Function at 0x100214e0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10073e84
mov eax, dword fs:[0]
push eax
sub esp, 0x2ac
mov eax, dword [0x100f8008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov esi, ecx
mov dword [ebp - 0x284], esi
mov dword [ebp - 0x27c], esi
mov dword [ebp - 0x288], esi
mov ecx, 0x101052d5
mov dword [ebp - 0x280], 0
call fcn.1005cb05
mov edx, edi
lea ecx, [ebp - 0x248]
call fcn.10036140
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x248]
cmp dword [ebp - 0x234], 8
mov edx, str..dll
cmovae ecx, dword [ebp - 0x248]
call fcn.100349e0
test al, al
jne 0x100215a1
push 0x100bb404
mov ecx, esi
call fcn.10017700
mov dword [ebp - 0x280], 1
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x248]
call fcn.10017980
mov dword [ebp - 4], 0
jmp 0x100217e5
mov byte [ebp - 4], 6
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
mov byte [ebp - 4], 9
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0xa
mov eax, edi
cmp dword [edi + 0x14], 8
jb 0x100215e8
mov eax, dword [edi]
cmp word [eax], 0x25
jne 0x1002176a
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, edi
cmp dword [edi + 0x14], 8
jb 0x10021612
mov ecx, dword [edi]
mov eax, dword [edi + 0x10]
cmp eax, 1
jbe 0x10021634
lea esi, [ecx + 2]
add eax, 0xffffffff
je 0x10021634
cmp word [esi], 0x25
je 0x10021759
add esi, 2
sub eax, 1
jne 0x10021622
or esi, 0xffffffff
lea eax, [esi - 1]
mov ecx, edi
push eax
push 1
lea eax, [ebp - 0x260]
push eax
call fcn.1001fab0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
push 0x104
cmovae eax, dword [ebp - 0x260]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push dword [edi + 0x10]
lea eax, [esi + 2]
mov ecx, edi
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.1001fab0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x2a0]
call fcn.10017700
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x278]
push eax
lea edx, [ebp - 0x2a0]
lea ecx, [ebp - 0x2b8]
call fcn.10036870
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x230]
cmp eax, esi
je 0x10021701
mov ecx, eax
call fcn.10017980
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x230], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x220], xmm0
mov word [esi], ax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2b8]
call fcn.10017980
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2a0]
call fcn.10017980
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x278]
call fcn.10017980
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x260]
call fcn.10017980
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0x284]
jmp 0x100217a1
test esi, esi
je 0x10021634
sub esi, ecx
sar esi, 1
jmp 0x10021637
mov ecx, edi
call fcn.100369e0
test al, al
je 0x1002178f
lea eax, [ebp - 0x230]
cmp eax, edi
je 0x100217a1
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x10021789
mov eax, dword [edi]
push dword [edi + 0x10]
push eax
jmp 0x10021796
push 0
push 0x100bb404
lea ecx, [ebp - 0x230]
call fcn.10017a50
lea eax, [ebp - 0x230]
mov ecx, esi
push eax
call fcn.10019b60
mov dword [ebp - 0x280], 1
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x230]
call fcn.10017980
mov byte [ebp - 4], 1
mov dword [ebp - 4], 0x23
lea ecx, [ebp - 0x248]
call fcn.10017980
mov dword [ebp - 4], 0
mov dword [ebp - 4], 0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005a96e
mov esp, ebp
pop ebp
ret