Function at 0x1000bcc0
Capabilities:
Query environment variable

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov esi, edx
mov eax, dword [0x1002b040]
xor eax, esp
mov dword [esp + 0x48], eax
lea edi, [esp + 0x30]
mov dword [esp], edi
mov eax, dword [esp]
lea eax, [esp + 0x44]
mov dword [esp + 0xc], eax
mov eax, dword [esp]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov eax, dword [esp + 0xc]
mov dword [eax], 0xf
cmp dword [edx + 0x10], 0
mov dword [esp + 0x28], ecx
sete byte [esp + 7]
mov eax, 0x9342034a
jmp 0x1000bd30
mov edx, dword [esp + 0x18]
mov ecx, edi
push edx
call fcn.1000bf70
add esp, 4
mov eax, 0xd47979dd
nop dword [eax + eax]
cmp eax, 0xc76a76e3
jg 0x1000bdd0
cmp eax, 0xbcb9fb74
jg 0x1000be00
cmp eax, 0x9342034a
je 0x1000be5d
cmp eax, 0xb6d5920b
jne 0x1000bd30
lea eax, [esp + 0x40]
mov dword [esp + 0x10], eax
mov ecx, edi
mov edx, 0x104
push 0x104
call fcn.1000bf70
add esp, 4
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [esp + 0xc]
cmp dword [ecx], 0x10
mov dword [esp + 0x1c], edi
mov ecx, dword [esp]
jb 0x1000bd8e
mov ecx, dword [esp + 0x30]
cmp dword [esi + 0x14], 0x10
mov edx, esi
jb 0x1000bd98
mov edx, dword [esi]
push eax
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 8]
mov eax, 0xc76a76e4
cmp ecx, dword [esp + 0x14]
ja 0x1000bd30
mov eax, 0xc2261680
jmp 0x1000bd30
cmp eax, 0x61cd2fec
jg 0x1000be2f
cmp eax, 0xc76a76e4
je 0x1000be77
cmp eax, 0xd47979dd
jne 0x1000bd30
mov eax, dword [esp + 0x20]
mov eax, 0x6d0af961
jmp 0x1000bd30
cmp eax, 0xbcb9fb75
je 0x1000bd14
cmp eax, 0xc2261680
jne 0x1000bd30
mov eax, dword [esp + 0xc]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x1c]
jae 0x1000bef0
mov eax, dword [esp]
jmp 0x1000bef2
cmp eax, 0x61cd2fed
jne 0x1000bf37
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
cmp ecx, 0x10
jae 0x1000bf0e
mov ebx, dword [esp]
jmp 0x1000bf10
cmp byte [esp + 7], 0
mov eax, 0x6d0af961
jne 0x1000bd30
mov eax, 0xb6d5920b
jmp 0x1000bd30
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x14]
mov edx, eax
not edx
and edx, ecx
add edx, ecx
mov ebx, ecx
not ebx
and ebx, eax
add ebx, edx
mov edx, eax
sub edx, ebx
xor eax, ecx
add eax, edx
neg eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x24], eax
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
mov ecx, eax
and ecx, ebp
mov edx, ebp
not edx
and edx, eax
mov ebx, ecx
sub ebx, edx
add ebx, eax
not eax
or eax, ebp
add eax, ebp
sub ebx, eax
not ecx
add ecx, ebx
mov eax, 0xbcb9fb75
cmp ecx, dword [esp + 0x18]
jb 0x1000bd30
mov eax, 0x61cd2fed
jmp 0x1000bd30
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
mov dword [ecx], edx
mov ecx, dword [esp + 8]
mov byte [eax + ecx], 0
mov eax, 0x6d0af961
jmp 0x1000bd30
mov ebx, dword [eax]
mov eax, dword [esp + 0x14]
add eax, ebx
push dword [esp + 0x18]
push 0
push eax
call fcn.10015560
add esp, 0xc
mov eax, dword [esp + 8]
mov byte [ebx + eax], 0
mov eax, 0xd47979dd
jmp 0x1000bd30
cmp eax, 0x6d0af961
jne 0x1000bd30
mov eax, dword [esp]
movsd xmm0, qword [eax + 0x10]
mov ecx, dword [esp + 0x28]
movsd qword [ecx + 0x10], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
mov eax, dword [esp]
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.100149fa
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret