Function at 0x4296fd
Capabilities:
Query environment variable

Disassembly:
push ebx
mov edx, 0xb
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x429703
call fcn.004ae590
push dword [esp + 0x3c]
call fcn.004543a0
mov edx, dword [esp + 0x34]
lea ecx, [esp]
call fcn.00454000
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
push 0x1f4
call fcn.004abe40
lea eax, [esp + 8]
push eax
call fcn.004ae430
push 0x1f4
mov eax, dword [esp + 8]
push eax
mov eax, 0x54891e
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov ebx, dword [esp + 0x38]
and ebx, ebx
jle 0x4297bd
push edx
call fcn.004ae3f0
pop edx
push eax
push 0x2e
mov edx, dword [esp + 0xc]
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae4c0
mov edx, 0x5456e8
push edx
call fcn.004ae4c0
call fcn.004ae520
push dword [esp + 0xc]
mov eax, 0x54d6a4
push eax
call fcn.00454382
add dword [esp + 8], edx
call fcn.0046f404
call fcn.004543a0
mov dword [esp + 8], eax
jmp 0x429834
push edx
call fcn.004ae3f0
pop edx
push eax
push 0x2e
mov edx, dword [esp + 0xc]
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae4c0
mov edx, 0x5456e8
push edx
call fcn.004ae4c0
call fcn.004ae520
mov edx, dword [esp + 0xc]
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae4c0
mov edx, 0x542e16
push edx
call fcn.004ae4c0
call fcn.004ae520
mov eax, 0x54d6a4
push eax
call fcn.00454382
add dword [esp + 4], edx
call fcn.00454382
add dword [esp + 8], edx
call fcn.0046f404
call fcn.004543a0
mov dword [esp + 8], eax
mov edx, 0x5380c4
lea ecx, [esp + 0xc]
call fcn.00454008
cmp dword [esp + 8], 0
je 0x429b0a
push 0x9c40
call fcn.004ad270
mov dword [esp + 0x18], eax
push dword [esp + 8]
call fcn.0046fb30
and eax, eax
je 0x429ade
push dword [esp + 8]
call fcn.0046fb77
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0
je 0x429ad9
push dword [esp + 0x10]
push dword [esp + 0x1c]
push dword [esp + 0x10]
call fcn.0046fc2c
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0
je 0x429ad9
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
push 0x18
push dword [esp + 0x1c]
push dword [esp + 0x28]
call fcn.004ad4c0
lea eax, [esp + 0x18]
push eax
call fcn.004ae430
push dword [esp + 0x14]
call fcn.004ac990
mov ebx, eax
add ebx, 4
push ebx
call fcn.004ad270
mov dword [esp + 0x1c], eax
push dword [esp + 0x14]
call fcn.004ac990
mov ebx, eax
add ebx, 4
push ebx
call fcn.004ad270
mov dword [esp + 0x20], eax
push 0x18
push 0xffffffff
push dword [esp + 0x1c]
push dword [esp + 0x28]
call fcn.004ad290
push dword [esp + 0x20]
push dword [esp + 0x20]
call sub.USER32.dll_OemToCharW
mov dword [esp + 0x24], 0
jmp 0x42992e
push dword [esp + 0x14]
call fcn.004ac990
mov ebx, eax
add ebx, 4
cmp ebx, dword [esp + 0x24]
jl 0x429a73
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
push ebx
call fcn.004ad3e0
mov ebx, eax
cmp ebx, 0x6a
jne 0x429978
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
inc ebx
push ebx
call fcn.004ad3e0
mov ebx, eax
cmp ebx, 0x26
jne 0x429978
mov eax, 1
jmp 0x42997a
xor eax, eax
and eax, eax
je 0x4299a5
push 0xd
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
push ebx
call fcn.004ad3f0
push 0
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
inc ebx
push ebx
call fcn.004ad3f0
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
push ebx
call fcn.004ad3e0
mov ebx, eax
cmp ebx, 0xd9
jne 0x4299da
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
inc ebx
push ebx
call fcn.004ad3e0
mov ebx, eax
cmp ebx, 0x25
jne 0x4299da
mov eax, 1
jmp 0x4299dc
xor eax, eax
and eax, eax
je 0x429a07
push 0xa
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
push ebx
call fcn.004ad3f0
push 0
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
inc ebx
push ebx
call fcn.004ad3f0
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
push ebx
call fcn.004ad3e0
mov ebx, eax
cmp ebx, 0xcb
jne 0x429a3c
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
inc ebx
push ebx
call fcn.004ad3e0
mov ebx, eax
cmp ebx, 0x25
jne 0x429a3c
mov eax, 1
jmp 0x429a3e
xor eax, eax
and eax, eax
je 0x429a69
push 9
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
push ebx
call fcn.004ad3f0
push 0
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
inc ebx
push ebx
call fcn.004ad3f0
inc dword [esp + 0x24]
jno 0x42992e
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
push dword [esp + 0x28]
call fcn.004ad400
lea eax, [esp + 0x18]
push eax
call fcn.004ae430
push dword [esp + 0x1c]
call fcn.004ad210
push dword [esp + 0x20]
call fcn.004ad210
mov edx, dword [esp + 0xc]
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae4c0
mov edx, dword [esp + 0x18]
push edx
call fcn.004ae4c0
mov edx, 0x54e84a
push edx
call fcn.004ae4c0
lea eax, [esp + 0x10]
push eax
call fcn.004ae430
jmp 0x42985b
push dword [esp + 0x18]
call fcn.004ad210
push dword [esp + 8]
call fcn.0046fc86
and eax, eax
je 0x429b0a
push dword [esp + 8]
call fcn.0046fbb6
mov dword [esp + 0x28], eax
push dword [esp + 8]
call fcn.0046fbd6
mov ebx, dword [esp + 0x38]
and ebx, ebx
jle 0x429b42
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
mov eax, dword [esp + 0x30]
cdq
push edx
push eax
call fcn.004ac730
pop eax
push eax
call fcn.00454370
pop edx
add eax, edx
jmp 0x429c66
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
mov eax, 0x5387f6
push eax
push dword [esp + 0x18]
call fcn.004ac5b0
lea eax, [esp + 0x10]
push eax
call fcn.004ae430
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
mov eax, 0x538688
push eax
mov eax, 0x548f76
push eax
push dword [esp + 0x1c]
call fcn.004ace30
lea eax, [esp + 0x10]
push eax
call fcn.004ae430
mov eax, 0x548f76
push eax
push dword [esp + 0x10]
call fcn.004abfc0
mov ebx, eax
and ebx, ebx
jne 0x429b6b
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
push 1
push dword [esp + 0x18]
call fcn.004ac920
call fcn.004ae520
mov edx, 0x538688
pop ecx
push ecx
call fcn.004543b0
mov ecx, eax
call fcn.00454330
je 0x429c0f
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
push 2
push dword [esp + 0x18]
call fcn.004ac200
lea eax, [esp + 0x10]
push eax
call fcn.004ae430
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae3f0
pop edx
push eax
mov eax, 0x5380c4
push eax
mov eax, 0x538688
push eax
push dword [esp + 0x1c]
call fcn.004ace30
lea eax, [esp + 0x10]
push eax
call fcn.004ae430
mov edx, dword [esp + 0xc]
push edx
call fcn.004ae3f0
pop edx
push eax
push edx
call fcn.004ae4c0
pop eax
push eax
call fcn.00454370
pop edx
add eax, edx
jmp 0x429c66
push dword [esp + 0xc]
call fcn.004ae5f0
push dword [esp]
call fcn.004ae5f0
push dword [esp + 4]
call fcn.004ae5f0
push dword [esp + 0x14]
call fcn.004ae5f0
add esp, 0x2c
pop ebx
ret 8