Function at 0x10009df0
Capabilities:
Get thread local storage value
Query environment variable

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1000bfd1
push eax
mov eax, dword [0x10011724]
mov dword fs:[0], esp
sub esp, 0x454
push ebx
xor ebx, ebx
cmp eax, ebx
jne 0x1000a032
lea eax, [esp + 0x48]
mov dword [esp + 0x10], ebx
push eax
push str.QMDispatch.QMLibrary
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x48]
push ecx
push 0x1000d7e0
push 7
push ebx
push edx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov eax, dword [esp + 0x10]
cmp eax, ebx
jne 0x10009e67
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x454]
mov dword fs:[0], ecx
add esp, 0x460
ret
lea edx, [esp + 4]
mov dword [esp + 4], ebx
mov ecx, dword [eax]
push edx
push 0x1000d7d0
push eax
call dword [ecx]
xor eax, eax
lea edx, [esp + 0xc]
mov dword [esp + 0x16], eax
push edx
mov dword [esp + 0x1e], eax
push 0x400
mov dword [esp + 0x26], eax
lea edx, [esp + 0x10]
mov word [esp + 0x2a], ax
mov eax, dword [esp + 0xc]
push 1
mov word [esp + 0x20], bx
mov dword [esp + 0x14], str.GetQMLibraryObject
mov ecx, dword [eax]
push edx
push 0x1000d7c0
push eax
mov dword [esp + 0x478], ebx
call dword [ecx + 0x14]
cmp eax, ebx
jl 0x10009ed8
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x14]
push eax
push ecx
lea ecx, [esp + 0xc]
call fcn.1000a050
cmp word [esp + 0x14], 9
je 0x10009f11
mov eax, dword [esp + 4]
mov dword [esp + 0x460], 0xffffffff
cmp eax, ebx
je 0x10009ef9
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x454]
mov dword fs:[0], ecx
add esp, 0x460
ret
mov eax, dword [esp + 0x1c]
push esi
push edi
mov dword [0x10011724], eax
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x61]
mov byte [esp + 0x60], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x60]
push 0x400
push ecx
push str.QVMInstanceTlsIndex
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea edx, [esp + 0x60]
push edx
call dword [sym.imp.MSVCRT.dll_atoi]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov word [esp + 0x40], 3
mov dword [esp + 0x48], eax
mov esi, dword [0x10011724]
mov byte [esp + 0x468], 1
cmp esi, ebx
mov dword [esp + 0x3c], esi
je 0x10009f81
mov eax, dword [esi]
push esi
call dword [eax + 4]
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push 0x400
push 1
mov dword [esp + 0x20], str.SetRunTimeParam
mov ecx, dword [esi]
push eax
push 0x1000d7c0
push esi
mov byte [esp + 0x480], 2
call dword [ecx + 0x14]
cmp eax, ebx
jl 0x10009fe8
push ebx
push ebx
lea eax, [esp + 0x34]
lea ecx, [esp + 0x48]
push ebx
push eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x20]
push 1
push 0x400
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], 1
mov dword [esp + 0x50], ebx
mov edx, dword [esi]
push 0x1000d7c0
push ecx
push esi
call dword [edx + 0x18]
mov eax, dword [esp + 0x18]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov edi, dword [0x10011724]
cmp esi, ebx
mov byte [esp + 0x468], 1
je 0x1000a00a
mov eax, dword [esi]
push esi
call dword [eax + 8]
lea ecx, [esp + 0x40]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x468], 0xffffffff
cmp eax, ebx
je 0x1000a02e
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, edi
pop edi
pop esi
mov ecx, dword [esp + 0x458]
pop ebx
mov dword fs:[0], ecx
add esp, 0x460
ret