Function at 0x40ffa7
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d4
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0xffffffffffffffff
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0xc]
mov esi, ecx
mov dword [ebp - 0x160], ebx
push ebx
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], esi
push 0x6b2410
cmp byte [0x6a1b30], bl
je 0x410008
call fcn.0040c369
push 0xffffffffffffffff
push ebx
push 0x6b242c
mov eax, esi
call fcn.0040c369
jmp 0x410441
mov byte [0x6a1b30], 1
call fcn.0040c369
push 0xffffffffffffffff
push ebx
push 0x6b242c
mov eax, esi
call fcn.0040c369
lea eax, [ebp - 0x124]
push eax
call fcn.00410452
pop ecx
push eax
lea eax, [ebp - 0x1b0]
call fcn.0040c8fa
push 1
xor edi, edi
lea esi, [ebp - 0x124]
call fcn.0040bab7
lea eax, [ebp - 0x1b0]
push eax
lea esi, [ebp - 0x15c]
call fcn.0040c73c
mov ecx, esi
call fcn.004104e2
mov ecx, esi
call fcn.00410699
test al, al
je 0x410095
push 0xffffffffffffffff
mov eax, esi
push ebx
push eax
mov esi, 0x6b242c
mov eax, esi
call fcn.0040c369
mov eax, dword [ebp - 0x1c8]
push 0xffffffffffffffff
push ebx
push esi
call fcn.0040c369
jmp 0x410425
mov esi, dword [0x6a1b84]
push 0xe
xor eax, eax
mov edi, str.chrome_version
push edi
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x12c], 7
mov dword [ebp - 0x130], ebx
mov word [ebp - 0x140], ax
mov dword [ebp - 0x1c4], ebx
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x110], 0xf
mov dword [ebp - 0x114], ebx
mov byte [ebp - 0x124], bl
call fcn.0040f8cd
lea eax, [ebp - 0x124]
push eax
call fcn.0040f97f
push ebx
push 1
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x1b1], al
call fcn.0040d0a1
cmp byte [ebp - 0x1b1], bl
je 0x4101d1
push 0xe
push edi
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x110], 0xf
mov dword [ebp - 0x114], ebx
mov byte [ebp - 0x124], bl
call fcn.0040f8cd
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x178]
push eax
push esi
call fcn.0040fbce
push eax
lea eax, [ebp - 0x140]
call fcn.0040ba5b
push 1
xor edi, edi
lea esi, [ebp - 0x178]
call fcn.0040bab7
push ebx
push 1
lea ecx, [ebp - 0x124]
call fcn.0040d0a1
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x124]
call fcn.0040cd38
push eax
lea edi, [ebp - 0x16c]
call fcn.004b7532
push eax
lea eax, [ebp - 0x1c4]
call fcn.004ac1ba
mov esi, edi
call fcn.00423147
push ebx
push 1
lea ecx, [ebp - 0x124]
call fcn.0040d0a1
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x1c0]
jne 0x410372
jmp 0x41040b
call fcn.00412f6f
mov dword [ebp - 0x160], eax
cmp eax, ebx
je 0x410269
mov edx, dword [eax]
lea ecx, [ebp - 0x124]
push ecx
mov ecx, eax
call dword [edx + 0x30]
push eax
lea eax, [ebp - 0x140]
call fcn.0040ba5b
push 1
xor edi, edi
lea esi, [ebp - 0x124]
call fcn.0040bab7
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x194]
call fcn.0040cd38
push eax
lea edi, [ebp - 0x118]
call fcn.004b7532
push eax
lea eax, [ebp - 0x1c4]
call fcn.004ac1ba
mov esi, edi
call fcn.00423147
push ebx
push 1
lea ecx, [ebp - 0x194]
call fcn.0040d0a1
mov ecx, dword [ebp - 0x160]
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1c4], eax
jne 0x410372
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x164], str.CHROME_VERSION
mov dword [ebp - 0x160], 0xe
call fcn.0040d1a6
cmp dword [eax + 0x14], 8
pop ecx
jb 0x410298
mov eax, dword [eax]
mov esi, 0x80
push esi
lea ecx, [ebp - 0x108]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, ebx
je 0x4102d0
cmp eax, esi
jae 0x4102d0
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.0040bed1
mov byte [ebp - 0x1b1], 1
jmp 0x4102d6
mov byte [ebp - 0x1b1], bl
push 1
xor edi, edi
lea esi, [ebp - 0x194]
call fcn.0040bab7
cmp byte [ebp - 0x1b1], bl
je 0x41032b
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x194]
call fcn.0040cd38
push eax
lea edi, [ebp - 0x118]
call fcn.004b7532
push eax
lea eax, [ebp - 0x1c4]
call fcn.004ac1ba
mov esi, edi
call fcn.00423147
push ebx
push 1
lea ecx, [ebp - 0x194]
call fcn.0040d0a1
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1c4], eax
jne 0x410372
mov ecx, dword [ebp - 0x1d0]
lea eax, [ebp - 0x194]
push eax
call fcn.004aabde
push eax
lea eax, [ebp - 0x140]
call fcn.0040ba5b
push 1
xor edi, edi
lea esi, [ebp - 0x194]
call fcn.0040bab7
cmp dword [ebp - 0x130], ebx
je 0x41040b
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1b0]
push eax
lea ecx, [ebp - 0x140]
call fcn.0041072b
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.0042353e
push 1
xor edi, edi
lea esi, [ebp - 0x194]
call fcn.0040bab7
lea ecx, [ebp - 0x15c]
call fcn.004104e2
lea ecx, [ebp - 0x15c]
call fcn.00410699
test al, al
je 0x41040b
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x15c]
push eax
mov edi, 0x6b242c
mov eax, edi
call fcn.0040c369
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x140]
push eax
mov esi, 0x6b2410
mov eax, esi
call fcn.0040c369
mov eax, dword [ebp - 0x1c8]
push 0xffffffffffffffff
push ebx
push edi
call fcn.0040c369
mov eax, dword [ebp - 0x1cc]
push 0xffffffffffffffff
push ebx
push esi
call fcn.0040c369
lea esi, [ebp - 0x1c4]
call fcn.00423147
push 1
xor edi, edi
lea esi, [ebp - 0x140]
call fcn.0040bab7
push 1
xor edi, edi
lea esi, [ebp - 0x15c]
call fcn.0040bab7
push 1
lea esi, [ebp - 0x1b0]
call fcn.0040bab7
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00403fc1
leave
ret 8