Function at 0x100b2189
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100bddca
mov eax, dword fs:[0]
push eax
sub esp, 0x248
mov eax, dword [0x100ed3e0]
xor eax, ebp
mov dword [ebp - 0x2c], eax
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
and dword [ebp - 0x24c], 0
mov dword [ebp - 0x24], 1
and word [ebp - 0x23c], 0
push 0x208
push 0
lea eax, [ebp - 0x23a]
push eax
call fcn.10071b20
add esp, 0xc
push dword [ebp + 0xc]
lea ecx, [ebp - 0x240]
call fcn.10003c8d
and dword [ebp - 4], 0
push 0
push 0x100d3e70
lea ecx, [ebp - 0x240]
call fcn.100107fd
test eax, eax
jl 0x100b2267
push 0x104
lea eax, [ebp - 0x23c]
push eax
push dword [ebp + 0x10]
call fcn.10024690
add esp, 0xc
movzx eax, al
test eax, eax
je 0x100b2262
lea eax, [ebp - 0x23c]
push eax
push str._HostInstallPackDir_
lea ecx, [ebp - 0x240]
call fcn.10024d23
test eax, eax
je 0x100b2262
push 0x104
lea ecx, [ebp - 0x240]
call fcn.10010b64
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.10075257
add esp, 0xc
jmp 0x100b2315
push 0
push str._HostInstallPackExe_
lea ecx, [ebp - 0x240]
call fcn.100107fd
test eax, eax
jl 0x100b2296
push 0x104
lea eax, [ebp - 0x23c]
push eax
push dword [ebp + 0x10]
call fcn.10024c0d
add esp, 0xc
jmp 0x100b2315
push 0
push 0x100d3ef4
lea ecx, [ebp - 0x240]
call fcn.100107fd
test eax, eax
jl 0x100b2300
push 0x105
lea eax, [ebp - 0x23c]
push eax
call fcn.100b16dd
pop ecx
pop ecx
test eax, eax
je 0x100b22fe
lea eax, [ebp - 0x23c]
push eax
push str._suziDir_
lea ecx, [ebp - 0x240]
call fcn.10024d23
test eax, eax
je 0x100b22fe
push 0x104
lea ecx, [ebp - 0x240]
call fcn.10010b64
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.10075257
add esp, 0xc
jmp 0x100b2315
push 0x104
lea eax, [ebp - 0x23c]
push eax
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x28]
call fcn.10003c8d
mov byte [ebp - 4], 1
lea eax, [ebp - 0x248]
push eax
call fcn.100b1c3a
pop ecx
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x254]
call fcn.10010b64
push eax
push str.RandomSubPathTag
lea ecx, [ebp - 0x28]
call fcn.10024d23
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x241], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x248]
call fcn.100106f6
movzx eax, byte [ebp - 0x241]
test eax, eax
je 0x100b23a7
push 0x104
lea ecx, [ebp - 0x28]
call fcn.10010b64
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.10075257
add esp, 0xc
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x28]
call fcn.10003d11
and word [ebp - 0x1c], 0
xor eax, eax
lea edi, [ebp - 0x1a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea ecx, [ebp - 0x20]
call fcn.10003c5a
mov byte [ebp - 4], 3
movzx eax, word [ebp - 0x14]
push eax
push 0x100d3f40
lea eax, [ebp - 0x20]
push eax
call fcn.10016000
add esp, 0xc
lea ecx, [ebp - 0x20]
call fcn.10010b64
push eax
push str._HTag
lea ecx, [ebp - 0x28]
call fcn.10024d23
test eax, eax
je 0x100b2428
push 0x104
lea ecx, [ebp - 0x28]
call fcn.10010b64
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.10075257
add esp, 0xc
lea eax, [ebp - 0x23c]
push eax
mov ecx, dword [ebp + 8]
call fcn.10003c8d
mov eax, dword [ebp - 0x24c]
or eax, 1
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20]
call fcn.100106f6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.100106f6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.100106f6
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.10071b0a
leave
ret