc dword [ebp - 0x5fc]
cmp esi, ebx
je 0x436720
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047421a
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x60c], ebx
lea edx, [ebp - 0x60c]
jmp 0x4362a6