Function at 0x1003d864
Capabilities:
Query environment variable
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005e0e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x11c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x1003e023
lea eax, [ebp + 8]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xe4], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xc4]
movzx eax, byte [eax]
test eax, eax
je 0x1003db8d
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x80], eax
mov eax, dword [0x1044dce0]
and eax, 1
jne 0x1003d937
mov eax, dword [0x1044dce0]
or eax, 1
mov dword [0x1044dce0], eax
and dword [ebp - 4], 0
mov ecx, 0x1044dc78
call fcn.100206ae
push 0x1005e36b
call fcn.10046d79
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x1044c786]
test eax, eax
je 0x1003d99a
mov ecx, 0x1044dc78
call fcn.1003eb5f
movzx eax, al
test eax, eax
jne 0x1003d99a
push dword [ebp - 0x38]
lea eax, [ebp - 0x74]
push eax
mov ecx, 0x1044dc78
call fcn.1002064a
lea eax, [ebp - 0x100]
push eax
mov ecx, 0x1044dc78
call fcn.1002063c
push eax
lea ecx, [ebp - 0x74]
call fcn.1002065f
movzx eax, al
test eax, eax
je 0x1003d99a
lea ecx, [ebp - 0x74]
call fcn.1003eb68
mov ecx, dword [ebp - 0x80]
mov eax, dword [eax + 4]
mov dword [ecx], eax
jmp 0x1003e08e
mov eax, dword [ebp - 0x38]
push dword [eax]
lea eax, [ebp - 0x12c]
push eax
call fcn.10017c45
pop ecx
pop ecx
mov dword [ebp - 4], 1
push 0
push 0
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0xd4]
call fcn.10038021
add esp, 0x10
mov dword [ebp - 0x44], eax
movzx eax, byte [0x1044c786]
test eax, eax
je 0x1003d9ec
mov ecx, 0x1044dc78
call fcn.1003eb5f
movzx eax, al
test eax, eax
jne 0x1003da49
push 1
push dword [ebp - 0x38]
push 0x1044dc78
push 0x72ec
push 0x75c5
push 0xee
push 1
push 0x51fe
push 0x327d
push 0x664e
lea eax, [ebp - 0x44]
push eax
push 0x6ce0
push 0x75eb
push 1
call fcn.1003d209
add esp, 0x38
push 0x1044c786
push 0x879
push 1
push 1
push 0x2bd3
call fcn.1003d763
add esp, 0x14
mov dword [ebp - 0x98], 0x2637
cmp dword [ebp - 0x98], 0xb18
jge 0x1003db5d
lea eax, [ebp - 0x18]
push eax
push 0x10065ecc
call fcn.10047062
pop ecx
pop ecx
cmp dword [ebp - 0x18], 1
jne 0x1003da8d
mov edx, 0x1006a97c
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
cmp dword [ebp - 0x18], 2
jne 0x1003daa7
mov edx, 0x1006a980
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
cmp dword [ebp - 0x18], 3
jne 0x1003dac1
mov edx, str.three
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
cmp dword [ebp - 0x18], 4
jne 0x1003dadb
mov edx, str.four
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
cmp dword [ebp - 0x18], 5
jne 0x1003daf2
mov edx, str.five
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
cmp dword [ebp - 0x18], 6
jne 0x1003db09
mov edx, 0x1006a99c
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
cmp dword [ebp - 0x18], 7
jne 0x1003db20
mov edx, str.seven
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
cmp dword [ebp - 0x18], 8
jne 0x1003db37
mov edx, str.eight
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
cmp dword [ebp - 0x18], 9
jne 0x1003db4e
mov edx, str.nine
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003db5d
mov edx, str.Greater_than_9
mov ecx, 0x10078098
call fcn.100065fc
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.100041d1
jmp 0x1003e08e
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x64], 0x4ba3
mov dword [ebp - 0xa8], str.ubh_afelbz_pmc_umnu_michhsv_pza_sljzostqi_omey
cmp dword [ebp - 0x64], 0x4c1d
jle 0x1003dc29
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
and dword [ebp - 0x2c], 0
jmp 0x1003dbdd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x3b21
jge 0x1003dc29
and dword [ebp - 0x28], 0
jmp 0x1003dbf3
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1ce3
jge 0x1003dc27
mov eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x28]
cdq
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
mov ecx, 0x10078098
call fcn.10003fb2
jmp 0x1003dbec
jmp 0x1003dbd6
mov dword [ebp - 4], 2
cmp dword [ebp - 0x64], 0x4a63
jge 0x1003dc49
mov edx, dword [ebp - 0xa8]
mov ecx, 0x10078098
call fcn.100065fc
jmp 0x1003dc65
or dword [ebp - 4], 0xffffffff
jmp 0x1003dc6f
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x34], 0
mov dword [ebp - 0xd0], 0x3395cc9e
mov dword [ebp - 0x88], 0xb132
mov dword [ebp - 0xc8], 0x59cde89c
mov dword [ebp - 0x1c], 0
jmp 0x1003dcab
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1003dcbe
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x24], 0xcff0ea75
jmp 0x1003dca4
mov dword [ebp - 0x1c], 0
jmp 0x1003dcce
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1003dce4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x114], 0x7374fd5
jmp 0x1003dcc7
mov dword [ebp - 0x14], 1
jmp 0x1003dcf4
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1003dfbb
mov dword [ebp - 0x54], 0xffffffff
push 2
lea ecx, [ebp - 0xf0]
call fcn.10004264
mov dword [ebp - 4], 4
mov dword [ebp - 0xb0], 0xfffffffe
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x68], 0xfffffffc
push 3
lea ecx, [ebp - 0xfc]
call fcn.10004264
mov byte [ebp - 4], 5
push 0x9da
lea eax, [ebp - 0xbc]
push eax
push 0x6394
lea eax, [ebp - 0xf0]
push eax
push 0x5e1a
push 0
push 1
push 0x3b4f
push 0x6a66
push 0x3ee9
push 0x54a4
push 0
call fcn.1003e657
add esp, 0x30
push 0x380d
push 0x3c53
push 0x7d35
push 0
push 0
push 0x6343
push 1
push 0x2ac
push 0x683a
lea eax, [ebp - 0xfc]
push eax
push 0x4eac
push 0xa56
lea eax, [ebp - 0xbc]
push eax
push 0x59f9
call fcn.10033d4d
add esp, 0x38
mov dword [ebp - 0x34], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x24]
cmp ecx, dword [ebp + eax*4 - 0x24]
jg 0x1003ddea
mov dword [ebp - 0x4c], 1
jmp 0x1003ddee
and dword [ebp - 0x4c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
add eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + ecx*4 - 0x24], eax
jne 0x1003de0d
mov dword [ebp - 0x3c], 1
jmp 0x1003de11
and dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x24]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x30], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30]
mov dword [ebp + eax - 0x114], ecx
push 0
lea ecx, [ebp - 0xf0]
call fcn.10004303
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
cmp dword [ebp - 0x30], 0x1f0e
jge 0x1003de58
mov dword [ebp - 0x6c], 1
jmp 0x1003de5c
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x24]
cmp eax, dword [ebp - 0x6c]
jle 0x1003de71
mov dword [ebp - 0x5c], 1
jmp 0x1003de75
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xb0], eax
push 0
lea ecx, [ebp - 0xf0]
call fcn.10004303
cmp dword [eax], 0xc4eb
jge 0x1003de9c
mov dword [ebp - 0x7c], 1
jmp 0x1003dea0
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x7c], eax
je 0x1003deb1
mov dword [ebp - 0x40], 1
jmp 0x1003deb5
and dword [ebp - 0x40], 0
imul eax, dword [ebp - 0x40], 0x9c21
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x14]
jge 0x1003ded0
mov dword [ebp - 0x50], 1
jmp 0x1003ded4
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x24]
cmp dword [ebp - 0x50], eax
je 0x1003dee9
mov dword [ebp - 0x58], 1
jmp 0x1003deed
and dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x58], eax
jne 0x1003defe
mov dword [ebp - 0x60], 1
jmp 0x1003df02
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x68]
sub ecx, 0xeda7
mov edx, dword [ebp - 0x14]
mov edx, dword [ebp + edx*4 - 0x24]
imul edx, ecx
neg edx
cmp edx, dword [ebp + eax*4 - 0x24]
jl 0x1003df32
mov dword [ebp - 0xc0], 1
jmp 0x1003df39
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x24]
mov dword [ebp - 0x108], eax
mov eax, 0x6ba8dad4
inc eax
cmp eax, 1
jne 0x1003df5a
mov dword [ebp - 0x70], 1
jmp 0x1003df5e
and dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x24]
cmp dword [ebp - 0x70], eax
jg 0x1003df76
mov dword [ebp - 0xb8], 1
jmp 0x1003df7d
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x104], eax
mov esi, dword [ebp - 0x34]
push 0
lea ecx, [ebp - 0xfc]
call fcn.10004303
mov dword [eax], esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xfc]
call fcn.100042e7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf0]
call fcn.100042e7
jmp 0x1003dced
lea eax, [ebp - 0x34]
push eax
push 0x5be6
lea eax, [ebp - 0xc8]
push eax
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x88]
push eax
push 0
push 0x7612
call fcn.1002ce63
add esp, 0x24
mov eax, dword [ebp - 0x78]
cdq
mov ecx, 0x3e8
idiv ecx
mov esi, eax
mov eax, dword [ebp - 0x78]
cdq
mov ecx, 0x3e8
idiv ecx
mov edi, edx
mov ecx, dword [ebp - 0x8c]
call fcn.1002cc44
add eax, edi
add eax, esi
mov ecx, dword [ebp - 0x94]
mov dword [ecx], eax
jmp 0x1003e08e
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xa4], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
movzx eax, byte [eax]
test eax, eax
je 0x1003e050
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
jmp 0x1003e08e
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
movzx eax, byte [eax]
test eax, eax
je 0x1003e08e
push 0
push 0x33cf
push 0x252a
push 0x4964
call fcn.1003d1c4
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret