Function at 0x660a1000
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 3
and esp, 0xfffffff8
add esp, 4
sub esp, 0xab0
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
push 3
call fcn.660a9794
pop ecx
xor eax, eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
cmp edi, 0x14
jg 0x660a10bb
test edi, edi
jle 0x660a10c5
xor ebx, ebx
mov edi, dword [esi + ebx*4]
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x660a1082
add ecx, 1
add eax, 1
mov dl, byte [ecx]
test dl, dl
jne 0x660a1076
lea edx, [eax + eax + 2]
push edx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp + ebx*4 - 0x50], eax
test eax, eax
je 0x660a1211
push dword [esi + ebx*4]
push 0x660c5250
push eax
call fcn.660abd90
add esp, 0xc
mov eax, dword [ebp + 8]
add ebx, 1
cmp ebx, eax
jl 0x660a1069
mov edi, dword [ebp + 8]
jmp 0x660a10c5
mov eax, 0x660c53cc
call fcn.660a124c
lea eax, [ebp - 0xaa4]
push 0x800
push eax
push 0x660c53e0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x660a10ea
mov dword [0x660c3a84], 1
cmp edi, 1
je 0x660a1234
push 0x660c5440
push dword [ebp - 0x4c]
call fcn.660abe20
add esp, 8
test eax, eax
je 0x660a1220
push 0x660c5434
push dword [ebp - 0x4c]
call fcn.660abe20
add esp, 8
test eax, eax
jne 0x660a1132
lea edx, [ebp - 0x50]
mov eax, edi
mov ecx, 4
call fcn.660a12c8
mov ebx, eax
jmp 0x660a11a5
push 0x660c5424
push dword [ebp - 0x4c]
call fcn.660abe20
add esp, 8
test eax, eax
jne 0x660a1159
lea edx, [ebp - 0x50]
mov eax, edi
mov ecx, 3
call fcn.660a12c8
mov ebx, eax
jmp 0x660a11a5
push 0x660c5418
push dword [ebp - 0x4c]
call fcn.660abe20
add esp, 8
test eax, eax
jne 0x660a117b
lea edx, [ebp - 0x50]
mov eax, edi
call fcn.660a1d9c
mov ebx, eax
jmp 0x660a11a5
push 0x660c5404
push dword [ebp - 0x4c]
call fcn.660abe20
add esp, 8
test eax, eax
je 0x660a119e
mov ebx, 1
mov eax, dword [ebp - 0x50]
call fcn.660a124c
jmp 0x660a11aa
call fcn.660a1bec
mov ebx, eax
cmp ebx, 1
je 0x660a1194
lea edx, [ebp - 0xa4]
push 0xa
push edx
push ebx
call fcn.660abe70
add esp, 0xc
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x5c], edx
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x58], ecx
lea esi, [ebp - 0x5c]
lea edi, [ebp - 0x2a4]
push esi
push 0x100
push edi
push 0x400
push 0xc002003e
push 0
push 0x3800
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea edx, [ebp - 0x2a4]
push edx
push section..data1
push 0x660c1760
call fcn.660abfb0
push ebx
call fcn.660ac030
add esp, 0x10
mov eax, 0x660c53cc
call fcn.660a124c
jmp 0x660a10ac
lea edx, [ebp - 0x50]
push edx
push edi
call fcn.660a24d0
add esp, 8
mov ebx, eax
jmp 0x660a11a5
mov eax, dword [ebp - 0x50]
call fcn.660a124c
mov ebx, 1
jmp 0x660a11aa