Function at 0x422ca0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa90
mov eax, dword [0x4e7018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push edi
xor edi, edi
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 0
mov dword [ebp - 0xa88], 0
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0xa7c], edi
cmp ebx, 0xffffffff
jne 0x422d89
push 0x20a
lea eax, [ebp - 0x274]
push edi
push eax
call fcn.0040f160
add esp, 0xc
lea eax, [ebp - 0x274]
push 0x104
push eax
push str._temp__netinfo.txt
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec eax
cmp eax, 0x104
ja 0x422db3
push edi
lea eax, [ebp - 0xa7c]
push eax
push 0x1a4
push 0x40
lea eax, [ebp - 0x274]
push 0x109
push eax
call fcn.0047b9ee
mov ebx, dword [ebp - 0xa7c]
or ecx, 0xffffffff
add esp, 0x18
test eax, eax
cmovne ebx, ecx
cmp ebx, ecx
jne 0x422d7f
push str.VNLEnumerateHostAdapters:_could_not_open_output_file
push 1
call fcn.004439a0
add esp, 8
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0xa7c], 1
call fcn.0041a250
test eax, eax
jne 0x422dd4
push str.VNLEnumerateHostAdapters:_could_not_start_COM
push 1
call fcn.004439a0
add esp, 8
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
push str.VNLEnumerateHostAdapters:_could_not_form_output_file_name
push 1
call fcn.004439a0
add esp, 8
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
push str.VNLEnumerateHostAdapters:_finished_with_COM_initialization__attempt_
push 0x20
call fcn.004439a0
lea eax, [ebp - 0xa90]
push eax
push str.rootcimv2
call fcn.00474bf0
add esp, 0x10
test al, al
jne 0x422e1e
push str.VNLEnumerateHostAdapters:_could_not_open_namespace
push 1
call fcn.004439a0
add esp, 8
call fcn.0041a240
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
push esi
lea eax, [ebp - 0xa8c]
push eax
push str.Win32_NetworkAdapterConfiguration
push dword [ebp - 0xa90]
call fcn.00475070
add esp, 0xc
test al, al
jne 0x422e7a
push str.VNLEnumerateHostAdapters:_couldnt_allocate_adapter_enum
push 1
call fcn.004439a0
mov eax, dword [ebp - 0xa90]
add esp, 8
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x492480]
call esi
call fcn.0041a240
pop esi
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bf1
mov esp, ebp
pop ebp
ret
push str.VNLEnumerateHostAdapters:_created_enumerator_for_network_cards
push 0x10
call fcn.004439a0
mov eax, dword [ebp - 0xa8c]
lea ecx, [ebp - 0xa78]
add esp, 8
mov esi, dword [eax]
push ecx
lea ecx, [ebp - 0xa88]
push ecx
mov esi, dword [esi + 0x10]
mov ecx, esi
push 1
push 0xea60
push eax
call dword [0x492480]
call esi
mov esi, eax
push esi
push str.VNLEnumerateHostAdapters:_next_enumerator_returned:_0x_08x
push 0x20
call fcn.004439a0
lea eax, [ebp - 0xa84]
push eax
call fcn.0047c360
lea eax, [ebp - 0xa84]
push eax
call fcn.0047c2ad
push eax
call fcn.0047bfee
push eax
push str.Enumerating_host_adapters__current_time_is__s
lea eax, [ebp - 0x68]
push 0x64
push eax
call fcn.004516e0
add esp, 0x28
test eax, eax
js 0x422f11
mov ecx, 0x64
cmp eax, ecx
cmova eax, ecx
push eax
lea eax, [ebp - 0x68]
push eax
push ebx
call fcn.0040e225
add esp, 0xc
cmp dword [ebp - 0xa78], edi
jbe 0x423021
nop dword [eax]
test esi, esi
js 0x423021
mov eax, dword [ebp - 0xa88]
lea ecx, [ebp - 0xa80]
mov dword [ebp - 0xa80], 0
push ecx
push 0
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0x34]
mov ecx, esi
call dword [0x492480]
call esi
test eax, eax
js 0x422fc1
push dword [ebp - 0xa80]
inc edi
push edi
push str.VNLEnumerateHostAdapters:_FYI:_information_about_card___d:__S
push 2
call fcn.004439a0
push dword [ebp - 0xa80]
lea eax, [ebp - 0xa74]
push edi
push str.information_about_card___d_:__S_n
push 0x800
push eax
call fcn.004516e0
add esp, 0x24
test eax, eax
js 0x422fab
cmp eax, 0x800
mov ecx, 0x800
cmova eax, ecx
push eax
lea eax, [ebp - 0xa74]
push eax
push ebx
call fcn.0040e225
add esp, 0xc
push dword [ebp - 0xa80]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xa88]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x492480]
call esi
mov eax, dword [ebp - 0xa8c]
lea ecx, [ebp - 0xa78]
push ecx
lea ecx, [ebp - 0xa88]
push ecx
mov esi, dword [eax]
push 1
push 0xea60
push eax
mov esi, dword [esi + 0x10]
mov ecx, esi
call dword [0x492480]
call esi
mov esi, eax
push esi
push str.VNLEnumerateHostAdapters:_next_enumerator_returned:_0x_08x
push 0x20
call fcn.004439a0
add esp, 0xc
cmp dword [ebp - 0xa78], 0
ja 0x422f20
cmp esi, 0x80041003
je 0x42303f
cmp esi, 1
jne 0x423049
push str.VNLEnumerateHostAdapters:_all_network_cards_properly_enumerated
push 0x20
call fcn.004439a0
add esp, 8
jmp 0x423059
push 0xffffffffffffffff
call fcn.00419290
add esp, 4
push esi
push str.VNLEnumerateHostAdapters:_unexpected_enumeration_result:_0x_08x
push 1
call fcn.004439a0
add esp, 0xc
cmp dword [ebp - 0xa7c], 0
je 0x42306b
push ebx
call fcn.0040ec6a
add esp, 4
mov eax, dword [ebp - 0xa8c]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x492480]
call esi
mov eax, dword [ebp - 0xa90]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x492480]
call esi
call fcn.0041a240
mov ecx, dword [ebp - 4]
mov eax, 1
pop esi
pop edi
xor ecx, ebp
pop ebx
call fcn.00401bf1
mov esp, ebp
pop ebp
ret