Function at 0x405b70
Capabilities:
Query environment variable

Disassembly:
movsb byte es:[edi], byte [esi]
mov edx, dword [eax]
pop edi
pop esi
mov dword [ecx + 0x1c], eax
mov edx, dword [ebx]
mov ebx, dword [esp + ecx - 0x75]
inc edx
sbb al, 0xc7
add al, 1
add byte [eax], al
xchg esp, eax
add byte [ebx + 0x12b813], cl
add byte [eax - 0x39], dh
jns 0x405b79
fild word [eax]
fld qword [eax]
mov ecx, dword [ebx]
mov dword [ecx + 0xc], eax
mov edx, dword [ebx]
mov dword [eax + ebp - 0x75], ebp
or ebx, dword [ebx - 0x77]
inc ecx
insb byte es:[edi], dx
sub byte [ebx + 0x41895b0b], cl
sub al, 0x33
shl byte [ebx - 0x2a], 0x10
add dl, al
push ebp
mov ebp, esp
push esi
mov ecx, dword [eax + 8]
push edi
mov esi, dword [0x75c085aa]
xor eax, 0x75c085aa
or byte [ebx + 0x38802046], cl
add byte [ebp + 0x4f], dh
mov ebp, dword [ecx + 0x187e8b75]
cmp ecx, eax
lodsb al, byte [esi]
sbb eax, 0xdf004614
add byte [ebp + 0x77], bh
mov ecx, dword [ecx + 0x1c]
mov eax, dword [edx + ecx*4]
mov dword [esi + 0x20], eax
pushal
cmp byte [0x50881675], ch
add dword [eax - 0x7c], eax
lcall 0xc020, 0x46895c74
jne 0x405b34
cli
stc
jne 0x405bd6
inc ecx
mov esp, edx
or al, 0xc7
inc esi
and ah, dl
add al, byte [ecx - 0x22]
mov ecx, dword [ebp + 0x10]
mov ebx, 0x5e5f1046
mov dl, bl
mov eax, 0x1117e
pop ebp
ret 0x10
jo 0x405b61
and byte [ebx + 0x140f5846], cl
add ch, bh
cmp eax, 0x3a
mov dword [esi + 0x62], eax
jecxz 0x405c3e
inc esi
je 0x74405cbf
push eax
push edi
call dword [sym.imp.MSVCRT.dll_strchr]
add esp, 8
test eax, eax
setnp byte [eax + 0xf000093]
js 0x405c06
cmp dh, byte [edx + ebx - 0x75]
dec ebp
adc al, 0xc7
add dword [eax], eax
add byte [ecx + 0x20568b00], ch
je 0x405c22
mov ecx, dword [ebp + 0x14]
mov dword [ecx], 0xa90000
mov edx, dword [esi + 0x20]
add al, 0xb1
add byte [esi - 0x47], al
xchg edx, eax
sub eax, dword [eax]
add cl, ch
clc
add byte [eax], al
add byte [ebx + 0x38802046], cl
add byte [edi + eax - 0x75], dh
dec ebp
adc al, 0x89
add ebx, ebp
je 0x405bbd
mov eax, dword [esi + 0x20]
cmp byte [eax], 0
je 0x405c31
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
jmp 0x405ca5
mov edx, dword [esi + 0xc]
ja 0x405c84
push esi
or al, 0x77
dec esi
sbb byte [edx - 0x14], al
ret 0x5689
enter 0x5955, 0xffffffffffffffc7
inc esi
and ah, dl
add al, byte [edi + 0x3c073100]
loop 0x405cc2
adc ecx, dword [ebx + 0x56704545]
adc byte [edi + 0x5e], bl
adc dword [eax], edx
loopne 0x405cd7
adc dword [ecx], eax
add byte [ebp - 0x3e], bl
adc byte [ebx + 0x3b5b468b], cl
sal byte [edi + ebx - 0x75], 0x56
sbb al, 0x8b
dec esi
adc byte [ecx - 0x41], dl
jb 0x405cc2
aaa
or dword [ecx], ecx
add byte [ebx + 0x6850084e], cl
call 0x51ff3474
jmp 0x405cd9
add esp, 0x10
mov eax, dword [ebp + 0x26]
mov dl, byte [esi + 0x14]
pop edi
in al, dx
mov byte [eax], dl
xor eax, 0x1007c
pop ebp
ret 0x10
mov dword [esi + 0x20], 0x4102d4
dec dword [ecx]
or al, 0xee
push ebp
adc byte [eax + 0x4e], ch
adc byte [ecx + 0x6d88c033], ch
pop esi
pop ebp
ret 0xc110
sub eax, 0xfe82840f
call [edi - 0x75]
push esi
and byte [eax], ch
cmp bh, byte [edi + 0xc46a7da]
mov edi, dword [edx + 0x4bc08504]
test eax, eax
dec ebx
dec esi
cmp byte [edi], 0x3a
push es
pop ds
pop ebx
test eax, 0x10468b74
push eax
xchg byte [ecx], dl
push edx
call 0x5eb2a580
push eax
invalid