Function at 0x43025e
Capabilities:
Query environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
xor edi, edi
test byte [ebp + 0x10], 1
push 0x40
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
pop ebx
je 0x43037b
push ebx
lea eax, [ebp - 4]
push eax
mov dword [ebp - 8], ebx
call fcn.0042e95c
mov esi, eax
cmp esi, edi
jl 0x43049d
push dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x4302d7
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4302c1
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x4302cc
mov esi, 0x80004005
push esi
push 0xef
jmp 0x43045b
cmp dword [ebp - 8], eax
jae 0x430341
push eax
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
call fcn.0042e95c
mov esi, eax
test esi, esi
js 0x43049d
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x43032c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430316
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430321
mov esi, 0x80004005
push esi
push 0xfa
jmp 0x43045b
cmp dword [ebp - 8], eax
jae 0x430341
mov esi, 0x8007007a
push esi
push 0xff
jmp 0x43045b
cmp eax, 0x104
jbe 0x43037b
lea eax, [ebp - 4]
push eax
call fcn.0043018a
mov esi, eax
cmp esi, 0x80070057
jne 0x43035d
xor esi, esi
test esi, esi
js 0x43049d
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.0042ea14
mov esi, eax
test esi, esi
js 0x43049d
test byte [ebp + 0x10], 2
mov eax, dword [ebp - 4]
je 0x43047f
and dword [ebp - 0x10], 0
test eax, eax
jne 0x430393
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], eax
cmp dword [ebp - 8], ebx
jbe 0x43039e
mov ebx, dword [ebp - 8]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042e95c
mov esi, eax
test esi, esi
js 0x43049d
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x4303f0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4303dd
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x4303e8
mov esi, 0x80004005
push esi
push 0x120
jmp 0x43045b
cmp ebx, eax
jae 0x430467
mov ebx, eax
cmp eax, 0x104
jb 0x430400
lea ebx, [eax + 7]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042e95c
mov esi, eax
test esi, esi
js 0x43049d
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x43044c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430439
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430444
mov esi, 0x80004005
push esi
push 0x12b
jmp 0x43045b
cmp ebx, eax
jae 0x430467
mov esi, 0x8007007a
push esi
push 0x130
push 0x44c4fe
call fcn.00431468
jmp 0x43049d
cmp eax, 0x104
jbe 0x430486
lea eax, [ebp - 0xc]
push eax
call fcn.0043018a
mov esi, eax
test esi, esi
js 0x43049d
jmp 0x430486
and dword [ebp - 4], 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x430490
mov eax, dword [ebp + 0xc]
push 0
push eax
push dword [ebp + 8]
call fcn.0042f9d0
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x4304ab
push dword [ebp - 0xc]
call fcn.0042ea70
cmp dword [ebp - 4], 0
je 0x4304b9
push dword [ebp - 4]
call fcn.0042ea70
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0xc