Function at 0x41c084
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe0c
push esi
push edi
mov eax, 0x4e1ad8
call fcn.004c9c18
mov byte [ebp - 0x55], 0
mov word [ebp - 0x44], 0x14
mov edx, 0x4e0dee
lea eax, [ebp - 4]
call fcn.004d443c
inc dword [ebp - 0x38]
mov word [ebp - 0x44], 8
mov esi, 0x4e0878
lea edi, [ebp - 0xf0]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebp - 0x5c], eax
call fcn.004cd24c
mov ecx, 0x23
cdq
idiv ecx
mov byte [ebp - 0x55], dl
mov word [ebp - 0x44], 0x20
xor eax, eax
mov al, byte [ebp - 0x55]
mov edx, dword [ebp + eax*4 - 0xf0]
lea eax, [ebp - 0xc]
call fcn.004d443c
inc dword [ebp - 0x38]
lea edx, [ebp - 0xc]
xor ecx, ecx
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x10]
inc dword [ebp - 0x38]
lea eax, [ebp - 4]
call fcn.004d45f4
lea edx, [ebp - 0x10]
lea eax, [ebp - 4]
call fcn.004d45cc
dec dword [ebp - 0x38]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004d459c
dec dword [ebp - 0x38]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004d459c
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 8
jl 0x41c0d0
mov word [ebp - 0x44], 0x2c
mov edx, 0x4e0e37
lea eax, [ebp - 8]
call fcn.004d443c
inc dword [ebp - 0x38]
mov word [ebp - 0x44], 8
push 0x104
lea ecx, [ebp - 0x1f4]
push ecx
push str.TEMP
call sub.kernel32.dll_GetEnvironmentVariableA
test eax, eax
jbe 0x41c185
lea eax, [ebp - 0x1f4]
jmp 0x41c187
xor eax, eax
mov dword [ebp - 0x60], eax
mov word [ebp - 0x44], 0x38
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x60]
call fcn.004d443c
inc dword [ebp - 0x38]
lea edx, [ebp - 0x14]
lea eax, [ebp - 8]
call fcn.004d45cc
dec dword [ebp - 0x38]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004d459c
mov word [ebp - 0x44], 0x44
mov edx, 0x4e0e3d
lea eax, [ebp - 0x18]
call fcn.004d443c
inc dword [ebp - 0x38]
lea edx, [ebp - 0x18]
lea eax, [ebp - 8]
call fcn.004d4680
push eax
dec dword [ebp - 0x38]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004d459c
pop ecx
test cl, cl
je 0x41c261
mov word [ebp - 0x44], 0x50
lea eax, [ebp - 0x1c]
xor edx, edx
call fcn.004d4558
inc dword [ebp - 0x38]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.004d45cc
mov eax, dword [ebp + 8]
mov word [ebp - 0x44], 0x5c
push eax
dec dword [ebp - 0x38]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004d459c
dec dword [ebp - 0x38]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004d459c
dec dword [ebp - 0x38]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004d459c
pop eax
mov word [ebp - 0x44], 0x50
inc dword [ebp - 0x38]
mov edx, dword [ebp - 0x54]
mov dword fs:[0], edx
jmp 0x41c375
mov word [ebp - 0x44], 0x68
mov edx, 0x4e0e3e
lea eax, [ebp - 0x20]
call fcn.004d443c
inc dword [ebp - 0x38]
lea edx, [ebp - 0x20]
xor eax, eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x24]
inc dword [ebp - 0x38]
lea eax, [ebp - 8]
call fcn.004d45f4
lea eax, [ebp - 0x24]
xor edx, edx
mov dword [ebp - 0x28], edx
lea ecx, [ebp - 0x28]
inc dword [ebp - 0x38]
lea edx, [ebp - 4]
call fcn.004d45f4
lea eax, [ebp - 0x28]
push eax
mov edx, str..mp3
lea eax, [ebp - 0x2c]
call fcn.004d443c
inc dword [ebp - 0x38]
lea edx, [ebp - 0x2c]
xor eax, eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x30]
inc dword [ebp - 0x38]
pop eax
call fcn.004d45f4
lea edx, [ebp - 0x30]
lea eax, [ebp - 4]
call fcn.004d45cc
dec dword [ebp - 0x38]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.004d459c
dec dword [ebp - 0x38]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.004d459c
dec dword [ebp - 0x38]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.004d459c
dec dword [ebp - 0x38]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004d459c
dec dword [ebp - 0x38]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004d459c
mov word [ebp - 0x44], 0x74
lea edx, [ebp - 4]
mov eax, dword [ebp + 8]
call fcn.004d45cc
mov eax, dword [ebp + 8]
mov word [ebp - 0x44], 0x80
push eax
dec dword [ebp - 0x38]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004d459c
dec dword [ebp - 0x38]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004d459c
pop eax
mov word [ebp - 0x44], 0x74
inc dword [ebp - 0x38]
mov edx, dword [ebp - 0x54]
mov dword fs:[0], edx
pop edi
pop esi
mov esp, ebp
pop ebp
ret