Function at 0x6327c0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push edi
sub esp, 0x10c
mov edx, dword [0x7f68f4]
or edx, dword [0x7f68f8]
or edx, dword [0x7f68ec]
mov eax, dword [0x7adbc0]
xor eax, ebp
mov dword [ebp - 8], eax
or edx, dword [0x7f68f0]
jne 0x6329da
push 0x104
lea edi, [ebp - 0x10c]
push edi
push str.FORT_BLOCKSIZE
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov edx, eax
test edx, edx
je 0x632825
cmp edx, 0x104
jae 0x63281c
inc edx
je 0x63282e
jmp 0x63283a
mov byte [ebp - 0x10c], 0
jmp 0x63283a
mov byte [ebp - 0x10c], 0
jne 0x63283a
mov dword [0x7f68f4], 0xffffffff
jmp 0x63287a
dec edx
lea eax, [ebp - 0x110]
push eax
push 2
push edx
push edi
call fcn.00640d30
add esp, 0x10
test eax, eax
jne 0x63285f
mov eax, dword [ebp - 0x110]
cmp eax, 0x7fffc000
jbe 0x63286b
mov dword [0x7f68f4], 0xfffffffe
jmp 0x63287a
add eax, 0x1ff
and eax, 0xfffffe00
mov dword [0x7f68f4], eax
push 0x104
push edi
push str.FORT_BUFFERCOUNT
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov edx, eax
test edx, edx
je 0x6328a7
cmp edx, 0x104
jae 0x63289e
inc edx
je 0x6328b0
jmp 0x6328bc
mov byte [ebp - 0x10c], 0
jmp 0x6328bc
mov byte [ebp - 0x10c], 0
jne 0x6328bc
mov dword [0x7f68f8], 0xffffffff
jmp 0x6328f0
dec edx
lea eax, [ebp - 0x110]
push eax
push 2
push edx
push edi
call fcn.00640d30
add esp, 0x10
test eax, eax
jne 0x6328df
mov eax, dword [ebp - 0x110]
cmp eax, 0x7f
jbe 0x6328eb
mov dword [0x7f68f8], 0xfffffffe
jmp 0x6328f0
mov dword [0x7f68f8], eax
push 0x104
push edi
push str.FORT_FMT_RECL
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov edx, eax
test edx, edx
je 0x63291d
cmp edx, 0x104
jae 0x632914
inc edx
je 0x632926
jmp 0x632932
mov byte [ebp - 0x10c], 0
jmp 0x632932
mov byte [ebp - 0x10c], 0
jne 0x632932
mov dword [0x7f68ec], 0xffffffff
jmp 0x632965
dec edx
lea eax, [ebp - 0x110]
push eax
push 2
push edx
push edi
call fcn.00640d30
add esp, 0x10
test eax, eax
jne 0x63295b
mov eax, dword [ebp - 0x110]
test eax, eax
jl 0x63295b
mov dword [0x7f68ec], eax
jmp 0x632965
mov dword [0x7f68ec], 0xfffffffe
push 0x104
push edi
push str.FORT_UFMT_RECL
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov edx, eax
test edx, edx
je 0x632992
cmp edx, 0x104
jae 0x632989
inc edx
je 0x63299b
jmp 0x6329a7
mov byte [ebp - 0x10c], 0
jmp 0x6329a7
mov byte [ebp - 0x10c], 0
jne 0x6329a7
mov dword [0x7f68f0], 0xffffffff
jmp 0x6329da
dec edx
lea eax, [ebp - 0x110]
push eax
push 2
push edx
push edi
call fcn.00640d30
add esp, 0x10
test eax, eax
jne 0x6329d0
mov eax, dword [ebp - 0x110]
test eax, eax
jl 0x6329d0
mov dword [0x7f68f0], eax
jmp 0x6329da
mov dword [0x7f68f0], 0xfffffffe
mov ecx, dword [ebp - 8]
mov dword [ebp - 8], 0
xor ecx, ebp
cmp ecx, dword [0x7adbc0]
jne 0x6329f4
lea esp, [ebp - 4]
pop edi
pop ebp
ret
call fcn.00693023
lea esi, [esi]
push ebp
mov ebp, esp
sub esp, 0x18
call fcn.00605570
mov dword [ebp - 4], eax
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
fild qword [ebp - 0xc]
fld dword [0x74b960]
mov eax, dword [ebp - 8]
shr eax, 0x1f
mov edx, dword [ebp + 8]
fxch st(1)
fadd qword [eax*8 + 0x74b8d0]
fdiv qword [0x74b930]
fsub dword [edx]
fstp xword [ebp - 0x18]
fld xword [ebp - 0x18]
fcompp
fnstsw ax
sahf
jae 0x632a4f
jp 0x632a4f
fldz
fstp xword [ebp - 0x18]
lea eax, [ebp - 4]
push eax
call fcn.006055e0
add esp, 4
fld xword [ebp - 0x18]
mov esp, ebp
pop ebp
ret