Function at 0x401ec7
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x66e4
call fcn.00427630
mov dword [ebp - 0x66e4], ecx
push 0x1fa0
lea eax, [ebp - 0x6238]
push eax
push 0x4593d0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea ecx, [ebp - 0x6238]
push ecx
push 0x4593e0
lea edx, [ebp - 0x1fa0]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1fa0]
push eax
mov ecx, dword [ebp - 0x66e4]
call fcn.00402bd1
push 0x1fa0
lea ecx, [ebp - 0x6238]
push ecx
push 0x459424
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea edx, [ebp - 0x6238]
push edx
push 0x459430
lea eax, [ebp - 0x1fa0]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x1fa0]
push ecx
mov ecx, dword [ebp - 0x66e4]
call fcn.00402bd1
push 0x1fa0
lea edx, [ebp - 0x6238]
push edx
push str.ALLUSERSPROFILE
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea eax, [ebp - 0x6238]
push eax
push 0x459484
lea ecx, [ebp - 0x1fa0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x1fa0]
push edx
mov ecx, dword [ebp - 0x66e4]
call fcn.00402ed8
push 0x1fa0
lea eax, [ebp - 0x6238]
push eax
push str.USERPROFILE
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea ecx, [ebp - 0x6238]
push ecx
push str._sApplication_DataMicrosoftNetworkConnectionsPbk_rasphone.pbk
lea edx, [ebp - 0x1fa0]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1fa0]
push eax
mov ecx, dword [ebp - 0x66e4]
call fcn.00402ed8
mov dword [ebp - 0x665c], 0x14a0
push 0x14a0
push 0
lea ecx, [ebp - 0x3e94]
push ecx
call fcn.004275d0
add esp, 0xc
push 0x50
push 0
lea edx, [ebp - 0x66dc]
push edx
call fcn.004275d0
add esp, 0xc
mov dword [ebp - 0x3e94], pe_nt_image_headers32
lea eax, [ebp - 0x3e98]
push eax
lea ecx, [ebp - 0x665c]
push ecx
lea edx, [ebp - 0x3e94]
push edx
push 0
push 0
call sub.RASAPI32.dll_RasEnumEntriesA
test eax, eax
je 0x402052
jmp 0x402172
mov dword [ebp - 0x6658], 0
jmp 0x40206d
mov eax, dword [ebp - 0x6658]
add eax, 1
mov dword [ebp - 0x6658], eax
mov ecx, dword [ebp - 0x66e4]
mov edx, dword [ebp - 0x6658]
cmp edx, dword [ecx]
jge 0x402172
mov eax, dword [ebp - 0x6658]
mov ecx, dword [ebp - 0x66e4]
mov edx, dword [ecx + eax*4 + 4]
cmp dword [edx + 0x18], 0xffffffff
jne 0x40216d
mov dword [ebp - 0x6660], 0
jmp 0x4020b6
mov eax, dword [ebp - 0x6660]
add eax, 1
mov dword [ebp - 0x6660], eax
mov ecx, dword [ebp - 0x6660]
cmp ecx, dword [ebp - 0x3e98]
jae 0x40216d
mov dword [ebp - 0x6664], 0
jmp 0x4020e3
mov edx, dword [ebp - 0x6664]
add edx, 1
mov dword [ebp - 0x6664], edx
mov eax, dword [ebp - 0x66e4]
mov ecx, dword [ebp - 0x6664]
cmp ecx, dword [eax]
jge 0x402112
mov edx, dword [ebp - 0x6664]
mov eax, dword [ebp - 0x66e4]
mov ecx, dword [eax + edx*4 + 4]
mov edx, dword [ecx + 0x18]
cmp edx, dword [ebp - 0x6660]
jne 0x402110
jmp 0x402112
jmp 0x4020d4
mov eax, dword [ebp - 0x66e4]
mov ecx, dword [ebp - 0x6664]
cmp ecx, dword [eax]
jne 0x402168
mov edx, dword [ebp - 0x6660]
imul edx, edx, 0x108
lea eax, [ebp + edx - 0x3e90]
push eax
push 1
mov ecx, dword [ebp - 0x6658]
mov edx, dword [ebp - 0x66e4]
mov ecx, dword [edx + ecx*4 + 4]
call fcn.0040180c
mov eax, dword [ebp - 0x6658]
mov ecx, dword [ebp - 0x66e4]
mov edx, dword [ecx + eax*4 + 4]
mov eax, dword [ebp - 0x6660]
mov dword [edx + 0x18], eax
jmp 0x40216d
jmp 0x4020a7
jmp 0x40205e
mov esp, ebp
pop ebp
ret