Function at 0x186cc2b9
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x40034
call fcn.18615d60
mov eax, dword [0x1870626c]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x10004]
mov dword [ebp - 0x4002c], ecx
mov dword [ebp - 0x40028], eax
lea eax, [ebp - 0x30010]
push ebx
mov dword [ebp - 0x40024], eax
lea ebx, [ebp - 0x20004]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x4001c]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x40030], eax
xor eax, eax
mov word [ebp - 0x20004], ax
mov word [ebp - 0x10004], ax
mov eax, ebx
push 0x8000
push eax
push edi
mov dword [ebp - 0x40020], ebx
call esi
mov dword [ebp - 0x40034], eax
lea eax, [ebp - 0x10004]
push 0x8000
push eax
push edi
call esi
mov ecx, dword [ebp - 0x40034]
mov edx, 0x8000
cmp ecx, edx
ja 0x186cc520
test ecx, ecx
je 0x186cc520
cmp eax, edx
ja 0x186cc520
test eax, eax
je 0x186cc520
push 0x22
pop eax
cmp ax, word [ebp - 0x20004]
jne 0x186cc387
add ebx, 2
cmp ax, word [ebx]
je 0x186cc379
mov dword [ebp - 0x40020], ebx
lea esi, [ebp - 0x10004]
cmp ax, word [ebp - 0x10004]
jne 0x186cc3a4
add esi, 2
cmp ax, word [esi]
je 0x186cc396
mov dword [ebp - 0x40028], esi
mov edi, 0x1885e688
push edi
push ebx
call fcn.1863dbff
pop ecx
pop ecx
test eax, eax
je 0x186cc3bb
xor ecx, ecx
mov word [eax], cx
push edi
push esi
call fcn.1863dbff
pop ecx
pop ecx
test eax, eax
je 0x186cc3cd
xor ecx, ecx
mov word [eax], cx
push 0x5c
pop eax
cmp ax, word [ebx]
jne 0x186cc3df
cmp ax, word [ebx + 2]
je 0x186cc4d5
cmp ax, word [esi]
jne 0x186cc3ee
cmp ax, word [esi + 2]
je 0x186cc4d5
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x186cc41d
push ebx
mov ebx, dword [ebp - 0x4002c]
mov ecx, ebx
call fcn.186cca26
test al, al
je 0x186cc4d5
push esi
mov ecx, ebx
call fcn.186cca26
test al, al
je 0x186cc4d5
jmp 0x186cc423
mov ebx, dword [ebp - 0x4002c]
mov esi, 0x8000
lea eax, [ebp - 0x40024]
push esi
push eax
lea eax, [ebp - 0x40020]
mov ecx, ebx
push eax
call fcn.186cbd8a
mov cl, al
test cl, cl
jne 0x186cc45c
push esi
lea eax, [ebp - 0x40030]
mov ecx, ebx
push eax
lea eax, [ebp - 0x40028]
push eax
call fcn.186cbef5
mov cl, al
mov esi, dword [ebp - 0x40020]
cmp word [esi], 0
je 0x186cc47f
movzx eax, word [esi]
add esi, 2
push 0x20
pop edx
cmp dx, ax
je 0x186cc468
add esi, 0xfffffffe
mov dword [ebp - 0x40020], esi
movzx eax, word [esi]
xor edx, edx
cmp dx, ax
je 0x186cc51c
push 0x5c
pop edx
cmp ax, dx
je 0x186cc51c
push 0x22
pop ecx
cmp cx, ax
jne 0x186cc4af
add esi, 2
cmp cx, word [esi]
je 0x186cc4a1
mov dword [ebp - 0x40020], esi
push 0x1885e688
push esi
call fcn.1863dbff
pop ecx
pop ecx
test eax, eax
je 0x186cc4c5
xor ecx, ecx
mov word [eax], cx
test edi, edi
je 0x186cc4d9
push esi
mov ecx, ebx
call fcn.186cca26
test al, al
jne 0x186cc4d9
mov al, 1
jmp 0x186cc522
lea eax, [ebp - 0x30010]
mov esi, 0x8000
mov dword [ebp - 0x40024], eax
mov ecx, ebx
push esi
lea eax, [ebp - 0x40024]
push eax
lea eax, [ebp - 0x40020]
push eax
call fcn.186cbd8a
test al, al
jne 0x186cc522
push esi
lea eax, [ebp - 0x40030]
mov ecx, ebx
push eax
lea eax, [ebp - 0x40028]
push eax
call fcn.186cbef5
jmp 0x186cc522
mov al, cl
jmp 0x186cc522
xor al, al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.18615399
leave
ret 8