Function at 0x415750
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40c
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_AnimateWindow]
xor esi, esi
lea ebx, [ebx]
cmp esi, 0x24cd
jge 0x41579f
push 0
push 0
push 0
call edi
push str.dadexucufeba
push 0
push str.vepacetepomasakasato_jidahoku
push str.kilugeziyuhotecerotemapiwuzohu
call ebx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
cmp esi, 0x2a9
jge 0x4157e0
push str.liwodogawicaputi
push 0
call dword [sym.imp.KERNEL32.dll_SetFileShortNameA]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push 0
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
push 0
lea eax, [ebp - 0x40c]
push eax
push str.manidemuhonohelodocokejilivoda_xubunadayolebugu_jemohizine
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp esi, 0x6c9a95
jle 0x4157f1
cmp dword [ebp - 8], 0x5e54852a
jne 0x415800
inc esi
cmp esi, 0x124fbc6b
jl 0x415770
jmp 0x415810
lea ecx, [ebp - 4]
push ecx
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCharWidthA]
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, dword [sym.imp.USER32.dll_CharToOemA]
xor esi, esi
mov edi, edi
cmp esi, 0x56994f
jne 0x415842
mov edx, dword [0x41b3f4]
push str.kernel32.dll
mov dword [0x47ccac], edx
call edi
mov dword [0x455cf4], eax
jmp 0x415858
cmp esi, 0x13a1
jge 0x415858
lea eax, [ebp - 0x40c]
push eax
push str.laruzezibipadorohasebo_xilasagirezoziwiwimo_nipohadafijizotutimi_facopogu_rumezuduto
call ebx
inc esi
cmp esi, 0x93972c
jl 0x415820
add dword [0x47ccac], 0x131b5
push str.Virtual
push 0x41be60
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.Protect
push 0x41be60
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [0x455cf4]
push 0x41be60
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [0x47ccac]
push edx
push 0
mov dword [0x41c78c], eax
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [0x41afec]
mov dword [0x47ccb0], ecx
mov ecx, dword [0x47ccac]
xor esi, esi
mov dword [0x41c790], eax
test ecx, ecx
jbe 0x415920
mov edi, dword [sym.imp.USER32.dll_DefWindowProcA]
mov ebx, dword [sym.imp.USER32.dll_MapVirtualKeyW]
lea ebx, [ebx]
cmp esi, 0x189
jge 0x41590b
push 0
push 0
push 0
push 0
call edi
push 0
push 0
call ebx
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [0x47ccac]
mov eax, dword [0x41c790]
mov edx, dword [0x47ccb0]
mov dl, byte [edx + esi + 0x131b5]
mov byte [eax + esi], dl
inc esi
cmp esi, ecx
jb 0x4158e0
lea edx, [ebp - 8]
push edx
push 0x40
push ecx
push eax
call dword [0x41c78c]
mov eax, dword [0x41c790]
mov edi, dword [0x47ccac]
xor esi, esi
cmp byte [0x41aff0], 0
mov dword [ebp - 4], eax
mov ebx, 0x400
je 0x415967
lea esp, [esp]
test ebx, ebx
je 0x415967
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
inc esi
dec ebx
cmp byte [esi + 0x41aff0], 0
jne 0x415950
push esi
call fcn.004155e0
push 0
push 0
call sub.USER32.dll_DdeFreeStringHandle
sub edi, 1
js 0x41599d
mov esi, dword [sym.imp.USER32.dll_ReplyMessage]
cmp edi, 0x199c
jge 0x41598d
push 0
call esi
call fcn.00415520
mov ecx, dword [ebp - 4]
xor byte [ecx + edi], al
sub edi, 1
jns 0x415981
call dword [0x41c790]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx]
pop edi
pop esi
mov dword [edx + 4], 1
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10