Function at 0x4df690
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x450
mov esi, ecx
lea ecx, [esp + 0x4c]
push dword [ebp + 8]
call fcn.004de200
add esp, 4
mov eax, dword [esp + 0x4c]
cmp eax, 0x80000000
jne 0x4df704
cmp byte [esp + 0x50], 3
jne 0x4df6f9
mov dword [esp], esi
mov esi, dword [esp + 0x54]
mov edi, dword [esi + 4]
mov ebx, dword [esi]
mov eax, dword [edi]
test eax, eax
je 0x4df6da
push ebx
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x4df6ea
mov edx, dword [edi + 8]
mov ecx, ebx
call fcn.0044dba0
mov ecx, esi
mov edx, 4
call fcn.0044dba0
mov esi, dword [esp]
mov dword [esi], 0x80000000
jmp 0x4df8be
mov ecx, dword [esp + 0x50]
mov ebx, 0x200
mov dword [esp + 4], 0
mov dword [esp + 8], 2
mov dword [esp], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], 2
mov dword [esp + 0x10], ecx
cmp ebx, 0x201
jae 0x4df770
jmp 0x4df75e
jbe 0x4df7f8
cmp ebx, 0x201
jae 0x4df770
mov dword [esp + 0x1c], 0x200
lea esi, [esp + 0x4c]
mov edi, ebx
jmp 0x4df7a3
mov edi, dword [esp + 0x20]
sub ebx, edi
je 0x4df793
mov edx, edi
lea ecx, [esp + 4]
push ebx
call fcn.004bf070
add esp, 4
mov edi, dword [esp + 4]
mov eax, dword [esp + 8]
mov dword [esp + 0x18], eax
mov esi, dword [esp + 0x18]
mov dword [esp + 0xc], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
push 0
call sub.kernel32.dll_SetLastError
push edi
push esi
push dword [esp + 0x18]
call sub.kernel32.dll_GetEnvironmentVariableW
mov ebx, eax
test eax, eax
jne 0x4df7c8
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x4df850
cmp ebx, edi
jne 0x4df750
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x4df8dc
lea ebx, [edi + edi]
test edi, edi
mov eax, 0xffffffff
cmovs ebx, eax
cmp ebx, 0x201
jb 0x4df75e
jmp 0x4df770
mov edx, dword [esp + 0x1c]
cmp ebx, edx
ja 0x4df8f5
mov edx, esi
lea ecx, [esp + 0x3c]
push ebx
call fcn.004bdd20
add esp, 4
mov esi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
movq xmm0, qword [esp + 0x44]
cmp dword [esp + 4], 0
je 0x4df842
mov ecx, dword [esp + 8]
mov edx, 2
movdqa xmmword [esp + 0x20], xmm0
call fcn.0044dba0
movdqa xmm0, xmmword [esp + 0x20]
cmp esi, 0x80000000
jne 0x4df8c6
movd edi, xmm0
jmp 0x4df86e
call sub.kernel32.dll_GetLastError
cmp dword [esp + 4], 0
mov edi, eax
je 0x4df86c
mov ecx, dword [esp + 8]
mov edx, 2
call fcn.0044dba0
xor ebx, ebx
mov eax, dword [esp]
cmp bl, 3
mov dword [eax], 0x80000000
jne 0x4df8a9
mov ebx, dword [edi + 4]
mov esi, dword [edi]
mov eax, dword [ebx]
test eax, eax
je 0x4df88d
push esi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x4df89d
mov edx, dword [ebx + 8]
mov ecx, esi
call fcn.0044dba0
mov ecx, edi
mov edx, 4
call fcn.0044dba0
cmp dword [esp + 0x14], 0
je 0x4df8be
mov ecx, dword [esp + 0x10]
mov edx, 2
call fcn.0044dba0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp]
mov dword [eax], esi
mov dword [eax + 4], ebx
movq qword [eax + 8], xmm0
cmp dword [esp + 0x14], 0
jne 0x4df8b0
jmp 0x4df8be
mov edx, 0x28
mov ecx, 0x5167ea
push 0x515e3c
call fcn.004434c0
add esp, 4
jmp 0x4df904
mov ecx, ebx
push 0x515e2c
call fcn.00443260
add esp, 4
ud2