Function at 0x426580
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x884
mov eax, dword [0x4ed018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push edi
xor edi, edi
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x874], 0
mov dword [ebp - 0x86c], 0
mov dword [ebp - 0x870], 0
mov dword [ebp - 0x87c], edi
cmp ebx, 0xffffffff
jne 0x426669
push 0x20a
lea eax, [ebp - 0x274]
push edi
push eax
call fcn.00411960
add esp, 0xc
lea eax, [ebp - 0x274]
push 0x104
push eax
push str._temp__netinfo.txt
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec eax
cmp eax, 0x104
ja 0x426693
push edi
lea eax, [ebp - 0x87c]
push eax
push 0x1a4
push 0x40
lea eax, [ebp - 0x274]
push 0x109
push eax
call fcn.00483d07
mov ebx, dword [ebp - 0x87c]
or ecx, 0xffffffff
add esp, 0x18
test eax, eax
cmovne ebx, ecx
cmp ebx, ecx
jne 0x42665f
push str.VNLEnumerateHostAdapters:_could_not_open_output_file
push 1
call fcn.00446b80
add esp, 8
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x87c], 1
call fcn.0041de20
test eax, eax
jne 0x4266b4
push str.VNLEnumerateHostAdapters:_could_not_start_COM
push 1
call fcn.00446b80
add esp, 8
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret
push str.VNLEnumerateHostAdapters:_could_not_form_output_file_name
push 1
call fcn.00446b80
add esp, 8
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret
push str.VNLEnumerateHostAdapters:_finished_with_COM_initialization__attempt_
push 0x20
call fcn.00446b80
lea eax, [ebp - 0x878]
push eax
push str.rootcimv2
call fcn.0047c160
add esp, 0x10
test al, al
jne 0x4266fe
push str.VNLEnumerateHostAdapters:_could_not_open_namespace
push 1
call fcn.00446b80
add esp, 8
call fcn.0041de10
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret
push esi
lea eax, [ebp - 0x874]
push eax
push str.Win32_NetworkAdapterConfiguration
push dword [ebp - 0x878]
call fcn.0047c780
add esp, 0xc
test al, al
jne 0x42675a
push str.VNLEnumerateHostAdapters:_couldnt_allocate_adapter_enum
push 1
call fcn.00446b80
mov eax, dword [ebp - 0x878]
add esp, 8
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x499490]
call esi
call fcn.0041de10
pop esi
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401bd5
mov esp, ebp
pop ebp
ret
push str.VNLEnumerateHostAdapters:_created_enumerator_for_network_cards
push 0x10
call fcn.00446b80
mov eax, dword [ebp - 0x874]
lea ecx, [ebp - 0x870]
add esp, 8
mov esi, dword [eax]
push ecx
lea ecx, [ebp - 0x86c]
push ecx
mov esi, dword [esi + 0x10]
mov ecx, esi
push 1
push 0xea60
push eax
call dword [0x499490]
call esi
mov esi, eax
push esi
push str.VNLEnumerateHostAdapters:_next_enumerator_returned:_0x_08x
push 0x20
call fcn.00446b80
lea eax, [ebp - 0x884]
push eax
call fcn.004846e0
lea eax, [ebp - 0x884]
push eax
call fcn.004846ae
push eax
call fcn.004843df
push eax
push str.Enumerating_host_adapters__current_time_is__s
lea eax, [ebp - 0x68]
push 0x64
push eax
call fcn.00457af0
add esp, 0x28
test eax, eax
js 0x4267f4
mov ecx, 0x64
cmp eax, ecx
lfence
cmova eax, ecx
push eax
lea eax, [ebp - 0x68]
push eax
push ebx
call fcn.0040eeda
add esp, 0xc
cmp dword [ebp - 0x870], edi
jbe 0x426904
test esi, esi
js 0x426904
mov eax, dword [ebp - 0x86c]
lea ecx, [ebp - 0x880]
mov dword [ebp - 0x880], 0
push ecx
push 0
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0x34]
mov ecx, esi
call dword [0x499490]
call esi
test eax, eax
js 0x4268a4
push dword [ebp - 0x880]
inc edi
push edi
push str.VNLEnumerateHostAdapters:_FYI:_information_about_card___d:__S
push 2
call fcn.00446b80
push dword [ebp - 0x880]
lea eax, [ebp - 0x868]
push edi
push str.information_about_card___d_:__S_n
push 0x800
push eax
call fcn.00457af0
add esp, 0x24
test eax, eax
js 0x42688e
cmp eax, 0x800
mov ecx, 0x800
lfence
cmova eax, ecx
push eax
lea eax, [ebp - 0x868]
push eax
push ebx
call fcn.0040eeda
add esp, 0xc
push dword [ebp - 0x880]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x86c]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x499490]
call esi
mov eax, dword [ebp - 0x874]
lea ecx, [ebp - 0x870]
push ecx
lea ecx, [ebp - 0x86c]
push ecx
mov esi, dword [eax]
push 1
push 0xea60
push eax
mov esi, dword [esi + 0x10]
mov ecx, esi
call dword [0x499490]
call esi
mov esi, eax
push esi
push str.VNLEnumerateHostAdapters:_next_enumerator_returned:_0x_08x
push 0x20
call fcn.00446b80
add esp, 0xc
cmp dword [ebp - 0x870], 0
ja 0x426800
cmp esi, 1
jg 0x42691d
je 0x426986
cmp esi, 0x80041003
jne 0x42691d
push 0xffffffffffffffff
call fcn.0041ce40
add esp, 4
push esi
push str.VNLEnumerateHostAdapters:_unexpected_enumeration_result:_0x_08x
push 1
call fcn.00446b80
add esp, 0xc
cmp dword [ebp - 0x87c], 0
je 0x42693f
push ebx
call fcn.0041122d
add esp, 4
mov eax, dword [ebp - 0x874]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x499490]
call esi
mov eax, dword [ebp - 0x878]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x499490]
call esi
call fcn.0041de10
mov ecx, dword [ebp - 4]
mov eax, 1
pop esi
pop edi
xor ecx, ebp
pop ebx
call fcn.00401bd5
mov esp, ebp
pop ebp
ret
push str.VNLEnumerateHostAdapters:_all_network_cards_properly_enumerated
push 0x20
call fcn.00446b80
add esp, 8
jmp 0x42692d