Function at 0x1005e421
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f58c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb8
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1005e6fb
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x60], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x34], 0xe84
mov dword [ebp - 0x4c], 0x1000e658
cmp dword [ebp - 0x34], 0x1013
jle 0x1005e4e9
and dword [ebp - 0x28], 0
jmp 0x1005e481
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x2525
jge 0x1005e4e3
and dword [ebp - 0x20], 0
jmp 0x1005e497
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x72de
jge 0x1005e4e1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
shl eax, cl
cdq
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xc4]
call fcn.100127de
pop ecx
pop ecx
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x58]
call fcn.10026416
push eax
call fcn.10079103
pop ecx
lea ecx, [ebp - 0xc4]
call fcn.1002640c
jmp 0x1005e490
jmp 0x1005e47a
call dword [sym.imp.USER32.dll_WaitMessage]
mov eax, dword [ebp - 0x40]
movzx eax, byte [eax]
test eax, eax
je 0x1005e69c
mov dword [ebp - 0x88], 3
mov dword [ebp - 0x84], 3
mov dword [ebp - 0x80], 3
mov dword [ebp - 0x7c], 3
lea ecx, [ebp - 0x29]
call fcn.100267fd
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xac]
call fcn.10026800
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa4]
call fcn.100267ac
and dword [ebp - 4], 0
mov dword [ebp - 0x48], 0xd4081c29
mov dword [ebp - 0x30], 0x716c
mov dword [ebp - 0x50], 0x1000e670
cmp dword [ebp - 0x30], 0x71cb
jle 0x1005e5fe
and dword [ebp - 0x14], 0
jmp 0x1005e57b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x257f
jge 0x1005e5f8
and dword [ebp - 0x18], 0
jmp 0x1005e591
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x75b8
jge 0x1005e5f3
and dword [ebp - 0x1c], 0
jmp 0x1005e5a7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x67bf
jge 0x1005e5f1
and dword [ebp - 0x24], 0
jmp 0x1005e5bd
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x7ac2
jge 0x1005e5ef
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
shl edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], edx
push dword [ebp - 0x70]
push dword [ebp - 0x74]
mov ecx, 0x10094c18
call fcn.10026436
jmp 0x1005e5b6
jmp 0x1005e5a0
jmp 0x1005e58a
jmp 0x1005e574
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
push 1
lea ecx, [ebp - 0x98]
call fcn.10026750
mov byte [ebp - 4], 1
cmp dword [ebp - 0x30], 0x70a3
jge 0x1005e625
mov edx, dword [ebp - 0x50]
mov ecx, 0x10094c18
call fcn.10029186
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x8c]
push eax
push 1
push 0x6dad
push 0x1106
push 0x31e7
push 0x262c
push 0x3d58
push 0x6db1
push 0x5836
call fcn.1005840c
add esp, 0x2c
push 0x3abe
push 1
push 1
push 0xe8a
lea eax, [ebp - 0x48]
push eax
call fcn.100585d1
add esp, 0x14
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x98]
call fcn.100267d2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.100267d2
jmp 0x1005e6e7
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x10]
mov dword [eax], 0
jmp 0x1005e6ca
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x10]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
cmp dword [eax], 2
jge 0x1005e6e7
mov eax, dword [ebp - 0x10]
push dword [eax]
mov ecx, dword [ebp - 0x5c]
call fcn.100267ee
mov dword [eax], 0x35d56974
jmp 0x1005e6bf
cmp dword [ebp - 0x34], 0xad9
jge 0x1005e6f9
push dword [ebp - 0x4c]
call fcn.10079103
pop ecx
jmp 0x1005e721
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x3c], eax
push 0x279d
push 0x28a6
push dword [ebp - 0x3c]
push dword [ebp - 0x44]
push 0
call fcn.1004c8df
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret