Function at 0x102b72d
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x1060aee
call fcn.01036ab0
mov eax, 0x1080
call fcn.01037290
mov eax, dword [0x1067a40]
push ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov dword [eax], ebx
lea eax, [ebp - 0x108c]
push eax
push dword [ebp + 8]
call fcn.01023655
test al, al
jne 0x102b7b5
push dword [ebp + 8]
lea eax, [ebp - 0x85c]
push 0x1008eb0
push 0x840
push eax
call fcn.010213c8
add esp, 0x10
lea eax, [ebp - 0x85c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.01023170
push ebx
push 0x10
push eax
mov dword [ebp - 0x1070], eax
call fcn.01051988
lea eax, [ebp - 0x1070]
push eax
call fcn.010213af
xor al, al
jmp 0x102bacc
mov ecx, dword [ebp - 0x1084]
mov eax, dword [ebp - 0x1080]
add eax, ecx
push esi
mov dword [ebp - 0x1068], eax
mov eax, dword [0x10679e0]
push edi
mov dword [ebp - 0x1064], ebx
mov dword [ebp - 0x1070], ebx
mov dword [ebp - 0x106c], ecx
mov dword [ebp - 0x1074], 1
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x102b7ef
sub eax, esi
mov dword [ebp - 0x1078], eax
xor eax, eax
cmp ecx, dword [ebp - 0x1068]
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov byte [ebp - 0x105d], bl
stosb byte es:[edi], al
jae 0x102ba76
mov edi, dword [ebp - 0x106c]
jmp 0x102b840
movsx eax, byte [edi]
push eax
call fcn.01036d83
test eax, eax
pop ecx
je 0x102b848
cmp byte [edi], 0xa
jne 0x102b839
inc dword [ebp - 0x1074]
inc edi
mov dword [ebp - 0x106c], edi
cmp edi, dword [ebp - 0x1068]
jb 0x102b820
lea esi, [ebp - 0x85c]
jmp 0x102b86b
lea eax, [ebp - 0x1d]
cmp esi, eax
jae 0x102b883
mov al, byte [edi]
cmp al, 0xd
je 0x102b883
cmp al, 0xa
je 0x102b883
mov byte [esi], al
inc esi
inc edi
mov dword [ebp - 0x106c], edi
cmp edi, dword [ebp - 0x1068]
jb 0x102b850
jmp 0x102b883
movsx eax, byte [esi]
push eax
call fcn.01036d83
test eax, eax
pop ecx
je 0x102b890
mov byte [esi], bl
dec esi
lea eax, [ebp - 0x85c]
cmp esi, eax
jae 0x102b875
mov al, byte [ebp - 0x85c]
cmp al, bl
je 0x102ba6a
cmp al, 0x2f
je 0x102ba6a
cmp al, 0x23
je 0x102ba6a
cmp al, 0x3a
je 0x102ba6a
cmp al, 0x3b
je 0x102ba6a
cmp al, 0x27
je 0x102ba6a
push dword [ebp - 0x1078]
lea eax, [ebp - 0x85c]
push dword [0x10679e0]
push eax
call fcn.010380e5
add esp, 0xc
test eax, eax
jne 0x102b9ca
mov edi, dword [ebp - 0x1078]
lea esi, [ebp + edi - 0x85c]
movsx eax, byte [esi]
push eax
call fcn.01036d83
test eax, eax
pop ecx
jne 0x102b90d
cmp byte [esi], 0x2c
jne 0x102b9ca
lea esi, [ebp + edi - 0x85b]
jmp 0x102b917
inc esi
movsx eax, byte [esi]
push eax
call fcn.01036d83
test eax, eax
pop ecx
jne 0x102b916
cmp byte [esi], bl
je 0x102ba7f
push 0x800
lea eax, [ebp - 0x105c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
test eax, eax
push 0x18
je 0x102b97a
call fcn.01044700
pop ecx
mov ecx, eax
mov dword [ebp - 0x1064], ecx
cmp ecx, ebx
mov dword [ebp - 4], ebx
je 0x102b96e
lea eax, [ebp - 0x105c]
push eax
push dword [ebp + 0x10]
push ebx
push ebx
call fcn.0102b2f7
jmp 0x102b970
xor eax, eax
mov esi, eax
mov dword [ebp - 0x1064], esi
jmp 0x102b9aa
call fcn.01044700
pop ecx
mov ecx, eax
mov dword [ebp - 0x1064], ecx
cmp ecx, ebx
mov dword [ebp - 4], 1
je 0x102b9a0
push esi
push dword [ebp + 0x10]
push ebx
push ebx
call fcn.0102b2f7
jmp 0x102b9a2
xor eax, eax
mov dword [ebp - 0x1064], eax
mov esi, eax
or dword [ebp - 4], 0xffffffff
cmp esi, ebx
jne 0x102ba4f
push ebx
push ebx
push 1
push 0xc0000017
call dword [sym.imp.KERNEL32.dll_RaiseException]
xor esi, esi
inc esi
push dword [esi*4 + 0x10679e0]
lea eax, [ebp - 0x85c]
push eax
call fcn.01036dbd
test eax, eax
pop ecx
pop ecx
je 0x102b9ee
inc esi
cmp esi, 9
jl 0x102b9cd
jmp 0x102ba44
lea edi, [ebp + esi - 0x1c]
cmp byte [edi], bl
jne 0x102ba7f
push 0x18
call fcn.01044700
pop ecx
mov ecx, eax
mov dword [ebp - 0x1064], ecx
cmp ecx, ebx
mov dword [ebp - 4], 2
je 0x102ba22
push ebx
push dword [ebp + 0x10]
push ebx
push esi
call fcn.0102b2f7
jmp 0x102ba24
xor eax, eax
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
mov dword [ebp - 0x1064], eax
jne 0x102ba41
push ebx
push ebx
push 1
push 0xc0000017
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov byte [edi], 1
cmp esi, 9
jge 0x102ba7f
mov esi, dword [ebp - 0x1064]
mov eax, dword [ebp - 0x1070]
cmp eax, ebx
jne 0x102ba5c
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp - 0x106c]
mov dword [eax], esi
mov dword [ebp - 0x1070], esi
cmp edi, dword [ebp - 0x1068]
jb 0x102b818
mov byte [ebp - 0x105d], 1
jmp 0x102bab8
push dword [ebp - 0x1074]
lea eax, [ebp - 0x85c]
push dword [ebp + 8]
push 0x1008e90
push 0x840
push eax
call fcn.010213c8
add esp, 0x14
push ebx
push 0x10
lea eax, [ebp - 0x85c]
push eax
call fcn.01051988
push dword [ebp + 0xc]
call fcn.0102b2c9
lea eax, [ebp - 0x108c]
push eax
call fcn.01021dde
mov al, byte [ebp - 0x105d]
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.01032376
leave
ret 0xc