Function at 0x7951e0
Capabilities:
Query environment variable
Read file on windows
Write file on windows

Disassembly:
push ebp
lea ebp, reloc.ws2_32.dll_WSASetLastError
mov eax, 0x242c
call fcn.007c1eb0
mov eax, dword [0x830e54]
xor eax, ebp
mov dword [ebp + reloc.ws2_32.dll_WSASetLastError], eax
mov eax, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
push ebx
push esi
mov esi, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
push dword [eax]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x78], esi
call fcn.0077858a
xor ebx, ebx
pop ecx
mov dword [ebp - 0x74], eax
cmp eax, ebx
jne 0x79522e
mov eax, 0x335
jmp 0x79548c
push edi
push 0x410
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
push 0x7f427c
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
lea eax, reloc.ws2_32.dll_WSASetLastError
push 0x7eced0
push eax
call fcn.007c9c10
lea eax, reloc.ws2_32.dll_WSASetLastError
push 0x7f426c
push eax
call fcn.007c9c10
push 0x7ec748
push esi
call fcn.00748be9
mov edi, eax
add esp, 0x18
cmp edi, ebx
jne 0x795282
push esi
jmp 0x7953cd
lea eax, reloc.ws2_32.dll_WSASetLastError
push 0x7f1fec
push eax
call fcn.00748be9
pop ecx
pop ecx
mov dword [ebp - 0x70], eax
push edi
cmp eax, ebx
jne 0x7952a8
call fcn.007c7ab7
push esi
jmp 0x795406
call fcn.007d04f6
mov esi, 0x1000
jmp 0x795331
push esi
lea eax, reloc.ws2_32.dll_WSASetLastError
push ebx
push eax
call fcn.007c3430
push esi
lea eax, [ebp - 0x68]
push ebx
push eax
call fcn.007c3430
push edi
call fcn.007cf402
push edi
push esi
mov dword [ebp - 0x7c], eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push 1
push eax
call fcn.007cf74d
push dword [ebp + 0x23bc]
mov dword [ebp - 0x6c], eax
push dword [ebp - 0x7c]
lea eax, [ebp - 0x68]
push ebx
push esi
push eax
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
push dword [ebp - 0x80]
call fcn.007950d4
add esp, 0x48
test eax, eax
jne 0x795378
push dword [ebp - 0x70]
lea eax, [ebp - 0x68]
push dword [ebp - 0x6c]
push 1
push eax
call fcn.007c7ef5
add esp, 0x10
push edi
cmp eax, dword [ebp - 0x6c]
jne 0x7954a3
call fcn.007d04f6
pop ecx
test eax, eax
je 0x7952b4
push edi
call fcn.007c7ab7
push dword [ebp - 0x70]
call fcn.007c7ab7
pop ecx
pop ecx
cmp dword [ebp + reloc.ws2_32.dll_WSASetLastError], ebx
jne 0x7953ae
mov esi, dword [ebp - 0x78]
push esi
call fcn.00748c9e
cmp eax, reloc.ws2_32.dll_WSASetLastError
pop ecx
lea eax, reloc.ws2_32.dll_WSASetLastError
jne 0x795395
push eax
call fcn.00748c9e
push esi
mov esi, 0x32e
jmp 0x79540b
push 2
mov esi, 0x32a
push esi
push 0x82cea8
push dword [ebp - 0x74]
call fcn.0074b93c
add esp, 0x10
jmp 0x79541e
push esi
push eax
call fcn.00748df8
pop ecx
pop ecx
test eax, eax
je 0x795489
lea eax, reloc.ws2_32.dll_WSASetLastError
jmp 0x795367
lea eax, reloc.ws2_32.dll_WSASetLastError
push 0x7ec748
push eax
call fcn.00748be9
mov edi, eax
pop ecx
pop ecx
mov dword [ebp - 0x6c], edi
cmp edi, ebx
jne 0x7953e7
push dword [ebp - 0x78]
push 2
mov esi, 0x32d
push esi
push 0x82cea8
push dword [ebp - 0x74]
call fcn.0074b93c
add esp, 0x14
jmp 0x79541e
push 0x7f1fec
push dword [ebp - 0x78]
call fcn.00748be9
pop ecx
pop ecx
mov dword [ebp - 0x70], eax
push edi
cmp eax, ebx
jne 0x795460
call fcn.007c7ab7
push dword [ebp - 0x78]
mov esi, 0x330
push 2
push esi
push 0x82cea8
push dword [ebp - 0x74]
call fcn.0074b93c
add esp, 0x18
mov eax, esi
jmp 0x79548b
push esi
lea eax, reloc.ws2_32.dll_WSASetLastError
push ebx
push eax
call fcn.007c3430
push dword [ebp - 0x6c]
lea eax, reloc.ws2_32.dll_WSASetLastError
push esi
push 1
push eax
call fcn.007cf74d
push dword [ebp - 0x70]
mov edi, eax
push edi
lea eax, reloc.ws2_32.dll_WSASetLastError
push 1
push eax
call fcn.007c7ef5
add esp, 0x2c
push dword [ebp - 0x6c]
cmp eax, edi
jne 0x7954a3
call fcn.007d04f6
pop ecx
test eax, eax
je 0x795422
push dword [ebp - 0x6c]
call fcn.007c7ab7
push dword [ebp - 0x70]
call fcn.007c7ab7
lea eax, reloc.ws2_32.dll_WSASetLastError
push eax
call fcn.00748c9e
add esp, 0xc
xor eax, eax
pop edi
mov ecx, dword [ebp + reloc.ws2_32.dll_WSASetLastError]
pop esi
xor ecx, ebp
pop ebx
call fcn.007c1e9d
add ebp, 0x23ac
leave
ret
call fcn.007c7ab7
push dword [ebp - 0x70]
call fcn.007c7ab7
pop ecx
pop ecx
mov eax, 0x330
jmp 0x79548b