Function at 0x4083a0
Capabilities:
Query environment variable

Disassembly:
push 0
push 0
pushfd
push ecx
add ecx, 0xfa7
or ecx, ebp
pop ecx
jmp 0x4083cf
popfd
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
pushfd
push ebp
or ebp, eax
and ebp, eax
cmp ebp, eax
pop ebp
je 0x4085e3
inc edi
dec edi
inc esp
dec esp
inc ebp
dec ebp
popfd
call sub.KERNEL32.dll_Heap32ListFirst
test eax, eax
pushfd
push ebp
push eax
push ebx
mov ebx, ebp
and ebp, eax
and eax, ebx
cmp ebp, eax
pop ebx
pop eax
pop ebp
je 0x4087a9
push eax
pop eax
add ebx, esi
sub ebx, esi
popfd
pushfd
jmp 0x40840f
jmp 0x408531
popfd
pushfd
jmp 0x408870
popfd
pushfd
je 0x4084d0
push eax
push ebx
push ebp
mov ebp, ebx
and ebp, edx
or ebp, eax
or ebx, eax
or eax, edx
and eax, ebx
cmp eax, ebp
pop ebp
pop ebx
pop eax
je 0x4084d2
add esi, edi
sub esi, edi
popfd
call 0x4015cd
add esp, 8
test eax, eax
pushfd
push eax
mov eax, esi
or eax, 0
cmp eax, esi
pop eax
je 0x408437
nop
mov ebp, ebp
pop eax
mov ebx, dword fs:[0x30]
add ebx, 6
mov ebx, dword [ebx + 6]
pushfd
push edx
nop dword [eax]
nop dword [eax]
nop dword [eax]
rol esp, 0x20
mov edx, ebp
or edx, 0xffffffff
nop dword [eax + eax]
nop word [eax + eax]
cmp edx, 0xffffffff
nop dword [eax + eax]
xchg ecx, ecx
nop dword [eax + eax]
pop edx
je 0x40850a
inc edx
dec edx
inc ebx
dec ebx
mov eax, eax
jmp 0x4085b2
popfd
mov esi, 0x401e80
sub esi, 0x401fd0
pushfd
jmp 0x4084bc
jmp 0x408533
popfd
mov ebp, eax
pushfd
push edx
push ebx
push eax
mov eax, edx
or edx, ebx
or ebx, eax
cmp edx, ebx
pop eax
pop ebx
pop edx
je 0x4084f1
push edx
pop edx
popfd
push 0
pushfd
jmp 0x408648
popfd
call 0x4088f6
pushfd
push ebx
mov ebx, ecx
or ebx, ecx
cmp ecx, ebx
pop ebx
je 0x4088f6
inc edi
dec edi
inc esp
dec esp
popfd
mov ebx, dword [ebx + 0xc]
mov ecx, ebx
pushfd
push eax
push ebp
push ecx
mov ecx, eax
and ecx, ebp
not eax
not ebp
or eax, ebp
not eax
cmp eax, ecx
pop ecx
pop ebp
pop eax
je 0x408870
mov ecx, ecx
add esi, edi
sub esi, edi
popfd
ret
popfd
popal
pushfd
push esi
nop dword [eax]
nop dword [eax]
mov esi, ecx
and esi, 0
rol ebx, 0x20
lea ebp, [ebp]
nop dword [eax]
cmp esi, 0
nop dword [eax]
rol eax, 0x20
ror eax, 0x20
pop esi
je 0x40840f
add ebx, esi
sub ebx, esi
jmp 0x4084d0
popfd
pushfd
jne 0x4085de
push esi
rol ebp, 0x20
not eax
not eax
xchg edx, edx
nop dword [eax + eax]
nop dword [eax]
mov esi, ecx
and esi, 0
nop dword [eax]
nop dword [eax]
not ebx
not ebx
mov ecx, ecx
lea esi, [esi]
cmp esi, 0
nop
nop
lea esp, [esp]
pop esi
je 0x4085cb
mov ebx, ebx
popfd
push 0
push 0
push 0
pushfd
jmp 0x408750
popfd
push section..data
pushfd
push edi
and edi, edx
or edi, edx
cmp edi, edx
pop edi
je 0x408804
add ebx, esi
sub ebx, esi
popfd
pushfd
jmp 0x40840f
jmp 0x408669
popfd
pushfd
je 0x4085a5
push esi
mov esi, ebp
or esi, ebp
cmp ebp, esi
pop esi
je 0x4083f2
mov ecx, ecx
mov ebp, ebp
popfd
push 0
push 0
push str.80h7a9_
pushfd
jmp 0x4083b1
popfd
call fcn.004010a5
add esp, 0x10
pushfd
push eax
nop dword [eax + eax]
mov eax, ebp
or eax, 0xffffffff
rol esp, 0x20
nop
lea ebx, [ebx]
nop dword [eax]
cmp eax, 0xffffffff
not edx
not edx
nop
ror edx, 0x20
xchg edx, edx
nop dword [eax]
pop eax
je 0x408568
inc edx
dec edx
inc ebx
dec ebx
mov ecx, ecx
popfd
call sub.KERNEL32.dll_Heap32Next
test eax, eax
pushfd
push ebp
push edx
push eax
mov eax, ebp
and ebp, edx
and edx, eax
cmp ebp, edx
pop eax
pop edx
pop ebp
je 0x4088ad
push ecx
pop ecx
inc ebp
dec ebp
popfd
pushal
pushfd
push edi
mov edi, esi
and edi, 0xffffffff
cmp edi, esi
pop edi
je 0x408713
push ebx
pop ebx
nop
popfd
push 0
push 0
push str._34_f:_81d_b
pushfd
push ebx
push eax
push ebp
mov ebp, ebx
and ebp, eax
not ebp
not ebx
not eax
or ebx, eax
cmp ebx, ebp
pop ebp
pop eax
pop ebx
je 0x408730
inc eax
dec eax
popfd
pushfd
jl 0x40874b
push ebx
push ecx
push edx
mov edx, ecx
and edx, eax
or edx, ebx
or ecx, ebx
or ebx, eax
and ebx, ecx
cmp ebx, edx
pop edx
pop ecx
pop ebx
je 0x4087c1
add edx, ebx
sub edx, ebx
popfd
mov ebx, dword [ebx + 0x18]
push esp
push ebx
push esi
push ebp
pushfd
push eax
push ecx
push ebp
mov ebp, eax
and eax, ecx
and ecx, ebp
cmp eax, ecx
pop ebp
pop ecx
pop eax
je 0x408609
add eax, ecx
sub eax, ecx
popfd
pushfd
jmp 0x40840f
popfd
mov ebx, 0x401fd0
cmp ebx, 0x401e80
pushfd
push ebx
mov ebx, eax
or ebx, eax
cmp eax, ebx
pop ebx
je 0x4088cf
mov ebx, ebx
popfd
call dword [sym.imp.KERNEL32.dll_CreateFileA]
test eax, eax
pushfd
push edx
mov edx, eax
and edx, 0xffffffff
cmp edx, eax
pop edx
je 0x40856d
inc esi
dec esi
jmp 0x4086cb
popfd
push 0
pushfd
push eax
nop dword [eax]
mov eax, ecx
or eax, 0xffffffff
nop dword [eax]
nop dword [eax + eax]
cmp eax, 0xffffffff
nop
lea ebx, [ebx]
lea esp, [esp]
ror ebx, 0x20
rol esi, 0x20
pop eax
je 0x40867e
add ecx, edx
sub ecx, edx
inc ebp
dec ebp
popfd
pushfd
je 0x4084d0
popfd
push esi
push eax
pushfd
push ebx
push ebp
push eax
mov eax, ebx
and ebx, ebp
and ebp, eax
cmp ebx, ebp
pop eax
pop ebp
pop ebx
je 0x408459
push eax
pop eax
popfd
pushfd
je 0x4084e8
push esi
and esi, edx
or esi, edx
cmp esi, edx
pop esi
je 0x4087c7
mov edx, edx
add eax, ecx
sub eax, ecx
popfd
mov ebx, dword [ebx]
pushfd
jmp 0x40883e
popfd
pushfd
jmp 0x40840f
popfd
pushfd
jmp 0x4084bc
popfd
call fcn.00401994
add esp, 4
test eax, eax
pushfd
push ecx
nop dword [eax + eax]
nop
ror ebp, 0x20
mov edi, edi
mov ecx, edx
or ecx, 0xffffffff
nop
cmp ecx, 0xffffffff
nop dword [eax + eax]
xchg edx, edx
nop
nop
nop dword [eax]
pop ecx
je 0x408787
inc esi
dec esi
popfd
cmp ecx, ebx
pushfd
push ebx
mov ebx, eax
or ebx, eax
cmp eax, ebx
pop ebx
je 0x408850
inc edi
dec edi
inc esp
dec esp
popfd
pushfd
je 0x408568
push ebx
push eax
push edx
mov edx, ebx
or ebx, eax
or eax, edx
cmp ebx, eax
pop edx
pop eax
pop ebx
je 0x408414
push ecx
pop ecx
inc eax
dec eax
popfd
cmp dword [ebx + 0x18], eax
pushfd
jmp 0x408877
popfd
pushfd
jg 0x4087c1
popfd
mov edx, dword [ebx + 0x20]
add edx, dword [ebx + 0x18]
cmp eax, edx
pushfd
push eax
not eax
not eax
rol esp, 0x20
mov eax, ecx
and eax, 0
not ebx
not ebx
cmp eax, 0
mov ebx, ebx
nop dword [eax + eax]
pop eax
je 0x4086a5
push ecx
pop ecx
popfd
pushfd
je 0x4085f9
push eax
push ebx
push edx
mov edx, eax
or eax, ebx
or ebx, edx
cmp eax, ebx
pop edx
pop ebx
pop eax
je 0x4086ec
inc edx
dec edx
inc ebx
dec ebx
mov ebx, ebx
popfd
pushfd
jbe 0x4084c1
popfd
mov esi, 0x401fd0
sub esi, 0x401e80
pushfd
push edx
mov edx, ecx
and edx, ecx
cmp ecx, edx
pop edx
je 0x4087e1
inc ecx
dec ecx
inc ecx
dec ecx
jmp 0x408473