Function at 0x41e1c6
Capabilities:
Query environment variable

Disassembly:
push ebx
push edi
xor eax, eax
push eax
push eax
push eax
call fcn.00483040
mov edx, dword [esp + 0x18]
lea ecx, [esp]
call fcn.00440000
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
push 1
push dword [esp + 0xc]
call fcn.004811d0
call fcn.00482fd0
mov edx, 0x54241c
pop ecx
push ecx
call fcn.00440340
mov ecx, eax
call fcn.004402c0
je 0x41e246
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
push dword [esp + 8]
call fcn.00480b20
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0xc]
call fcn.00481930
lea eax, [esp + 4]
push eax
call fcn.00482f40
call fcn.00468a2e
mov ebx, eax
cmp ebx, 0x64
jl 0x41e450
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ea0
pop edx
push eax
push 0x3e8
call fcn.00480920
lea eax, [esp + 8]
push eax
call fcn.00482f40
push 0x3e8
mov eax, dword [esp + 8]
push eax
mov eax, 0x54ff1a
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov edx, dword [esp + 4]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x54c5b0
push edx
call fcn.00482ee0
lea eax, [esp + 0xc]
push eax
call fcn.00482f40
push edx
call fcn.00482ea0
pop edx
push eax
mov edx, dword [esp + 8]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x557c7e
push edx
call fcn.00482ee0
call fcn.00440312
add dword [esp], edx
call fcn.0046a6d4
call fcn.00440330
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x41e301
jl 0x41e2fd
cmp ebx, 0
ja 0x41e301
xor eax, eax
jmp 0x41e306
mov eax, 1
or eax, eax
je 0x41e333
mov edx, dword [esp + 4]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x543cda
push edx
call fcn.00482ee0
lea eax, [esp + 8]
push eax
call fcn.00482f40
jmp 0x41e35a
mov edx, dword [esp + 4]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x54c5b0
push edx
call fcn.00482ee0
lea eax, [esp + 8]
push eax
call fcn.00482f40
mov ebx, dword [esp + 0x1c]
and ebx, ebx
jle 0x41e3da
push edx
call fcn.00482ea0
pop edx
push eax
push 3
push dword [esp + 0x10]
push edx
call fcn.00482ea0
pop edx
push eax
mov edx, 0x5496a8
push edx
call fcn.00482ee0
mov edx, dword [esp + 0x10]
push edx
call fcn.00482ee0
mov edx, 0x540f60
push edx
call fcn.00482ee0
call fcn.00482fd0
mov edx, dword [esp + 0x14]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x552fb4
push edx
call fcn.00482ee0
call fcn.00440312
add dword [esp], edx
call fcn.00440312
add dword [esp + 4], edx
call fcn.0045cb7e
call fcn.00440330
jmp 0x41e450
push edx
call fcn.00482ea0
pop edx
push eax
push 3
push dword [esp + 0x10]
push edx
call fcn.00482ea0
pop edx
push eax
mov edx, 0x54ff28
push edx
call fcn.00482ee0
mov edx, dword [esp + 0x10]
push edx
call fcn.00482ee0
mov edx, 0x540f60
push edx
call fcn.00482ee0
call fcn.00482fd0
mov edx, dword [esp + 0x14]
push edx
call fcn.00482ea0
pop edx
push eax
push edx
call fcn.00482ee0
mov edx, 0x552fb4
push edx
call fcn.00482ee0
call fcn.00440312
add dword [esp], edx
call fcn.00440312
add dword [esp + 4], edx
call fcn.0045cb7e
call fcn.00440330
xor eax, eax
push dword [esp + 8]
call fcn.004830a0
push dword [esp + 4]
call fcn.004830a0
push dword [esp]
call fcn.004830a0
add esp, 0xc
pop edi
pop ebx
ret 8