Function at 0x73dd5a10
Capabilities:
Query environment variable

Disassembly:
push 0x840
push 0x73f30d70
call fcn.73eed2a0
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x84c], ebx
push 0x820
xor edi, edi
push edi
lea eax, [ebp - 0x844]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov dword [ebp - 4], edi
mov ecx, esi
call fcn.73dd5c89
mov esi, eax
test esi, esi
jne 0x73dd5a59
push 6
jmp 0x73dd5c37
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x73dd5a68
call fcn.73dd5ea9
mov dword [esi + 0x20], edi
test ebx, ebx
je 0x73dd5abd
mov edi, 0x410
push edi
lea eax, [ebp - 0x844]
push eax
push ebx
call dword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_ExpandEnvironmentStringsW]
mov ebx, eax
mov dword [ebp - 0x848], ebx
cmp ebx, edi
jae 0x73dd5a9f
lea ecx, [ebp - 0x844]
call fcn.73ddb28c
mov dword [esi + 0x20], eax
jmp 0x73dd5bef
lea ecx, [ebx + ebx]
call fcn.73dd5d6e
mov dword [esi + 0x20], eax
push ebx
push eax
push dword [ebp - 0x84c]
call dword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_ExpandEnvironmentStringsW]
jmp 0x73dd5bef
push 3
pop edi
mov dword [ebp - 0x848], edi
test dword [0x73f3bcb4], 0x1000
jne 0x73dd5afe
xor ebx, ebx
push ebx
push ebx
push 0x73dbdc64
call dword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetEnvironmentVariableW]
add edi, eax
mov dword [ebp - 0x848], edi
push ebx
push ebx
push 0x73dbdc84
call dword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetEnvironmentVariableW]
add edi, eax
mov dword [ebp - 0x848], edi
lea ebx, [edi + edi]
lea ecx, [ebx + 2]
call fcn.73dd5d6e
mov dword [esi + 0x20], eax
test eax, eax
jne 0x73dd5b17
push 8
jmp 0x73dd5c37
mov dword [ebp - 0x848], ebx
push 0x73dbb708
mov edx, ebx
mov ecx, eax
call fcn.73ee45dd
pop ecx
test dword [0x73f3bcb4], 0x1000
jne 0x73dd5bef
mov edi, 0x410
push edi
lea eax, [ebp - 0x844]
push eax
push 0x73dbdc64
call dword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetEnvironmentVariableW]
test eax, eax
je 0x73dd5b98
call fcn.73dd5c5e
test eax, eax
je 0x73dd5b76
lea eax, [ebp - 0x844]
push eax
push 0x73dbdcac
push esi
call fcn.73f1690b
add esp, 0xc
push 0x73dbdcd8
mov edx, ebx
mov ecx, dword [esi + 0x20]
call fcn.73ee45ae
pop ecx
lea eax, [ebp - 0x844]
push eax
mov edx, ebx
mov ecx, dword [esi + 0x20]
call fcn.73ee45ae
pop ecx
push edi
lea eax, [ebp - 0x844]
push eax
push 0x73dbdc84
call dword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetEnvironmentVariableW]
test eax, eax
je 0x73dd5bef
call fcn.73dd5c5e
test eax, eax
je 0x73dd5bcd
lea eax, [ebp - 0x844]
push eax
push 0x73dbdcdc
push esi
call fcn.73f1690b
add esp, 0xc
push 0x73dbdcd8
mov edx, ebx
mov ecx, dword [esi + 0x20]
call fcn.73ee45ae
pop ecx
lea eax, [ebp - 0x844]
push eax
mov edx, ebx
mov ecx, dword [esi + 0x20]
call fcn.73ee45ae
pop ecx
mov ecx, dword [esi + 0x20]
call fcn.73dd5ce0
call fcn.73dd5c5e
test eax, eax
je 0x73dd5c11
push dword [esi + 0x20]
push 0x73dbdd10
push esi
call fcn.73f1690b
add esp, 0xc
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
inc eax
jmp 0x73dd5c46
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8