Function at 0x401900
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ecx, 2
mov ebp, esp
push edi
mov edi, 0x531bf7
push esi
mov esi, edx
push ebx
mov ebx, eax
sub esp, 0x4c
mov dword [ebp - 0x34], edx
repe cmpsb byte [esi], byte es:[edi]
je 0x401a97
mov esi, dword [ebp - 0x34]
mov ecx, 3
mov edi, 0x531bf9
mov eax, 1
repe cmpsb byte [esi], byte es:[edi]
seta cl
setb dl
cmp cl, dl
je 0x401a9c
mov eax, dword [0x55b020]
test eax, eax
je 0x401b60
cmp byte [eax], 0
je 0x401b60
mov dword [esp], eax
call sub.msvcrt.dll__strdup
lea ecx, [ebp - 0x1c]
mov dword [esp], ebx
mov edi, eax
mov dword [ebp - 0x40], eax
call fcn.00476020
mov esi, dword [ebp - 0x34]
lea ecx, [ebp - 0x1c]
sub esp, 4
mov dword [esp], esi
call fcn.00476e40
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call fcn.0044ed70
mov dword [esp], esi
mov dword [ebp - 0x30], eax
call sub.msvcrt.dll_strlen
mov dword [esp], edi
mov dword [esp + 4], 0x531c10
mov dword [ebp - 0x3c], eax
call sub.msvcrt.dll_strtok
test eax, eax
mov edi, eax
je 0x401bc1
mov dword [ebp - 0x38], 0
mov esi, dword [sym.imp.msvcrt.dll__strnicmp]
jmp 0x401a01
cmp dword [ebp - 0x30], 3
mov ebx, 1
mov byte [ebp - 0x29], 0
je 0x401aa4
mov dword [esp + 4], 0x531c10
mov dword [esp], 0
call sub.msvcrt.dll_strtok
test eax, eax
mov edi, eax
je 0x401ac6
test bl, bl
je 0x401ac6
cmp byte [edi], 0x21
mov dword [esp + 8], 5
mov dword [esp + 4], str._dir_
setne al
cmp al, 1
adc edi, 0
mov byte [ebp - 0x2a], al
mov dword [esp], edi
call esi
test eax, eax
je 0x4019c8
mov dword [esp + 8], 6
mov dword [esp + 4], str._file_
mov dword [esp], edi
call esi
test eax, eax
jne 0x401a53
cmp dword [ebp - 0x30], 2
mov ebx, 1
mov byte [ebp - 0x29], 0
jne 0x4019db
add edi, 6
mov dword [esp], edi
call sub.msvcrt.dll_strlen
cmp byte [edi], 0x2a
je 0x401b40
cmp eax, 1
jle 0x401a74
cmp byte [edi + eax - 1], 0x2a
je 0x401b80
mov eax, dword [ebp - 0x34]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
sete bl
mov byte [ebp - 0x29], bl
xor ebx, 1
mov dword [ebp - 0x38], edi
jmp 0x4019db
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
add edi, 5
mov dword [esp + 8], 6
mov dword [esp + 4], str._file_
mov dword [esp], edi
call esi
test eax, eax
je 0x4019db
jmp 0x401a53
cmp byte [ebp - 0x2a], 0
je 0x401b1b
cmp byte [ebp - 0x29], 0
je 0x401b1b
mov eax, dword [ebp - 0x38]
mov edx, 0x531bed
mov ecx, str.file
mov dword [esp + 4], str._____skipping__s__s_due_to_ANDROID_AAPT_IGNORE_pattern__s__n
test eax, eax
cmovne edx, eax
mov eax, 0x531bee
cmp dword [ebp - 0x30], 3
mov dword [esp + 0x10], edx
mov edx, dword [ebp - 0x34]
cmovne eax, ecx
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 0xc], edx
add eax, 0x40
mov dword [esp], eax
call fcn.004b4f70
mov byte [ebp - 0x29], 1
mov eax, dword [ebp - 0x40]
mov dword [esp], eax
call sub.msvcrt.dll_free
lea ecx, [ebp - 0x1c]
call fcn.00476190
movzx eax, byte [ebp - 0x29]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
sub eax, 1
cmp dword [ebp - 0x3c], eax
jge 0x401b98
mov dword [ebp - 0x38], edi
mov ebx, 1
mov byte [ebp - 0x29], 0
jmp 0x4019db
mov dword [esp], str.ANDROID_AAPT_IGNORE
call sub.msvcrt.dll_getenv
test eax, eax
je 0x401bb7
cmp byte [eax], 0
mov edx, str._.svn:_.git:_.ds_store:_.scc:.:_dir__:_CVS:_thumbs.db:_picasa.ini:_
cmove eax, edx
jmp 0x40195a
sub eax, 1
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x34]
mov dword [esp], edi
mov dword [esp + 4], eax
call esi
jmp 0x401a84
mov edx, dword [ebp - 0x3c]
mov dword [esp + 8], eax
sub edx, eax
mov eax, dword [ebp - 0x34]
add eax, edx
mov dword [esp + 4], eax
lea eax, [edi + 1]
mov dword [esp], eax
call esi
jmp 0x401a84
mov eax, str._.svn:_.git:_.ds_store:_.scc:.:_dir__:_CVS:_thumbs.db:_picasa.ini:_
jmp 0x40195a
mov byte [ebp - 0x29], 0
jmp 0x401b1b