Function at 0x4111bc
Capabilities:
Query environment variable

Disassembly:
push 0xc8
mov eax, 0x4315ab
call fcn.0042fed0
mov esi, edx
mov dword [ebp - 0xb8], esi
mov eax, ecx
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp + 8]
mov dword [ebp - 0xb0], ebx
cmp eax, 3
jge 0x4111ff
mov ecx, 0x3e9
call fcn.0040dc73
mov ecx, ebx
call fcn.0041d820
jmp 0x412294
push 2
pop edi
xor ecx, ecx
mov dword [ebp - 0xb4], ecx
cmp eax, edi
jbe 0x411be9
mov dword [ebp - 0xbc], 0x2f
mov edx, dword [esi + edi*4]
movzx ecx, word [edx]
cmp cx, word [ebp - 0xbc]
je 0x411234
cmp ecx, 0x2d
jne 0x411c25
lea ecx, [edx + 2]
call fcn.00410dbb
push 0x2f
pop ecx
cmp eax, ecx
ja case.0x411247.34
jmp dword [eax*4 + 0x4122a0]
lea eax, [edi + 1]
mov edi, dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
cmp eax, edi
jae 0x411c78
lea eax, [ebx + 4]
mov ebx, dword [ebp - 0xac]
mov dword [ebp - 0xa0], eax
push dword [esi + ebx*4]
lea ecx, [ebp - 0x2c]
call fcn.0040bc34
mov ecx, dword [ebp - 0xa0]
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 4], 1
call fcn.00413b11
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
xor eax, eax
push eax
push 1
call fcn.00406a5f
inc ebx
cmp ebx, edi
jb 0x411274
mov ebx, dword [ebp - 0xb0]
jmp 0x411bd8
mov byte [ebx + 0xa7], 1
mov byte [ebx + 0x9a], 1
jmp 0x411bd8
mov dword [ebx + 0x34], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x350], eax
jne 0x411c9b
lea eax, [edi + 1]
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
mov edi, eax
lea ecx, [ebx + 0x340]
push dword [esi + edi*4]
call fcn.004080a4
mov byte [ebx + 0x33e], 1
jmp 0x411bd8
mov byte [ebx + 0x9d], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x274], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x264]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x15c], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x14c]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x178], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x168]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x194], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x184]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
cmp edi, 2
jne 0x411ca5
mov byte [ebx + 0x9e], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x108], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0xf8]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
mov byte [ebx + 0xaa], 1
jmp 0x411bd8
mov byte [ebx + 0xa9], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x1e8], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x1d8]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x124], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x114]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x1cc], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x1bc]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x258], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x248]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x204], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x1f4]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
cmp byte [ebx + 0x35c], 0
jne 0x411c9b
mov byte [ebx + 0x35c], 1
jmp 0x411bd8
cmp byte [ebx + 0x35d], 0
jne 0x411c9b
mov byte [ebx + 0x35d], 1
jmp 0x411bd8
mov byte [ebx + 0x98], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x220], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x210]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
mov byte [ebx + 0xa8], 1
jmp 0x411bd8
mov byte [ebx + 0xab], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x23c], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x22c]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
lea eax, [edi + 2]
mov dword [ebp - 0xac], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411756
xor eax, eax
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x2c], al
mov dword [ebp - 4], 2
lea edx, [ebp - 0x2c]
mov ecx, dword [esi + edi*4 + 4]
call fcn.00410830
test al, al
je 0x411d25
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0x48]
push dword [esi + eax*4]
call fcn.0040bc34
push eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x80]
call fcn.0041419f
push ecx
push eax
lea ecx, [ebx + 0x24]
mov byte [ebp - 4], 4
call fcn.004148ed
push eax
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebx + 0x24]
call fcn.0041442e
cmp byte [ebp - 0xc0], 0
lea ecx, [ebp - 0x64]
sete bl
xor esi, esi
push esi
push 1
call fcn.00406a5f
push esi
push 1
lea ecx, [ebp - 0x80]
call fcn.0040befb
push esi
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00406a5f
test bl, bl
jne 0x411caf
mov edi, dword [ebp - 0xac]
lea ecx, [ebp - 0x2c]
or dword [ebp - 4], 0xffffffff
push esi
push 1
call fcn.0040befb
mov ebx, dword [ebp - 0xb0]
mov esi, dword [ebp - 0xb8]
jmp 0x411bd8
push dword [esi + edi*4]
push 0x3ee
call fcn.0040dcfd
pop ecx
pop ecx
jmp 0x411bd8
mov eax, dword [ebx + 0x5c]
cmp eax, dword [ebx + 0x60]
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xac], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
mov edx, dword [esi + edi*4 + 4]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xa0], eax
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0xb4]
jne 0x41179a
sub ecx, dword [ebp - 0xa0]
sar ecx, 1
cmp ecx, 0x28
jne 0x411d47
lea eax, [edx + 0x50]
push eax
lea ecx, [ebp - 0xd4]
call fcn.00414224
push eax
lea ecx, [ebx + 0x5c]
mov dword [ebp - 4], 7
call fcn.00413c6e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.004082fe
mov eax, dword [ebx + 0x5c]
cmp eax, dword [ebx + 0x60]
je 0x411d47
mov edi, dword [ebp - 0xac]
jmp 0x411bd8
cmp dword [ebx + 0x8c], 0xffffffff
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
mov ecx, dword [esi + edi*4 + 4]
call fcn.00422129
mov dword [ebx + 0x8c], eax
cmp eax, 0xffffffff
je 0x411d55
cmp eax, 0x8003
je 0x411d55
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
mov byte [ebx + 0x90], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x290], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push 7
push 0x40323c
push dword [esi + edi*4 + 4]
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
push dword [esi + edi*4 + 4]
test eax, eax
jne 0x411d63
lea ecx, [ebx + 0x280]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
lea ecx, [ebx + 0x29c]
cmp eax, 0x1e
je 0x4118c5
lea ecx, [ebx + 0x2b8]
lea eax, [ebx + 0x2d4]
mov edx, esi
push eax
push ecx
mov ecx, dword [ebp - 0xa4]
push edi
call fcn.004107a4
test al, al
je 0x412294
inc edi
jmp 0x411bd8
mov eax, dword [ebx + 0x2d4]
cmp eax, 0xffffffff
je 0x411909
xor ecx, ecx
cmp dword [ebx + 0x2ac], ecx
je 0x411909
cmp eax, 0x8004
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
mov ecx, dword [esi + edi*4 + 4]
call fcn.00422129
mov edi, dword [ebp - 0xa0]
mov dword [ebx + 0x2d4], eax
cmp eax, 0xffffffff
je 0x411d6d
cmp eax, 0x8003
jne 0x411bd8
push 0x902
call fcn.0040dcfd
jmp 0x411764
xor eax, eax
cmp dword [ebx + 0x1b0], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x1a0]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x1b0], eax
jne 0x411c9b
push 0x4034c8
lea ecx, [ebx + 0x1a0]
call fcn.004080a4
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x308], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x2f8]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x324], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x314]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x330], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push 3
push 0x4034f8
push dword [esi + edi*4 + 4]
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x411a77
mov dword [ebx + 0x330], 1
jmp 0x411a99
push 2
push 0x40350c
push dword [esi + edi*4 + 4]
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x411a99
mov dword [ebx + 0x330], 2
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x370], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x360]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
cmp byte [ebx + 0x398], 0
jne 0x411c9b
mov byte [ebx + 0x398], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x38c], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x37c]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
cmp byte [ebx + 0x399], 0
jne 0x411c9b
mov byte [ebx + 0x399], 1
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x3ac], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x39c]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
xor eax, eax
cmp dword [ebx + 0x3c8], eax
jne 0x411c9b
lea eax, [edi + 1]
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0xa4]
jae 0x411c87
push dword [esi + edi*4 + 4]
lea ecx, [ebx + 0x3b8]
call fcn.004080a4
mov edi, dword [ebp - 0xa0]
jmp 0x411bd8
cmp byte [ebx + 0x3d4], 0
jne 0x411c9b
mov byte [ebx + 0x3d4], 1
mov eax, dword [ebp - 0xa4]
inc edi
cmp edi, eax
jb 0x41121c
xor ecx, ecx
mov eax, dword [ebx + 4]
cmp eax, dword [ebx + 8]
jne 0x411bf9
cmp dword [ebx + 0x1cc], ecx
je 0x411c78
cmp dword [ebx + 0x204], ecx
je 0x411d9c
cmp dword [ebx + 0x108], ecx
jne 0x411d9c
push 0x403534
push 0x40353c
push 0x3f1
jmp 0x41228c
cmp edi, eax
jae 0x411be7
lea eax, [ebx + 4]
mov ebx, dword [ebp - 0xa4]
mov dword [ebp - 0xb4], eax
push dword [esi + edi*4]
lea ecx, [ebp - 0x2c]
call fcn.0040bc34
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00413b11
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
xor eax, eax
push eax
push 1
call fcn.00406a5f
inc edi
cmp edi, ebx
jb 0x411c38
mov ebx, dword [ebp - 0xb0]
jmp 0x411be7
mov ecx, 0x3eb
call fcn.0040dc73
jmp 0x412294
push dword [esi + edi*4]
push 0x3ee
call fcn.0040dcfd
pop ecx
pop ecx
jmp 0x412294
push dword [esi + edi*4]
push 0x3ed
jmp 0x411c8f
push dword [esi + edi*4]
push 0x3fb
jmp 0x411c8f
mov esi, dword [ebp - 0xb8]
lea ecx, [ebp - 0x64]
push dword [esi + edi*4]
call fcn.0040bc34
push 0x4034c4
mov edx, eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x9c]
call fcn.004141d8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x48]
push dword [esi + edi*4 + 4]
mov edx, eax
call fcn.004141d8
cmp dword [eax + 0x14], 8
jb 0x411cf0
mov eax, dword [eax]
push eax
push 0x3ed
call fcn.0040dcfd
pop ecx
pop ecx
xor ebx, ebx
lea ecx, [ebp - 0x48]
push ebx
push 1
call fcn.00406a5f
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00406a5f
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.00406a5f
jmp 0x411d37
push dword [esi + edi*4 + 4]
push 0x400
call fcn.0040dcfd
pop ecx
pop ecx
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040befb
jmp 0x412294
push dword [esi + edi*4 + 4]
push 0x44c
jmp 0x411c8f
push dword [esi + edi*4 + 4]
push 0x459
jmp 0x411c8f
push 0x44e
jmp 0x411c8f
push 0x459
call fcn.0040dcfd
jmp 0x411c95
mov ecx, ebx
call fcn.0041d820
mov byte [ebx + 0x9b], 1
jmp 0x412294
push dword [esi + edi*4]
push 0x3ef
jmp 0x411c8f
mov eax, dword [ebx + 0x124]
test eax, eax
je 0x411dbd
cmp dword [ebx + 0x15c], ecx
jne 0x411dc5
push 0x403544
push 0x403550
jmp 0x411c1b
cmp dword [ebx + 0x15c], ecx
je 0x411dd8
test eax, eax
jne 0x411dd8
push 0x403550
push 0x403544
jmp 0x411c1b
cmp dword [ebx + 0x108], ecx
je 0x411e05
cmp dword [ebx + 0x23c], ecx
jne 0x411df1
cmp byte [ebx + 0x90], 0
je 0x411e05
push 0x403558
push 0x403534
push 0x3f4
jmp 0x41228c
mov eax, dword [ebx + 0x290]
test eax, eax
je 0x411e39
cmp dword [ebx + 0x2ac], ecx
je 0x411e26
push 0x403568
push 0x403570
jmp 0x412287
test eax, eax
je 0x411e39
cmp dword [ebx + 0x2c8], ecx
je 0x411e39
push 0x403578
jmp 0x411e1c
cmp dword [ebx + 0x2ac], ecx
je 0x411e58
cmp dword [ebx + 0x2c8], ecx
je 0x411e58
push 0x403578
push 0x403568
jmp 0x412287
cmp dword [ebx + 0x1cc], ecx
je 0x411e77
mov eax, dword [ebx + 4]
cmp eax, dword [ebx + 8]
je 0x411e77
push 0x403360
push 0x40337c
jmp 0x412287
cmp byte [ebx + 0x98], 0
je 0x411e98
cmp byte [ebx + 0x9a], 0
je 0x411e98
cmp byte [ebx + 0xa7], 0
je 0x411eba
mov byte [ebx + 0x98], cl
mov al, byte [ebx + 0x35c]
test al, al
je 0x411ecd
cmp byte [ebx + 0x35d], 0
je 0x411ec9
push 0x403588
push 0x403594
jmp 0x411dfb
push 0x403384
push 0x40338c
jmp 0x412287
test al, al
jne 0x411ef4
cmp byte [ebx + 0x35d], 0
jne 0x411ef4
push 0x14
lea eax, [ebp - 0x70]
push eax
push 0x40359c
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x411f11
mov byte [ebx + 0x35c], 1
xor ecx, ecx
mov edx, dword [ebx + 0x290]
test edx, edx
je 0x411f5b
cmp dword [ebx + 0x2d4], 0xffffffff
je 0x411f2d
push 0x403614
jmp 0x411e1c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xcb
je 0x411ef2
push 0x4035c8
push 0x3f0
jmp 0x411c8f
test edx, edx
je 0x411f5b
cmp byte [ebx + 0x9d], 0
je 0x411f5b
push 0x40361c
push 0x403570
push 0x3f3
call fcn.0040dcfd
add esp, 0xc
push 0x3ff
jmp 0x411d72
cmp byte [ebx + 0x2d8], 0
je 0x411f77
cmp dword [ebp - 0xa4], 2
jle 0x411f77
push 0x403624
jmp 0x411ca8
mov esi, dword [ebx + 0x308]
test esi, esi
je 0x412037
cmp dword [ebx + 0x330], ecx
jne 0x411f97
mov dword [ebx + 0x330], 1
test edx, edx
je 0x411faa
push 0x403570
push 0x40362c
jmp 0x412287
cmp byte [ebx + 0x35c], 0
je 0x411fba
push 0x403594
jmp 0x411fa0
cmp byte [ebx + 0x35d], 0
je 0x411fca
push 0x403588
jmp 0x411fa0
cmp dword [ebx + 0x178], ecx
je 0x411fd9
push 0x4032a8
jmp 0x411fa0
cmp dword [ebx + 0x194], ecx
je 0x411fe8
push 0x403634
jmp 0x411fa0
cmp byte [ebx + 0x9d], 0
je 0x411ff8
push 0x40361c
jmp 0x411fa0
mov ecx, dword [ebx + 0x324]
test ecx, ecx
jne 0x412011
push 0x40363c
push 0x403654
jmp 0x411c1b
cmp byte [ebx + 0xa8], 0
je 0x412024
push 0x403678
jmp 0x411fa0
cmp byte [ebx + 0xa9], 0
je 0x412067
push 0x403684
jmp 0x411fa0
cmp dword [ebx + 0x330], ecx
je 0x41204e
push 0x403654
push 0x403690
jmp 0x411c1b
mov ecx, dword [ebx + 0x324]
test ecx, ecx
je 0x412067
push 0x403654
push 0x40363c
jmp 0x411c1b
mov al, byte [ebx + 0xa8]
xor edi, edi
mov byte [ebp - 0xa5], al
test al, al
jne 0x4120d5
cmp dword [ebx + 0x2c8], edi
je 0x412090
push 0x403678
push 0x4036d4
jmp 0x411c1b
test al, al
jne 0x4120d5
cmp byte [ebx + 0xa9], al
jne 0x4120d5
cmp byte [ebx + 0x9d], al
jne 0x4120d5
cmp byte [ebx + 0xaa], al
je 0x4120c0
push 0x4036f0
push 0x403710
push 0x3f2
jmp 0x41228c
cmp byte [ebx + 0xab], 0
je 0x4120d5
push 0x4036f0
push 0x403720
jmp 0x4120b6
mov eax, dword [ebx + 0x370]
test eax, eax
jne 0x4120ef
cmp byte [ebx + 0x398], al
jne 0x4120ef
cmp dword [ebx + 0x38c], edi
je 0x41214c
cmp byte [ebp - 0xa5], 0
jne 0x41227d
cmp byte [ebx + 0xa9], 0
jne 0x41227d
cmp byte [ebx + 0x9d], 0
jne 0x41227d
test esi, esi
jne 0x412276
cmp dword [ebx + 0x330], edi
jne 0x412276
test ecx, ecx
jne 0x412276
cmp dword [ebx + 0x3ac], ecx
jne 0x412142
cmp dword [ebx + 0x3c8], ecx
je 0x41214e
push 0x40376c
jmp 0x412282
xor ecx, ecx
test eax, eax
je 0x412194
cmp byte [ebx + 0x398], 0
jne 0x41218d
cmp dword [ebx + 0x38c], ecx
jne 0x41218d
cmp dword [ebx + 0x15c], ecx
jne 0x412186
cmp dword [ebx + 0x124], ecx
jne 0x412186
test edx, edx
je 0x412194
push 0x403570
push 0x403794
jmp 0x412287
push 0x40379c
jmp 0x41217c
push 0x403784
jmp 0x41217c
mov cl, byte [ebx + 0x398]
test cl, cl
je 0x4121e5
test eax, eax
jne 0x4121de
xor esi, esi
cmp dword [ebx + 0x38c], esi
jne 0x4121de
cmp byte [ebx + 0x35c], al
je 0x4121c3
push 0x403594
push 0x4037bc
jmp 0x412287
cmp byte [ebx + 0x35d], 0
je 0x4121d3
push 0x403588
jmp 0x4121b9
test edx, edx
je 0x4121e5
push 0x403570
jmp 0x4121b9
push 0x4037ac
jmp 0x4121b9
xor edx, edx
cmp dword [ebx + 0x38c], edx
je 0x412238
test eax, eax
jne 0x412231
test cl, cl
jne 0x412231
cmp dword [ebx + 0x15c], edx
jne 0x41222a
cmp dword [ebx + 0x124], edx
jne 0x41222a
cmp byte [ebx + 0x35c], dl
je 0x41221b
push 0x403594
push 0x4037d4
jmp 0x412287
cmp byte [ebx + 0x35d], dl
je 0x412238
push 0x403588
jmp 0x412214
push 0x40379c
jmp 0x412214
push 0x4037c4
jmp 0x412214
test eax, eax
jne 0x412253
cmp byte [ebx + 0x399], dl
je 0x412253
push 0x403794
push 0x4037dc
jmp 0x411c1b
cmp dword [ebx + 0x3ac], edx
jne 0x412272
cmp dword [ebx + 0x3c8], edx
je 0x412272
push 0x4037e8
push 0x4037f4
jmp 0x411c1b
mov al, 1
jmp 0x412296
push 0x403750
jmp 0x412282
push 0x4036f0
push 0x403738
push 0x3f3
call fcn.0040dcfd
add esp, 0xc
xor al, al
call fcn.0042fe70
ret 4