Function at 0x414500
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x99c
mov eax, dword [0x42567c]
xor eax, ebp
mov dword [ebp - 8], eax
push 0x4213b4
call dword [sym.imp.MSVCR80.dll_getenv]
add esp, 4
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
je 0x41453b
mov eax, dword [ebp - 0x20c]
jmp 0x414cb9
movsx eax, byte [0x424a3c]
test eax, eax
je 0x4145ac
mov dword [ebp - 0x20c], 0x424a3c
mov ecx, dword [ebp - 0x20c]
push ecx
call fcn.0041a230
add esp, 4
test eax, eax
jne 0x4145a1
mov edx, dword [ebp - 0x20c]
push edx
call fcn.0041a3c0
add esp, 4
test eax, eax
je 0x4145a1
mov eax, dword [ebp - 0x20c]
push eax
push 0x4213c0
lea ecx, [ebp - 0x998]
push ecx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x998]
push edx
call fcn.0041a660
add esp, 4
mov eax, dword [ebp - 0x20c]
jmp 0x414cb9
mov eax, dword [str._WNCZONE_workzone.num]
push eax
call sub.MSVCR80.dll_strlen
add esp, 4
mov dword [ebp - 0x218], eax
mov ecx, dword [str._WNCZONE_workzone.num]
push ecx
lea edx, [ebp - 0x208]
push edx
call sub.MSVCR80.dll_strcpy
add esp, 8
mov eax, dword [ebp - 0x218]
lea ecx, [ebp + eax - 0x208]
mov dword [ebp - 0x210], ecx
mov edx, 0x200
sub edx, dword [ebp - 0x218]
mov dword [ebp - 0x218], edx
jmp 0x41461a
mov eax, dword [ebp - 0x210]
add eax, 1
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0x218]
sub ecx, 1
mov dword [ebp - 0x218], ecx
cmp dword [ebp - 0x218], 0
jle 0x41462e
mov edx, dword [ebp - 0x210]
mov byte [edx], 0x20
jmp 0x4145fc
push 0x200
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x208]
push ecx
call fcn.00415ce0
add esp, 0xc
cmp dword [ebp - 0x214], 0
je 0x41465f
push str.WNCZONE_is_not_defined_n
call fcn.0041a660
add esp, 4
lea edx, [ebp - 0x214]
push edx
push 0x200
lea eax, [ebp - 0x208]
push eax
call fcn.00416350
lea ecx, [ebp - 0xa]
mov dword [ebp - 0x210], ecx
jmp 0x414691
mov edx, dword [ebp - 0x210]
sub edx, 1
mov dword [ebp - 0x210], edx
mov eax, dword [ebp - 0x210]
lea ecx, [ebp - 0x208]
cmp eax, ecx
jb 0x4146be
mov edx, dword [ebp - 0x210]
movsx eax, byte [edx]
cmp eax, 0x20
jg 0x4146be
mov ecx, dword [ebp - 0x210]
movsx edx, byte [ecx]
test edx, edx
jl 0x4146be
jmp 0x414682
mov eax, dword [ebp - 0x210]
add eax, 1
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0x210]
mov byte [ecx], 0
cmp dword [ebp - 0x214], 0
jne 0x414802
push 0x421404
lea edx, [ebp - 0x208]
push edx
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x41472c
lea eax, [ebp - 0x208]
push eax
push str.Error_opening_file__s_for_read_access_n
lea ecx, [ebp - 0x398]
push ecx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x398]
push edx
call fcn.0041a660
add esp, 4
mov eax, dword [ebp - 4]
push eax
push 0x50
lea ecx, [ebp - 0x398]
push ecx
call dword [sym.imp.MSVCR80.dll_fgets]
add esp, 0xc
test eax, eax
jne 0x41477e
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
lea eax, [ebp - 0x208]
push eax
push str.Error_reading_file__s_n
lea ecx, [ebp - 0x398]
push ecx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x398]
push edx
call fcn.0041a660
add esp, 4
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
lea ecx, [ebp - 0x398]
push ecx
call sub.MSVCR80.dll_strlen
add esp, 4
lea edx, [ebp + eax - 0x399]
mov dword [ebp - 0x210], edx
jmp 0x4147b8
mov eax, dword [ebp - 0x210]
sub eax, 1
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0x210]
lea edx, [ebp - 0x398]
cmp ecx, edx
jb 0x4147e5
mov eax, dword [ebp - 0x210]
movsx ecx, byte [eax]
cmp ecx, 0x20
jg 0x4147e5
mov edx, dword [ebp - 0x210]
movsx eax, byte [edx]
test eax, eax
jl 0x4147e5
jmp 0x4147a9
mov ecx, dword [ebp - 0x210]
add ecx, 1
mov dword [ebp - 0x210], ecx
mov edx, dword [ebp - 0x210]
mov byte [edx], 0
jmp 0x414b61
mov eax, dword [str._WNCCONF_workzone.num]
push eax
call sub.MSVCR80.dll_strlen
add esp, 4
mov dword [ebp - 0x218], eax
mov ecx, dword [str._WNCCONF_workzone.num]
push ecx
lea edx, [ebp - 0x598]
push edx
call sub.MSVCR80.dll_strcpy
add esp, 8
mov eax, dword [ebp - 0x218]
lea ecx, [ebp + eax - 0x598]
mov dword [ebp - 0x210], ecx
mov edx, 0x200
sub edx, dword [ebp - 0x218]
mov dword [ebp - 0x218], edx
jmp 0x414870
mov eax, dword [ebp - 0x210]
add eax, 1
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0x218]
sub ecx, 1
mov dword [ebp - 0x218], ecx
cmp dword [ebp - 0x218], 0
jle 0x414884
mov edx, dword [ebp - 0x210]
mov byte [edx], 0x20
jmp 0x414852
push 0x200
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x598]
push ecx
call fcn.00415ce0
add esp, 0xc
cmp dword [ebp - 0x214], 0
je 0x414991
mov edx, dword [ebp - 0x214]
push edx
lea eax, [ebp - 0x598]
push eax
push str._s_expansion_error_:__d
lea ecx, [ebp - 0x398]
push ecx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x398]
push edx
call fcn.0041a620
add esp, 4
mov eax, dword [str._WNCHOME_client_wncconf_workzone.num]
push eax
call sub.MSVCR80.dll_strlen
add esp, 4
mov dword [ebp - 0x218], eax
mov ecx, dword [str._WNCHOME_client_wncconf_workzone.num]
push ecx
lea edx, [ebp - 0x598]
push edx
call sub.MSVCR80.dll_strcpy
add esp, 8
mov eax, dword [ebp - 0x218]
lea ecx, [ebp + eax - 0x598]
mov dword [ebp - 0x210], ecx
mov edx, 0x200
sub edx, dword [ebp - 0x218]
mov dword [ebp - 0x218], edx
jmp 0x41494c
mov eax, dword [ebp - 0x210]
add eax, 1
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0x218]
sub ecx, 1
mov dword [ebp - 0x218], ecx
cmp dword [ebp - 0x218], 0
jle 0x414960
mov edx, dword [ebp - 0x210]
mov byte [edx], 0x20
jmp 0x41492e
push 0x200
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x598]
push ecx
call fcn.00415ce0
add esp, 0xc
cmp dword [ebp - 0x214], 0
je 0x414991
push str.WNCHOME_is_not_defined_n
call fcn.0041a660
add esp, 4
lea edx, [ebp - 0x399]
mov dword [ebp - 0x210], edx
jmp 0x4149ae
mov eax, dword [ebp - 0x210]
sub eax, 1
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0x210]
lea edx, [ebp - 0x598]
cmp ecx, edx
jb 0x4149db
mov eax, dword [ebp - 0x210]
movsx ecx, byte [eax]
cmp ecx, 0x20
jg 0x4149db
mov edx, dword [ebp - 0x210]
movsx eax, byte [edx]
test eax, eax
jl 0x4149db
jmp 0x41499f
mov ecx, dword [ebp - 0x210]
add ecx, 1
mov dword [ebp - 0x210], ecx
mov edx, dword [ebp - 0x210]
mov byte [edx], 0
push 0x421480
lea eax, [ebp - 0x598]
push eax
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x414a2b
mov ecx, dword [ebp - 4]
push ecx
push 0x50
lea edx, [ebp - 0x398]
push edx
call dword [sym.imp.MSVCR80.dll_fgets]
add esp, 0xc
test eax, eax
jne 0x414a69
cmp dword [ebp - 4], 0
je 0x414a3e
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
lea ecx, [ebp - 0x598]
push ecx
push str.Error_reading__s_file_n
lea edx, [ebp - 0x398]
push edx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x398]
push eax
call fcn.0041a660
add esp, 4
lea ecx, [ebp - 0x99c]
push ecx
push 0x4214a0
lea edx, [ebp - 0x398]
push edx
call dword [sym.imp.MSVCR80.dll_sscanf]
add esp, 0xc
cmp eax, 1
je 0x414a94
mov dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x99c]
add eax, 1
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x99c]
push ecx
push str._08x
lea edx, [ebp - 0x398]
push edx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.MSVCR80.dll_rewind]
add esp, 4
lea ecx, [ebp - 0x398]
push ecx
push 0x4214ac
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.MSVCR80.dll_fprintf]
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
push 0x4214b0
lea ecx, [ebp - 0x208]
push ecx
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x414b3b
lea edx, [ebp - 0x208]
push edx
push str.Error_creating__s_file_n
lea eax, [ebp - 0x398]
push eax
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x398]
push ecx
call fcn.0041a660
add esp, 4
lea edx, [ebp - 0x398]
push edx
push 0x4214d0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.MSVCR80.dll_fprintf]
add esp, 0xc
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
lea edx, [ebp - 0x398]
push edx
push str._WNCTMP__s
push 0x424a3c
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
push 0x424a3c
call sub.MSVCR80.dll_strlen
add esp, 4
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
add eax, 0x424a3c
mov dword [ebp - 0x210], eax
mov ecx, 0x180
sub ecx, dword [ebp - 0x218]
mov dword [ebp - 0x218], ecx
jmp 0x414bd0
mov edx, dword [ebp - 0x210]
add edx, 1
mov dword [ebp - 0x210], edx
mov eax, dword [ebp - 0x218]
sub eax, 1
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
jle 0x414be4
mov ecx, dword [ebp - 0x210]
mov byte [ecx], 0x20
jmp 0x414bb2
push 0x180
lea edx, [ebp - 0x214]
push edx
push 0x424a3c
call fcn.00415ce0
add esp, 0xc
cmp dword [ebp - 0x214], 0
je 0x414c0d
xor eax, eax
jmp 0x414cb9
mov dword [ebp - 0x210], 0x424bbb
jmp 0x414c28
mov eax, dword [ebp - 0x210]
sub eax, 1
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x424a3c
jb 0x414c51
mov ecx, dword [ebp - 0x210]
movsx edx, byte [ecx]
cmp edx, 0x20
jg 0x414c51
mov eax, dword [ebp - 0x210]
movsx ecx, byte [eax]
test ecx, ecx
jl 0x414c51
jmp 0x414c19
mov edx, dword [ebp - 0x210]
add edx, 1
mov dword [ebp - 0x210], edx
mov eax, dword [ebp - 0x210]
mov byte [eax], 0
push 0x424a3c
call fcn.0041a230
add esp, 4
test eax, eax
jne 0x414cb4
push 0x424a3c
call fcn.0041a3c0
add esp, 4
test eax, eax
je 0x414cb4
push 0x424a3c
push str.Could_not_create_temporary_directory__s
lea ecx, [ebp - 0x398]
push ecx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x398]
push edx
call fcn.0041a660
add esp, 4
mov eax, 0x424a3c
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0041b6f2
mov esp, ebp
pop ebp
ret