Function at 0x41c0a0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x430
mov eax, dword [0x521e28]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x430], ecx
mov word [ebp - 0x218], 0
push 0x206
push 0
lea eax, [ebp - 0x216]
push eax
call fcn.004ad2c0
add esp, 0xc
mov word [ebp - 0x428], 0
push 0x206
push 0
lea ecx, [ebp - 0x426]
push ecx
call fcn.004ad2c0
add esp, 0xc
mov dword [ebp - 0x21c], 0
push 1
call fcn.0041bcf0
add esp, 4
mov edx, dword [ebp + 8]
push edx
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 8], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x41c13e
mov eax, dword [ebp + 8]
push eax
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 8], eax
push 0
call fcn.0041bcf0
add esp, 4
cmp dword [ebp - 8], 0
je 0x41c3b3
mov ecx, dword [ebp - 0x430]
cmp dword [ecx + 0x10], 0
je 0x41c276
mov dword [ebp - 4], 0x104
lea edx, [ebp - 4]
push edx
lea eax, [ebp - 0x218]
push eax
push 0
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x430]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
je 0x41c271
push 0x4efe44
call fcn.004ade29
add esp, 4
push eax
push 0x4efe50
lea ecx, [ebp - 0x218]
push ecx
call fcn.004b4001
add esp, 0xc
test eax, eax
jne 0x41c1d7
push 0x4efe5c
call fcn.004ade29
add esp, 4
lea edx, [ebp + eax*2 - 0x218]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00405cc0
jmp 0x41c23d
push 0x4efe68
call fcn.004ade29
add esp, 4
push eax
push 0x4efe80
lea edx, [ebp - 0x218]
push edx
call fcn.004b4001
add esp, 0xc
test eax, eax
jne 0x41c229
push 0x4efe98
call fcn.004ade29
add esp, 4
lea eax, [ebp + eax*2 - 0x218]
push eax
push 0x4efeb0
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.00405d60
add esp, 0x10
jmp 0x41c23d
lea eax, [ebp - 0x218]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.00405cc0
push 0x208
lea eax, [ebp - 0x428]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea edx, [ebp - 0x428]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00405cc0
mov dword [ebp - 0x21c], 1
jmp 0x41c3a9
lea edx, [ebp - 4]
push edx
push 4
lea eax, [ebp - 0x42c]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x430]
mov eax, dword [edx + 4]
call eax
cmp eax, 1
jne 0x41c3a9
push 0x208
lea ecx, [ebp - 0x218]
push ecx
mov edx, dword [ebp - 0x42c]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x430]
mov edx, dword [ecx + 8]
call edx
test eax, eax
je 0x41c3a9
push 0x4efed4
call fcn.004ade29
add esp, 4
push eax
push 0x4efee0
lea eax, [ebp - 0x218]
push eax
call fcn.004b4001
add esp, 0xc
test eax, eax
jne 0x41c30f
push 0x4efeec
call fcn.004ade29
add esp, 4
lea ecx, [ebp + eax*2 - 0x218]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.00405cc0
jmp 0x41c375
push 0x4efef8
call fcn.004ade29
add esp, 4
push eax
push 0x4eff10
lea ecx, [ebp - 0x218]
push ecx
call fcn.004b4001
add esp, 0xc
test eax, eax
jne 0x41c361
push 0x4eff28
call fcn.004ade29
add esp, 4
lea edx, [ebp + eax*2 - 0x218]
push edx
push 0x4eff40
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00405d60
add esp, 0x10
jmp 0x41c375
lea edx, [ebp - 0x218]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00405cc0
push 0x208
lea edx, [ebp - 0x428]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea ecx, [ebp - 0x428]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.00405cc0
mov dword [ebp - 0x21c], 1
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.004ad2aa
mov esp, ebp
pop ebp
ret 0xc