Function at 0x4173e9
Capabilities:
Query environment variable

Disassembly:
push 0x8dc
mov eax, 0x50a7c7
call fcn.004ec79c
mov edi, ecx
cmp dword [edi + 0x18], 8
mov dword [ebp - 0x838], edi
jb 0x41740d
add edi, 4
mov eax, dword [edi]
jmp 0x417412
add edi, 4
mov eax, edi
mov ebx, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov esi, 0x400
push esi
lea ecx, [ebp - 0x818]
push ecx
push eax
call ebx
mov dword [ebp - 0x844], eax
cmp eax, esi
jbe 0x41781f
xor ecx, ecx
push 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004e63c0
xor esi, esi
pop ecx
mov dword [ebp - 0x840], eax
cmp eax, esi
jne 0x4175f6
call fcn.00411dd9
cmp byte [eax], 0
jne 0x4174c6
lea eax, [ebp - 0x8e8]
push eax
call fcn.004071c6
lea eax, [ebp - 0x8e0]
push str.CSystemCommands::ReplaceEnvVariables___failed_to_allocate_memory.
push eax
mov dword [ebp - 4], esi
call fcn.004058d5
pop ecx
pop ecx
lea eax, [ebp - 0x834]
push eax
lea ecx, [ebp - 0x8e8]
call fcn.0040574e
lea edi, [ebp - 0x834]
mov byte [ebp - 4], 1
call fcn.00405549
push esi
push 1
mov esi, edi
call fcn.0040754f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x8e8]
call fcn.00405a60
jmp 0x417831
lea eax, [ebp - 0x8e0]
push eax
mov dword [ebp - 4], 2
call fcn.00405430
mov byte [ebp - 4], 3
call fcn.00411dd9
lea ecx, [ebp - 0x860]
call fcn.00405346
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x4174fc
mov edi, dword [eax + 4]
jmp 0x4174ff
lea edi, [eax + 4]
lea eax, [ebp - 0x8e0]
push 0x5251c8
push eax
call fcn.004058d5
pop ecx
pop ecx
push edi
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0x5251c0
push eax
call fcn.004058d5
pop ecx
pop ecx
push str.CSystemCommands::ReplaceEnvVariables___failed_to_allocate_memory.
push eax
call fcn.004058d5
pop ecx
pop ecx
push esi
push 1
lea esi, [ebp - 0x860]
mov byte [ebp - 4], 3
call fcn.0040754f
lea eax, [ebp - 0x83c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x83c]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4175a9
lea eax, [ebp - 0x860]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040532c
push 0x537
push str..Registry.cpp
push eax
push esi
lea ecx, [ebp - 0x83c]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x860]
call fcn.0040754f
lea ecx, [ebp - 0x83c]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x8e0]
mov byte [ebp - 4], 2
call fcn.0040539b
jmp 0x4174c1
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, dword [ebp - 0x838]
cmp dword [esi + 0x18], 8
jb 0x41760b
mov edi, dword [edi]
push dword [ebp - 0x844]
push dword [ebp - 0x840]
push edi
call ebx
cmp eax, dword [ebp - 0x844]
jbe 0x417805
call fcn.00411dd9
cmp byte [eax], 0
jne 0x4176b8
lea eax, [ebp - 0x8e8]
push eax
call fcn.004071c6
mov dword [ebp - 4], 9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
push 0x525218
push ecx
lea eax, [ebp - 0x8e0]
push str.CSystemCommands::ReplaceEnvVariables___failed_to_expand
push eax
call fcn.004058d5
add esp, 0xc
push eax
call fcn.004058d5
add esp, 0xc
push eax
call fcn.00417f8d
lea eax, [ebp - 0x834]
push eax
lea ecx, [ebp - 0x8e8]
call fcn.0040574e
lea edi, [ebp - 0x834]
mov byte [ebp - 4], 0xa
call fcn.00405549
push 0
push 1
mov esi, edi
call fcn.0040754f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x8e8]
call fcn.00405a60
jmp 0x417811
lea eax, [ebp - 0x8e0]
push eax
mov dword [ebp - 4], 0xb
call fcn.00405430
mov byte [ebp - 4], 0xc
call fcn.00411dd9
lea ecx, [ebp - 0x860]
call fcn.00405346
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 8
jb 0x4176ee
mov edi, dword [eax + 4]
jmp 0x4176f1
lea edi, [eax + 4]
lea eax, [ebp - 0x8e0]
push 0x5251c8
push eax
call fcn.004058d5
pop ecx
pop ecx
push edi
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0x5251c0
push eax
call fcn.004058d5
pop ecx
pop ecx
push str.CSystemCommands::ReplaceEnvVariables___failed_to_expand
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0x525218
push eax
call fcn.004058d5
pop ecx
pop ecx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
call fcn.00417f8d
push 0
push 1
lea esi, [ebp - 0x860]
mov byte [ebp - 4], 0xc
call fcn.0040754f
lea eax, [ebp - 0x83c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x83c]
mov byte [ebp - 4], 0xe
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4177b8
lea eax, [ebp - 0x860]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040532c
push 0x53d
push str..Registry.cpp
push eax
push esi
lea ecx, [ebp - 0x83c]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x860]
call fcn.0040754f
lea ecx, [ebp - 0x83c]
mov byte [ebp - 4], 0xc
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x8e0]
mov byte [ebp - 4], 0xb
call fcn.0040539b
jmp 0x4176b3
push dword [ebp - 0x840]
push esi
call fcn.00407685
push dword [ebp - 0x840]
call fcn.004e7ea6
pop ecx
jmp 0x417831
lea eax, [ebp - 0x818]
push eax
push dword [ebp - 0x838]
call fcn.00407685
call fcn.004ec7f8
ret