Function at 0x45d1a0
Capabilities:
Query environment variable

Disassembly:
sub esp, 8
push ebx
push ebp
shl eax, 4
add eax, dword [edx + 8]
push esi
push edi
mov edi, dword [esp + 0x1c]
test ecx, ecx
je 0x45d1c9
push edi
call fcn.0047a370
lea eax, [edi + eax*2 + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 4
mov ebx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x10], ebx
test eax, eax
je 0x45d3e3
mov ecx, eax
mov dword [esp + 0x14], eax
mov eax, dword [ecx]
test eax, eax
je 0x45d3e3
jmp 0x45d1f0
cmp ebx, eax
jae 0x45d208
mov dx, word [ebx]
mov word [edi], dx
add ebx, 2
add edi, 2
cmp ebx, eax
jb 0x45d1f4
mov dword [esp + 0x10], ebx
mov esi, dword [ecx + 4]
movzx eax, byte [esi + 0x17]
mov ebp, edi
cmp eax, 3
ja case.default.0x45d21a
jmp dword [eax*4 + 0x45d414]
mov eax, esi
call fcn.004011c0
cmp dword [0x4cb678], 0
jne 0x45d2da
cmp dword [esi + 0xc], 0
jne 0x45d2da
cmp dword [0x4cda14], esi
jne 0x45d24b
test edi, edi
jne 0x45d2a4
mov ecx, dword [esi + 0x18]
push 0
lea eax, [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x45d2a0
mov dword [0x4cda14], 0
test edi, edi
je 0x45d29a
mov eax, dword [0x4cb654]
test eax, eax
je 0x45d28d
mov edx, dword [esi + 0x18]
push edx
push str.An_environment_variable_is_being_accessed__see_NoEnv.
push eax
push 0x4cc4b0
xor ecx, ecx
call fcn.00431240
mov ecx, dword [esi + 0x18]
call fcn.00478130
jmp 0x45d3bc
dec eax
jmp 0x45d3bc
test edi, edi
je 0x45d2cd
cmp byte [esi + 0x17], 0
jne 0x45d2af
mov eax, dword [esi + 0xc]
jmp 0x45d2b1
mov eax, esi
test byte [eax + 0x15], 4
je 0x45d2be
mov eax, esi
call fcn.00431350
xor eax, eax
mov word [edi], ax
mov dword [0x4cda14], eax
jmp 0x45d3bc
mov dword [0x4cda14], esi
xor eax, eax
jmp 0x45d3bc
mov eax, dword [esi + 0xc]
mov ebx, eax
shr ebx, 1
test edi, edi
jne 0x45d2f0
mov eax, ebx
mov ebx, dword [esp + 0x10]
jmp 0x45d3bc
test eax, eax
jne 0x45d31b
movzx eax, byte [esi + 0x17]
neg eax
sbb eax, eax
and eax, esi
test byte [eax + 0x15], 4
je 0x45d30b
mov eax, esi
call fcn.00431350
mov ebx, dword [esp + 0x10]
xor ecx, ecx
mov word [edi], cx
xor eax, eax
jmp 0x45d3bc
mov esi, dword [esi + 8]
cmp edi, esi
jne 0x45d32d
mov eax, ebx
mov ebx, dword [esp + 0x10]
jmp 0x45d3bc
cmp eax, 0x186a0
jae 0x45d360
mov ecx, esi
movzx eax, word [ecx]
test ax, ax
je 0x45d352
mov edi, edi
add ecx, 2
mov word [ebp], ax
movzx eax, word [ecx]
add ebp, 2
test ax, ax
jne 0x45d340
xor edx, edx
mov eax, ebx
mov ebx, dword [esp + 0x10]
mov word [ebp], dx
jmp 0x45d3bc
push eax
push esi
push edi
call fcn.00498820
add esp, 0xc
xor eax, eax
mov word [edi + ebx*2], ax
mov eax, ebx
mov ebx, dword [esp + 0x10]
jmp 0x45d3bc
mov ecx, dword [esi + 0xc]
push edi
call fcn.0047a370
jmp 0x45d3bc
push edi
mov ecx, 0x4ccff8
call fcn.00404510
cmp eax, 0xffffffff
jne 0x45d396
xor eax, eax
test edi, edi
je 0x45d3bc
xor ecx, ecx
mov word [edi + eax*2], cx
jmp 0x45d3bc
test edi, edi
je 0x45d3ab
xor edx, edx
mov word [edi], dx
xor eax, eax
jmp 0x45d3bc
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x10]
push eax
push edi
call ecx
add esp, 8
mov ecx, dword [esp + 0x14]
movzx edx, word [ecx + 0xa]
lea edi, [edi + eax*2]
lea eax, [ebx + edx*2]
add ecx, 0xc
mov dword [esp + 0x10], eax
mov eax, dword [ecx]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
test eax, eax
jne 0x45d1f0
movzx ecx, word [ebx]
test cx, cx
je 0x45d402
mov edx, ebx
sub edx, edi
nop
mov word [edi], cx
movzx eax, word [edx + edi + 2]
add edi, 2
mov ecx, eax
test ax, ax
jne 0x45d3f0
xor ecx, ecx
mov word [edi], cx
lea eax, [edi + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 4