Function at 0x467ba0
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x4ae6b3
call fcn.004adbe8
sub esp, 0x88
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], 0xffffffff
xor ebx, ebx
mov dword [ebp - 0x18], ebx
xor esi, esi
inc esi
jmp 0x467bd5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x58], 0x5cc25bfc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x467bc7
cmp dword [ebp - 0x14], ebx
jne 0x467bea
cmp dword [ebp - 0x14], 0xfffffff9
je 0x467bee
cmp dword [ebp - 0x14], ebx
je 0x467bee
mov edx, esi
jmp 0x467bf0
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0xffffffff
setg cl
xor eax, eax
cmp edx, ecx
setge al
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x467c13
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x20], 0x3021
cmp dword [ebp - 0x20], 0x324d
jle 0x467c4b
mov edi, ebx
mov esi, edi
mov ebx, 0x1725
mov eax, esi
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
dec esi
dec ebx
jne 0x467c2c
inc edi
cmp edi, 0x7691
jl 0x467c25
xor esi, esi
inc esi
push 3
pop edi
push edi
lea ecx, [ebp - 0x94]
call fcn.0042fb3f
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x20], 0x2fb2
jge 0x467c75
mov edx, str.aqmfqfj_dsteyq_xhcylt_xzsdhtp_irzxcqh_tkatogbd_yussp_jloxfch_vshscal_ckkcmjztk_nwmmlhkm_dvf_jzymyukfs_zgflnxs
mov ecx, 0xabbe58
call fcn.004313d0
or dword [ebp - 4], 0xffffffff
jmp 0x467ca1
mov dword [ebp - 0x30], 0xb64b5c6f
push 4
pop ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], 0xad5befa1
mov dword [ebp - 0x18], 2
jmp 0x467d50
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x14], ebx
jmp 0x467cda
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x70], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x467cd0
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], edi
jg 0x467d4d
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x70], ebx
jne 0x467d16
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x70]
mov ecx, 0xa266d210
sub ecx, eax
xor eax, eax
cmp ecx, 0x20b963ab
setl al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, 7
mov ecx, ebx
je 0x467d18
mov ecx, esi
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x70]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x70]
sub ecx, edx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setle dl
sub edx, 9
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x68]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x467ce7
push 4
pop ecx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffeb
jge 0x467cc1
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0xed1e12aa
mov dword [ebp - 0x18], 0x5d6c05ba
mov dword [ebp - 0x34], 0xde0b4074
mov dword [ebp - 0x18], ebx
jmp 0x467d8a
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x467d87
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffe
jle 0x467d77
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x18], 0x6dc660f7
push edi
lea ecx, [ebp - 0x7c]
call fcn.0042fb3f
mov dword [ebp - 0x14], ebx
push 4
pop ecx
jmp 0x467dcb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x467dbd
mov dword [ebp - 0x14], ebx
jmp 0x467de1
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x7c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x467dd5
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
test edx, edx
jne 0x467df7
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
imul ecx, eax, 0x4bca
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0xea0e
setge al
xor ecx, ecx
cmp eax, esi
setle cl
mov eax, dword [ebp - 0x28]
sub eax, ecx
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x7c]
call fcn.0042fc11
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x24]
call fcn.00467062
push 4
lea ecx, [ebp - 0x40]
call fcn.0042fb3f
push 4
pop edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], ebx
jmp 0x467e80
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x467e73
mov dword [ebp - 0x14], ebx
jmp 0x467e98
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5c], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x467e8a
mov dword [ebp - 0x14], ebx
jmp 0x467f3a
mov dword [ebp - 0x28], esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
cmp dword [eax + ecx*4], ebx
je 0x467ec4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
cmp dword [eax + ecx*4], ebx
jne 0x467f43
jmp 0x467f37
push edi
lea ecx, [ebp - 0x88]
call fcn.0042fb3f
mov dword [ebp - 0x18], ebx
jmp 0x467ee4
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x467ed5
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x40]
mov dword [eax + edx*4], ecx
test ecx, ecx
je 0x467f27
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
cmp dword [eax + ecx*4], ebx
je 0x467f12
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
or ecx, 0xffffffff
sub ecx, eax
mov eax, esi
jne 0x467f29
mov eax, ebx
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x88]
call fcn.0042fc11
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x467ea5
lea ecx, [ebp - 0x40]
call fcn.0042fc11
mov dword [ebp - 0x24], ebx
jmp 0x467f5e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x54], 0x2c5b641b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x467f50
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x467f7d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x60], 0x5cc25bfc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x467f6f
cmp dword [ebp - 0x14], ebx
jne 0x467f94
cmp dword [ebp - 0x14], 0xfffffff9
je 0x467f92
cmp dword [ebp - 0x14], ebx
jne 0x467f94
mov esi, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0xffffffff
setg cl
xor eax, eax
cmp esi, ecx
setge al
mov dword [ebp - 0x60], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x467fb8
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov eax, dword [ebp - 0x94]
cmp dword [eax + 4], ebx
jne 0x467fda
mov eax, dword [ebp - 0x30]
push 4
pop ecx
sub ecx, eax
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], eax
call fcn.0046731d
lea ecx, [ebp - 0x94]
call fcn.0042fc11
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret