Function at 0x10033ca0
Capabilities:
Query environment variable

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x64
mov eax, dword [0x1006b040]
xor eax, esp
mov dword [esp + 0x60], eax
lea esi, [esp + 0x48]
mov dword [esp + 4], esi
mov eax, dword [esp + 4]
lea eax, [esp + 0x5c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 4]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov eax, dword [esp + 0x10]
mov dword [eax], 0xf
mov dword [esp + 0x20], edx
cmp dword [edx + 0x10], 0
sete byte [esp + 0xb]
mov dword [esp + 0x34], ecx
mov ecx, 0x36133cfd
mov eax, 0xbae25ef
jmp 0x10033d20
mov edx, dword [esp + 0x1c]
mov ecx, esi
push edx
call fcn.10034630
add esp, 4
mov ecx, 0x4591cd3e
mov eax, 0xfd90bc7
nop word [eax + eax]
cmp ecx, 0x190794b0
jle 0x10033d80
cmp ecx, 0x4591cd3d
jle 0x10033de0
cmp ecx, 0x55ed6c83
jle 0x10033e6b
cmp ecx, 0x61b7d158
jg 0x10033fd1
cmp ecx, 0x55ed6c84
je 0x10034455
cmp ecx, 0x560cfefa
jne 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x4c9a926a
mov ecx, 0x3e81b4e3
mov edx, 0x33b61d2f
cmove ecx, edx
jmp 0x10033d20
cmp ecx, 0xbf407c60
jle 0x10033e20
cmp ecx, 0xe066bf3f
jle 0x10033f0c
cmp ecx, 0xe78ee8ac
jg 0x10033ff2
cmp ecx, 0xe066bf40
je 0x10034470
cmp ecx, 0xe676c37f
jne 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x523e2c2a
mov ecx, 0xc7bb8f32
mov edx, 0x560cfefa
cmovl ecx, edx
jmp 0x10033d20
cmp ecx, 0x36133cfc
jle 0x10033f4b
cmp ecx, 0x3d9cdcd0
jle 0x1003443c
cmp ecx, 0x3d9cdcd1
je 0x1003448b
cmp ecx, 0x3e81b4e3
jne 0x10033d20
mov ecx, 0x61b7d159
jmp 0x10033d20
cmp ecx, 0xaf8053e8
jg 0x10033f93
cmp ecx, 0x842395f4
je 0x100344a6
cmp ecx, 0x8c2fd9c6
je 0x100344c1
cmp ecx, 0x8f3f4c34
jne 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x1a493c58
mov ecx, 0x3e81b4e3
mov edx, 0xe10fbf6
cmove ecx, edx
jmp 0x10033d20
cmp ecx, 0x4591cd3e
je 0x100344dd
cmp ecx, 0x45d5daac
je 0x100344e7
cmp ecx, 0x495aa5dc
jne 0x10033d20
lea eax, [esp + 0x58]
mov dword [esp + 0x14], eax
mov ecx, esi
mov edx, 0x104
push 0x104
call fcn.10034630
add esp, 4
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
cmp dword [ecx], 0x10
mov dword [esp + 0x28], esi
mov ecx, dword [esp + 4]
jb 0x10033ec6
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x20]
cmp dword [edx + 0x14], 0x10
jb 0x10033ed6
mov edx, dword [esp + 0x20]
mov edx, dword [edx]
push eax
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x18]
mov eax, 0x523e2c2a
mov ecx, 0x1a493c58
cmova eax, ecx
mov ecx, 0x4591cd3e
jmp 0x10033d20
cmp ecx, 0xbf407c61
je 0x10033cfe
cmp ecx, 0xc7bb8f32
je 0x10034502
cmp ecx, 0xcbb24d80
jne 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x7c8c4bc3
mov ecx, 0x2f41abc6
mov edx, 0xe066bf40
cmovl ecx, edx
jmp 0x10033d20
cmp ecx, 0x190794b1
je 0x1003451d
cmp ecx, 0x2f41abc6
je 0x10034538
cmp ecx, 0x33b61d2f
jne 0x10033d20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x28]
cmp ecx, 0x10
jae 0x100345ae
mov edi, dword [esp + 4]
jmp 0x100345b0
cmp ecx, 0xaf8053e9
je 0x10034553
cmp ecx, 0xbcc0f6bb
je 0x1003456e
cmp ecx, 0xbcead1a8
jne 0x10033d20
mov eax, dword [esp + 0x10]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x28]
jae 0x100345d2
mov eax, dword [esp + 4]
jmp 0x100345d4
cmp ecx, 0x61b7d159
je 0x10034589
cmp ecx, 0x67e18008
jne 0x10033d20
mov eax, dword [esp + 0x2c]
jmp 0x100345e6
cmp ecx, 0xe78ee8ad
je 0x10034593
cmp ecx, 0xe10fbf6
jne 0x10033d20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
and edx, 0x20ef0153
add edx, edx
mov esi, eax
sub esi, edx
lea edx, [eax + eax]
or edx, 0xbe21fd58
lea edi, [esi + edx]
add edx, esi
add edx, 0xe2cd03fb
lea esi, [edi*4 - 0x74cbf014]
add edi, edi
add edi, 0xc59a07f6
mov ebx, edi
or ebx, 0x41de02a6
sub esi, ebx
or edi, 0xbe21fd58
sub esi, edi
mov edi, edx
not edi
or edi, 0xa0ef0153
lea ebx, [esi + edi]
add esi, edi
add esi, 0x5f10fead
and edx, 0xa0ef0153
mov edi, edx
not edi
add edi, ebx
add edi, 0x5f10fead
mov ebx, eax
not ebx
and ebx, ecx
mov ebp, edi
and ebp, 0x4cbf933f
add edi, edi
sub edi, ebp
sub edx, esi
and edx, 0xb3406cc0
add edx, edi
lea edi, [ebx + edx]
add edi, 0x997f2680
add edx, ebx
mov esi, edi
or esi, 0xb3406cc0
not edi
or edi, 0xb3406cc0
add edi, esi
not edi
add edi, edx
mov edx, ecx
not edx
mov esi, edi
and esi, edx
lea ebx, [edi + edi]
add esi, ecx
sub ebx, esi
and edi, ecx
not edi
add edi, ebx
or edx, eax
lea eax, [edi + edx]
lea ecx, [edx + edi]
add ecx, 0xd179a5f7
lea edx, [eax + eax]
add edx, 0xa2f34bee
not edx
and edx, 0x5d0cb414
lea edx, [edx + eax*2]
add edx, 0xa2f34bee
mov eax, ecx
xor eax, 0xd179a5f5
add eax, edx
mov edx, ecx
or edx, 0x2e865a0a
not ecx
or ecx, 0x2e865a0a
add ecx, edx
sub eax, ecx
lea ecx, [eax - 0x58aeb91a]
mov edx, 0xd179a5f7
sub edx, eax
and edx, 1
add edx, eax
add edx, 0xa75146e6
xor ecx, 0xfffffffe
add ecx, edx
mov edx, 0x58aeb919
sub edx, eax
or edx, 1
sub ecx, edx
lea eax, [ecx + 1]
mov edx, eax
or edx, 0x78caecdc
add ecx, edx
add ecx, 1
not eax
or eax, 0x78caecdc
add eax, ecx
add eax, 0xe6a2649
imul ecx, eax, 0x173ae25
imul eax, eax, 0x2e75c4a
mov edx, ecx
xor edx, 0xf6fbd7a7
add edx, eax
add ecx, ecx
or ecx, 0xedf7af4e
sub edx, ecx
lea eax, [edx - 0x120850b1]
mov ecx, eax
and ecx, 0xc4b5d896
add ecx, edx
add ecx, 0xedf7af4f
mov edx, eax
xor edx, 0xc4b5d896
add edx, ecx
mov ecx, eax
xor ecx, 0x3b4a2769
add ecx, edx
not eax
or eax, 0x3b4a2769
add eax, ecx
add eax, 0x3b4a276b
mov ecx, eax
and ecx, 0xf6fbd7a7
mov edx, eax
xor edx, 0xf6fbd7a7
add edx, ecx
not eax
or eax, 0x9042858
sub edx, eax
imul eax, edx, 0xff9abdad
lea ecx, [eax + 0x2d1076f0]
mov edx, ecx
and edx, 0x75a05584
add eax, edx
add eax, 0x2d1076f0
mov edx, ecx
xor edx, 0x75a05584
add edx, eax
or ecx, 0x75a05584
sub edx, ecx
lea eax, [edx - 0x75a05585]
mov ecx, eax
and ecx, 0xe3a0d90b
add edx, edx
add edx, 0x14bf54f6
sub edx, ecx
not eax
add eax, edx
lea edx, [eax + ecx]
add eax, ecx
add eax, 0xe3a0d90c
not eax
mov ecx, eax
and ecx, 0x75a05584
lea ecx, [ecx + edx*2]
add ecx, 0xc741b218
or eax, 0x75a05584
add eax, ecx
add eax, 2
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x44]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x30]
mov eax, ecx
not eax
mov dword [esp + 0x40], eax
lea eax, [ecx + eax*2]
add eax, 1
and eax, 0x45cd4d7c
mov edi, ecx
mov esi, ecx
and edi, 0xba32b283
or edi, eax
mov ecx, edi
xor ecx, 0xba32b283
add ecx, eax
xor edi, 0x45cd4d7c
add edi, ecx
mov edx, esi
mov dword [esp + 0x24], esi
or edx, 0x45cd4d7c
mov ecx, edi
not ecx
add ecx, edx
mov eax, ebx
not ebx
mov ebp, eax
xor ebp, ecx
and ecx, ebx
add ecx, ebp
sub edi, edx
or edi, eax
lea edx, [ecx + edi]
add ecx, edi
add ecx, 1
mov edi, ecx
and edi, eax
add edi, ebx
add edi, edi
or ecx, ebx
add ecx, ecx
sub edi, ecx
add edi, edx
mov ebp, 0xfffffffe
sub ebp, edx
mov ecx, eax
and ecx, esi
or ebp, eax
add ebp, edi
sub ebp, ecx
lea edi, [ebp + 2]
mov ecx, eax
mov esi, eax
mov dword [esp + 0x3c], eax
neg ecx
mov eax, edi
not eax
mov edx, eax
and edx, ecx
add edx, ebp
add edx, 2
add edx, esi
xor edi, ecx
not edi
add edi, edx
or eax, ecx
sub edi, eax
mov edx, dword [esp + 0x24]
mov eax, edx
neg eax
lea ecx, [edi + 0x5df98c91]
xor ecx, eax
mov eax, ecx
sub eax, edx
not ecx
add ecx, eax
lea eax, [edi + ecx]
lea ebp, [edi + ecx]
add ebp, 0x5df98c92
lea ecx, [eax + eax]
add ecx, 0xbbf31924
or ecx, 0x440ce6dc
add eax, ecx
add eax, 0x5df98c92
mov ecx, ebp
xor ecx, 0x5df98c91
add ecx, eax
not ebp
add ebp, ecx
mov esi, edx
and esi, ebx
mov eax, edx
or eax, ebx
mov edi, dword [esp + 0x3c]
xor edx, edi
lea eax, [edx + eax*2]
mov ecx, esi
not ecx
add ecx, eax
lea eax, [ecx + ebp]
mov dword [esp + 0x38], eax
add ebp, ecx
add ebp, 5
add esi, esi
sub edx, esi
lea esi, [esp + 0x48]
or ebx, dword [esp + 0x40]
add ebx, edx
add ebx, dword [esp + 0x24]
mov eax, ebx
not eax
add eax, edi
sub ebx, edi
lea ecx, [eax + eax*2]
add ecx, ebx
add eax, eax
sub ecx, eax
lea eax, [ecx + ebx]
add ecx, ebx
add ecx, 1
lea edx, [eax + eax*2]
add edx, 4
sub ecx, edx
add eax, ecx
add eax, 2
mov ecx, ebp
and ecx, 0x2cd042b6
mov edx, dword [esp + 0x38]
add ecx, edx
add ecx, 5
mov edx, ebp
not edx
and edx, 0xd32fbd49
add edx, ecx
xor ebp, 0x2cd042b6
add ebp, edx
lea ecx, [eax + ebp]
lea edx, [eax + ebp]
add edx, 0x2cd042b8
mov eax, edx
and eax, 0x2cd042b6
add ecx, eax
add ecx, 0x2cd042b8
mov eax, edx
xor eax, 0x2cd042b6
add eax, ecx
or edx, 0x2cd042b6
sub eax, edx
lea ecx, [eax - 0xa553675]
and ecx, 0xdd84f3bd
lea edx, [eax + eax]
add edx, 0xeb559316
sub edx, ecx
mov ecx, 0x4a553674
sub ecx, eax
and ecx, 0x227b0c42
lea eax, [edx + ecx]
add eax, 0xbb09e77c
cmp eax, dword [esp + 0x1c]
mov eax, 0x4c9a926a
mov ecx, 0xa49fbe67
cmovb eax, ecx
mov ecx, 0x4591cd3e
jmp 0x10033d20
cmp ecx, 0x36133cfd
jne 0x100345f5
mov dword [esp], eax
mov ecx, 0x45d5daac
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0xfd90bc7
mov ecx, 0x3e81b4e3
mov edx, 0x67e18008
cmove ecx, edx
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x5fbb3cb3
mov ecx, 0x3e81b4e3
mov edx, 0x495aa5dc
cmove ecx, edx
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x1a493c58
mov ecx, 0x8f3f4c34
mov edx, 0x55ed6c84
cmovl ecx, edx
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x5fbb3cb3
mov ecx, 0xcbb24d80
mov edx, 0xe676c37f
cmovl ecx, edx
jmp 0x10033d20
cmp byte [esp + 0xb], 0
mov eax, 0x5fbb3cb3
mov ecx, 0x7c8c4bc3
cmovne eax, ecx
mov ecx, 0x4591cd3e
jmp 0x10033d20
mov ecx, 0x36133cfd
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x4c9a926a
mov ecx, 0x842395f4
mov edx, 0x190794b1
cmovl ecx, edx
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x523e2c2a
mov ecx, 0x3e81b4e3
mov edx, 0xbcead1a8
cmove ecx, edx
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0xfd90bc7
mov ecx, 0x3d9cdcd1
mov edx, 0xaf8053e9
cmovl ecx, edx
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0x7c8c4bc3
mov ecx, 0x3e81b4e3
mov edx, 0x3ae1b30d
cmove ecx, edx
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0xbae25ef
mov ecx, 0xbcc0f6bb
mov edx, 0xe78ee8ad
cmovl ecx, edx
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0xbae25ef
mov ecx, 0x3e81b4e3
mov edx, 0x8c2fd9c6
cmove ecx, edx
jmp 0x10033d20
mov ecx, 0x4591cd3e
jmp 0x10033d20
mov ecx, dword [esp]
cmp ecx, 0xa49fbe67
mov ecx, 0x3e81b4e3
mov edx, 0xbf407c61
cmove ecx, edx
jmp 0x10033d20
mov edi, dword [eax]
mov eax, dword [esp + 0x18]
add eax, edi
push dword [esp + 0x1c]
push 0
push eax
call fcn.100592c0
add esp, 0xc
mov eax, dword [esp + 0xc]
mov byte [edi + eax], 0
jmp 0x10033d0d
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [ecx], edx
mov ecx, dword [esp + 0xc]
mov byte [eax + ecx], 0
mov ecx, 0x4591cd3e
mov eax, 0x7c8c4bc3
jmp 0x10033d20
cmp ecx, 0x3ae1b30d
jne 0x10033d20
mov eax, dword [esp + 4]
movsd xmm0, qword [eax + 0x10]
mov ecx, dword [esp + 0x34]
movsd qword [ecx + 0x10], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.1005875a
add esp, 0x64
pop esi
pop edi
pop ebx
pop ebp
ret