Function at 0x413708
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov eax, dword [0x47a4b0]
mov dl, byte [0x47c1d0]
push ebx
push esi
push edi
push 0x3f
mov ebx, ecx
pop esi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x11b]
mov byte [ebp - 0x11c], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x31b]
mov byte [ebp - 0x31c], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x41b]
mov byte [ebp - 0x41c], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, esi
xor eax, eax
lea edi, [ebp - 0x21b]
mov byte [ebp - 0x21c], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
and dword [ebp - 4], 0
stosb byte es:[edi], al
mov edi, 0xff
lea eax, [ebp - 0x11c]
push edi
push eax
push str.ALTUSERNAME
mov dword [ebp - 8], ebx
call esi
test eax, eax
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x11c]
push str.DEFAULT
push eax
call fcn.00432240
pop ecx
pop ecx
test eax, eax
push edi
je 0x41396d
lea eax, [ebp - 0x31c]
push eax
push str.USERKEY
call esi
test eax, eax
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x31c]
lea ecx, [ebp - 0x18]
push eax
call fcn.0044406f
mov ebx, 0x476228
lea ecx, [ebp - 0x18]
push ebx
push 0x23
call fcn.0043c27b
lea eax, [ebp - 0x21c]
push edi
push eax
push str.EXTRAINFO
call esi
mov edi, dword [ebp - 8]
lea eax, [ebp - 0x11c]
push ebx
push eax
lea ecx, [ebp - 0x10]
lea esi, [edi + 0x850]
call fcn.00443fa0
push eax
lea eax, [ebp - 8]
push eax
call fcn.0044417b
push eax
mov ecx, esi
call fcn.0044401f
lea ecx, [ebp - 8]
call fcn.00443f32
lea ecx, [ebp - 0x10]
call fcn.00443f32
lea eax, [ebp - 0x21c]
lea ecx, [ebp - 0xc]
push eax
call fcn.00443fa0
mov eax, dword [eax]
push 0x476914
push eax
call fcn.0042c509
pop ecx
test eax, eax
pop ecx
jne 0x41387a
push 0x47c1d0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 1
call fcn.00443fa0
jmp 0x41389f
lea eax, [ebp - 0x21c]
push str._user_s__license_n
push eax
lea ecx, [ebp - 8]
mov dword [ebp - 4], 6
call fcn.00443fa0
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0044417b
push eax
mov ecx, esi
call fcn.004442fe
test byte [ebp - 4], 4
je 0x4138b9
and dword [ebp - 4], 0xfffffffb
lea ecx, [ebp - 0x10]
call fcn.00443f32
test byte [ebp - 4], 2
je 0x4138cb
and dword [ebp - 4], 0xfffffffd
lea ecx, [ebp - 8]
call fcn.00443f32
test byte [ebp - 4], 1
je 0x4138d9
lea ecx, [ebp - 0x1c]
call fcn.00443f32
lea ecx, [ebp - 0xc]
call fcn.00443f32
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xc]
push ebx
push eax
call fcn.004441ef
push eax
mov ecx, esi
call fcn.004442fe
lea ecx, [ebp - 0xc]
call fcn.00443f32
lea eax, [ebp - 0x31c]
lea ecx, [ebp - 8]
push eax
call fcn.00443fa0
push eax
lea eax, [ebp - 0x11c]
push 0x4761c8
push eax
lea ecx, [ebp - 0x10]
call fcn.00443fa0
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0044417b
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00444115
push eax
lea ecx, [edi + 0x854]
call fcn.0044401f
lea ecx, [ebp - 0xc]
call fcn.00443f32
lea ecx, [ebp - 0x1c]
call fcn.00443f32
lea ecx, [ebp - 0x10]
call fcn.00443f32
lea ecx, [ebp - 8]
call fcn.00443f32
push 0x477390
lea ecx, [ebp - 0x14]
jmp 0x41398c
lea eax, [ebp - 0x41c]
push eax
push str.DAYSLEFT
call esi
test eax, eax
je 0x413991
lea eax, [ebp - 0x41c]
lea ecx, [ebx + 0x858]
push eax
call fcn.0044406f
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
call fcn.00443ca7
lea ecx, [ebp - 0x18]
call fcn.00443f32
lea ecx, [ebp - 0x14]
call fcn.00443f32
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
leave
ret 4