Function at 0x42da53
Capabilities:
Query environment variable

Disassembly:
push 0x5c
mov eax, 0x44a1c5
call fcn.0042f3f0
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push 7
mov dword [ebp - 0x60], eax
pop esi
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
push 0x406670
push edi
mov byte [ebp - 4], 1
mov byte [ebp - 0x59], bl
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42daae
push 0x1a
pop esi
push 0x406660
jmp 0x42db4e
push 0x406638
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42dac3
push 0x23
jmp 0x42db32
push 0x40199c
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42dade
push 0x2b
pop esi
push 0x406604
jmp 0x42db4e
push 0x4065dc
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42daf3
push 0x1c
jmp 0x42db32
push 0x4065b4
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42db0e
push 0x26
pop esi
push 0x406598
jmp 0x42db4e
push 0x40657c
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
je 0x42db81
push 0x406560
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42db35
push 0x25
pop esi
jmp 0x42db81
push 0x406544
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42db58
push 0x24
pop esi
push 0x406534
lea ecx, [ebp - 0x2c]
call fcn.0040b36d
jmp 0x42db81
push 0x404d88
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42dc94
push 0x24
pop esi
push 0x406534
lea ecx, [ebp - 0x2c]
call fcn.0040b36d
mov byte [ebp - 0x59], 1
lea eax, [ebp - 0x48]
push eax
push esi
call fcn.0042d8d2
pop ecx
pop ecx
cmp al, bl
je 0x42dbc6
cmp byte [ebp - 0x59], bl
jne 0x42dc5b
mov ecx, dword [ebp - 0x60]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.0040b217
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.0040aa24
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040aa24
mov al, 1
jmp 0x42dcac
cmp dword [ebp - 0x1c], ebx
jbe 0x42dc94
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x42dbdb
lea eax, [ebp - 0x2c]
mov esi, dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push ebx
push ebx
push eax
call esi
mov edi, eax
cmp edi, ebx
jbe 0x42dc94
lea eax, [ebp - 0x68]
push eax
push edi
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
call fcn.0040c59b
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 2
jae 0x42dc19
lea eax, [ebp - 0x2c]
push edi
push dword [ebp - 0x58]
push eax
call esi
push dword [ebp - 0x58]
lea ecx, [ebp - 0x48]
call fcn.0040b36d
cmp byte [ebp - 0x59], bl
jne 0x42dc4c
mov ecx, dword [ebp - 0x60]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.0040b217
lea ecx, [ebp - 0x58]
call fcn.0040c13b
jmp 0x42dba9
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 1
call fcn.0040c13b
mov edi, dword [ebp - 0x64]
push 0x404d88
push edi
call fcn.0042f63e
pop ecx
pop ecx
test eax, eax
jne 0x42dc94
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x42dc78
lea eax, [ebp - 0x48]
push ebx
push ebx
push ebx
push dword [ebp - 0x60]
push eax
call fcn.0042be87
push dword [ebp - 0x60]
call fcn.0042b569
add esp, 0x18
jmp 0x42dba9
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.0040aa24
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040aa24
xor al, al
call fcn.0042f482
ret