Function at 0x43d560
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5a4
mov eax, dword [0x55d68c]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x168], 0
push 0xff
push 0
lea eax, [ebp - 0x167]
push eax
call fcn.004611e0
add esp, 0xc
push 0x100
lea ecx, [ebp - 0x168]
push ecx
push 0x54d0ac
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
push 0x54d0d0
lea edx, [ebp - 0x168]
push edx
lea eax, [ebp - 0x68]
push eax
call fcn.00440ac0
add esp, 0xc
mov dword [ebp - 0x16c], 0
jmp 0x43d5da
mov ecx, dword [ebp - 0x16c]
add ecx, 1
mov dword [ebp - 0x16c], ecx
lea ecx, [ebp - 0x68]
call fcn.00404470
cmp dword [ebp - 0x16c], eax
jae 0x43da0d
push 0x54d0d4
mov edx, dword [ebp - 0x16c]
push edx
lea ecx, [ebp - 0x68]
call fcn.00408910
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.0042a140
add esp, 0xc
lea ecx, [ebp - 0x274]
call fcn.00402b30
push str.localhost:
lea ecx, [ebp - 0x2ac]
call fcn.00402b60
mov byte [ebp - 0x1a4], 0
xor ecx, ecx
mov dword [ebp - 0x1a3], ecx
mov dword [ebp - 0x19f], ecx
mov dword [ebp - 0x19b], ecx
mov dword [ebp - 0x197], ecx
mov dword [ebp - 0x193], ecx
mov word [ebp - 0x18f], cx
mov byte [ebp - 0x18d], cl
push 0xa
lea edx, [ebp - 0x1a4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004f2543
add esp, 0xc
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x2ac]
push edx
lea eax, [ebp - 0x20]
push eax
call fcn.0042a140
add esp, 0xc
push eax
lea ecx, [ebp - 0x2ac]
call fcn.004063a0
push eax
lea ecx, [ebp - 0x274]
call fcn.004045f0
lea ecx, [ebp - 0x20]
call fcn.00402c40
mov byte [ebp - 0x16d], 1
push str._tOID.2.16.840.1.101.3.4.2.1_t52:A7:76:15:0A:8B:B3:03:80:20:66:04:31:A3:33:05:FB:82:74:E2:BC:19:52:71:79:5F:09:2A:9B:1C:B2:C7_tU_tAAAAAAAAAAAAAAAUAAAAXHJfhlQ8zc1Wtj1yz3Eg2v6xTy6cMFoxCzAJBgNVBAYTAkNOMRAwDgYDVQQHDAdCZWlKaW5nMRIwEAYDVQQKDAlNaWNyb2RvbmUxDTALBgNVBAsMBHRlY2gxFjAUBgNVBAMMDVNlY3VyaXR5IFJvb3Q
lea ecx, [ebp - 0x2ac]
push ecx
lea edx, [ebp - 0x3c]
push edx
call fcn.0042a140
add esp, 0xc
push eax
lea ecx, [ebp - 0x2ac]
call fcn.004063a0
lea ecx, [ebp - 0x3c]
call fcn.00402c40
lea ecx, [ebp - 0x18c]
call fcn.00402b30
push 1
push 0x40
push 1
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x258]
call fcn.0043e110
lea ecx, [ebp - 0x258]
call fcn.0043e1f0
movzx ecx, al
test ecx, ecx
je 0x43d781
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0x258]
push eax
call fcn.0043f600
add esp, 8
mov dword [ebp - 0x59c], eax
mov ecx, dword [ebp - 0x59c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x59c]
add ecx, dword [edx + 4]
call fcn.0043cf70
test eax, eax
je 0x43d776
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
call fcn.00417af0
add esp, 8
movzx edx, al
test edx, edx
je 0x43d774
mov byte [ebp - 0x16d], 0
jmp 0x43d776
jmp 0x43d718
lea ecx, [ebp - 0x258]
call fcn.0043e210
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x43d9d1
lea ecx, [ebp - 0x2e4]
call fcn.00402b30
lea ecx, [ebp - 0x2c8]
call fcn.00402b30
push 1
push 0x40
push 1
lea ecx, [ebp - 0x290]
push ecx
lea ecx, [ebp - 0x398]
call fcn.0043e110
lea ecx, [ebp - 0x398]
call fcn.0043e1f0
movzx edx, al
test edx, edx
je 0x43d944
push 1
push 3
lea ecx, [ebp - 0x4e8]
call fcn.00432e30
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x398]
push ecx
call fcn.0043f600
add esp, 8
mov dword [ebp - 0x5a0], eax
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5a0]
add ecx, dword [eax + 4]
call fcn.0043cf70
test eax, eax
je 0x43d88d
push 0
lea ecx, [ebp - 0x274]
push ecx
lea ecx, [ebp - 0x2e4]
call fcn.004117c0
mov dword [ebp - 0x4ec], eax
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [0x5575cc]
jne 0x43d888
lea eax, [ebp - 0x4e8]
test eax, eax
je 0x43d85c
lea ecx, [ebp - 0x4e8]
add ecx, 0x10
mov dword [ebp - 0x5a4], ecx
jmp 0x43d866
mov dword [ebp - 0x5a4], 0
push 0x43cf90
lea edx, [ebp - 0x2e4]
push edx
mov eax, dword [ebp - 0x5a4]
push eax
call fcn.0040c450
add esp, 8
mov ecx, eax
call fcn.0043dfe0
jmp 0x43d7e3
push 0x43cf90
lea ecx, [ebp - 0x2ac]
push ecx
push 0x43cf90
lea ecx, [ebp - 0x4d8]
call fcn.0043dfe0
push eax
call fcn.0040c450
add esp, 8
mov ecx, eax
call fcn.0043dfe0
lea ecx, [ebp - 0x398]
call fcn.0043e210
push 1
push 0x40
push 2
lea edx, [ebp - 0x290]
push edx
lea ecx, [ebp - 0x440]
call fcn.0043ed20
lea ecx, [ebp - 0x440]
call fcn.0043ee00
movzx eax, al
test eax, eax
je 0x43d921
push 0x43cf90
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x4e8]
call fcn.0043c6a0
push eax
lea edx, [ebp - 0x440]
push edx
call fcn.0040c450
add esp, 8
mov ecx, eax
call fcn.0043dfe0
lea ecx, [ebp - 0x58]
call fcn.00402c40
lea ecx, [ebp - 0x440]
call fcn.0043ee20
lea ecx, [ebp - 0x440]
call fcn.0043d530
lea ecx, [ebp - 0x4e8]
call fcn.00432700
jmp 0x43d9b0
push 1
push 0x40
push 8
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x598]
call fcn.0043ed20
lea ecx, [ebp - 0x598]
call fcn.0043ee00
movzx ecx, al
test ecx, ecx
je 0x43d99a
push 0x43cf90
lea edx, [ebp - 0x2ac]
push edx
push 0x43cf90
lea ecx, [ebp - 0x598]
call fcn.0043dfe0
push eax
call fcn.0040c450
add esp, 8
mov ecx, eax
call fcn.0043dfe0
lea ecx, [ebp - 0x598]
call fcn.0043ee20
lea ecx, [ebp - 0x598]
call fcn.0043d530
lea ecx, [ebp - 0x398]
call fcn.0043d500
lea ecx, [ebp - 0x2c8]
call fcn.00402c40
lea ecx, [ebp - 0x2e4]
call fcn.00402c40
lea ecx, [ebp - 0x258]
call fcn.0043d500
lea ecx, [ebp - 0x18c]
call fcn.00402c40
lea ecx, [ebp - 0x2ac]
call fcn.00402c40
lea ecx, [ebp - 0x274]
call fcn.00402c40
lea ecx, [ebp - 0x290]
call fcn.00402c40
jmp 0x43d5cb
lea ecx, [ebp - 0x68]
call fcn.004037c0
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00455328
mov esp, ebp
pop ebp
ret