Function at 0x10019bc7
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0xc], 0xb55bb2c2
mov dword [ebp - 0x14], 0xfffffffa
lea ecx, [ebp - 0x2c]
push 2
mov bl, dl
call fcn.1001610f
mov dword [ebp - 0x14], 0x8d96753f
xor edi, edi
mov dword [ebp - 8], 0x4469
mov dword [ebp - 0x10], edi
jmp 0x10019c11
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
mov dword [eax + ecx*4], 0x2a8358bd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10019c01
push 4
mov dword [ebp - 0xc], 0x11
pop ecx
jmp 0x10019c78
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0x21c3a23
mov dword [ebp - 0x14], 0xfffffff6
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], 0xbdbdf7c
mov dword [ebp - 0x14], 0x282d564c
mov dword [ebp - 0x14], 0x9b2b534d
mov dword [ebp - 0x10], edi
jmp 0x10019c6d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10019c63
inc dword [ebp - 8]
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xb
jle 0x10019c23
lea ecx, [ebp - 0x2c]
call fcn.10016191
test bl, bl
je 0x10019e6d
mov dword [ebp - 0x10], 0x4c90d297
lea ecx, [ebp - 0x38]
push 2
pop esi
mov dword [ebp - 8], esi
xor ebx, ebx
mov dword [ebp - 0xc], 0xe043eef7
xor edi, edi
mov dword [ebp - 0x14], 0xfffffffc
inc edi
mov dword [ebp - 0x14], 0xcc90c63b
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0x9d073d4
mov dword [ebp - 0x14], 0xc17a3f0a
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0xfe1f230
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0xde6b786a
mov dword [ebp - 0x14], 0x181f51b4
push esi
call fcn.1001610f
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x14], 0xb96bc97
mov dword [ebp - 8], ebx
jmp 0x10019d14
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x38]
mov dword [eax + ecx*4], 0x5e175309
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10019d04
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp eax, 0x56e7
setne cl
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xa1cf
mov eax, dword [ebp - 0x10]
setge cl
xor edx, edx
cmp eax, ecx
mov ecx, dword [ebp - 0x10]
setge dl
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
setge al
add eax, dword [ebp - 0xc]
jne 0x10019d69
mov ecx, ebx
cmp dword [ebp - 8], ebx
je 0x10019d6b
mov ecx, edi
xor eax, eax
cmp ecx, 0x1f0d
setl al
xor edx, edx
cmp eax, 0xcc9f
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0xc]
je 0x10019dba
cmp dword [ebp - 0xc], ebx
je 0x10019dba
mov dword [ebp - 0x10], 0x2d683a7e
mov eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
mov dword [ebp - 8], 0xfffffff0
jmp 0x10019db2
cmp dword [ebp - 0x10], ebx
jne 0x10019de4
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff6
jle 0x10019daa
jmp 0x10019de4
mov eax, 0xfff7
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0xc], ebx
jmp 0x10019dde
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x48], 5
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x10019dd0
inc dword [ebp - 0x14]
lea ecx, [ebp - 0x38]
call fcn.10016191
push edi
lea ecx, [ebp - 0x20]
call fcn.1001610f
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 0x10], ebx
jmp 0x10019e14
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov dword [eax + ecx*4], 0x665683c8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10019e04
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10019e2e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
mov edx, dword [ebp - 0x20]
xor ecx, ecx
cmp dword [edx], ecx
sete cl
sub ecx, dword [edx]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp dword [edx], ecx
setg al
xor ecx, ecx
cmp eax, dword [edx]
mov eax, 0x7cb3
setne cl
sub eax, ecx
lea ecx, [ebp - 0x20]
mov dword [edx], eax
call fcn.10016191
push 0xe33
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
jmp 0x10019e7b
cmp byte [esi], 0
je 0x10019e7b
push edi
push edi
push edi
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret