Function at 0x10011080
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x44c
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x10025360
mov eax, dword [ebp + 8]
mov edi, ecx
lea ecx, [ebp - 0x18]
mov esi, dword fs:[0]
mov dword [ebp - 0x18], esi
mov dword fs:[0], ecx
lea ecx, [ebp - 0x458]
push eax
call fcn.1000e870
add esp, 4
mov eax, dword [ebp - 0x458]
test eax, eax
mov dword [ebp - 0x24], eax
je 0x100111d6
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x2c], edi
mov edi, 0x200
xorps xmm0, xmm0
mov dword [ebp - 0x48], 2
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x30], 0
movlps qword [ebp - 0x44], xmm0
mov dword [ebp - 0x38], eax
cmp edi, 0x201
jae 0x10011140
jmp 0x1001112e
jbe 0x1001122b
cmp edi, 0x201
jae 0x10011140
mov dword [ebp - 0x3c], 0x200
lea ebx, [ebp - 0x458]
mov esi, edi
jmp 0x1001117b
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
sub edi, esi
sub eax, esi
cmp eax, edi
jae 0x1001116c
mov dword [ebp - 0x10], 3
lea ecx, [ebp - 0x48]
mov edx, esi
push edi
call fcn.10033620
add esp, 4
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x20], esi
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
push esi
push ebx
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edi, eax
test eax, eax
jne 0x100111a2
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1001130e
cmp edi, esi
jne 0x10011120
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x10011329
add esi, esi
mov eax, 0xffffffff
cmovb esi, eax
mov edi, esi
cmp edi, 0x201
jb 0x1001112e
jmp 0x10011140
cmp byte [ebp - 0x454], 3
jne 0x10011222
mov ecx, dword [ebp - 0x450]
mov dword [ebp - 0x2c], edi
mov eax, dword [ecx]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ecx + 4]
mov dword [ebp - 0x10], 0
push eax
call dword [ecx]
add esp, 4
mov esi, dword [ebp - 0x24]
mov eax, dword [esi + 4]
cmp dword [eax + 4], 0
je 0x10011213
mov edx, dword [eax + 8]
mov ecx, dword [esi]
call fcn.10001030
mov ecx, esi
mov edx, 4
call fcn.10001030
mov edi, dword [ebp - 0x2c]
mov byte [edi + 0xc], 2
jmp 0x100112fa
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 3
cmp edi, edx
ja 0x10011349
lea ecx, [ebp - 0x58]
mov edx, ebx
push edi
call fcn.1000f7e0
add esp, 4
mov eax, dword [ebp - 0x50]
movzx edx, word [ebp - 0x4b]
movzx ecx, byte [ebp - 0x49]
mov esi, dword [ebp - 0x58]
mov edi, dword [ebp - 0x54]
movzx ebx, byte [ebp - 0x4c]
mov dword [ebp - 0x30], eax
mov word [ebp - 0x28], dx
mov byte [ebp - 0x26], cl
cmp dword [ebp - 0x20], 0
je 0x1001127d
mov ecx, dword [ebp - 0x34]
mov edx, 2
call fcn.10001030
cmp bl, 2
jne 0x100112c8
mov eax, dword [ebp - 0x2c]
mov byte [eax + 0xc], 2
mov eax, esi
cmp al, 3
jne 0x100112e7
mov eax, dword [edi]
mov ecx, dword [edi + 4]
mov dword [ebp - 0x10], 2
push eax
mov dword [ebp - 0x20], edi
call dword [ecx]
add esp, 4
mov esi, dword [ebp - 0x20]
mov eax, dword [esi + 4]
cmp dword [eax + 4], 0
je 0x100112ba
mov edx, dword [eax + 8]
mov ecx, dword [esi]
call fcn.10001030
mov ecx, esi
mov edx, 4
call fcn.10001030
jmp 0x100112e7
movzx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov bh, byte [ebp - 0x26]
mov edx, dword [ebp - 0x30]
mov word [ecx + 0xd], ax
mov byte [ecx + 0xf], bh
mov dword [ecx + 4], edi
mov dword [ecx], esi
mov dword [ecx + 8], edx
mov byte [ecx + 0xc], bl
cmp dword [ebp - 0x38], 0
je 0x100112fa
mov ecx, dword [ebp - 0x24]
mov edx, 2
call fcn.10001030
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
add esp, 0x44c
pop esi
pop edi
pop ebx
pop ebp
ret
mov bl, 2
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp dword [ebp - 0x20], 0
jne 0x10011270
jmp 0x1001127d
mov dword [ebp - 0x10], 3
mov ecx, str.internal_error:_entered_unreachable_code
mov edx, 0x28
push 0x10037f00
call fcn.10032a80
add esp, 4
jmp 0x10011358
mov ecx, edi
push 0x10037f10
call fcn.10032a70
add esp, 4
ud2