Function at 0x4320c8
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
xor edi, edi
test byte [ebp + 0x10], 1
push 0x40
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
pop ebx
je 0x4321e3
push ebx
lea eax, [ebp - 4]
push eax
mov dword [ebp - 8], ebx
call fcn.00430777
mov esi, eax
cmp esi, edi
jl 0x432305
push dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x43213f
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x432129
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x432134
mov esi, 0x80004005
push esi
push 0xef
jmp 0x4322c3
cmp dword [ebp - 8], eax
jae 0x4321a9
push eax
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
call fcn.00430777
mov esi, eax
test esi, esi
js 0x432305
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x432194
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x43217e
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x432189
mov esi, 0x80004005
push esi
push 0xfa
jmp 0x4322c3
cmp dword [ebp - 8], eax
jae 0x4321a9
mov esi, 0x8007007a
push esi
push 0xff
jmp 0x4322c3
cmp eax, 0x104
jbe 0x4321e3
lea eax, [ebp - 4]
push eax
call fcn.00431f87
mov esi, eax
cmp esi, 0x80070057
jne 0x4321c5
xor esi, esi
test esi, esi
js 0x432305
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.0043082d
mov esi, eax
test esi, esi
js 0x432305
test byte [ebp + 0x10], 2
mov eax, dword [ebp - 4]
je 0x4322e7
and dword [ebp - 0x10], 0
test eax, eax
jne 0x4321fb
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], eax
cmp dword [ebp - 8], ebx
jbe 0x432206
mov ebx, dword [ebp - 8]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.00430777
mov esi, eax
test esi, esi
js 0x432305
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x432258
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x432245
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x432250
mov esi, 0x80004005
push esi
push 0x120
jmp 0x4322c3
cmp ebx, eax
jae 0x4322cf
mov ebx, eax
cmp eax, 0x104
jb 0x432268
lea ebx, [eax + 7]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.00430777
mov esi, eax
test esi, esi
js 0x432305
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x4322b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4322a1
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x4322ac
mov esi, 0x80004005
push esi
push 0x12b
jmp 0x4322c3
cmp ebx, eax
jae 0x4322cf
mov esi, 0x8007007a
push esi
push 0x130
push str.pathutil.cpp
call fcn.00432f06
jmp 0x432305
cmp eax, 0x104
jbe 0x4322ee
lea eax, [ebp - 0xc]
push eax
call fcn.00431f87
mov esi, eax
test esi, esi
js 0x432305
jmp 0x4322ee
and dword [ebp - 4], 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4322f8
mov eax, dword [ebp + 0xc]
push 0
push eax
push dword [ebp + 8]
call fcn.00431729
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x432313
push dword [ebp - 0xc]
call fcn.00430887
cmp dword [ebp - 4], 0
je 0x432321
push dword [ebp - 4]
call fcn.00430887
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0xc