Function at 0x41f339
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x67a793
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1068c
call fcn.005b9780
mov eax, dword [0x74f330]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, 0x104
push ebx
lea eax, [ebp - 0x21c]
push eax
xor esi, esi
push esi
call dword [0x69b368]
test eax, eax
je 0x41f86a
push esi
lea eax, [ebp - 0x320]
push eax
push ebx
lea eax, [ebp - 0x21c]
push eax
call dword [0x69b5b8]
cmp eax, esi
jne 0x41f3c4
push ebx
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [0x69b5bc]
cmp eax, esi
je 0x41f86a
push esi
push esi
push esi
push esi
push ebx
lea eax, [ebp - 0x528]
push eax
push ebx
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.005b8de2
mov edi, dword [0x69b5c4]
add esp, 0x24
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x424]
push eax
call edi
mov esi, dword [0x69b5c8]
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x424]
push eax
call esi
push 0x69f828
lea eax, [ebp - 0x424]
push eax
call esi
push str._c_for__L__i_in__1_1_30__do_IF__EXIST__
lea eax, [ebp - 0x862c]
push eax
call edi
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x862c]
push eax
call esi
mov edi, 0x69e128
push edi
lea eax, [ebp - 0x862c]
push eax
call esi
push str._del
lea eax, [ebp - 0x862c]
push eax
call esi
push edi
lea eax, [ebp - 0x862c]
push eax
call esi
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x862c]
push eax
call esi
push edi
lea eax, [ebp - 0x862c]
push eax
call esi
push str.__del
lea eax, [ebp - 0x862c]
push eax
call esi
push edi
lea eax, [ebp - 0x862c]
push eax
call esi
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x862c]
push eax
call esi
push edi
lea eax, [ebp - 0x862c]
push eax
call esi
push str._c_del
lea eax, [ebp - 0x1062c]
push eax
call dword [0x69b5c4]
push edi
lea eax, [ebp - 0x1062c]
push eax
call esi
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x1062c]
push eax
call esi
push edi
lea eax, [ebp - 0x1062c]
push eax
call esi
push str.__del
lea eax, [ebp - 0x1062c]
push eax
call dword [0x69b5c4]
push edi
lea eax, [ebp - 0x1062c]
push eax
call esi
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x1062c]
push eax
call esi
push edi
lea eax, [ebp - 0x1062c]
push eax
call esi
xor eax, eax
push eax
push eax
push eax
push eax
push ebx
lea eax, [ebp - 0x528]
push eax
push ebx
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.005b8de2
add esp, 0x24
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x118]
push eax
call dword [0x69b5c4]
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x118]
push eax
call esi
push 0xa
lea ecx, [ebp - 0x10660]
call fcn.004b96c1
lea ecx, [ebp - 0x10660]
mov dword [ebp - 4], 3
call fcn.004b97a9
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x10630]
call fcn.00401b65
push 0x5c
lea ecx, [ebp - 0x10630]
mov byte [ebp - 4], 4
call fcn.0041ef1e
lea eax, [ebp - 0x10630]
push eax
lea ecx, [ebp - 0x10660]
call fcn.004b99ad
mov eax, dword [0x7534c4]
test eax, eax
je 0x41f5d7
cmp dword [eax + 0x770], 0
je 0x41f5d7
mov eax, dword [eax + 0x768]
test eax, eax
jne 0x41f5ed
mov eax, dword [ebp - 0x1065c]
test eax, eax
je 0x41f7cf
jmp 0x41f662
mov eax, dword [ebp - 0x10638]
test eax, eax
je 0x41f657
mov ecx, dword [eax]
mov eax, dword [eax + 8]
sub eax, 0x10
push eax
mov dword [ebp - 0x10638], ecx
call fcn.0040149c
add eax, 0x10
pop ecx
mov dword [ebp - 0x10634], eax
push dword [ebp - 0x10630]
lea ecx, [ebp - 0x10634]
mov byte [ebp - 4], 5
call fcn.00405450
test eax, eax
je 0x41f63a
lea eax, [ebp - 0x10634]
push eax
lea ecx, [ebp - 0x10660]
call fcn.004b99ad
mov ecx, dword [ebp - 0x10634]
add ecx, 0xfffffff0
mov byte [ebp - 4], 4
call fcn.0040124d
cmp dword [ebp - 0x10638], 0
jne 0x41f5e7
jmp 0x41f5d7
call fcn.004b8094
mov eax, dword [ebp - 0x10640]
test eax, eax
je 0x41f657
mov ecx, dword [eax]
mov eax, dword [eax + 8]
sub eax, 0x10
push eax
mov dword [ebp - 0x10640], ecx
call fcn.0040149c
add eax, 0x10
pop ecx
mov dword [ebp - 0x10644], eax
push eax
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 6
call dword [0x69b5c4]
lea ecx, [ebp - 0x10638]
call fcn.00452a78
push ecx
lea eax, [ebp - 0x118]
mov ecx, esp
mov dword [ebp - 0x1063c], esp
push eax
mov byte [ebp - 4], 7
call fcn.00401b65
lea ecx, [ebp - 0x10638]
call fcn.00453135
push 0
lea eax, [ebp - 0x118]
push eax
push ebx
push eax
call dword [0x69b5b8]
test eax, eax
jne 0x41f6f1
push ebx
lea eax, [ebp - 0x118]
push eax
push eax
call dword [0x69b5bc]
test eax, eax
je 0x41f7a1
push str.__rmdir
lea eax, [ebp - 0x862c]
push eax
call esi
push edi
lea eax, [ebp - 0x862c]
push eax
call esi
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x862c]
push eax
call esi
push edi
lea eax, [ebp - 0x862c]
push eax
call esi
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x10634]
call fcn.00401b65
push 0x5c
lea ecx, [ebp - 0x10634]
mov byte [ebp - 4], 8
call fcn.0041ef1e
push str.__rmdir
lea eax, [ebp - 0x1062c]
push eax
call esi
push edi
lea eax, [ebp - 0x1062c]
push eax
call esi
push dword [ebp - 0x10634]
lea eax, [ebp - 0x1062c]
push eax
call esi
push edi
lea eax, [ebp - 0x1062c]
push eax
call esi
push str.___NUL
lea eax, [ebp - 0x862c]
push eax
call esi
push str.___NUL
lea eax, [ebp - 0x1062c]
push eax
call esi
mov ecx, dword [ebp - 0x10634]
add ecx, 0xfffffff0
call fcn.0040124d
lea ecx, [ebp - 0x10638]
mov byte [ebp - 4], 6
call fcn.00452a81
mov ecx, dword [ebp - 0x10644]
add ecx, 0xfffffff0
mov byte [ebp - 4], 4
call fcn.0040124d
cmp dword [ebp - 0x10640], 0
jne 0x41f65c
lea ecx, [ebp - 0x10660]
call fcn.004b97a9
push ebx
lea eax, [ebp - 0x21c]
push eax
push str.ComSpec
call dword [0x69b5c0]
test eax, eax
je 0x41f84d
lea ecx, [ebp - 0x1069c]
call fcn.00452471
push 0
push 0xf
xor esi, esi
push 3
inc esi
push 0
lea ecx, [ebp - 0x1063c]
push 0x69c5b8
cmp dword [ebp - 0x1067c], esi
jne 0x41f886
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x1062c]
jmp 0x41f890
mov ecx, dword [ebp - 0x10630]
add ecx, 0xfffffff0
call fcn.0040124d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10660]
call fcn.004b97ef
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b851f
leave
ret
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x862c]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.0044e83a
lea ecx, [ebp - 0x1069c]
mov dword [ebp - 4], 4
call fcn.00452441
mov ecx, dword [ebp - 0x10630]
add ecx, 0xfffffff0
call fcn.0040124d
jmp 0x41f8f6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10660]
call fcn.004b97ef
mov eax, esi
jmp 0x41f86c