Function at 0x407bf0
Capabilities:
Query environment variable

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xcc
mov ebx, dword [esp + 0xe0]
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x4256bb
mov eax, dword [method.QString.fromAscii_helper_char_const__int_]
mov dword [esp + 0x20], eax
call eax
mov dword [esp + 0x44], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x4256bd
call dword [esp + 0x20]
mov dword [esp + 0x40], eax
lea esi, [esp + 0x3c]
mov dword [esp], esi
call fcn.00407228
push eax
mov dword [esp + 0xc], 1
lea edi, [esp + 0x44]
mov dword [esp + 8], edi
lea ebp, [esp + 0x40]
mov dword [esp + 4], ebp
mov dword [esp], esi
call dword [method.QString.replace_QString_const__QString_const__Qt::CaseSensitivity_]
mov eax, dword [eax]
mov dword [esp + 0x38], eax
lock inc dword [eax]
setne dl
mov eax, dword [esp + 0x3c]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408498
mov eax, dword [esp + 0x40]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408484
mov eax, dword [esp + 0x44]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408470
mov dword [esp], str.LOCALAPPDATA
call sub.msvcrt.dll_getenv
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [esp + 0x20]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
lock inc dword [eax]
setne dl
lea edi, [esp + 0xa0]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], str.Temp_
mov dword [esp], edi
mov eax, dword [method.QString.fromAscii_char_const__int_]
mov dword [esp + 0x1c], eax
lea ebp, [esp + 0x4c]
call eax
push eax
mov dword [esp + 4], edi
lea ebp, [esp + 0x4c]
mov dword [esp], ebp
mov esi, dword [method.QString.append_QString_const_]
call esi
mov eax, dword [esp + 0xa0]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408458
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x50], eax
lock inc dword [eax]
setne dl
lea eax, [esp + 0x38]
mov dword [esp + 0x28], eax
mov dword [esp + 4], eax
lea eax, [esp + 0x50]
mov dword [esp], eax
call esi
mov eax, dword [esp + 0x50]
mov dword [ebx], eax
lock inc dword [eax]
setne dl
lea edi, [esp + 0xa4]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], str..bmp
mov dword [esp], edi
call dword [esp + 0x1c]
push eax
mov dword [esp + 4], edi
mov dword [esp], ebx
call esi
mov eax, dword [esp + 0xa4]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408440
mov eax, dword [esp + 0x50]
lock dec dword [eax]
setne dl
test dl, dl
je 0x40842c
mov eax, dword [esp + 0x4c]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408418
mov eax, dword [esp + 0x48]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408404
mov dword [esp], ebx
mov edi, dword [method.QFile.exists_QString_const_]
call edi
test al, al
jne 0x407dfe
lea ebp, [esp + 0x54]
mov dword [esp], ebp
call fcn.00407a7c
push ecx
mov dword [esp + 4], ebp
mov dword [esp], ebx
call dword [method.QString.operator_QString_const_]
mov eax, dword [esp + 0x54]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4084c0
mov dword [esp], ebx
call edi
test al, al
jne 0x407eb1
mov dword [esp], str.PROGRAMDATA
call sub.msvcrt.dll_getenv
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [esp + 0x20]
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
lock inc dword [eax]
setne dl
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], str.MicrosoftUser_Account_PicturesGuest.bmp
lea eax, [esp + 0xa8]
mov dword [esp], eax
lea ebp, [esp + 0x5c]
call dword [esp + 0x1c]
push edx
lea eax, [esp + 0xa8]
mov dword [esp + 4], eax
lea ebp, [esp + 0x5c]
mov dword [esp], ebp
call esi
mov eax, dword [esp + 0xa8]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4084d4
mov dword [esp + 4], ebp
mov dword [esp], ebx
call dword [method.QString.operator_QString_const_]
mov eax, dword [esp + 0x5c]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4084ec
mov eax, dword [esp + 0x58]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408500
mov dword [esp], ebx
call edi
test al, al
jne 0x408127
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [esp + 0x20]
mov dword [esp + 0x68], eax
lea eax, [esp + 0x68]
mov dword [esp + 4], eax
lea eax, [esp + 0x6c]
mov dword [esp], eax
call dword [method.QDir.QDir_QString_const_]
lea eax, [esp + 0x6c]
mov dword [esp + 4], eax
lea eax, [esp + 0x70]
mov dword [esp], eax
call dword [method.QDir.dirName___const]
push eax
mov dword [esp], str.ALLUSERSPROFILE
call sub.msvcrt.dll_getenv
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [esp + 0x20]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
lock inc dword [eax]
setne dl
lea ebp, [esp + 0xac]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x4256bd
mov dword [esp], ebp
lea eax, [esp + 0x64]
mov dword [esp + 0x24], eax
call dword [esp + 0x1c]
push eax
mov dword [esp + 4], ebp
lea eax, [esp + 0x64]
mov dword [esp + 0x24], eax
mov dword [esp], eax
call esi
mov eax, dword [esp + 0xac]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408514
mov eax, dword [esp + 0x64]
mov dword [esp + 0x74], eax
lock inc dword [eax]
setne dl
lea eax, [esp + 0x70]
mov dword [esp + 4], eax
lea eax, [esp + 0x74]
mov dword [esp], eax
call esi
mov eax, dword [esp + 0x74]
mov dword [esp + 0x78], eax
lock inc dword [eax]
setne dl
lea ebp, [esp + 0xb0]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], str.MicrosoftUser_Account_Pictures_
mov dword [esp], ebp
lea eax, [esp + 0x78]
mov dword [esp + 0x2c], eax
call dword [esp + 0x1c]
push eax
mov dword [esp + 4], ebp
lea eax, [esp + 0x78]
mov dword [esp + 0x2c], eax
mov dword [esp], eax
call esi
mov eax, dword [esp + 0xb0]
lock dec dword [eax]
setne dl
test dl, dl
je 0x40852c
mov eax, dword [esp + 0x78]
mov dword [esp + 0x7c], eax
lock inc dword [eax]
setne dl
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
lea eax, [esp + 0x7c]
mov dword [esp], eax
call esi
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x80], eax
lock inc dword [eax]
setne dl
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], str..bmp
lea eax, [esp + 0xb4]
mov dword [esp], eax
lea ebp, [esp + 0x80]
call dword [esp + 0x1c]
push eax
lea eax, [esp + 0xb4]
mov dword [esp + 4], eax
lea ebp, [esp + 0x80]
mov dword [esp], ebp
call esi
mov eax, dword [esp + 0xb4]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408544
mov dword [esp + 4], ebp
mov dword [esp], ebx
call dword [method.QString.operator_QString_const_]
mov eax, dword [esp + 0x80]
lock dec dword [eax]
setne dl
test dl, dl
je 0x40855c
mov eax, dword [esp + 0x7c]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408574
mov eax, dword [esp + 0x78]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408588
mov eax, dword [esp + 0x74]
lock dec dword [eax]
setne dl
test dl, dl
je 0x40859c
mov eax, dword [esp + 0x64]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4085b0
mov eax, dword [esp + 0x60]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4085c4
mov eax, dword [esp + 0x70]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4085d8
lea eax, [esp + 0x6c]
mov dword [esp], eax
call dword [method.QDir.QDir__]
mov eax, dword [esp + 0x68]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4084ac
mov dword [esp], ebx
call edi
test al, al
jne 0x408321
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [esp + 0x20]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x8c]
mov dword [esp + 4], eax
lea ebp, [esp + 0x90]
mov dword [esp], ebp
call dword [method.QDir.QDir_QString_const_]
mov dword [esp + 4], ebp
lea eax, [esp + 0x94]
mov dword [esp], eax
call dword [method.QDir.dirName___const]
push eax
mov dword [esp], str.ALLUSERSPROFILE
call sub.msvcrt.dll_getenv
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [esp + 0x20]
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
lock inc dword [eax]
setne dl
lea edi, [esp + 0xb8]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x4256bd
mov dword [esp], edi
lea eax, [esp + 0x88]
mov dword [esp + 0x24], eax
call dword [esp + 0x1c]
push eax
mov dword [esp + 4], edi
lea eax, [esp + 0x88]
mov dword [esp + 0x24], eax
mov dword [esp], eax
call esi
mov eax, dword [esp + 0xb8]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4083ec
mov eax, dword [esp + 0x88]
mov dword [esp + 0x98], eax
lock inc dword [eax]
setne dl
lea eax, [esp + 0x94]
mov dword [esp + 4], eax
lea eax, [esp + 0x98]
mov dword [esp], eax
call esi
mov eax, dword [esp + 0x98]
mov dword [esp + 0x9c], eax
lock inc dword [eax]
setne dl
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], str.MicrosoftUser_Account_PicturesGuest.bmp
lea eax, [esp + 0xbc]
mov dword [esp], eax
lea edi, [esp + 0x9c]
call dword [esp + 0x1c]
push ecx
lea eax, [esp + 0xbc]
mov dword [esp + 4], eax
lea edi, [esp + 0x9c]
mov dword [esp], edi
call esi
mov eax, dword [esp + 0xbc]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4083d4
mov dword [esp + 4], edi
mov dword [esp], ebx
call dword [method.QString.operator_QString_const_]
mov eax, dword [esp + 0x9c]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4083bc
mov eax, dword [esp + 0x98]
lock dec dword [eax]
setne dl
test dl, dl
je 0x4083a4
mov eax, dword [esp + 0x88]
lock dec dword [eax]
setne dl
test dl, dl
je 0x40838c
mov eax, dword [esp + 0x84]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408374
mov eax, dword [esp + 0x94]
lock dec dword [eax]
setne dl
test dl, dl
je 0x408360
mov dword [esp], ebp
call dword [method.QDir.QDir__]
mov eax, dword [esp + 0x8c]
lock dec dword [eax]
setne dl
test dl, dl
je 0x40834c
mov eax, dword [esp + 0x38]
lock dec dword [eax]
setne dl
test dl, dl
jne 0x40833c
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
mov eax, ebx
add esp, 0xcc
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x408321
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x408307
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4082f6
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4082e5
mov eax, dword [esp + 0x98]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4082d0
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4082bb
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x408299
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x408208
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407dc3
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407db1
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407d9f
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407d8d
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407d21
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407ca6
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407c94
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407c82
mov eax, dword [esp + 0x68]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x408127
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407dfe
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407e80
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407e9f
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407eb1
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407f7e
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x407ff8
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x40807a
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x40809c
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4080ae
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4080c0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4080d2
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4080e4
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x4080f6
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call dword [method.QString.free_QString::Data_]
jmp 0x408108