Function at 0x1019b810
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10241382
mov eax, dword fs:[0]
push eax
sub esp, 0xe3c
mov eax, dword [0x102ff008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x6fc], 0
mov ecx, 0x10382375
call fcn.102317b0
mov eax, dword [0x1035fca8]
mov dword [ebp - 0x63c], eax
mov cl, byte [0x1035f90c]
mov byte [ebp - 0x716], cl
movzx edx, byte [ebp - 0x716]
test edx, edx
je 0x1019d26d
push 0
call dword [sym.imp.ucrtbased.dll__time64]
add esp, 4
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], edx
push 0x98
push 0
lea eax, [ebp - 0x6f8]
push eax
call sub.VCRUNTIME140D.dll_memset
add esp, 0xc
push 1
lea ecx, [ebp - 0x6f8]
call fcn.1004cf40
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x644]
push ecx
call dword [sym.imp.ucrtbased.dll__localtime64]
add esp, 4
mov dword [ebp - 0x9dc], eax
push str._H:_M:_S
mov edx, dword [ebp - 0x9dc]
push edx
lea eax, [ebp - 0xda0]
push eax
call fcn.1005f3b0
add esp, 0xc
push eax
lea ecx, [ebp - 0x6f8]
push ecx
call fcn.1005f400
add esp, 8
lea edx, [ebp - 0x660]
mov dword [ebp - 0xa30], edx
movzx eax, byte [ebp - 0x77c]
push eax
mov ecx, dword [ebp - 0xa30]
call fcn.10043120
mov byte [ebp - 4], 1
mov dword [ebp - 0x744], 0x10248b78
mov ecx, dword [ebp - 0x744]
add ecx, 1
mov dword [ebp - 0xa34], ecx
mov edx, dword [ebp - 0x744]
mov al, byte [edx]
mov byte [ebp - 0x701], al
add dword [ebp - 0x744], 1
cmp byte [ebp - 0x701], 0
jne 0x1019b939
mov ecx, dword [ebp - 0x744]
sub ecx, dword [ebp - 0xa34]
mov dword [ebp - 0xa38], ecx
mov edx, dword [ebp - 0xa38]
mov dword [ebp - 0xa3c], edx
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0xa44], eax
mov ecx, dword [ebp - 0xa44]
push ecx
push 0x10248b78
lea ecx, [ebp - 0x660]
call fcn.10043180
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x76c]
add edx, 0x4cc
push edx
lea ecx, [ebp - 0x660]
call fcn.1005c170
push 0x104
lea eax, [ebp - 0x31c]
push eax
push str.USERNAME
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea ecx, [ebp - 0x31c]
push ecx
lea ecx, [ebp - 0xc0c]
call fcn.1003d3e0
mov edx, dword [ebp - 0x6fc]
or edx, 2
mov dword [ebp - 0x6fc], edx
lea eax, [ebp - 0xc0c]
mov dword [ebp - 0xa48], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa48]
push ecx
lea ecx, [ebp - 0x660]
call fcn.1005c170
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc0c]
call fcn.1003d310
lea edx, [ebp - 0x6f4]
mov dword [ebp - 0xa4c], edx
lea eax, [ebp - 0xc28]
push eax
mov ecx, dword [ebp - 0xa4c]
call fcn.1004d5e0
mov ecx, dword [ebp - 0x6fc]
or ecx, 4
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xc28]
mov dword [ebp - 0xa50], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0x784], eax
mov ecx, dword [ebp - 0x784]
add ecx, 4
mov dword [ebp - 0x798], ecx
mov edx, dword [ebp - 0x784]
cmp dword [edx + 0x18], 0x10
jb 0x1019ba8d
mov dword [ebp - 0x794], 1
jmp 0x1019ba97
mov dword [ebp - 0x794], 0
mov al, byte [ebp - 0x794]
mov byte [ebp - 0x702], al
movzx ecx, byte [ebp - 0x702]
test ecx, ecx
je 0x1019bac9
mov edx, dword [ebp - 0x784]
mov eax, dword [edx + 4]
mov dword [ebp - 0xa54], eax
mov ecx, dword [ebp - 0xa54]
mov dword [ebp - 0x798], ecx
mov edx, dword [ebp - 0x798]
mov dword [ebp - 0xa58], edx
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x7b0], edx
mov eax, dword [ebp - 0x758]
mov cl, byte [eax]
mov byte [ebp - 0x703], cl
add dword [ebp - 0x758], 1
cmp byte [ebp - 0x703], 0
jne 0x1019bafc
mov edx, dword [ebp - 0x758]
sub edx, dword [ebp - 0x7b0]
mov dword [ebp - 0x7b4], edx
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x7b8], eax
mov ecx, dword [ebp - 0x7b8]
mov dword [ebp - 0x7bc], ecx
mov edx, dword [ebp - 0x7bc]
push edx
mov eax, dword [ebp - 0x79c]
push eax
lea ecx, [ebp - 0x660]
call fcn.1005d580
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc28]
call fcn.1003d310
mov ecx, dword [0x103265dc]
mov dword [ebp - 0x7ac], ecx
mov edx, dword [0x103265e0]
mov dword [ebp - 0x7a8], edx
lea eax, [ebp - 0x660]
push eax
lea ecx, [ebp - 0x638]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
movzx edx, byte [0x1037c22a]
mov dword [ebp - 0x7c8], edx
movzx eax, byte [0x1037c229]
mov dword [ebp - 0x7c4], eax
movzx ecx, byte [0x1037c228]
mov dword [ebp - 0x7c0], ecx
mov dl, byte [ebp - 0x7c0]
mov byte [ebp - 0x774], dl
mov al, byte [ebp - 0x7c4]
mov byte [ebp - 0x773], al
mov cl, byte [ebp - 0x7c8]
mov byte [ebp - 0x772], cl
mov byte [ebp - 0x771], 0xff
mov edx, dword [ebp - 0x774]
push edx
push 3
mov eax, dword [ebp - 0x634]
add eax, 0xc
push eax
mov ecx, dword [ebp - 0x638]
add ecx, 0xc
push ecx
push 9
mov edx, dword [ebp - 0x7ac]
sub edx, dword [ebp - 0x638]
sub edx, 0x15
push edx
call fcn.102134a0
add esp, 0x18
movzx eax, byte [0x1037c18e]
mov dword [ebp - 0x7d4], eax
movzx ecx, byte [0x1037c18d]
mov dword [ebp - 0x7d0], ecx
movzx edx, byte [0x1037c18c]
mov dword [ebp - 0x7cc], edx
mov al, byte [ebp - 0x7cc]
mov byte [ebp - 0x770], al
mov cl, byte [ebp - 0x7d0]
mov byte [ebp - 0x76f], cl
mov dl, byte [ebp - 0x7d4]
mov byte [ebp - 0x76e], dl
mov byte [ebp - 0x76d], 0xff
mov eax, dword [ebp - 0x770]
push eax
push 3
mov ecx, dword [ebp - 0x634]
add ecx, 0xa
push ecx
mov edx, dword [ebp - 0x638]
add edx, 0xa
push edx
push 0xa
mov eax, dword [ebp - 0x7ac]
sub eax, dword [ebp - 0x638]
sub eax, 0x14
push eax
call fcn.102134a0
add esp, 0x18
movzx ecx, byte [0x1037c192]
mov dword [ebp - 0x7e0], ecx
movzx edx, byte [0x1037c191]
mov dword [ebp - 0x7dc], edx
movzx eax, byte [0x1037c190]
mov dword [ebp - 0x7d8], eax
mov cl, byte [ebp - 0x7d8]
mov byte [ebp - 0x778], cl
mov dl, byte [ebp - 0x7dc]
mov byte [ebp - 0x777], dl
mov al, byte [ebp - 0x7e0]
mov byte [ebp - 0x776], al
mov byte [ebp - 0x775], 0xff
mov ecx, dword [ebp - 0x778]
push ecx
push 3
mov edx, dword [ebp - 0x634]
add edx, 8
push edx
mov eax, dword [ebp - 0x638]
add eax, 8
push eax
push 0xb
mov ecx, dword [ebp - 0x7ac]
sub ecx, dword [ebp - 0x638]
sub ecx, 0x13
push ecx
call fcn.102134a0
add esp, 0x18
mov edx, dword [ebp - 0x63c]
mov dword [ebp - 0x630], edx
movzx eax, byte [0x1037c196]
mov dword [ebp - 0x7ec], eax
movzx ecx, byte [0x1037c195]
mov dword [ebp - 0x7e8], ecx
movzx edx, byte [0x1037c194]
mov dword [ebp - 0x7e4], edx
mov al, byte [ebp - 0x7e4]
mov byte [ebp - 0x62c], al
mov cl, byte [ebp - 0x7e8]
mov byte [ebp - 0x62b], cl
mov dl, byte [ebp - 0x7ec]
mov byte [ebp - 0x62a], dl
mov byte [ebp - 0x629], 0x28
mov eax, dword [ebp - 0x7ac]
sub eax, dword [ebp - 0x638]
sub eax, 0x11
mov dword [ebp - 0x700], eax
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0x7f0], ecx
movzx edx, byte [ebp - 0x779]
push edx
mov ecx, dword [ebp - 0x7f0]
call fcn.10043120
mov byte [ebp - 4], 5
mov dword [ebp - 0x728], 0x10248b74
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x7f4], eax
mov ecx, dword [ebp - 0x728]
mov dl, byte [ecx]
mov byte [ebp - 0x704], dl
add dword [ebp - 0x728], 1
cmp byte [ebp - 0x704], 0
jne 0x1019bde6
mov eax, dword [ebp - 0x728]
sub eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x7f8], eax
mov ecx, dword [ebp - 0x7f8]
mov dword [ebp - 0x7fc], ecx
mov edx, dword [ebp - 0x7fc]
mov dword [ebp - 0x800], edx
mov eax, dword [ebp - 0x800]
push eax
push 0x10248b74
lea ecx, [ebp - 0xac8]
call fcn.10043180
mov byte [ebp - 4], 6
push 0
lea ecx, [ebp - 0xac8]
push ecx
mov edx, dword [ebp - 0x630]
push edx
push 0xf
mov eax, dword [ebp - 0x700]
push eax
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xac8]
call fcn.1003d310
lea ecx, [ebp - 0xb8c]
mov dword [ebp - 0x804], ecx
movzx edx, byte [ebp - 0x77a]
push edx
mov ecx, dword [ebp - 0x804]
call fcn.10043120
mov byte [ebp - 4], 7
mov dword [ebp - 0x72c], 0x10248b98
mov eax, dword [ebp - 0x72c]
add eax, 1
mov dword [ebp - 0x808], eax
mov ecx, dword [ebp - 0x72c]
mov dl, byte [ecx]
mov byte [ebp - 0x705], dl
add dword [ebp - 0x72c], 1
cmp byte [ebp - 0x705], 0
jne 0x1019beb7
mov eax, dword [ebp - 0x72c]
sub eax, dword [ebp - 0x808]
mov dword [ebp - 0x80c], eax
mov ecx, dword [ebp - 0x80c]
mov dword [ebp - 0x810], ecx
mov edx, dword [ebp - 0x810]
mov dword [ebp - 0x814], edx
mov eax, dword [ebp - 0x814]
push eax
push 0x10248b98
lea ecx, [ebp - 0xb8c]
call fcn.10043180
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x630]
mov dword [ebp - 0x82c], ecx
lea edx, [ebp - 0xae4]
mov dword [ebp - 0x818], edx
movzx eax, byte [ebp - 0x77b]
push eax
mov ecx, dword [ebp - 0x818]
call fcn.10043120
mov byte [ebp - 4], 9
mov dword [ebp - 0x71c], 0x10248b90
mov ecx, dword [ebp - 0x71c]
add ecx, 1
mov dword [ebp - 0x81c], ecx
mov edx, dword [ebp - 0x71c]
mov al, byte [edx]
mov byte [ebp - 0x706], al
add dword [ebp - 0x71c], 1
cmp byte [ebp - 0x706], 0
jne 0x1019bf62
mov ecx, dword [ebp - 0x71c]
sub ecx, dword [ebp - 0x81c]
mov dword [ebp - 0x820], ecx
mov edx, dword [ebp - 0x820]
mov dword [ebp - 0x824], edx
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x828], eax
mov ecx, dword [ebp - 0x828]
push ecx
push 0x10248b90
lea ecx, [ebp - 0xae4]
call fcn.10043180
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0xae4]
push edx
lea eax, [ebp - 0xbb8]
push eax
mov ecx, 0x103644c0
call fcn.102138b0
mov ecx, dword [ebp - 0x700]
add ecx, dword [eax]
mov dword [ebp - 0x830], ecx
push 0
lea edx, [ebp - 0xb8c]
push edx
mov eax, dword [ebp - 0x82c]
push eax
push 0xf
mov ecx, dword [ebp - 0x830]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xae4]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb8c]
call fcn.1003d310
lea edx, [ebp - 0xb38]
mov dword [ebp - 0x834], edx
movzx eax, byte [ebp - 0x790]
push eax
mov ecx, dword [ebp - 0x834]
call fcn.10043120
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x734], str.pta__
mov ecx, dword [ebp - 0x734]
add ecx, 1
mov dword [ebp - 0x838], ecx
mov edx, dword [ebp - 0x734]
mov al, byte [edx]
mov byte [ebp - 0x707], al
add dword [ebp - 0x734], 1
cmp byte [ebp - 0x707], 0
jne 0x1019c068
mov ecx, dword [ebp - 0x734]
sub ecx, dword [ebp - 0x838]
mov dword [ebp - 0x83c], ecx
mov edx, dword [ebp - 0x83c]
mov dword [ebp - 0x840], edx
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x844], eax
mov ecx, dword [ebp - 0x844]
push ecx
push str.pta__
lea ecx, [ebp - 0xb38]
call fcn.10043180
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0x85c], edx
lea eax, [ebp - 0xb1c]
mov dword [ebp - 0x848], eax
movzx ecx, byte [ebp - 0x78f]
push ecx
mov ecx, dword [ebp - 0x848]
call fcn.10043120
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x738], str._za
mov edx, dword [ebp - 0x738]
add edx, 1
mov dword [ebp - 0x84c], edx
mov eax, dword [ebp - 0x738]
mov cl, byte [eax]
mov byte [ebp - 0x708], cl
add dword [ebp - 0x738], 1
cmp byte [ebp - 0x708], 0
jne 0x1019c113
mov edx, dword [ebp - 0x738]
sub edx, dword [ebp - 0x84c]
mov dword [ebp - 0x850], edx
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x854], eax
mov ecx, dword [ebp - 0x854]
mov dword [ebp - 0x858], ecx
mov edx, dword [ebp - 0x858]
push edx
push str._za
lea ecx, [ebp - 0xb1c]
call fcn.10043180
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0xb1c]
push eax
lea ecx, [ebp - 0xbc8]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
mov edx, dword [eax]
mov eax, dword [ebp - 0x700]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x860], ecx
push 0
lea edx, [ebp - 0xb38]
push edx
mov eax, dword [ebp - 0x85c]
push eax
push 0xf
mov ecx, dword [ebp - 0x860]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb1c]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb38]
call fcn.1003d310
lea edx, [ebp - 0xb70]
mov dword [ebp - 0x864], edx
movzx eax, byte [ebp - 0x78e]
push eax
mov ecx, dword [ebp - 0x864]
call fcn.10043120
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x73c], 0x10248bbc
mov ecx, dword [ebp - 0x73c]
add ecx, 1
mov dword [ebp - 0x868], ecx
mov edx, dword [ebp - 0x73c]
mov al, byte [edx]
mov byte [ebp - 0x709], al
add dword [ebp - 0x73c], 1
cmp byte [ebp - 0x709], 0
jne 0x1019c21d
mov ecx, dword [ebp - 0x73c]
sub ecx, dword [ebp - 0x868]
mov dword [ebp - 0x86c], ecx
mov edx, dword [ebp - 0x86c]
mov dword [ebp - 0x870], edx
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x874]
push ecx
push 0x10248bbc
lea ecx, [ebp - 0xb70]
call fcn.10043180
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x630]
mov dword [ebp - 0x88c], edx
lea eax, [ebp - 0xb54]
mov dword [ebp - 0x878], eax
movzx ecx, byte [ebp - 0x78d]
push ecx
mov ecx, dword [ebp - 0x878]
call fcn.10043120
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x740], str._zapta__
mov edx, dword [ebp - 0x740]
add edx, 1
mov dword [ebp - 0x87c], edx
mov eax, dword [ebp - 0x740]
mov cl, byte [eax]
mov byte [ebp - 0x717], cl
add dword [ebp - 0x740], 1
cmp byte [ebp - 0x717], 0
jne 0x1019c2c8
mov edx, dword [ebp - 0x740]
sub edx, dword [ebp - 0x87c]
mov dword [ebp - 0x880], edx
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x884], eax
mov ecx, dword [ebp - 0x884]
mov dword [ebp - 0x888], ecx
mov edx, dword [ebp - 0x888]
push edx
push str._zapta__
lea ecx, [ebp - 0xb54]
call fcn.10043180
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xb54]
push eax
lea ecx, [ebp - 0xbd0]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
mov edx, dword [eax]
mov eax, dword [ebp - 0x700]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x890], ecx
push 0
lea edx, [ebp - 0xb70]
push edx
mov eax, dword [ebp - 0x88c]
push eax
push 0xf
mov ecx, dword [ebp - 0x890]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb54]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb70]
call fcn.1003d310
lea edx, [ebp - 0xba8]
mov dword [ebp - 0x894], edx
movzx eax, byte [ebp - 0x77d]
push eax
mov ecx, dword [ebp - 0x894]
call fcn.10043120
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x730], 0x10248bd0
mov ecx, dword [ebp - 0x730]
add ecx, 1
mov dword [ebp - 0x898], ecx
mov edx, dword [ebp - 0x730]
mov al, byte [edx]
mov byte [ebp - 0x70a], al
add dword [ebp - 0x730], 1
cmp byte [ebp - 0x70a], 0
jne 0x1019c3d2
mov ecx, dword [ebp - 0x730]
sub ecx, dword [ebp - 0x898]
mov dword [ebp - 0x89c], ecx
mov edx, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x8a4], eax
mov ecx, dword [ebp - 0x8a4]
push ecx
push 0x10248bd0
lea ecx, [ebp - 0xba8]
call fcn.10043180
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0x8bc], edx
lea eax, [ebp - 0xa74]
mov dword [ebp - 0x8a8], eax
movzx ecx, byte [ebp - 0x78c]
push ecx
mov ecx, dword [ebp - 0x8a8]
call fcn.10043120
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x748], str._zapta___v1
mov edx, dword [ebp - 0x748]
add edx, 1
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x748]
mov cl, byte [eax]
mov byte [ebp - 0x70b], cl
add dword [ebp - 0x748], 1
cmp byte [ebp - 0x70b], 0
jne 0x1019c47d
mov edx, dword [ebp - 0x748]
sub edx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], edx
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b8], ecx
mov edx, dword [ebp - 0x8b8]
push edx
push str._zapta___v1
lea ecx, [ebp - 0xa74]
call fcn.10043180
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0xbb0]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
mov edx, dword [eax]
mov eax, dword [ebp - 0x700]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x8c0], ecx
push 0
lea edx, [ebp - 0xba8]
push edx
mov eax, dword [ebp - 0x8bc]
push eax
push 0xf
mov ecx, dword [ebp - 0x8c0]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xa74]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xba8]
call fcn.1003d310
push 0x104
lea edx, [ebp - 0x218]
push edx
push str.USERNAME
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0xc44]
call fcn.1003d3e0
mov ecx, dword [ebp - 0x6fc]
or ecx, 8
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xc44]
mov dword [ebp - 0x8c4], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x630]
mov dword [ebp - 0x8c8], ecx
mov edx, dword [ebp - 0x8c8]
mov dword [ebp - 0x8e4], edx
lea eax, [ebp - 0xa90]
mov dword [ebp - 0x8cc], eax
movzx ecx, byte [ebp - 0x78b]
push ecx
mov ecx, dword [ebp - 0x8cc]
call fcn.10043120
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x74c], 0x10248bd8
mov edx, dword [ebp - 0x74c]
add edx, 1
mov dword [ebp - 0x8d0], edx
mov eax, dword [ebp - 0x74c]
mov cl, byte [eax]
mov byte [ebp - 0x70c], cl
add dword [ebp - 0x74c], 1
cmp byte [ebp - 0x70c], 0
jne 0x1019c5f3
mov edx, dword [ebp - 0x74c]
sub edx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8d4], edx
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8dc], ecx
mov edx, dword [ebp - 0x8dc]
push edx
push 0x10248bd8
lea ecx, [ebp - 0xa90]
call fcn.10043180
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0xa90]
push eax
lea ecx, [ebp - 0xbd8]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
mov edx, dword [eax]
mov eax, dword [ebp - 0x700]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x8e8], ecx
push 0
mov edx, dword [ebp - 0x8e0]
push edx
mov eax, dword [ebp - 0x8e4]
push eax
push 0xf
mov ecx, dword [ebp - 0x8e8]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xa90]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc44]
call fcn.1003d310
lea edx, [ebp - 0xaac]
mov dword [ebp - 0x8ec], edx
movzx eax, byte [ebp - 0x78a]
push eax
mov ecx, dword [ebp - 0x8ec]
call fcn.10043120
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x750], 0x10248bd4
mov ecx, dword [ebp - 0x750]
add ecx, 1
mov dword [ebp - 0x8f0], ecx
mov edx, dword [ebp - 0x750]
mov al, byte [edx]
mov byte [ebp - 0x70d], al
add dword [ebp - 0x750], 1
cmp byte [ebp - 0x70d], 0
jne 0x1019c6fd
mov ecx, dword [ebp - 0x750]
sub ecx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8f4], ecx
mov edx, dword [ebp - 0x8f4]
mov dword [ebp - 0x8f8], edx
mov eax, dword [ebp - 0x8f8]
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
push ecx
push 0x10248bd4
lea ecx, [ebp - 0xaac]
call fcn.10043180
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0x928], edx
push 0x104
lea eax, [ebp - 0x114]
push eax
push str.USERNAME
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0xc7c]
call fcn.1003d3e0
mov edx, dword [ebp - 0x6fc]
or edx, 0x10
mov dword [ebp - 0x6fc], edx
lea eax, [ebp - 0xc7c]
mov dword [ebp - 0x900], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x900]
push ecx
push 0x10248bec
lea edx, [ebp - 0xdbc]
push edx
call fcn.1005f150
add esp, 0xc
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x918], eax
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x754], 0x10248c00
mov ecx, dword [ebp - 0x754]
add ecx, 1
mov dword [ebp - 0x908], ecx
mov edx, dword [ebp - 0x754]
mov al, byte [edx]
mov byte [ebp - 0x70e], al
add dword [ebp - 0x754], 1
cmp byte [ebp - 0x70e], 0
jne 0x1019c7fe
mov ecx, dword [ebp - 0x754]
sub ecx, dword [ebp - 0x908]
mov dword [ebp - 0x90c], ecx
mov edx, dword [ebp - 0x90c]
mov dword [ebp - 0x910], edx
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x914], eax
mov ecx, dword [ebp - 0x914]
push ecx
push 0x10248c00
mov ecx, dword [ebp - 0x918]
call fcn.1005d580
mov dword [ebp - 0x91c], eax
mov edx, dword [ebp - 0x91c]
mov dword [ebp - 0x920], edx
mov eax, dword [ebp - 0x920]
push eax
lea ecx, [ebp - 0xc60]
call fcn.1004d090
mov ecx, dword [ebp - 0x6fc]
or ecx, 0x40
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xc60]
mov dword [ebp - 0x924], edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x924]
push eax
lea ecx, [ebp - 0xbe0]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
mov edx, dword [eax]
mov eax, dword [ebp - 0x700]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x92c], ecx
push 0
lea edx, [ebp - 0xaac]
push edx
mov eax, dword [ebp - 0x928]
push eax
push 0xf
mov ecx, dword [ebp - 0x92c]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xc60]
call fcn.1003d310
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xdbc]
call fcn.1003d310
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xc7c]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xaac]
call fcn.1003d310
mov edx, dword [ebp - 0x630]
mov dword [ebp - 0x958], edx
push 0x104
lea eax, [ebp - 0x628]
push eax
push str.USERNAME
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea ecx, [ebp - 0x628]
push ecx
lea ecx, [ebp - 0xd24]
call fcn.1003d3e0
mov edx, dword [ebp - 0x6fc]
or edx, 0x80
mov dword [ebp - 0x6fc], edx
lea eax, [ebp - 0xd24]
mov dword [ebp - 0x930], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x930]
push ecx
push 0x10248c04
lea edx, [ebp - 0xdd8]
push edx
call fcn.1005f150
add esp, 0xc
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x948], eax
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x75c], 0x10248c18
mov ecx, dword [ebp - 0x75c]
add ecx, 1
mov dword [ebp - 0x938], ecx
mov edx, dword [ebp - 0x75c]
mov al, byte [edx]
mov byte [ebp - 0x70f], al
add dword [ebp - 0x75c], 1
cmp byte [ebp - 0x70f], 0
jne 0x1019c9ca
mov ecx, dword [ebp - 0x75c]
sub ecx, dword [ebp - 0x938]
mov dword [ebp - 0x93c], ecx
mov edx, dword [ebp - 0x93c]
mov dword [ebp - 0x940], edx
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x944], eax
mov ecx, dword [ebp - 0x944]
push ecx
push 0x10248c18
mov ecx, dword [ebp - 0x948]
call fcn.1005d580
mov dword [ebp - 0x94c], eax
mov edx, dword [ebp - 0x94c]
mov dword [ebp - 0x950], edx
mov eax, dword [ebp - 0x950]
push eax
lea ecx, [ebp - 0xcec]
call fcn.1004d090
mov ecx, dword [ebp - 0x6fc]
or ecx, 0x200
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xcec]
mov dword [ebp - 0x954], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x954]
push eax
lea ecx, [ebp - 0xbe8]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
mov edx, dword [eax]
mov eax, dword [ebp - 0x700]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x95c], ecx
push 0
mov edx, dword [ebp - 0x76c]
add edx, 0x4cc
push edx
mov eax, dword [ebp - 0x958]
push eax
push 0xf
mov ecx, dword [ebp - 0x95c]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xcec]
call fcn.1003d310
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xdd8]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd24]
call fcn.1003d310
lea edx, [ebp - 0xb00]
mov dword [ebp - 0x960], edx
movzx eax, byte [ebp - 0x789]
push eax
mov ecx, dword [ebp - 0x960]
call fcn.10043120
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x760], 0x10248c20
mov ecx, dword [ebp - 0x760]
add ecx, 1
mov dword [ebp - 0x964], ecx
mov edx, dword [ebp - 0x760]
mov al, byte [edx]
mov byte [ebp - 0x710], al
add dword [ebp - 0x760], 1
cmp byte [ebp - 0x710], 0
jne 0x1019cb2b
mov ecx, dword [ebp - 0x760]
sub ecx, dword [ebp - 0x964]
mov dword [ebp - 0x968], ecx
mov edx, dword [ebp - 0x968]
mov dword [ebp - 0x96c], edx
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x970], eax
mov ecx, dword [ebp - 0x970]
push ecx
push 0x10248c20
lea ecx, [ebp - 0xb00]
call fcn.10043180
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0x9c0], edx
push 0x104
lea eax, [ebp - 0x420]
push eax
push str.USERNAME
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea ecx, [ebp - 0x420]
push ecx
lea ecx, [ebp - 0xd5c]
call fcn.1003d3e0
mov edx, dword [ebp - 0x6fc]
or edx, 0x400
mov dword [ebp - 0x6fc], edx
lea eax, [ebp - 0xd5c]
mov dword [ebp - 0x974], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x974]
push ecx
push 0x10248c24
lea edx, [ebp - 0xdf4]
push edx
call fcn.1005f150
add esp, 0xc
mov dword [ebp - 0x978], eax
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x98c], eax
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x764], 0x10248c38
mov ecx, dword [ebp - 0x764]
add ecx, 1
mov dword [ebp - 0x97c], ecx
mov edx, dword [ebp - 0x764]
mov al, byte [edx]
mov byte [ebp - 0x711], al
add dword [ebp - 0x764], 1
cmp byte [ebp - 0x711], 0
jne 0x1019cc2f
mov ecx, dword [ebp - 0x764]
sub ecx, dword [ebp - 0x97c]
mov dword [ebp - 0x980], ecx
mov edx, dword [ebp - 0x980]
mov dword [ebp - 0x984], edx
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x988]
push ecx
push 0x10248c38
mov ecx, dword [ebp - 0x98c]
call fcn.1005d580
mov dword [ebp - 0x990], eax
mov edx, dword [ebp - 0x990]
mov dword [ebp - 0x994], edx
mov eax, dword [ebp - 0x994]
push eax
lea ecx, [ebp - 0xd40]
call fcn.1004d090
mov ecx, dword [ebp - 0x6fc]
or ecx, 0x1000
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xd40]
mov dword [ebp - 0x998], edx
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x76c]
add eax, 0x4cc
push eax
mov ecx, dword [ebp - 0x998]
push ecx
lea edx, [ebp - 0xe48]
push edx
call fcn.1005f270
add esp, 0xc
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x9b0], eax
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x768], 0x10248c1c
mov ecx, dword [ebp - 0x768]
add ecx, 1
mov dword [ebp - 0x9a0], ecx
mov edx, dword [ebp - 0x768]
mov al, byte [edx]
mov byte [ebp - 0x712], al
add dword [ebp - 0x768], 1
cmp byte [ebp - 0x712], 0
jne 0x1019cd25
mov ecx, dword [ebp - 0x768]
sub ecx, dword [ebp - 0x9a0]
mov dword [ebp - 0x9a4], ecx
mov edx, dword [ebp - 0x9a4]
mov dword [ebp - 0x9a8], edx
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x9ac], eax
mov ecx, dword [ebp - 0x9ac]
push ecx
push 0x10248c1c
mov ecx, dword [ebp - 0x9b0]
call fcn.1005d580
mov dword [ebp - 0x9b4], eax
mov edx, dword [ebp - 0x9b4]
mov dword [ebp - 0x9b8], edx
mov eax, dword [ebp - 0x9b8]
push eax
lea ecx, [ebp - 0xd08]
call fcn.1004d090
mov ecx, dword [ebp - 0x6fc]
or ecx, 0x4000
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xd08]
mov dword [ebp - 0x9bc], edx
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x9bc]
push eax
lea ecx, [ebp - 0xbf0]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
mov edx, dword [eax]
mov eax, dword [ebp - 0x700]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x9c4], ecx
push 0
lea edx, [ebp - 0xb00]
push edx
mov eax, dword [ebp - 0x9c0]
push eax
push 0xf
mov ecx, dword [ebp - 0x9c4]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xd08]
call fcn.1003d310
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xe48]
call fcn.1003d310
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xd40]
call fcn.1003d310
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xdf4]
call fcn.1003d310
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xd5c]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb00]
call fcn.1003d310
lea edx, [ebp - 0x6f4]
mov dword [ebp - 0x9c8], edx
lea eax, [ebp - 0xcd0]
push eax
mov ecx, dword [ebp - 0x9c8]
call fcn.1004d5e0
mov ecx, dword [ebp - 0x6fc]
or ecx, 0x8000
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xcd0]
mov dword [ebp - 0x9cc], edx
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x788]
add ecx, 4
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x788]
cmp dword [edx + 0x18], 0x10
jb 0x1019cee4
mov dword [ebp - 0x7a0], 1
jmp 0x1019ceee
mov dword [ebp - 0x7a0], 0
mov al, byte [ebp - 0x7a0]
mov byte [ebp - 0x713], al
movzx ecx, byte [ebp - 0x713]
test ecx, ecx
je 0x1019cf20
mov edx, dword [ebp - 0x788]
mov eax, dword [edx + 4]
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x9d4], edx
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x9d8], eax
mov ecx, dword [ebp - 0x9d8]
push ecx
lea ecx, [ebp - 0xcb4]
call fcn.1003d3e0
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0xa28], edx
push 0x104
lea eax, [ebp - 0x524]
push eax
push str.USERNAME
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea ecx, [ebp - 0x524]
push ecx
lea ecx, [ebp - 0xc98]
call fcn.1003d3e0
mov edx, dword [ebp - 0x6fc]
or edx, 0x10000
mov dword [ebp - 0x6fc], edx
lea eax, [ebp - 0xc98]
mov dword [ebp - 0xa40], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0xa40]
push ecx
push str._zapta___v1__
lea edx, [ebp - 0xe2c]
push edx
call fcn.1005f150
add esp, 0xc
mov dword [ebp - 0x9e0], eax
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0x9f4], eax
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x720], 0x10248c3c
mov ecx, dword [ebp - 0x720]
add ecx, 1
mov dword [ebp - 0x9e4], ecx
mov edx, dword [ebp - 0x720]
mov al, byte [edx]
mov byte [ebp - 0x714], al
add dword [ebp - 0x720], 1
cmp byte [ebp - 0x714], 0
jne 0x1019cfef
mov ecx, dword [ebp - 0x720]
sub ecx, dword [ebp - 0x9e4]
mov dword [ebp - 0x9e8], ecx
mov edx, dword [ebp - 0x9e8]
mov dword [ebp - 0x9ec], edx
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x9f0], eax
mov ecx, dword [ebp - 0x9f0]
push ecx
push 0x10248c3c
mov ecx, dword [ebp - 0x9f4]
call fcn.1005d580
mov dword [ebp - 0x9f8], eax
mov edx, dword [ebp - 0x9f8]
mov dword [ebp - 0x9fc], edx
mov eax, dword [ebp - 0x9fc]
push eax
lea ecx, [ebp - 0xd94]
call fcn.1004d090
mov ecx, dword [ebp - 0x6fc]
or ecx, 0x40000
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xd94]
mov dword [ebp - 0xa00], edx
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x76c]
add eax, 0x4cc
push eax
mov ecx, dword [ebp - 0xa00]
push ecx
lea edx, [ebp - 0xe10]
push edx
call fcn.1005f270
add esp, 0xc
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0xa18], eax
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x724], 0x10248c40
mov ecx, dword [ebp - 0x724]
add ecx, 1
mov dword [ebp - 0xa08], ecx
mov edx, dword [ebp - 0x724]
mov al, byte [edx]
mov byte [ebp - 0x715], al
add dword [ebp - 0x724], 1
cmp byte [ebp - 0x715], 0
jne 0x1019d0e5
mov ecx, dword [ebp - 0x724]
sub ecx, dword [ebp - 0xa08]
mov dword [ebp - 0xa0c], ecx
mov edx, dword [ebp - 0xa0c]
mov dword [ebp - 0xa10], edx
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0xa14], eax
mov ecx, dword [ebp - 0xa14]
push ecx
push 0x10248c40
mov ecx, dword [ebp - 0xa18]
call fcn.1005d580
mov dword [ebp - 0xa1c], eax
mov edx, dword [ebp - 0xa1c]
mov dword [ebp - 0xa20], edx
mov eax, dword [ebp - 0xa20]
push eax
lea ecx, [ebp - 0xd78]
call fcn.1004d090
mov ecx, dword [ebp - 0x6fc]
or ecx, 0x100000
mov dword [ebp - 0x6fc], ecx
lea edx, [ebp - 0xd78]
mov dword [ebp - 0xa24], edx
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0xa24]
push eax
lea ecx, [ebp - 0xbc0]
push ecx
mov ecx, 0x103644c0
call fcn.102138b0
mov edx, dword [eax]
mov eax, dword [ebp - 0x700]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0xa2c], ecx
push 0
lea edx, [ebp - 0xcb4]
push edx
mov eax, dword [ebp - 0xa28]
push eax
push 0xf
mov ecx, dword [ebp - 0xa2c]
push ecx
mov ecx, 0x103644c0
call fcn.10213d40
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xd78]
call fcn.1003d310
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xe10]
call fcn.1003d310
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xd94]
call fcn.1003d310
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xe2c]
call fcn.1003d310
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xc98]
call fcn.1003d310
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xcb4]
call fcn.1003d310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcd0]
call fcn.1003d310
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x660]
call fcn.1003d310
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a8]
call fcn.1004cec0
lea ecx, [ebp - 0x6a8]
call dword [sym.imp.MSVCP140D.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10169cb0
mov esp, ebp
pop ebp
ret