Function at 0x4ea7b0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, dword [0x59b074]
push esi
mov esi, ecx
mov ecx, ebp
call fcn.004dbea0
test eax, eax
je 0x4eae64
push ebx
push edi
mov edx, ebp
mov ecx, 1
call fcn.004525a0
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 0
push 0x46
push 0xc5
push 0x78
push esi
call edi
push 0
push 0x46
push 0xc5
push 0x79
push esi
call edi
push 0
push 0x20
push 0xc5
push 0x7a
push esi
call edi
push 0
push 0x20
push 0xc5
push 0x7b
push esi
call edi
lea eax, [ebp + 0x1126]
push eax
push 0
push 0xc
push 0x78
push esi
call edi
lea ecx, [ebp + 0x118a]
push ecx
push 0
push 0xc
push 0x79
push esi
call edi
lea edx, [ebp + 0x11ee]
push edx
push 0
push 0xc
push 0x7a
push esi
call edi
lea eax, [ebp + 0x1252]
push eax
push 0
push 0xc
push 0x7b
push esi
call edi
mov edx, dword [0x59b478]
mov ebx, dword [sym.imp.USER32.dll_CheckDlgButton]
xor ecx, ecx
test edx, edx
setne cl
push ecx
push 0x7c
push esi
call ebx
mov dword [0x59c0c0], 0
call fcn.0050f7b0
push 0x598350
push 0x64
push 0x59e7e0
push 0x57aa7c
mov edx, str.network
mov ecx, str.text
call fcn.004ac570
mov al, byte [0x59e7e0]
test al, al
je 0x4ea8d2
push 0x57aa7c
push 0x59e7e0
call fcn.00572b46
add esp, 8
test eax, eax
je 0x4ea90a
push 0x57aa74
push 0x59e7e0
call fcn.00572b46
add esp, 8
test eax, eax
je 0x4ea90a
lea eax, [ebp + 0x1bb4]
mov edx, 0x59e7e0
sub edx, eax
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4ea8e0
mov al, byte [0x59e7e0]
test al, al
jne 0x4ea90a
lea eax, [ebp + 0x13e2]
mov edx, 0x59e7e0
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4ea900
mov edx, dword [0x5a1afc]
push 0
push 0x10
push 0x10
push 1
push 0x13
push edx
call dword [sym.imp.USER32.dll_LoadImageA]
push eax
push 1
push 0xf7
push 0x7f
push esi
call edi
mov eax, dword [0x5a1afc]
push 0
push 0x10
push 0x10
push 1
push 0x13
push eax
call dword [sym.imp.USER32.dll_LoadImageA]
push eax
push 1
push 0xf7
push 0x95
push esi
call edi
xor edx, edx
mov ecx, esi
call fcn.0050fad0
xor edx, edx
mov ecx, esi
call fcn.00510b00
xor eax, eax
push eax
push 0x3c
push 0xc5
push 0xa3
push esi
mov dword [0x59c0bc], eax
mov dword [0x59c0d0], eax
call edi
push 0
push 0x1e
push 0xc5
push 0xa4
push esi
call edi
lea ecx, [ebp + 0x840]
push ecx
push 0
push 0xc
push 0xa3
push esi
call edi
add ebp, 0x8a4
push ebp
push 0
push 0xc
push 0xa4
push esi
call edi
mov ecx, dword [0x59b074]
call fcn.004dc0f0
test eax, eax
mov ebp, dword [sym.imp.USER32.dll_EnableWindow]
jne 0x4ea9dd
mov ecx, dword [0x59b074]
call fcn.004dc1a0
test eax, eax
je 0x4ea9f9
push 0
push 0x78
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 0
push 0x79
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
mov ecx, dword [0x59b074]
call fcn.004dca40
test eax, eax
je 0x4eaa2a
push 0
push 0xa3
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push 0
push 0xa4
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
mov eax, dword [0x589b40]
test eax, eax
je 0x4eaa4e
push 0
push 0xa6
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
mov dword [0x589b44], 1
mov ebp, dword [0x589b40]
xor edx, edx
test ebp, ebp
setne dl
push edx
push 0xa5
push esi
call ebx
mov edx, dword [0x589b44]
xor eax, eax
test edx, edx
setne al
push eax
push 0xa6
push esi
call ebx
mov edx, dword [0x589b48]
xor ecx, ecx
test edx, edx
sete cl
push ecx
push 0xa9
push esi
call ebx
mov ecx, dword [0x589b48]
xor edx, edx
test ecx, ecx
setne dl
push edx
push 0xaa
push esi
call ebx
mov ecx, dword [0x59b470]
xor eax, eax
test ecx, ecx
setne al
push eax
push 0xaf
push esi
call ebx
mov eax, dword [0x59b474]
xor ecx, ecx
test eax, eax
setne cl
push ecx
push 0xb0
push esi
call ebx
mov eax, dword [0x589b50]
xor edx, edx
test eax, eax
setne dl
push edx
push 0xb1
push esi
call ebx
mov ebp, dword [0x589b4c]
xor eax, eax
test ebp, ebp
setne al
push eax
push 0xb2
push esi
call ebx
mov ecx, dword [0x589b54]
mov eax, dword [0x589b5c]
mov edx, dword [0x589b58]
mov dword [0x59bed0], ecx
mov ecx, dword [0x589b60]
mov dword [0x59bed8], eax
mov eax, dword [0x59c9f0]
mov dword [0x59bed4], edx
mov edx, dword [0x589b64]
mov dword [0x59bedc], ecx
mov ecx, dword [0x59c9f4]
mov dword [0x59bee4], eax
mov dword [0x59bee0], edx
mov dword [0x59bee8], ecx
xor eax, eax
mov edi, edi
mov cl, byte [eax + 0x59c9f8]
mov byte [eax + 0x59bef0], cl
inc eax
test cl, cl
jne 0x4eab50
movzx edx, word [0x589b3c]
mov ebp, dword [sym.imp.USER32.dll_SetDlgItemInt]
push 0
push edx
push 0xb4
push esi
call ebp
push 0
push 0xa
push 0xc5
push 0xc5
push esi
call edi
push 0
push 0x1e
push 0xc5
push 0xc7
push esi
call edi
push 0
push 0xa
push 0xc5
push 0xc9
push esi
call edi
movzx eax, word [0x589a64]
mov dword [0x59c0c8], eax
mov eax, dword [0x597d28]
xor ecx, ecx
test eax, eax
setne cl
mov dword [0x59c0c4], eax
push ecx
push 0xc3
push esi
call ebx
push 0x597d30
push 0
push 0xc
push 0xc5
push esi
call edi
push 0x597d94
push 0
push 0xc
push 0xc7
push esi
call edi
movzx edx, word [0x589a64]
push 0
push edx
push 0xc9
push esi
call ebp
mov edx, dword [0x589a5c]
xor eax, eax
test edx, edx
setne al
push eax
push 0xca
push esi
call ebx
mov eax, dword [0x589a60]
xor ecx, ecx
test eax, eax
setne cl
push ecx
push 0xcb
push esi
call ebx
mov ecx, dword [0x597d2c]
mov edx, dword [0x589a60]
xor eax, eax
test ecx, ecx
setne al
mov dword [0x59c0cc], edx
push eax
push 0xcc
push esi
call ebx
push 0
push 0
push 0x14b
push 0xd3
push esi
call edi
xor edx, edx
mov ecx, 0x110e
call fcn.0041c9e0
push eax
push 0
push 0x143
push 0xd3
push esi
call edi
xor edx, edx
mov ecx, 0x110f
call fcn.0041c9e0
push eax
push 0
push 0x143
push 0xd3
push esi
call edi
xor edx, edx
mov ecx, 0x1110
call fcn.0041c9e0
push eax
push 0
push 0x143
push 0xd3
push esi
call edi
xor edx, edx
mov ecx, 0x1111
call fcn.0041c9e0
push eax
push 0
push 0x143
push 0xd3
push esi
call edi
mov eax, dword [0x59761c]
test eax, eax
mov eax, dword [0x597618]
push 0
je 0x4eacec
test eax, eax
je 0x4eacf4
push 3
jmp 0x4eacfa
test eax, eax
je 0x4eacf8
push 2
jmp 0x4eacfa
push 1
jmp 0x4eacfa
push 0
push 0x14e
push 0xd3
push esi
call edi
push 0
push 0
push 0x14b
push 0xd5
push esi
call edi
xor edx, edx
mov ecx, 0x1112
call fcn.0041c9e0
push eax
push 0
push 0x143
push 0xd5
push esi
call edi
xor edx, edx
mov ecx, 0x1113
call fcn.0041c9e0
push eax
push 0
push 0x143
push 0xd5
push esi
call edi
xor edx, edx
mov ecx, 0x1114
call fcn.0041c9e0
push eax
push 0
push 0x143
push 0xd5
push esi
call edi
mov eax, dword [0x597614]
test eax, eax
jl 0x4ead7a
cmp eax, 2
jle 0x4ead81
xor eax, eax
mov dword [0x597614], eax
push 0
push eax
push 0x14e
push 0xd5
push esi
call edi
mov al, byte [0x5974e0]
test al, al
jne 0x4eadac
push 0x64
push 0x5974e0
push str.SOCKS_HOST
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push 0x5974e0
push 0
push 0xc
push 0xd7
push esi
call edi
movzx ecx, word [0x589a30]
push 0
push ecx
push 0xdd
push esi
call ebp
push 0x597548
push 0
push 0xc
push 0xd9
push esi
call edi
push 0x5975b0
push 0
push 0xc
push 0xdb
push esi
call edi
push 0x574b10
push 0
push 0xc
push 0xdf
push esi
call edi
mov ebp, dword [0x597624]
test ebp, ebp
je 0x4eae62
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp]
push edx
push str._s_r_n
push 0x59b078
call ebx
add esp, 0xc
push 0x7d000
push 0x7d000
push 0xdf
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 1
mov ecx, eax
call fcn.004742f0
push 0x59b078
push 0
push 0xc2
push 0xdf
push esi
call edi
mov ebp, dword [ebp + 0x40]
test ebp, ebp
jne 0x4eae12
pop edi
pop ebx
pop esi
pop ebp
ret