Function at 0x406dd8
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x801c
call fcn.00417744
push edi
push esi
push ebx
add esp, 0xfffffffc
push 0
push 0x406b71
lea ebx, [ebp - 0x2000]
push ebx
call fcn.00404944
add esp, 0xfffffff4
lea esi, [ebp - 0x4000]
push esi
call fcn.00404b94
add esp, 0x20
add esp, 0xfffffffc
push ebx
push 0x406b72
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push ebx
push 0x406b81
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push 0x42e198
push 0x406b94
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push 0x42e198
push 0x406ba4
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push 0x405693
push 0x406bb8
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push 0x405693
push 0x406be0
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push 0x4280a0
push 0x406bff
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push 0x4280a0
push 0x406c10
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push ebx
push 0x406c25
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push ebx
push 0x406c35
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push 0x42e198
push 0x406c49
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push 0x42e198
push 0x406c5a
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push 0x405693
push 0x406c6f
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push 0x405693
push 0x406ca0
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push 0x4280a0
push 0x406cc0
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push 0x4280a0
push 0x406cd2
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push ebx
push 0x406d00
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push 0x42e198
push 0x406d40
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push 0x405693
push 0x406d80
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0xfffffffc
push 0x4280a0
push 0x406da2
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffffc
push esi
push 0x406dba
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
call sub.KERNEL32.dll_GetEnvironmentStrings
mov dword [ebp - 0x8004], eax
add esp, 0x10
test eax, eax
je 0x4070a1
mov dword [ebp - 0x8008], eax
cmp byte [eax], 0
je 0x4070a1
lea esi, [esi]
add esp, 0xfffffff8
mov eax, dword [ebp - 0x8008]
push eax
lea ebx, [ebp - 0x6000]
push ebx
call sub.msvcrt.dll_strcpy
add esp, 0xfffffff8
push 0x3d
push ebx
call sub.msvcrt.dll_strchr
mov esi, eax
add esp, 0x20
test esi, esi
je 0x40707a
mov byte [esi], 0
add esp, 0xfffffffc
push ebx
push 0x406dd2
lea ebx, [ebp - 0x8000]
push ebx
call sub.msvcrt.dll_sprintf
add esp, 0xfffffffc
inc esi
push esi
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
add esp, 0xfffffff4
push ebx
call sub.msvcrt.dll__strupr
add esp, 0xfffffffc
push esi
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.00406ac8
add esp, 0x20
mov edi, dword [ebp - 0x8008]
mov al, 0
cld
mov ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
add dword [ebp - 0x8008], ecx
mov eax, dword [ebp - 0x8008]
cmp byte [eax], 0
jne 0x40700c
add esp, 0xfffffff4
mov eax, dword [ebp - 0x8004]
push eax
call sub.KERNEL32.dll_FreeEnvironmentStringsA
lea esp, [ebp - 0x8028]
pop ebx
pop esi
pop edi
leave
ret