Function at 0x41b927
Capabilities:
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x78c
mov dword [esp + 4], 0x40
lea eax, [esp + 0x73c]
mov dword [esp], eax
call fcn.0041afae
mov dword [esp + 4], 0x40
lea eax, [esp + 0x4fc]
mov dword [esp], eax
call fcn.0041af28
mov dword [esp + 4], 0x200
lea eax, [esp + 0xf8]
mov dword [esp], eax
call fcn.0041b75b
mov dword [esp + 4], 0x200
lea eax, [esp + 0x53c]
mov dword [esp], eax
call fcn.0041b66a
lea eax, [esp + 0xa0]
mov dword [esp], eax
call fcn.0041b697
mov dword [esp + 4], 0x204
lea eax, [esp + 0x2f8]
mov dword [esp], eax
call fcn.0040aed7
xor eax, 1
test al, al
je 0x41b9d9
mov dword [esp + 8], 0x204
mov dword [esp + 4], str.Unknown
lea eax, [esp + 0x2f8]
mov dword [esp], eax
call fcn.00419918
mov dword [esp + 8], 0
mov dword [esp + 4], 0x20
lea eax, [esp + 0xd8]
mov dword [esp], eax
call fcn.0040b7f8
mov dword [esp + 4], 0x20
lea eax, [esp + 0xb8]
mov dword [esp], eax
call fcn.0040b959
mov dword [esp + 0x9c], 0
mov eax, dword [0x41e7c0]
mov dword [esp + 0x70], eax
mov dword [esp], 0x40
call fcn.0040b97c
movzx ecx, al
mov dword [esp + 0x74], ecx
call fcn.00416368
mov dword [esp + 0x78], eax
call fcn.0040cfac
mov dword [esp + 0x7c], eax
call fcn.0040cf99
mov dword [esp + 0x80], eax
mov dword [esp], str.PATH
call sub.msvcrt.dll_getenv
mov dword [esp + 0x84], eax
mov dword [esp], str.WINDIR
call sub.msvcrt.dll_getenv
mov dword [esp + 0x88], eax
call fcn.0041b7b3
movzx esi, al
mov dword [esp + 0x8c], esi
mov edi, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov ebx, dword [esp + 0xa8]
mov esi, dword [esp + 0xac]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], 0x41e720
mov eax, dword [esp + 0x74]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x2f8]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x58], eax
mov dword [esp + 0x54], 0x41e5e0
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], 0x41e4e0
mov dword [esp + 0x44], 0x41e3e0
lea eax, [esp + 0xb8]
mov dword [esp + 0x40], eax
lea eax, [esp + 0xd8]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ecx
lea eax, [esp + 0xf8]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x4fc]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x73c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x53c]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s_a_s_a_s_a_s_a_I64u_a_I64u_a_I64u_a_d_a_s_a_s_a_s_a_s_a_s_a_s_a_d_a_d_a_s_a_d_a_s_a_d_a_s_a_d_a
lea eax, [esp + 0x9c]
mov dword [esp], eax
call fcn.00419f10
mov dword [esp + 0x77c], eax
cmp dword [esp + 0x77c], 0xffffffff
je 0x41bbea
mov eax, dword [esp + 0x9c]
mov edx, dword [esp + 0x77c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0xba
mov eax, dword [esp + 0x7a0]
mov dword [esp], eax
call fcn.00408b8f
lea eax, [esp + 0x9c]
mov dword [esp], eax
call fcn.0040b4bf
jmp 0x41bc12
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbb
mov eax, dword [esp + 0x7a0]
mov dword [esp], eax
call fcn.00408b8f
nop
add esp, 0x78c
pop ebx
pop esi
pop edi
pop ebp
ret