Function at 0x100196ef
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x1005c3eb
call fcn.1005bac8
sub esp, 0x154
cmp byte [ebp + 0x18], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], edx
mov byte [ebp - 0x44], cl
je 0x10019d20
cmp byte [ebp + 0x10], 0
je 0x10019d13
xor edx, edx
mov dword [ebp - 0x20], 0xf6af1124
inc edx
or edi, 0xffffffff
mov dword [ebp - 0x14], edx
xor ebx, ebx
mov dword [ebp - 0x2c], 0xec93
mov dword [ebp - 0x20], 0xffffffee
cmp dword [ebp - 0x20], 0xffffffe7
jge 0x10019929
mov dword [ebp - 0x24], 0xfffffff6
mov ecx, edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x24], ebx
mov eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
sub ecx, eax
add ecx, dword [ebp - 0x14]
cmp ecx, 0x238e
jg 0x1001978c
mov ecx, edx
cmp dword [ebp - 0x2c], ebx
jne 0x1001978e
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
xor edx, edx
sub ecx, eax
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, 6
cmp ecx, 0xe8ce6fc2
jae 0x1001982e
mov dword [ebp - 0x30], ebx
xor ebx, ebx
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setne bl
sub ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, 9
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, dword [ebp - 0x24]
imul eax, ecx, 0x7cc7
cmp dword [ebp - 0x18], eax
jg 0x100197f4
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov edx, 0xfcc013ce
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
add ecx, 0xa
neg ecx
sbb ecx, ecx
neg ecx
cmp edx, eax
sbb eax, eax
xor ebx, ebx
neg eax
cmp eax, ecx
je 0x10019823
cmp dword [ebp - 0x58], ebx
je 0x10019823
mov eax, ebx
jmp 0x10019826
xor eax, eax
inc eax
mov dword [ebp - 0x30], eax
jmp 0x10019908
mov dword [ebp - 0x28], 0xfffa
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x10019908
push 0x2f39
push 0x336
lea eax, [ebp + 0x1b]
mov dword [ebp - 0x18], edi
push eax
push 1
mov byte [ebp + 0x1b], bl
mov edx, 0x53d9
push 1
mov cl, 1
call fcn.100189da
mov eax, dword [ebp - 0x30]
add esp, 0x14
cmp eax, dword [ebp - 0x1c]
jle 0x10019885
cmp dword [ebp - 0x24], ebx
je 0x10019885
xor eax, eax
inc eax
jmp 0x10019887
mov eax, ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x50], ebx
jne 0x10019894
cmp dword [ebp - 0x58], ebx
je 0x10019897
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x14]
xor edx, edx
push 0
mov eax, dword [ebp + eax*4 - 0x58]
cmp eax, ebx
mov eax, dword [ebp - 0x14]
setne dl
add edx, 0x7b47864
sub edx, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x58]
cmp edx, eax
mov eax, dword [ebp - 0x28]
setne cl
xor ebx, ebx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setg bl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x58]
test eax, eax
mov eax, dword [ebp - 0x14]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
cmp ecx, ebx
pop ebx
setge dl
xor eax, eax
cmp edx, 0x7dff
setg al
mov dword [ebp - 0x18], eax
dec dword [ebp - 0x14]
jns 0x1001984c
push ecx
push ecx
push 0x6a5f
xor cl, cl
call fcn.100196a1
add esp, 0xc
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe7
push 1
pop edx
jl 0x10019749
xor eax, eax
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], ebx
mov word [ebp - 0x8c], ax
push 0x3077
lea eax, [ebp - 0x48]
mov dword [ebp - 4], ebx
push eax
push edx
push ecx
lea eax, [ebp - 0x8c]
push eax
push 0x33ec
push ecx
push 0x65
pop edx
mov ecx, 0x7027
call fcn.10019357
mov dword [ebp - 0x2c], 0x4934
add esp, 0x1c
cmp dword [ebp - 0x2c], 0x4ce2
jle 0x100199c8
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov edi, esi
mov esi, 0x7f95
mov eax, edi
lea ecx, [ebp - 0x124]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001999d
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x124]
call fcn.100020a8
dec edi
dec esi
jne 0x10019983
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x25f2
jl 0x1001997c
or edi, 0xffffffff
cmp dword [ebp - 0x2c], 0x48c7
jge 0x100199dc
push str.wlaksour_lydsmt_llwgjm_wumtvafd_blpg
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100199f8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x40], 0xde0b4074
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100199ea
mov dword [ebp - 0x14], 0xffffffef
jmp 0x10019a1b
push ecx
mov edx, 0x7573
mov ecx, 0x2d2a
call fcn.1001a511
inc dword [ebp - 0x14]
pop ecx
cmp dword [ebp - 0x14], 3
je 0x10019a07
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 1
jg 0x10019b30
xor ecx, ecx
mov dword [ebp - 0x20], 3
mov eax, dword [ebp - 0x14]
push 0xfffffffffffffff7
mov edx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x40]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setle dl
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0xfff8
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x197e7c14
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setg dl
xor ebx, ebx
neg edx
cmp edx, 0x3b0639e6
setle bl
xor ecx, ecx
cmp eax, ebx
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp ecx, 0x137d
mov eax, dword [ebp + eax*4 - 0x40]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x20]
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl cl
xor edx, edx
imul esi, ecx
cmp esi, eax
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], edx
mov eax, dword [ebp - 0x14]
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 1
pop ecx
setg al
cmp ecx, eax
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
cmp edi, edx
sbb ecx, ecx
neg ecx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jle 0x10019a2e
xor ebx, ebx
mov eax, dword [0x1027ea98]
test al, 1
jne 0x10019b59
or eax, 1
mov dword [0x1027ea98], eax
push 0xc10d
mov byte [ebp - 4], 3
call fcn.10038234
pop ecx
mov word [0x1027fe28], ax
mov byte [ebp - 4], bl
mov dword [ebp - 0x24], 0xb743d837
mov dword [ebp - 0x1c], 0x3e0e
cmp dword [ebp - 0x1c], 0x4007
jle 0x10019bc0
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0xf4]
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019b8f
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xf4]
call fcn.100020a8
inc edi
cmp edi, 0x3c7e
jl 0x10019b74
inc esi
cmp esi, 0x19d4
jl 0x10019b72
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
or edi, 0xffffffff
push 5
pop eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0x1c], 0x3d5c
jge 0x10019bef
push str.jcqg_gbfb_wqiwp_stvsvpmm_ggmrdg_ezkyqxxm_aee_chqzqigzl_tpowj
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], 0xc6f1
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x14], ebx
jmp 0x10019c16
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa8], 0x624039b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10019c05
mov dword [ebp - 0x14], ebx
jmp 0x10019c32
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x148], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10019c21
sub esp, 0xc
mov byte [ebp - 0x31], bl
mov dl, 1
lea ecx, [ebp - 0x31]
call fcn.1001a393
mov dword [ebp - 0x24], ebx
add esp, 0xc
cmp dword [ebp - 0x24], ebx
jl 0x10019cc6
mov dword [ebp - 0x28], 0x1ca2961c
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10019c85
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], 0xb59008cf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10019c74
push 0x3288
push 0x2aa3
push ecx
push ecx
push 0x4065
push 0x1145
push 0x2e4b
mov edx, 0x74e3
call fcn.10019582
add esp, 0x14
lea eax, [ebp - 0x6c]
mov cl, 1
push eax
call fcn.100196a1
add esp, 0xc
dec dword [ebp - 0x24]
jns 0x10019c53
mov esi, dword [ebp - 0x48]
test esi, esi
je 0x10019ceb
lea eax, [ebp - 0x8c]
mov edx, 0x1027fe28
push eax
push 0x6064
push 1
call fcn.1001897a
add esp, 0xc
dec esi
jne 0x10019ccd
mov ecx, dword [ebp + 0x14]
lea eax, [ebp - 0x8c]
cmp ecx, eax
je 0x10019d00
push edi
push ebx
push eax
call fcn.1000213a
lea ecx, [ebp - 0x8c]
push ebx
push 1
call fcn.10002214
jmp 0x1001a382
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
jmp 0x1001a382
test cl, cl
je 0x1001a2c8
xor ebx, ebx
mov dword [ebp - 0x90], 7
xor eax, eax
mov dword [ebp - 0x94], ebx
mov word [ebp - 0xa4], ax
push 0x365d
push 0x8d1
push 1
push ebx
lea eax, [ebp - 0xa4]
mov dword [ebp - 4], 6
push eax
lea eax, [ebp + 0xc]
mov edx, 0x5960
push eax
push 0x17a5
xor cl, cl
call fcn.10019582
mov dword [ebp - 0x20], 0xe7d8a870
add esp, 0x1c
mov dword [ebp - 0x68], 0x7b568be1
mov dword [ebp - 0x18], ebx
jmp 0x10019d93
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x64], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10019d89
mov dword [ebp - 0x20], ebx
jmp 0x10019e00
mov dword [ebp - 0x18], 0x5b3b9da4
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x10019dde
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], ebx
jmp 0x10019dc3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x64], 0xfffffff8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10019db5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x20]
neg ecx
mov dword [ebp + eax*4 - 0x64], ecx
dec dword [ebp - 0x18]
jns 0x10019dad
push 0x17fe
lea eax, [ebp - 0x68]
xor cl, cl
push eax
push 0x7eee
push edx
push edx
mov edx, 0x16cd
call fcn.100189da
add esp, 0x14
inc dword [ebp - 0x20]
xor edx, edx
inc edx
cmp dword [ebp - 0x20], edx
jle 0x10019d9e
mov eax, dword [0x1027ea98]
test al, 2
jne 0x10019e32
or eax, 2
mov dword [0x1027ea98], eax
push 0x8329
mov byte [ebp - 4], 7
call fcn.10038234
pop ecx
mov word [0x1027ea90], ax
mov byte [ebp - 4], 6
mov dword [ebp - 0x18], 0xfffffff9
or edi, 0xffffffff
mov dword [ebp - 0x14], 0xfffffff6
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x2c], 0xfe662db8
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x2c], 0x493e623b
mov dword [ebp - 0x20], 0x5ded
cmp dword [ebp - 0x20], 0x5e82
jle 0x10019eca
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x2c], 0x2f4c
cdq
idiv esi
mov edi, edx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov eax, edi
shl eax, cl
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
inc ebx
cmp ebx, 0x1c96
jl 0x10019e83
inc edi
dec dword [ebp - 0x2c]
push 0
pop ebx
jne 0x10019e80
mov edi, dword [ebp - 0x30]
inc esi
cmp esi, 0x5178
jl 0x10019e72
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x30a5
jl 0x10019e70
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
or edi, 0xffffffff
mov dword [ebp - 0x28], 0xb5d1cb6a
mov byte [ebp - 4], 8
cmp dword [ebp - 0x20], 0x5d6d
jge 0x10019f0e
mov edx, str.vcyig_itn_qwhgvkfe_ziq_gpw_robch_npndk_ljhvc_eoj
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x10019f0e
mov dword [ebp - 4], 6
mov dword [ebp - 0x30], 0x44a1
cmp dword [ebp - 0x30], 0x47f3
jle 0x10019f6f
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x10c]
and eax, esi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019f45
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x10c]
call fcn.100020a8
inc edi
cmp edi, 0x6dfc
jl 0x10019f29
inc esi
cmp esi, 0x3d0d
jl 0x10019f27
or edi, 0xffffffff
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setg dl
mov dword [ebp - 0x2c], edx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], ebx
jne 0x10019fb7
xor eax, eax
inc eax
jmp 0x10019fb9
mov eax, ebx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x30], 0x445e
jge 0x10019fd0
push str.orv_dgmqmik_ljmfh_eaium_eckepa_knkynmp_mrjsg_rihckeo_nwniupfn_yxascaggk_jldanlev_cfciqg_xcfnqntm_nvcsbjp
call fcn.10043bf4
pop ecx
push 0x44fb
push 0x5aaf
push 1
push ebx
push 0x4e84
push 0x5f96
push 0x31c
mov edx, 0x574b
mov dword [ebp - 4], 6
mov cl, 1
call fcn.10019582
mov eax, dword [0x1027ea98]
add esp, 0x1c
test al, 4
jne 0x1001a02c
or eax, 4
mov dword [0x1027ea98], eax
push 0xbd69
mov byte [ebp - 4], 0xc
call fcn.10038234
pop ecx
mov word [0x1027ea88], ax
mov byte [ebp - 4], 6
mov dword [ebp - 0x28], 0x7478144a
xor ecx, ecx
mov dword [ebp - 0x28], 0x5f0ed1ad
inc ecx
mov dword [ebp - 0x14], ebx
jmp 0x1001a050
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x70], 0xdf75
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001a042
mov dword [ebp - 0x14], ebx
jmp 0x1001a068
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x38], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001a05a
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jl 0x1001a093
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x70]
cmp eax, 0x1d832937
sete cl
mov dword [ebp - 0x28], ecx
call fcn.10018885
dec dword [ebp - 0x38]
jns 0x1001a075
mov dword [ebp - 0x1c], 0x11b0
cmp dword [ebp - 0x1c], 0x140b
jle 0x1001a0f5
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x13c]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001a0cb
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x13c]
call fcn.100020a8
inc edi
cmp edi, 0x709
jl 0x1001a0af
inc esi
cmp esi, 0x491a
jl 0x1001a0ad
or edi, 0xffffffff
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x1001a191
mov dword [ebp - 0x18], 0x2667a876
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x18], ebx
jmp 0x1001a124
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4], 0xfdf99ff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001a113
mov dword [ebp - 0x18], ebx
jmp 0x1001a14f
mov dword [ebp - 0x28], 0x3292c5eb
call fcn.10019549
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc0]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1001a12f
call fcn.1001862b
push 0x34
pop ecx
xor edx, edx
div ecx
push 0x6433
push 0x1027ea90
push ebx
mov dword [ebp - 0x74], edx
lea ecx, [ebp - 0x74]
push 0x2fe8
push 0x1027ea88
lea edx, [ebp - 0xa4]
call fcn.10019338
add esp, 0x14
dec esi
jne 0x1001a100
cmp dword [ebp - 0x1c], 0xe75
jge 0x1001a1a5
push str.oivsalhfe_eskbhql_bdghi_iib_cxlgglrj_inpn_xiawfxaic_uxpfb_rfmhlpg_vkrp_wlgrsnrl
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], 0x7d8e
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], 0x5395
cmp dword [ebp - 0x1c], 0x5629
jle 0x1001a1f3
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, 0x10076b78
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001c56
inc edi
cmp edi, 0x3b57
jl 0x1001a1ca
inc esi
cmp esi, 0x7c61
jl 0x1001a1c8
or edi, 0xffffffff
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x1c], 0x52fd
jge 0x1001a230
mov edx, str.keznudbb_rmwgkflpf_glbavzjsu_wctwfv_rtyfego_iimb_yuhnfjgml_hwvwtcr
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x1001a230
mov dword [ebp - 4], 6
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x14], ebx
jmp 0x1001a24d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5c], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1001a243
mov dword [ebp - 0x14], ebx
jmp 0x1001a269
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd0], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001a258
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x1c]
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x18]
sub eax, 0xccde
sub edx, eax
neg edx
sbb edx, edx
inc edx
sub ecx, edx
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xb0bf
mov ecx, dword [ebp + 8]
setge al
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0xa4]
cmp ecx, eax
je 0x1001a2bd
push edi
push ebx
push eax
call fcn.1000213a
lea ecx, [ebp - 0xa4]
jmp 0x10019d06
mov dword [ebp - 0x30], 0x2e1b
xor esi, esi
cmp dword [ebp - 0x30], 0x2fe7
jle 0x1001a361
push 1
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
mov dword [ebp - 0x2c], esi
mov ecx, esi
mov dword [ebp - 0x1c], 0x7ab6
mov dword [ebp + 0x18], ecx
mov ebx, esi
mov edi, esi
mov eax, ebx
cdq
idiv edi
mov eax, ecx
mov ecx, edx
shl eax, cl
lea ecx, [ebp - 0x160]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001a31e
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push esi
push 1
lea ecx, [ebp - 0x160]
call fcn.100020a8
mov ecx, dword [ebp + 0x18]
inc edi
cmp edi, 0x711
jl 0x1001a2fb
inc ebx
cmp ebx, 0x5fe0
jl 0x1001a2f9
mov edi, dword [ebp - 0x2c]
add ecx, edi
dec dword [ebp - 0x1c]
mov dword [ebp + 0x18], ecx
jne 0x1001a2f7
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x4899
jl 0x1001a2eb
push 0xe3d
push esi
push esi
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
cmp dword [ebp - 0x30], 0x2b92
jge 0x1001a382
push str.jzwnv_fbdow_umxlvwhs_rubtawmx_xalqzkcst_bbxzs_ckuthvd_cjyv_mek_kxupdddgx_lqq_qgca_cqgejh_mtuvkf
call fcn.10043bf4
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret