Function at 0x419900
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4020
call fcn.00439b40
mov eax, dword [0x4713e0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x400c], 1
mov byte [ebp - 0x2004], 0
push 0x1fff
push 0
lea eax, [ebp - 0x2003]
push eax
call fcn.0043a830
add esp, 0xc
mov byte [ebp - 0x4004], 0
push 0x1fff
push 0
lea ecx, [ebp - 0x4003]
push ecx
call fcn.0043a830
add esp, 0xc
push str.Get_path_from_the_registry_r_n
call fcn.00426800
add esp, 4
mov edx, dword [ebp + 0xc]
push edx
push str.Get_path_from_the_registry___s__r_n
call fcn.004145f0
add esp, 8
push 0x2c
mov eax, dword [ebp + 0xc]
push eax
call fcn.00439480
add esp, 8
mov dword [ebp - 0x4008], eax
cmp dword [ebp - 0x4008], 0
jne 0x41999d
xor eax, eax
jmp 0x419c26
mov ecx, dword [ebp - 0x4008]
mov byte [ecx], 0
mov edx, dword [ebp - 0x4008]
add edx, 1
mov dword [ebp - 0x4008], edx
push 0x2000
lea eax, [ebp - 0x2004]
push eax
mov ecx, dword [ebp - 0x4008]
push ecx
call fcn.004217d0
add esp, 0xc
test eax, eax
jne 0x419a0d
mov edx, 1
imul eax, edx, 0
mov dword [ebp - 0x4018], eax
cmp dword [ebp - 0x4018], 0x2000
jae 0x4199f0
jmp 0x4199f5
call fcn.0043920a
mov ecx, dword [ebp - 0x4018]
mov byte [ebp + ecx - 0x2004], 0
mov dword [ebp - 0x400c], 0
lea edx, [ebp - 0x2004]
push edx
call fcn.004393f0
add esp, 4
mov dword [ebp - 0x4010], eax
cmp dword [ebp - 0x4010], 2
jle 0x419a7f
mov eax, 1
imul ecx, eax, 0
movzx edx, byte [ebp + ecx - 0x2004]
cmp edx, 0x22
jne 0x419a7f
push 0x22
lea eax, [ebp - 0x2004]
push eax
call fcn.00439480
add esp, 8
mov dword [ebp - 0x4014], eax
cmp dword [ebp - 0x4014], 0
je 0x419a7f
mov ecx, dword [ebp - 0x4014]
mov byte [ecx], 0
lea edx, [ebp - 0x2003]
push edx
lea eax, [ebp - 0x2004]
push eax
call fcn.004392f0
add esp, 8
mov ecx, 1
imul edx, ecx, 0
movzx eax, byte [ebp + edx - 0x2004]
test eax, eax
je 0x419ae2
push 0x2000
lea ecx, [ebp - 0x4004]
push ecx
lea edx, [ebp - 0x2004]
push edx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov dword [ebp - 0x4010], eax
cmp dword [ebp - 0x4010], 0
jle 0x419ae2
cmp dword [ebp - 0x4010], 0x2000
jae 0x419ae2
push 0x2000
lea eax, [ebp - 0x4004]
push eax
lea ecx, [ebp - 0x2004]
push ecx
call fcn.00414070
add esp, 0xc
mov edx, 1
imul eax, edx, 0
movzx ecx, byte [ebp + eax - 0x2004]
test ecx, ecx
jne 0x419b05
mov dword [ebp - 0x400c], 0
jmp 0x419bf0
lea edx, [ebp - 0x2004]
push edx
call fcn.004150e0
add esp, 4
test eax, eax
je 0x419b4f
push 0x5c
lea eax, [ebp - 0x2004]
push eax
call fcn.0043a8c0
add esp, 8
mov dword [ebp - 0x4008], eax
cmp dword [ebp - 0x4008], 0
je 0x419b43
mov ecx, dword [ebp - 0x4008]
mov byte [ecx], 0
jmp 0x419b4d
mov dword [ebp - 0x400c], 0
jmp 0x419ba4
lea edx, [ebp - 0x2004]
push edx
call fcn.004393f0
add esp, 4
movzx eax, byte [ebp + eax - 0x2005]
cmp eax, 0x5c
jne 0x419ba4
lea ecx, [ebp - 0x2004]
push ecx
call fcn.004393f0
add esp, 4
sub eax, 1
mov dword [ebp - 0x4020], eax
cmp dword [ebp - 0x4020], 0x2000
jae 0x419b91
jmp 0x419b96
call fcn.0043920a
mov edx, dword [ebp - 0x4020]
mov byte [ebp + edx - 0x2004], 0
lea eax, [ebp - 0x2004]
push eax
call fcn.00415220
add esp, 4
test eax, eax
jne 0x419bf0
mov ecx, 1
imul edx, ecx, 0
mov dword [ebp - 0x401c], edx
cmp dword [ebp - 0x401c], 0x2000
jae 0x419bd3
jmp 0x419bd8
call fcn.0043920a
mov eax, dword [ebp - 0x401c]
mov byte [ebp + eax - 0x2004], 0
mov dword [ebp - 0x400c], 0
push 0x468c9c
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x2004]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041e2f0
add esp, 8
mov eax, dword [ebp - 0x400c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439b24
mov esp, ebp
pop ebp
ret