Function at 0x4069a0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x601c
call fcn.004170c4
push edi
push esi
push ebx
add esp, 0xfffffffc
push 0
push 0x406751
lea ebx, [ebp - 0x2000]
push ebx
call fcn.004045a4
add esp, 0xfffffffc
push ebx
push 0x406752
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push ebx
push 0x406761
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push 0x42e190
push 0x406774
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push 0x42e190
push 0x406784
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push 0x4052f3
push 0x406798
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push 0x4052f3
push 0x4067c0
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push 0x428098
push 0x4067df
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push 0x428098
push 0x4067f0
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push ebx
push 0x406805
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push ebx
push 0x406815
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push 0x42e190
push 0x406829
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push 0x42e190
push 0x40683a
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push 0x4052f3
push 0x40684f
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push 0x4052f3
push 0x406880
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push 0x428098
push 0x4068a0
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push 0x428098
push 0x4068b2
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push ebx
push 0x4068e0
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push 0x42e190
push 0x406920
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0xfffffffc
push 0x4052f3
push 0x406960
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffffc
push 0x428098
push 0x406982
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
call sub.KERNEL32.dll_GetEnvironmentStrings
mov dword [ebp - 0x6004], eax
add esp, 0x10
test eax, eax
je 0x406c45
mov dword [ebp - 0x6008], eax
cmp byte [eax], 0
je 0x406c45
lea esi, [esi]
add esp, 0xfffffff8
mov eax, dword [ebp - 0x6008]
push eax
lea ebx, [ebp - 0x4000]
push ebx
call sub.msvcrt.dll_strcpy
add esp, 0xfffffff8
push 0x3d
push ebx
call sub.msvcrt.dll_strchr
mov esi, eax
add esp, 0x20
test esi, esi
je 0x406c1e
mov byte [esi], 0
add esp, 0xfffffffc
push ebx
push 0x40699a
lea ebx, [ebp - 0x6000]
push ebx
call sub.msvcrt.dll_sprintf
add esp, 0xfffffffc
inc esi
push esi
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
add esp, 0xfffffff4
push ebx
call sub.msvcrt.dll__strupr
add esp, 0xfffffffc
push esi
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.004066a8
add esp, 0x20
mov edi, dword [ebp - 0x6008]
mov al, 0
cld
mov ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
add dword [ebp - 0x6008], ecx
mov eax, dword [ebp - 0x6008]
cmp byte [eax], 0
jne 0x406bb0
add esp, 0xfffffff4
mov eax, dword [ebp - 0x6004]
push eax
call sub.KERNEL32.dll_FreeEnvironmentStringsA
lea esp, [ebp - 0x6028]
pop ebx
pop esi
pop edi
leave
ret