Function at 0x10033930
Capabilities:
Set environment variable

Disassembly:
mov eax, 0x1005f984
call fcn.1005e378
sub esp, 0x3c
mov byte [ebp - 0x18], cl
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test dl, dl
je 0x1003398b
test cl, cl
je 0x10033962
push 0
push 0
push 0xecb
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x10033b5d
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x10033b5d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x10033b5d
cmp byte [ebp + 8], 0
je 0x10033b3a
mov dword [ebp - 0x1c], 0xe307
mov dword [ebp - 0x30], 0x1ddf
cmp dword [ebp - 0x30], 0x1f07
jle 0x10033a09
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
xor esi, esi
mov dword [ebp - 0x2c], esi
mov ebx, esi
mov dword [ebp - 0x20], 0x331d
xor edi, edi
mov dword [ebp - 0x24], edi
mov esi, edi
mov edi, 0xace
mov eax, ebx
mov ecx, 0x1007acd8
or eax, esi
cdq
push edx
push eax
call fcn.1000e15c
dec esi
dec edi
jne 0x100339d0
mov edi, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x268e
jl 0x100339c9
dec ebx
dec dword [ebp - 0x20]
jne 0x100339c4
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x1c0e
jl 0x100339bb
mov dword [ebp - 0x28], 0xd3aeb590
and dword [ebp - 4], 0
cmp dword [ebp - 0x30], 0x1c32
jge 0x10033a2c
mov edx, str.ewsbh_kfgjq_ndbiazx_bpmv_fmm_dclcxo_wkiqalc_xjnikqbo_emyubhdth_wcxbfp_qrxay_ldn
mov ecx, 0x1007acd8
call fcn.10010ea8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0x6df7
push 1
call fcn.1000e43e
push 0x1185
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x2c], 0xe7587697
push eax
push 0x70c2
push ecx
mov dword [ebp - 0x30], 0x97d93cb
mov edx, 0x6e91
mov dword [ebp - 0x30], 0xe86de1f1
mov ecx, 0x3341
call fcn.10033b6e
add esp, 0x14
lea eax, [ebp - 0x1c]
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x28]
push eax
push 0
call fcn.10034b00
pop ecx
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 0xffffffeb
pop ecx
jl 0x10033b16
push 7
pop esi
mov dword [ebp - 0x30], 8
xor ecx, ecx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0xfffffffa
imul eax, dword [ebp - 0x30], 0xffff
cmp eax, 1
setl cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setle dl
xor ecx, ecx
lea eax, [edx*4 + 1]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0xe094bf7d
setne cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffeb
jge 0x10033aa5
lea ecx, [ebp - 0x44]
call fcn.1000e4c1
jmp 0x10033b5d
mov edx, dword [ebp + 0x10]
mov dword [edx], 0
cmp dword [edx], 3
jge 0x10033b5d
mov esi, dword [ebp + 0xc]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 1
inc dword [edx]
cmp dword [edx], 3
jl 0x10033b4b
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret