Function at 0x41ac91
Capabilities:
Query environment variable
Read .ini file

Disassembly:
push 0x431e3e
jmp fcn.004188fd
push 0x431e91
jmp fcn.004188fd
push 0x431ea7
jmp fcn.004188fd
mov eax, dword [0x432004]
mov dword [0x432088], eax
mov eax, dword [0x432008]
mov dword [0x43202c], eax
xor eax, eax
mov dword [0x43207c], eax
mov dword [0x432080], eax
mov dword [0x432084], eax
mov dword [0x432094], eax
mov dword [0x43215c], eax
mov dword [0x432160], eax
mov esi, dword [section..bss]
mov edi, dword [0x432030]
mov dword [0x432048], esi
lea eax, [edi + 0x100]
cmp eax, dword [0x432088]
jae 0x4186d8
cmp byte [esi + 0x10], 0
je 0x41ae44
cmp byte [esi + 0x10], 0x3b
je 0x41ae44
mov al, 0xf
stosb byte es:[edi], al
mov eax, esi
stosd dword es:[edi], eax
inc dword [0x432160]
add esi, 0x10
mov byte [0x432198], 0
mov byte [0x432199], 0
cmp byte [esi], 0x1a
jne 0x41ae25
push edi
add esi, 2
movzx ecx, byte [esi - 1]
cmp byte [esi + ecx], 0x3a
je 0x41ad73
cmp byte [esi + ecx], 0x3d
je 0x41ad97
call fcn.0041b909
jae 0x41adce
cmp byte [esi + ecx], 0x1a
jne 0x41ad5b
push esi
push ecx
lea esi, [esi + ecx + 2]
movzx ecx, byte [esi - 1]
call fcn.0041b8dd
jae 0x41adb3
pop ecx
pop esi
call fcn.0041b8dd
jae 0x41adce
pop edi
sub esi, 2
xor bx, bx
call fcn.0041b238
jmp 0x41ae4c
pop edi
call fcn.0041b7cc
cmp byte [esi + 1], 0x3a
je 0x41ad8a
mov byte [edi], 2
inc edi
stosd dword es:[edi], eax
inc esi
xor al, al
stosb byte es:[edi], al
jmp 0x41ad0c
mov byte [edi], 4
inc edi
stosd dword es:[edi], eax
add esi, 2
jmp 0x41ad0c
pop edi
call fcn.0041b970
mov byte [edi], 3
inc edi
stosd dword es:[edi], eax
xor al, al
stosb byte es:[edi], al
inc esi
xor bx, bx
call fcn.0041b238
jmp 0x41ae4c
pop ecx
pop edx
pop edi
push eax
push ebx
push esi
mov esi, edx
movzx ecx, byte [esi - 1]
call fcn.0041b7cc
mov byte [edi], 2
inc edi
stosd dword es:[edi], eax
pop esi
pop ebx
pop eax
stosb byte es:[edi], al
push edi
pop edi
mov dl, al
mov al, 1
stosb byte es:[edi], al
mov ax, bx
stosw word es:[edi], ax
mov al, dl
stosb byte es:[edi], al
cmp bx, 0xa51
je 0x41ae7d
cmp bx, 0x8d3
je 0x41ae7d
cmp bx, 0x9a6
je 0x41ae7d
cmp bx, 0xc48
je 0x41aec0
cmp bx, 0xac9
je 0x41afb5
cmp bx, 0x1548
je 0x41b010
call fcn.0041b238
jmp 0x41ae4c
lodsb al, byte [esi]
or al, al
je 0x41ae4c
cmp al, 0x3a
je 0x4188a4
dec esi
mov dword [0x432158], 0
call fcn.0041b2b8
jmp 0x41ae4c
add esi, 0x10
call fcn.0041a8eb
cmp esi, dword [0x432030]
jb 0x41acd1
cmp dword [0x43215c], 0
je 0x41ae6d
pop eax
pop dword [0x432048]
jmp 0x4188c0
xor al, al
stosb byte es:[edi], al
add edi, 0xf
and edi, 0xfffffff0
mov dword [0x432034], edi
ret
mov eax, esp
sub eax, dword [0x432010]
cmp eax, 0x100
jb 0x4186e2
push dword [0x432048]
mov ax, bx
shl eax, 0x10
push eax
inc dword [0x43215c]
cmp bx, 0xa51
je 0x41af52
cmp bx, 0x9a6
je 0x41af77
call fcn.0041b238
jmp 0x41ae4c
cmp byte [esi], 0x1a
jne 0x41ae1e
push edi
inc esi
movzx ecx, byte [esi]
inc esi
call fcn.0041b909
pop edi
jae 0x41aedf
sub esi, 2
jmp 0x41ae1e
mov dl, al
mov al, 1
stosb byte es:[edi], al
mov ax, bx
stosw word es:[edi], ax
mov al, dl
stosb byte es:[edi], al
lodsb al, byte [esi]
or al, al
jne 0x4188ce
cmp bx, 0xa51
je 0x41af0f
cmp bx, 0x8d3
je 0x41af0f
cmp bx, 0x9a6
je 0x41af0f
jmp 0x41ae4c
cmp dword [0x43215c], 0
je 0x4188c7
cmp bx, word [esp + 2]
jne 0x4188c7
dec dword [0x43215c]
pop eax
pop edx
cmp bx, 0xa51
jne 0x41ae4c
test al, 0xc
je 0x41ae4c
test al, 0x10
jne 0x41ae4c
sub edi, 8
jmp 0x41ae4c
push edi
call fcn.0041b238
xor al, al
stosb byte es:[edi], al
xchg dword [esp], esi
mov edi, esi
call fcn.0041c4f5
pop esi
cmp al, 0x30
je 0x41af9d
cmp al, 0x31
je 0x41afa9
or byte [esp], 0x10
jmp 0x41ae4c
push edi
call fcn.0041b238
xor al, al
stosb byte es:[edi], al
xchg dword [esp], esi
mov edi, esi
call fcn.0041c4f5
pop esi
cmp al, 0x30
je 0x41af9d
cmp al, 0x31
jne 0x41ae4c
stosb byte es:[edi], al
jmp 0x41ae4c
or byte [esp], 1
sub edi, 4
jmp 0x41b059
or byte [esp], 4
sub edi, 4
jmp 0x41ae4c
cmp dword [0x43215c], 0
je 0x4188c7
cmp word [esp + 2], 0xa51
jne 0x4188c7
lodsb al, byte [esi]
or al, al
je 0x41b03b
cmp al, 0x1a
jne 0x4188ce
push edi
movzx ecx, byte [esi]
inc esi
call fcn.0041b909
jb 0x4188ce
pop edi
cmp bx, 0xa51
jne 0x4188ce
test byte [esp], 4
jne 0x41b032
mov dl, al
mov al, 1
stosb byte es:[edi], al
mov ax, bx
stosw word es:[edi], ax
mov al, dl
stosb byte es:[edi], al
jmp 0x41af52
push edi
call fcn.0041b238
xor al, al
stosb byte es:[edi], al
xchg dword [esp], esi
mov edi, esi
call fcn.0041c4f5
pop esi
or al, al
je 0x41ae4c
stosb byte es:[edi], al
jmp 0x41ae4c
sub edi, 4
or byte [esp], 1
jmp 0x41b0b8
bts dword [esp], 1
jb 0x4188c7
test byte [esp], 4
je 0x41ae4c
sub edi, 4
or byte [esp], 1
jmp 0x41b059
cmp esi, dword [0x432030]
jae 0x41ae58
mov dword [0x432048], esi
add esi, 0x10
cmp byte [esi], 0x1a
jne 0x41b0b8
inc esi
movzx ecx, byte [esi]
inc esi
cmp byte [esi + ecx], 0x3a
je 0x41b08b
push edi
call fcn.0041b909
pop edi
jae 0x41b091
add esi, ecx
jmp 0x41b0b8
lea esi, [esi + ecx + 1]
jmp 0x41b06e
cmp bx, 0xa51
je 0x41b0d8
cmp bx, 0x8d3
je 0x41b0d8
cmp bx, 0x9a6
je 0x41b0d8
cmp bx, 0xc48
je 0x41b100
cmp bx, 0xac9
je 0x41b195
lodsb al, byte [esi]
or al, al
je 0x41b059
cmp al, 0x1a
je 0x41b0cb
cmp al, 0x3b
je 0x41b0cb
cmp al, 0x22
je 0x41b0d3
jmp 0x41b0b8
lodsb al, byte [esi]
movzx eax, al
add esi, eax
jmp 0x41b0b8
lodsd eax, dword [esi]
add esi, eax
jmp 0x41b0b8
mov eax, esp
sub eax, dword [0x432010]
cmp eax, 0x100
jb 0x4186e2
push dword [0x432048]
mov ax, bx
shl eax, 0x10
push eax
inc dword [0x43215c]
jmp 0x41b0b8
cmp byte [esi], 0x1a
jne 0x41b0b8
push edi
inc esi
movzx ecx, byte [esi]
inc esi
call fcn.0041b909
pop edi
jae 0x41b117
add esi, ecx
jmp 0x41b0b8
lodsb al, byte [esi]
or al, al
jne 0x4188ce
cmp bx, 0xa51
je 0x41b13a
cmp bx, 0x8d3
je 0x41b13a
cmp bx, 0x9a6
je 0x41b13a
jmp 0x41b059
cmp dword [0x43215c], 0
je 0x4188c7
cmp bx, word [esp + 2]
jne 0x4188c7
dec dword [0x43215c]
pop eax
pop edx
test al, 1
je 0x41b059
cmp bx, 0xa51
jne 0x41ae4c
test al, 0x10
je 0x41ae4c
mov al, 0xf
stosb byte es:[edi], al
mov eax, dword [0x432048]
stosd dword es:[edi], eax
inc dword [0x432160]
mov eax, 0xc4801
stosd dword es:[edi], eax
mov eax, 0xa5101
stosd dword es:[edi], eax
jmp 0x41ae4c
cmp dword [0x43215c], 0
je 0x4188c7
cmp word [esp + 2], 0xa51
jne 0x4188c7
lodsb al, byte [esi]
or al, al
je 0x41b20e
cmp al, 0x1a
jne 0x4188ce
push edi
movzx ecx, byte [esi]
inc esi
call fcn.0041b909
jb 0x4188ce
pop edi
cmp bx, 0xa51
jne 0x4188ce
mov al, byte [esp]
test al, 1
je 0x41b0b8
test al, 4
jne 0x41b0b8
test al, 0x10
jne 0x41b203
xor al, al
mov byte [esp], al
mov al, 0xf
stosb byte es:[edi], al
mov eax, dword [0x432048]
stosd dword es:[edi], eax
inc dword [0x432160]
mov eax, 0xa5101
stosd dword es:[edi], eax
jmp 0x41af52
bts dword [esp], 1
jb 0x4188c7
mov al, byte [esp]
test al, 1
je 0x41b059
test al, 4
jne 0x41b059
and al, 0xfe
or al, 8
mov byte [esp], al
jmp 0x41ae4c