Function at 0x10032a40
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x10078cfe
call fcn.100777f0
sub esp, 0x58
push ebx
push esi
mov dword [ebp - 0x1c], 9
xor esi, esi
push edi
inc esi
mov edi, ecx
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x24], 0x12491e29
mov dword [ebp - 0x24], 0x9c9fb37b
mov dword [ebp - 0x24], 0x72c25fcc
push 2
call fcn.10008dd5
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10032a98
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
mov dword [eax + ecx*4], 0xe1dfe009
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10032a88
mov dword [ebp - 0x1c], ebx
jmp 0x10032af1
push 3
lea ecx, [ebp - 0x48]
call fcn.10008dd5
mov dword [ebp - 0x14], ebx
jmp 0x10032ac0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x30], 0x603fa75c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10032ab2
mov dword [ebp - 0x14], ebx
jmp 0x10032adb
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
mov dword [eax + ecx*4], 0x2d714f98
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10032acb
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x48]
dec dword [eax]
call fcn.10008fc3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 8
jge 0x10032aa3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.10008fc3
push 0x3160
push esi
push edi
push 0x6bba
call fcn.1002d5b5
add esp, 0x10
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], 8
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x24], 0x7cc73ee4
push esi
call fcn.10008dd5
mov dword [ebp - 0x1c], 0x24c6e12c
mov dword [ebp - 0x14], ebx
jmp 0x10032b4d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10032b3d
mov dword [ebp - 0x14], ebx
jmp 0x10032b61
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x28], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10032b57
mov dword [ebp - 0x18], 9
jmp 0x10032c8e
mov dword [ebp - 0x1c], 0x785b6478
mov dword [ebp - 0x1c], ebx
jmp 0x10032b8c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10032b7e
mov dword [ebp - 0x58], ebx
cmp dword [ebp - 0x58], 8
jl 0x10032c6e
mov dword [ebp - 0x14], 0xfffffff6
cmp dword [ebp - 0x14], ebx
je 0x10032bbd
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x14]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
push 0
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle bl
xor ecx, ecx
sub ebx, 0x52076f46
cmp ebx, eax
pop ebx
setg cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, 0x279
mov eax, dword [ebp - 0x18]
setl dl
sub edx, 0xa866
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, esi
setge al
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
xor edx, edx
inc eax
imul eax, dword [ebp - 0x58]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setne dl
xor ecx, ecx
sub edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setg cl
mov dword [eax], ecx
imul eax, ecx, 0xffff
xor ecx, ecx
cmp eax, 0xfffffff7
setne cl
mov dword [ebp - 0x1c], ecx
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 8
jge 0x10032b9f
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x10032c8b
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10032c86
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
dec dword [ebp - 0x1c]
jns 0x10032c76
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 7
jge 0x10032b72
cmp dword [ebp - 0x28], ebx
je 0x10032cfd
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp dword [eax], esi
setle cl
sub ecx, dword [eax]
inc ecx
cmp dword [ebp - 0x20], ecx
je 0x10032cb9
mov eax, ebx
cmp dword [ebp - 0x20], ebx
je 0x10032cbb
mov eax, esi
xor ecx, ecx
cmp eax, 0xa5b7
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
neg edx
mov eax, dword [ebp - 0x3c]
sbb edx, edx
inc edx
imul ecx, edx
add ecx, dword [eax]
mov eax, dword [ebp - 0x24]
sub ecx, eax
jne 0x10032cff
mov esi, ebx
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c]
mov dword [eax], esi
call fcn.10008fc3
push edi
call fcn.1003fe3b
mov dword [ebp - 0x1c], 0xffffffff
mov esi, eax
mov dword [ebp - 0x24], 0xf1d
pop ecx
mov dword [ebp - 0x1c], 0xffffffef
jmp 0x10032d57
mov dword [ebp - 0x24], 0x88adae8c
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10032d49
push 0x129d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffd
jne 0x10032d2c
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret