Function at 0x41254b
Capabilities:
Query environment variable

Disassembly:
push 0x38
mov eax, 0x47058a
call fcn.004517c6
xor esi, esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 4], esi
call fcn.0042f5fc
push eax
lea ecx, [ebp - 0x24]
call fcn.00417796
lea ecx, [ebp - 0x2c]
mov eax, 0x400
push ecx
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], eax
call fcn.0041ee5b
push eax
push str.Open
push 5
push 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.LB02XioeFCgiIQQfL1YEMyw0IiIsNBQBMh5TDy0LFwY
call fcn.004167c3
lea eax, [ebp - 0x20]
push eax
call fcn.00417ed7
add esp, 0x28
push dword [eax]
push 2
push esi
call dword [sym.imp.lesA__GetStringTypeW]
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00415687
push 0xffffffffffffffff
lea ecx, [ebp - 0x24]
call fcn.0041ed67
call fcn.0042f5fc
push eax
lea ecx, [ebp - 0x1c]
call fcn.00417796
mov byte [ebp - 4], 2
call fcn.0042f5fc
push eax
lea ecx, [ebp - 0x34]
call fcn.00417796
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.KyYlAjceIh0rAFcXJiYmNCwPUy4pDhRVMR9TDSMAJiQtJDYmJB5XHSsPLhIpI1MKKzM2EiYeIgstAFcKLQ8mKSs0Nh4kDggoJiYuFyMzPjcsMyoSIyRXDSoPPhEvDVNULABXEiM0PgotDyoULTEpKikfUw83HjIPKQAUDS8ADzIrDTYWKg0mJjALCFo
mov byte [ebp - 4], 3
call fcn.004167c3
lea eax, [ebp - 0x18]
push eax
call fcn.00417ed7
add esp, 0x28
mov byte [ebp - 4], 4
call fcn.0042f5fc
push eax
lea ecx, [ebp - 0x20]
call fcn.00417796
mov byte [ebp - 4], 5
call fcn.0042f5fc
push eax
lea ecx, [ebp - 0x14]
call fcn.00417796
lea eax, [ebp - 0x30]
push 0x96
push eax
mov byte [ebp - 4], 6
call fcn.004105f7
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 7
call fcn.00417c14
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 6
call fcn.00415687
push 0x47d6dc
push dword [ebp - 0x14]
call fcn.00453502
pop ecx
pop ecx
test eax, eax
jne 0x4126a3
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Kw4yEyYOMgo_HSIMLQAADCkjPhImND4mMAsIWg
call fcn.004167c3
lea eax, [ebp - 0x30]
push eax
call fcn.00417ed7
add esp, 0x28
mov byte [ebp - 4], 8
jmp 0x412717
push 0x47d6ac
push dword [ebp - 0x14]
call fcn.00453502
pop ecx
pop ecx
test eax, eax
jne 0x4126de
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Lg9TFyoePlUyHSIKJiQuEitWBCotJF82KwsIWg
call fcn.004167c3
lea eax, [ebp - 0x30]
push eax
call fcn.00417ed7
add esp, 0x28
mov byte [ebp - 4], 9
jmp 0x412717
push 0x47d67c
push dword [ebp - 0x14]
call fcn.00453502
pop ecx
pop ecx
test eax, eax
jne 0x412734
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.KzZWASIeKiYrACIPIiU2Ei4zPhMrND43Px42Wg
call fcn.004167c3
lea eax, [ebp - 0x30]
push eax
call fcn.00417ed7
add esp, 0x28
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x18]
push eax
call fcn.00417b14
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 6
call fcn.00415687
push esi
mov ebx, 0x476f6a
push ebx
push dword [ebp - 0x18]
mov edi, 0x80000002
lea eax, [ebp - 0x30]
push edi
push eax
call fcn.0041409a
add esp, 0x14
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xb
call fcn.00417c14
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 6
call fcn.00415687
mov esi, dword [ebp - 0x20]
cmp dword [esi - 0xc], 0
jne 0x4127b0
push 0x100
push ebx
push dword [ebp - 0x18]
lea eax, [ebp - 0x30]
push edi
push eax
call fcn.0041409a
add esp, 0x14
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xc
call fcn.00417c14
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 6
call fcn.00415687
mov esi, dword [ebp - 0x20]
cmp dword [esi - 0xc], 0
je 0x412800
push 0
push 2
push 2
sub esp, 0x1c