Function at 0x140003080
Capabilities:
Query environment variable

Disassembly:
mov dword [rsp + 8], ecx
sub rsp, 0x68
mov dword [rsp + 0x2c], 0x17094
mov dword [rsp + 0x20], 0x79ec
mov dword [rsp + 0x24], 0x1360b
mov dword [rsp + 0x28], 0x165e
mov eax, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x28]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
xor r8d, r8d
mov edx, 0x34bdc8
mov ecx, 0x927
call qword [sym.imp.USER32.dll_UnionRect]
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x24]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x2c]
imul eax, dword [rsp + 0x2c]
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
cmp dword [0x1400be9d8], eax
je 0x1400034a5
call fcn.140005370
cmp eax, dword [0x1400be9cc]
jbe 0x1400034a5
mov r9d, dword [rsp + 0x24]
mov r8d, dword [rsp + 0x24]
mov edx, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x70]
call fcn.140006f30
cmp eax, dword [0x1400be9c8]
je 0x1400034a5
mov eax, dword [0x1400be9b8]
cmp dword [rsp + 0x24], eax
jb 0x1400034a5
imul eax, dword [rsp + 0x20], 0x138cf
and eax, 0xffff584f
or eax, dword [rsp + 0x20]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x70]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x20]
mov ecx, dword [rsp + 0x28]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x70], eax
call fcn.140002fc0
mov eax, dword [rsp + 0x20]
imul eax, dword [rsp + 0x24]
sub eax, dword [rsp + 0x20]
add eax, dword [rsp + 0x20]
sub eax, dword [rsp + 0x2c]
mov dword [rsp + 0x2c], eax
mov eax, dword [0x1400be9c4]
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0xfffff298
je 0x1400031d2
cmp dword [rsp + 0x30], 0x2ee6
je 0x140003405
cmp dword [rsp + 0x30], 0x17668
je 0x140003239
cmp dword [rsp + 0x30], 0x17ffa
je 0x140003319
jmp 0x140003490
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x20]
imul eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x24]
lea eax, [rax + rcx - 0x11cbf]
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x24]
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x24]
sub ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x28]
add eax, dword [rsp + 0x70]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x24]
cdq
idiv dword [rsp + 0x24]
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x28]
add eax, 0x13b5c
mov dword [rsp + 0x24], eax
jmp 0x140003490
xor edx, edx
mov eax, 0x12bfd
div dword [rsp + 0x28]
mov ecx, dword [rsp + 0x28]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x20], eax
mov eax, dword [0x1400be9d4]
mov dword [rsp + 0x34], eax
jmp 0x140003266
mov eax, dword [rsp + 0x34]
inc eax
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x24]
cmp dword [rsp + 0x34], eax
jge 0x140003304
mov eax, dword [rsp + 0x70]
imul eax, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x24]
imul ecx, dword [rsp + 0x70]
and eax, ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x20]
mov ecx, dword [rsp + 0x28]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
imul eax, dword [rsp + 0x70], 0x170f5
sub eax, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x28]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x70], eax
imul eax, dword [rsp + 0x2c], 0xf612
sub eax, dword [rsp + 0x24]
imul ecx, dword [rsp + 0x70], 0x12f1f
and eax, ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x20]
mov ecx, dword [rsp + 0x28]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x70]
lea eax, [rax + rcx - 0x17bd1]
sub eax, dword [rsp + 0x2c]
mov ecx, 0x17aa
mov dword [rsp + 0x44], ecx
movzx ecx, al
mov eax, dword [rsp + 0x44]
sar eax, cl
mov dword [rsp + 0x28], eax
jmp 0x14000325c
mov eax, dword [rsp + 0x20]
cmp dword [0x1400be9c0], eax
jae 0x140003239
jmp 0x140003490
mov edx, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x28]
call qword [sym.imp.GDI32.dll_GetFontUnicodeRanges]
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x2c]
imul eax, dword [rsp + 0x2c]
mov dword [rsp + 0x28], eax
mov r8d, dword [rsp + 0x2c]
mov edx, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x2c], 0x158f0
xor edx, edx
mov eax, dword [rsp + 0x28]
div dword [rsp + 0x20]
mov eax, edx
xor edx, edx
div dword [rsp + 0x70]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 0x7109
idiv ecx
xor edx, edx
div dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x24], eax
xor edx, edx
mov eax, dword [rsp + 0x20]
div dword [rsp + 0x70]
mov eax, edx
xor edx, edx
div dword [rsp + 0x28]
mov eax, edx
imul eax, dword [rsp + 0x20]
add eax, dword [rsp + 0x24]
mov dword [0x1400be9bc], eax
mov eax, dword [rsp + 0x20]
imul eax, dword [rsp + 0x28]
imul eax, eax, 0x175d4
mov ecx, dword [rsp + 0x2c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x20]
imul eax, dword [rsp + 0x70]
xor edx, edx
div dword [rsp + 0x24]
add eax, dword [rsp + 0x70]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x20]
mov ecx, dword [rsp + 0x2c]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x28]
shl eax, cl
mov ecx, dword [rsp + 0x24]
shr eax, cl
or eax, dword [rsp + 0x28]
mov dword [rsp + 0x70], eax
jmp 0x140003490
mov eax, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x70]
add ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x2c]
add eax, dword [rsp + 0x24]
add eax, dword [rsp + 0x20]
mov dword [rsp + 0x20], eax
mov ecx, dword [rsp + 0x2c]
call qword [sym.imp.UxTheme.dll_SetThemeAppProperties]
mov dword [rsp + 0x70], eax
lea rcx, str.1Ol6E
call fcn.14009e910
mov dword [rsp + 0x70], 0x11cd7
xor edx, edx
mov eax, dword [rsp + 0x70]
div dword [rsp + 0x2c]
mov eax, edx
mov ecx, dword [rsp + 0x2c]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x20]
shl eax, cl
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0x38], eax
jmp 0x140003475
mov eax, dword [rsp + 0x38]
dec eax
mov dword [rsp + 0x38], eax
mov eax, dword [0x1400be9d4]
cmp dword [rsp + 0x38], eax
jae 0x140003490
mov eax, dword [rsp + 0x24]
imul eax, dword [rsp + 0x24]
mov dword [rsp + 0x70], eax
jmp 0x14000346b
mov eax, dword [0x1400be9d4]
cmp dword [rsp + 0x2c], eax
je 0x140003140
jmp 0x1400035fa
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x3c], eax
jmp 0x1400034b9
mov eax, dword [rsp + 0x3c]
inc eax
mov dword [rsp + 0x3c], eax
mov eax, dword [0x1400be9c8]
cmp dword [rsp + 0x3c], eax
jb 0x1400035fa
xor edx, edx
mov eax, dword [rsp + 0x20]
mov ecx, 0xaad5
div ecx
imul eax, dword [rsp + 0x2c]
mov dword [rsp + 0x20], eax
xor edx, edx
mov eax, dword [rsp + 0x28]
mov ecx, 0x45ad
div ecx
sub eax, dword [rsp + 0x70]
add eax, dword [rsp + 0x70]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x24]
cdq
idiv dword [rsp + 0x70]
mov eax, edx
movzx ecx, al
mov eax, dword [rsp + 0x4c]
shl eax, cl
mov dword [rsp + 0x24], eax
xor edx, edx
mov eax, dword [rsp + 0x20]
div dword [rsp + 0x24]
imul eax, dword [rsp + 0x20]
add eax, dword [rsp + 0x24]
add eax, dword [rsp + 0x28]
and eax, dword [rsp + 0x2c]
mov dword [0x1400be9b0], eax
mov eax, dword [rsp + 0x70]
cdq
idiv dword [rsp + 0x70]
xor edx, edx
div dword [rsp + 0x20]
mov dword [rsp + 0x50], eax
xor edx, edx
mov eax, dword [rsp + 0x24]
div dword [rsp + 0x20]
mov eax, edx
mov ecx, dword [rsp + 0x50]
sub ecx, eax
mov eax, ecx
or eax, 0x1010d
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x2c]
mov dword [rsp + 0x70], eax
xor r8d, r8d
mov edx, dword [rsp + 0x2c]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [rsp + 0x2c], eax
imul eax, dword [rsp + 0x24], 0xab80
mov dword [rsp + 0x54], eax
mov ecx, dword [rsp + 0x70]
imul ecx, dword [rsp + 0x2c]
xor edx, edx
mov eax, ecx
div dword [rsp + 0x24]
imul eax, eax, 0x1261c
movzx ecx, al
mov eax, dword [rsp + 0x54]
shl eax, cl
mov dword [rsp + 0x24], eax
mov edx, dword [rsp + 0x20]
mov ecx, dword [rsp + 0x20]
call fcn.140003690
mov eax, dword [rsp + 0x20]
movzx ecx, al
mov eax, dword [rsp + 0x24]
sar eax, cl
mov dword [rsp + 0x24], eax
mov eax, dword [0x1400be9cc]
cmp dword [rsp + 0x2c], eax
ja 0x140003510
xor edx, edx
mov eax, 0x6525c066
div dword [rsp + 0x28]
mov ecx, dword [rsp + 0x20]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x2c]
mov dword [rsp + 0x20], eax
jmp 0x1400034af
add rsp, 0x68
ret