Function at 0x424aa3
Capabilities:
Query environment variable

Disassembly:
push 0x60
mov eax, 0x440a33
call fcn.0042dbe5
mov eax, dword [ebp + 8]
push 0xf
pop esi
mov edi, ecx
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x18], esi
call fcn.00408384
mov dword [ebp - 4], ebx
push ebx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x34], esi
call fcn.00408384
push 0x406318
push edi
mov byte [ebp - 4], 1
mov byte [ebp - 0x4d], bl
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424aff
push 0x1a
pop esi
push 0x406328
jmp 0x424ba3
push 0x406330
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424b14
push 0x23
jmp 0x424b87
push 0x406344
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424b2f
push 0x2b
pop esi
push 0x406358
jmp 0x424ba3
push 0x406374
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424b44
push 0x1c
jmp 0x424b87
push 0x406388
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424b5f
push 0x26
pop esi
push 0x40639c
jmp 0x424ba3
push 0x4063ac
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424b74
push 7
jmp 0x424b87
push 0x4063bc
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424b8a
push 0x25
pop esi
jmp 0x424bd6
push 0x4063cc
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424bad
push 0x24
pop esi
push 0x4063dc
lea ecx, [ebp - 0x30]
call fcn.00408773
jmp 0x424bd6
push 0x405bc4
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424cf6
push 0x24
pop esi
push 0x4063dc
lea ecx, [ebp - 0x30]
call fcn.00408773
mov byte [ebp - 0x4d], 1
push esi
lea esi, [ebp - 0x4c]
call fcn.004247b7
cmp al, bl
pop ecx
je 0x424c18
cmp byte [ebp - 0x4d], bl
jne 0x424cb0
mov ecx, dword [ebp - 0x54]
push 0xffffffffffffffff
push ebx
mov eax, esi
push eax
call fcn.004083a0
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.00408339
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00408339
mov al, 1
jmp 0x424d0e
cmp dword [ebp - 0x1c], ebx
jbe 0x424cf6
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x424c2d
lea eax, [ebp - 0x2c]
mov edi, dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push ebx
push ebx
push eax
call edi
mov esi, eax
cmp esi, ebx
jbe 0x424cf6
lea eax, [ebp - 0x4e]
push eax
mov eax, esi
lea ecx, [ebp - 0x6c]
mov byte [ebp - 0x4e], bl
call fcn.004081bc
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x424c63
lea eax, [ebp - 0x2c]
push esi
lea esi, [ebp - 0x6c]
mov dword [ebp - 0x58], eax
call fcn.004081a3
push eax
push dword [ebp - 0x58]
call edi
call fcn.004081a3
push eax
lea ecx, [ebp - 0x4c]
call fcn.00408773
cmp byte [ebp - 0x4d], bl
jne 0x424ca1
mov ecx, dword [ebp - 0x54]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x4c]
push eax
call fcn.004083a0
call fcn.00420b6d
jmp 0x424bfb
lea esi, [ebp - 0x6c]
mov byte [ebp - 4], 1
call fcn.00420b6d
mov edi, dword [ebp - 0x5c]
push 0x405bc4
push edi
call fcn.0042af67
test eax, eax
pop ecx
pop ecx
jne 0x424cf6
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x424ccd
lea eax, [ebp - 0x48]
mov esi, dword [ebp - 0x54]
push ebx
push ebx
push ebx
push eax
mov ebx, esi
call fcn.0042409f
add esp, 0x10
call fcn.00422f95
push 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.00408339
push 0
jmp 0x424c07
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.00408339
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00408339
xor al, al
call fcn.0042dc68
ret