Function at 0x4f1440
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, dword [0x5ac5dc]
push esi
mov esi, ecx
mov ecx, ebp
call fcn.004e2760
test eax, eax
je 0x4f1b67
push ebx
push edi
mov edx, ebp
mov ecx, 1
call fcn.00454ec0
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 0
push 0x46
push 0xc5
push 0x78
push esi
call edi
push 0
push 0x46
push 0xc5
push 0x79
push esi
call edi
push 0
push 0x20
push 0xc5
push 0x7a
push esi
call edi
push 0
push 0x20
push 0xc5
push 0x7b
push esi
call edi
lea eax, [ebp + 0x1188]
push eax
push 0
push 0xc
push 0x78
push esi
call edi
lea ecx, [ebp + 0x11ec]
push ecx
push 0
push 0xc
push 0x79
push esi
call edi
lea edx, [ebp + 0x1250]
push edx
push 0
push 0xc
push 0x7a
push esi
call edi
lea eax, [ebp + 0x12b4]
push eax
push 0
push 0xc
push 0x7b
push esi
call edi
mov edx, dword [0x5ac9e0]
mov ebx, dword [sym.imp.USER32.dll_CheckDlgButton]
xor ecx, ecx
test edx, edx
setne cl
push ecx
push 0x7c
push esi
call ebx
mov dword [0x5adc60], 0
call fcn.00517130
push 0x5a98a0
push 0x64
push 0x5b0390
push 0x589d2c
mov edx, str.network
mov ecx, str.text
call fcn.004b1f10
mov al, byte [0x5b0390]
test al, al
je 0x4f1562
push 0x589d2c
push 0x5b0390
call fcn.005809c6
add esp, 8
test eax, eax
je 0x4f159a
push str.Random
push 0x5b0390
call fcn.005809c6
add esp, 8
test eax, eax
je 0x4f159a
lea eax, [ebp + 0x1c8c]
mov edx, 0x5b0390
sub edx, eax
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4f1570
mov al, byte [0x5b0390]
test al, al
jne 0x4f159a
lea eax, [ebp + 0x1444]
mov edx, 0x5b0390
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4f1590
mov edx, dword [0x5b4310]
push 0
push 0x10
push 0x10
push 1
push 0x13
push edx
call dword [sym.imp.USER32.dll_LoadImageA]
push eax
push 1
push 0xf7
push 0x7f
push esi
call edi
mov eax, dword [0x5b4310]
push 0
push 0x10
push 0x10
push 1
push 0x13
push eax
call dword [sym.imp.USER32.dll_LoadImageA]
push eax
push 1
push 0xf7
push 0x95
push esi
call edi
xor edx, edx
mov ecx, esi
call fcn.00517460
xor edx, edx
mov ecx, esi
call fcn.005181d0
xor eax, eax
push eax
push 0x3c
push 0xc5
push 0xa3
push esi
mov dword [0x5adc5c], eax
mov dword [0x5adc70], eax
call edi
push 0
push 0x1e
push 0xc5
push 0xa4
push esi
call edi
lea ecx, [ebp + 0x840]
push ecx
push 0
push 0xc
push 0xa3
push esi
call edi
add ebp, 0x8a4
push ebp
push 0
push 0xc
push 0xa4
push esi
call edi
mov ecx, dword [0x5ac5dc]
call fcn.004e29b0
test eax, eax
mov ebp, dword [sym.imp.USER32.dll_EnableWindow]
jne 0x4f166d
mov ecx, dword [0x5ac5dc]
call fcn.004e2a60
test eax, eax
je 0x4f1689
push 0
push 0x78
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 0
push 0x79
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
mov ecx, dword [0x5ac5dc]
call fcn.004e3300
test eax, eax
je 0x4f16ba
push 0
push 0xa3
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 0
push 0xa4
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
mov eax, dword [0x59bc9c]
test eax, eax
je 0x4f16de
push 0
push 0xa6
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
mov dword [0x59bca0], 1
mov ebp, dword [0x59bc9c]
xor edx, edx
test ebp, ebp
setne dl
push edx
push 0xa5
push esi
call ebx
mov edx, dword [0x59bca0]
xor eax, eax
test edx, edx
setne al
push eax
push 0xa6
push esi
call ebx
mov edx, dword [0x59bca4]
xor ecx, ecx
test edx, edx
sete cl
push ecx
push 0xa9
push esi
call ebx
mov ecx, dword [0x59bca4]
xor edx, edx
test ecx, ecx
setne dl
push edx
push 0xaa
push esi
call ebx
mov ecx, dword [0x5ac9d8]
xor eax, eax
test ecx, ecx
setne al
push eax
push 0xaf
push esi
call ebx
mov eax, dword [0x5ac9dc]
xor ecx, ecx
test eax, eax
setne cl
push ecx
push 0xb0
push esi
call ebx
mov eax, dword [0x59bcac]
xor edx, edx
test eax, eax
setne dl
push edx
push 0xb1
push esi
call ebx
mov ebp, dword [0x59bca8]
xor eax, eax
test ebp, ebp
setne al
push eax
push 0xb2
push esi
call ebx
mov ecx, dword [0x59bcb0]
mov edx, dword [0x59bcb4]
mov eax, dword [0x59bcb8]
mov dword [0x5ada60], ecx
mov ecx, dword [0x59bcbc]
mov dword [0x5ada64], edx
mov edx, dword [0x59bcc0]
mov dword [0x5ada68], eax
mov eax, dword [0x59bcf4]
mov dword [0x5ada6c], ecx
mov ecx, dword [0x5ae590]
mov dword [0x5ada70], edx
mov dx, word [0x59bcf8]
mov dword [0x5ada74], eax
mov ax, word [0x59bcfc]
mov dword [0x5ada78], ecx
mov word [0x5ada84], dx
mov ecx, dword [0x5ae594]
mov edx, dword [0x5ae598]
mov word [0x5ada88], ax
mov dword [0x5ada7c], ecx
mov dword [0x5ada80], edx
xor eax, eax
mov cl, byte [eax + 0x5ae5a0]
mov byte [eax + 0x5ada90], cl
inc eax
test cl, cl
jne 0x4f1810
push str.6667
push 0
push 0xc
push 0xb4
push esi
call edi
mov eax, dword [0x59bd30]
push 0x5b1450
mov edx, 0x104
mov ecx, 0x5ad7d8
mov dword [0x5ad8dc], eax
call fcn.0041ee40
push 0x5b1558
mov edx, 0x104
mov ecx, 0x5ad6d0
call fcn.0041ee40
push 0x5b1660
mov edx, 0x104
mov ecx, 0x5ad4c0
call fcn.0041ee40
push 0
push 0xa
push 0xc5
push 0xc5
push esi
call edi
push 0
push 0x1e
push 0xc5
push 0xc7
push esi
call edi
push 0
push 0xa
push 0xc5
push 0xc9
push esi
call edi
mov eax, dword [0x5a9278]
movzx ecx, word [0x59bb5c]
xor edx, edx
test eax, eax
setne dl
mov dword [0x5adc68], ecx
mov dword [0x5adc64], eax
push edx
push 0xc3
push esi
call ebx
push 0x5a9280
push 0
push 0xc
push 0xc5
push esi
call edi
push 0x5a92e4
push 0
push 0xc
push 0xc7
push esi
call edi
movzx eax, word [0x59bb5c]
mov ebp, dword [sym.imp.USER32.dll_SetDlgItemInt]
push 0
push eax
push 0xc9
push esi
call ebp
mov eax, dword [0x59bb54]
xor ecx, ecx
test eax, eax
setne cl
push ecx
push 0xca
push esi
call ebx
mov ecx, dword [0x59bb58]
xor edx, edx
test ecx, ecx
setne dl
push edx
push 0xcb
push esi
call ebx
mov eax, dword [0x59bb58]
mov dword [0x5adc6c], eax
mov eax, dword [0x5a927c]
xor ecx, ecx
test eax, eax
setne cl
push ecx
push 0xcc
push esi
call ebx
push 0
push 0
push 0x14b
push 0xd3
push esi
call edi
xor edx, edx
mov ecx, 0x110e
call fcn.0041d620
push eax
push 0
push 0x143
push 0xd3
push esi
call edi
xor edx, edx
mov ecx, 0x110f
call fcn.0041d620
push eax
push 0
push 0x143
push 0xd3
push esi
call edi
xor edx, edx
mov ecx, 0x1110
call fcn.0041d620
push eax
push 0
push 0x143
push 0xd3
push esi
call edi
xor edx, edx
mov ecx, 0x1111
call fcn.0041d620
push eax
push 0
push 0x143
push 0xd3
push esi
call edi
mov eax, dword [0x5a8b64]
test eax, eax
mov eax, dword [0x5a8b60]
push 0
je 0x4f19ef
test eax, eax
je 0x4f19f7
push 3
jmp 0x4f19fd
test eax, eax
je 0x4f19fb
push 2
jmp 0x4f19fd
push 1
jmp 0x4f19fd
push 0
push 0x14e
push 0xd3
push esi
call edi
push 0
push 0
push 0x14b
push 0xd5
push esi
call edi
xor edx, edx
mov ecx, 0x1112
call fcn.0041d620
push eax
push 0
push 0x143
push 0xd5
push esi
call edi
xor edx, edx
mov ecx, 0x1113
call fcn.0041d620
push eax
push 0
push 0x143
push 0xd5
push esi
call edi
xor edx, edx
mov ecx, 0x1114
call fcn.0041d620
push eax
push 0
push 0x143
push 0xd5
push esi
call edi
mov eax, dword [0x5a8b5c]
test eax, eax
jl 0x4f1a7d
cmp eax, 2
jle 0x4f1a84
xor eax, eax
mov dword [0x5a8b5c], eax
push 0
push eax
push 0x14e
push 0xd5
push esi
call edi
mov al, byte [0x5a8a28]
test al, al
jne 0x4f1aaf
push 0x64
push 0x5a8a28
push str.SOCKS_HOST
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push 0x5a8a28
push 0
push 0xc
push 0xd7
push esi
call edi
movzx edx, word [0x59ba34]
push 0
push edx
push 0xdd
push esi
call ebp
push 0x5a8a90
push 0
push 0xc
push 0xd9
push esi
call edi
push 0x5a8af8
push 0
push 0xc
push 0xdb
push esi
call edi
push 0x583b74
push 0
push 0xc
push 0xdf
push esi
call edi
mov ebp, dword [0x5a8b6c]
test ebp, ebp
je 0x4f1b65
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebp]
push eax
push str._s_r_n
push 0x5ac5e0
call ebx
add esp, 0xc
push 0x7d000
push 0x7d000
push 0xdf
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 1
mov ecx, eax
call fcn.004779b0
push 0x5ac5e0
push 0
push 0xc2
push 0xdf
push esi
call edi
mov ebp, dword [ebp + 0x40]
test ebp, ebp
jne 0x4f1b15
pop edi
pop ebx
pop esi
pop ebp
ret