Function at 0x4286cd
Capabilities:
Get hostname
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x518764]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x2c], 0
xor eax, eax
and dword [ebp - 0x30], 0
push ebx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x34], 0x10
push esi
mov esi, dword [ebp + 0xc]
push edi
lea edi, [ebp - 0x18]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
test ebx, ebx
je 0x428e89
test esi, esi
je 0x428e89
mov edi, esi
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x428714
sub edi, ecx
mov dword [ebp - 0x28], edi
inc edi
push edi
call fcn.004ac04c
mov dword [ebp - 0x1c], eax
pop ecx
test eax, eax
jne 0x428736
push 0xfffffffffffffff3
jmp 0x428e8b
push edi
push 0
push eax
call fcn.004a7f20
mov edi, dword [ebp - 0x28]
push edi
push esi
mov esi, dword [ebp - 0x1c]
push esi
call fcn.004af750
and dword [ebp - 0x24], 0
push esi
push 0
push 1
push 3
push ebx
call fcn.00429952
add esp, 0x2c
test edi, edi
jle 0x428e7d
mov eax, dword [ebp - 0x24]
mov al, byte [esi + eax]
push eax
mov dword [ebp - 0x20], eax
call fcn.004286ae
pop ecx
test eax, eax
jne 0x428e71
mov eax, dword [ebp - 0x20]
cmp al, 0x2d
je 0x428790
cmp al, 0x2f
jne 0x428e71
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x30]
push ecx
inc eax
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], eax
add eax, esi
push ecx
push eax
call fcn.0042866f
add esp, 0xc
test eax, eax
je 0x428e71
mov esi, dword [ebp - 0x30]
push str.aztbsijeh_krxqdgumc
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428801
and dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00428550
add esp, 0x10
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x428e74
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x428e6c
push 0x14
lea eax, [ebx + 0x328]
jmp 0x428e30
push 0x4e2ab8
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428844
mov esi, dword [ebp - 0x1c]
lea eax, [ebx + 0x318]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00428550
add esp, 0x10
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x428e74
mov dword [ebx + 0x260], 1
jmp 0x428e74
push 0x4e2abc
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428875
mov esi, dword [ebp - 0x1c]
lea eax, [ebx + 0x31c]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00428550
add esp, 0x10
mov dword [ebp - 0x2c], eax
jmp 0x428e74
push 0x4e2ac0
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428895
mov dword [ebx + 0x254], 1
jmp 0x428e6c
push 0x4e2ac4
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x4288b5
mov dword [ebx + 0x258], 1
jmp 0x428e6c
push 0x4e2ac8
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x4288d5
mov dword [ebx + 0x24c], 1
jmp 0x428e6c
push 0x4e2acc
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x4288f5
mov dword [ebx + 0x3d8], 1
jmp 0x428e6c
push 0x4dfc74
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428915
mov dword [ebx + 0x240], 1
jmp 0x428e6c
push 0x4e2ad0
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428935
mov dword [ebx + 0x250], 1
jmp 0x428e6c
push 0x4e2ad4
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
je 0x428e62
push 0x4e2ad8
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
je 0x428e62
push 0x4e2adc
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x42897f
mov dword [ebx + 0x248], 1
jmp 0x428e6c
push 0x4e2ae0
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x42899f
mov dword [ebx + 0x244], 1
jmp 0x428e6c
push 0x4e2ae4
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x4289bf
mov dword [ebx + 0x264], 1
jmp 0x428e6c
push 0x4e2ae8
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x4289df
mov dword [ebx + 0x3f8], 1
jmp 0x428e6c
push 0x4e2aec
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428a1c
push 3
pop esi
cmp dword [ebx + 0x2c0], esi
jg 0x428e6c
push 0x51
push eax
lea eax, [ebx + 0x2c4]
push eax
call fcn.004a7f20
add esp, 0xc
mov dword [ebx + 0x2c0], esi
jmp 0x428e6c
push 0x4e2af0
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428aa6
and dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00428550
mov edi, dword [ebp - 0x20]
add esp, 0x10
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x428b58
test edi, edi
je 0x428b63
cmp dword [ebx + 0x2c0], 4
jg 0x428b58
push 0x51
lea esi, [ebx + 0x2c4]
push 0
push esi
call fcn.004a7f20
push 0x51
push edi
push esi
call fcn.004af750
add esp, 0x18
mov dword [ebx + 0x2c0], 4
cmp byte [esi], 0
mov esi, dword [ebp - 0x1c]
jne 0x428b58
and dword [ebx + 0x2c0], 0
jmp 0x428b58
push 0x4e2af4
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428ae3
push 7
pop esi
cmp dword [ebx + 0x268], esi
jg 0x428e6c
push 0x51
push eax
lea eax, [ebx + 0x26c]
push eax
call fcn.004a7f20
add esp, 0xc
mov dword [ebx + 0x268], esi
jmp 0x428e6c
push 0x4e2af8
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428b6b
and dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00428550
mov edi, dword [ebp - 0x20]
add esp, 0x10
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x428b58
test edi, edi
je 0x428b63
cmp dword [ebx + 0x268], 8
jg 0x428b58
push 0x51
lea esi, [ebx + 0x26c]
push 0
push esi
call fcn.004a7f20
push 0x51
push edi
push esi
call fcn.004af750
add esp, 0x18
mov dword [ebx + 0x268], 8
cmp byte [esi], 0
mov esi, dword [ebp - 0x1c]
jne 0x428b58
and dword [ebx + 0x268], 0
test edi, edi
je 0x428b63
push edi
call fcn.004ac047
pop ecx
mov edi, dword [ebp - 0x28]
jmp 0x428e74
push 0x4e2afc
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428bfa
cmp dword [ebx + 0x268], 6
jg 0x428e6c
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x428bdc
push 0x51
lea esi, [ebx + 0x26c]
push 0
push esi
call fcn.004a7f20
push 0x51
lea eax, [ebp - 0x18]
push eax
push esi
call fcn.004af750
add esp, 0x18
mov dword [ebx + 0x268], 6
cmp byte [esi], 0
mov esi, dword [ebp - 0x1c]
jne 0x428e74
and dword [ebx + 0x268], 0
jmp 0x428e74
push 0x4e2b00
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 2
push 1
push ebx
call fcn.00429952
add esp, 0x14
jmp 0x428e6c
push str.pofnv
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428d5c
lea esi, [ebx + 0x324]
push esi
push edi
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00428550
add esp, 0x10
mov dword [ebp - 0x2c], eax
cmp dword [esi], 0
je 0x428e6c
push 0x25
push dword [esi]
call fcn.004a8f20
pop ecx
pop ecx
test eax, eax
je 0x428ca6
mov ecx, dword [esi]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428c47
sub ecx, edx
mov eax, 0x208
lea esi, [ecx + ecx]
cmp esi, eax
jge 0x428c5e
mov esi, eax
lea eax, [esi + 2]
push 1
push eax
call fcn.004ac03c
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x428ca0
push esi
push edi
push dword [ebx + 0x324]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
test eax, eax
jle 0x428c99
cmp eax, esi
jge 0x428c99
lea esi, [ebx + 0x324]
push dword [esi]
call fcn.004ac047
pop ecx
mov dword [esi], edi
jmp 0x428ca6
push edi
call fcn.004ac047
pop ecx
lea esi, [ebx + 0x324]
mov edi, dword [esi]
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428cad
sub ecx, edx
cmp byte [edi + ecx - 1], 0x22
jne 0x428cde
mov ecx, edi
mov dword [ebp - 0x20], 1
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428cc9
sub ecx, edx
mov byte [edi + ecx - 1], al
mov edi, dword [ebx + 0x324]
jmp 0x428ce2
and dword [ebp - 0x20], 0
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428ce7
sub ecx, edx
cmp byte [ecx + edi - 1], 0x5c
jne 0x428d38
mov edx, edi
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428cfe
sub ecx, esi
mov byte [ecx + edx - 1], al
mov edx, dword [ebx + 0x324]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428d16
mov edi, edx
sub ecx, esi
je 0x428d38
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428d28
sub ecx, esi
cmp byte [edx + ecx - 1], 0x5c
je 0x428cf9
cmp dword [ebp - 0x20], 0
je 0x428d54
test edi, edi
je 0x428d54
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x428d43
mov ax, word [0x4e06a4]
mov word [edi], ax
mov edi, dword [ebp - 0x28]
jmp 0x428e6c
push 0x4e2b2c
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428da8
and dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00428550
add esp, 0x10
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x428e74
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x428e6c
push 0x32
lea eax, [ebx + 0x33d]
jmp 0x428e30
push 0x4e2b30
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428df1
and dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00428550
add esp, 0x10
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x428e74
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x428e6c
push 0x64
lea eax, [ebx + 0x370]
jmp 0x428e30
push 0x4e2b34
push esi
call fcn.004af65f
pop ecx
pop ecx
test eax, eax
jne 0x428e42
and dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00428550
add esp, 0x10
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x428e74
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x428e6c
push 0x1a
lea eax, [ebx + 0x3dc]
push esi
push eax
call fcn.004af750
push esi
call fcn.004ac047
add esp, 0x10
jmp 0x428e6c
push 0x4e2b38
push esi
call fcn.004af65f
mov esi, dword [ebp - 0x1c]
pop ecx
pop ecx
test eax, eax
jne 0x428e74
mov dword [ebx + 0x504], 1
jmp 0x428e74
mov dword [ebx + 0x25c], 1
mov esi, dword [ebp - 0x1c]
jmp 0x428e74
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x428769
push esi
call fcn.004ac047
mov eax, dword [ebp - 0x2c]
pop ecx
jmp 0x428e8c
push 0xfffffffffffffff8
pop eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a50d6
leave
ret