Function at 0x7ef73d1d
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov eax, 0x7ef94506
call fcn.7ef890d8
sub esp, 0x24c
and dword [ebp - 0x28], 0
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x20], eax
jmp 0x7ef73d46
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
movsx eax, byte [eax]
test eax, eax
je 0x7ef73d80
mov eax, dword [ebp - 0x20]
movsx eax, byte [eax]
cmp eax, 0x5c
je 0x7ef73d66
mov eax, dword [ebp - 0x20]
movsx eax, byte [eax]
cmp eax, 0x2f
jne 0x7ef73d6c
and dword [ebp - 0x28], 0
jmp 0x7ef73d7e
mov eax, dword [ebp - 0x20]
movsx eax, byte [eax]
cmp eax, 0x2e
jne 0x7ef73d7e
mov dword [ebp - 0x28], 1
jmp 0x7ef73d3f
cmp dword [ebp - 0x28], 0
jne 0x7ef73d97
cmp dword [ebp + 0x10], 0
je 0x7ef73d97
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x254], eax
jmp 0x7ef73da1
mov dword [ebp - 0x254], 0x7ef964f0
push dword [ebp - 0x254]
push dword [ebp + 0xc]
push str._s_s
lea eax, [ebp - 0x10]
push eax
call fcn.7ef85dd0
add esp, 0x10
and dword [ebp - 4], 0
and dword [ebp - 0x1c], 0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax + 1]
cmp eax, 0x3a
je 0x7ef73df0
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax]
cmp eax, 0x5c
jne 0x7ef73e63
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax + 1]
cmp eax, 0x5c
jne 0x7ef73e63
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x2c]
call fcn.7ef73c20
add esp, 0xc
test eax, eax
je 0x7ef73e39
push dword [ebp - 0x2c]
mov ecx, dword [ebp + 0x14]
call fcn.7ef86086
mov byte [ebp - 0x1d8], 1
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1d8]
jmp 0x7ef744af
and byte [ebp - 0x1dc], 0
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1dc]
jmp 0x7ef744af
cmp dword [ebp + 8], 0
je 0x7ef73e77
mov eax, dword [ebp + 8]
movsx eax, byte [eax]
test eax, eax
jne 0x7ef7429f
push 0
push dword [ebp + 0x14]
push dword [ebp - 0x2c]
call fcn.7ef744bb
add esp, 0xc
movzx eax, al
test eax, eax
je 0x7ef73ed4
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x20c], eax
push dword [ebp - 0x20c]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x1e0], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1e0]
jmp 0x7ef744af
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x7efa5e2c
call fcn.7ef884fe
add esp, 0xc
push dword [ebp - 0x2c]
push dword [ebp - 0x1c]
push 0x7ef9a528
push dword [ebp + 0x14]
call fcn.7ef863ab
add esp, 0x10
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov eax, dword [eax]
mov dword [ebp - 0x214], eax
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x214]
call fcn.7ef73c20
add esp, 0xc
test eax, eax
je 0x7ef73f6e
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x218], eax
push dword [ebp - 0x218]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x1e4], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1e4]
jmp 0x7ef744af
lea eax, [ebp - 0x1c]
push eax
call fcn.7ef886fd
pop ecx
push dword [ebp - 0x2c]
push dword [ebp - 0x1c]
push 0x7ef9a528
push dword [ebp + 0x14]
call fcn.7ef863ab
add esp, 0x10
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov eax, dword [eax]
mov dword [ebp - 0x220], eax
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x220]
call fcn.7ef73c20
add esp, 0xc
test eax, eax
je 0x7ef73fff
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x224], eax
push dword [ebp - 0x224]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x1e8], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1e8]
jmp 0x7ef744af
push 0x104
lea eax, [ebp - 0x1cc]
push eax
call dword [0x7ef960d4]
push dword [ebp - 0x2c]
lea eax, [ebp - 0x1cc]
push eax
push 0x7ef9a528
push dword [ebp + 0x14]
call fcn.7ef863ab
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x228], eax
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x228]
call fcn.7ef73c20
add esp, 0xc
test eax, eax
je 0x7ef74093
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x22c], eax
push dword [ebp - 0x22c]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x1ec], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1ec]
jmp 0x7ef744af
mov dword [ebp - 0xc8], 0x94
lea eax, [ebp - 0xc8]
push eax
call dword [0x7ef960a4]
cmp dword [ebp - 0xb8], 2
jne 0x7ef7418d
and dword [ebp - 0x1d4], 0
lea eax, [ebp - 0x1cc]
mov dword [ebp - 0x1d0], eax
jmp 0x7ef740d9
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
movsx eax, byte [eax]
test eax, eax
je 0x7ef74102
mov eax, dword [ebp - 0x1d0]
movsx eax, byte [eax]
cmp eax, 0x5c
jne 0x7ef74100
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1d4], eax
jmp 0x7ef740cc
mov eax, dword [ebp - 0x1d4]
and byte [eax], 0
push dword [ebp - 0x2c]
lea eax, [ebp - 0x1cc]
push eax
push str._sSYSTEM_s
push dword [ebp + 0x14]
call fcn.7ef863ab
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x230], eax
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x230]
call fcn.7ef73c20
add esp, 0xc
test eax, eax
je 0x7ef7418d
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x234], eax
push dword [ebp - 0x234]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x1f0], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1f0]
jmp 0x7ef744af
push 0x104
lea eax, [ebp - 0x1cc]
push eax
call dword [0x7ef960d0]
push dword [ebp - 0x2c]
lea eax, [ebp - 0x1cc]
push eax
push 0x7ef9a528
push dword [ebp + 0x14]
call fcn.7ef863ab
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x238], eax
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x238]
call fcn.7ef73c20
add esp, 0xc
test eax, eax
je 0x7ef74221
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x23c], eax
push dword [ebp - 0x23c]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x1f4], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1f4]
jmp 0x7ef744af
push 1
lea eax, [ebp - 0x1cc]
push eax
push str.PATH
call dword [0x7ef96074]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x7ef74268
and byte [ebp - 0x1f8], 0
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1f8]
jmp 0x7ef744af
mov eax, dword [ebp - 0x34]
inc eax
push eax
call fcn.7ef871a5
pop ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
inc eax
push eax
push dword [ebp - 0x30]
push str.PATH
call dword [0x7ef96074]
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1c]
call fcn.7ef86086
push dword [ebp - 0x30]
call fcn.7ef8726e
pop ecx
jmp 0x7ef742aa
push dword [ebp + 8]
lea ecx, [ebp - 0x1c]
call fcn.7ef86086
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
movsx eax, byte [eax]
cmp eax, 0x3b
jne 0x7ef7435b
mov eax, dword [ebp - 0x14]
and byte [eax], 0
push dword [ebp - 0x2c]
push dword [ebp - 0x18]
push 0x7ef9a528
push dword [ebp + 0x14]
call fcn.7ef863ab
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x240], eax
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x240]
call fcn.7ef73c20
add esp, 0xc
test eax, eax
je 0x7ef74349
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x244], eax
push dword [ebp - 0x244]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x1fc], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x1fc]
jmp 0x7ef744af
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
jmp 0x7ef74422
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
movsx eax, byte [eax]
test eax, eax
jne 0x7ef74422
mov eax, dword [ebp - 0x14]
movsx eax, byte [eax - 1]
cmp eax, 0x5c
je 0x7ef74394
mov eax, dword [ebp - 0x14]
movsx eax, byte [eax - 1]
cmp eax, 0x2f
je 0x7ef74394
mov dword [ebp - 0x258], 0x7ef99d6c
jmp 0x7ef7439e
mov dword [ebp - 0x258], 0x7ef964f0
push dword [ebp - 0x2c]
push dword [ebp - 0x258]
push dword [ebp - 0x18]
push str._s_s_s
push dword [ebp + 0x14]
call fcn.7ef863ab
add esp, 0x14
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x248], eax
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x248]
call fcn.7ef73c20
add esp, 0xc
test eax, eax
je 0x7ef74422
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x24c], eax
push dword [ebp - 0x24c]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x200], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x200]
jmp 0x7ef744af
mov eax, dword [ebp - 0x14]
movsx eax, byte [eax]
test eax, eax
jne 0x7ef742b6
push 0
push dword [ebp + 0x14]
push dword [ebp - 0x2c]
call fcn.7ef74562
add esp, 0xc
movzx eax, al
test eax, eax
je 0x7ef7448a
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x250], eax
push dword [ebp - 0x250]
call fcn.7ef73ce2
pop ecx
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x204], al
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x204]
jmp 0x7ef744af
and byte [ebp - 0x208], 0
and byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.7ef86114
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.7ef86114
mov al, byte [ebp - 0x208]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret