Function at 0x1002ce4d
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x10063c7d
call fcn.10062638
sub esp, 0x10c
mov byte [ebp - 0x34], cl
push ebx
push esi
mov esi, edx
mov dword [ebp - 0x30], esi
push edi
mov dword [ebp - 0x10], esp
test cl, cl
je 0x1002ce9f
mov byte [ebp - 0x25], 0
cmp byte [ebp - 0x25], 0
je 0x1002d613
push 0x5638
push 0x7e58
push 1
push 1
xor dl, dl
mov ecx, 0x4d55
call fcn.1002b8ab
add esp, 0x10
jmp 0x1002d613
mov edi, dword [ebp + 0xc]
xor ecx, ecx
mov eax, dword [ebp + 8]
inc ecx
mov dword [ebp - 0x38], edi
xor ebx, ebx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x18], ebx
jmp 0x1002cec9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2c], 0x558b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002cebb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xfffffff7
jmp 0x1002cfd3
mov dword [ebp - 0x14], 0x14c405b4
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jg 0x1002cfd0
push 2
lea ecx, [ebp - 0x54]
call fcn.10004f00
push ecx
lea eax, [ebp - 0x54]
mov dword [ebp - 4], ebx
push eax
push ecx
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x20], 0xa8551b32
push eax
mov cl, 1
mov dword [ebp - 0x20], ebx
call fcn.100298a6
mov eax, dword [ebp - 0x54]
add esp, 0x10
mov dword [eax], ebx
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x2c]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
test eax, eax
mov eax, dword [ebp - 0x14]
setle dl
xor ecx, ecx
cmp eax, edx
setg cl
xor edx, edx
mov dword [ebp - 0x20], ecx
imul ecx, dword [ebp - 0x20], 0x5d36
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x2c]
sub edx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, edx
mov eax, dword [ebp - 0x54]
setge cl
cmp ecx, dword [eax]
jge 0x1002cf8e
cmp dword [ebp - 0x2c], ebx
je 0x1002cf8e
xor eax, eax
inc eax
jmp 0x1002cf90
mov eax, ebx
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x54]
dec dword [eax]
jns 0x1002cf26
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.10004f62
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x1002cef6
xor ecx, ecx
inc ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff5
jle 0x1002cee0
mov dword [ebp - 0x18], 0x3a9f
cmp dword [ebp - 0x18], 0x3d35
jle 0x1002d057
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x24], 0x212c
mov dword [ebp - 0x20], eax
and eax, edi
lea ecx, [ebp - 0x100]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002d017
mov eax, dword [eax]
push eax
call fcn.1004a373
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x100]
call fcn.10005270
mov eax, dword [ebp - 0x20]
add eax, esi
dec dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
jne 0x1002cffd
inc esi
cmp esi, 0x17e7
jl 0x1002cff1
inc edi
cmp edi, 0x74c0
jl 0x1002cfef
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov esi, dword [ebp - 0x30]
mov edi, dword [ebp + 0xc]
xor eax, eax
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], ebx
mov word [ebp - 0x8c], ax
cmp dword [ebp - 0x18], 0x3a7d
jge 0x1002d07e
push str.zfebia_zooj_oxhncccrj_fmdblz
call fcn.1004a373
pop ecx
xor eax, eax
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp + 8], edi
ja 0x1002d0ec
push ebx
push eax
push 0x3b1a
push 0x73c1
push 0x51e8
push 0x4451
push 0x1e6f
push 0x4028
push 0x4843
push 0x3502
push 0x3485
mov edx, 0x23b5
push ebx
push 0x39e3
push 0x4384
lea ecx, [edx - 0x46]
call fcn.1002a567
lea eax, [ebp - 0x8c]
add esp, 0x38
cmp esi, eax
je 0x1002d605
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
jmp 0x1002d600
push dword [ebp - 0x5c]
movdqa xmm0, xmmword [0x10071380]
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0x14], 0xf782a183
push eax
push ebx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], ebx
movdqu xmmword [ebp - 0xdc], xmm0
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
call fcn.100076b8
mov byte [ebp - 4], 4
mov dword [ebp - 0x24], 0xffff
mov dword [ebp - 0x1c], 0x5a44
mov dword [ebp - 0x20], 0x2a67f8b4
mov dword [ebp - 0x20], 3
mov dword [ebp - 0x18], ebx
jmp 0x1002d15c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xcc], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002d14b
cmp dword [ebp - 0x14], ebx
jne 0x1002d17e
mov eax, dword [ebp - 0x14]
mov ecx, ebx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc0], 0xcb61
jmp 0x1002d181
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
je 0x1002d196
cmp dword [ebp - 0x24], ebx
je 0x1002d196
xor edx, edx
inc edx
jmp 0x1002d198
mov edx, ebx
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
imul eax, edx
xor edx, edx
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub ecx, eax
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0xffffffee
jmp 0x1002d1eb
push ecx
push 0x23d4
mov edx, 0xb71
mov cl, 1
call fcn.1002997a
inc dword [ebp - 0x1c]
pop ecx
pop ecx
cmp dword [ebp - 0x1c], 0xb
je 0x1002d1d4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 1
call fcn.10004f62
push 0x4b60
push 0x264
lea eax, [ebp - 0x38]
push eax
push 0x6782
push ecx
push 0x13da
push ecx
lea eax, [ebp - 0x48]
push eax
push ebx
push 0x643b
lea ecx, [ebp - 0x8c]
call fcn.1002cc56
mov dword [ebp - 0x1c], 0xf40f
add esp, 0x28
mov dword [ebp - 0x18], 0x7ea0d018
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0xcf59
mov dword [ebp - 0x74], 0x7e78
mov dword [ebp - 0x40], 0x47073e70
mov dword [ebp - 0x14], 0x5ed1
cmp dword [ebp - 0x14], 0x5f7b
jle 0x1002d2c0
push ebx
push ebx
push 0xde0
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov ecx, esi
mov ebx, edi
mov edi, dword [ebp - 0x40]
sar ebx, cl
mov ecx, edi
mov eax, ebx
shl eax, cl
mov ecx, 0x1007e2d8
cdq
push edx
push eax
call fcn.10004c4e
inc edi
cmp edi, 0x363a
jl 0x1002d289
mov edi, dword [ebp - 0x24]
inc esi
push 0
pop ebx
cmp esi, 0x557c
jl 0x1002d27d
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x3c8d
jl 0x1002d27b
mov byte [ebp - 4], 5
cmp dword [ebp - 0x14], 0x5bdd
jge 0x1002d300
mov edx, str.xckkla_eajpnxk_bgr_hcdonk_gglw
mov ecx, 0x1007e2d8
call fcn.1000714a
jmp 0x1002d300
push 4
mov dword [ebp - 4], 1
pop edi
mov dword [ebp - 0x14], ebx
jmp 0x1002d320
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], 0x8a52b4b5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002d30f
mov dword [ebp - 0x14], ebx
jmp 0x1002d338
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe8], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002d32b
cmp dword [ebp - 0x1c], ebx
je 0x1002d3ad
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa0]
setl dl
sub esi, edx
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
cmp esi, eax
mov eax, dword [ebp - 0xa0]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp eax, edx
setl cl
imul ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
cmp dword [ebp - 0x3c], eax
setge cl
cmp ecx, dword [ebp - 0x1c]
jg 0x1002d39e
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20], 0x5ab
test eax, eax
jne 0x1002d3be
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x48]
jae 0x1002d525
mov dword [ebp - 0x14], 0x119e
cmp dword [ebp - 0x14], 0x13c0
jle 0x1002d458
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x18], 0x120d
mov dword [ebp - 0x24], eax
mov esi, eax
mov dword [ebp - 0x20], 0xc35
mov eax, esi
lea ecx, [ebp - 0x118]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002d415
mov eax, dword [eax]
push eax
call fcn.1004a373
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x118]
call fcn.10005270
inc esi
dec dword [ebp - 0x20]
jne 0x1002d3fb
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x1c]
add eax, esi
dec dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
jne 0x1002d3f2
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x5ad6
jl 0x1002d3e6
push ebx
push 0x22ec
call dword [sym.imp.USER32.dll_ClientToScreen]
push 0x4e84
push 1
push 0x2c
mov dword [ebp - 0xbc], edi
mov edx, 0x4d36
push 0x7cc8
mov dword [ebp - 0xb8], edi
mov ecx, 0x5bcc
mov dword [ebp - 0xb4], edi
push 1
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0x18], 0xa473eb90
push ebx
call fcn.10029ba6
add esp, 0x18
mov dword [ebp - 0x18], ebx
jmp 0x1002d4e4
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1002d4d7
push ebx
push 0x69ee
push 0x736f
push 0x52f9
push 0x355f
push ebx
push 1
push 0x46b5
mov edx, 0x36ae
mov ecx, 0x1aa
call fcn.1002e0f2
add esp, 0x20
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbc]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1002d49f
cmp dword [ebp - 0x14], 0xfa0
jge 0x1002d4fe
push str.lkjfsmw_gbwgck_mbsrkqg_qxiwznsn_aqmtesy_vnulii
call fcn.1004a373
pop ecx
push ebx
lea eax, [ebp - 0x8c]
mov dword [ebp - 4], 1
push eax
push ecx
push ecx
lea eax, [ebp - 0x38]
mov ecx, 0x5509
push eax
call fcn.1002c990
add esp, 0x14
jmp 0x1002d3c7
push 1
lea ecx, [ebp - 0x98]
call fcn.10004f00
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x6c], ebx
push 3
mov dword [ebp - 0x70], 1
call fcn.10004f00
push 0x2bcd
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x58]
mov edx, 0x467e
push eax
push ecx
push ecx
push ebx
call fcn.1002a865
push 0x2057
push ebx
lea eax, [ebp - 0x58]
mov edx, 0x4fd8
push eax
lea eax, [ebp - 0xac]
mov ecx, 0x35c9
push eax
push 1
push 1
call fcn.10029ba6
mov eax, dword [ebp - 0x98]
add esp, 0x30
mov dword [eax], ebx
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x44], 0xddbc3707
push eax
lea eax, [ebp - 0x70]
push eax
push ecx
lea eax, [ebp - 0x44]
push eax
push ecx
push ecx
lea edx, [ebp - 0xac]
call fcn.1002e707
add esp, 0x18
cmp dword [ebp - 0x44], ebx
jne 0x1002d5d3
mov eax, dword [ebp - 0x98]
inc dword [eax]
cmp dword [eax], 0xa
jne 0x1002d59d
lea ecx, [ebp - 0xac]
call fcn.10004f62
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.10004f62
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x8c]
cmp eax, ecx
je 0x1002d605
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.100052b4
push ebx
push 1
lea ecx, [ebp - 0x8c]
call fcn.100053e2
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret