Function at 0x4303cc
Capabilities:
Query environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
xor edi, edi
test byte [ebp + 0x10], 1
push 0x40
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
pop ebx
je 0x4304e3
push ebx
lea eax, [ebp - 4]
push eax
mov dword [ebp - 8], ebx
call fcn.0042eb9e
mov esi, eax
cmp esi, edi
jl 0x4305fc
push dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x430445
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x43042f
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x43043a
mov esi, 0x80004005
push esi
push 0xef
jmp 0x4305b2
cmp dword [ebp - 8], eax
jae 0x4304a9
push eax
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
call fcn.0042eb9e
mov esi, eax
test esi, esi
js 0x4305fc
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 0xc]
call edi
test eax, eax
jne 0x43049a
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430484
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x43048f
mov esi, 0x80004005
push esi
push 0xfa
jmp 0x4305b2
cmp dword [ebp - 8], eax
jae 0x4304a9
mov esi, 0x8007007a
jmp 0x4305fc
cmp eax, 0x104
jbe 0x4304e3
lea eax, [ebp - 4]
push eax
call fcn.004302f8
mov esi, eax
cmp esi, 0x80070057
jne 0x4304c5
xor esi, esi
test esi, esi
js 0x4305fc
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.0042ec56
mov esi, eax
test esi, esi
js 0x4305fc
test byte [ebp + 0x10], 2
mov eax, dword [ebp - 4]
je 0x4305de
and dword [ebp - 0x10], 0
test eax, eax
jne 0x4304fb
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], eax
cmp dword [ebp - 8], ebx
jbe 0x430506
mov ebx, dword [ebp - 8]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042eb9e
mov esi, eax
test esi, esi
js 0x4305fc
mov edi, dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x430558
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x430545
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x430550
mov esi, 0x80004005
push esi
push 0x120
jmp 0x4305b2
cmp ebx, eax
jae 0x4305c6
mov ebx, eax
cmp eax, 0x104
jb 0x430568
lea ebx, [eax + 7]
push ebx
lea eax, [ebp - 0xc]
push eax
call fcn.0042eb9e
mov esi, eax
test esi, esi
js 0x4305fc
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
push ebx
push dword [ebp + 0x10]
call edi
test eax, eax
jne 0x4305be
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4305a1
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x4305ac
mov esi, 0x80004005
push esi
push 0x12b
push 0x44c8ba
call fcn.004315ca
jmp 0x4305fc
cmp ebx, eax
jb 0x43049f
cmp eax, 0x104
jbe 0x4305e5
lea eax, [ebp - 0xc]
push eax
call fcn.004302f8
mov esi, eax
test esi, esi
js 0x4305fc
jmp 0x4305e5
and dword [ebp - 4], 0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4305ef
mov eax, dword [ebp + 0xc]
push 0
push eax
push dword [ebp + 8]
call fcn.0042fb3e
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x43060a
push dword [ebp - 0xc]
call fcn.0042ecb2
cmp dword [ebp - 4], 0
je 0x430618
push dword [ebp - 4]
call fcn.0042ecb2
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0xc