Function at 0x4e13f0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x404c
call fcn.00526010
push esi
push edi
lea edi, [ebp - 0x404c]
mov ecx, 0x1013
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x5a2184]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
cmp dword [0x5a51dc], 0x14
jl 0x4e1584
mov eax, dword [ebp + 0xc]
push eax
push 0x2000
lea ecx, [ebp - 0x4010]
push ecx
call fcn.004e16d0
add esp, 0xc
mov dword [ebp - 0x4040], eax
cmp dword [ebp - 0x4040], 0
je 0x4e1461
mov eax, dword [ebp - 0x4040]
jmp 0x4e1633
mov esi, esp
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp esi, esp
call fcn.0052354c
mov esi, esp
push 0
lea edx, [ebp - 0x4038]
push edx
lea eax, [ebp - 0x4010]
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp esi, esp
call fcn.0052354c
mov dword [ebp - 0xc], eax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.0052354c
cmp eax, 0xcb
jne 0x4e14b4
mov eax, 2
jmp 0x4e1633
cmp dword [ebp - 0xc], 0
jne 0x4e14d4
push 0x5a58d8
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.004991e0
mov edx, dword [ebp + 8]
mov dword [edx], eax
xor eax, eax
jmp 0x4e1633
mov eax, dword [ebp - 0xc]
shl eax, 1
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00497ff0
mov dword [ebp - 0x4030], eax
mov esi, esp
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x4030]
push eax
lea ecx, [ebp - 0x4010]
push ecx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp esi, esp
call fcn.0052354c
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x4030]
push edx
call fcn.00523b4b
add esp, 4
add eax, 1
mov dword [ebp - 0x401c], eax
mov eax, dword [ebp - 0x401c]
imul eax, eax, 3
mov dword [ebp - 0x4028], eax
mov ecx, dword [ebp - 0x4028]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.00497ff0
mov dword [ebp - 8], eax
lea eax, [ebp - 0x4028]
push eax
mov ecx, dword [ebp - 8]
push ecx
lea edx, [ebp - 0x401c]
push edx
mov eax, dword [ebp - 0x4030]
push eax
call fcn.004b35b0
mov dword [ebp - 0x4040], eax
cmp dword [ebp - 0x4040], 0
je 0x4e157f
mov eax, dword [ebp - 0x4040]
jmp 0x4e1633
jmp 0x4e1629
mov esi, esp
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp esi, esp
call fcn.0052354c
mov esi, esp
push 0
lea ecx, [ebp - 0x4045]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp esi, esp
call fcn.0052354c
mov dword [ebp - 0xc], eax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.0052354c
cmp eax, 0xcb
jne 0x4e15d1
mov eax, 2
jmp 0x4e1633
cmp dword [ebp - 0xc], 0
jne 0x4e15ee
push 0x5a58d9
mov eax, dword [ebp + 0x10]
push eax
call fcn.004991e0
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
xor eax, eax
jmp 0x4e1633
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 0x10]
push eax
call fcn.00497ff0
mov dword [ebp - 8], eax
mov esi, esp
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp esi, esp
call fcn.0052354c
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4e1629
mov eax, 0x11178
jmp 0x4e1633
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov dword [ecx], edx
xor eax, eax
push edx
mov ecx, ebp
push eax
lea edx, [0x4e1664]
call fcn.0052356f
pop eax
pop edx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00522672
add esp, 0x404c
cmp ebp, esp
call fcn.0052354c
mov esp, ebp
pop ebp
ret 0xc