Function at 0x53c868
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x4c
push 0
push 0
dec ecx
jne 0x53c870
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x10], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00406998
xor eax, eax
push ebp
push 0x53cde4
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 4]
mov eax, 0x53ce00
call fcn.004074cc
test eax, eax
jle 0x53c8d1
movzx eax, byte [ebp - 0x11]
push eax
lea eax, [ebp - 0x220]
push eax
xor ecx, ecx
mov edx, 0x53ce00
mov eax, dword [ebp - 4]
call fcn.00479824
mov edx, dword [ebp - 0x220]
lea eax, [ebp - 4]
call fcn.00406a04
mov edx, dword [ebp - 4]
mov eax, 0x53ce10
call fcn.004074cc
test eax, eax
jle 0x53c908
lea eax, [ebp - 0x224]
push eax
mov cx, 0x2f
mov edx, 0xff
mov eax, dword [ebp - 4]
call fcn.0053c72c
mov edx, dword [ebp - 0x224]
lea eax, [ebp - 4]
call fcn.00406a04
movzx eax, byte [ebp - 0x11]
push eax
lea eax, [ebp - 0x228]
push eax
xor ecx, ecx
mov edx, 0x53ce20
mov eax, dword [ebp - 4]
call fcn.00479824
mov edx, dword [ebp - 0x228]
lea eax, [ebp - 4]
call fcn.00406a04
mov edi, 3
mov ebx, 0x6201b8
lea edx, [ebp - 0x22c]
mov eax, dword [ebp - 4]
call fcn.0046fb70
mov eax, dword [ebp - 0x22c]
push eax
lea edx, [ebp - 0x230]
mov eax, dword [ebx]
call fcn.0046fb70
mov eax, dword [ebp - 0x230]
pop edx
call fcn.004074cc
mov esi, eax
test esi, esi
jle 0x53ca2d
lea eax, [ebp - 0x21a]
xor ecx, ecx
mov edx, 0x208
call fcn.00403a80
push 0x208
lea eax, [ebp - 0x21a]
push eax
mov eax, dword [ebx]
call fcn.00406a3c
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsW
test eax, eax
je 0x53ca2d
mov eax, dword [ebx]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
test eax, eax
je 0x53c9bd
sub eax, 4
mov eax, dword [eax]
lea ecx, [eax + 1]
lea eax, [ebp - 4]
mov edx, 1
call fcn.0040722c
lea eax, [ebp - 0x238]
lea edx, [ebp - 0x21a]
mov ecx, 0x104
call fcn.00406bb0
push dword [ebp - 0x238]
push 0x53ce38
push dword [ebp - 4]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00406f68
movzx eax, byte [0x53ce3c]
push eax
lea eax, [ebp - 0x23c]
push eax
mov ecx, 0x53ce38
mov edx, 0x53ce4c
mov eax, dword [ebp - 4]
call fcn.00479824
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 4]
call fcn.00406a04
add ebx, 4
dec edi
jne 0x53c93b
lea edx, [ebp - 0x240]
mov eax, dword [ebp - 4]
call fcn.0046fc38
mov edx, dword [ebp - 0x240]
mov eax, 0x53ce60
call fcn.004074cc
mov esi, eax
test esi, esi
jle 0x53ca89
mov ecx, 0xb
sub ecx, esi
inc ecx
lea eax, [ebp - 4]
mov edx, esi
call fcn.0040722c
lea eax, [ebp - 0x244]
call fcn.0053c7c4
mov edx, dword [ebp - 0x244]
lea eax, [ebp - 4]
mov ecx, dword [ebp - 4]
call fcn.00406e84
movzx eax, byte [ebp - 0x11]
push eax
lea eax, [ebp - 0x248]
push eax
xor ecx, ecx
mov edx, 0x53ce84
mov eax, dword [ebp - 4]
call fcn.00479824
mov edx, dword [ebp - 0x248]
lea eax, [ebp - 4]
call fcn.00406a04
mov edx, dword [ebp - 4]
mov eax, 0x53ce98
call fcn.004074cc
test eax, eax
jle 0x53cae9
lea eax, [ebp - 0x24c]
push eax
mov cx, 0x2c
mov edx, 0xff
mov eax, dword [ebp - 4]
call fcn.0053c72c
mov edx, dword [ebp - 0x24c]
lea eax, [ebp - 4]
call fcn.00406a04
lea edx, [ebp - 0x250]
mov eax, dword [ebp - 4]
call fcn.004702dc
mov edx, dword [ebp - 0x250]
lea eax, [ebp - 4]
call fcn.00406a04
mov edx, dword [ebp - 4]
mov eax, 0x53cea8
call fcn.004074cc
mov edi, eax
cmp edi, 1
jne 0x53cb5b
lea eax, [ebp - 4]
mov ecx, 1
mov edx, 1
call fcn.0040722c
mov edx, dword [ebp - 4]
mov eax, 0x53cea8
call fcn.004074cc
mov edi, eax
test edi, edi
jle 0x53cc0b
lea eax, [ebp - 4]
push eax
mov ecx, edi
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040715c
jmp 0x53cc0b
mov esi, edi
mov edx, dword [ebp - 4]
mov eax, 0x53ceb8
call fcn.004074cc
mov edi, eax
test esi, esi
jle 0x53cbc0
cmp esi, edi
jge 0x53cbc0
mov eax, dword [ebp - 4]
test eax, eax
je 0x53cb91
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x53cb91
lea eax, [ebp - 4]
mov edx, dword [ebp - 4]
call fcn.00405c04
cmp word [eax + esi*2 - 4], 0x20
jne 0x53cbaa
lea eax, [ebp - 4]
mov ecx, esi
mov edx, 1
call fcn.0040722c
jmp 0x53cc0b
lea eax, [ebp - 4]
push eax
mov ecx, esi
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040715c
jmp 0x53cc0b
mov edx, dword [ebp - 4]
mov eax, 0x53cecc
call fcn.004712c4
mov edi, eax
test edi, edi
jle 0x53cc0b
mov ecx, edi
mov edx, dword [ebp - 4]
mov eax, 0x53ceb8
call fcn.0046e2e4
mov esi, eax
mov ecx, edi
mov edx, dword [ebp - 4]
mov eax, 0x53cee0
call fcn.0046e2e4
cmp esi, eax
jle 0x53cc0b
lea eax, [ebp - 4]
push eax
mov ecx, esi
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040715c
mov edx, dword [ebp - 4]
mov eax, 0x53cea8
call fcn.004074cc
mov esi, eax
test esi, esi
jle 0x53cc6f
mov eax, dword [ebp - 4]
test eax, eax
je 0x53cc3b
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x53cc3b
lea eax, [ebp - 4]
mov edx, dword [ebp - 4]
call fcn.00405c04
test eax, eax
je 0x53cc44
sub eax, 4
mov eax, dword [eax]
mov ecx, eax
sub ecx, esi
inc ecx
lea eax, [ebp - 4]
mov edx, esi
call fcn.0040722c
lea edx, [ebp - 0x254]
mov eax, dword [ebp - 4]
call fcn.0047037c
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 4]
call fcn.00406a04
mov edx, dword [ebp - 4]
mov eax, 0x53cef0
call fcn.004074cc
cmp eax, 2
je 0x53cca6
mov edx, dword [ebp - 4]
mov eax, 0x53cef0
call fcn.004074cc
mov esi, eax
test esi, esi
jle 0x53cca6
mov ecx, esi
sub ecx, 2
lea eax, [ebp - 4]
mov edx, 1
call fcn.0040722c
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.004069b0
lea eax, [ebp - 0x25c]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040715c
mov eax, dword [ebp - 0x25c]
lea edx, [ebp - 0x258]
call fcn.0046fc38
mov eax, dword [ebp - 0x258]
mov edx, 0x53cf04
call fcn.00407154
jne 0x53cda9
lea eax, [ebp - 4]
mov ecx, 0xd
mov edx, 1
call fcn.0040722c
mov eax, dword [ebp - 4]
call fcn.00470f58
test al, al
jne 0x53cda9
lea eax, [ebp - 8]
call fcn.0053c7c4
push dword [ebp - 8]
push 0x53ce38
push dword [ebp - 4]
lea eax, [ebp - 0x260]
mov edx, 3
call fcn.00406f68
mov eax, dword [ebp - 0x260]
call fcn.00470f58
test al, al
je 0x53cd5f
push dword [ebp - 8]
push 0x53ce38
push dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov edx, 3
call fcn.00406f68
jmp 0x53cda9
lea eax, [ebp - 0xc]
call fcn.0053d4e8
push dword [ebp - 0xc]
push 0x53ce38
push dword [ebp - 4]
lea eax, [ebp - 0x264]
mov edx, 3
call fcn.00406f68
mov eax, dword [ebp - 0x264]
call fcn.00470f58
test al, al
je 0x53cda9
push dword [ebp - 0xc]
push 0x53ce38
push dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov edx, 3
call fcn.00406f68
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x53cdeb
lea eax, [ebp - 0x264]
mov edx, 0xc
call fcn.004069a8
lea eax, [ebp - 0x230]
mov edx, 5
call fcn.004069a8
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004069a8
ret