Function at 0x43bcc0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x290
mov eax, dword [0x5402b0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, edx
lea edx, [ebp - 0x254]
mov esi, ecx
push edx
xor ecx, ecx
xor ebx, ebx
push eax
mov dword [ebp - 0x250], esi
mov dword [ebp - 0x218], 7
mov dword [ebp - 0x21c], ebx
mov word [ebp - 0x22c], cx
call fcn.0043a5d0
add esp, 8
test al, al
je 0x43be7d
mov eax, dword [ebp - 0x254]
push eax
lea ecx, [ebp - 0x24c]
call fcn.0043d330
lea ecx, [ebp - 0x24c]
push edi
push ecx
lea ebx, [ebp - 0x28c]
call fcn.00411210
add esp, 4
mov ecx, eax
lea edi, [ebp - 0x270]
call fcn.0040e410
add esp, 4
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
lea eax, [ebp - 0x230]
call fcn.004018f0
mov edi, 8
cmp dword [ebp - 0x258], edi
jb 0x43bd7b
mov edx, dword [ebp - 0x26c]
push edx
call fcn.004c097a
add esp, 4
xor eax, eax
mov dword [ebp - 0x258], 7
mov dword [ebp - 0x25c], ebx
mov word [ebp - 0x26c], ax
cmp dword [ebp - 0x274], edi
jb 0x43bdab
mov ecx, dword [ebp - 0x288]
push ecx
call fcn.004c097a
add esp, 4
lea eax, [ebp - 0x230]
call fcn.0044e7d0
test al, al
je 0x43be21
mov ecx, dword [ebp - 0x22c]
cmp dword [ebp - 0x218], edi
jae 0x43bdce
lea ecx, [ebp - 0x22c]
call fcn.00450b20
test al, al
je 0x43be21
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x230]
push edx
lea eax, [esi + 0x11c]
call fcn.004018f0
cmp dword [ebp - 0x234], edi
jb 0x43be03
mov eax, dword [ebp - 0x248]
push eax
call fcn.004c097a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x234], 7
mov dword [ebp - 0x238], ebx
mov word [ebp - 0x248], cx
jmp 0x43c01c
cmp dword [ebp - 0x234], edi
jb 0x43be38
mov eax, dword [ebp - 0x248]
push eax
call fcn.004c097a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x234], 7
mov dword [ebp - 0x238], ebx
mov word [ebp - 0x248], cx
cmp dword [ebp - 0x218], edi
jb 0x43be68
mov edx, dword [ebp - 0x22c]
push edx
call fcn.004c097a
add esp, 4
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004c0985
mov esp, ebp
pop ebp
ret 4
push 0x206
lea ecx, [ebp - 0x212]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x214], ax
call fcn.004c5470
mov edi, 8
add esp, 0xc
cmp dword [esi + 0x18], edi
jb 0x43beaa
mov esi, dword [esi + 4]
jmp 0x43bead
add esi, 4
push 0x104
lea edx, [ebp - 0x214]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x43bef0
cmp dword [ebp - 0x218], edi
jb 0x43be68
mov eax, dword [ebp - 0x22c]
push eax
call fcn.004c097a
add esp, 4
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004c0985
mov esp, ebp
pop ebp
ret 4
xor ecx, ecx
lea eax, [ebp - 0x214]
mov dword [ebp - 0x234], 7
mov dword [ebp - 0x238], ebx
mov word [ebp - 0x248], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x43bf12
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x214]
lea esi, [ebp - 0x24c]
call fcn.004017f0
mov esi, dword [ebp - 0x250]
lea edx, [esi + 0x1c]
push edx
lea eax, [ebp - 0x24c]
push eax
lea ebx, [ebp - 0x28c]
call fcn.00411210
add esp, 4
mov ecx, eax
lea edi, [ebp - 0x270]
call fcn.0040e410
add esp, 4
push 0xffffffffffffffff
push 0
push eax
lea eax, [ebp - 0x230]
call fcn.004018f0
mov edi, 8
cmp dword [ebp - 0x258], edi
jb 0x43bf8e
mov ecx, dword [ebp - 0x26c]
push ecx
call fcn.004c097a
add esp, 4
xor edx, edx
mov ebx, 7
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x25c], 0
mov word [ebp - 0x26c], dx
cmp dword [ebp - 0x274], edi
jb 0x43bfc3
mov eax, dword [ebp - 0x288]
push eax
call fcn.004c097a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x278], 0
mov word [ebp - 0x288], cx
cmp dword [ebp - 0x234], edi
jb 0x43bff3
mov edx, dword [ebp - 0x248]
push edx
call fcn.004c097a
add esp, 4
lea eax, [ebp - 0x230]
call fcn.0044e7d0
test al, al
je 0x43bec4
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x230]
push ecx
lea eax, [esi + 0x11c]
call fcn.004018f0
cmp dword [ebp - 0x218], edi
jb 0x43c033
mov edx, dword [ebp - 0x22c]
push edx
call fcn.004c097a
add esp, 4
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
mov al, 1
pop ebx
call fcn.004c0985
mov esp, ebp
pop ebp
ret 4