Function at 0x403932
Capabilities:
Query environment variable
Terminate process

Disassembly:
push 0x416a16
jmp fcn.00401b2c
push 0x416a69
jmp fcn.00401b2c
push 0x416a7f
jmp fcn.00401b2c
mov eax, dword [0x416b38]
mov dword [0x416bb4], eax
mov eax, dword [0x416b3c]
mov dword [0x416b5c], eax
xor eax, eax
mov dword [0x416ba8], eax
mov dword [0x416bac], eax
mov dword [0x416bb0], eax
mov dword [0x416bc0], eax
mov dword [0x416c7c], eax
mov dword [0x416c80], eax
mov esi, dword [0x416b34]
mov edi, dword [0x416b60]
mov dword [0x416b78], esi
lea eax, [edi + 0x100]
cmp eax, dword [0x416bb4]
jae 0x401926
cmp byte [esi + 0x10], 0
je 0x403abc
cmp byte [esi + 0x10], 0x3b
je 0x403abc
mov al, 0xf
stosb byte es:[edi], al
mov eax, esi
stosd dword es:[edi], eax
inc dword [0x416c80]
add esi, 0x10
mov byte [0x416cad], 0
cmp byte [esi], 0x1a
jne 0x403a99
push edi
add esi, 2
movzx ecx, byte [esi - 1]
cmp byte [esi + ecx], 0x3a
je 0x403a09
cmp byte [esi + ecx], 0x3d
je 0x403a1a
call fcn.004044db
jae 0x403a51
cmp byte [esi + ecx], 0x1a
jne 0x4039f1
push esi
push ecx
lea esi, [esi + ecx + 2]
movzx ecx, byte [esi - 1]
call fcn.004044af
jae 0x403a36
pop ecx
pop esi
call fcn.004044af
jae 0x403a51
pop edi
sub esi, 2
xor bx, bx
call fcn.00403e9a
jmp 0x403ac4
pop edi
call fcn.004043ad
mov byte [edi], 2
inc edi
stosd dword es:[edi], eax
inc esi
xor al, al
stosb byte es:[edi], al
jmp 0x4039ad
pop edi
call fcn.00404542
mov byte [edi], 3
inc edi
stosd dword es:[edi], eax
xor al, al
stosb byte es:[edi], al
inc esi
xor bx, bx
call fcn.00403e9a
jmp 0x403ac4
pop ecx
pop edx
pop edi
push eax
push ebx
push esi
mov esi, edx
movzx ecx, byte [esi - 1]
call fcn.004043ad
mov byte [edi], 2
inc edi
stosd dword es:[edi], eax
pop esi
pop ebx
pop eax
stosb byte es:[edi], al
push edi
pop edi
mov dl, al
mov al, 1
stosb byte es:[edi], al
mov ax, bx
stosw word es:[edi], ax
mov al, dl
stosb byte es:[edi], al
cmp bx, 0x853
je 0x403af5
cmp bx, 0x6d5
je 0x403af5
cmp bx, 0x7a8
je 0x403af5
cmp bx, 0xa4a
je 0x403b3e
cmp bx, 0x8cb
je 0x403c33
call fcn.00403e9a
jmp 0x403ac4
lodsb al, byte [esi]
or al, al
je 0x403ac4
cmp al, 0x3a
je 0x401ada
dec esi
cmp al, 0x3b
je 0x403abf
mov dword [0x416c78], 0
call fcn.00403f1a
jmp 0x403ac4
add esi, 0x10
call fcn.0040354c
cmp esi, dword [0x416b60]
jb 0x403972
cmp dword [0x416c7c], 0
je 0x403ae5
pop eax
pop dword [0x416b78]
jmp 0x401af6
xor al, al
stosb byte es:[edi], al
add edi, 0xf
and edi, 0xfffffff0
mov dword [0x416b64], edi
ret
mov eax, esp
sub eax, 0x100
jb 0x401930
cmp eax, dword [0x416b44]
jb 0x401930
push dword [0x416b78]
mov ax, bx
shl eax, 0x10
push eax
inc dword [0x416c7c]
cmp bx, 0x853
je 0x403bd0
cmp bx, 0x7a8
je 0x403bf5
call fcn.00403e9a
jmp 0x403ac4
cmp byte [esi], 0x1a
jne 0x403a92
push edi
inc esi
movzx ecx, byte [esi]
inc esi
call fcn.004044db
pop edi
jae 0x403b5d
sub esi, 2
jmp 0x403a92
mov dl, al
mov al, 1
stosb byte es:[edi], al
mov ax, bx
stosw word es:[edi], ax
mov al, dl
stosb byte es:[edi], al
lodsb al, byte [esi]
or al, al
jne 0x401b04
cmp bx, 0x853
je 0x403b8d
cmp bx, 0x6d5
je 0x403b8d
cmp bx, 0x7a8
je 0x403b8d
jmp 0x403ac4
cmp dword [0x416c7c], 0
je 0x401afd
cmp bx, word [esp + 2]
jne 0x401afd
dec dword [0x416c7c]
pop eax
pop edx
cmp bx, 0x853
jne 0x403ac4
test al, 0xc
je 0x403ac4
test al, 0x10
jne 0x403ac4
sub edi, 8
jmp 0x403ac4
push edi
call fcn.00403e9a
xor al, al
stosb byte es:[edi], al
xchg dword [esp], esi
mov edi, esi
call fcn.0040501c
pop esi
cmp al, 0x30
je 0x403c1b
cmp al, 0x31
je 0x403c27
or byte [esp], 0x10
jmp 0x403ac4
push edi
call fcn.00403e9a
xor al, al
stosb byte es:[edi], al
xchg dword [esp], esi
mov edi, esi
call fcn.0040501c
pop esi
cmp al, 0x30
je 0x403c1b
cmp al, 0x31
jne 0x403ac4
stosb byte es:[edi], al
jmp 0x403ac4
or byte [esp], 1
sub edi, 4
jmp 0x403cb5
or byte [esp], 4
sub edi, 4
jmp 0x403ac4
cmp dword [0x416c7c], 0
je 0x401afd
cmp word [esp + 2], 0x853
jne 0x401afd
lodsb al, byte [esi]
or al, al
je 0x403c97
cmp al, 0x1a
jne 0x401b04
push edi
movzx ecx, byte [esi]
inc esi
call fcn.004044db
jb 0x401b04
pop edi
cmp bx, 0x853
jne 0x401b04
test byte [esp], 4
jne 0x403c8e
mov dl, al
mov al, 1
stosb byte es:[edi], al
mov ax, bx
stosw word es:[edi], ax
mov al, dl
stosb byte es:[edi], al
jmp 0x403bd0
sub edi, 4
or byte [esp], 1
jmp 0x403d14
bts dword [esp], 1
jb 0x401afd
test byte [esp], 4
je 0x403ac4
sub edi, 4
or byte [esp], 1
jmp 0x403cb5
cmp esi, dword [0x416b60]
jae 0x403ad0
mov dword [0x416b78], esi
add esi, 0x10
cmp byte [esi], 0x1a
jne 0x403d14
inc esi
movzx ecx, byte [esi]
inc esi
cmp byte [esi + ecx], 0x3a
je 0x403ce7
push edi
call fcn.004044db
pop edi
jae 0x403ced
add esi, ecx
jmp 0x403d14
lea esi, [esi + ecx + 1]
jmp 0x403cca
cmp bx, 0x853
je 0x403d34
cmp bx, 0x6d5
je 0x403d34
cmp bx, 0x7a8
je 0x403d34
cmp bx, 0xa4a
je 0x403d62
cmp bx, 0x8cb
je 0x403df7
lodsb al, byte [esi]
or al, al
je 0x403cb5
cmp al, 0x1a
je 0x403d27
cmp al, 0x3b
je 0x403d27
cmp al, 0x22
je 0x403d2f
jmp 0x403d14
lodsb al, byte [esi]
movzx eax, al
add esi, eax
jmp 0x403d14
lodsd eax, dword [esi]
add esi, eax
jmp 0x403d14
mov eax, esp
sub eax, 0x100
jb 0x401930
cmp eax, dword [0x416b44]
jb 0x401930
push dword [0x416b78]
mov ax, bx
shl eax, 0x10
push eax
inc dword [0x416c7c]
jmp 0x403d14
cmp byte [esi], 0x1a
jne 0x403d14
push edi
inc esi
movzx ecx, byte [esi]
inc esi
call fcn.004044db
pop edi
jae 0x403d79
add esi, ecx
jmp 0x403d14
lodsb al, byte [esi]
or al, al
jne 0x401b04
cmp bx, 0x853
je 0x403d9c
cmp bx, 0x6d5
je 0x403d9c
cmp bx, 0x7a8
je 0x403d9c
jmp 0x403cb5
cmp dword [0x416c7c], 0
je 0x401afd
cmp bx, word [esp + 2]
jne 0x401afd
dec dword [0x416c7c]
pop eax
pop edx
test al, 1
je 0x403cb5
cmp bx, 0x853
jne 0x403ac4
test al, 0x10
je 0x403ac4
mov al, 0xf
stosb byte es:[edi], al
mov eax, dword [0x416b78]
stosd dword es:[edi], eax
inc dword [0x416c80]
mov eax, 0xa4a01
stosd dword es:[edi], eax
mov eax, 0x85301
stosd dword es:[edi], eax
jmp 0x403ac4
cmp dword [0x416c7c], 0
je 0x401afd
cmp word [esp + 2], 0x853
jne 0x401afd
lodsb al, byte [esi]
or al, al
je 0x403e70
cmp al, 0x1a
jne 0x401b04
push edi
movzx ecx, byte [esi]
inc esi
call fcn.004044db
jb 0x401b04
pop edi
cmp bx, 0x853
jne 0x401b04
mov al, byte [esp]
test al, 1
je 0x403d14
test al, 4
jne 0x403d14
test al, 0x10
jne 0x403e65
xor al, al
mov byte [esp], al
mov al, 0xf
stosb byte es:[edi], al
mov eax, dword [0x416b78]
stosd dword es:[edi], eax
inc dword [0x416c80]
mov eax, 0x85301
stosd dword es:[edi], eax
jmp 0x403bd0
bts dword [esp], 1
jb 0x401afd
mov al, byte [esp]
test al, 1
je 0x403cb5
test al, 4
jne 0x403cb5
and al, 0xfe
or al, 8
mov byte [esp], al
jmp 0x403ac4