Function at 0x10023f0a
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x1005449c
call fcn.10053340
sub esp, 0x68
cmp byte [ebp + 0x10], 0
push ebx
push esi
push edi
mov ebx, edx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], ebx
je 0x10024171
mov dword [ebp - 0x24], 0x4d53
cmp dword [ebp - 0x24], 0x4f12
jle 0x10023fb9
push 0x4cf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
xor esi, esi
mov dword [ebp - 0x20], esi
xor edi, edi
mov dword [ebp - 0x1c], 0x20eb
mov ebx, edi
mov esi, 0x3165
mov eax, ebx
lea ecx, [ebp - 0x40]
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023f77
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push 0
push 1
lea ecx, [ebp - 0x40]
call fcn.1000c586
dec ebx
dec esi
jne 0x10023f60
mov esi, dword [ebp - 0x20]
add edi, esi
dec dword [ebp - 0x1c]
jne 0x10023f59
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x3ce3
jl 0x10023f50
push 0x1fea
push 0
push 0x2370
call dword [sym.imp.GDI32.dll_Polyline]
mov ebx, dword [ebp - 0x18]
cmp dword [ebp - 0x24], 0x4d22
jge 0x10023fcd
push str.fepbgha_zjaajyala_ssp_mnwvf_bkwfxtk_tmqfyszji_uejnj_xjmemhkus_czpq_jxrnwmn_pocbk
call fcn.1003de4c
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x6b53
cmp dword [ebp - 0x24], 0x6d46
jle 0x10024022
xor esi, esi
mov dword [ebp + 0x10], esi
xor edi, edi
mov eax, esi
mov esi, 0x4af
cdq
idiv edi
mov ebx, edx
mov eax, ebx
mov ecx, 0x1006de98
cdq
push edx
push eax
call fcn.1000bb28
dec ebx
dec esi
jne 0x10023ff4
mov esi, dword [ebp + 0x10]
inc edi
cmp edi, 0x26dc
jl 0x10023fe8
inc esi
mov dword [ebp + 0x10], esi
cmp esi, 0x4e8d
jl 0x10023fe6
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x6789
jge 0x10024060
mov edx, str.vsatg_toco_whvatfcxv_yxm_fipgv_tqd_papwew_geesrhzb_qvcsmderz_kkykn_jznw_sxsiyq_xcjwnztjc
mov ecx, 0x1006de98
call fcn.100102b0
jmp 0x10024060
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0xc], 0
je 0x1002409a
push ecx
mov edx, 0x42e1
lea ecx, [ebp - 0x58]
call fcn.1002115a
push ecx
mov ecx, dword [ebp + 0x18]
push eax
mov dword [ebp - 4], 4
call fcn.10025c1b
push 0
push 1
lea ecx, [ebp - 0x58]
call fcn.1000c8be
jmp 0x100241a8
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
push 0x18
cdq
pop ecx
idiv ecx
and dword [ebp + 0x10], 0
mov esi, eax
test esi, esi
je 0x100240d3
push ecx
push ecx
push ebx
push ecx
push 1
push dword [ebp + 0x1c]
lea edx, [ebp + 0x10]
mov ecx, 0x3f59
call fcn.10023177
mov eax, dword [ebp + 0x10]
add esp, 0x18
inc eax
mov dword [ebp + 0x10], eax
cmp eax, esi
jb 0x100240af
mov dword [ebp - 0x20], 0x40b3
cmp dword [ebp - 0x20], 0x41f2
jle 0x1002415b
xor edi, edi
xor esi, esi
mov dword [ebp - 0x24], esi
xor ebx, ebx
mov dword [ebp + 0x10], ebx
and dword [ebp - 0x1c], 0
mov eax, esi
cdq
idiv ebx
mov esi, dword [ebp - 0x1c]
mov ebx, edx
mov eax, ebx
lea ecx, [ebp - 0x70]
and eax, esi
and eax, edi
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10024118
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.1000c586
inc esi
cmp esi, 0x2973
jl 0x100240fd
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp - 0x24]
inc ebx
mov dword [ebp + 0x10], ebx
cmp ebx, 0x11dd
jl 0x100240ef
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x7fad
jl 0x100240ea
inc edi
cmp edi, 0x2cf5
jl 0x100240e5
cmp dword [ebp - 0x20], 0x3f20
jge 0x100241a8
push str.ydctilouu_tgrmpdq_xwtlys_ogslez_ulotoorvl
call fcn.1003de4c
pop ecx
jmp 0x100241a8
cmp byte [ebp + 0x24], 0
je 0x100241a5
mov edi, dword [ebp + 0x14]
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0x20]
mov eax, dword [edi + 4]
sub eax, dword [edi]
sar eax, 2
mov dword [esi], eax
jmp 0x1002419f
and dword [ebp - 0x28], 0
lea eax, [ebp - 0x28]
push eax
mov ecx, edi
call fcn.100256db
inc dword [esi]
mov eax, dword [esi]
cmp eax, dword [ebx]
jl 0x1002418c
jmp 0x100241a8
and dword [ecx], 0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret