Function at 0x41b7c4
Capabilities:
Query environment variable

Disassembly:
push ebx
mov edx, 0xb
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x41b7ca
call fcn.00483040
push dword [esp + 0x3c]
call fcn.00440330
mov edx, dword [esp + 0x34]
lea ecx, [esp]
call fcn.00440000
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
push 0x1f4
call fcn.00480920
lea eax, [esp + 8]
push eax
call fcn.00482f40
push 0x1f4
mov eax, dword [esp + 8]
push eax
mov eax, 0x54ff1a
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov ebx, dword [esp + 0x38]
and ebx, ebx
jle 0x41b884
push edx
call fcn.00482ea0
pop edx
push eax
push 0x2e
mov edx, dword [esp + 0xc]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x54c5b0
push edx
call fcn.00482ee0
call fcn.00482fd0
push dword [esp + 0xc]
mov eax, 0x554830
push eax
call fcn.00440312
add dword [esp + 8], edx
call fcn.0045cb7e
call fcn.00440330
mov dword [esp + 8], eax
jmp 0x41b8fb
push edx
call fcn.00482ea0
pop edx
push eax
push 0x2e
mov edx, dword [esp + 0xc]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x54c5b0
push edx
call fcn.00482ee0
call fcn.00482fd0
mov edx, dword [esp + 0xc]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x549b98
push edx
call fcn.00482ee0
call fcn.00482fd0
mov eax, 0x554830
push eax
call fcn.00440312
add dword [esp + 4], edx
call fcn.00440312
add dword [esp + 8], edx
call fcn.0045cb7e
call fcn.00440330
mov dword [esp + 8], eax
mov edx, 0x540098
lea ecx, [esp + 0xc]
call fcn.00440008
cmp dword [esp + 8], 0
je 0x41bc01
push 0x9c40
call fcn.00481d60
mov dword [esp + 0x10], eax
push dword [esp + 8]
call fcn.0045d0e3
and eax, eax
je 0x41bbd5
push dword [esp + 8]
call fcn.0045d12a
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
je 0x41bba0
push dword [esp + 0x14]
push dword [esp + 0x14]
push dword [esp + 0x10]
call fcn.0045d1df
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
je 0x41bba0
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
push 0x18
push dword [esp + 0x20]
push dword [esp + 0x20]
call fcn.00481f60
lea eax, [esp + 0x1c]
push eax
call fcn.00482f40
push dword [esp + 0x18]
call fcn.00480ef0
mov ebx, eax
add ebx, 4
push ebx
call fcn.00481d60
mov dword [esp + 0x1c], eax
push dword [esp + 0x18]
call fcn.00480ef0
mov ebx, eax
add ebx, 4
push ebx
call fcn.00481d60
mov dword [esp + 0x20], eax
push 0x18
push 0xffffffff
push dword [esp + 0x20]
push dword [esp + 0x28]
call fcn.00481da0
push dword [esp + 0x20]
push dword [esp + 0x20]
call sub.USER32.dll_OemToCharW
mov dword [esp + 0x24], 0
jmp 0x41b9f5
push dword [esp + 0x18]
call fcn.00480ef0
mov ebx, eax
add ebx, 4
cmp ebx, dword [esp + 0x24]
jl 0x41bb3a
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
push ebx
call fcn.00481ef0
mov ebx, eax
cmp ebx, 0x6a
jne 0x41ba3f
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
inc ebx
push ebx
call fcn.00481ef0
mov ebx, eax
cmp ebx, 0x26
jne 0x41ba3f
mov eax, 1
jmp 0x41ba41
xor eax, eax
and eax, eax
je 0x41ba6c
push 0xd
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
push ebx
call fcn.00481f00
push 0
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
inc ebx
push ebx
call fcn.00481f00
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
push ebx
call fcn.00481ef0
mov ebx, eax
cmp ebx, 0xd9
jne 0x41baa1
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
inc ebx
push ebx
call fcn.00481ef0
mov ebx, eax
cmp ebx, 0x25
jne 0x41baa1
mov eax, 1
jmp 0x41baa3
xor eax, eax
and eax, eax
je 0x41bace
push 0xa
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
push ebx
call fcn.00481f00
push 0
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
inc ebx
push ebx
call fcn.00481f00
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
push ebx
call fcn.00481ef0
mov ebx, eax
cmp ebx, 0xcb
jne 0x41bb03
mov ebx, dword [esp + 0x20]
add ebx, dword [esp + 0x24]
inc ebx
push ebx
call fcn.00481ef0
mov ebx, eax
cmp ebx, 0x25
jne 0x41bb03
mov eax, 1
jmp 0x41bb05
xor eax, eax
and eax, eax
je 0x41bb30
push 9
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
push ebx
call fcn.00481f00
push 0
mov ebx, dword [esp + 0x24]
add ebx, dword [esp + 0x28]
inc ebx
push ebx
call fcn.00481f00
inc dword [esp + 0x24]
jno 0x41b9f5
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
push dword [esp + 0x28]
call fcn.00481f10
lea eax, [esp + 0x1c]
push eax
call fcn.00482f40
push dword [esp + 0x1c]
call fcn.00481d80
push dword [esp + 0x20]
call fcn.00481d80
mov edx, dword [esp + 0xc]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, dword [esp + 0x1c]
push edx
call fcn.00482ee0
mov edx, 0x555bc4
push edx
call fcn.00482ee0
lea eax, [esp + 0x10]
push eax
call fcn.00482f40
push dword [0x1dec0ec]
call fcn.00468d1f
and eax, eax
je 0x41bbd0
call fcn.00469232
and eax, eax
je 0x41bbba
jmp 0x41bbaf
call fcn.00469232
and eax, eax
je 0x41bbc5
jmp 0x41bbba
call fcn.00469232
and eax, eax
je 0x41bbd0
jmp 0x41bbc5
jmp 0x41b922
push dword [esp + 0x10]
call fcn.00481d80
push dword [esp + 8]
call fcn.0045d239
and eax, eax
je 0x41bc01
push dword [esp + 8]
call fcn.0045d169
mov dword [esp + 0x28], eax
push dword [esp + 8]
call fcn.0045d189
mov ebx, dword [esp + 0x38]
and ebx, ebx
jle 0x41bc39
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
mov eax, dword [esp + 0x30]
cdq
push edx
push eax
call fcn.00480d10
pop eax
push eax
call fcn.00440300
pop edx
add eax, edx
jmp 0x41bd2e
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
mov eax, 0x540504
push eax
push dword [esp + 0x18]
call fcn.00481910
lea eax, [esp + 0x10]
push eax
call fcn.00482f40
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
mov eax, 0x5404ac
push eax
mov eax, 0x55065e
push eax
push dword [esp + 0x1c]
call fcn.004816f0
lea eax, [esp + 0x10]
push eax
call fcn.00482f40
mov eax, 0x55065e
push eax
push dword [esp + 0x10]
call fcn.00480c10
mov ebx, eax
and ebx, ebx
jne 0x41bc62
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
push 1
push dword [esp + 0x18]
call fcn.00481930
call fcn.00482fd0
mov edx, 0x5404ac
pop ecx
push ecx
call fcn.00440340
mov ecx, eax
call fcn.004402c0
je 0x41bd06
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
push 2
push dword [esp + 0x18]
call fcn.00480cc0
lea eax, [esp + 0x10]
push eax
call fcn.00482f40
mov edx, dword [esp + 0xc]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
pop eax
push eax
call fcn.00440300
pop edx
add eax, edx
jmp 0x41bd2e
push dword [esp + 0xc]
call fcn.004830a0
push dword [esp]
call fcn.004830a0
push dword [esp + 4]
call fcn.004830a0
push dword [esp + 0x18]
call fcn.004830a0
add esp, 0x2c
pop ebx
ret 8