Function at 0x100538ff
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100886a7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x110
push esi
push 1
lea ecx, [ebp - 0x50]
call fcn.1001b841
and dword [ebp - 4], 0
mov dword [ebp - 0x40], 0x7c9d5fac
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x24], 0xcb4e76ab
push 4
lea ecx, [ebp - 0x38]
call fcn.1001b841
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0xe8], 0x9adb
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x18], 0
jmp 0x1005397e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10053997
push dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov dword [eax], 0x1f665683
jmp 0x10053977
mov dword [ebp - 0x18], 0
jmp 0x100539a7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x100539c0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov dword [eax], 0xa9864ba8
jmp 0x100539a0
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x10053a86
cmp dword [ebp - 0x58], 0
je 0x100539e9
mov dword [ebp - 0xa0], 1
jmp 0x100539f0
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0
je 0x10053a08
cmp dword [ebp - 0x2c], 0
jne 0x10053a08
and dword [ebp - 0xe4], 0
jmp 0x10053a12
mov dword [ebp - 0xe4], 1
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [eax]
jg 0x10053a32
mov dword [ebp - 0xc0], 1
jmp 0x10053a39
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xa8], eax
push 1
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xa8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x40]
jl 0x10053a71
mov dword [ebp - 0x68], 1
jmp 0x10053a75
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x68]
jne 0x10053a86
and dword [ebp - 0xe0], 0
jmp 0x10053a90
mov dword [ebp - 0xe0], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xe0], eax
jl 0x10053aa4
mov dword [ebp - 0x70], 1
jmp 0x10053aa8
and dword [ebp - 0x70], 0
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x70]
jne 0x10053ac5
mov dword [ebp - 0xa4], 1
jmp 0x10053acc
and dword [ebp - 0xa4], 0
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa4]
jge 0x10053ae9
mov dword [ebp - 0x78], 1
jmp 0x10053aed
and dword [ebp - 0x78], 0
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x78]
cmp ecx, dword [eax]
jne 0x10053b0a
mov dword [ebp - 0xac], 1
jmp 0x10053b11
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xac], eax
jne 0x10053b28
cmp dword [ebp - 0x10], 0
jne 0x10053b28
and dword [ebp - 0x80], 0
jmp 0x10053b2f
mov dword [ebp - 0x80], 1
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov eax, dword [eax]
sub eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x58]
jg 0x10053e62
mov dword [ebp - 0x54], 0xe8dce9db
mov dword [ebp - 0x44], 0xaee4
mov dword [ebp - 0xd4], 0x98381653
mov dword [ebp - 0x10], 0
jmp 0x10053b6f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x10053e5d
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
cmp dword [ebp - 0x54], 0
jne 0x10053ba7
mov eax, 0xce72
test eax, eax
jne 0x10053ba7
and dword [ebp - 0xb4], 0
jmp 0x10053bb1
mov dword [ebp - 0xb4], 1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [eax]
jle 0x10053bd2
mov dword [ebp - 0x108], 1
jmp 0x10053bd9
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x10c], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x40]
cmp dword [eax], ecx
je 0x10053c0a
mov dword [ebp - 0xfc], 1
jmp 0x10053c11
and dword [ebp - 0xfc], 0
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov esi, dword [ebp - 0x44]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
imul esi, dword [eax]
cmp esi, 0xa0c2010
jg 0x10053c40
mov dword [ebp - 0x88], 1
jmp 0x10053c47
and dword [ebp - 0x88], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x88]
cmp ecx, dword [eax]
jg 0x10053c68
mov dword [ebp - 0xbc], 1
jmp 0x10053c6f
and dword [ebp - 0xbc], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [eax]
je 0x10053c90
mov dword [ebp - 0x90], 1
jmp 0x10053c97
and dword [ebp - 0x90], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x90]
cmp ecx, dword [eax]
jne 0x10053cb8
mov dword [ebp - 0xc4], 1
jmp 0x10053cbf
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 0x737b
jle 0x10053cd7
mov dword [ebp - 0x98], 1
jmp 0x10053cde
and dword [ebp - 0x98], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [eax]
jle 0x10053cff
mov dword [ebp - 0x100], 1
jmp 0x10053d06
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x2c]
je 0x10053d1d
mov dword [ebp - 0xcc], 1
jmp 0x10053d24
and dword [ebp - 0xcc], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xcc]
cmp ecx, dword [eax]
jge 0x10053d42
mov dword [ebp - 0x5c], 1
jmp 0x10053d46
and dword [ebp - 0x5c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x5c]
add ecx, 0x2bc90638
mov esi, dword [eax]
sub esi, ecx
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
add esi, dword [eax]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
sub esi, dword [eax]
mov dword [ebp - 0xd4], esi
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x11c], eax
mov esi, dword [ebp - 0xd4]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
cmp esi, dword [eax]
jl 0x10053db0
mov dword [ebp - 0xdc], 1
jmp 0x10053db7
and dword [ebp - 0xdc], 0
push 1
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xdc]
cmp ecx, dword [eax]
jne 0x10053ddd
cmp dword [ebp - 0x2c], 0
je 0x10053ddd
mov dword [ebp - 0xc8], 1
jmp 0x10053de4
and dword [ebp - 0xc8], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xc8]
sub ecx, dword [eax]
cmp ecx, 1
jl 0x10053e08
mov dword [ebp - 0xb0], 1
jmp 0x10053e0f
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xb0], eax
jge 0x10053e26
mov dword [ebp - 0xd8], 1
jmp 0x10053e2d
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x40]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
mov dword [eax], esi
mov byte [ebp - 0x1a], 0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x10053e58
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
jmp 0x10053b68
jmp 0x1005406d
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x14], 0xfffffff1
jmp 0x10053e80
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x20
jg 0x10054000
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x10], 0xebcd
jne 0x10053eb9
mov dword [ebp - 0xb8], 1
jmp 0x10053ec0
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xfffffffa
jg 0x10053ed8
cmp dword [ebp - 0x24], 0
jne 0x10053ed8
and dword [ebp - 0xd0], 0
jmp 0x10053ee2
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
neg eax
cmp eax, dword [ebp - 0x3c]
jle 0x10053efe
mov dword [ebp - 0x60], 1
jmp 0x10053f02
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x28]
jne 0x10053f16
mov dword [ebp - 0x64], 1
jmp 0x10053f1a
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x3c], 0
je 0x10053f4b
mov eax, dword [ebp - 0x84]
sub eax, 0x34bea37b
jne 0x10053f42
cmp dword [ebp - 0x28], 0
je 0x10053f4b
mov dword [ebp - 0x6c], 1
jmp 0x10053f4f
and dword [ebp - 0x6c], 0
mov esi, dword [ebp - 0x6c]
add esi, 0xa1d0
push 3
lea ecx, [ebp - 0x38]
call fcn.1001b8b2
cmp esi, dword [eax]
jge 0x10053f6f
mov dword [ebp - 0x74], 1
jmp 0x10053f73
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x74], eax
je 0x10053f84
mov dword [ebp - 0x7c], 1
jmp 0x10053f88
and dword [ebp - 0x7c], 0
push 0
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax]
jl 0x10053fa5
mov dword [ebp - 0x8c], 1
jmp 0x10053fac
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x8c], eax
jg 0x10053fc6
mov dword [ebp - 0x94], 1
jmp 0x10053fcd
and dword [ebp - 0x94], 0
mov dword [ebp - 0x20], 0x83d52604
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x94]
jge 0x10053feb
mov dword [ebp - 0x9c], 1
jmp 0x10053ff2
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x24], eax
jmp 0x10053e79
mov dword [ebp - 0x20], 0
jmp 0x10054010
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe5
jle 0x1005406d
mov dword [ebp - 0x28], 0
jmp 0x10054026
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 5
jge 0x1005406b
mov dword [ebp - 0xf4], 0x5eb91548
mov dword [ebp - 0x14], 0
jmp 0x10054046
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1005405f
push dword [ebp - 0x14]
lea ecx, [ebp - 0x50]
call fcn.1001b8b2
mov dword [eax], 0xe582b275
jmp 0x1005403f
mov dword [ebp - 0xf4], 3
jmp 0x1005401f
jmp 0x10054009
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x10054081
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.1001b8ad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.1001b8ad
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100540cb
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
movzx eax, byte [eax]
test eax, eax
je 0x100540c9
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
jmp 0x100540fb
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
movzx eax, byte [eax]
test eax, eax
je 0x100540fb
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret