Function at 0x429292
Capabilities:
Contain obfuscated stackstrings
Delete file
Encode data using xor
Query environment variable

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x158]
push ecx
sub esp, 0x2c8
mov eax, dword [ecx]
mov dword [ebp - 0x29c], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x2a4], eax
lea eax, [ebp - 0x1ac]
mov dword [esp], eax
call fcn.00488ee0
lea ecx, [ebp - 0x114]
mov word [ebp - 0x158], 0x22
mov dword [esp], ebx
call fcn.004bcc7c
push ecx
lea eax, [ebp - 0x26c]
lea edx, [ebp - 0x114]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00424cf0
lea ecx, [ebp - 0x114]
lea esi, [ebp - 0x1dc]
call fcn.004b8e40
mov ecx, 0xb
mov dword [ebp - 0x1dc], 0x76736452
mov dword [ebp - 0x1d8], 0x29727661
mov dword [ebp - 0x1d4], 0x666470
mov eax, ecx
mov edi, 0xb
xor edx, edx
div edi
xor byte [ebp + ecx - 0x1e7], dl
inc ecx
cmp ecx, 0x16
jne 0x429328
mov dword [esp], esi
lea edi, [ebp - 0x1c4]
mov ecx, edi
call fcn.004bcc7c
push edx
lea esi, [ebp - 0x190]
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00424cf0
mov dword [esp], esi
mov ecx, ebx
call fcn.004c1280
lea ecx, [ebp - 0x140]
push eax
call fcn.0048d980
lea ecx, [ebp - 0x158]
call fcn.0048cca0
jmp 0x4293b5
lea eax, [ebp - 0x1ac]
lea ecx, [ebp - 0x114]
mov dword [esp], eax
call fcn.004c12c8
push eax
lea eax, [ebp - 0x194]
lea ecx, [ebp - 0xfc]
mov dword [esp], eax
call fcn.0048d880
push eax
lea eax, [ebp - 0x158]
lea esi, [ebp - 0x114]
mov ecx, esi
mov dword [esp], eax
call fcn.0048fa60
jmp 0x429409
push eax
lea ecx, [ebp - 0x254]
mov dword [esp], esi
call fcn.004c12c8
jmp 0x42941f
push edi
lea ecx, [ebp - 0x114]
call fcn.0048f870
mov ecx, ebx
call fcn.0048f870
lea ecx, [ebp - 0x190]
call fcn.004bd270
lea ecx, [ebp - 0x1c4]
call fcn.004b8e40
mov eax, dword [ebp - 0x254]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__wremove]
mov dword [ebp - 0x1c4], 0x7178533d
mov ecx, 0x12
lea ebx, [ebp - 0x1c4]
mov dword [ebp - 0x1c0], 0x35686177
mov dword [ebp - 0x1bc], 0x7f6a2735
mov dword [ebp - 0x1b8], 0x6b236079
mov word [ebp - 0x1b4], 0x7577
mov byte [ebp - 0x1b2], 0
mov eax, ecx
mov esi, 0x13
xor edx, edx
div esi
xor byte [ebp + ecx - 0x1d6], dl
inc ecx
cmp ecx, 0x24
jne 0x42949a
mov dword [esp], ebx
lea ecx, [ebp - 0x158]
call fcn.004bcc7c
push esi
lea eax, [ebp - 0x158]
mov dword [esp + 4], eax
lea eax, [ebp - 0x114]
mov dword [esp], eax
call fcn.00424cf0
lea ebx, [ebp - 0x190]
mov dword [esp], ebx
call fcn.00428020
mov esi, dword [ebp - 0x110]
mov edi, dword [ebp - 0x18c]
mov ecx, ebx
add edi, esi
call fcn.0043f7d0
cmp eax, edi
jae 0x429525
lea ecx, [ebp - 0x114]
call fcn.0043f7d0
cmp eax, edi
jb 0x429525
mov dword [esp + 4], ebx
xor ebx, ebx
lea ecx, [ebp - 0x114]
mov dword [esp], ebx
call fcn.004bec90
jmp 0x42953d
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x114]
lea ecx, [ebp - 0x190]
mov dword [esp], eax
call fcn.004be460
push edx
lea ecx, [ebp - 0x23c]
lea ebx, [ebp - 0x190]
push edx
mov dword [esp], eax
call fcn.004c1280
push ecx
mov ecx, ebx
call fcn.004bd270
lea ecx, [ebp - 0x114]
call fcn.004bd270
lea ecx, [ebp - 0x158]
call fcn.004b8e40
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0x206f2d
lea ecx, [ebp - 0x1c4]
mov dword [esp], eax
call fcn.004bcc7c
push eax
lea eax, [ebp - 0x1c4]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00424cf0
lea esi, [ebp - 0x158]
lea eax, [ebp - 0x26c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], esi
call fcn.004cd090
lea edi, [ebp - 0x114]
lea eax, [ebp - 0x254]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.004cd090
lea eax, [ebp - 0x224]
lea edx, [ebp - 0x26c]
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.004cd090
mov ecx, edi
call fcn.004bd270
mov ecx, esi
mov esi, ebx
call fcn.004bd270
mov ecx, ebx
lea ebx, [ebp - 0x20c]
call fcn.004bd270
lea ecx, [ebp - 0x1c4]
call fcn.004b8e40
mov dword [esp], 0x4e3216
mov ecx, ebx
call fcn.004c1328
push eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00424cf0
mov dword [esp + 4], ebx
xor ebx, ebx
mov ecx, esi
mov dword [esp], ebx
call fcn.004bec90
push edx
lea ebx, [ebp - 0x158]
push edx
mov ecx, ebx
mov dword [esp], eax
call fcn.004c1280
lea eax, [ebp - 0x20c]
push ecx
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.004cd090
lea eax, [ebp - 0x1f4]
lea edx, [ebp - 0x224]
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.004cd090
mov ecx, edi
mov ebx, edi
call fcn.004bd270
lea ecx, [ebp - 0x158]
call fcn.004bd270
mov ecx, esi
call fcn.004bd270
mov byte [ebp - 0x10c], 0x42
mov dword [ebp - 0x114], 0xc1eb1542
mov dword [ebp - 0x110], 0x7c90ec48
mov al, byte [0x4ddc68]
test al, al
jne 0x429709
mov dword [esp], 0x4ddc68
call fcn.004ceb90
test eax, eax
je 0x429709
mov dword [esp], edi
mov ecx, 0x4e1600
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfb30
call fcn.004013f0
mov dword [esp], 0x4ddc68
call fcn.004cec60
mov ecx, 0x4e1600
call fcn.0042e93c
mov dword [esp], 0x4e1600
call fcn.00422510
mov esi, 0x4dd2c0
mov ecx, 0x33
mov edi, ebx
mov dword [ebp - 0x158], 0x399046a2
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddc20]
test al, al
jne 0x429776
mov dword [esp], 0x4ddc20
call fcn.004ceb90
test eax, eax
je 0x429776
mov dword [esp], ebx
mov ecx, 0x4e1440
call fcn.0042e7cc
push eax
mov dword [esp], 0x4cfb34
call fcn.004013f0
mov dword [esp], 0x4ddc20
call fcn.004cec60
mov ecx, 0x4e1440
lea esi, [ebp - 0x158]
call fcn.0042e79c
mov dword [esp], 0x4e1440
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4297cc
xor eax, eax
mov ecx, 0x11
mov edi, esi
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1f4]
lea ecx, [ebp - 0x1c4]
mov dword [esp], eax
call fcn.004c1328
push eax
mov eax, dword [ebp - 0x23c]
lea ecx, [ebp - 0x1dc]
mov dword [esp], eax
call fcn.004c1328
jmp 0x4297d0
call esi
jmp 0x429796
push eax
mov dword [ebp - 0x114], 0xc1eb1542
mov dword [ebp - 0x110], 0x7c90ec48
mov byte [ebp - 0x10c], 0x42
mov al, byte [0x4ddbb8]
test al, al
jne 0x42982b
mov dword [esp], 0x4ddbb8
call fcn.004ceb90
test eax, eax
je 0x42982b
mov dword [esp], ebx
mov ecx, 0x4e11e0
call fcn.0042e96c
push edi
mov dword [esp], 0x4cfa94
call fcn.004013f0
mov dword [esp], 0x4ddbb8
call fcn.004cec60
mov ecx, 0x4e11e0
call fcn.0042e93c
mov dword [esp], 0x4e11e0
call fcn.00422510
mov esi, 0x4dd0e0
mov ecx, 0x37
mov edi, ebx
mov dword [ebp - 0x190], 0xcda04e26
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddb80]
test al, al
jne 0x429898
mov dword [esp], 0x4ddb80
call fcn.004ceb90
test eax, eax
je 0x429898
mov dword [esp], ebx
mov ecx, 0x4e1080
call fcn.0042e834
push esi
mov dword [esp], 0x4cfad8
call fcn.004013f0
mov dword [esp], 0x4ddb80
call fcn.004cec60
mov ecx, 0x4e1080
call fcn.0042e804
mov dword [esp], 0x4e1080
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4298dc
mov ecx, ebx
mov esi, dword [0x4de048]
call fcn.0042e5d8
lea ecx, [ebp - 0x190]
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
mov dword [esp + 4], ebx
mov dword [esp], eax
call esi
jmp 0x4298e6
lea eax, [ebp - 0x190]
call eax
jmp 0x4298b2
push ecx
push ecx
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x114], 0xc1eb1542
mov dword [ebp - 0x110], 0x7c90ec48
mov byte [ebp - 0x10c], 0x42
mov al, byte [0x4ddb88]
test al, al
jne 0x429948
mov dword [esp], 0x4ddb88
call fcn.004ceb90
test eax, eax
je 0x429948
mov dword [esp], ebx
mov ecx, 0x4e10c0
call fcn.0042e96c
push edx
mov dword [esp], 0x4cfb50
call fcn.004013f0
mov dword [esp], 0x4ddb88
call fcn.004cec60
mov ecx, 0x4e10c0
call fcn.0042e93c
mov dword [esp], 0x4e10c0
call fcn.00422510
mov esi, 0x4dd0e0
mov ecx, 0x37
mov edi, ebx
mov dword [ebp - 0x190], 0xe1b0562a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddb90]
test al, al
jne 0x4299b5
mov dword [esp], 0x4ddb90
call fcn.004ceb90
test eax, eax
je 0x4299b5
mov dword [esp], ebx
mov ecx, 0x4e10e0
call fcn.0042e834
push eax
mov dword [esp], 0x4cfb88
call fcn.004013f0
mov dword [esp], 0x4ddb90
call fcn.004cec60
mov ecx, 0x4e10e0
call fcn.0042e804
mov dword [esp], 0x4e10e0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x429a20
lea edx, [ebp - 0x110]
xor eax, eax
mov ecx, 0x10
mov dword [ebp - 0x190], 0xc1eb1542
mov edi, edx
mov byte [ebp - 0x188], 0x42
lea ebx, [ebp - 0x190]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x18c], 0x7c90ec48
mov dword [ebp - 0x114], 0x44
mov dword [ebp - 0xe8], 1
mov al, byte [0x4ddb98]
test al, al
jne 0x429a60
jmp 0x429a2a
lea eax, [ebp - 0x190]
call eax
jmp 0x4299cf
mov dword [esp], 0x4ddb98
call fcn.004ceb90
test eax, eax
je 0x429a60
mov dword [esp], ebx
mov ecx, 0x4e1120
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfc00
call fcn.004013f0
mov dword [esp], 0x4ddb98
call fcn.004cec60
mov ecx, 0x4e1120
call fcn.0042e93c
mov dword [esp], 0x4e1120
call fcn.00422510
mov esi, 0x4dd0e0
mov ecx, 0x37
mov edi, ebx
mov dword [ebp - 0x27c], 0xf5c05e2e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddba0]
test al, al
jne 0x429acd
mov dword [esp], 0x4ddba0
call fcn.004ceb90
test eax, eax
je 0x429acd
mov dword [esp], ebx
mov ecx, 0x4e1140
call fcn.0042e834
push eax
mov dword [esp], 0x4cfc38
call fcn.004013f0
mov dword [esp], 0x4ddba0
call fcn.004cec60
mov ecx, 0x4e1140
lea esi, [ebp - 0x27c]
call fcn.0042e804
mov dword [esp], 0x4e1140
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x429b4f
lea eax, [ebp - 0x114]
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [ebp - 0x27c], xmm0
mov dword [esp + 0x20], eax
xor eax, eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x1c4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1dc]
mov dword [esp], eax
mov eax, dword [ebp - 0x2a0]
call eax
mov dword [ebp - 0x2a0], eax
sub esp, 0x28
test eax, eax
je 0x429c87
jmp 0x429b53
call esi
jmp 0x429aed
mov dword [ebp - 0x190], 0xc1eb1542
mov dword [ebp - 0x18c], 0x7c90ec48
mov byte [ebp - 0x188], 0x42
mov al, byte [0x4ddba8]
test al, al
jne 0x429bad
mov dword [esp], 0x4ddba8
call fcn.004ceb90
test eax, eax
je 0x429bad
mov dword [esp], ebx
mov ecx, 0x4e1180
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfcb0
call fcn.004013f0
mov dword [esp], 0x4ddba8
call fcn.004cec60
mov ecx, 0x4e1180
call fcn.0042e93c
mov dword [esp], 0x4e1180
call fcn.00422510
mov esi, 0x4dd0e0
mov ecx, 0x37
mov edi, ebx
mov dword [ebp - 0x289], 0x9d06632
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddbb0]
test al, al
jne 0x429c1a
mov dword [esp], 0x4ddbb0
call fcn.004ceb90
test eax, eax
je 0x429c1a
mov dword [esp], ebx
mov ecx, 0x4e11a0
call fcn.0042e834
push edi
mov dword [esp], 0x4cfce8
call fcn.004013f0
mov dword [esp], 0x4ddbb0
call fcn.004cec60
mov ecx, 0x4e11a0
lea esi, [ebp - 0x289]
call fcn.0042e804
mov dword [esp], 0x4e11a0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x429c64
mov ecx, esi
call fcn.0042e3d8
mov eax, esi
call fcn.004284d4
mov ecx, ebx
mov dword [ebp - 0x2a0], eax
call fcn.0042e658
mov eax, dword [ebp - 0x2a0]
mov edx, ebx
call fcn.0042839c
jmp 0x429c68
call esi
jmp 0x429c3a
mov dword [esp + 4], 0xffffffff
mov edx, dword [ebp - 0x27c]
mov dword [esp], edx
call eax
push esi
push esi
mov dword [ebp - 0x2a0], 1
lea ecx, [ebp - 0x1dc]
call fcn.004bd270
lea ecx, [ebp - 0x1c4]
call fcn.004bd270
mov byte [ebp - 0x10c], 0x42
mov dword [ebp - 0x114], 0xc1eb1542
mov dword [ebp - 0x110], 0x7c90ec48
mov al, byte [0x4ddc38]
test al, al
jne 0x429cfd
mov dword [esp], 0x4ddc38
call fcn.004ceb90
test eax, eax
je 0x429cfd
lea eax, [ebp - 0x114]
mov ecx, 0x4e14e0
mov dword [esp], eax
call fcn.0042e96c
push ebx
mov dword [esp], 0x4cfb40
call fcn.004013f0
mov dword [esp], 0x4ddc38
call fcn.004cec60
mov ecx, 0x4e14e0
call fcn.0042e93c
mov dword [esp], 0x4e14e0
call fcn.00422510
mov esi, 0x4dd2c0
mov ecx, 0x33
lea edi, [ebp - 0x114]
mov dword [ebp - 0x190], 0x4da04ea6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddc40]
test al, al
jne 0x429d74
mov dword [esp], 0x4ddc40
call fcn.004ceb90
test eax, eax
je 0x429d74
lea eax, [ebp - 0x114]
mov ecx, 0x4e1500
mov dword [esp], eax
call fcn.0042e7cc
push ecx
mov dword [esp], 0x4cfb44
call fcn.004013f0
mov dword [esp], 0x4ddc40
call fcn.004cec60
mov ecx, 0x4e1500
lea ebx, [ebp - 0x190]
call fcn.0042e79c
mov dword [esp], 0x4e1500
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x429dd8
mov dword [esp + 4], 0xc
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x114]
mov dword [esp], eax
call fcn.004a9140
push edx
push edx
mov dword [ebp - 0x190], 0xc1eb1542
mov dword [ebp - 0x18c], 0x7c90ec48
mov byte [ebp - 0x188], 0x42
mov al, byte [0x4ddc48]
test al, al
jne 0x429e12
jmp 0x429ddc
call ebx
jmp 0x429d94
mov dword [esp], 0x4ddc48
call fcn.004ceb90
test eax, eax
je 0x429e12
mov dword [esp], ebx
mov ecx, 0x4e1540
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfb54
call fcn.004013f0
mov dword [esp], 0x4ddc48
call fcn.004cec60
mov ecx, 0x4e1540
call fcn.0042e93c
mov dword [esp], 0x4e1540
call fcn.00422510
lea edi, [ebp - 0x190]
mov esi, 0x4dd2c0
mov ecx, 0x33
mov dword [ebp - 0x1c4], 0x61b056aa
rep movsb byte es:[edi], byte [esi]
lea ebx, [ebp - 0x190]
mov al, byte [0x4ddc50]
test al, al
jne 0x429e89
mov dword [esp], 0x4ddc50
call fcn.004ceb90
test eax, eax
je 0x429e89
mov dword [esp], ebx
mov ecx, 0x4e1560
call fcn.0042e7cc
push eax
mov dword [esp], 0x4cfb58
call fcn.004013f0
mov dword [esp], 0x4ddc50
call fcn.004cec60
mov ecx, 0x4e1560
call fcn.0042e79c
mov dword [esp], 0x4e1560
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x429eb7
test byte [ebp - 0x8c], 5
je 0x429ee9
test byte [ebp - 0x2a0], 1
jne 0x429ee9
jmp 0x429ec1
lea eax, [ebp - 0x1c4]
call eax
jmp 0x429ea3
mov eax, dword [ebp - 0x2a4]
mov ecx, ebx
mov dword [esp], eax
call fcn.004bcba0
push eax
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00429288
jmp 0x42a153
mov dword [ebp - 0x190], 0xc1eb1542
mov dword [ebp - 0x18c], 0x7c90ec48
mov byte [ebp - 0x188], 0x42
mov al, byte [0x4ddc58]
test al, al
jne 0x429f43
mov dword [esp], 0x4ddc58
call fcn.004ceb90
test eax, eax
je 0x429f43
mov dword [esp], ebx
mov ecx, 0x4e15a0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfb64
call fcn.004013f0
mov dword [esp], 0x4ddc58
call fcn.004cec60
mov ecx, 0x4e15a0
call fcn.0042e93c
mov dword [esp], 0x4e15a0
call fcn.00422510
mov esi, 0x4dd2c0
mov ecx, 0x33
mov edi, ebx
mov dword [ebp - 0x1c4], 0x75c05eae
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddc60]
test al, al
jne 0x429fb0
mov dword [esp], 0x4ddc60
call fcn.004ceb90
test eax, eax
je 0x429fb0
mov dword [esp], ebx
mov ecx, 0x4e15c0
call fcn.0042e7cc
push eax
mov dword [esp], 0x4cfb68
call fcn.004013f0
mov dword [esp], 0x4ddc60
call fcn.004cec60
mov ecx, 0x4e15c0
call fcn.0042e79c
mov dword [esp], 0x4e15c0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x429ff5
lea eax, [ebp - 0x254]
lea esi, [ebp - 0x190]
mov dword [esp], eax
mov ecx, esi
call fcn.004c12c8
push edi
lea eax, [ebp - 0x1c4]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.0042e010
jmp 0x429fff
lea eax, [ebp - 0x1c4]
call eax
jmp 0x429fca
mov ecx, ebx
call fcn.004bd270
mov byte [ebp - 0x188], 0x42
mov dword [ebp - 0x190], 0xc1eb1542
mov dword [ebp - 0x18c], 0x7c90ec48
mov al, byte [0x4ddc28]
test al, al
jne 0x42a060
mov dword [esp], 0x4ddc28
call fcn.004ceb90
test eax, eax
je 0x42a060
mov dword [esp], ebx
mov ecx, 0x4e1480
call fcn.0042e96c
push ebx
mov dword [esp], 0x4cfb74
call fcn.004013f0
mov dword [esp], 0x4ddc28
call fcn.004cec60
mov ecx, 0x4e1480
call fcn.0042e93c
mov dword [esp], 0x4e1480
call fcn.00422510
lea edi, [ebp - 0x190]
mov esi, 0x4dd2c0
mov ecx, 0x33
mov dword [ebp - 0x1dc], 0x89d066b2
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddc30]
test al, al
jne 0x42a0d7
mov dword [esp], 0x4ddc30
call fcn.004ceb90
test eax, eax
je 0x42a0d7
lea eax, [ebp - 0x190]
mov ecx, 0x4e14a0
mov dword [esp], eax
call fcn.0042e7cc
push ecx
mov dword [esp], 0x4cfb78
call fcn.004013f0
mov dword [esp], 0x4ddc30
call fcn.004cec60
mov ecx, 0x4e14a0
call fcn.0042e79c
mov dword [esp], 0x4e14a0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x42a111
cmp dword [ebp - 0x1c0], 1
lea ebx, [ebp - 0x1c4]
jbe 0x42a11b
mov dword [esp], ebx
mov ecx, dword [ebp - 0x29c]
call fcn.004bcaf0
push edx
jmp 0x42a153
lea eax, [ebp - 0x1dc]
call eax
jmp 0x42a0f1
mov eax, dword [ebp - 0x2a4]
lea ecx, [ebp - 0x190]
mov dword [esp], eax
call fcn.004bcba0
push eax
lea eax, [ebp - 0x190]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00429288
lea ecx, [ebp - 0x190]
call fcn.004b8e40
mov ecx, ebx
call fcn.004b8e40
lea ecx, [ebp - 0x114]
call fcn.004a9950
lea ecx, [ebp - 0x1f4]
call fcn.004bd270
lea ecx, [ebp - 0x20c]
call fcn.004bd270
lea ecx, [ebp - 0x224]
call fcn.004bd270
lea ecx, [ebp - 0x23c]
call fcn.004bd270
lea ecx, [ebp - 0x254]
call fcn.004bd270
lea ecx, [ebp - 0x26c]
call fcn.004bd270
lea ecx, [ebp - 0x1ac]
call fcn.0048f870
mov eax, dword [ebp - 0x29c]
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret