Function at 0x20098f8
Capabilities:
Query environment variable

Disassembly:
push 0x2c
mov eax, 0x201188e
call fcn.02010179
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp + 8]
push 0x20198f8
mov dword [ebp - 4], ebx
call fcn.02001939
xor edi, edi
inc edi
push str.Exception
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push ebx
mov dword [ebp - 0x20], eax
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x18]
push eax
push 0x2015654
push edi
push ebx
push 0x2015674
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jl 0x2009af9
push dword [ebp - 0x20]
push edi
push dword [ebp - 0x18]
call fcn.0200872d
mov dword [ebp - 0x1c], eax
mov eax, dword [esi]
cmp eax, ebx
je 0x20099ba
push dword [eax]
push dword [ebp - 0x18]
call fcn.020091ae
lea edx, [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push edx
push dword [ebp - 0x10]
push eax
call dword [ecx + 0x54]
cmp eax, ebx
jl 0x2009af9
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x20099aa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x20099ba
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
push dword [ebp - 0x18]
call fcn.0200876b
lea edx, [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push edx
push dword [ebp - 0x10]
push eax
call dword [ecx + 0x54]
cmp eax, ebx
jl 0x2009af9
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x20099ea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x20099fa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
push dword [ebp - 0x18]
call fcn.02008a98
lea edx, [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push edx
push dword [ebp - 0x10]
push eax
call dword [ecx + 0x54]
cmp eax, ebx
jl 0x2009af9
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x2009a2a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x2009a3a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
push dword [ebp - 0x18]
call fcn.0200955e
lea edx, [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push edx
push dword [ebp - 0x10]
push eax
call dword [ecx + 0x54]
cmp eax, ebx
jl 0x2009af9
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x2009a6d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x2009a7d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x1c]
push eax
call dword [ecx + 0x54]
cmp eax, ebx
jl 0x2009af9
lea eax, [ebp - 0x28]
push eax
call fcn.0200beae
push dword [eax]
mov dword [ebp - 4], edi
push str.TEMP
call dword [sym.imp.MSVCR80.dll_getenv]
pop ecx
push eax
push str._s_s.xml
push dword [ebp + 8]
call fcn.02006e1c
mov ecx, dword [ebp - 0x28]
add esp, 0x10
add ecx, 0xfffffff0
mov byte [ebp - 4], bl
call fcn.0200151a
mov ecx, dword [ebp + 8]
mov word [ebp - 0x38], 8
call fcn.02008c10
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x38]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x108]
push dword [ebp - 0x30]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x2009b09
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x2009b16
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x2009b23
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x2009b33
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x14], ebx
push dword [ebp - 0x20]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp + 8]
call fcn.02010218
ret 4