Function at 0x100caa3
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x101db06
call fcn.0101caf8
mov eax, 0x2054
call fcn.0101cb40
mov eax, dword [0x1023fb4]
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [ebp - 0x2020]
mov dword [ebp - 0x10], eax
call sub.MFC42u.DLL_CString::CString_1
and dword [ebp - 4], 0
lea ecx, [ebp - 0x2014]
call sub.MFC42u.DLL_CString::CString_1
lea ecx, [ebp - 0x202c]
mov byte [ebp - 4], 1
call sub.MFC42u.DLL_CString::CString_1
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 2
call sub.MFC42u.DLL_CString::CString_1
mov ebx, dword [esi + 0xa8]
mov edi, 0x4653
push edi
mov ecx, esi
mov byte [ebp - 4], 3
call sub.MFC42u.DLL_CWnd::IsDlgButtonChecked
push edi
push esi
mov dword [ebp - 0x2024], eax
call fcn.01018e13
mov dword [ebp - 0x2018], eax
lea eax, [ebp - 0x2060]
push eax
xor edi, edi
push edi
push 0x104b
push dword [esi + 0x9c]
mov dword [ebp - 0x2060], 4
mov dword [ebp - 0x2058], edi
mov dword [ebp - 0x205c], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jne 0x100cc75
mov eax, dword [ebp - 0x2040]
cmp eax, edi
mov ebx, eax
je 0x100cc75
add eax, 8
push eax
lea ecx, [ebp - 0x2020]
call sub.MFC42u.DLL_CString::operator
mov eax, dword [ebp - 0x2020]
cmp dword [eax - 8], edi
je 0x100cc75
push 0x800
lea ecx, [ebp - 0x1010]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
je 0x100cc75
lea eax, [ebx + 0x10]
push eax
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x2028], eax
call sub.MFC42u.DLL_CString::operator
mov eax, dword [ebp - 0x201c]
cmp dword [eax - 8], edi
jne 0x100cbef
add ebx, 0xc
push ebx
lea ecx, [ebp - 0x2014]
call sub.MFC42u.DLL_CString::operator
cmp dword [ebp - 0x2018], edi
je 0x100cc25
push edi
push dword [ebp - 0x2018]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x100cc25
cmp dword [ebp - 0x2018], edi
je 0x100cc05
push 5
push dword [ebp - 0x2018]
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [ebp - 0x2024], 1
lea ecx, [ebp - 0x2014]
jne 0x100cc1c
push dword [ebp - 0x2028]
jmp 0x100cc20
add ebx, 0xc
push ebx
call sub.MFC42u.DLL_CString::operator
lea eax, [ebp - 0x1010]
push eax
lea ecx, [esi + 0xac]
call sub.MFC42u.DLL_CString::operator_1
push 0x800
lea eax, [ebp - 0x2010]
push eax
push dword [ebp - 0x2014]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
lea ecx, [esi + 0xb0]
je 0x100cc67
lea eax, [ebp - 0x2010]
push eax
call sub.MFC42u.DLL_CString::operator_1
jmp 0x100cc97
lea eax, [ebp - 0x2014]
push eax
call sub.MFC42u.DLL_CString::operator
jmp 0x100cc97
mov edi, 0x1001b3c
push edi
lea ecx, [esi + 0xb0]
call sub.MFC42u.DLL_CString::operator_1
push edi
lea ecx, [esi + 0xac]
call sub.MFC42u.DLL_CString::operator_1
mov edi, 0x80004005
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 2
call sub.MFC42u.DLL_CString::CString
lea ecx, [ebp - 0x202c]
mov byte [ebp - 4], 1
call sub.MFC42u.DLL_CString::CString
lea ecx, [ebp - 0x2014]
mov byte [ebp - 4], 0
call sub.MFC42u.DLL_CString::CString
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2020]
call sub.MFC42u.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.0101bddf
leave
ret