Function at 0x100fb0e0
Capabilities:
Query environment variable

Disassembly:
sub esp, 0x110
mov eax, dword [0x1030fff4]
xor eax, esp
mov dword [esp + 0x10c], eax
cmp dword [0x1031e418], 0
jne 0x100fb360
push esi
mov esi, dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
push edi
push str.XML_DEBUG_CATALOG
call esi
mov ecx, dword [0x1031e408]
test eax, eax
mov edi, 1
cmovne ecx, edi
mov dword [0x1031e408], ecx
call fcn.100ac1b0
push eax
mov dword [0x1031e414], eax
mov dword [0x1031e418], edi
call fcn.100ac250
push str.XML_DEBUG_CATALOG
call esi
mov ecx, dword [0x1031e408]
add esp, 0xc
test eax, eax
cmovne ecx, edi
cmp dword [0x1031e410], 0
mov dword [0x1031e408], ecx
jne 0x100fb350
push str.XML_CATALOG_FILES
call esi
mov esi, eax
add esp, 4
test esi, esi
jne 0x100fb20d
push str.libxml2.dll
call sub.kernel32.dll_GetModuleHandleA
test eax, eax
jne 0x100fb190
push eax
call sub.kernel32.dll_GetModuleHandleA
test eax, eax
je 0x100fb208
push 0xff
lea ecx, [esp + 0x18]
push ecx
push eax
call sub.kernel32.dll_GetModuleFileNameA
test eax, eax
je 0x100fb208
lea ecx, [esp + 0x14]
add ecx, eax
cmp byte [ecx], 0x5c
je 0x100fb1be
nop
lea eax, [esp + 0x14]
cmp ecx, eax
jbe 0x100fb1be
dec ecx
cmp byte [ecx], 0x5c
jne 0x100fb1b0
lea eax, [esp + 0x14]
cmp ecx, eax
je 0x100fb208
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea eax, [esp + 0x113]
sub eax, ecx
push eax
push str...etccatalog
push ecx
call edi
lea eax, [esp + 0x20]
push eax
call fcn.100ede30
mov esi, eax
add esp, 0x10
test esi, esi
je 0x100fb208
push 0xff
push esi
push str.file:___etc_xml_catalog
call edi
push esi
call dword [0x1030d464]
add esp, 0x10
mov esi, str.file:___etc_xml_catalog
push dword [0x1030d83c]
push 1
call fcn.100fabd0
mov ecx, eax
add esp, 8
mov dword [esp + 0x10], ecx
test ecx, ecx
je 0x100fb350
cmp byte [esi], 0
push ebp
lea ebp, [ecx + 0x3c]
mov dword [esp + 0xc], ebp
je 0x100fb349
push ebx
nop dword [eax]
mov dword [esp + 0x14], ebp
mov al, byte [esi]
cmp al, 0x20
je 0x100fb256
cmp al, 9
jl 0x100fb252
cmp al, 0xa
jle 0x100fb256
cmp al, 0xd
jne 0x100fb259
inc esi
jmp 0x100fb244
test al, al
je 0x100fb344
mov ecx, esi
cmp al, 0x20
je 0x100fb27b
cmp al, 9
jl 0x100fb26f
cmp al, 0xa
jle 0x100fb27b
cmp al, 0xd
je 0x100fb27b
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x100fb263
mov eax, esi
sub eax, ecx
push eax
push ecx
call fcn.100e3540
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x100fb33b
mov ebp, dword [0x1030d83c]
push 0x2c
call dword [0x1030d458]
mov edi, eax
add esp, 4
test edi, edi
jne 0x100fb2d8
push str.allocating_catalog_entry
push str.Memory_allocation_failed_:__s_n
push eax
push eax
push eax
push eax
push str.allocating_catalog_entry
push eax
push eax
push 2
push 2
push 0x14
push eax
push eax
push eax
push eax
push eax
call fcn.100db7e0
mov ebp, dword [esp + 0x54]
add esp, 0x44
jmp 0x100fb32b
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 1
mov dword [edi + 0x10], 0
push ebx
mov dword [edi + 0x14], 0
call fcn.100e31c0
mov dword [edi + 0x18], eax
add esp, 4
mov dword [edi + 0x1c], ebp
mov ebp, edi
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x14]
push ebx
mov dword [eax], edi
call dword [0x1030d464]
add esp, 4
cmp byte [esi], 0
jne 0x100fb240
mov ecx, dword [esp + 0x18]
pop ebx
mov dword [0x1031e410], ecx
pop ebp
push dword [0x1031e414]
call fcn.100ac270
add esp, 4
pop edi
pop esi
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.10236000
add esp, 0x110
ret