Function at 0x40faa6
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2000
call fcn.00410150
push esi
push dword [ebp + 8]
xor esi, esi
call fcn.00403bbc
push eax
mov dword [ebp + 8], eax
call fcn.00403bda
add esp, 8
test eax, eax
je 0x40fdcd
push ebx
push 0x800
lea eax, [ebp - 0x1000]
push eax
push dword [ebp + 8]
mov esi, 0x80004001
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x1000]
push eax
lea eax, [ebp - 0x2000]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x1000]
push eax
call fcn.0040c6a3
mov ebx, eax
cmp ebx, 0xffffffff
pop ecx
pop ecx
je 0x40fdcc
push edi
push dword [ebp + 8]
call fcn.0040c706
pop ecx
push 1
mov edi, eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp ebx, 0x3d
ja case.default.0x40fb3b
jmp dword [ebx*4 + 0x40fdd2]
push edi
call fcn.0040b2e1
jmp 0x40fdbd
push edi
call fcn.0040bb17
jmp 0x40fdbd
push edi
call fcn.0040ef46
jmp 0x40fdbd
push edi
call fcn.00408f38
jmp 0x40fdbd
push edi
call fcn.0040bde2
jmp 0x40fdbd
push edi
call fcn.0040f7af
jmp 0x40fdbd
push edi
call fcn.0040a41d
jmp 0x40fdbd
push edi
call fcn.004060b5
jmp 0x40fdbd
push edi
call fcn.004082d3
jmp 0x40fdbd
push edi
call fcn.00406c4b
jmp 0x40fdbd
push edi
call fcn.00404d79
jmp 0x40fdbd
push edi
call fcn.0040d5b3
jmp 0x40fdbd
mov dword [0x4122dc], 1
xor esi, esi
jmp 0x40fdcb
push edi
call fcn.0040bcca
jmp 0x40fdbd
push edi
call fcn.0040bea4
jmp 0x40fdbd
push edi
call fcn.0040bff3
jmp 0x40fdbd
push edi
call fcn.004067f2
jmp 0x40fdbd
push edi
call fcn.0040aadc
jmp 0x40fdbd
push edi
call fcn.0040a27c
jmp 0x40fdbd
push edi
call fcn.00409fde
jmp 0x40fdbd
push edi
call fcn.0040843f
jmp 0x40fdbd
push edi
call fcn.0040f163
jmp 0x40fdbd
push edi
call fcn.004090d4
jmp 0x40fdbd
push edi
call fcn.0040aace
jmp 0x40fdbd
push edi
call fcn.0040d7a5
jmp 0x40fdbd
push edi
call fcn.004080f3
jmp 0x40fdbd
push edi
call fcn.00406ad8
jmp 0x40fdbd
push edi
call fcn.00408561
jmp 0x40fdbd
push edi
call fcn.004068b5
jmp 0x40fdbd
push edi
call fcn.00409572
jmp 0x40fdbd
push edi
call fcn.0040f095
jmp 0x40fdbd
push edi
call fcn.0040ab97
jmp 0x40fdbd
push edi
call fcn.0040c06a
jmp 0x40fdbd
push edi
call fcn.0040c19b
jmp 0x40fdbd
push edi
call fcn.0040f9e9
jmp 0x40fdbd
push edi
call fcn.004087b8
jmp 0x40fdbd
push edi
call fcn.004091b3
jmp 0x40fdbd
push edi
call fcn.0040b026
jmp 0x40fdbd
push edi
call fcn.0040b858
jmp 0x40fdbd
push edi
call fcn.0040c229
jmp 0x40fdbd
push edi
call fcn.0040c30a
jmp 0x40fdbd
push edi
call fcn.0040a3c0
jmp 0x40fdbd
push edi
call fcn.0040629c
jmp 0x40fdbd
push edi
call fcn.0040aeef
jmp 0x40fdbd
push edi
call fcn.0040868f
jmp 0x40fdbd
push edi
call fcn.004092de
jmp 0x40fdbd
push edi
call fcn.004041e2
jmp 0x40fdbd
push edi
call fcn.0040c37b
jmp 0x40fdbd
push edi
call fcn.0040c4bd
jmp 0x40fdbd
push edi
call fcn.00406a70
jmp 0x40fdbd
push edi
call fcn.00406498
jmp 0x40fdbd
push edi
call fcn.0040ba4a
jmp 0x40fdbd
push edi
call fcn.00406f74
jmp 0x40fdbd
push edi
call fcn.00404138
jmp 0x40fdbd
push edi
call fcn.0040c548
jmp 0x40fdbd
push edi
call fcn.00406b8f
jmp 0x40fdbd
push edi
call fcn.0040a6ea
jmp 0x40fdbd
push edi
call fcn.0040b3d6
jmp 0x40fdbd
push edi
call fcn.00405d91
jmp 0x40fdbd
push edi
call fcn.004094a0
jmp 0x40fdbd
push edi
call fcn.00408c6d
jmp 0x40fdbd
push edi
call fcn.0040ab3d
mov esi, eax
test esi, esi
pop ecx
je 0x40fdcb
push esi
call fcn.0040aeb6
pop ecx
pop edi
pop ebx
mov eax, esi
pop esi
leave
ret