Function at 0x5fc410
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
push ebx
sub esp, 0x48
mov edx, 0xfffffffc
mov eax, dword [0x6d159c]
mov esi, 0xfffffffd
xor eax, ebp
mov ebx, 0x723380
mov dword [ebp - 0x10], eax
mov edi, 0x723540
movzx eax, byte [0x7236e1]
and eax, 0xffffffe7
mov dword [0x7234a4], edx
add eax, 8
mov dword [0x7233a8], edx
movzx ecx, byte [0x723521]
mov byte [0x7236e1], al
and ecx, 0xffffffe7
movzx edx, byte [0x7238a1]
add ecx, 8
movzx eax, byte [0x723a61]
and edx, 0xffffffe7
and eax, 0xffffffe7
add edx, 8
mov dword [0x723664], esi
add eax, 8
mov dword [0x723568], esi
mov esi, 0xfffffffe
mov byte [0x723521], cl
mov ecx, 0x723700
mov dword [0x718fac], ebx
mov dword [0x81f448], ebx
mov ebx, 0xffffffff
mov dword [0x718fd4], edi
mov dword [0x81f44c], edi
mov edi, str.FORT_d
mov byte [0x7238a1], dl
mov edx, 0x7238c0
mov dword [0x7239e4], esi
mov dword [0x7238e8], esi
xor esi, esi
mov dword [0x723824], ebx
mov dword [0x723728], ebx
mov dword [0x719024], ecx
mov dword [0x81f454], ecx
mov byte [0x723a61], al
mov dword [0x718ffc], edx
mov dword [0x81f450], edx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], esi
call fcn.0062fd20
mov edx, eax
lea eax, [ebp - 0x50]
push eax
push esi
push edi
push ebx
mov ecx, dword [edx]
lea ebx, [ebp - 0x30]
push ebx
push dword [edx + 4]
or ecx, 1
push ecx
call fcn.0064c89e
add esp, 0x1c
push esi
push esi
push ebx
mov dword [0x723ba4], esi
mov dword [0x723aa8], esi
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
ja 0x5fc547
jne 0x5fc547
mov edx, 1
jmp 0x5fc54c
mov edx, 2
movzx eax, byte [0x723c21]
shl edx, 3
and eax, 0xffffffe7
or eax, edx
mov edx, 0x723a80
mov byte [0x723c21], al
mov dword [0x71904c], edx
mov dword [0x81f458], edx
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], 5
call fcn.0062fd20
mov edx, eax
lea eax, [ebp - 0x44]
push eax
push 0
push edi
push 0xffffffffffffffff
push ebx
mov ecx, dword [edx]
push dword [edx + 4]
or ecx, 1
push ecx
call fcn.0064c89e
add esp, 0x1c
push esi
push esi
mov eax, 5
push ebx
mov dword [0x723d64], eax
mov dword [0x723c68], eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
ja 0x5fc5c2
jne 0x5fc5c2
mov edx, 1
jmp 0x5fc5c7
mov edx, 2
movzx eax, byte [0x723de1]
shl edx, 3
and eax, 0xffffffe7
or eax, edx
mov edx, 0x723c40
mov byte [0x723de1], al
mov dword [0x719114], edx
mov dword [0x81f46c], edx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], 6
call fcn.0062fd20
mov edx, eax
lea eax, [ebp - 0x38]
push eax
push 0
push edi
push 0xffffffffffffffff
push ebx
mov ecx, dword [edx]
push dword [edx + 4]
or ecx, 1
push ecx
call fcn.0064c89e
add esp, 0x1c
push esi
push esi
mov eax, 6
push ebx
mov dword [0x723f24], eax
mov dword [0x723e28], eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
ja 0x5fc63d
jne 0x5fc63d
mov eax, 1
jmp 0x5fc642
mov eax, 2
movzx edx, byte [0x723fa1]
shl eax, 3
and edx, 0xffffffe7
or edx, eax
mov eax, 0x723e00
mov byte [0x723fa1], dl
mov dword [0x71913c], eax
mov dword [0x81f470], eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], 0
xor ecx, ebp
cmp ecx, dword [0x6d159c]
jne 0x5fc682
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
call fcn.0063f93a
mov esi, esi
lea edi, [edi]