Function at 0x1000c24c
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10060c18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x80
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1000c4da
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], 0x7e56
mov dword [ebp - 0x60], str.sjcoc_ruhvilua_xairrii_xhbccxl_fmhrkumow_dwc
cmp dword [ebp - 0x3c], 0x80f5
jle 0x1000c338
and dword [ebp - 0x1c], 0
jmp 0x1000c2b7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x5c7d
jge 0x1000c338
and dword [ebp - 0x20], 0
jmp 0x1000c2cd
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x6cae
jge 0x1000c333
and dword [ebp - 0x24], 0
jmp 0x1000c2e3
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x16a
jge 0x1000c331
mov eax, dword [ebp - 0x1c]
cdq
idiv dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
mov eax, edx
cdq
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], edx
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
lea ecx, [ebp - 0x90]
call fcn.10001a84
pop ecx
pop ecx
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
call fcn.1000614a
push eax
call fcn.1004823d
pop ecx
lea ecx, [ebp - 0x90]
call fcn.10006140
jmp 0x1000c2dc
jmp 0x1000c2c6
jmp 0x1000c2b0
mov eax, dword [ebp - 0x44]
movzx eax, byte [eax]
test eax, eax
je 0x1000c44e
mov dword [ebp - 0x38], 0x61ff
mov dword [ebp - 0x48], str.klh_dfbvpunmx_ppmzpjdc_dpjvhj_ajayqnd_egyomoy_hbepyp_bvmhtbxmc_zfzzsywfj_fmvzjny_dkthu
cmp dword [ebp - 0x38], 0x6284
jle 0x1000c3fb
push 0xe70
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
and dword [ebp - 0x28], 0
jmp 0x1000c37d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x500e
jge 0x1000c3fb
and dword [ebp - 0x2c], 0
jmp 0x1000c393
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x2842
jge 0x1000c3f6
and dword [ebp - 0x30], 0
jmp 0x1000c3a9
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x67b0
jge 0x1000c3f4
and dword [ebp - 0x34], 0
jmp 0x1000c3bf
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x69b4
jge 0x1000c3f2
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
shl eax, cl
mov ecx, dword [ebp - 0x34]
shl eax, cl
cdq
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edx
push dword [ebp - 0x74]
push dword [ebp - 0x78]
mov ecx, 0x1007b9d8
call fcn.1000616a
jmp 0x1000c3b8
jmp 0x1000c3a2
jmp 0x1000c38c
jmp 0x1000c376
mov byte [ebp - 0x11], 0
and dword [ebp - 4], 0
cmp dword [ebp - 0x38], 0x5e79
jge 0x1000c419
mov edx, dword [ebp - 0x48]
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x1000c435
or dword [ebp - 4], 0xffffffff
jmp 0x1000c43f
lea eax, [ebp - 0x11]
push eax
push 0
call fcn.1000d4a1
pop ecx
pop ecx
jmp 0x1000c499
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
jmp 0x1000c47c
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax], 3
jge 0x1000c499
mov eax, dword [ebp - 0x18]
push dword [eax]
mov ecx, dword [ebp - 0x5c]
call fcn.100067a4
mov dword [eax], 0xac30bca0
jmp 0x1000c471
mov dword [ebp - 4], 2
cmp dword [ebp - 0x3c], 0x7b6c
jge 0x1000c4b2
push dword [ebp - 0x60]
call fcn.1004823d
pop ecx
jmp 0x1000c4ce
or dword [ebp - 4], 0xffffffff
jmp 0x1000c4d8
jmp 0x1000c500
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x68], eax
push 0
push 0x6383
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push 0x30a3
call fcn.1000d4c0
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret