Function at 0x431b10
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
xor edi, edi
test byte [ebp + 0x10], 1
push 0x40
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
pop ebx
je 0x431c2b
push ebx
lea eax, [ebp - 4]
push eax
mov dword [ebp - 8], ebx
call fcn.004300d8
mov esi, eax
cmp esi, edi
jl 0x431d4d
push dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x431b87
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x431b71
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x431b7c
mov esi, 0x80004005
push esi
push 0xef
jmp 0x431d0b
cmp dword [ebp - 8], eax
jae 0x431bf1
push eax
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
call fcn.004300d8
mov esi, eax
test esi, esi
js 0x431d4d
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x431bdc
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x431bc6
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x431bd1
mov esi, 0x80004005
push esi
push 0xfa
jmp 0x431d0b
cmp dword [ebp - 8], eax
jae 0x431bf1
mov esi, 0x8007007a
push esi
push 0xff
jmp 0x431d0b
cmp eax, 0x104
jbe 0x431c2b
lea eax, [ebp - 4]
push eax
call fcn.004319cf
mov esi, eax
cmp esi, 0x80070057
jne 0x431c0d
xor esi, esi
test esi, esi
js 0x431d4d
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.0043018e
mov esi, eax
test esi, esi
js 0x431d4d
test byte [ebp + 0x10], 2
mov eax, dword [ebp - 4]
je 0x431d2f
and dword [ebp - 0x10], 0
test eax, eax
jne 0x431c43
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], eax
cmp dword [ebp - 8], ebx
jbe 0x431c4e
mov ebx, dword [ebp - 8]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.004300d8
mov esi, eax
test esi, esi
js 0x431d4d
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x431ca0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x431c8d
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x431c98
mov esi, 0x80004005
push esi
push 0x120
jmp 0x431d0b
cmp ebx, eax
jae 0x431d17
mov ebx, eax
cmp eax, 0x104
jb 0x431cb0
lea ebx, [eax + 7]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.004300d8
mov esi, eax
test esi, esi
js 0x431d4d
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x431cfc
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x431ce9
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x431cf4
mov esi, 0x80004005
push esi
push 0x12b
jmp 0x431d0b
cmp ebx, eax
jae 0x431d17
mov esi, 0x8007007a
push esi
push 0x130
push str.pathutil.cpp
call fcn.0043294e
jmp 0x431d4d
cmp eax, 0x104
jbe 0x431d36
lea eax, [ebp - 0xc]
push eax
call fcn.004319cf
mov esi, eax
test esi, esi
js 0x431d4d
jmp 0x431d36
and dword [ebp - 4], 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x431d40
mov eax, dword [ebp + 0xc]
push 0
push eax
push dword [ebp + 8]
call fcn.00431171
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x431d5b
push dword [ebp - 0xc]
call fcn.004301e8
cmp dword [ebp - 4], 0
je 0x431d69
push dword [ebp - 4]
call fcn.004301e8
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0xc