Function at 0x406e34
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x801c
call fcn.00417820
push edi
push esi
push ebx
add esp, 0xfffffffc
push 0
push 0x406bc5
lea ebx, [ebp - 0x2000]
push ebx
call fcn.0040498c
add esp, 0xfffffff4
lea esi, [ebp - 0x4000]
push esi
call fcn.00404bd0
add esp, 0x20
add esp, 0xfffffffc
push ebx
push 0x406bc6
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push ebx
push 0x406bd5
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push 0x42e198
push 0x406be8
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push 0x42e198
push 0x406bf8
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push 0x4056cf
push 0x406c0c
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push 0x4056cf
push 0x406c3c
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push 0x4280a0
push 0x406c5b
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push 0x4280a0
push 0x406c6c
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push ebx
push 0x406c81
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push ebx
push 0x406c91
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push 0x42e198
push 0x406ca5
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push 0x42e198
push 0x406cb6
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push 0x4056cf
push 0x406ccb
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push 0x4056cf
push 0x406cfc
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push 0x4280a0
push 0x406d1c
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push 0x4280a0
push 0x406d2e
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push ebx
push 0x406d5c
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push 0x42e198
push 0x406d9c
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push 0x4056cf
push 0x406ddc
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0xfffffffc
push 0x4280a0
push 0x406dfe
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffffc
push esi
push 0x406e16
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
call sub.KERNEL32.dll_GetEnvironmentStrings
mov dword [ebp - 0x8004], eax
add esp, 0x10
test eax, eax
je 0x4070fd
mov dword [ebp - 0x8008], eax
cmp byte [eax], 0
je 0x4070fd
lea esi, [esi]
add esp, 0xfffffff8
mov eax, dword [ebp - 0x8008]
push eax
lea ebx, [ebp - 0x6000]
push ebx
call sub.msvcrt.dll_strcpy
add esp, 0xfffffff8
push 0x3d
push ebx
call sub.msvcrt.dll_strchr
mov esi, eax
add esp, 0x20
test esi, esi
je 0x4070d6
mov byte [esi], 0
add esp, 0xfffffffc
push ebx
push 0x406e2e
lea ebx, [ebp - 0x8000]
push ebx
call sub.msvcrt.dll_sprintf
add esp, 0xfffffffc
inc esi
push esi
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
add esp, 0xfffffff4
push ebx
call sub.msvcrt.dll__strupr
add esp, 0xfffffffc
push esi
push ebx
mov eax, dword [ebp + 8]
push eax
call fcn.00406b1c
add esp, 0x20
mov edi, dword [ebp - 0x8008]
mov al, 0
cld
mov ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
add dword [ebp - 0x8008], ecx
mov eax, dword [ebp - 0x8008]
cmp byte [eax], 0
jne 0x407068
add esp, 0xfffffff4
mov eax, dword [ebp - 0x8004]
push eax
call sub.KERNEL32.dll_FreeEnvironmentStringsA
lea esp, [ebp - 0x8028]
pop ebx
pop esi
pop edi
leave
ret