Function at 0x1003bffb
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x100636f0
call fcn.10061a48
sub esp, 0x5c
push ebx
push esi
mov dword [ebp - 0x28], 0x4142
mov eax, edx
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
cmp dword [ebp - 0x28], 0x450b
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], str.schwhfqg_rcrnedafx_xfobue_mtvy_whkur_qpxggb_drckwqker_xehv_ydkg_jcm_kdzwzg_lcnuxvko_lmzs
jle 0x1003c096
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], 0x6c87
mov edi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x68]
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c055
mov eax, dword [eax]
push eax
call fcn.1004af7c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x68]
call fcn.10005365
inc edi
cmp edi, 0x16be
jl 0x1003c03d
dec esi
dec dword [ebp - 0x18]
jne 0x1003c03b
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x1a22
jl 0x1003c031
push ebx
push 0x2114
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov eax, dword [ebp - 0x20]
cmp byte [ebp + 0x14], 0
je 0x1003c164
mov eax, dword [ebp + 8]
cmp byte [eax], 0
je 0x1003c0b5
push 0x19b3
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0x24], 0x7234
cmp dword [ebp - 0x24], 0x754a
jle 0x1003c129
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov eax, esi
mov dword [ebp - 0x1c], ebx
cdq
idiv edi
mov edi, edx
mov esi, ebx
mov ebx, dword [ebp - 0x1c]
mov ecx, esi
mov eax, ebx
shl eax, cl
mov ecx, 0x1007d9f8
or eax, edi
cdq
push edx
push eax
call fcn.10004c38
inc esi
cmp esi, 0x2ad6
jl 0x1003c0de
inc ebx
push 0
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x61ec
pop ebx
jl 0x1003c0d9
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x353
jl 0x1003c0cf
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x580e
jl 0x1003c0ca
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x24], 0x7096
jge 0x1003c16a
mov edx, str.izai_zmvlshgjq_abmvong_jdebhxhic_esjizb_onue_jfxlinmi_pntcxfrpe
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x1003c16a
mov dword [eax], 0xe5c7a00f
mov dword [ebp - 4], 2
cmp dword [ebp - 0x28], 0x3efc
jge 0x1003c25b
mov dword [ebp - 0x28], 0x2058
cmp dword [ebp - 0x28], 0x1276
jge 0x1003c252
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
push str._ld__ld
call fcn.1004b4b3
add esp, 0xc
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
call fcn.1003339d
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 3
movzx eax, byte [0x1017bf08]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.1003375b
mov eax, dword [ebp - 0x14]
add eax, eax
cdq
idiv dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
test edx, edx
je 0x1003c234
jle 0x1003c232
mov ecx, dword [ebp - 0x40]
mov esi, ecx
mov eax, dword [ecx + 4]
cmp byte [eax + 0xd], 0
jne 0x1003c217
cmp dword [eax + 0x10], edx
jge 0x1003c1fc
mov eax, dword [eax + 8]
jmp 0x1003c200
mov esi, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1003c1f2
cmp esi, ecx
je 0x1003c217
cmp edx, dword [esi + 0x10]
jl 0x1003c217
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x30]
jmp 0x1003c21d
mov dword [ebp - 0x34], ecx
lea eax, [ebp - 0x34]
cmp dword [eax], ecx
jne 0x1003c232
movzx eax, byte [0x1017bf08]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x50]
jmp 0x1003c1c8
mov bl, 1
mov ecx, 0x1006e56c
test bl, bl
mov eax, 0x1006e570
cmove eax, ecx
push eax
call fcn.1004b73f
pop ecx
lea ecx, [ebp - 0x40]
call fcn.10032549
push dword [ebp - 0x38]
call fcn.1004af7c
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret