Function at 0x9d2098
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x40c
push 0
push 0
dec ecx
jne 0x9d20a0
push ebx
mov ebx, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0040a3bc
xor eax, eax
push ebp
push 0x9d23a4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
mov edx, dword [ebp - 4]
call fcn.0040a6b8
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x9d23bc
call fcn.0040b9ec
test eax, eax
jle 0x9d2136
lea eax, [ebp - 0x200c]
push eax
lea eax, [ebp - 0x2018]
call fcn.009d2058
mov eax, dword [ebp - 0x2018]
lea edx, [ebp - 0x2014]
call fcn.00428404
mov eax, dword [ebp - 0x2014]
lea edx, [ebp - 0x2010]
call fcn.009d2e60
mov edx, dword [ebp - 0x2010]
mov ecx, dword [ebx]
mov eax, 0x9d23bc
call fcn.009d1f44
mov edx, dword [ebp - 0x200c]
mov eax, ebx
call fcn.0040a6b8
lea eax, [ebp - 0x201c]
push eax
lea edx, [ebp - 0x2028]
mov eax, dword [0xa8f188]
mov eax, dword [eax]
call fcn.005ed714
mov eax, dword [ebp - 0x2028]
lea edx, [ebp - 0x2024]
call fcn.00428404
mov eax, dword [ebp - 0x2024]
lea edx, [ebp - 0x2020]
call fcn.009d2e60
mov edx, dword [ebp - 0x2020]
mov ecx, dword [ebx]
mov eax, 0x9d23e0
call fcn.009d1f44
mov edx, dword [ebp - 0x201c]
mov eax, ebx
call fcn.0040a6b8
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x9d2400
call fcn.0040b9ec
test eax, eax
jle 0x9d2221
lea edx, [ebp - 0x202c]
mov eax, 0x1a
call fcn.009d27b8
mov eax, dword [ebp - 0x202c]
lea edx, [ebp - 8]
call fcn.009d2e60
cmp dword [ebp - 8], 0
jne 0x9d21fe
lea edx, [ebp - 0x2038]
mov eax, dword [0xa8f188]
mov eax, dword [eax]
call fcn.005ed714
mov eax, dword [ebp - 0x2038]
lea edx, [ebp - 0x2034]
call fcn.00428404
mov eax, dword [ebp - 0x2034]
lea edx, [ebp - 0x2030]
call fcn.009d2e60
lea eax, [ebp - 0x203c]
push eax
mov ecx, dword [ebx]
mov edx, dword [ebp - 8]
mov eax, 0x9d2400
call fcn.009d1f44
mov edx, dword [ebp - 0x203c]
mov eax, ebx
call fcn.0040a6b8
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x9d2420
call fcn.0040b9ec
test eax, eax
jle 0x9d226d
lea eax, [ebp - 0x2040]
push eax
lea edx, [ebp - 0x2044]
mov eax, 0x2e
call fcn.009d27b8
mov edx, dword [ebp - 0x2044]
mov ecx, dword [ebx]
mov eax, 0x9d2420
call fcn.009d1f44
mov edx, dword [ebp - 0x2040]
mov eax, ebx
call fcn.0040a6b8
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x9d2450
call fcn.0040b9ec
test eax, eax
jle 0x9d22fe
lea edx, [ebp - 0x2048]
mov eax, 0x23
call fcn.009d27b8
mov eax, dword [ebp - 0x2048]
lea edx, [ebp - 8]
call fcn.009d2e60
cmp dword [ebp - 8], 0
jne 0x9d22db
lea edx, [ebp - 0x2054]
mov eax, dword [0xa8f188]
mov eax, dword [eax]
call fcn.005ed714
mov eax, dword [ebp - 0x2054]
lea edx, [ebp - 0x2050]
call fcn.00428404
mov eax, dword [ebp - 0x2050]
lea edx, [ebp - 0x204c]
call fcn.009d2e60
lea eax, [ebp - 0x2058]
push eax
mov ecx, dword [ebx]
mov edx, dword [ebp - 8]
mov eax, 0x9d2450
call fcn.009d1f44
mov edx, dword [ebp - 0x2058]
mov eax, ebx
call fcn.0040a6b8
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x9d247c
call fcn.0040b9ec
test eax, eax
jle 0x9d234a
lea eax, [ebp - 0x205c]
push eax
lea edx, [ebp - 0x2060]
mov eax, 5
call fcn.009d27b8
mov edx, dword [ebp - 0x2060]
mov ecx, dword [ebx]
mov eax, 0x9d247c
call fcn.009d1f44
mov edx, dword [ebp - 0x205c]
mov eax, ebx
call fcn.0040a6b8
push 0x2000
lea eax, [ebp - 0x2008]
push eax
mov eax, dword [ebx]
call fcn.0040b3a0
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsW
test eax, eax
jbe 0x9d2379
mov eax, ebx
lea edx, [ebp - 0x2008]
mov ecx, 0x1000
call fcn.0040b45c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x9d23ab
lea eax, [ebp - 0x2060]
mov edx, 0x16
call fcn.0040a338
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a338
ret