Function at 0x406e10
Capabilities:
Query environment variable

Disassembly:
push ebp
lea ebp, [esp - 0x2e74]
mov eax, 0x2ef4
call fcn.00413c90
mov eax, dword [0x43bc80]
xor eax, ebp
mov dword [ebp + 0x2e70], eax
push ebx
push esi
mov esi, dword [ebp + 0x2e7c]
push edi
mov edi, 0x2ee0
push edi
call fcn.00412d69
push 0
push dword [ebp + 0x2e80]
mov ebx, eax
push 0x4316a0
push ebx
mov dword [ebp - 0x74], ebx
call fcn.00405a34
push edi
call fcn.00412d69
add esp, 0x18
cmp byte [ebp + 0x2e80], 0
mov dword [ebp - 0x7c], eax
je 0x406e9b
push 0x1770
call fcn.00412d69
mov edi, eax
push edi
call fcn.004057ef
push edi
push 0x430c38
push dword [ebp - 0x7c]
call fcn.004144b9
push edi
call fcn.00413a45
add esp, 0x18
jmp 0x406ea5
push 1
push eax
call fcn.0040583b
pop ecx
pop ecx
push ebx
push 0x432058
push esi
call fcn.00406d19
push ebx
push 0x432030
push esi
call fcn.00406d19
mov edi, 0x448cd8
push edi
push 0x432010
push esi
call fcn.00406d92
push edi
push 0x431fe8
push esi
call fcn.00406d92
mov ebx, 0x43151c
push ebx
push 0x431fb0
push esi
call fcn.00406d19
push ebx
push 0x431f70
push esi
call fcn.00406d19
add esp, 0x48
mov edi, 0x4474e8
push edi
push 0x431f4c
push esi
call fcn.00406d92
push edi
push 0x431f20
push esi
call fcn.00406d92
push dword [ebp - 0x74]
push 0x431f00
push esi
call fcn.00406d19
push dword [ebp - 0x74]
push 0x431ed8
push esi
call fcn.00406d19
push 0x448cd8
push 0x431eb4
push esi
call fcn.00406d92
push 0x448cd8
push 0x431e88
push esi
call fcn.00406d92
add esp, 0x48
push ebx
push 0x431e50
push esi
call fcn.00406d19
push ebx
push 0x431e10
push esi
call fcn.00406d19
push edi
push 0x431de8
push esi
call fcn.00406d92
push edi
push 0x431dbc
push esi
call fcn.00406d92
push dword [ebp - 0x74]
push 0x431d78
push esi
call fcn.00406d19
push 0x448cd8
push 0x431d28
push esi
call fcn.00406d92
add esp, 0x48
push ebx
push 0x431ce0
push esi
call fcn.00406d19
push edi
push 0x431cb0
push esi
call fcn.00406d92
push dword [ebp - 0x7c]
push 0x431c80
push esi
call fcn.00406d19
add esp, 0x24
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x80], eax
test eax, eax
je 0x407081
cmp word [eax], 0
mov edi, eax
je 0x407081
push edi
call fcn.00413f2b
xor ecx, ecx
push 2
inc eax
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00412d69
push edi
push eax
mov dword [ebp - 0x78], eax
call fcn.0041449a
push 0x3d
push dword [ebp - 0x78]
call fcn.00415087
mov ebx, eax
add esp, 0x18
test ebx, ebx
je 0x407060
push dword [ebp - 0x78]
xor eax, eax
mov word [ebx], ax
lea eax, [ebp - 0x70]
push 0x431c74
push eax
call fcn.004144b9
add ebx, 2
push ebx
lea eax, [ebp - 0x70]
push eax
push esi
call fcn.00406d19
lea eax, [ebp - 0x70]
push eax
call fcn.00415eb9
push ebx
lea eax, [ebp - 0x70]
push eax
push esi
call fcn.00406d19
add esp, 0x28
push edi
call fcn.00413f2b
push dword [ebp - 0x78]
lea edi, [edi + eax*2 + 2]
call fcn.00413a45
cmp word [edi], 0
pop ecx
pop ecx
jne 0x406fed
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push dword [ebp - 0x74]
call fcn.00413a45
push dword [ebp - 0x7c]
call fcn.00413a45
pop ecx
pop ecx
mov ecx, dword [ebp + 0x2e70]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00413c78
add ebp, 0x2e74
leave
ret