Function at 0x100073e0
Capabilities:
Query environment variable

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov esi, edx
mov eax, dword [0x10022040]
xor eax, esp
mov dword [esp + 0x48], eax
lea edi, [esp + 0x30]
mov dword [esp], edi
mov eax, dword [esp]
lea eax, [esp + 0x44]
mov dword [esp + 0xc], eax
mov eax, dword [esp]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov eax, dword [esp + 0xc]
mov dword [eax], 0xf
cmp dword [edx + 0x10], 0
sete byte [esp + 7]
mov dword [esp + 0x28], ecx
mov eax, 0xfc928f60
jmp 0x100074a0
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x14]
mov edx, ecx
not edx
mov ebp, edx
xor ebp, ecx
and ebp, ebx
xor ebp, ecx
mov eax, ebx
xor eax, ecx
add eax, ecx
sub ebp, eax
or ecx, ebx
add ecx, ebp
or edx, ebx
lea eax, [edx + ecx]
add eax, 1
mov dword [esp + 0x18], eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
mov edx, ecx
and edx, eax
lea ebx, [edx + ecx]
or ecx, eax
add eax, ecx
add ecx, ebx
add eax, edx
sub ecx, eax
cmp ecx, dword [esp + 0x18]
mov eax, 0x3f2f5729
mov ecx, 0x6e67ce8d
cmovb eax, ecx
cmp eax, 0x3db0f4db
jg 0x100074d0
cmp eax, 0xc805f460
jg 0x10007500
cmp eax, 0x83c7513e
je 0x100075a5
cmp eax, 0x99334872
jne 0x100074a0
mov eax, dword [esp + 0x20]
mov eax, 0x3e9d5298
jmp 0x100074a0
cmp eax, 0x3f2f5728
jle 0x10007529
cmp eax, 0x3f2f5729
je 0x100075b7
cmp eax, 0x6e67ce8d
jne 0x100074a0
mov edx, dword [esp + 0x18]
mov ecx, edi
push edx
call fcn.10007660
add esp, 4
mov eax, 0x99334872
jmp 0x100074a0
cmp eax, 0xc805f461
je 0x10007434
cmp eax, 0xfc928f60
jne 0x100074a0
cmp byte [esp + 7], 0
mov eax, 0x3db0f4dc
mov ecx, 0x3e9d5298
cmovne eax, ecx
jmp 0x100074a0
cmp eax, 0x3db0f4dc
jne 0x1000761b
lea eax, [esp + 0x40]
mov dword [esp + 0x10], eax
mov ecx, edi
mov edx, 0x104
push 0x104
call fcn.10007660
add esp, 4
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [esp + 0xc]
cmp dword [ecx], 0x10
mov dword [esp + 0x1c], edi
mov ecx, dword [esp]
jb 0x1000756a
mov ecx, dword [esp + 0x30]
cmp dword [esi + 0x14], 0x10
mov edx, esi
jb 0x10007574
mov edx, dword [esi]
push eax
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x14]
mov eax, 0x83c7513e
mov ecx, 0xc805f461
cmova eax, ecx
jmp 0x100074a0
mov eax, dword [esp + 0xc]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x1c]
jae 0x100075d3
mov eax, dword [esp]
jmp 0x100075d5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
cmp ecx, 0x10
jae 0x100075f1
mov ebp, dword [esp]
jmp 0x100075f3
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
mov dword [ecx], edx
mov ecx, dword [esp + 8]
mov byte [eax + ecx], 0
mov eax, 0x3e9d5298
jmp 0x100074a0
mov ebp, dword [eax]
mov eax, dword [esp + 0x14]
add eax, ebp
push dword [esp + 0x18]
push 0
push eax
call fcn.10010b70
add esp, 0xc
mov eax, dword [esp + 8]
mov byte [ebp + eax], 0
mov eax, 0x99334872
jmp 0x100074a0
cmp eax, 0x3e9d5298
jne 0x100074a0
mov eax, dword [esp]
movsd xmm0, qword [eax + 0x10]
mov ecx, dword [esp + 0x28]
movsd qword [ecx + 0x10], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
mov eax, dword [esp]
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.1001000a
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret