Function at 0x5d6ae0
Capabilities:
Query environment variable

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, dword [esp + 0x40]
test ebx, ebx
je 0x5d6ed7
mov eax, dword [0x8607f8]
xor ebp, ebp
mov dword [0x8672ec], 0
mov dword [0x867310], 0
mov dword [0x8672c0], 0
test eax, eax
je 0x5d6b26
mov dword [esp], eax
call sub.msvcrt.dll__fileno_1
mov ebp, eax
test ebx, ebx
mov eax, str.dumb
cmove ebx, eax
cmp dword [fcn.005d4c70], 0x5d4c70
je 0x5d6d26
mov eax, dword [0x860a8c]
test eax, eax
je 0x5d6b51
mov dword [esp], eax
call fcn.006a4590
mov eax, dword [0x860a90]
test eax, eax
je 0x5d6b62
mov dword [esp], eax
call fcn.006a4590
mov eax, dword [0x8672d0]
mov dword [0x860a8c], 0
mov dword [0x860a90], 0
mov dword [esp + 0x1c], 0
test eax, eax
mov dword [0x6a98fc], 0
jle 0x5d6ceb
mov eax, dword [0x8672e8]
test eax, eax
jle 0x5d6ceb
imul eax, dword [0x8672d0]
mov dword [0x8672c8], eax
xor eax, eax
mov dword [0x867310], 0x74181e
mov dword [0x8672dc], 0
mov dword [0x8672c4], 0
mov dword [0x8672f8], 0
mov dword [0x8672d8], 0
mov dword [0x860a94], 0
mov dword [0x867300], 0
mov dword [0x867304], 0
mov dword [0x8672d4], 0
mov dword [0x860a98], 0
mov dword [0x860a9c], 0
mov dword [0x860aa0], 0
mov dword [0x860aa4], 0
mov dword [0x860aa8], 0
mov dword [0x860aac], 0
mov dword [0x860ab0], 0
mov dword [0x860ab4], 0
mov dword [0x860ab8], 0
mov dword [0x860abc], 0
mov dword [0x860ac0], 0
mov dword [0x860ac4], 0
mov dword [0x860ac8], 0
mov dword [0x860acc], 0
mov dword [0x860ad0], 0
mov dword [0x8672cc], 0
mov dword [0x860ad4], 0
mov dword [0x860a84], 0
mov byte [0x867308], 0
mov dword [0x867314], 0x741820
mov dword [0x8672f0], 0x741820
mov dword [0x8672e4], 0
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], 0
mov dword [esp], ebp
call fcn.005d6800
mov eax, dword [0x8672d0]
test eax, eax
jg 0x5d6eea
mov dword [0x8672d0], 0x4f
mov eax, 0x768
mov dword [0x8672e8], 0x18
jmp 0x5d6ba9
mov eax, dword [0x860a8c]
test eax, eax
je 0x5d6f16
mov eax, dword [0x860a90]
test eax, eax
je 0x5d6f00
mov edx, dword [0x860a8c]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 0x1c], edx
call fcn.004518b0
test eax, eax
jle 0x5d6b40
xor ebx, ebx
lea edi, [esp + 0x1c]
mov eax, dword [ebx*8 + 0x7418a0]
mov esi, dword [ebx*8 + 0x7418a4]
add ebx, 1
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004518e0
cmp ebx, 0x1d
mov dword [esi], eax
jne 0x5d6d64
mov edx, dword [0x8672e0]
xor eax, eax
mov dword [0x860ad8], 1
test edx, edx
je 0x5d6da1
movzx eax, byte [edx]
mov byte [0x867308], al
mov eax, dword [0x867314]
mov dword [0x8672f0], eax
mov eax, dword [0x8672d4]
mov dword [0x8672e4], eax
mov eax, dword [0x867310]
test eax, eax
je 0x5d6ec8
mov dword [esp], 0x741822
call fcn.004518d0
xor edx, edx
test eax, eax
jne 0x5d6eb0
mov edi, dword [0x8672d0]
mov dword [0x6a98fc], edx
test edi, edi
jle 0x5d6e68
mov esi, dword [0x8672e8]
test esi, esi
jle 0x5d6e68
mov ebx, dword [0x8672dc]
mov eax, 1
test ebx, ebx
je 0x5d6e8b
mov dword [0x860a84], eax
mov dword [esp], 0x741828
call fcn.004518d0
test eax, eax
setne al
movzx eax, al
test eax, eax
mov dword [0x860ad4], eax
jne 0x5d6e40
mov dword [0x860ac4], 0
mov dword [0x860ac8], 0
mov eax, 0x6ab9a0
call fcn.005d6750
mov eax, 0x6aa140
call fcn.005d6750
mov eax, 0x6a9920
call fcn.005d6750
add esp, 0x2c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], 0
mov dword [esp], ebp
call fcn.005d6800
mov ebx, dword [0x8672dc]
mov eax, 1
test ebx, ebx
jne 0x5d6e0a
mov ecx, dword [0x8672d8]
test ecx, ecx
jne 0x5d6e0a
mov edx, dword [0x8672c4]
xor eax, eax
test edx, edx
setne al
jmp 0x5d6e0a
mov dword [esp], 0x741825
call fcn.004518d0
xor edx, edx
test eax, eax
setne dl
jmp 0x5d6ddd
mov dword [0x867310], 0x74181e
jmp 0x5d6dc7
mov dword [esp], str.TERM
call fcn.005d7380
mov ebx, eax
jmp 0x5d6af3
mov eax, dword [0x8672e8]
test eax, eax
jle 0x5d6d08
jmp 0x5d6ba2
mov dword [esp], 0xff0
call fcn.005c2e50
mov dword [0x860a90], eax
jmp 0x5d6d40
mov dword [esp], 0x7f0
call fcn.005c2e50
mov dword [0x860a8c], eax
jmp 0x5d6d33