Function at 0x42f57b
Capabilities:
Query environment variable

Disassembly:
sub esp, 0x42c
push ebx
push ebp
push esi
push edi
push ecx
push str.__s_
lea eax, [esp + 0x28]
mov byte [esp + 0x27], dl
push 0x106
push eax
call fcn.0040203a
add esp, 0x10
call fcn.00406399
cmp dword [eax], 1
jne 0x42f609
lea eax, [esp + 0x20]
mov edi, 0x44de30
push eax
mov ebx, str.SOFTWAREClassesCLSID0002DF01_0000_0000_C000_000000000046LocalServer32
mov esi, SysReAllocStringLen
push edi
mov edx, ebx
mov ecx, esi
call fcn.00404f81
mov ebp, str.0002DF01_0000_0000_C000_000000000046
mov ecx, esi
push ebp
push edi
mov edi, str.SOFTWAREClassesCLSIDD5E8041D_920F_45E9_B8FB_B1DEB82C6E5ETreatAs
mov edx, edi
call fcn.00404f81
lea eax, [esp + 0x30]
inc esi
push eax
push 0x44de30
mov edx, ebx
mov ecx, esi
call fcn.00404f81
push ebp
push 0x44de30
mov edx, edi
mov ecx, esi
call fcn.00404f81
add esp, 0x20
jmp 0x42f8b9
mov byte [esp + 0x1e], 0
call fcn.00406399
mov ebx, str.SOFTWAREClassesCLSID0002DF01_0000_0000_C000_000000000046LocalServer32
mov esi, SysReAllocStringLen
cmp dword [eax + 4], 1
jne 0x42f6ff
push 0x2011f
push ebx
xor ebp, ebp
mov byte [esp + 0x26], 1
push esi
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
call fcn.0042dbaa
mov edi, eax
test edi, edi
je 0x42f65e
push 0x2011f
push ebx
push esi
lea ecx, [esp + 0x20]
call fcn.0042dbaa
mov edi, eax
cmp edi, 2
jne 0x42f679
push ecx
push ecx
push 0xf013f
push ecx
push ecx
push ebx
push esi
lea ecx, [esp + 0x30]
call fcn.0041144e
mov edi, eax
cmp byte [esp + 0x1f], 0
je 0x42f6d9
xor eax, eax
push 0x206
mov word [esp + 0x234], ax
lea eax, [esp + 0x236]
push ebp
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [esp + 0x230]
mov ebp, 0x104
push ebp
push eax
push str._ProgramW6432_
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push str.Internet_Exploreriexplore.exe
lea eax, [esp + 0x234]
push eax
push str.__s_s_
lea eax, [esp + 0x2c]
push ebp
push eax
call fcn.0040203a
add esp, 0x14
test edi, edi
jne 0x42f6ed
push ecx
lea eax, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x20]
call fcn.0042dbf3
lea ecx, [esp + 0x14]
call fcn.00411434
lea ecx, [esp + 0x14]
call fcn.00411434
mov edi, 0x2021f
lea ecx, [esp + 0x14]
push edi
push ebx
xor ebp, ebp
push esi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
call fcn.0042dbaa
test eax, eax
je 0x42f72a
push edi
push ebx
push esi
lea ecx, [esp + 0x20]
call fcn.0042dbaa
cmp eax, 2
jne 0x42f743
push ecx
push ecx
push 0xf023f
push ecx
push ecx
push ebx
push esi
lea ecx, [esp + 0x30]
call fcn.0041144e
test eax, eax
jne 0x42f757
push ecx
lea eax, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x20]
call fcn.0042dbf3
lea ecx, [esp + 0x14]
call fcn.00411434
lea ecx, [esp + 0x14]
call fcn.00411434
cmp byte [esp + 0x1f], 0
jne 0x42f84a
cmp byte [esp + 0x1e], 0
mov ebp, str.0002DF01_0000_0000_C000_000000000046
mov edi, str.SOFTWAREClassesCLSIDD5E8041D_920F_45E9_B8FB_B1DEB82C6E5ETreatAs
je 0x42f7eb
and dword [esp + 0x14], 0
lea ecx, [esp + 0x14]
and dword [esp + 0x18], 0
mov ebx, 0x2011f
push ebx
push edi
push esi
call fcn.0042dbaa
test eax, eax
je 0x42f7b0
push ebx
push edi
push esi
lea ecx, [esp + 0x20]
call fcn.0042dbaa
cmp eax, 2
jne 0x42f7c9
push ecx
push ecx
push 0xf013f
push ecx
push ecx
push edi
push esi
lea ecx, [esp + 0x30]
call fcn.0041144e
test eax, eax
jne 0x42f7d9
push ecx
push ebp
push ecx
lea ecx, [esp + 0x20]
call fcn.0042dbf3
lea ecx, [esp + 0x14]
call fcn.00411434
lea ecx, [esp + 0x14]
call fcn.00411434
and dword [esp + 0x14], 0
lea ecx, [esp + 0x14]
and dword [esp + 0x18], 0
mov ebx, 0x2021f
push ebx
push edi
push esi
call fcn.0042dbaa
test eax, eax
je 0x42f816
push ebx
push edi
push esi
lea ecx, [esp + 0x20]
call fcn.0042dbaa
cmp eax, 2
jne 0x42f82f
push ecx
push ecx
push 0xf023f
push ecx
push ecx
push edi
push esi
lea ecx, [esp + 0x30]
call fcn.0041144e
test eax, eax
jne 0x42f83f
push ecx
push ebp
push ecx
lea ecx, [esp + 0x20]
call fcn.0042dbf3
lea ecx, [esp + 0x14]
call fcn.00411434
jmp 0x42f8b0
cmp byte [esp + 0x1e], 0
mov ebx, str.SOFTWAREClassesCLSID
mov edi, str.D5E8041D_920F_45e9_B8FB_B1DEB82C6E5E
je 0x42f88a
push 0xf013f
push ebx
push esi
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
call fcn.0042dbaa
test eax, eax
jne 0x42f881
push edi
lea ecx, [esp + 0x18]
call fcn.0042dc36
lea ecx, [esp + 0x14]
call fcn.00411434
push 0xf023f
push ebx
push esi
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
call fcn.0042dbaa
test eax, eax
jne 0x42f8b0
push edi
lea ecx, [esp + 0x18]
call fcn.0042dc36
lea ecx, [esp + 0x14]
call fcn.00411434
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x42c
ret