Function at 0xc40f60
Capabilities:
Query environment variable

Disassembly:
mov eax, dword [esp + 4]
lea edx, [eax + 0x1e878]
mov dword [eax + 0x2c9b0], edx
mov dword [eax + 0x2c9c4], 0xc65170
mov dword [eax + 0x2c9c0], 0xc65990
mov dword [eax + 0x2c9bc], 0xc65b10
mov dword [eax + 0x2c9b8], 0xc652f0
mov dword [eax + 0x2c9b4], 0xc65be0
mov dword [eax + 0x2ca0c], 0xc65d80
mov dword [eax + 0x2ca10], 0xc66e40
mov dword [eax + 0x2ca14], 0xc6c220
mov dword [eax + 0x2ca18], 0xc67f00
mov dword [eax + 0x2ca1c], 0xc6cb50
mov dword [eax + 0x2ca20], 0xc66220
mov dword [eax + 0x2ca24], 0xc672e0
mov dword [eax + 0x2ca28], 0xc6c4b0
mov dword [eax + 0x2ca2c], 0xc69260
mov dword [eax + 0x2ca30], 0xc6d000
mov dword [eax + 0x2ca34], 0xc6dcd0
mov dword [eax + 0x2ca38], 0xc6e2f0
mov dword [eax + 0x2ca3c], 0xc70150
mov dword [eax + 0x2ca40], 0xc6e910
mov dword [eax + 0x2ca44], 0xc704b0
mov dword [eax + 0x2ca48], 0xc70b20
mov dword [eax + 0x2c9c8], 0xc71790
mov dword [eax + 0x2c9cc], 0xc70f40
mov dword [eax + 0x2c9d0], 0xc70d10
mov dword [eax + 0x2c9d4], 0xc70de0
mov dword [eax + 0x2c9d8], 0xc70bb0
mov dword [eax + 0x2c9dc], 0xc71a60
mov dword [eax + 0x2c9e0], 0xc72080
mov dword [eax + 0x2c9e4], 0xc74900
mov dword [eax + 0x2c9e8], 0xc742e0
mov dword [eax + 0x2c9ec], 0xc73bc0
mov dword [eax + 0x2c9f0], 0xc741a0
mov dword [eax + 0x2c9f4], 0xc741f0
mov dword [eax + 0x2c9f8], 0xc74240
mov dword [eax + 0x2c9fc], 0xc74290
mov dword [eax + 0x2ca04], 0xc71940
mov dword [eax + 0x2ca00], 0xc70b80
mov dword [eax + 0x2ca08], 0xc3c7f0
mov dword [eax + 0x2ca4c], 0xc74c90
mov dword [eax + 0x2ca50], 0xc75040
mov dword [eax + 0x2ca54], 0xc74c90
mov dword [eax + 0x2ca58], 0xc75040
mov dword [eax + 0x2ca5c], 0xc750a0
mov dword [eax + 0x2ca60], 0xc60cb0
mov dword [eax + 0x2ca64], 0xc60db0
mov dword [eax + 0x2ca68], 0xc60e10
mov dword [eax + 0x2ca6c], 0xc75d60
mov dword [eax + 0x2ca70], 0xc76800
mov dword [eax + 0x2ca74], 0xc75e90
mov dword [eax + 0x2ca78], 0xc3e460
mov dword [eax + 0x2ca7c], 0xc3f1a0
mov dword [eax + 0x2ca80], 0xc3dee0
mov dword [eax + 0x2ca84], 0xc3f1e0
mov dword [eax + 0x2ca88], 0xc39360
mov dword [eax + 0x2ca8c], 0xc3a6b0
mov dword [eax + 0x2ca90], 0xc38620
mov dword [eax + 0x2ca94], 0xc50af0
mov dword [0x176db20], 0xc4a8f0
jmp 0xc77eb0
push edi
push esi
push ebx
sub esp, 0x10
mov ebx, dword [esp + 0x20]
mov dword [esp], 0x1151750
call sub.msvcrt.dll_getenv
test eax, eax
je 0xc77ed3
cmp byte [eax], 0
jne 0xc78370
mov dword [esp], 0x115175e
mov esi, 0xffffffff
call sub.msvcrt.dll_getenv
test eax, eax
je 0xc77ef1
cmp byte [eax], 0
jne 0xc78350
xor eax, eax
mov edi, ebx
cpuid
xchg ebx, edi
test eax, eax
je 0xc78346
mov eax, 1
mov edi, ebx
cpuid
xchg ebx, edi
xor eax, eax
test edx, 0x800000
setne al
mov edi, eax
or edi, 2
test edx, 0x2000000
cmovne eax, edi
mov edi, eax
or edi, 4
and edx, 0x4000000
cmovne eax, edi
mov edx, eax
or edx, 8
test cl, 1
cmovne eax, edx
mov edx, eax
or edx, 0x10
test ch, 2
cmovne eax, edx
mov edx, eax
or edx, 0x20
and ecx, 0x80000
cmovne eax, edx
and eax, esi
test al, 1
je 0xc780ab
mov dword [ebx + 0x2c9c4], 0xc8c190
mov dword [ebx + 0x2c9c0], 0xc8c376
mov dword [ebx + 0x2c9bc], 0xc8c219
mov dword [ebx + 0x2c9b8], 0xc8c27f
mov dword [ebx + 0x2c9b4], 0xc8c2e2
mov dword [ebx + 0x2c9c8], 0xc8c400
mov dword [ebx + 0x2c9cc], 0xc8c460
mov dword [ebx + 0x2c9d0], 0xc8c770
mov dword [ebx + 0x2c9d4], 0xc8c6c0
mov dword [ebx + 0x2c9d8], 0xc8c5c0
mov dword [ebx + 0x2c9dc], 0xc8c820
mov dword [ebx + 0x2c9e0], 0xc8c8a0
mov dword [ebx + 0x2c9e4], 0xc8cb70
mov dword [ebx + 0x2c9e8], 0xc8ca70
mov dword [ebx + 0x2c9ec], 0xc8c920
mov dword [ebx + 0x2c9f0], 0xc8cbf0
mov dword [ebx + 0x2c9f4], 0xc8cc40
mov dword [ebx + 0x2c9f8], 0xc8cc90
mov dword [ebx + 0x2c9fc], 0xc8ca20
mov dword [ebx + 0x2ca04], 0xc8c4c0
mov dword [ebx + 0x2ca00], 0xc8cce0
mov dword [ebx + 0x2ca08], 0xc8cffc
mov dword [ebx + 0x2ca4c], 0xc8b810
mov dword [ebx + 0x2ca50], 0xc77cb0
mov dword [ebx + 0x2ca54], 0xc8b810
mov dword [ebx + 0x2ca58], 0xc77cb0
mov dword [ebx + 0x2ca5c], 0xc750a0
mov dword [ebx + 0x2ca60], 0xc8bbfa
mov dword [ebx + 0x2ca64], 0xc77e20
mov dword [ebx + 0x2ca68], 0xc77df0
mov dword [ebx + 0x2ca6c], 0xc77db0
mov dword [ebx + 0x2ca70], 0xc8be92
mov dword [ebx + 0x2ca74], 0xc8bf0d
test al, 4
je 0xc7821b
mov dword [ebx + 0x2c9c4], 0xc8d2c0
mov dword [ebx + 0x2c9c0], 0xc8d41d
mov dword [ebx + 0x2c9bc], 0xc8d342
mov dword [ebx + 0x2c9b8], 0xc8d391
mov dword [ebx + 0x2c9b4], 0xc8d3ce
mov dword [ebx + 0x2ca48], 0xc8d487
mov dword [ebx + 0x2c9c8], 0xc8d530
mov dword [ebx + 0x2c9cc], 0xc8d590
mov dword [ebx + 0x2c9d0], 0xc8d750
mov dword [ebx + 0x2c9d4], 0xc8d6a0
mov dword [ebx + 0x2c9d8], 0xc8d5f0
mov dword [ebx + 0x2c9dc], 0xc8d800
mov dword [ebx + 0x2c9e0], 0xc8d880
mov dword [ebx + 0x2c9e4], 0xc8ddb0
mov dword [ebx + 0x2c9e8], 0xc8dbf0
mov dword [ebx + 0x2c9ec], 0xc8d9e0
mov dword [ebx + 0x2c9f0], 0xc8df10
mov dword [ebx + 0x2c9f4], 0xc8df70
mov dword [ebx + 0x2c9f8], 0xc8dfd0
mov dword [ebx + 0x2c9fc], 0xc8dba0
mov dword [ebx + 0x2ca04], 0xc8d650
mov dword [ebx + 0x2ca00], 0xc8e030
mov dword [ebx + 0x2ca4c], 0xc8ea90
mov dword [ebx + 0x2ca50], 0xc8ec28
mov dword [ebx + 0x2ca54], 0xc8ea90
mov dword [ebx + 0x2ca58], 0xc8ec28
mov dword [ebx + 0x2ca5c], 0xc8ee80
mov dword [ebx + 0x2ca60], 0xc8bba0
mov dword [ebx + 0x2ca64], 0xc77d80
mov dword [ebx + 0x2ca68], 0xc77d50
mov dword [ebx + 0x2ca6c], 0xc77d10
mov dword [ebx + 0x2ca70], 0xc8ba22
mov dword [ebx + 0x2ca74], 0xc8baba
mov dword [ebx + 0x2ca78], 0xc8f040
mov dword [ebx + 0x2ca80], 0xc8f3e8
mov dword [ebx + 0x2ca94], 0xc8f4d0
mov ecx, eax
mov edx, eax
and ecx, 8
and edx, 0x10
and eax, 0x20
test ecx, ecx
je 0xc782c6
mov dword [ebx + 0x2c9c4], 0xc8ffc1
mov dword [ebx + 0x2ca0c], 0xc8f6a0
mov dword [ebx + 0x2ca10], 0xc8f9cd
mov dword [ebx + 0x2ca14], 0xc8fb82
mov dword [ebx + 0x2ca18], 0xc8fde7
mov dword [ebx + 0x2ca1c], 0xc8ff24
mov dword [ebx + 0x2ca88], 0xc396c0
mov dword [ebx + 0x2ca34], 0xc900e8
mov dword [ebx + 0x2ca38], 0xc90518
mov dword [ebx + 0x2ca3c], 0xc90758
mov dword [ebx + 0x2ca40], 0xc90a82
mov dword [ebx + 0x2ca44], 0xc90c24
mov dword [ebx + 0x2ca48], 0xc90047
mov dword [ebx + 0x2ca90], 0xc38aa0
mov dword [ebx + 0x2ca8c], 0xc3ad80
test edx, edx
je 0xc782fc
mov dword [ebx + 0x2ca0c], 0xc90d00
mov dword [ebx + 0x2ca10], 0xc94f9c
mov dword [ebx + 0x2c9e8], 0xc97280
mov dword [ebx + 0x2c9ec], 0xc97120
mov dword [ebx + 0x2ca80], 0xc973e0
test eax, eax
je 0xc78346
mov dword [ebx + 0x2ca20], 0xc974b0
mov dword [ebx + 0x2ca24], 0xc97a08
mov dword [ebx + 0x2ca28], 0xc97e44
mov dword [ebx + 0x2ca2c], 0xc97cc0
mov dword [ebx + 0x2ca30], 0xc98134
mov dword [ebx + 0x2ca88], 0xc39c10
mov dword [ebx + 0x2ca78], 0xc981d0
add esp, 0x10
pop ebx
pop esi
pop edi
ret
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_strtol
mov esi, eax
jmp 0xc77ef1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_strtol
jmp 0xc77f59