Function at 0x401920
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ecx, 2
mov ebp, esp
push edi
mov edi, 0x557fb7
push esi
mov esi, edx
push ebx
mov ebx, eax
sub esp, 0x4c
mov dword [ebp - 0x34], edx
repe cmpsb byte [esi], byte es:[edi]
je 0x401ab7
mov esi, dword [ebp - 0x34]
mov ecx, 3
mov edi, 0x557fb9
mov eax, 1
repe cmpsb byte [esi], byte es:[edi]
seta cl
setb dl
cmp cl, dl
je 0x401abc
mov eax, dword [0x585020]
test eax, eax
je 0x401b80
cmp byte [eax], 0
je 0x401b80
mov dword [esp], eax
call sub.msvcrt.dll__strdup
lea ecx, [ebp - 0x1c]
mov dword [esp], ebx
mov edi, eax
mov dword [ebp - 0x40], eax
call fcn.0047c9c0
mov esi, dword [ebp - 0x34]
lea ecx, [ebp - 0x1c]
sub esp, 4
mov dword [esp], esi
call fcn.0047d7f0
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call fcn.0044aa60
mov dword [esp], esi
mov dword [ebp - 0x30], eax
call sub.msvcrt.dll_strlen
mov dword [esp], edi
mov dword [esp + 4], 0x557fd0
mov dword [ebp - 0x3c], eax
call sub.msvcrt.dll_strtok
test eax, eax
mov edi, eax
je 0x401be1
mov dword [ebp - 0x38], 0
mov esi, dword [sym.imp.msvcrt.dll__strnicmp]
jmp 0x401a21
cmp dword [ebp - 0x30], 3
mov ebx, 1
mov byte [ebp - 0x29], 0
je 0x401ac4
mov dword [esp + 4], 0x557fd0
mov dword [esp], 0
call sub.msvcrt.dll_strtok
test eax, eax
mov edi, eax
je 0x401ae6
test bl, bl
je 0x401ae6
cmp byte [edi], 0x21
mov dword [esp + 8], 5
mov dword [esp + 4], str._dir_
setne al
cmp al, 1
adc edi, 0
mov byte [ebp - 0x2a], al
mov dword [esp], edi
call esi
test eax, eax
je 0x4019e8
mov dword [esp + 8], 6
mov dword [esp + 4], str._file_
mov dword [esp], edi
call esi
test eax, eax
jne 0x401a73
cmp dword [ebp - 0x30], 2
mov ebx, 1
mov byte [ebp - 0x29], 0
jne 0x4019fb
add edi, 6
mov dword [esp], edi
call sub.msvcrt.dll_strlen
cmp byte [edi], 0x2a
je 0x401b60
cmp eax, 1
jle 0x401a94
cmp byte [edi + eax - 1], 0x2a
je 0x401ba0
mov eax, dword [ebp - 0x34]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
sete bl
mov byte [ebp - 0x29], bl
xor ebx, 1
mov dword [ebp - 0x38], edi
jmp 0x4019fb
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
add edi, 5
mov dword [esp + 8], 6
mov dword [esp + 4], str._file_
mov dword [esp], edi
call esi
test eax, eax
je 0x4019fb
jmp 0x401a73
cmp byte [ebp - 0x2a], 0
je 0x401b3b
cmp byte [ebp - 0x29], 0
je 0x401b3b
mov eax, dword [ebp - 0x38]
mov edx, 0x557fad
mov ecx, str.file
mov dword [esp + 4], str._____skipping__s__s_due_to_ANDROID_AAPT_IGNORE_pattern__s__n
test eax, eax
cmovne edx, eax
mov eax, 0x557fae
cmp dword [ebp - 0x30], 3
mov dword [esp + 0x10], edx
mov edx, dword [ebp - 0x34]
cmovne eax, ecx
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 0xc], edx
add eax, 0x40
mov dword [esp], eax
call fcn.004ce6b0
mov byte [ebp - 0x29], 1
mov eax, dword [ebp - 0x40]
mov dword [esp], eax
call sub.msvcrt.dll_free
lea ecx, [ebp - 0x1c]
call fcn.0047cb20
movzx eax, byte [ebp - 0x29]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
sub eax, 1
cmp dword [ebp - 0x3c], eax
jge 0x401bb8
mov dword [ebp - 0x38], edi
mov ebx, 1
mov byte [ebp - 0x29], 0
jmp 0x4019fb
mov dword [esp], str.ANDROID_AAPT_IGNORE
call sub.msvcrt.dll_getenv
test eax, eax
je 0x401bd7
cmp byte [eax], 0
mov edx, str._.svn:_.git:_.ds_store:_.scc:.:_dir__:_CVS:_thumbs.db:_picasa.ini:_
cmove eax, edx
jmp 0x40197a
sub eax, 1
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x34]
mov dword [esp], edi
mov dword [esp + 4], eax
call esi
jmp 0x401aa4
mov edx, dword [ebp - 0x3c]
mov dword [esp + 8], eax
sub edx, eax
mov eax, dword [ebp - 0x34]
add eax, edx
mov dword [esp + 4], eax
lea eax, [edi + 1]
mov dword [esp], eax
call esi
jmp 0x401aa4
mov eax, str._.svn:_.git:_.ds_store:_.scc:.:_dir__:_CVS:_thumbs.db:_picasa.ini:_
jmp 0x40197a
mov byte [ebp - 0x29], 0
jmp 0x401b3b