Function at 0x4305e0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x46f06c]
xor eax, ebp
mov dword [ebp - 8], eax
push esi
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x20]
push edi
push dword [ebp + 0x10]
mov dword [ebp - 0x3c], esi
push dword [ebp + 0xc]
call fcn.00423d90
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x430611
mov eax, dword [eax]
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edi, eax
mov eax, dword [ebp - 0xc]
cmp eax, 8
jb 0x430671
mov ecx, dword [ebp - 0x20]
inc eax
cmp eax, 0x7fffffff
ja 0x43083a
add eax, eax
cmp eax, 0x1000
jb 0x430668
test cl, 0x1f
jne 0x43083f
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x430844
sub ecx, eax
cmp ecx, 4
jb 0x430849
cmp ecx, 0x23
ja 0x43084e
mov ecx, eax
push ecx
call fcn.00432237
add esp, 4
test edi, edi
jne 0x430689
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0043223c
mov esp, ebp
pop ebp
ret 0xc
test esi, esi
je 0x430826
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004326f5
add esp, 4
lea ecx, [ebp - 0x20]
mov esi, eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00423d90
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x4306c7
mov eax, dword [eax]
push edi
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov eax, dword [ebp - 0xc]
cmp eax, 8
jb 0x430723
mov ecx, dword [ebp - 0x20]
inc eax
cmp eax, 0x7fffffff
ja 0x430853
add eax, eax
cmp eax, 0x1000
jb 0x43071a
test cl, 0x1f
jne 0x430858
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x43085d
sub ecx, eax
cmp ecx, 4
jb 0x430862
cmp ecx, 0x23
ja 0x430867
mov ecx, eax
push ecx
call fcn.00432237
add esp, 4
xor eax, eax
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], 0
mov word [ebp - 0x38], ax
cmp word [esi], ax
jne 0x430740
xor ecx, ecx
jmp 0x430754
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x430745
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x38]
call fcn.00401881
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x20]
call fcn.00423c60
mov ecx, dword [ebp - 0x3c]
push eax
call fcn.0041a8d0
mov eax, dword [ebp - 0xc]
cmp eax, 0x10
jb 0x4307b8
mov ecx, dword [ebp - 0x20]
inc eax
cmp eax, 0x1000
jb 0x4307af
test cl, 0x1f
jne 0x43086c
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x430871
sub ecx, eax
cmp ecx, 4
jb 0x430876
cmp ecx, 0x23
ja 0x43087b
mov ecx, eax
push ecx
call fcn.00432237
add esp, 4
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc], 0xf
mov dword [ebp - 0x10], 0
mov byte [ebp - 0x20], 0
cmp eax, 8
jb 0x43081d
mov ecx, dword [ebp - 0x38]
inc eax
cmp eax, 0x7fffffff
ja 0x430880
add eax, eax
cmp eax, 0x1000
jb 0x430814
test cl, 0x1f
jne 0x430885
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x43088a
sub ecx, eax
cmp ecx, 4
jb 0x43088f
cmp ecx, 0x23
ja 0x430894
mov ecx, eax
push ecx
call fcn.00432237
add esp, 4
push esi
call fcn.004324e8
add esp, 4
mov ecx, dword [ebp - 8]
mov al, 1
pop edi
xor ecx, ebp
pop esi
call fcn.0043223c
mov esp, ebp
pop ebp
ret 0xc
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
call fcn.004377c0
int3