Function at 0x10032bc0
Capabilities:
Query environment variable

Disassembly:
cmp byte [ecx], 0
je 0x10032c0a
push ebp
push edi
mov edi, edx
push esi
push ebx
mov esi, eax
mov ebx, ecx
sub esp, 0x4c
mov eax, dword [0x100d500c]
test eax, eax
js 0x10032c90
cmp esi, 4
je 0x10032c10
mov eax, dword [0x10102704]
mov edx, dword [0x100d500c]
cmp eax, 0xffffffff
je 0x10032d50
test edx, edx
jne 0x10032c43
mov eax, ebx
call fcn.10032a30
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
repz ret
cmp dword [0x10102704], 0xffffffff
jne 0x10032bfc
test edi, edi
je 0x10032c2d
cmp dword [0x100d500c], 0x100
je 0x10032e2f
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp], ebx
add eax, 0x40
mov dword [esp + 4], eax
call sub.msvcrt.dll_fputs
jmp 0x10032c03
movzx edx, byte [esi + 0x100df740]
mov dword [esp], eax
or dx, word [0x1010270a]
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movzx edx, dx
mov dword [esp + 4], edx
call esi
mov eax, ebx
sub esp, 8
call fcn.10032a30
movzx eax, word [0x10102708]
mov dword [esp + 4], eax
mov eax, dword [0x10102704]
mov dword [esp], eax
call esi
sub esp, 8
jmp 0x10032c03
mov dword [esp], str.TERM
call sub.msvcrt.dll_getenv
mov dword [esp], 0xfffffff4
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
sub esp, 4
cmp eax, 0xffffffff
mov dword [0x10102704], eax
je 0x10032d03
lea edx, [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
sub esp, 8
test eax, eax
je 0x10032d40
mov eax, dword [0x10102704]
cmp eax, 0xffffffff
je 0x10032d03
lea edx, [esp + 0x2a]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
sub esp, 8
movzx eax, word [esp + 0x32]
mov word [0x10102708], ax
and ax, 0xf0
mov word [0x1010270a], ax
mov dword [esp], str.AV_LOG_FORCE_NOCOLOR
call sub.msvcrt.dll_getenv
test eax, eax
je 0x10032dd5
mov dword [0x100d500c], 0
mov dword [esp], str.AV_LOG_FORCE_256COLOR
call sub.msvcrt.dll_getenv
test eax, eax
je 0x10032db0
shl dword [0x100d500c], 8
jmp 0x10032bdf
mov dword [0x10102704], 0xffffffff
jmp 0x10032d03
cmp edx, 1
je 0x10032df4
test edi, edi
je 0x10032d6d
cmp dword [0x100d500c], 0x100
je 0x10032e2f
cmp edx, 0x100
jne 0x10032c2d
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.e_48_5__ume_38_5__um_se_0m
add eax, 0x40
mov dword [esp], eax
call fcn.10032a00
jmp 0x10032c03
test ebp, ebp
je 0x10032bdf
mov dword [esp + 4], str.256color
mov dword [esp], ebp
call sub.msvcrt.dll_strstr
test eax, eax
jne 0x10032d31
jmp 0x10032bdf
mov dword [esp], str.AV_LOG_FORCE_COLOR
call sub.msvcrt.dll_getenv
test eax, eax
je 0x10032e5c
mov dword [0x100d500c], 1
jmp 0x10032d21
movzx eax, byte [esi + 0x100df740]
mov dword [esp + 0x10], ebx
mov dword [esp + 4], str.e__u_3_um_se_0m
mov edx, eax
shr al, 4
movzx eax, al
and edx, 0xf
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 0xc], edx
add eax, 0x40
mov dword [esp], eax
call fcn.10032a00
jmp 0x10032c03
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.e_48_5__ume_38_5__dm_se_0m
add eax, 0x40
mov dword [esp], eax
call fcn.10032a00
jmp 0x10032c03
xor eax, eax
cmp dword [0x10102704], 0xffffffff
setne al
mov dword [0x100d500c], eax
jmp 0x10032d21