Function at 0x1002d7e1
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x10061dde
call fcn.100605f8
sub esp, 0xc4
cmp byte [ebp + 0x18], 0
push ebx
push esi
push edi
mov esi, edx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x30], esi
mov edi, ecx
je 0x1002d8d2
cmp byte [ebp + 0x20], 0
je 0x1002d83b
mov eax, dword [ebp + 0x40]
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0x48]
push dword [eax]
mov eax, dword [ebp + 0x34]
mov edx, dword [edx]
mov ecx, dword [ecx]
push dword [eax]
mov eax, dword [ebp + 0x3c]
movzx eax, byte [eax]
push eax
mov eax, dword [ebp + 0x24]
push dword [eax]
call fcn.1002a04e
add esp, 0x10
jmp 0x1002de12
mov dword [ebp - 0x14], 0x1268
xor ebx, ebx
cmp dword [ebp - 0x14], 0x146c
jle 0x1002d899
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0xcc]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002d86f
mov eax, dword [eax]
push eax
call fcn.1004840f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.10003868
inc esi
cmp esi, 0xbf1
jl 0x1002d851
inc edi
cmp edi, 0x7805
jl 0x1002d84f
mov esi, dword [ebp - 0x30]
mov dword [esi], ebx
cmp dword [esi], 1
jge 0x1002d8b5
mov edx, dword [ebp + 0x2c]
mov ecx, dword [esi]
mov eax, dword [edx]
mov dword [eax + ecx*4], 0xac8b13ec
inc dword [esi]
cmp dword [esi], 1
jl 0x1002d8a3
cmp dword [ebp - 0x14], 0x11ee
jge 0x1002de12
push str.lnwlh_ajdef_lrh_gngfltrpy_oatr_ddgpma_syuelknx_fbxugrso_dxza_ihj_vuneve_erb_lqwrnwask_rfj
call fcn.1004840f
pop ecx
jmp 0x1002de12
cmp byte [ebp + 0x28], 0
je 0x1002d96d
mov edi, dword [ebp + 0x30]
xor ecx, ecx
mov esi, dword [ebp + 0x10]
mov eax, dword [edi]
test eax, eax
sete cl
xor ebx, ebx
cmp ecx, 0x7c2
je 0x1002d8fd
cmp dword [esi], ebx
jne 0x1002d8fd
mov ecx, ebx
jmp 0x1002d900
xor ecx, ecx
inc ecx
mov eax, dword [esi]
mov edx, dword [ebp + 0x44]
add eax, ecx
cmp eax, 0xc17c7747
mov eax, dword [edi]
sbb ecx, ecx
inc ecx
sub ecx, eax
jne 0x1002d91b
mov eax, dword [edx]
cmp dword [eax], ebx
je 0x1002d91e
xor ebx, ebx
inc ebx
mov edx, dword [edx]
xor eax, eax
cmp ebx, 0xab79
setle al
sub eax, dword [edi]
neg eax
sbb eax, eax
inc eax
cmp eax, 1
sbb eax, eax
xor ecx, ecx
neg eax
cmp dword [edx], eax
mov eax, dword [ebp + 0x14]
setge cl
xor ebx, ebx
cmp ecx, 7
mov eax, dword [eax]
setl bl
xor ecx, ecx
cmp eax, dword [edx]
mov eax, dword [esi]
setle cl
xor edx, edx
cmp ecx, ebx
setg dl
add eax, edx
mov dword [edi], eax
mov eax, dword [ebp + 0x38]
mov ecx, dword [edi]
mov dword [eax], ecx
jmp 0x1002de12
mov esi, dword [ebp + 0xc]
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x64], ebx
mov word [ebp - 0x74], ax
mov dword [ebp - 4], 2
mov dword [ebp - 0x14], 0xc75b57fd
mov dword [ebp - 0x30], 0x4ec7e318
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x20], 0x17f9
mov dword [ebp - 0x14], ebx
jmp 0x1002da4c
mov dword [ebp - 0x1c], 0x9cc25fa5
lea ecx, [ebp - 0x80]
push 2
call fcn.100034db
mov byte [ebp - 4], 3
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x2c], ebx
jmp 0x1002d9e5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xa4], 0xdf29855e
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 1
jl 0x1002d9d4
lea eax, [ebp - 0x2c]
push eax
push ecx
push 0x3122
lea eax, [ebp - 0x80]
push eax
push ecx
push 0x7252
mov cl, 1
call fcn.10029f49
mov eax, dword [ebp - 0x80]
xor ecx, ecx
add esp, 0x18
cmp dword [eax], ebx
setne cl
cmp ecx, dword [ebp - 0x1c]
jg 0x1002da22
cmp dword [ebp - 0x30], ebx
je 0x1002da22
xor eax, eax
inc eax
jmp 0x1002da24
mov eax, ebx
cmp dword [ebp - 0x1c], eax
jge 0x1002da32
cmp dword [ebp - 0x18], ebx
jne 0x1002da32
mov ecx, ebx
jmp 0x1002da35
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x14]
sub eax, ecx
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 2
call fcn.1000355e
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffe
je 0x1002d9b3
cmp esi, edi
ja 0x1002db3d
push 2
lea ecx, [ebp - 0x8c]
call fcn.100034db
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 4
push eax
push ecx
push ecx
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x20], 0xd37a5b7d
call fcn.1002c51f
add esp, 0xc
lea ecx, [ebp - 0x8c]
xor dl, dl
push 1
push 0x13a9
push 1
push 0x1919
call fcn.1002cc68
add esp, 0x10
mov dword [ebp - 0x14], 0xfffffff2
jmp 0x1002dad7
push ebx
sub esp, 0xc
mov dword [ebp - 0x48], ebx
lea eax, [ebp - 0x48]
mov edx, 0x781d
mov ecx, 0x56e1
push eax
call fcn.1002c763
add esp, 0x14
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff5
jl 0x1002dab7
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 2
call fcn.1000355e
mov ecx, dword [ebp + 0x1c]
lea eax, [ebp - 0x74]
cmp ecx, eax
je 0x1002daff
push 0xffffffffffffffff
push ebx
push eax
call fcn.100038ac
mov dword [ebp - 0x20], 0x1167
cmp dword [ebp - 0x20], 0x12a7
jle 0x1002de07
mov esi, ebx
mov edi, esi
mov ebx, 0x5131
mov eax, edi
mov ecx, 0x1007be38
cdq
push edx
push eax
call fcn.10003364
dec edi
dec ebx
jne 0x1002db1c
inc esi
cmp esi, 0x7888
jl 0x1002db15
jmp 0x1002de07
push 1
lea ecx, [ebp - 0x98]
call fcn.100034db
mov byte [ebp - 4], 7
lea eax, [ebp - 0xa4]
push dword [ebp + 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x54], ebx
push eax
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x50], ebx
push eax
push ebx
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x4c], ebx
movdqu xmmword [ebp - 0xb4], xmm0
call fcn.10005cfc
push 0x33e1
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 8
push eax
push 0x1dca
push 0x4d62
push ebx
lea eax, [ebp - 0x98]
mov dword [ebp - 0x5c], 0x59785734
push eax
mov dword [ebp - 0x3c], 0x55f1bb13
mov edx, 0x2e3a
mov dword [ebp - 0x44], 0xfffffff7
xor cl, cl
push 1
call fcn.1002bfd0
add esp, 0x1c
push ebx
push ecx
push 0x38
push 0x22f
push 0x717a
push ecx
push 0x52f6
mov ecx, 0x54a9
call fcn.1002a2ac
add esp, 0x18
lea eax, [ebp - 0x98]
mov dl, 1
lea ecx, [ebp - 0x5c]
push 0xa7d
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x3c]
push 0x74f
push eax
call fcn.1002decb
add esp, 0x1c
lea ecx, [ebp - 0x54]
call fcn.1000355e
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.1000355e
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 0x74]
call fcn.1002bdf5
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x18], 0xb8e9646b
mov dword [ebp - 0x18], ebx
pop ecx
mov dword [ebp - 0x20], 1
pop ecx
mov dword [ebp - 0x30], 0x73d1
cmp dword [ebp - 0x30], 0x74f7
jle 0x1002dcbb
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0x30e1
mov edi, ebx
mov ebx, dword [ebp - 0x1c]
mov eax, ebx
mov ecx, 0x1007be38
or eax, edi
cdq
push edx
push eax
call fcn.10003364
inc edi
cmp edi, 0x169a
jl 0x1002dc7e
add ebx, esi
dec dword [ebp - 0x18]
push 0
mov dword [ebp - 0x1c], ebx
pop ebx
jne 0x1002dc79
inc esi
cmp esi, 0x167d
jl 0x1002dc6f
push 0x87e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0xcc8e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x37d45db3
setne al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x30], 0x7171
jge 0x1002dd3d
mov edx, str.guasnfrtu_tfaxehw_jzqblve_jbzs_dhijkli_scvqfdi_ffyn_dxxiz_irmnuz_dzxd_yynibiina
mov ecx, 0x1007be38
call fcn.100055b2
jmp 0x1002dd3d
push ecx
mov dword [ebp - 4], 2
lea edx, [ebp + 0x1b]
mov cl, 1
mov byte [ebp + 0x1b], bl
call fcn.1002b91e
pop ecx
jmp 0x1002dde8
push 0x3478
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x58], 0x43b7
push ecx
push 0x52fa
push 0x40be
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x28], 0xd8da8e97
push ecx
push 0x779c
push 0x1ff2
push ebx
push 0x4e58
xor eax, eax
lea ecx, [ebp - 0x40]
inc eax
mov edx, 0x5116
push 0x4ac8
push eax
push 0x2ddb
push ecx
mov dword [ebp - 0x40], eax
mov cl, al
call fcn.1002aba7
add esp, 0x34
mov dword [ebp - 0x28], ebx
jmp 0x1002ddc4
mov byte [ebp - 0x21], bl
lea ecx, [ebp - 0x21]
call fcn.1002b901
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffeb
jle 0x1002ddb6
push 0x4c8a
lea eax, [ebp - 0x74]
xor dl, dl
push eax
lea eax, [ebp - 0x34]
push eax
push ecx
push ecx
mov ecx, 0x7f2
call fcn.1002b75b
add esp, 0x14
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x38]
jb 0x1002dd58
mov ecx, dword [ebp + 0x1c]
lea eax, [ebp - 0x74]
cmp ecx, eax
je 0x1002de07
push 0xffffffffffffffff
push ebx
push eax
call fcn.100038ac
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.10003d73
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret