Function at 0x42622a
Capabilities:
Query environment variable

Disassembly:
push 0x58
mov eax, 0x443eb6
call fcn.00429926
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], eax
call fcn.00408032
xor ebx, ebx
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
call fcn.00408032
push 0x4040ec
push edi
mov byte [ebp - 4], 1
mov byte [ebp - 0x49], bl
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x42627c
push 0x1a
pop esi
push 0x4040e4
jmp 0x426320
push 0x4040d0
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x426291
push 0x23
jmp 0x426304
push 0x40173c
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x4262ac
push 0x2b
pop esi
push 0x4040b4
jmp 0x426320
push 0x4040a0
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x4262c1
push 0x1c
jmp 0x426304
push 0x40408c
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x4262dc
push 0x26
pop esi
push 0x40407c
jmp 0x426320
push 0x40406c
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x4262f1
push 7
jmp 0x426304
push 0x40405c
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x426307
push 0x25
pop esi
jmp 0x426353
push 0x40404c
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x42632a
push 0x24
pop esi
push 0x404044
lea ecx, [ebp - 0x2c]
call fcn.0040898b
jmp 0x426353
push 0x4033f4
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x42645d
push 0x24
pop esi
push 0x404044
lea ecx, [ebp - 0x2c]
call fcn.0040898b
mov byte [ebp - 0x49], 1
lea eax, [ebp - 0x48]
push eax
push esi
call fcn.0042606f
pop ecx
pop ecx
cmp al, bl
je 0x426398
cmp byte [ebp - 0x49], bl
jne 0x426424
mov ecx, dword [ebp - 0x50]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.00408397
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.00407cc4
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00407cc4
mov al, 1
jmp 0x426475
cmp dword [ebp - 0x18], ebx
jbe 0x42645d
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x4263ad
lea eax, [ebp - 0x28]
mov esi, dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push ebx
push ebx
push eax
call esi
mov edi, eax
cmp edi, ebx
jbe 0x42645d
lea eax, [ebp - 0x4a]
push eax
push edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x4a], bl
call fcn.004230e5
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 2
jae 0x4263e2
lea eax, [ebp - 0x28]
push edi
push dword [ebp - 0x60]
push eax
call esi
push dword [ebp - 0x60]
lea ecx, [ebp - 0x48]
call fcn.0040898b
cmp byte [ebp - 0x49], bl
jne 0x426415
mov ecx, dword [ebp - 0x50]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.00408397
lea ecx, [ebp - 0x64]
call fcn.00409751
jmp 0x42637b
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.00409751
mov edi, dword [ebp - 0x54]
push 0x4033f4
push edi
call fcn.00429160
pop ecx
pop ecx
test eax, eax
jne 0x42645d
cmp dword [ebp - 0x30], 0x10
mov eax, dword [ebp - 0x44]
jae 0x426441
lea eax, [ebp - 0x44]
push ebx
push ebx
push ebx
push dword [ebp - 0x50]
push eax
call fcn.00424763
push dword [ebp - 0x50]
call fcn.00424550
add esp, 0x18
jmp 0x42637b
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.00407cc4
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00407cc4
xor al, al
call fcn.004299b8
ret