Function at 0x4381dd
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
mov ebx, dword [ebp + 0xc]
xor eax, eax
and dword [ebp - 8], eax
xor ecx, ecx
test byte [ebp + 0x10], 1
push esi
push edi
push 0x40
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], ecx
pop edi
je 0x438304
push edi
lea eax, [ebp - 4]
mov dword [ebp - 0xc], edi
push eax
call fcn.0043a803
mov esi, eax
test esi, esi
js 0x43841f
push dword [ebp - 0xc]
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x438254
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0xf2
jmp 0x4383df
mov ecx, dword [ebp - 0xc]
cmp ecx, eax
jae 0x4382c3
push eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 4]
push eax
call fcn.0043a803
mov esi, eax
test esi, esi
js 0x43841f
push dword [ebp - 0xc]
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x4382ac
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0xfd
jmp 0x4383df
mov ecx, dword [ebp - 0xc]
cmp ecx, eax
jae 0x4382c3
mov eax, 0x8007007a
push eax
push 0x102
jmp 0x4383dd
cmp eax, 0x104
jbe 0x438301
lea eax, [ebp - 4]
push eax
call fcn.00438629
mov esi, eax
xor eax, eax
cmp esi, 0x80070057
cmove esi, eax
test esi, esi
js 0x43841f
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
call fcn.0043b04e
mov esi, eax
test esi, esi
js 0x43841f
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
test byte [ebp + 0x10], 2
je 0x438406
and dword [ebp + 0x10], 0
mov edx, ebx
test eax, eax
cmovne edx, eax
cmp ecx, edi
lea eax, [ebp - 8]
mov dword [ebp + 0xc], edx
cmova edi, ecx
push edi
push eax
call fcn.0043a803
mov esi, eax
test esi, esi
js 0x43841f
lea eax, [ebp + 0x10]
push eax
push dword [ebp - 8]
push edi
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
jne 0x438370
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0x123
jmp 0x4383df
cmp edi, eax
jae 0x4383eb
cmp eax, 0x104
lea edi, [eax + 7]
cmovb edi, eax
lea eax, [ebp - 8]
push edi
push eax
call fcn.0043a803
mov esi, eax
test esi, esi
js 0x43841f
lea eax, [ebp + 0x10]
push eax
push dword [ebp - 8]
push edi
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
jne 0x4383ce
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0x12e
jmp 0x4383df
cmp edi, eax
jae 0x4383eb
mov eax, 0x8007007a
push eax
push 0x133
mov esi, eax
push str.pathutil.cpp
call fcn.00436473
jmp 0x43841f
cmp eax, 0x104
jbe 0x438401
lea eax, [ebp - 8]
push eax
call fcn.00438629
mov esi, eax
test esi, esi
js 0x43841f
mov eax, dword [ebp - 8]
jmp 0x43840d
and dword [ebp - 4], 0
mov dword [ebp - 8], eax
test eax, eax
push 0
cmovne ebx, eax
push ebx
push dword [ebp + 8]
call fcn.0043aa95
mov esi, eax
cmp dword [ebp - 8], 0
je 0x43842d
push dword [ebp - 8]
call fcn.0043af5b
cmp dword [ebp - 4], 0
je 0x43843b
push dword [ebp - 4]
call fcn.0043af5b
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc