Function at 0x1001c1e0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10026bfb
mov eax, dword fs:[0]
push eax
mov eax, 0x2214
call fcn.100242b0
mov eax, dword [0x10036174]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x1c]
push 0x10038070
mov dword [ebp - 0x2220], 0x10038070
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x10037e64], 0
mov dword [ebp - 4], 0
je 0x1001c247
cmp dword [0x10037e58], 0
jne 0x1001c446
xor eax, eax
mov word [ebp - 0x2210], ax
call fcn.1001c140
test eax, eax
jns 0x1001c27d
push 0x1000
push str.This_program_requires_the_file_AdvrCntr6.dll__which_was_not_found_on_this_system.
lea eax, [ebp - 0x2210]
push 0x1000
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
add esp, 0x10
jmp 0x1001c3a8
mov ebx, dword [ebp + 0x10]
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.1001c080
add esp, 0xc
test eax, eax
jns 0x1001c446
mov eax, dword [0x10037e58]
xorps xmm0, xmm0
movlpd qword [ebp - 0x221c], xmm0
mov esi, 1
test eax, eax
je 0x1001c2d2
add eax, 0x14
push eax
mov dword [ebp - 0x2214], eax
call fcn.1001c110
add esp, 4
test eax, eax
je 0x1001c2d2
mov eax, dword [ebp - 0x2214]
mov eax, dword [eax]
call eax
jmp 0x1001c2de
mov edx, dword [ebp - 0x2218]
mov eax, dword [ebp - 0x221c]
cmp byte [ebp + 8], 0
mov dword [ebp - 0x2218], eax
mov dword [ebp - 0x2214], edx
je 0x1001c308
push ebx
push dword [ebp + 0xc]
push 0
call fcn.1001c080
add esp, 0xc
mov ecx, 2
test eax, eax
cmovns esi, ecx
test edi, edi
je 0x1001c312
cmp word [edi], 0
jne 0x1001c317
mov edi, 0x1002f0ec
mov ecx, dword [ebp + 0xc]
push edi
movzx eax, cx
push eax
mov edx, dword [ebp - 0x2218]
mov eax, ebx
shrd ecx, eax, 0x10
sar eax, 0x10
movzx eax, cx
push eax
mov ecx, dword [ebp - 0x2214]
mov eax, ebx
sar eax, 0x1f
movzx eax, bx
push eax
mov eax, ebx
sar ebx, 0x1f
sar eax, 0x10
movzx eax, ax
push eax
push dword [ebp + 0x18]
movzx eax, dx
push dword [ebp + 0x14]
push eax
mov eax, ecx
shrd edx, eax, 0x10
sar eax, 0x10
movzx eax, dx
push eax
mov eax, ecx
sar eax, 0x1f
movzx eax, cx
push eax
mov eax, ecx
sar ecx, 0x1f
sar eax, 0x10
movzx eax, ax
push eax
push 8
push 3
push 0
push 0xb
push 0x30
push 1
push 8
push 0xb
push esi
push str.Fatal_Error:_r_nInstallation_corrupted___please_reinstall_NERO__r_n_r_nError_Code:__i____i._i._i._i____i._i._i._i____i._i._i._i_r_nParameters:__i____i____i._i._i._i_r_nModule:__s_r_nSee_Doc14165
push 0x1000
lea eax, [ebp - 0x2210]
push 0x1000
push eax
call fcn.1001c510
add esp, 0x60
push 0x10038070
mov dword [0x10037e58], 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x1002d598]
mov dword [ebp - 0x210], eax
mov ax, word [0x1002d59c]
push 0x1fa
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x210]
push 0x100
push eax
push str.NeroSuppressProxyCheck
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x1001c41a
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
test eax, eax
jne 0x1001c43f
test byte [0x10037e5c], 1
jne 0x1001c43f
cmp byte [ebp + 0x20], 0
je 0x1001c43f
push 0x10
push str.Nero
lea eax, [ebp - 0x2210]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 0x80004005
jmp 0x1001c453
push 0x10038070
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002429d
mov esp, ebp
pop ebp
ret