Function at 0x430d7a
Capabilities:
Query environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
xor edi, edi
test byte [ebp + 0x10], 1
push 0x40
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
pop ebx
je 0x430e97
push ebx
lea eax, [ebp - 4]
push eax
mov dword [ebp - 8], ebx
call fcn.0042ea4e
mov esi, eax
cmp esi, edi
jl 0x430fb9
push dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x430df3
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430ddd
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430de8
mov esi, 0x80004005
push esi
push 0xf2
jmp 0x430f77
cmp dword [ebp - 8], eax
jae 0x430e5d
push eax
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
call fcn.0042ea4e
mov esi, eax
test esi, esi
js 0x430fb9
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x430e48
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430e32
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430e3d
mov esi, 0x80004005
push esi
push 0xfd
jmp 0x430f77
cmp dword [ebp - 8], eax
jae 0x430e5d
mov esi, 0x8007007a
push esi
push 0x102
jmp 0x430f77
cmp eax, 0x104
jbe 0x430e97
lea eax, [ebp - 4]
push eax
call fcn.00430ca6
mov esi, eax
cmp esi, 0x80070057
jne 0x430e79
xor esi, esi
test esi, esi
js 0x430fb9
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.0042eb06
mov esi, eax
test esi, esi
js 0x430fb9
test byte [ebp + 0x10], 2
mov eax, dword [ebp - 4]
je 0x430f9b
and dword [ebp - 0x10], 0
test eax, eax
jne 0x430eaf
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], eax
cmp dword [ebp - 8], ebx
jbe 0x430eba
mov ebx, dword [ebp - 8]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042ea4e
mov esi, eax
test esi, esi
js 0x430fb9
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x430f0c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430ef9
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430f04
mov esi, 0x80004005
push esi
push 0x123
jmp 0x430f77
cmp ebx, eax
jae 0x430f83
mov ebx, eax
cmp eax, 0x104
jb 0x430f1c
lea ebx, [eax + 7]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042ea4e
mov esi, eax
test esi, esi
js 0x430fb9
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x430f68
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430f55
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430f60
mov esi, 0x80004005
push esi
push 0x12e
jmp 0x430f77
cmp ebx, eax
jae 0x430f83
mov esi, 0x8007007a
push esi
push 0x133
push 0x44c7b4
call fcn.004315c0
jmp 0x430fb9
cmp eax, 0x104
jbe 0x430fa2
lea eax, [ebp - 0xc]
push eax
call fcn.00430ca6
mov esi, eax
test esi, esi
js 0x430fb9
jmp 0x430fa2
and dword [ebp - 4], 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x430fac
mov eax, dword [ebp + 0xc]
push 0
push eax
push dword [ebp + 8]
call fcn.0042fb1a
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x430fc7
push dword [ebp - 0xc]
call fcn.0042eb62
cmp dword [ebp - 4], 0
je 0x430fd5
push dword [ebp - 4]
call fcn.0042eb62
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0xc