Function at 0x404761
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
pushal
mov ebx, 0x65d97c7d
mov esi, 0x33aff227
xor esi, ebx
mov eax, 0x6cd80949
xor esi, eax
xor esi, 0x3aee5693
xor eax, eax
add eax, esi
mov ecx, 0xffffffb4
add eax, ecx
add eax, 0xffffffff
mov edi, dword [eax + 0x4d]
mov eax, edi
mov ebx, eax
mov eax, 0x32
add ebx, eax
mov ecx, 0xffffffff
add ebx, ecx
mov esi, dword [ebx - 0x31]
mov eax, 0x351cd399
mov edi, 0x696896cf
xor edi, eax
xor esi, edi
mov ebx, 0x3a89abd1
xor esi, ebx
mov eax, 0xfffffffc
add esp, eax
mov ecx, esp
mov edx, ecx
mov dword [edx], esi
pop edx
mov ebx, 0
xor ebx, edx
mov eax, 4
sub esp, eax
mov dword [esp], ebx
mov ecx, 0x7a491035
mov esi, 0x97e10139
xor esi, ecx
xor edx, esi
mov ecx, 0
xor ecx, edx
xor ebx, ebx
add ebx, ecx
sub ebx, 0
jne 0x404815
push 0x4981edf8
mov esi, 0x4981edf8
pop ecx
xor esi, ecx
push esi
pop ecx
xor eax, eax
add eax, ecx
mov edx, eax
push edx
mov ebx, ecx
mov esi, ebx
xor esi, 0xffffffff
and esi, 0xffffffff
and ebx, 0
or ebx, esi
and ebx, 0x66fdcb78
and ecx, 0x99023487
or ecx, ebx
and ecx, 0xffff
cmp ecx, 0
jne 0x404864
mov esi, 0
mov edx, 0
xor esi, edx
push esi
pop edi
mov ebx, 4
sub esp, ebx
mov eax, esp
mov dword [eax], edi
mov eax, edi
mov ebx, 0x9fac8212
xor eax, ebx
xor eax, 0x60537ded
and eax, 0xe51165d2
and edi, 0x1aee9a2d
or edi, eax
xor ebx, ebx
add ebx, edi
xchg ebx, ecx
and ecx, ecx
jne 0x4048aa
push 0x607444e4
mov eax, 0x607444e4
pop edi
xor eax, edi
push eax
mov esi, esp
sub esi, 0xffffffb2
mov eax, dword [esi - 0x4e]
mov ebx, 4
add esp, ebx
cmp eax, 0
jne 0x404a35
push 0x1d3d1506
mov edx, 0x51ea42b4
pop eax
xor edx, eax
mov eax, edx
xor eax, 0xffffffff
and eax, 0x4c978652
and edx, 0xb36879ad
or edx, eax
push edx
pop esi
mov eax, 0x4d
add esi, eax
mov edi, dword [esi - 0x4d]
xor esi, esi
add esi, edi
mov eax, 0xfffffffc
add esp, eax
mov dword [esp], esi
mov esi, 0x632102b8
mov edx, 0x731f63c9
xor edx, esi
mov esi, edx
xor esi, 0xffffffff
and esi, 0x107eb0b9
and edx, 0xef814f46
or edx, esi
push edx
pop esi
mov edi, 0xffffff99
add esi, edi
sub esi, 1
mov ecx, dword [esi + 0x68]
mov esi, ecx
mov edi, esi
add esp, 0xfffffffc
mov eax, esp
mov dword [eax], edi
mov ecx, 0x2d4bff6e
mov eax, 0x2d28ad4b
xor eax, ecx
mov ebx, 0xa802
mov edx, 0xc0000
xor ebx, edx
xor eax, ebx
mov esi, 0
xor esi, eax
mov ecx, 0xfffffffc
add esp, ecx
mov dword [esp], esi
mov esi, esp
dec esi
mov edi, dword [esi + 1]
mov edx, 4
add esp, edx
pop ebx
mov esi, edi
sub esp, 4
mov dword [esp], esi
pop eax
and eax, 1
push eax
pop edx
xchg ecx, edx
and ecx, eax
je 0x4049a8
pop eax
push ebx
pop esi
mov ecx, 0xfffffffc
add esp, ecx
mov dword [esp], esi
push eax
pop ecx
mov edx, ecx
mov ebx, edx
mov edx, 0
xor edx, ebx
mov eax, 4
sub esp, eax
mov dword [esp], edx
mov esi, 0
xor esi, edi
sub esp, 4
mov edx, esp
mov dword [edx], esi
call ebx
pop edx
mov eax, 0x5e74261b
add eax, 0xa18bd9e6
sub edx, eax
and edx, 0x40ffffff
push edx
pop esi
mov eax, esi
push eax
mov ebx, edx
and ebx, 0xffffffff
jne 0x40496a
pop esi
mov edx, esp
add edx, 0xffffffc9
dec edx
mov esi, dword [edx + 0x38]
mov edi, 0xfffffffc
sub esp, edi
mov edx, esp
sub edx, 0xffffffd5
mov esi, dword [edx - 0x2b]
mov edx, 4
add esp, edx
pop edx
mov eax, 0
mov edi, 0x4016
xor eax, edi
mov ecx, 0x56cc1502
add ecx, 0xa9740906
xor eax, ecx
call eax
popal
pop ebp
jmp fcn.00406a58