Function at 0x419e84
Capabilities:
Query environment variable

Disassembly:
push ebx
push edi
xor eax, eax
push eax
push eax
push eax
call fcn.00489ac0
mov edx, dword [esp + 0x18]
lea ecx, [esp]
call fcn.00444000
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489920
pop edx
push eax
push 1
push dword [esp + 0xc]
call fcn.004877b0
call fcn.00489a50
mov edx, 0x562612
pop ecx
push ecx
call fcn.004446e0
mov ecx, eax
call fcn.00444660
je 0x419f04
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489920
pop edx
push eax
push dword [esp + 8]
call fcn.00487100
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0xc]
call fcn.00487830
lea eax, [esp + 4]
push eax
call fcn.004899c0
call fcn.0046d983
mov ebx, eax
cmp ebx, 0x64
jl 0x41a10e
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489920
pop edx
push eax
push 0x3e8
call fcn.00486f00
lea eax, [esp + 8]
push eax
call fcn.004899c0
push 0x3e8
mov eax, dword [esp + 8]
push eax
mov eax, 0x571726
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov edx, dword [esp + 4]
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489960
mov edx, 0x56d8f4
push edx
call fcn.00489960
lea eax, [esp + 0xc]
push eax
call fcn.004899c0
push edx
call fcn.00489920
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489960
mov edx, 0x579548
push edx
call fcn.00489960
call fcn.004446b2
add dword [esp], edx
call fcn.0046f6ca
call fcn.004446d0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x419fbf
jl 0x419fbb
cmp ebx, 0
ja 0x419fbf
xor eax, eax
jmp 0x419fc4
mov eax, 1
or eax, eax
je 0x419ff1
mov edx, dword [esp + 4]
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489960
mov edx, 0x5642be
push edx
call fcn.00489960
lea eax, [esp + 8]
push eax
call fcn.004899c0
jmp 0x41a018
mov edx, dword [esp + 4]
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489960
mov edx, 0x56d8f4
push edx
call fcn.00489960
lea eax, [esp + 8]
push eax
call fcn.004899c0
mov ebx, dword [esp + 0x1c]
and ebx, ebx
jle 0x41a098
push edx
call fcn.00489920
pop edx
push eax
push 3
push dword [esp + 0x10]
push edx
call fcn.00489920
pop edx
push eax
mov edx, 0x56a6ae
push edx
call fcn.00489960
mov edx, dword [esp + 0x10]
push edx
call fcn.00489960
mov edx, 0x56113e
push edx
call fcn.00489960
call fcn.00489a50
mov edx, dword [esp + 0x14]
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489960
mov edx, 0x57494c
push edx
call fcn.00489960
call fcn.004446b2
add dword [esp], edx
call fcn.004446b2
add dword [esp + 4], edx
call fcn.0046106e
call fcn.004446d0
jmp 0x41a10e
push edx
call fcn.00489920
pop edx
push eax
push 3
push dword [esp + 0x10]
push edx
call fcn.00489920
pop edx
push eax
mov edx, 0x571734
push edx
call fcn.00489960
mov edx, dword [esp + 0x10]
push edx
call fcn.00489960
mov edx, 0x56113e
push edx
call fcn.00489960
call fcn.00489a50
mov edx, dword [esp + 0x14]
push edx
call fcn.00489920
pop edx
push eax
push edx
call fcn.00489960
mov edx, 0x57494c
push edx
call fcn.00489960
call fcn.004446b2
add dword [esp], edx
call fcn.004446b2
add dword [esp + 4], edx
call fcn.0046106e
call fcn.004446d0
xor eax, eax
push dword [esp + 8]
call fcn.00489b20
push dword [esp + 4]
call fcn.00489b20
push dword [esp]
call fcn.00489b20
add esp, 0xc
pop edi
pop ebx
ret 8