Function at 0x404460
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov dword [ebp - 0xa4], 0xc1f
mov dword [ebp - 0x14], 0x8c32
mov dword [ebp - 0x3c], 0x11214
mov dword [ebp - 0x18], 0x145cf
mov dword [ebp - 0x40], 0x1678c
mov dword [ebp - 0xc], 0x11625
mov dword [ebp - 0x70], 0x2035
mov dword [ebp - 0xa8], 0x8b2f
mov dword [ebp - 0x50], 0x333f
mov dword [ebp - 0x4c], 0x96c2
mov dword [ebp - 0x10], 0xcade
mov dword [ebp - 0x1c], 0xeee1
mov dword [ebp - 0x74], 0xcd86
mov dword [ebp - 0x38], 0x25af
mov dword [ebp - 0x5c], 0x3ab1
mov dword [ebp - 8], 0xc8e6
mov dword [ebp - 0x20], 0x151bc
mov dword [ebp - 4], 0x70c5
mov dword [ebp - 0x24], 0xf443
mov dword [ebp - 0x2c], 0x7fe8
mov dword [ebp - 0x58], 0x69fc
mov dword [ebp - 0x28], 0x32cf
mov dword [ebp - 0x34], 0xc4f5
mov dword [ebp - 0x30], 0x9663
mov dword [ebp - 0x54], 0x37f1
mov eax, dword [ebp - 0x18]
or eax, dword [ebp - 8]
je 0x40452f
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x4926
push edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x3b76
push eax
mov ecx, dword [ebp - 0x74]
sub ecx, 0xbf11
push ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0xc9af
push edx
mov eax, dword [ebp - 0xc]
sub eax, 0x4452
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x4b24
push ecx
mov edx, dword [ebp - 0x24]
add edx, 0x249c
push edx
mov eax, dword [ebp - 0x30]
add eax, 0x616d
push eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0xd4cf
push ecx
mov edx, dword [ebp - 0x10]
add edx, 0x6335
push edx
call fcn.00405210
add esp, 0x28
mov dword [ebp - 0x44], 0
jmp 0x4045aa
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x5c]
sub ecx, 0x3ab0
cmp dword [ebp - 0x44], ecx
jge 0x404724
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x50]
jge 0x4045cd
mov dword [ebp - 0x60], 1
jmp 0x4045d4
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xc]
jge 0x4045e5
mov dword [ebp - 0x64], 1
jmp 0x4045ec
mov dword [ebp - 0x64], 0
mov ecx, dword [ebp - 4]
xor ecx, dword [ebp - 0x38]
mov dword [ebp - 0x94], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x98], edx
mov eax, dword [ebp - 4]
sub eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [ebp - 0x98]
jge 0x404621
mov dword [ebp - 0x68], 1
jmp 0x404628
mov dword [ebp - 0x68], 0
mov edx, dword [ebp - 0x40]
and edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
xor eax, dword [ebp - 0x64]
or edx, eax
or edx, dword [ebp - 0x68]
je 0x40471f
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x24]
jne 0x40471f
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0xc]
jne 0x40471f
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x24]
jne 0x40471f
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x70]
jne 0x40471f
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x58]
jge 0x404680
mov dword [ebp - 0x6c], 1
jmp 0x404687
mov dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x54]
xor ecx, dword [ebp - 0x40]
or eax, ecx
or eax, dword [ebp - 0x6c]
je 0x40471f
mov edx, dword [ebp - 0x10]
xor edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 8]
jge 0x40471f
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x30]
jne 0x40471f
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x4c]
jne 0x40471f
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x30]
jne 0x40471f
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x70]
jne 0x40471f
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x3c]
jne 0x40471f
push 0xaa83
push 0x10143
push 0xbb37
push 0x11037
push 0x14ce1
push 0x36ec
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
add esp, 0x18
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
push 0x17ca2
push 0x17b2d
push 0x155d7
push 0x3c4d
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesExA]
add esp, 0x10
jmp 0x4045a1
mov eax, dword [ebp - 0x5c]
add eax, 0x1082c
push eax
call fcn.0040d600
add esp, 4
mov dword [ebp - 0x48], 0
jmp 0x404747
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x74]
sub edx, 0xcd85
cmp dword [ebp - 0x48], edx
jge 0x404979
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 4]
jge 0x40476a
mov dword [ebp - 0x78], 1
jmp 0x404771
mov dword [ebp - 0x78], 0
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp - 0x50]
and ecx, dword [ebp - 0x78]
je 0x404974
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x14]
jge 0x404791
mov dword [ebp - 0x7c], 1
jmp 0x404798
mov dword [ebp - 0x7c], 0
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
jge 0x4047ac
mov dword [ebp - 0x80], 1
jmp 0x4047b3
mov dword [ebp - 0x80], 0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [ebp - 0xa0]
jge 0x4047e8
mov dword [ebp - 0x84], 1
jmp 0x4047f2
mov dword [ebp - 0x84], 0
mov edx, dword [ebp - 0x4c]
and edx, dword [ebp - 0x7c]
and edx, dword [ebp - 0x80]
or edx, dword [ebp - 0x84]
je 0x404974
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x38]
jne 0x404974
mov ecx, dword [ebp - 0xa4]
cmp ecx, dword [ebp - 0x50]
jne 0x404974
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x10]
jne 0x404974
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x28]
jne 0x404974
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x20]
jne 0x404974
call dword [sym.imp.KERNEL32.dll_EnumSystemCodePagesA]
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x40]
jge 0x404860
mov dword [ebp - 0x88], 1
jmp 0x40486a
mov dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x54]
jge 0x40487e
mov dword [ebp - 0x8c], 1
jmp 0x404888
mov dword [ebp - 0x8c], 0
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0x14]
jge 0x40489c
mov dword [ebp - 0x90], 1
jmp 0x4048a6
mov dword [ebp - 0x90], 0
mov edx, dword [ebp - 0x88]
or edx, dword [ebp - 0x8c]
or edx, dword [ebp - 0x90]
je 0x404974
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x18]
jne 0x404974
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x34]
jne 0x404974
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x34]
jne 0x404974
mov eax, dword [ebp - 0x38]
xor eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x3c]
jge 0x404948
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp - 0x1c]
jne 0x404948
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x40]
jne 0x404948
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x20]
jne 0x404948
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0xc]
jne 0x404948
mov edx, dword [ebp - 0xa8]
cmp edx, dword [ebp - 0x10]
jne 0x404948
mov eax, dword [ebp - 0x28]
sub eax, 1
mov dword [ebp - 0x28], eax
push 0x17e8d
push 0xfe08
push 0x8509
push 0xe7e2
push 0xecba
push 0x15bdf
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
add esp, 0x18
push 0xbc
push 0x11fd
push 0x2779
push 0x6a5f
push 0xead
push 0x17877
push 0x2049
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
add esp, 0x1c
jmp 0x40473e
mov esp, ebp
pop ebp
ret