Function at 0x435774
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
mov ebx, dword [ebp + 0xc]
xor eax, eax
and dword [ebp - 8], eax
xor ecx, ecx
test byte [ebp + 0x10], 1
push esi
push edi
push 0x40
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], ecx
pop edi
je 0x43589b
push edi
lea eax, [ebp - 4]
mov dword [ebp - 0xc], edi
push eax
call fcn.00437acc
mov esi, eax
test esi, esi
js 0x4359b6
push dword [ebp - 0xc]
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x4357eb
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0xf2
jmp 0x435976
mov ecx, dword [ebp - 0xc]
cmp ecx, eax
jae 0x43585a
push eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 4]
push eax
call fcn.00437acc
mov esi, eax
test esi, esi
js 0x4359b6
push dword [ebp - 0xc]
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x435843
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0xfd
jmp 0x435976
mov ecx, dword [ebp - 0xc]
cmp ecx, eax
jae 0x43585a
mov eax, 0x8007007a
push eax
push 0x102
jmp 0x435974
cmp eax, 0x104
jbe 0x435898
lea eax, [ebp - 4]
push eax
call fcn.00435bc0
mov esi, eax
xor eax, eax
cmp esi, 0x80070057
cmove esi, eax
test esi, esi
js 0x4359b6
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
call fcn.00438417
mov esi, eax
test esi, esi
js 0x4359b6
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
test byte [ebp + 0x10], 2
je 0x43599d
and dword [ebp + 0x10], 0
mov edx, ebx
test eax, eax
cmovne edx, eax
cmp ecx, edi
lea eax, [ebp - 8]
mov dword [ebp + 0xc], edx
cmova edi, ecx
push edi
push eax
call fcn.00437acc
mov esi, eax
test esi, esi
js 0x4359b6
lea eax, [ebp + 0x10]
push eax
push dword [ebp - 8]
push edi
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
jne 0x435907
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0x123
jmp 0x435976
cmp edi, eax
jae 0x435982
cmp eax, 0x104
lea edi, [eax + 7]
cmovb edi, eax
lea eax, [ebp - 8]
push edi
push eax
call fcn.00437acc
mov esi, eax
test esi, esi
js 0x4359b6
lea eax, [ebp + 0x10]
push eax
push dword [ebp - 8]
push edi
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
jne 0x435965
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0x12e
jmp 0x435976
cmp edi, eax
jae 0x435982
mov eax, 0x8007007a
push eax
push 0x133
mov esi, eax
push str.pathutil.cpp
call fcn.00433f1c
jmp 0x4359b6
cmp eax, 0x104
jbe 0x435998
lea eax, [ebp - 8]
push eax
call fcn.00435bc0
mov esi, eax
test esi, esi
js 0x4359b6
mov eax, dword [ebp - 8]
jmp 0x4359a4
and dword [ebp - 4], 0
mov dword [ebp - 8], eax
test eax, eax
push 0
cmovne ebx, eax
push ebx
push dword [ebp + 8]
call fcn.00437e7f
mov esi, eax
cmp dword [ebp - 8], 0
je 0x4359c4
push dword [ebp - 8]
call fcn.0043bfd9
cmp dword [ebp - 4], 0
je 0x4359d2
push dword [ebp - 4]
call fcn.0043bfd9
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc