Function at 0x413870
Capabilities:
Query environment variable

Disassembly:
push ebp
mov edx, 0x4ca500
push edi
xor eax, eax
push esi
push ebx
sub esp, 0x3c
nop
mov ecx, dword [edx]
test ecx, ecx
je 0x4138ad
add eax, 1
add edx, 0x164
cmp eax, 8
jne 0x413880
call dword [sym.imp.msvcrt.dll__errno]
mov dword [eax], 0x17
add esp, 0x3c
mov eax, 0xffffffff
pop ebx
pop esi
pop edi
pop ebp
ret
imul edx, eax, 0x164
add eax, 0x2710
mov dword [esp + 8], 0x12
mov edi, str.events
mov dword [edx + 0x4ca500], eax
mov eax, dword [esp + 0x50]
lea ecx, [edx + 0x4ca500]
mov esi, ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 4], eax
lea eax, [edx + 0x4ca504]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov eax, dword [esp + 0x50]
mov ecx, 7
mov byte [esi + 0x15], 0
add eax, 9
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4139aa
mov eax, dword [esp + 0x14]
mov dword [eax + 0x18], 1
mov eax, dword [esp + 0x14]
mov dword [eax + 0x1c], 4
mov dword [esp], 0x4bb384
call sub.msvcrt.dll_getenv
test eax, eax
mov ebp, eax
je 0x413a04
movzx ebx, byte [eax]
mov dword [esp + 0x18], 0
mov esi, dword [sym.imp.msvcrt.dll_isspace]
test bl, bl
jne 0x413958
jmp 0x413a04
add ebp, 1
movzx ebx, byte [ebp]
movsx eax, bl
mov dword [esp], eax
call esi
test eax, eax
jne 0x413951
xor edi, edi
test bl, bl
jne 0x41398e
jmp 0x4139c8
add edi, 1
add ebp, 1
mov byte [esp + edi + 0x1f], bl
movzx ebx, byte [ebp]
test bl, bl
je 0x4139c3
movsx eax, bl
mov dword [esp], eax
call esi
test eax, eax
jne 0x4139c3
cmp bl, 0x3a
je 0x4139c3
cmp edi, 0x10
jne 0x413970
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x4ca500]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret
mov edi, str.security
mov ecx, 9
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x413916
jmp 0x41390b
cmp edi, 0x10
je 0x413998
mov byte [esp + edi + 0x20], 0
mov edi, 2
cmp byte [esp + 0x20], 0x2a
je 0x413b40
cmp bl, 0x3a
je 0x413b60
cmp byte [esp + 0x20], 0
jne 0x413b10
mov eax, dword [esp + 0x14]
mov dword [eax + 0x1c], edi
movzx ebx, byte [ebp]
test bl, bl
jne 0x413958
mov dword [esp], str.ANDROID_PRINTF_LOG
call sub.msvcrt.dll_getenv
test eax, eax
je 0x413bb0
mov ecx, 6
mov esi, eax
mov edi, str.brief
mov edx, 1
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov ebx, esi
cmp bl, cl
je 0x413af5
mov ecx, 8
mov esi, eax
mov edi, str.process
mov dl, 2
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov ebx, esi
cmp bl, cl
je 0x413af5
mov ecx, 4
mov esi, eax
mov edi, 0x4bb3b6
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov ebx, esi
cmp bl, cl
je 0x413af5
mov ecx, 7
mov esi, eax
mov edi, str.thread
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov ebx, esi
cmp bl, cl
je 0x413af5
mov ecx, 4
mov esi, eax
mov edi, 0x4bb3c1
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov ebx, esi
cmp bl, cl
je 0x413af5
mov ecx, 5
mov esi, eax
mov edi, str.time
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov ebx, esi
cmp bl, cl
je 0x413af5
mov ecx, 5
mov esi, eax
mov edi, 0x4bb3ca
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov ebx, esi
cmp bl, cl
je 0x413af5
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov edx, eax
mov eax, dword [esp + 0x14]
mov dword [eax + 0x20], edx
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x4ca500]
jmp 0x4139a2
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x20]
mov ecx, dword [esp + 0x14]
lea eax, [eax + eax*4]
shl eax, 2
mov dword [ecx + eax + 0x34], edi
lea eax, [ecx + eax + 0x24]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0044a868
add dword [esp + 0x18], 1
jmp 0x4139f8
cmp byte [esp + 0x21], 0
jne 0x4139dd
cmp bl, 0x3a
mov di, 3
mov byte [esp + 0x20], 0
jne 0x4139e6
lea esi, [esi]
movzx eax, byte [ebp + 1]
lea edx, [eax - 0x30]
cmp dl, 9
ja 0x413b98
movsx edx, al
mov edi, 2
cmp al, 0x37
cmovle edi, edx
movsx eax, byte [ebp + 2]
lea ebx, [ebp + 2]
test al, al
je 0x413b91
mov dword [esp], eax
call esi
test eax, eax
je 0x413998
mov ebp, ebx
jmp 0x4139e6
sub eax, 0x64
mov edi, 1
cmp al, 0x13
ja 0x413b79
movzx eax, al
mov edi, dword [eax*4 + 0x4bb3e0]
jmp 0x413b79
mov edx, 1
jmp 0x413af5