Function at 0x430606
Capabilities:
Query environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
xor edi, edi
test byte [ebp + 0x10], 1
push 0x40
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
pop ebx
je 0x430723
push ebx
lea eax, [ebp - 4]
push eax
mov dword [ebp - 8], ebx
call fcn.0042ed04
mov esi, eax
cmp esi, edi
jl 0x430845
push dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x43067f
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430669
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430674
mov esi, 0x80004005
push esi
push 0xef
jmp 0x430803
cmp dword [ebp - 8], eax
jae 0x4306e9
push eax
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
call fcn.0042ed04
mov esi, eax
test esi, esi
js 0x430845
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x4306d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4306be
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x4306c9
mov esi, 0x80004005
push esi
push 0xfa
jmp 0x430803
cmp dword [ebp - 8], eax
jae 0x4306e9
mov esi, 0x8007007a
push esi
push 0xff
jmp 0x430803
cmp eax, 0x104
jbe 0x430723
lea eax, [ebp - 4]
push eax
call fcn.00430532
mov esi, eax
cmp esi, 0x80070057
jne 0x430705
xor esi, esi
test esi, esi
js 0x430845
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.0042edbc
mov esi, eax
test esi, esi
js 0x430845
test byte [ebp + 0x10], 2
mov eax, dword [ebp - 4]
je 0x430827
and dword [ebp - 0x10], 0
test eax, eax
jne 0x43073b
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], eax
cmp dword [ebp - 8], ebx
jbe 0x430746
mov ebx, dword [ebp - 8]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042ed04
mov esi, eax
test esi, esi
js 0x430845
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x430798
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430785
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430790
mov esi, 0x80004005
push esi
push 0x120
jmp 0x430803
cmp ebx, eax
jae 0x43080f
mov ebx, eax
cmp eax, 0x104
jb 0x4307a8
lea ebx, [eax + 7]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042ed04
mov esi, eax
test esi, esi
js 0x430845
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x4307f4
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4307e1
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x4307ec
mov esi, 0x80004005
push esi
push 0x12b
jmp 0x430803
cmp ebx, eax
jae 0x43080f
mov esi, 0x8007007a
push esi
push 0x130
push 0x44cb90
call fcn.0043180e
jmp 0x430845
cmp eax, 0x104
jbe 0x43082e
lea eax, [ebp - 0xc]
push eax
call fcn.00430532
mov esi, eax
test esi, esi
js 0x430845
jmp 0x43082e
and dword [ebp - 4], 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x430838
mov eax, dword [ebp + 0xc]
push 0
push eax
push dword [ebp + 8]
call fcn.0042fd78
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x430853
push dword [ebp - 0xc]
call fcn.0042ee18
cmp dword [ebp - 4], 0
je 0x430861
push dword [ebp - 4]
call fcn.0042ee18
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0xc