Function at 0x45b830
Capabilities:
Query environment variable

Disassembly:
sub esp, 8
push ebx
push ebp
shl eax, 4
add eax, dword [edx + 0xc]
push esi
push edi
mov edi, dword [esp + 0x1c]
test ecx, ecx
je 0x45b859
push edi
call fcn.004aa680
lea eax, [edi + eax*2 + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 4
mov ebx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x10], ebx
test eax, eax
je 0x45ba81
mov ecx, eax
mov dword [esp + 0x14], eax
mov eax, dword [ecx]
test eax, eax
je 0x45ba81
jmp 0x45b880
cmp ebx, eax
jae 0x45b898
mov dx, word [ebx]
mov word [edi], dx
add ebx, 2
add edi, 2
cmp ebx, eax
jb 0x45b884
mov dword [esp + 0x10], ebx
mov esi, dword [ecx + 4]
movzx eax, byte [esi + 0x17]
mov ebp, edi
cmp eax, 3
ja case.default.0x45b8aa
jmp dword [eax*4 + 0x45bab4]
mov eax, esi
call fcn.00401610
cmp dword [0x516044], 0
jne 0x45b97b
cmp dword [esi + 0xc], 0
jne 0x45b97b
cmp dword [0x519f94], esi
jne 0x45b8db
test edi, edi
jne 0x45b942
mov ecx, dword [esi + 0x18]
push 0
lea eax, [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x45b93e
mov dword [0x519f94], 0
test edi, edi
je 0x45b938
cmp dword [0x516024], 0
je 0x45b92b
mov edx, dword [esi + 0x18]
push edx
push 0x509ac0
call fcn.0049fc00
add esp, 4
push eax
mov eax, dword [0x516024]
push eax
push 0x516ea8
xor ecx, ecx
call fcn.0042f8d0
mov ecx, dword [esi + 0x18]
call fcn.004a8690
jmp 0x45ba5c
dec eax
jmp 0x45ba5c
test edi, edi
je 0x45b96e
cmp byte [esi + 0x17], 0
jne 0x45b94d
mov eax, dword [esi + 0xc]
jmp 0x45b94f
mov eax, esi
test byte [eax + 0x15], 4
je 0x45b95c
mov eax, esi
call fcn.0042fa10
xor ecx, ecx
mov word [edi], cx
mov dword [0x519f94], ecx
xor eax, eax
jmp 0x45ba5c
mov dword [0x519f94], esi
xor eax, eax
jmp 0x45ba5c
mov eax, dword [esi + 0xc]
mov ebx, eax
shr ebx, 1
test edi, edi
jne 0x45b991
mov eax, ebx
mov ebx, dword [esp + 0x10]
jmp 0x45ba5c
test eax, eax
jne 0x45b9bc
movzx eax, byte [esi + 0x17]
neg eax
sbb eax, eax
and eax, esi
test byte [eax + 0x15], 4
je 0x45b9ac
mov eax, esi
call fcn.0042fa10
mov ebx, dword [esp + 0x10]
xor edx, edx
mov word [edi], dx
xor eax, eax
jmp 0x45ba5c
mov esi, dword [esi + 8]
cmp edi, esi
jne 0x45b9ce
mov eax, ebx
mov ebx, dword [esp + 0x10]
jmp 0x45ba5c
cmp eax, 0x186a0
jae 0x45ba00
mov ecx, esi
movzx eax, word [ecx]
test ax, ax
je 0x45b9f2
nop
add ecx, 2
mov word [ebp], ax
movzx eax, word [ecx]
add ebp, 2
test ax, ax
jne 0x45b9e0
xor eax, eax
mov word [ebp], ax
mov eax, ebx
mov ebx, dword [esp + 0x10]
jmp 0x45ba5c
push eax
push esi
push edi
call fcn.004cd6c0
add esp, 0xc
xor ecx, ecx
mov word [edi + ebx*2], cx
mov eax, ebx
mov ebx, dword [esp + 0x10]
jmp 0x45ba5c
mov ecx, dword [esi + 0xc]
push edi
call fcn.004aa680
jmp 0x45ba5c
push edi
mov ecx, 0x5179e8
call fcn.00404920
cmp eax, 0xffffffff
jne 0x45ba36
xor eax, eax
test edi, edi
je 0x45ba5c
xor edx, edx
mov word [edi + eax*2], dx
jmp 0x45ba5c
test edi, edi
je 0x45ba4b
xor eax, eax
mov word [edi], ax
xor eax, eax
jmp 0x45ba5c
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x10]
push ecx
push edi
call edx
add esp, 8
mov ecx, dword [esp + 0x14]
lea edi, [edi + eax*2]
movzx eax, word [ecx + 0xa]
add ecx, 0xc
lea edx, [ebx + eax*2]
mov eax, dword [ecx]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov ebx, edx
test eax, eax
jne 0x45b880
movzx ecx, word [ebx]
test cx, cx
je 0x45baa2
mov edx, ebx
sub edx, edi
lea ecx, [ecx]
mov word [edi], cx
movzx eax, word [edx + edi + 2]
add edi, 2
mov ecx, eax
test ax, ax
jne 0x45ba90
xor eax, eax
mov word [edi], ax
lea eax, [edi + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 4