Function at 0x42b000
Capabilities:
Get common file path
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x408
mov eax, dword [0x4b3074]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov edi, ecx
cmp dword [edi + 4], 0
jne 0x42b038
push 0x45a
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042cb29
mov esp, ebp
pop ebp
ret
cmp dword [edi + 0x10], 0
je 0x42b052
mov eax, 1
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042cb29
mov esp, ebp
pop ebp
ret
push ebx
push esi
xor esi, esi
test byte [edi + 0x18], 0x10
je 0x42b329
push 0x1000
call fcn.0043780e
mov esi, eax
add esp, 4
test esi, esi
jne 0x42b08e
push 8
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
pop ebx
xor eax, eax
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042cb29
mov esp, ebp
pop ebp
ret
mov byte [esi], 0
mov eax, dword [edi + 0x14]
test eax, eax
je 0x42b0b7
push eax
push 0x1000
push esi
call fcn.0043b7c9
push 0x4a2794
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0x18
push 0x492740
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0xc
lea eax, [ebp - 0x404]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
test eax, eax
je 0x42b109
lea eax, [ebp - 0x404]
mov byte [ebp - 5], 0
push eax
push 0x1000
push esi
call fcn.0043b7c9
push 0x4a2794
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0x18
push 0x400
lea eax, [ebp - 0x404]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x42b1b0
lea ecx, [ebp - 0x404]
mov byte [ebp - 5], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42b132
sub ecx, edx
lea eax, [ebp + ecx - 0x405]
lea ecx, [ebp - 0x404]
cmp eax, ecx
jb 0x42b171
nop dword [eax]
mov cl, byte [eax]
cmp cl, 0x5c
je 0x42b16e
cmp cl, 0x2f
je 0x42b16e
cmp cl, 0x3a
je 0x42b16e
dec eax
lea ecx, [ebp - 0x404]
cmp eax, ecx
jae 0x42b150
jmp 0x42b171
mov byte [eax], 0
lea ecx, [ebp - 0x404]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42b180
sub ecx, edx
je 0x42b1b0
lea eax, [ebp - 0x404]
push eax
push 0x1000
push esi
call fcn.0043b7c9
push 0x4a2794
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0x18
mov ebx, dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea eax, [ebp - 0x404]
push 0x400
push eax
push str._NT_SYMBOL_PATH
call ebx
test eax, eax
je 0x42b1f6
lea eax, [ebp - 0x404]
mov byte [ebp - 5], 0
push eax
push 0x1000
push esi
call fcn.0043b7c9
push 0x4a2794
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0x18
push 0x400
lea eax, [ebp - 0x404]
push eax
push str._NT_ALTERNATE_SYMBOL_PATH
call ebx
test eax, eax
je 0x42b236
lea eax, [ebp - 0x404]
mov byte [ebp - 5], 0
push eax
push 0x1000
push esi
call fcn.0043b7c9
push 0x4a2794
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0x18
push 0x400
lea eax, [ebp - 0x404]
push eax
push str.SYSTEMROOT
call ebx
test eax, eax
je 0x42b2ae
lea eax, [ebp - 0x404]
mov byte [ebp - 5], 0
push eax
push 0x1000
push esi
call fcn.0043b7c9
push 0x4a2794
push 0x1000
push esi
call fcn.0043b7c9
push str._system32
lea eax, [ebp - 0x404]
push 0x400
push eax
call fcn.0043b7c9
lea eax, [ebp - 0x404]
push eax
push 0x1000
push esi
call fcn.0043b7c9
push 0x4a2794
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0x3c
test byte [edi + 0x18], 0x20
je 0x42b329
push 0x400
lea eax, [ebp - 0x404]
push eax
push str.SYSTEMDRIVE
call ebx
test eax, eax
je 0x42b316
push str.SRV
push 0x1000
push esi
mov byte [ebp - 5], 0
call fcn.0043b7c9
lea eax, [ebp - 0x404]
push eax
push 0x1000
push esi
call fcn.0043b7c9
push str.websymbols
push 0x1000
push esi
call fcn.0043b7c9
push str.http:__msdl.microsoft.com_download_symbols_
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0x30
jmp 0x42b329
push str.SRVc:websymbolshttp:__msdl.microsoft.com_download_symbols_
push 0x1000
push esi
call fcn.0043b7c9
add esp, 0xc
mov ecx, dword [edi + 4]
push esi
call fcn.0042aae0
mov ebx, eax
test esi, esi
je 0x42b341
push esi
call fcn.004375c4
add esp, 4
test ebx, ebx
jne 0x42b372
mov eax, dword [edi]
mov ecx, edi
push ebx
push ebx
push ebx
push str.Error_while_initializing_dbghelp.dll
call dword [eax + 0x10]
push 0x45a
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
pop ebx
xor eax, eax
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042cb29
mov esp, ebp
pop ebp
ret
push dword [edi + 0xc]
mov esi, dword [edi + 8]
mov ebx, dword [edi + 4]
mov ecx, ebx
push esi
call fcn.0042a750
test eax, eax
je 0x42b38e
mov eax, 1
jmp 0x42b39a
push esi
mov ecx, ebx
call fcn.0042a570
test eax, eax
je 0x42b3a1
mov dword [edi + 0x10], 1
mov ecx, dword [ebp - 4]
pop esi
pop ebx
xor ecx, ebp
pop edi
call fcn.0042cb29
mov esp, ebp
pop ebp
ret