Function at 0x1002e499
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x100582d9
call fcn.10056ec8
sub esp, 0x6c
push ebx
push esi
mov dword [ebp - 0x1c], 0x260b
mov esi, ecx
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
cmp dword [ebp - 0x1c], 0x298c
mov dword [ebp - 0x18], esi
jle 0x1002e4fd
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
lea eax, [ebx + esi]
mov ecx, 0x10072d38
or eax, edi
cdq
push edx
push eax
call fcn.10011982
inc ebx
cmp ebx, 0x3ff9
jl 0x1002e4ca
inc esi
push 0
pop ebx
cmp esi, 0x526f
jl 0x1002e4c7
inc edi
cmp edi, 0x3c76
jl 0x1002e4c5
mov esi, dword [ebp - 0x18]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x1c], 0x2467
jge 0x1002e518
mov edx, str.ugzyxa_sufukku_ompybg_mnb
mov ecx, 0x10072d38
call fcn.10016228
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 8], 0
je 0x1002e5ff
mov dword [esi], 0xfffffffb
cmp dword [esi], 0xffffffff
jne 0x1002e71f
mov dword [ebp - 0x20], 0x10b3
cmp dword [ebp - 0x20], 0x1485
jle 0x1002e5b0
push ebx
push ebx
push 0xa31
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov esi, ebx
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
and eax, edi
lea ecx, [ebp - 0x48]
and eax, esi
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e57b
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.100122d9
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x18a3
jl 0x1002e562
inc edi
cmp edi, 0x1442
jl 0x1002e55d
inc esi
cmp esi, 0x1f26
jl 0x1002e55b
mov esi, dword [ebp - 0x18]
cmp dword [esi], ebx
jne 0x1002e71f
cmp dword [ebp - 0x20], 0xd30
jge 0x1002e5cc
push str.rcsueam_fpqpzy_guosnqeio_uuczywf_xpgxvmcb_ehqiykbju_iqfnbtu_qisieiaf_jpmzfs_ucr
call fcn.100410e1
pop ecx
or dword [ebp - 4], 0xffffffff
inc dword [esi]
jmp 0x1002e52c
mov dword [ebp - 0x2c], 0xc4f
cmp dword [ebp - 0x2c], 0xd3d
jle 0x1002e697
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x1c], 0x1fc
mov dword [ebp - 0x20], eax
mov esi, edi
mov dword [ebp - 0x30], ebx
mov ecx, eax
mov edi, ebx
sar esi, cl
mov eax, esi
lea ecx, [ebp - 0x60]
and eax, edi
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e651
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x60]
call fcn.100122d9
inc edi
cmp edi, 0x16e9
jl 0x1002e638
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
add eax, esi
dec dword [ebp - 0x1c]
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
jne 0x1002e62d
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x2f09
jl 0x1002e621
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x4d0f
jl 0x1002e61e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1002e70b
mov dword [ebp - 0x28], 0x32cc
cmp dword [ebp - 0x28], 0x33ca
jle 0x1002e6f0
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x78]
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e6cc
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.100122d9
inc edi
cmp edi, 0x2b99
jl 0x1002e6b4
inc esi
cmp esi, 0x4d4
jl 0x1002e6b2
xor cl, cl
call fcn.1002a918
cmp dword [ebp - 0x28], 0x3009
jge 0x1002e70b
push str.vrzrfmvvs_gwnyhwaw_cllgxenvq_bhdqriq_tirlbsqqp_ngi_kuo_rvpkjdnin_nkcbmtx_rnan_nxv_mqtoipn_idaol_hnmq
call fcn.100410e1
pop ecx
cmp dword [ebp - 0x2c], 0xb77
jge 0x1002e71f
push str.rsaqsbj_ppi_nclpz_qvi
call fcn.100410e1
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret