Function at 0x43d030
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5a4
mov eax, dword [0x55d68c]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x168], 0
push 0xff
push 0
lea eax, [ebp - 0x167]
push eax
call fcn.004611e0
add esp, 0xc
push 0x100
lea ecx, [ebp - 0x168]
push ecx
push 0x54cd94
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
push 0x54cdb8
lea edx, [ebp - 0x168]
push edx
lea eax, [ebp - 0x68]
push eax
call fcn.00440ac0
add esp, 0xc
mov dword [ebp - 0x16c], 0
jmp 0x43d0aa
mov ecx, dword [ebp - 0x16c]
add ecx, 1
mov dword [ebp - 0x16c], ecx
lea ecx, [ebp - 0x68]
call fcn.00404470
cmp dword [ebp - 0x16c], eax
jae 0x43d4dd
push 0x54cdbc
mov edx, dword [ebp - 0x16c]
push edx
lea ecx, [ebp - 0x68]
call fcn.00408910
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.0042a140
add esp, 0xc
lea ecx, [ebp - 0x274]
call fcn.00402b30
push 0x54cdd0
lea ecx, [ebp - 0x2ac]
call fcn.00402b60
mov byte [ebp - 0x1a4], 0
xor ecx, ecx
mov dword [ebp - 0x1a3], ecx
mov dword [ebp - 0x19f], ecx
mov dword [ebp - 0x19b], ecx
mov dword [ebp - 0x197], ecx
mov dword [ebp - 0x193], ecx
mov word [ebp - 0x18f], cx
mov byte [ebp - 0x18d], cl
push 0xa
lea edx, [ebp - 0x1a4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004f2543
add esp, 0xc
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x2ac]
push edx
lea eax, [ebp - 0x20]
push eax
call fcn.0042a140
add esp, 0xc
push eax
lea ecx, [ebp - 0x2ac]
call fcn.004063a0
push eax
lea ecx, [ebp - 0x274]
call fcn.004045f0
lea ecx, [ebp - 0x20]
call fcn.00402c40
mov byte [ebp - 0x16d], 1
push 0x54ce00
lea ecx, [ebp - 0x2ac]
push ecx
lea edx, [ebp - 0x3c]
push edx
call fcn.0042a140
add esp, 0xc
push eax
lea ecx, [ebp - 0x2ac]
call fcn.004063a0
lea ecx, [ebp - 0x3c]
call fcn.00402c40
lea ecx, [ebp - 0x18c]
call fcn.00402b30
push 1
push 0x40
push 1
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x258]
call fcn.0043e110
lea ecx, [ebp - 0x258]
call fcn.0043e1f0
movzx ecx, al
test ecx, ecx
je 0x43d251
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0x258]
push eax
call fcn.0043f600
add esp, 8
mov dword [ebp - 0x59c], eax
mov ecx, dword [ebp - 0x59c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x59c]
add ecx, dword [edx + 4]
call fcn.0043cf70
test eax, eax
je 0x43d246
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
call fcn.00417af0
add esp, 8
movzx edx, al
test edx, edx
je 0x43d244
mov byte [ebp - 0x16d], 0
jmp 0x43d246
jmp 0x43d1e8
lea ecx, [ebp - 0x258]
call fcn.0043e210
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x43d4a1
lea ecx, [ebp - 0x2e4]
call fcn.00402b30
lea ecx, [ebp - 0x2c8]
call fcn.00402b30
push 1
push 0x40
push 1
lea ecx, [ebp - 0x290]
push ecx
lea ecx, [ebp - 0x398]
call fcn.0043e110
lea ecx, [ebp - 0x398]
call fcn.0043e1f0
movzx edx, al
test edx, edx
je 0x43d414
push 1
push 3
lea ecx, [ebp - 0x4e8]
call fcn.00432e30
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x398]
push ecx
call fcn.0043f600
add esp, 8
mov dword [ebp - 0x5a0], eax
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5a0]
add ecx, dword [eax + 4]
call fcn.0043cf70
test eax, eax
je 0x43d35d
push 0
lea ecx, [ebp - 0x274]
push ecx
lea ecx, [ebp - 0x2e4]
call fcn.004117c0
mov dword [ebp - 0x4ec], eax
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [0x5575cc]
jne 0x43d358
lea eax, [ebp - 0x4e8]
test eax, eax
je 0x43d32c
lea ecx, [ebp - 0x4e8]
add ecx, 0x10
mov dword [ebp - 0x5a4], ecx
jmp 0x43d336
mov dword [ebp - 0x5a4], 0
push 0x43cf90
lea edx, [ebp - 0x2e4]
push edx
mov eax, dword [ebp - 0x5a4]
push eax
call fcn.0040c450
add esp, 8
mov ecx, eax
call fcn.0043dfe0
jmp 0x43d2b3
push 0x43cf90
lea ecx, [ebp - 0x2ac]
push ecx
push 0x43cf90
lea ecx, [ebp - 0x4d8]
call fcn.0043dfe0
push eax
call fcn.0040c450
add esp, 8
mov ecx, eax
call fcn.0043dfe0
lea ecx, [ebp - 0x398]
call fcn.0043e210
push 1
push 0x40
push 2
lea edx, [ebp - 0x290]
push edx
lea ecx, [ebp - 0x440]
call fcn.0043ed20
lea ecx, [ebp - 0x440]
call fcn.0043ee00
movzx eax, al
test eax, eax
je 0x43d3f1
push 0x43cf90
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x4e8]
call fcn.0043c6a0
push eax
lea edx, [ebp - 0x440]
push edx
call fcn.0040c450
add esp, 8
mov ecx, eax
call fcn.0043dfe0
lea ecx, [ebp - 0x58]
call fcn.00402c40
lea ecx, [ebp - 0x440]
call fcn.0043ee20
lea ecx, [ebp - 0x440]
call fcn.0043d530
lea ecx, [ebp - 0x4e8]
call fcn.00432700
jmp 0x43d480
push 1
push 0x40
push 8
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x598]
call fcn.0043ed20
lea ecx, [ebp - 0x598]
call fcn.0043ee00
movzx ecx, al
test ecx, ecx
je 0x43d46a
push 0x43cf90
lea edx, [ebp - 0x2ac]
push edx
push 0x43cf90
lea ecx, [ebp - 0x598]
call fcn.0043dfe0
push eax
call fcn.0040c450
add esp, 8
mov ecx, eax
call fcn.0043dfe0
lea ecx, [ebp - 0x598]
call fcn.0043ee20
lea ecx, [ebp - 0x598]
call fcn.0043d530
lea ecx, [ebp - 0x398]
call fcn.0043d500
lea ecx, [ebp - 0x2c8]
call fcn.00402c40
lea ecx, [ebp - 0x2e4]
call fcn.00402c40
lea ecx, [ebp - 0x258]
call fcn.0043d500
lea ecx, [ebp - 0x18c]
call fcn.00402c40
lea ecx, [ebp - 0x2ac]
call fcn.00402c40
lea ecx, [ebp - 0x274]
call fcn.00402c40
lea ecx, [ebp - 0x290]
call fcn.00402c40
jmp 0x43d09b
lea ecx, [ebp - 0x68]
call fcn.004037c0
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00455328
mov esp, ebp
pop ebp
ret