Function at 0x4ab5ad
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
mov eax, dword [0x5df7e4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, edx
mov dword [ebp - 0x238], ecx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x22c], ecx
xor ecx, ecx
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x234], eax
mov al, byte [eax]
push esi
mov byte [ebp - 0x213], al
lea esi, [ecx + 1]
xor eax, eax
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x224], esi
mov byte [ebp - 0x214], al
mov byte [ebp - 0x215], al
mov dword [ebp - 0x21c], eax
mov byte [ebp - 0x211], al
mov byte [ebp - 0x212], al
mov dword [ebp - 0x220], eax
push edi
mov edi, eax
test ebx, ebx
jne 0x4ab6b4
push str.HOME
call fcn.0053c6a7
mov byte [ebp - 0x110], bl
pop ecx
test eax, eax
je 0x4ab668
push 0x104
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
cmp byte [ebp - 0x110], bl
je 0x4ab668
lea eax, [ebp - 0x110]
push eax
call dword [0x5e025c]
pop ecx
mov edi, eax
jmp 0x4ab66a
xor edi, edi
test edi, edi
setne byte [ebp - 0x214]
test edi, edi
jne 0x4ab67f
or eax, 0xffffffff
jmp 0x4ab898
push str._netrc
push 0x5ba810
push edi
push 0x5ba814
call sym.wwbizsrv.exe_curl_maprintf
mov ebx, eax
add esp, 0x10
mov dword [ebp - 0x230], ebx
test ebx, ebx
jne 0x4ab6ad
push edi
call dword [0x5e0258]
pop ecx
jmp 0x4ab677
mov byte [ebp - 0x215], 1
push 0x5b8324
push ebx
call fcn.0053d18d
mov dword [ebp - 0x228], eax
pop ecx
pop ecx
test eax, eax
je 0x4ab874
mov ebx, eax
push ebx
lea eax, [ebp - 0x210]
push 0x100
push eax
call fcn.0053dac0
add esp, 0xc
test eax, eax
je 0x4ab861
lea ecx, [ebp - 0x210]
lea eax, [ebp - 0x228]
mov edx, 0x5ba81c
push eax
call fcn.004b5f64
mov esi, eax
pop ecx
test esi, esi
je 0x4ab6d1
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x22c]
cmp byte [ecx], 0
je 0x4ab726
cmp byte [edx], 0
jne 0x4ab861
mov eax, dword [ebp - 0x21c]
sub eax, 0
je 0x4ab83a
sub eax, 1
je 0x4ab80d
dec eax
sub eax, 1
jne 0x4ab85a
cmp byte [ebp - 0x211], al
je 0x4ab77f
cmp byte [ebp - 0x213], al
je 0x4ab767
mov edx, esi
call fcn.004aec70
mov dword [ebp - 0x220], eax
jmp 0x4ab773
push 0x3f
push esi
push ecx
call fcn.0053bed0
add esp, 0xc
mov byte [ebp - 0x211], 0
jmp 0x4ab85a
cmp byte [ebp - 0x212], 0
je 0x4ab7b2
cmp dword [ebp - 0x220], 0
jne 0x4ab79a
cmp byte [ebp - 0x213], 0
jne 0x4ab7a6
push 0x3f
push esi
push edx
call fcn.0053bed0
add esp, 0xc
mov byte [ebp - 0x212], 0
jmp 0x4ab85a
mov edx, esi
mov ecx, str.login
call fcn.004aec70
test eax, eax
je 0x4ab7d0
xor eax, eax
inc eax
mov byte [ebp - 0x211], al
jmp 0x4ab85a
mov edx, esi
mov ecx, str.password
call fcn.004aec70
test eax, eax
je 0x4ab7eb
xor eax, eax
inc eax
mov byte [ebp - 0x212], al
jmp 0x4ab85a
mov edx, esi
mov ecx, str.machine
call fcn.004aec70
test eax, eax
je 0x4ab85a
xor eax, eax
inc eax
and dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], eax
jmp 0x4ab85a
mov ecx, dword [ebp - 0x238]
mov edx, esi
call fcn.004aec70
xor ecx, ecx
test eax, eax
cmove ecx, dword [ebp - 0x224]
neg eax
mov dword [ebp - 0x224], ecx
sbb eax, eax
and eax, 3
mov dword [ebp - 0x21c], eax
jmp 0x4ab85a
mov edx, esi
mov ecx, str.machine
call fcn.004aec70
mov ecx, dword [ebp - 0x21c]
test eax, eax
push 1
pop eax
cmovne ecx, eax
mov dword [ebp - 0x21c], ecx
xor ecx, ecx
jmp 0x4ab6f4
push ebx
call fcn.00534efe
mov ebx, dword [ebp - 0x230]
mov esi, dword [ebp - 0x224]
pop ecx
cmp byte [ebp - 0x214], 0
je 0x4ab885
push edi
call dword [0x5e0258]
pop ecx
cmp byte [ebp - 0x215], 0
je 0x4ab896
push ebx
call dword [0x5e0258]
pop ecx
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005121be
leave
ret