Function at 0x474610
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffed0
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x12c], edx
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x11c], edx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4748dc
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4748ac
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00404600
push pe_nt_image_headers32
lea eax, [ebp - 0x118]
push eax
push 0x4748ec
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [ebp - 8]
lea edx, [ebp - 0x118]
mov ecx, pe_nt_image_headers32
call fcn.00404870
lea eax, [ebp - 0x11c]
push eax
mov eax, dword [ebp - 8]
call fcn.004048c0
mov edx, eax
mov ecx, 1
mov eax, dword [ebp - 8]
call main
mov eax, dword [ebp - 0x11c]
mov edx, 0x474904
call fcn.00404a0c
je 0x4746d2
lea eax, [ebp - 8]
mov edx, 0x474904
call fcn.004048c8
mov eax, dword [ebp - 8]
call fcn.004090d4
test al, al
je 0x474834
lea eax, [ebp - 0x120]
mov ecx, 0x474910
mov edx, dword [ebp - 8]
call fcn.0040490c
mov eax, dword [ebp - 0x120]
call fcn.004090c4
test al, al
je 0x474834
push 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
lea eax, [ebp - 0x124]
mov ecx, 0x474910
mov edx, dword [ebp - 8]
call fcn.0040490c
mov eax, dword [ebp - 0x124]
call fcn.00404ac0
push eax
call sub.shell32.dll_ExtractIconExA
xor eax, eax
mov dword [ebp - 0x18], eax
mov dl, 1
mov eax, dword [0x4307a0]
call fcn.0043090c
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x4747e6
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000002
mov eax, dword [ebp - 0x14]
call fcn.004309e8
mov cl, 1
mov edx, 0x474938
mov eax, dword [ebp - 0x14]
call fcn.00430a50
test al, al
je 0x4747c8
lea ecx, [ebp - 0x128]
mov edx, 0x474968
mov eax, dword [ebp - 0x14]
call fcn.00430c18
mov edx, dword [ebp - 0x128]
mov eax, 0x474978
call fcn.00404c04
dec eax
jne 0x4747b6
mov eax, dword [ebp - 4]
mov edx, 0x474984
call fcn.00404654
mov dword [ebp - 0x18], 0xf
jmp 0x4747c8
mov eax, dword [ebp - 4]
mov edx, 0x4749ac
call fcn.00404654
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4747ed
mov eax, dword [ebp - 0x14]
call fcn.004309b8
mov eax, dword [ebp - 0x14]
call fcn.0040380c
ret
mov dl, 1
mov eax, dword [0x4307a0]
call fcn.0043090c
mov dword [ebp - 0x14], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x14]
call fcn.004309e8
xor ecx, ecx
mov edx, 0x4749d4
mov eax, dword [ebp - 0x14]
call fcn.00430a50
test al, al
je 0x47489a
mov edx, 0x474a08
mov eax, dword [ebp - 0x14]
call fcn.00430d6c
test al, al
je 0x47489a
lea ecx, [ebp - 0x130]
mov edx, 0x474a08
mov eax, dword [ebp - 0x14]
call fcn.00430c18
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 4]
mov edx, 0x474a20
call fcn.0040490c
mov eax, dword [ebp - 0x14]
call fcn.0040380c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4748b6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4748e3
lea eax, [ebp - 0x130]
mov edx, 6
call fcn.00404624
lea eax, [ebp - 8]
call fcn.00404600
ret