Function at 0x100323e0
Capabilities:
Query environment variable

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
mov esi, edx
mov eax, dword [0x10067040]
xor eax, esp
mov dword [esp + 0x4c], eax
lea edi, [esp + 0x34]
mov dword [esp + 4], edi
mov eax, dword [esp + 4]
lea eax, [esp + 0x48]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 4]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov eax, dword [esp + 0x10]
mov dword [eax], 0xf
cmp dword [edx + 0x10], 0
sete byte [esp + 0xb]
mov dword [esp + 0x2c], ecx
mov ecx, 0x1d7bf348
mov eax, 0xfad1347a
jmp 0x10032450
mov eax, dword [esp + 0x24]
mov ecx, 0xd4ce24fb
mov eax, 0x4dc88925
nop word [eax + eax]
cmp ecx, 0xdff3e935
jle 0x100324b0
cmp ecx, 0x1d7bf347
jle 0x10032510
cmp ecx, 0x3497a83f
jle 0x100325ab
cmp ecx, 0x462590ad
jg 0x100326a7
cmp ecx, 0x3497a840
je 0x1003271c
cmp ecx, 0x38b8dd12
jne 0x10032450
mov ecx, dword [esp]
cmp ecx, 0x220fafe0
mov ecx, 0x6e5969f2
mov edx, 0x462590ae
cmove ecx, edx
jmp 0x10032450
cmp ecx, 0xab83ba1e
jle 0x10032560
cmp ecx, 0xd4ce24fa
jle 0x100325ea
cmp ecx, 0xdfb9e5c8
jg 0x100326c9
cmp ecx, 0xd4ce24fb
je 0x10032726
cmp ecx, 0xdeca1ba9
jne 0x10032450
cmp byte [esp + 0xb], 0
mov eax, 0x220fafe0
mov ecx, 0x4dc88925
cmovne eax, ecx
mov ecx, 0xd4ce24fb
jmp 0x10032450
cmp ecx, 0xeeeba605
jle 0x10032629
cmp ecx, 0x13a6ac11
jle 0x100326f5
cmp ecx, 0x13a6ac12
je 0x10032730
cmp ecx, 0x17ffb636
jne 0x10032450
mov ecx, dword [esp]
cmp ecx, 0xb635c8d1
mov ecx, 0xdfb9e5c9
mov edx, 0x8c2193db
cmovl ecx, edx
jmp 0x10032450
cmp ecx, 0x9659d2c7
jg 0x10032668
cmp ecx, 0x800b5678
je 0x1003274b
cmp ecx, 0x8c2193db
je 0x10032765
cmp ecx, 0x8f127c51
jne 0x10032450
mov ecx, dword [esp]
cmp ecx, 0xec662360
mov ecx, 0x13a6ac12
mov edx, 0xa381a8f7
cmovl ecx, edx
jmp 0x10032450
cmp ecx, 0x1d7bf348
je 0x10032780
cmp ecx, 0x268bcc0d
je 0x1003278d
cmp ecx, 0x3223f57c
jne 0x10032450
mov ecx, dword [esp]
cmp ecx, 0x4dc88925
mov ecx, 0xeeeba606
mov edx, 0x9659d2c8
cmovl ecx, edx
jmp 0x10032450
cmp ecx, 0xab83ba1f
je 0x100327b1
cmp ecx, 0xabc76396
je 0x100329cc
cmp ecx, 0xb971bd4b
jne 0x10032450
mov ecx, dword [esp]
cmp ecx, 0x6b5ab82a
mov ecx, 0x6e5969f2
mov edx, 0xdfbb9fb4
cmove ecx, edx
jmp 0x10032450
cmp ecx, 0xdff3e936
je 0x100329e7
cmp ecx, 0xe6cbcfb9
je 0x1003243c
cmp ecx, 0xeded92b4
jne 0x10032450
mov ecx, dword [esp]
cmp ecx, 0x4dc88925
mov ecx, 0x6e5969f2
mov edx, 0x2e5e622
cmove ecx, edx
jmp 0x10032450
cmp ecx, 0x9659d2c8
je 0x10032a02
cmp ecx, 0x9fc9d6e1
je 0x10032a1d
cmp ecx, 0xa381a8f7
jne 0x10032450
mov ecx, dword [esp]
cmp ecx, 0xc4133ea3
mov ecx, 0x6e5969f2
mov edx, 0x800b5678
cmove ecx, edx
jmp 0x10032450
cmp ecx, 0x462590ae
je 0x10032a38
cmp ecx, 0x6e5969f2
jne 0x10032450
mov ecx, 0x3497a840
jmp 0x10032450
cmp ecx, 0xdfb9e5c9
je 0x10032aaf
cmp ecx, 0xdfbb9fb4
jne 0x10032450
mov edx, dword [esp + 0x1c]
mov ecx, edi
push edx
call fcn.10032b50
add esp, 4
jmp 0x10032b02
cmp ecx, 0xeeeba606
jne 0x10032b11
mov ecx, dword [esp]
cmp ecx, 0x6b5ab82a
mov ecx, 0xb971bd4b
mov edx, 0xeded92b4
cmovl ecx, edx
jmp 0x10032450
mov ecx, 0xd4ce24fb
jmp 0x10032450
mov ecx, 0x1d7bf348
jmp 0x10032450
mov ecx, dword [esp]
cmp ecx, 0xec662360
mov ecx, 0x6e5969f2
mov edx, 0xe6cbcfb9
cmove ecx, edx
jmp 0x10032450
mov eax, dword [esp + 0x10]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x20]
jae 0x10032aca
mov eax, dword [esp + 4]
jmp 0x10032acc
mov ecx, dword [esp]
cmp ecx, 0x874976ba
mov ecx, 0x6e5969f2
mov edx, 0xab83ba1f
cmove ecx, edx
jmp 0x10032450
mov dword [esp], eax
mov ecx, 0xdff3e936
jmp 0x10032450
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
cmp ecx, 0x10
jae 0x10032ae3
mov ebx, dword [esp + 4]
jmp 0x10032ae5
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov eax, edx
not eax
mov ebx, ecx
and ebx, eax
add ebx, eax
mov ebp, ecx
xor ebp, edx
and edx, ecx
lea edx, [ebx + edx*2]
mov ebx, ecx
xor ebx, eax
add ebx, ebx
sub edx, ebx
sub edx, ebp
mov ebx, ecx
sub ebx, edx
mov ebp, ecx
not ebp
add ebp, edx
sub edx, ecx
lea edx, [edx + ebx*2]
lea edx, [edx + ebp*2]
lea edx, [edx + ebx*2]
add edx, 2
or eax, ecx
mov ecx, eax
not ecx
lea ecx, [ecx + ecx*2]
add ecx, eax
add ecx, eax
lea eax, [ecx + eax*2]
add eax, 2
mov ebx, edx
or ebx, 0x16ed4276
or edx, 0xe912bd89
mov ecx, 0xe912bd88
sub ecx, ebx
sub ecx, edx
add edx, ebx
add edx, 0x16ed4277
mov ebx, edx
and ebx, eax
not eax
lea ebx, [eax + ebx*2]
or ecx, eax
add ecx, ebx
and eax, edx
add eax, ecx
imul eax, eax, 0x1b8c5cff
lea ecx, [eax + 0x36ccc175]
or ecx, 0xc2a8a8d1
add ecx, eax
mov edx, 0x9333e8a
sub edx, eax
or edx, 0xc2a8a8d1
lea eax, [ecx + edx]
add ecx, edx
add ecx, 0x36ccc176
mov edx, ecx
not edx
mov ebx, ecx
and ebx, 0x2d5cc9d
add eax, ebx
add eax, 0x36ccc176
xor ecx, 0x2d5cc9d
add ecx, eax
and edx, 0xfd2a3362
add edx, ecx
imul edx, edx, 0xfa555d01
lea eax, [edx - 0x1fad6b6e]
not eax
lea ecx, [edx + edx]
add ecx, 0xc0a52924
mov ebx, ecx
or ebx, 0xd542653c
sub ebx, ecx
xor ecx, 0x2abd9ac3
add ecx, ebx
mov ebx, 0xffad6b6d
sub ebx, edx
or ebx, 0xeaa1329e
sub ecx, ebx
or eax, 0x155ecd61
add eax, ecx
add eax, 0x155ecd63
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x30]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov edx, eax
neg edx
mov ecx, edx
or ecx, 0xab992061
mov ebx, eax
sub ebx, ecx
add edx, edx
xor edx, 0x573240c3
add edx, ebx
mov ebx, dword [esp + 0x28]
not ecx
lea ecx, [ecx + ecx*2]
add ecx, edx
mov edx, ebx
not edx
add eax, eax
sub ecx, eax
and edx, 0x78ba4974
or ebx, 0x78ba4974
lea eax, [ebx + edx]
add eax, 0x8745b68c
mov ebx, eax
xor ebx, 0x8745b68b
lea edx, [ebx + ecx*2]
add edx, 0xae648188
add ecx, 0x573240c4
or ebx, ecx
xor eax, 0x78ba4974
or eax, ecx
add eax, ebx
mov ecx, eax
not ecx
add ecx, edx
sub eax, edx
mov edx, ecx
and edx, 0xfffffffe
add edx, ecx
and eax, 1
add eax, edx
xor ecx, 0xfffffffe
add ecx, eax
mov eax, 0xfffffffe
sub eax, ecx
imul eax, eax, 0x19240b95
mov ecx, eax
or ecx, 0x97bae485
add ecx, eax
not eax
mov edx, eax
and edx, 0x68451b7a
lea ecx, [ecx + edx*2]
or eax, 0x97bae485
sub eax, ecx
add eax, 0xd08a36f5
imul ecx, eax, 0xb9cf1843
mov edx, ecx
or edx, 0x3b2ab9d7
or ecx, 0xc4d54628
add ecx, edx
imul eax, eax, 0x739e3086
sub eax, ecx
add eax, 0x1fe146ce
cmp eax, dword [esp + 0x1c]
mov eax, 0xb635c8d1
mov ecx, 0x6b5ab82a
cmovb eax, ecx
mov ecx, 0xd4ce24fb
jmp 0x10032450
mov ecx, dword [esp]
cmp ecx, 0xfad1347a
mov ecx, 0x6e5969f2
mov edx, 0xdeca1ba9
cmove ecx, edx
jmp 0x10032450
mov ecx, dword [esp]
cmp ecx, 0xfad1347a
mov ecx, 0x3223f57c
mov edx, 0x9fc9d6e1
cmovl ecx, edx
jmp 0x10032450
mov ecx, dword [esp]
cmp ecx, 0x220fafe0
mov ecx, 0x38b8dd12
mov edx, 0xabc76396
cmovl ecx, edx
jmp 0x10032450
mov ecx, dword [esp]
cmp ecx, 0xc4133ea3
mov ecx, 0x8f127c51
mov edx, 0x17ffb636
cmovl ecx, edx
jmp 0x10032450
lea eax, [esp + 0x44]
mov dword [esp + 0x14], eax
mov ecx, edi
mov edx, 0x104
push 0x104
call fcn.10032b50
add esp, 4
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
cmp dword [ecx], 0x10
mov dword [esp + 0x20], edi
mov ecx, dword [esp + 4]
jb 0x10032a6f
mov ecx, dword [esp + 0x34]
cmp dword [esi + 0x14], 0x10
mov edx, esi
jb 0x10032a79
mov edx, dword [esi]
push eax
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x18]
mov eax, 0xc4133ea3
mov ecx, 0x874976ba
cmova eax, ecx
mov ecx, 0xd4ce24fb
jmp 0x10032450
mov ecx, dword [esp]
cmp ecx, 0xb635c8d1
mov ecx, 0x6e5969f2
mov edx, 0x268bcc0d
cmove ecx, edx
jmp 0x10032450
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [ecx], edx
mov ecx, dword [esp + 0xc]
mov byte [eax + ecx], 0
jmp 0x10032440
mov ebx, dword [eax]
mov eax, dword [esp + 0x18]
add eax, ebx
push dword [esp + 0x1c]
push 0
push eax
call fcn.10056170
add esp, 0xc
mov eax, dword [esp + 0xc]
mov byte [ebx + eax], 0
mov ecx, 0xd4ce24fb
mov eax, 0xec662360
jmp 0x10032450
cmp ecx, 0x2e5e622
jne 0x10032450
mov eax, dword [esp + 4]
movsd xmm0, qword [eax + 0x10]
mov ecx, dword [esp + 0x2c]
movsd qword [ecx + 0x10], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x4c]
xor ecx, esp
call fcn.1005560a
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret