Function at 0x424214
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x7c
mov dword [ebp - 0x60], ebx
lea ebx, [ebp - 0x57]
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e76c8]
test al, al
jne 0x424276
mov dword [esp], 0x4e76c8
call fcn.004d5a00
test eax, eax
je 0x424276
mov dword [esp], ebx
mov ecx, 0x4eb100
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6940
call fcn.004013f0
mov dword [esp], 0x4e76c8
call fcn.004d5ad0
mov ecx, 0x4eb100
call fcn.0043164c
mov dword [esp], 0x4eb100
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e75e0]
test al, al
jne 0x4242dd
mov dword [esp], 0x4e75e0
call fcn.004d5a00
test eax, eax
je 0x4242dd
mov dword [esp], ebx
mov ecx, 0x4eaeec
call fcn.0043167c
push edx
mov dword [esp], 0x4d6944
call fcn.004013f0
mov dword [esp], 0x4e75e0
call fcn.004d5ad0
mov ecx, 0x4eaeec
call fcn.0043164c
mov dword [esp], 0x4eaeec
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7630]
test al, al
jne 0x424344
mov dword [esp], 0x4e7630
call fcn.004d5a00
test eax, eax
je 0x424344
mov dword [esp], ebx
mov ecx, 0x4eaf64
call fcn.0043167c
push eax
mov dword [esp], 0x4d6948
call fcn.004013f0
mov dword [esp], 0x4e7630
call fcn.004d5ad0
mov ecx, 0x4eaf64
call fcn.0043164c
mov dword [esp], 0x4eaf64
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7670]
test al, al
jne 0x4243ab
mov dword [esp], 0x4e7670
call fcn.004d5a00
test eax, eax
je 0x4243ab
mov dword [esp], ebx
mov ecx, 0x4eb008
call fcn.0043167c
push eax
mov dword [esp], 0x4d694c
call fcn.004013f0
mov dword [esp], 0x4e7670
call fcn.004d5ad0
mov ecx, 0x4eb008
call fcn.0043164c
mov dword [esp], 0x4eb008
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e76a0]
test al, al
jne 0x424412
mov dword [esp], 0x4e76a0
call fcn.004d5a00
test eax, eax
je 0x424412
mov dword [esp], ebx
mov ecx, 0x4eb08c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6950
call fcn.004013f0
mov dword [esp], 0x4e76a0
call fcn.004d5ad0
mov ecx, 0x4eb08c
call fcn.0043164c
mov dword [esp], 0x4eb08c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e76a8]
test al, al
jne 0x424479
mov dword [esp], 0x4e76a8
call fcn.004d5a00
test eax, eax
je 0x424479
mov dword [esp], ebx
mov ecx, 0x4eb098
call fcn.0043167c
push eax
mov dword [esp], 0x4d6954
call fcn.004013f0
mov dword [esp], 0x4e76a8
call fcn.004d5ad0
mov ecx, 0x4eb098
call fcn.0043164c
mov dword [esp], 0x4eb098
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e76b0]
test al, al
jne 0x4244e0
mov dword [esp], 0x4e76b0
call fcn.004d5a00
test eax, eax
je 0x4244e0
mov dword [esp], ebx
mov ecx, 0x4eb0a4
call fcn.0043167c
push eax
mov dword [esp], 0x4d6958
call fcn.004013f0
mov dword [esp], 0x4e76b0
call fcn.004d5ad0
mov ecx, 0x4eb0a4
call fcn.0043164c
mov dword [esp], 0x4eb0a4
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e76b8]
test al, al
jne 0x424547
mov dword [esp], 0x4e76b8
call fcn.004d5a00
test eax, eax
je 0x424547
mov dword [esp], ebx
mov ecx, 0x4eb0b0
call fcn.0043167c
push edi
mov dword [esp], 0x4d6968
call fcn.004013f0
mov dword [esp], 0x4e76b8
call fcn.004d5ad0
mov ecx, 0x4eb0b0
lea edi, [ebp - 0x57]
lea ebx, [ebp - 0x57]
mov esi, 0x4e7100
call fcn.0043164c
mov dword [esp], 0x4eb0b0
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x5b], 0xfd602e96
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e76c0]
test al, al
jne 0x4245b5
mov dword [esp], 0x4e76c0
call fcn.004d5a00
test eax, eax
je 0x4245b5
mov dword [esp], ebx
mov ecx, 0x4eb0c0
call fcn.00431614
push esi
mov dword [esp], 0x4d696c
call fcn.004013f0
mov dword [esp], 0x4e76c0
call fcn.004d5ad0
mov ecx, 0x4eb0c0
call fcn.004315e4
mov dword [esp], 0x4eb0c0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42463b
lea eax, [ebp - 0x5b]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e75e8]
test al, al
jne 0x424625
mov dword [esp], 0x4e75e8
call fcn.004d5a00
test eax, eax
je 0x424625
mov dword [esp], ebx
mov ecx, 0x4eaef8
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6978
call fcn.004013f0
mov dword [esp], 0x4e75e8
call fcn.004d5ad0
mov ecx, 0x4eaef8
call fcn.0043164c
mov dword [esp], 0x4eaef8
call fcn.00424ea0
lea eax, [ebp - 0x60]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e75f0]
test al, al
jne 0x4246b3
mov dword [esp], 0x4e75f0
call fcn.004d5a00
test eax, eax
je 0x4246b3
mov dword [esp], ebx
mov ecx, 0x4eaf04
call fcn.0043167c
push edx
mov dword [esp], 0x4d697c
call fcn.004013f0
mov dword [esp], 0x4e75f0
call fcn.004d5ad0
mov ecx, 0x4eaf04
call fcn.0043164c
mov dword [esp], 0x4eaf04
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e75f8]
test al, al
jne 0x42471a
mov dword [esp], 0x4e75f8
call fcn.004d5a00
test eax, eax
je 0x42471a
mov dword [esp], ebx
mov ecx, 0x4eaf10
call fcn.0043167c
push eax
mov dword [esp], 0x4d6980
call fcn.004013f0
mov dword [esp], 0x4e75f8
call fcn.004d5ad0
mov ecx, 0x4eaf10
call fcn.0043164c
mov dword [esp], 0x4eaf10
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7600]
test al, al
jne 0x424781
mov dword [esp], 0x4e7600
call fcn.004d5a00
test eax, eax
je 0x424781
mov dword [esp], ebx
mov ecx, 0x4eaf1c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6984
call fcn.004013f0
mov dword [esp], 0x4e7600
call fcn.004d5ad0
mov ecx, 0x4eaf1c
call fcn.0043164c
mov dword [esp], 0x4eaf1c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7608]
test al, al
jne 0x4247e8
mov dword [esp], 0x4e7608
call fcn.004d5a00
test eax, eax
je 0x4247e8
mov dword [esp], ebx
mov ecx, 0x4eaf28
call fcn.0043167c
push eax
mov dword [esp], 0x4d6988
call fcn.004013f0
mov dword [esp], 0x4e7608
call fcn.004d5ad0
mov ecx, 0x4eaf28
call fcn.0043164c
mov dword [esp], 0x4eaf28
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7610]
test al, al
jne 0x42484f
mov dword [esp], 0x4e7610
call fcn.004d5a00
test eax, eax
je 0x42484f
mov dword [esp], ebx
mov ecx, 0x4eaf34
call fcn.0043167c
push eax
mov dword [esp], 0x4d6990
call fcn.004013f0
mov dword [esp], 0x4e7610
call fcn.004d5ad0
mov ecx, 0x4eaf34
call fcn.0043164c
mov dword [esp], 0x4eaf34
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7618]
test al, al
jne 0x4248b6
mov dword [esp], 0x4e7618
call fcn.004d5a00
test eax, eax
je 0x4248b6
mov dword [esp], ebx
mov ecx, 0x4eaf40
call fcn.0043167c
push eax
mov dword [esp], 0x4d6994
call fcn.004013f0
mov dword [esp], 0x4e7618
call fcn.004d5ad0
mov ecx, 0x4eaf40
call fcn.0043164c
mov dword [esp], 0x4eaf40
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7620]
test al, al
jne 0x42491d
mov dword [esp], 0x4e7620
call fcn.004d5a00
test eax, eax
je 0x42491d
mov dword [esp], ebx
mov ecx, 0x4eaf4c
call fcn.0043167c
push edi
mov dword [esp], 0x4d6998
call fcn.004013f0
mov dword [esp], 0x4e7620
call fcn.004d5ad0
mov ecx, 0x4eaf4c
call fcn.0043164c
mov dword [esp], 0x4eaf4c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7628]
test al, al
jne 0x424984
mov dword [esp], 0x4e7628
call fcn.004d5a00
test eax, eax
je 0x424984
mov dword [esp], ebx
mov ecx, 0x4eaf58
call fcn.0043167c
push esi
mov dword [esp], 0x4d699c
call fcn.004013f0
mov dword [esp], 0x4e7628
call fcn.004d5ad0
mov ecx, 0x4eaf58
mov esi, 0x4e7100
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4eaf58
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x5b], 0x1170369a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7638]
test al, al
jne 0x4249ee
mov dword [esp], 0x4e7638
call fcn.004d5a00
test eax, eax
je 0x4249ee
mov dword [esp], ebx
mov ecx, 0x4eaf80
call fcn.00431614
push ecx
mov dword [esp], 0x4d69a0
call fcn.004013f0
mov dword [esp], 0x4e7638
call fcn.004d5ad0
mov ecx, 0x4eaf80
call fcn.004315e4
mov dword [esp], 0x4eaf80
call sub.msvcrt.dll_getenv
test eax, eax
je 0x424a74
lea eax, [ebp - 0x5b]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7640]
test al, al
jne 0x424a5e
mov dword [esp], 0x4e7640
call fcn.004d5a00
test eax, eax
je 0x424a5e
mov dword [esp], ebx
mov ecx, 0x4eafc0
call fcn.0043167c
push edx
mov dword [esp], 0x4d69ac
call fcn.004013f0
mov dword [esp], 0x4e7640
call fcn.004d5ad0
mov ecx, 0x4eafc0
call fcn.0043164c
mov dword [esp], 0x4eafc0
call fcn.00424ea0
cmp dword [ebp - 0x6c], 0
jne 0x424e94
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7648]
test al, al
jne 0x424acf
mov dword [esp], 0x4e7648
call fcn.004d5a00
test eax, eax
je 0x424acf
mov dword [esp], ebx
mov ecx, 0x4eafcc
call fcn.0043167c
push eax
mov dword [esp], 0x4d69b0
call fcn.004013f0
mov dword [esp], 0x4e7648
call fcn.004d5ad0
mov ecx, 0x4eafcc
call fcn.0043164c
mov dword [esp], 0x4eafcc
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7650]
test al, al
jne 0x424b36
mov dword [esp], 0x4e7650
call fcn.004d5a00
test eax, eax
je 0x424b36
mov dword [esp], ebx
mov ecx, 0x4eafd8
call fcn.0043167c
push eax
mov dword [esp], 0x4d69b4
call fcn.004013f0
mov dword [esp], 0x4e7650
call fcn.004d5ad0
mov ecx, 0x4eafd8
call fcn.0043164c
mov dword [esp], 0x4eafd8
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7658]
test al, al
jne 0x424b9d
mov dword [esp], 0x4e7658
call fcn.004d5a00
test eax, eax
je 0x424b9d
mov dword [esp], ebx
mov ecx, 0x4eafe4
call fcn.0043167c
push eax
mov dword [esp], 0x4d69b8
call fcn.004013f0
mov dword [esp], 0x4e7658
call fcn.004d5ad0
mov ecx, 0x4eafe4
call fcn.0043164c
mov dword [esp], 0x4eafe4
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7660]
test al, al
jne 0x424c04
mov dword [esp], 0x4e7660
call fcn.004d5a00
test eax, eax
je 0x424c04
mov dword [esp], ebx
mov ecx, 0x4eaff0
call fcn.0043167c
push eax
mov dword [esp], 0x4d69bc
call fcn.004013f0
mov dword [esp], 0x4e7660
call fcn.004d5ad0
mov ecx, 0x4eaff0
call fcn.0043164c
mov dword [esp], 0x4eaff0
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7668]
test al, al
jne 0x424c6b
mov dword [esp], 0x4e7668
call fcn.004d5a00
test eax, eax
je 0x424c6b
mov dword [esp], ebx
mov ecx, 0x4eaffc
call fcn.0043167c
push eax
mov dword [esp], 0x4d69c0
call fcn.004013f0
mov dword [esp], 0x4e7668
call fcn.004d5ad0
mov ecx, 0x4eaffc
call fcn.0043164c
mov dword [esp], 0x4eaffc
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7678]
test al, al
jne 0x424cd2
mov dword [esp], 0x4e7678
call fcn.004d5a00
test eax, eax
je 0x424cd2
mov dword [esp], ebx
mov ecx, 0x4eb014
call fcn.0043167c
push edi
mov dword [esp], 0x4d69c4
call fcn.004013f0
mov dword [esp], 0x4e7678
call fcn.004d5ad0
mov ecx, 0x4eb014
call fcn.0043164c
mov dword [esp], 0x4eb014
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7680]
test al, al
jne 0x424d39
mov dword [esp], 0x4e7680
call fcn.004d5a00
test eax, eax
je 0x424d39
mov dword [esp], ebx
mov ecx, 0x4eb020
call fcn.0043167c
push esi
mov dword [esp], 0x4d69c8
call fcn.004013f0
mov dword [esp], 0x4e7680
call fcn.004d5ad0
mov ecx, 0x4eb020
call fcn.0043164c
mov dword [esp], 0x4eb020
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7688]
test al, al
jne 0x424da0
mov dword [esp], 0x4e7688
call fcn.004d5a00
test eax, eax
je 0x424da0
mov dword [esp], ebx
mov ecx, 0x4eb02c
call fcn.0043167c
push ecx
mov dword [esp], 0x4d69cc
call fcn.004013f0
mov dword [esp], 0x4e7688
call fcn.004d5ad0
mov ecx, 0x4eb02c
mov esi, 0x4e7100
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4eb02c
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x5b], 0x25803e9e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7690]
test al, al
jne 0x424e0a
mov dword [esp], 0x4e7690
call fcn.004d5a00
test eax, eax
je 0x424e0a
mov dword [esp], ebx
mov ecx, 0x4eb040
call fcn.00431614
push edx
mov dword [esp], 0x4d69d0
call fcn.004013f0
mov dword [esp], 0x4e7690
call fcn.004d5ad0
mov ecx, 0x4eb040
call fcn.004315e4
mov dword [esp], 0x4eb040
call sub.msvcrt.dll_getenv
test eax, eax
je 0x424e90
lea eax, [ebp - 0x5b]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e7698]
test al, al
jne 0x424e7a
mov dword [esp], 0x4e7698
call fcn.004d5a00
test eax, eax
je 0x424e7a
mov dword [esp], ebx
mov ecx, 0x4eb080
call fcn.0043167c
push eax
mov dword [esp], 0x4d69dc
call fcn.004013f0
mov dword [esp], 0x4e7698
call fcn.004d5ad0
mov ecx, 0x4eb080
call fcn.0043164c
mov dword [esp], 0x4eb080
call fcn.00424ea0
xor eax, eax
jmp 0x424e97
mov eax, dword [ebp - 0x60]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret