Function at 0x49ca50
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6a0
mov eax, dword [0x5c1334]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push str.no_proxy
mov dword [ebp - 0x6a0], ecx
xor esi, esi
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
add esp, 4
mov byte [ebp - 0x188], 0
test eax, eax
je 0x49cab9
push 0x104
lea ecx, [ebp - 0x188]
push ecx
push eax
call edi
cmp byte [ebp - 0x188], 0
je 0x49cab9
lea eax, [ebp - 0x188]
push eax
call dword [0x5c1c80]
add esp, 4
mov ebx, eax
jmp 0x49cabb
xor ebx, ebx
test ebx, ebx
jne 0x49cb04
push str.NO_PROXY
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
mov byte [ebp - 0x28c], bl
test eax, eax
je 0x49cb02
push 0x104
lea ecx, [ebp - 0x28c]
push ecx
push eax
call edi
cmp byte [ebp - 0x28c], bl
je 0x49cb02
lea eax, [ebp - 0x28c]
push eax
call dword [0x5c1c80]
add esp, 4
mov ebx, eax
jmp 0x49cb04
xor ebx, ebx
mov edi, dword [ebp - 0x6a0]
mov edx, ebx
mov ecx, dword [edi + 0x98]
call fcn.0049c910
test eax, eax
jne 0x49ccdd
mov eax, dword [edi + 0x2c0]
lea esi, [ebp - 0x84]
mov edi, dword [eax]
mov al, byte [edi]
test al, al
je 0x49cb4c
movsx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [esi], al
lea edi, [edi + 1]
mov al, byte [edi]
add esp, 4
inc esi
test al, al
jne 0x49cb33
mov eax, dword [str._proxy]
mov dword [esi], eax
mov ax, word [0x59adec]
mov word [esi + 4], ax
mov al, byte [0x59adee]
mov byte [esi + 6], al
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
add esp, 4
mov byte [ebp - 0x390], 0
test eax, eax
je 0x49cbb2
push 0x104
lea ecx, [ebp - 0x390]
push ecx
push eax
call edi
cmp byte [ebp - 0x390], 0
je 0x49cbb2
lea eax, [ebp - 0x390]
push eax
call dword [0x5c1c80]
add esp, 4
mov esi, eax
jmp 0x49cbb4
xor esi, esi
test esi, esi
jne 0x49cc42
lea edx, [ebp - 0x84]
mov ecx, str.http_proxy
call fcn.004c2eb0
test eax, eax
jne 0x49cc4b
mov esi, 0x80
lea edx, [ebp - 0x84]
nop dword [eax + eax]
mov cl, byte [edx]
call fcn.004c2de0
mov byte [edx], al
lea edx, [edx + 1]
test al, al
je 0x49cbf5
sub esi, 1
jne 0x49cbe0
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
mov byte [ebp - 0x494], 0
test eax, eax
je 0x49cc3c
push 0x104
lea ecx, [ebp - 0x494]
push ecx
push eax
call edi
cmp byte [ebp - 0x494], 0
je 0x49cc3c
lea eax, [ebp - 0x494]
push eax
call dword [0x5c1c80]
add esp, 4
mov esi, eax
jmp 0x49cc3e
xor esi, esi
test esi, esi
je 0x49cc4b
cmp byte [esi], 0
jne 0x49ccdd
push str.all_proxy
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
mov byte [ebp - 0x598], 0
test eax, eax
je 0x49cc90
push 0x104
lea ecx, [ebp - 0x598]
push ecx
push eax
call edi
cmp byte [ebp - 0x598], 0
je 0x49cc90
lea eax, [ebp - 0x598]
push eax
call dword [0x5c1c80]
add esp, 4
mov esi, eax
jmp 0x49cc92
xor esi, esi
test esi, esi
jne 0x49ccdd
push str.ALL_PROXY
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
mov byte [ebp - 0x69c], 0
test eax, eax
je 0x49ccdb
push 0x104
lea ecx, [ebp - 0x69c]
push ecx
push eax
call edi
cmp byte [ebp - 0x69c], 0
je 0x49ccdb
lea eax, [ebp - 0x69c]
push eax
call dword [0x5c1c80]
add esp, 4
mov esi, eax
jmp 0x49ccdd
xor esi, esi
test ebx, ebx
je 0x49cceb
push ebx
call dword [0x5c1c7c]
add esp, 4
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00528802
mov esp, ebp
pop ebp
ret