Function at 0x10002e034
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rdx
lea rdx, [0x10000af74]
mov rbx, rcx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e067
lea rdx, [0x10000af80]
mov r8d, 0x29
jmp 0x10002e2c6
lea rdx, [0x10000afac]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e084
lea rdx, [0x10000afb8]
jmp 0x10002e05c
lea rdx, [0x10000afe4]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e0a1
lea rdx, [0x10000aff0]
jmp 0x10002e05c
lea rdx, [0x10000b01c]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e0be
lea rdx, [0x10000b028]
jmp 0x10002e05c
lea rdx, [0x10000b054]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e0db
lea rdx, [0x10000b060]
jmp 0x10002e05c
lea rdx, [0x10000b090]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e0fb
lea rdx, [0x10000b0a0]
jmp 0x10002e05c
lea rdx, [0x10000b0d0]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e11b
lea rdx, [0x10000b0e0]
jmp 0x10002e05c
lea rdx, [0x10000b110]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e13b
lea rdx, [0x10000b120]
jmp 0x10002e05c
lea rdx, [0x10000b150]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e15b
lea rdx, [0x10000b160]
jmp 0x10002e2c0
lea rdx, [0x10000b188]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e17b
lea rdx, [0x10000b198]
jmp 0x10002e2c0
lea rdx, [0x10000b1c0]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
je 0x10002e2b9
lea rdx, [0x10000b1c8]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
je 0x10002e2b9
lea rdx, [0x10000b1f8]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
je 0x10002e2b0
lea rdx, [0x10000b200]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
je 0x10002e2b0
lea rdx, [0x10000b230]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e1fb
lea rdx, [0x10000b238]
jmp 0x10002e2c0
lea rdx, [0x10000b260]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e21b
lea rdx, [0x10000b270]
jmp 0x10002e2c0
lea rdx, [0x10000b298]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e23b
lea rdx, [0x10000b2a0]
jmp 0x10002e2c0
lea rdx, [0x10000b2c8]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbsicmp]
test eax, eax
jne 0x10002e25c
lea rdx, [0x10000b2d8]
lea r8d, [rax + 0x2a]
jmp 0x10002e2c6
mov edx, 0x25
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__mbschr]
test rax, rax
je 0x10002e29e
mov r8d, 0x100
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
cmp eax, 0x100
jg 0x10002e28c
test eax, eax
jg 0x10002e2ce
sub rdi, rbx
mov al, byte [rbx]
mov byte [rdi + rbx], al
add rbx, 1
test al, al
jne 0x10002e28f
jmp 0x10002e2ce
sub rdi, rbx
mov al, byte [rbx]
mov byte [rdi + rbx], al
add rbx, 1
test al, al
jne 0x10002e2a1
jmp 0x10002e2ce
lea rdx, [0x10000b208]
jmp 0x10002e2c0
lea rdx, [0x10000b1d0]
mov r8d, 0x27
mov rcx, rdi
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret