Function at 0x430e43
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
xor edi, edi
test byte [ebp + 0x10], 1
push 0x40
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
pop ebx
je 0x430f5e
push ebx
lea eax, [ebp - 4]
push eax
mov dword [ebp - 8], ebx
call fcn.0042f547
mov esi, eax
cmp esi, edi
jl 0x431080
push dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x430eba
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430ea4
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430eaf
mov esi, 0x80004005
push esi
push 0xef
jmp 0x43103e
cmp dword [ebp - 8], eax
jae 0x430f24
push eax
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
call fcn.0042f547
mov esi, eax
test esi, esi
js 0x431080
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x430f0f
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430ef9
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430f04
mov esi, 0x80004005
push esi
push 0xfa
jmp 0x43103e
cmp dword [ebp - 8], eax
jae 0x430f24
mov esi, 0x8007007a
push esi
push 0xff
jmp 0x43103e
cmp eax, 0x104
jbe 0x430f5e
lea eax, [ebp - 4]
push eax
call fcn.00430d02
mov esi, eax
cmp esi, 0x80070057
jne 0x430f40
xor esi, esi
test esi, esi
js 0x431080
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.0042f5fd
mov esi, eax
test esi, esi
js 0x431080
test byte [ebp + 0x10], 2
mov eax, dword [ebp - 4]
je 0x431062
and dword [ebp - 0x10], 0
test eax, eax
jne 0x430f76
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], eax
cmp dword [ebp - 8], ebx
jbe 0x430f81
mov ebx, dword [ebp - 8]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042f547
mov esi, eax
test esi, esi
js 0x431080
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x430fd3
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430fc0
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430fcb
mov esi, 0x80004005
push esi
push 0x120
jmp 0x43103e
cmp ebx, eax
jae 0x43104a
mov ebx, eax
cmp eax, 0x104
jb 0x430fe3
lea ebx, [eax + 7]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042f547
mov esi, eax
test esi, esi
js 0x431080
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x43102f
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x43101c
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x431027
mov esi, 0x80004005
push esi
push 0x12b
jmp 0x43103e
cmp ebx, eax
jae 0x43104a
mov esi, 0x8007007a
push esi
push 0x130
push str.pathutil.cpp
call fcn.0043166e
jmp 0x431080
cmp eax, 0x104
jbe 0x431069
lea eax, [ebp - 0xc]
push eax
call fcn.00430d02
mov esi, eax
test esi, esi
js 0x431080
jmp 0x431069
and dword [ebp - 4], 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x431073
mov eax, dword [ebp + 0xc]
push 0
push eax
push dword [ebp + 8]
call fcn.004304a4
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x43108e
push dword [ebp - 0xc]
call fcn.0042f657
cmp dword [ebp - 4], 0
je 0x43109c
push dword [ebp - 4]
call fcn.0042f657
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0xc