Function at 0x459d80
Capabilities:
Query environment variable

Disassembly:
sub esp, 8
push ebx
push ebp
shl eax, 4
add eax, dword [edx + 8]
push esi
push edi
mov edi, dword [esp + 0x1c]
test ecx, ecx
je 0x459da9
push edi
call fcn.00474600
lea eax, [edi + eax*2 + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 4
mov ebp, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x10], ebp
test eax, eax
je 0x459fc3
mov ecx, eax
mov dword [esp + 0x14], eax
mov eax, dword [ecx]
test eax, eax
je 0x459fc3
jmp 0x459dd0
cmp ebp, eax
jae 0x459de9
mov dx, word [ebp]
mov word [edi], dx
add ebp, 2
add edi, 2
cmp ebp, eax
jb 0x459dd4
mov dword [esp + 0x10], ebp
mov esi, dword [ecx + 4]
movzx eax, byte [esi + 0x17]
mov ebx, edi
cmp eax, 3
ja case.default.0x459dfb
jmp dword [eax*4 + 0x459ff4]
mov eax, esi
call fcn.00401160
cmp dword [0x4c404c], 0
jne 0x459ebb
cmp dword [esi + 0xc], 0
jne 0x459ebb
cmp dword [0x4c7718], esi
jne 0x459e2c
test edi, edi
jne 0x459e85
mov ecx, dword [esi + 0x18]
push 0
lea eax, [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x459e81
mov dword [0x4c7718], 0
test edi, edi
je 0x459e7b
mov eax, dword [0x4c402c]
test eax, eax
je 0x459e6e
mov edx, dword [esi + 0x18]
push edx
push str.An_environment_variable_is_being_accessed__see_NoEnv.
push eax
push 0x4c6048
xor ecx, ecx
call fcn.0042f660
mov ecx, dword [esi + 0x18]
call fcn.00472c50
jmp 0x459f9b
dec eax
jmp 0x459f9b
test edi, edi
je 0x459eae
cmp byte [esi + 0x17], 0
jne 0x459e90
mov eax, dword [esi + 0xc]
jmp 0x459e92
mov eax, esi
test byte [eax + 0x15], 4
je 0x459e9f
mov eax, esi
call fcn.0042f790
xor eax, eax
mov word [edi], ax
mov dword [0x4c7718], eax
jmp 0x459f9b
mov dword [0x4c7718], esi
xor eax, eax
jmp 0x459f9b
mov eax, dword [esi + 0xc]
mov ebp, eax
shr ebp, 1
test edi, edi
jne 0x459ed1
mov eax, ebp
mov ebp, dword [esp + 0x10]
jmp 0x459f9b
test eax, eax
jne 0x459efc
movzx eax, byte [esi + 0x17]
neg eax
sbb eax, eax
and eax, esi
test byte [eax + 0x15], 4
je 0x459eec
mov eax, esi
call fcn.0042f790
mov ebp, dword [esp + 0x10]
xor ecx, ecx
mov word [edi], cx
xor eax, eax
jmp 0x459f9b
mov esi, dword [esi + 8]
cmp edi, esi
jne 0x459f0e
mov eax, ebp
mov ebp, dword [esp + 0x10]
jmp 0x459f9b
cmp eax, 0x186a0
jae 0x459f3e
mov ecx, esi
movzx eax, word [ecx]
test ax, ax
je 0x459f31
nop
add ecx, 2
mov word [ebx], ax
movzx eax, word [ecx]
add ebx, 2
test ax, ax
jne 0x459f20
xor edx, edx
mov eax, ebp
mov ebp, dword [esp + 0x10]
mov word [ebx], dx
jmp 0x459f9b
push eax
push esi
push edi
call fcn.00492940
add esp, 0xc
xor eax, eax
mov word [edi + ebp*2], ax
mov eax, ebp
mov ebp, dword [esp + 0x10]
jmp 0x459f9b
mov ecx, dword [esi + 0xc]
push edi
call fcn.00474600
jmp 0x459f9b
mov ecx, edi
mov ebx, 0x4c6b48
call fcn.00403b00
cmp eax, 0xffffffff
jne 0x459f75
xor eax, eax
test edi, edi
je 0x459f9b
xor ecx, ecx
mov word [edi + eax*2], cx
jmp 0x459f9b
test edi, edi
je 0x459f8a
xor edx, edx
mov word [edi], dx
xor eax, eax
jmp 0x459f9b
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x10]
push eax
push edi
call ecx
add esp, 8
mov ecx, dword [esp + 0x14]
movzx edx, word [ecx + 0xa]
lea edi, [edi + eax*2]
lea eax, [ebp + edx*2]
add ecx, 0xc
mov dword [esp + 0x10], eax
mov eax, dword [ecx]
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
test eax, eax
jne 0x459dd0
movzx ecx, word [ebp]
test cx, cx
je 0x459fe2
mov edx, ebp
sub edx, edi
mov word [edi], cx
movzx eax, word [edx + edi + 2]
add edi, 2
mov ecx, eax
test ax, ax
jne 0x459fd0
xor ecx, ecx
mov word [edi], cx
lea eax, [edi + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 4