Function at 0x42ba40
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x8c
mov dword [esp + 4], 1
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0042b47c
mov ebx, eax
xor eax, eax
test ebx, ebx
je 0x42dd65
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddfe8]
test al, al
jne 0x42babf
mov dword [esp], 0x4ddfe8
call fcn.004ceb90
test eax, eax
je 0x42babf
lea eax, [ebp - 0x50]
mov ecx, 0x4e2a80
mov dword [esp], eax
call fcn.0042e96c
push edi
mov dword [esp], 0x4cf6e0
call fcn.004013f0
mov dword [esp], 0x4ddfe8
call fcn.004cec60
mov ecx, 0x4e2a80
mov esi, 0x4dd1a0
lea edi, [ebp - 0x50]
call fcn.0042e93c
mov dword [esp], 0x4e2a80
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x4da04ea6
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dddc0]
test al, al
jne 0x42bb2d
mov dword [esp], 0x4dddc0
call fcn.004ceb90
test eax, eax
je 0x42bb2d
lea eax, [ebp - 0x50]
mov ecx, 0x4e1de0
mov dword [esp], eax
call fcn.0042e89c
push esi
mov dword [esp], 0x4cf6e4
call fcn.004013f0
mov dword [esp], 0x4dddc0
call fcn.004cec60
mov ecx, 0x4e1de0
call fcn.0042e86c
mov dword [esp], 0x4e1de0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42bb4c
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebx + 4]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 8]
add eax, dword [ebx]
xor ebx, ebx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x80], ebx
mov edx, dword [ebp - 0x84]
cmp dword [ebp - 0x80], edx
jae 0x42bc60
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde40]
test al, al
jne 0x42bbc5
mov dword [esp], 0x4dde40
call fcn.004ceb90
test eax, eax
je 0x42bbc5
lea eax, [ebp - 0x50]
mov ecx, 0x4e20cc
mov dword [esp], eax
call fcn.0042e96c
push ecx
mov dword [esp], 0x4cf6f0
call fcn.004013f0
mov dword [esp], 0x4dde40
call fcn.004cec60
mov ecx, 0x4e20cc
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e20cc
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x61b056aa
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde80]
test al, al
jne 0x42bc33
mov dword [esp], 0x4dde80
call fcn.004ceb90
test eax, eax
je 0x42bc33
lea eax, [ebp - 0x50]
mov ecx, 0x4e2240
mov dword [esp], eax
call fcn.0042e89c
push edx
mov dword [esp], 0x4cf6f4
call fcn.004013f0
mov dword [esp], 0x4dde80
call fcn.004cec60
mov ecx, 0x4e2240
call fcn.0042e86c
mov dword [esp], 0x4e2240
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42bc52
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x74]
cmp dword [eax], 0
jne 0x42bc87
cmp dword [eax + 0x10], 0
jne 0x42bc87
mov dword [ebp - 0x50], 0xc1eb1542
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dddc8]
test al, al
jne 0x42dcda
jmp 0x42dca4
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp + 8]
add eax, dword [edx + 0xc]
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddef0]
test al, al
jne 0x42bce7
mov dword [esp], 0x4ddef0
call fcn.004ceb90
test eax, eax
je 0x42bce7
lea eax, [ebp - 0x50]
mov ecx, 0x4e24cc
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf700
call fcn.004013f0
mov dword [esp], 0x4ddef0
call fcn.004cec60
mov ecx, 0x4e24cc
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e24cc
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x75c05eae
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf30]
test al, al
jne 0x42bd55
mov dword [esp], 0x4ddf30
call fcn.004ceb90
test eax, eax
je 0x42bd55
lea eax, [ebp - 0x50]
mov ecx, 0x4e2640
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf704
call fcn.004013f0
mov dword [esp], 0x4ddf30
call fcn.004cec60
mov ecx, 0x4e2640
call fcn.0042e86c
mov dword [esp], 0x4e2640
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42bd74
lea eax, [ebp - 0x56]
call eax
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddfa0]
test al, al
jne 0x42bdc8
mov dword [esp], 0x4ddfa0
call fcn.004ceb90
test eax, eax
je 0x42bdc8
lea eax, [ebp - 0x50]
mov ecx, 0x4e28cc
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf710
call fcn.004013f0
mov dword [esp], 0x4ddfa0
call fcn.004cec60
mov ecx, 0x4e28cc
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e28cc
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x89d066b2
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddfe0]
test al, al
jne 0x42be36
mov dword [esp], 0x4ddfe0
call fcn.004ceb90
test eax, eax
je 0x42be36
lea eax, [ebp - 0x50]
mov ecx, 0x4e2a40
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf714
call fcn.004013f0
mov dword [esp], 0x4ddfe0
call fcn.004cec60
mov ecx, 0x4e2a40
call fcn.0042e86c
mov dword [esp], 0x4e2a40
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42be55
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dddd8]
test al, al
jne 0x42beb2
mov dword [esp], 0x4dddd8
call fcn.004ceb90
test eax, eax
je 0x42beb2
lea eax, [ebp - 0x50]
mov ecx, 0x4e1e80
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf720
call fcn.004013f0
mov dword [esp], 0x4dddd8
call fcn.004cec60
mov ecx, 0x4e1e80
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e1e80
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x9de06eb6
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddde0]
test al, al
jne 0x42bf20
mov dword [esp], 0x4ddde0
call fcn.004ceb90
test eax, eax
je 0x42bf20
lea eax, [ebp - 0x50]
mov ecx, 0x4e1ea0
mov dword [esp], eax
call fcn.0042e89c
push edi
mov dword [esp], 0x4cf724
call fcn.004013f0
mov dword [esp], 0x4ddde0
call fcn.004cec60
mov ecx, 0x4e1ea0
call fcn.0042e86c
mov dword [esp], 0x4e1ea0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42bf3f
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x74]
mov ebx, dword [eax]
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddde8]
test al, al
jne 0x42bf98
mov dword [esp], 0x4ddde8
call fcn.004ceb90
test eax, eax
je 0x42bf98
lea eax, [ebp - 0x50]
mov ecx, 0x4e1ee0
mov dword [esp], eax
call fcn.0042e96c
push esi
mov dword [esp], 0x4cf734
call fcn.004013f0
mov dword [esp], 0x4ddde8
call fcn.004cec60
mov ecx, 0x4e1ee0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e1ee0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xb1f076ba
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dddf0]
test al, al
jne 0x42c006
mov dword [esp], 0x4dddf0
call fcn.004ceb90
test eax, eax
je 0x42c006
lea eax, [ebp - 0x50]
mov ecx, 0x4e1f00
mov dword [esp], eax
call fcn.0042e89c
push ecx
mov dword [esp], 0x4cf738
call fcn.004013f0
mov dword [esp], 0x4dddf0
call fcn.004cec60
mov ecx, 0x4e1f00
call fcn.0042e86c
mov dword [esp], 0x4e1f00
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c025
lea eax, [ebp - 0x56]
call eax
test ebx, ebx
jne 0x42c02f
mov eax, dword [ebp - 0x74]
mov ebx, dword [eax + 0x10]
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dddf8]
test al, al
jne 0x42c083
mov dword [esp], 0x4dddf8
call fcn.004ceb90
test eax, eax
je 0x42c083
lea eax, [ebp - 0x50]
mov ecx, 0x4e1f40
mov dword [esp], eax
call fcn.0042e96c
push edx
mov dword [esp], 0x4cf744
call fcn.004013f0
mov dword [esp], 0x4dddf8
call fcn.004cec60
mov ecx, 0x4e1f40
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e1f40
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xc5007ebe
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde00]
test al, al
jne 0x42c0f1
mov dword [esp], 0x4dde00
call fcn.004ceb90
test eax, eax
je 0x42c0f1
lea eax, [ebp - 0x50]
mov ecx, 0x4e1f60
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf748
call fcn.004013f0
mov dword [esp], 0x4dde00
call fcn.004cec60
mov ecx, 0x4e1f60
call fcn.0042e86c
mov dword [esp], 0x4e1f60
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c110
lea eax, [ebp - 0x56]
call eax
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde08]
test al, al
jne 0x42c164
mov dword [esp], 0x4dde08
call fcn.004ceb90
test eax, eax
je 0x42c164
lea eax, [ebp - 0x50]
mov ecx, 0x4e1fa0
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf754
call fcn.004013f0
mov dword [esp], 0x4dde08
call fcn.004cec60
mov ecx, 0x4e1fa0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e1fa0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xd91086c2
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde10]
test al, al
jne 0x42c1d2
mov dword [esp], 0x4dde10
call fcn.004ceb90
test eax, eax
je 0x42c1d2
lea eax, [ebp - 0x50]
mov ecx, 0x4e1fc0
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf758
call fcn.004013f0
mov dword [esp], 0x4dde10
call fcn.004cec60
mov ecx, 0x4e1fc0
call fcn.0042e86c
mov dword [esp], 0x4e1fc0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c1f1
lea eax, [ebp - 0x56]
call eax
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde18]
test al, al
jne 0x42c245
mov dword [esp], 0x4dde18
call fcn.004ceb90
test eax, eax
je 0x42c245
lea eax, [ebp - 0x50]
mov ecx, 0x4e2000
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf764
call fcn.004013f0
mov dword [esp], 0x4dde18
call fcn.004cec60
mov ecx, 0x4e2000
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2000
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xed208ec6
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde20]
test al, al
jne 0x42c2b3
mov dword [esp], 0x4dde20
call fcn.004ceb90
test eax, eax
je 0x42c2b3
lea eax, [ebp - 0x50]
mov ecx, 0x4e2020
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf774
call fcn.004013f0
mov dword [esp], 0x4dde20
call fcn.004cec60
mov ecx, 0x4e2020
call fcn.0042e86c
mov dword [esp], 0x4e2020
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c2d2
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
add ebx, dword [ebp + 8]
add eax, dword [ebp + 8]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x78]
cmp dword [eax], 0
jns 0x42c5be
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde28]
test al, al
jne 0x42c341
mov dword [esp], 0x4dde28
call fcn.004ceb90
test eax, eax
je 0x42c341
lea eax, [ebp - 0x50]
mov ecx, 0x4e2060
mov dword [esp], eax
call fcn.0042e96c
push edi
mov dword [esp], 0x4cf780
call fcn.004013f0
mov dword [esp], 0x4dde28
call fcn.004cec60
mov ecx, 0x4e2060
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2060
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x13096ca
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde30]
test al, al
jne 0x42c3af
mov dword [esp], 0x4dde30
call fcn.004ceb90
test eax, eax
je 0x42c3af
lea eax, [ebp - 0x50]
mov ecx, 0x4e2080
mov dword [esp], eax
call fcn.0042e89c
push esi
mov dword [esp], 0x4cf784
call fcn.004013f0
mov dword [esp], 0x4dde30
call fcn.004cec60
mov ecx, 0x4e2080
call fcn.0042e86c
mov dword [esp], 0x4e2080
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c3ce
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x7c]
call fcn.00424abc
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde38]
test al, al
jne 0x42c42a
mov dword [esp], 0x4dde38
call fcn.004ceb90
test eax, eax
je 0x42c42a
lea eax, [ebp - 0x50]
mov ecx, 0x4e20c0
mov dword [esp], eax
call fcn.0042e96c
push ebx
mov dword [esp], 0x4cf790
call fcn.004013f0
mov dword [esp], 0x4dde38
call fcn.004cec60
mov ecx, 0x4e20c0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e20c0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x15409ece
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde48]
test al, al
jne 0x42c498
mov dword [esp], 0x4dde48
call fcn.004ceb90
test eax, eax
je 0x42c498
lea eax, [ebp - 0x50]
mov ecx, 0x4e20e0
mov dword [esp], eax
call fcn.0042e89c
push ecx
mov dword [esp], 0x4cf794
call fcn.004013f0
mov dword [esp], 0x4dde48
call fcn.004cec60
mov ecx, 0x4e20e0
call fcn.0042e86c
mov dword [esp], 0x4e20e0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c4b7
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x78]
mov ebx, dword [0x4de048]
movzx esi, word [eax]
mov eax, dword [ebp - 0x7c]
call fcn.00428388
mov dword [esp + 4], esi
mov dword [esp], eax
call ebx
push edx
mov ebx, eax
push edx
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde50]
test al, al
jne 0x42c52c
mov dword [esp], 0x4dde50
call fcn.004ceb90
test eax, eax
je 0x42c52c
lea eax, [ebp - 0x50]
mov ecx, 0x4e2120
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf7a0
call fcn.004013f0
mov dword [esp], 0x4dde50
call fcn.004cec60
mov ecx, 0x4e2120
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2120
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x2950a6d2
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde58]
test al, al
jne 0x42c59a
mov dword [esp], 0x4dde58
call fcn.004ceb90
test eax, eax
je 0x42c59a
lea eax, [ebp - 0x50]
mov ecx, 0x4e2140
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf7a4
call fcn.004013f0
mov dword [esp], 0x4dde58
call fcn.004cec60
mov ecx, 0x4e2140
call fcn.0042e86c
mov dword [esp], 0x4e2140
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c5b9
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], ebx
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde60]
test al, al
jne 0x42c612
mov dword [esp], 0x4dde60
call fcn.004ceb90
test eax, eax
je 0x42c612
lea eax, [ebp - 0x50]
mov ecx, 0x4e2180
mov dword [esp], eax
call fcn.0042e96c
push edi
mov dword [esp], 0x4cf7b0
call fcn.004013f0
mov dword [esp], 0x4dde60
call fcn.004cec60
mov ecx, 0x4e2180
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2180
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x3d60aed6
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde68]
test al, al
jne 0x42c680
mov dword [esp], 0x4dde68
call fcn.004ceb90
test eax, eax
je 0x42c680
lea eax, [ebp - 0x50]
mov ecx, 0x4e21a0
mov dword [esp], eax
call fcn.0042e89c
push esi
mov dword [esp], 0x4cf7b4
call fcn.004013f0
mov dword [esp], 0x4dde68
call fcn.004cec60
mov ecx, 0x4e21a0
call fcn.0042e86c
mov dword [esp], 0x4e21a0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c69f
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
cmp dword [eax], 0
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
je 0x42dbc8
mov al, byte [0x4dde70]
test al, al
jne 0x42c6ff
mov dword [esp], 0x4dde70
call fcn.004ceb90
test eax, eax
je 0x42c6ff
lea eax, [ebp - 0x50]
mov ecx, 0x4e21e0
mov dword [esp], eax
call fcn.0042e96c
push ebx
mov dword [esp], 0x4cf7c0
call fcn.004013f0
mov dword [esp], 0x4dde70
call fcn.004cec60
mov ecx, 0x4e21e0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e21e0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x5170b6da
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde78]
test al, al
jne 0x42c76d
mov dword [esp], 0x4dde78
call fcn.004ceb90
test eax, eax
je 0x42c76d
lea eax, [ebp - 0x50]
mov ecx, 0x4e2200
mov dword [esp], eax
call fcn.0042e89c
push ecx
mov dword [esp], 0x4cf7c4
call fcn.004013f0
mov dword [esp], 0x4dde78
call fcn.004cec60
mov ecx, 0x4e2200
call fcn.0042e86c
mov dword [esp], 0x4e2200
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c78c
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x78]
mov edx, dword [ebp - 0x6c]
mov eax, dword [eax]
cmp dword [edx], eax
jne 0x42dbbb
mov edx, dword [ebp + 8]
mov ebx, dword [0x4de048]
lea eax, [edx + eax + 2]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x7c]
call fcn.00428388
mov edx, dword [ebp - 0x70]
mov dword [esp], eax
mov dword [esp + 4], edx
call ebx
push edx
push edx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde88]
test al, al
jne 0x42c81c
mov dword [esp], 0x4dde88
call fcn.004ceb90
test eax, eax
je 0x42c81c
lea eax, [ebp - 0x50]
mov ecx, 0x4e2280
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf7d0
call fcn.004013f0
mov dword [esp], 0x4dde88
call fcn.004cec60
mov ecx, 0x4e2280
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2280
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x6580bede
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dde90]
test al, al
jne 0x42c88a
mov dword [esp], 0x4dde90
call fcn.004ceb90
test eax, eax
je 0x42c88a
lea eax, [ebp - 0x50]
mov ecx, 0x4e22a0
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf7d4
call fcn.004013f0
mov dword [esp], 0x4dde90
call fcn.004cec60
mov ecx, 0x4e22a0
call fcn.0042e86c
mov dword [esp], 0x4e22a0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c8a9
lea eax, [ebp - 0x56]
call eax
cmp dword [0x4ded2c], 0
je 0x42c9e7
mov dword [ebp - 0x50], 0x42747548
mov ecx, 0xf
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x64696e6d
mov dword [ebp - 0x48], 0x60446368
mov dword [ebp - 0x44], 0x4d6e64
mov eax, ecx
mov esi, 0x11
xor edx, edx
div esi
xor byte [ebp + ecx - 0x5f], dl
inc ecx
cmp ecx, 0x1e
jne 0x42c8da
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
jne 0x42c9e7
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dde98]
test al, al
jne 0x42c958
mov dword [esp], 0x4dde98
call fcn.004ceb90
test eax, eax
je 0x42c958
mov dword [esp], ebx
mov ecx, 0x4e22e0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf7e4
call fcn.004013f0
mov dword [esp], 0x4dde98
call fcn.004cec60
mov ecx, 0x4e22e0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e22e0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x7990c6e2
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddea0]
test al, al
jne 0x42c9c6
mov dword [esp], 0x4ddea0
call fcn.004ceb90
test eax, eax
je 0x42c9c6
lea eax, [ebp - 0x50]
mov ecx, 0x4e2300
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf7e8
call fcn.004013f0
mov dword [esp], 0x4ddea0
call fcn.004cec60
mov ecx, 0x4e2300
call fcn.0042e86c
mov dword [esp], 0x4e2300
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42ca06
lea eax, [ebp - 0x56]
call eax
jmp 0x42ca06
cmp dword [0x4ded2c], 0
jne 0x42cae7
cmp dword [0x4ded2c], 0
je 0x42cb8e
jmp 0x42cb3a
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42ddec
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddea8]
test al, al
jne 0x42ca63
mov dword [esp], 0x4ddea8
call fcn.004ceb90
test eax, eax
je 0x42ca63
lea eax, [ebp - 0x50]
mov ecx, 0x4e2340
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf7f4
call fcn.004013f0
mov dword [esp], 0x4ddea8
call fcn.004cec60
mov ecx, 0x4e2340
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2340
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x8da0cee6
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddeb0]
test al, al
jne 0x42cad1
mov dword [esp], 0x4ddeb0
call fcn.004ceb90
test eax, eax
je 0x42cad1
lea eax, [ebp - 0x50]
mov ecx, 0x4e2360
mov dword [esp], eax
call fcn.0042e89c
push edi
mov dword [esp], 0x4cf7f8
call fcn.004013f0
mov dword [esp], 0x4ddeb0
call fcn.004cec60
mov ecx, 0x4e2360
call fcn.0042e86c
mov dword [esp], 0x4e2360
jmp 0x42dbad
mov dword [ebp - 0x50], 0x42747548
mov ecx, 0xf
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x64696e6d
mov dword [ebp - 0x48], 0x60446368
mov dword [ebp - 0x44], 0x5b6e64
mov eax, ecx
mov esi, 0x11
xor edx, edx
div esi
xor byte [ebp + ecx - 0x5f], dl
inc ecx
cmp ecx, 0x1e
jne 0x42cb0b
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
jne 0x42c9f4
jmp 0x42cba0
mov dword [ebp - 0x50], 0x67675051
mov ecx, 0xe
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x656e7664
mov dword [ebp - 0x48], 0x7a66686c
mov word [ebp - 0x44], 0x796e
mov byte [ebp - 0x42], 0
mov eax, ecx
mov esi, 0x11
xor edx, edx
div esi
xor byte [ebp + ecx - 0x5e], dl
inc ecx
cmp ecx, 0x1c
jne 0x42cb61
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
je 0x42cdc1
cmp dword [0x4ded2c], 0
je 0x42cdaf
jmp 0x42cd5f
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddeb8]
test al, al
jne 0x42cbf1
mov dword [esp], 0x4ddeb8
call fcn.004ceb90
test eax, eax
je 0x42cbf1
mov dword [esp], ebx
mov ecx, 0x4e23a0
call fcn.0042e96c
push esi
mov dword [esp], 0x4cf804
call fcn.004013f0
mov dword [esp], 0x4ddeb8
call fcn.004cec60
mov ecx, 0x4e23a0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e23a0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xa1b0d6ea
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddec0]
test al, al
jne 0x42cc5f
mov dword [esp], 0x4ddec0
call fcn.004ceb90
test eax, eax
je 0x42cc5f
lea eax, [ebp - 0x50]
mov ecx, 0x4e23c0
mov dword [esp], eax
call fcn.0042e89c
push ebx
mov dword [esp], 0x4cf808
call fcn.004013f0
mov dword [esp], 0x4ddec0
call fcn.004cec60
mov ecx, 0x4e23c0
call fcn.0042e86c
mov dword [esp], 0x4e23c0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42cc7e
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42ddf0
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddec8]
test al, al
jne 0x42ccdb
mov dword [esp], 0x4ddec8
call fcn.004ceb90
test eax, eax
je 0x42ccdb
lea eax, [ebp - 0x50]
mov ecx, 0x4e2400
mov dword [esp], eax
call fcn.0042e96c
push ecx
mov dword [esp], 0x4cf814
call fcn.004013f0
mov dword [esp], 0x4ddec8
call fcn.004cec60
mov ecx, 0x4e2400
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2400
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xb5c0deee
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dded0]
test al, al
jne 0x42cd49
mov dword [esp], 0x4dded0
call fcn.004ceb90
test eax, eax
je 0x42cd49
lea eax, [ebp - 0x50]
mov ecx, 0x4e2420
mov dword [esp], eax
call fcn.0042e89c
push edx
mov dword [esp], 0x4cf824
call fcn.004013f0
mov dword [esp], 0x4dded0
call fcn.004cec60
mov ecx, 0x4e2420
call fcn.0042e86c
mov dword [esp], 0x4e2420
jmp 0x42dbad
mov dword [ebp - 0x50], 0x66655e5f
mov ecx, 0xd
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x6e676870
mov dword [ebp - 0x48], 0x6c786866
mov word [ebp - 0x44], 0x7f
mov eax, ecx
mov esi, 0xd
xor edx, edx
div esi
xor byte [ebp + ecx - 0x5d], dl
inc ecx
cmp ecx, 0x1a
jne 0x42cd82
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
je 0x42cfdf
cmp dword [0x4ded2c], 0
je 0x42cfcd
jmp 0x42cf80
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4dded8]
test al, al
jne 0x42ce12
mov dword [esp], 0x4dded8
call fcn.004ceb90
test eax, eax
je 0x42ce12
mov dword [esp], ebx
mov ecx, 0x4e2460
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf830
call fcn.004013f0
mov dword [esp], 0x4dded8
call fcn.004cec60
mov ecx, 0x4e2460
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2460
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xc9d0e6f2
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddee0]
test al, al
jne 0x42ce80
mov dword [esp], 0x4ddee0
call fcn.004ceb90
test eax, eax
je 0x42ce80
lea eax, [ebp - 0x50]
mov ecx, 0x4e2480
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf834
call fcn.004013f0
mov dword [esp], 0x4ddee0
call fcn.004cec60
mov ecx, 0x4e2480
call fcn.0042e86c
mov dword [esp], 0x4e2480
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42ce9f
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42ba0c
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddee8]
test al, al
jne 0x42cefc
mov dword [esp], 0x4ddee8
call fcn.004ceb90
test eax, eax
je 0x42cefc
lea eax, [ebp - 0x50]
mov ecx, 0x4e24c0
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf840
call fcn.004013f0
mov dword [esp], 0x4ddee8
call fcn.004cec60
mov ecx, 0x4e24c0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e24c0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xdde0eef6
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddef8]
test al, al
jne 0x42cf6a
mov dword [esp], 0x4ddef8
call fcn.004ceb90
test eax, eax
je 0x42cf6a
lea eax, [ebp - 0x50]
mov ecx, 0x4e24e0
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf844
call fcn.004013f0
mov dword [esp], 0x4ddef8
call fcn.004cec60
mov ecx, 0x4e24e0
call fcn.0042e86c
mov dword [esp], 0x4e24e0
jmp 0x42dbad
mov dword [ebp - 0x50], 0x5d715f55
mov ecx, 0xa
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x74645b5c
mov word [ebp - 0x48], 0x7e60
mov byte [ebp - 0x46], 0
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x5a], dl
inc ecx
cmp ecx, 0x14
jne 0x42cfa0
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
je 0x42d1fa
cmp dword [0x4ded2c], 0
je 0x42d1e8
jmp 0x42d19e
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf00]
test al, al
jne 0x42d030
mov dword [esp], 0x4ddf00
call fcn.004ceb90
test eax, eax
je 0x42d030
mov dword [esp], ebx
mov ecx, 0x4e2520
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf850
call fcn.004013f0
mov dword [esp], 0x4ddf00
call fcn.004cec60
mov ecx, 0x4e2520
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2520
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xf1f0f6fa
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf08]
test al, al
jne 0x42d09e
mov dword [esp], 0x4ddf08
call fcn.004ceb90
test eax, eax
je 0x42d09e
lea eax, [ebp - 0x50]
mov ecx, 0x4e2540
mov dword [esp], eax
call fcn.0042e89c
push edi
mov dword [esp], 0x4cf854
call fcn.004013f0
mov dword [esp], 0x4ddf08
call fcn.004cec60
mov ecx, 0x4e2540
call fcn.0042e86c
mov dword [esp], 0x4e2540
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42d0bd
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42b870
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf10]
test al, al
jne 0x42d11a
mov dword [esp], 0x4ddf10
call fcn.004ceb90
test eax, eax
je 0x42d11a
lea eax, [ebp - 0x50]
mov ecx, 0x4e2580
mov dword [esp], eax
call fcn.0042e96c
push esi
mov dword [esp], 0x4cf860
call fcn.004013f0
mov dword [esp], 0x4ddf10
call fcn.004cec60
mov ecx, 0x4e2580
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2580
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x500fefe
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf18]
test al, al
jne 0x42d188
mov dword [esp], 0x4ddf18
call fcn.004ceb90
test eax, eax
je 0x42d188
lea eax, [ebp - 0x50]
mov ecx, 0x4e25a0
mov dword [esp], eax
call fcn.0042e89c
push ebx
mov dword [esp], 0x4cf864
call fcn.004013f0
mov dword [esp], 0x4ddf18
call fcn.004cec60
mov ecx, 0x4e25a0
call fcn.0042e86c
mov dword [esp], 0x4e25a0
jmp 0x42dbad
mov dword [ebp - 0x50], 0x5c725e5f
mov ecx, 0xb
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x66715a5b
mov dword [ebp - 0x48], 0x7c6e7a
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x5b], dl
inc ecx
cmp ecx, 0x16
jne 0x42d1bb
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
je 0x42d418
cmp dword [0x4ded2c], 0
je 0x42d406
jmp 0x42d3b9
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf20]
test al, al
jne 0x42d24b
mov dword [esp], 0x4ddf20
call fcn.004ceb90
test eax, eax
je 0x42d24b
mov dword [esp], ebx
mov ecx, 0x4e25e0
call fcn.0042e96c
push ecx
mov dword [esp], 0x4cf870
call fcn.004013f0
mov dword [esp], 0x4ddf20
call fcn.004cec60
mov ecx, 0x4e25e0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e25e0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x19100602
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf28]
test al, al
jne 0x42d2b9
mov dword [esp], 0x4ddf28
call fcn.004ceb90
test eax, eax
je 0x42d2b9
lea eax, [ebp - 0x50]
mov ecx, 0x4e2600
mov dword [esp], eax
call fcn.0042e89c
push edx
mov dword [esp], 0x4cf874
call fcn.004013f0
mov dword [esp], 0x4ddf28
call fcn.004cec60
mov ecx, 0x4e2600
call fcn.0042e86c
mov dword [esp], 0x4e2600
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42d2d8
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42b84c
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf38]
test al, al
jne 0x42d335
mov dword [esp], 0x4ddf38
call fcn.004ceb90
test eax, eax
je 0x42d335
lea eax, [ebp - 0x50]
mov ecx, 0x4e2680
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf880
call fcn.004013f0
mov dword [esp], 0x4ddf38
call fcn.004cec60
mov ecx, 0x4e2680
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2680
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x2d200e06
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf40]
test al, al
jne 0x42d3a3
mov dword [esp], 0x4ddf40
call fcn.004ceb90
test eax, eax
je 0x42d3a3
lea eax, [ebp - 0x50]
mov ecx, 0x4e26a0
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf884
call fcn.004013f0
mov dword [esp], 0x4ddf40
call fcn.004cec60
mov ecx, 0x4e26a0
call fcn.0042e86c
mov dword [esp], 0x4e26a0
jmp 0x42dbad
mov dword [ebp - 0x50], 0x5d715f55
mov ecx, 0xa
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x74645b5c
mov word [ebp - 0x48], 0x6b60
mov byte [ebp - 0x46], 0
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x5a], dl
inc ecx
cmp ecx, 0x14
jne 0x42d3d9
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
je 0x42d5d7
cmp dword [0x4ded2c], 0
je 0x42d900
jmp 0x42d796
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf48]
test al, al
jne 0x42d469
mov dword [esp], 0x4ddf48
call fcn.004ceb90
test eax, eax
je 0x42d469
mov dword [esp], ebx
mov ecx, 0x4e26e0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf898
call fcn.004013f0
mov dword [esp], 0x4ddf48
call fcn.004cec60
mov ecx, 0x4e26e0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e26e0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x4130160a
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf50]
test al, al
jne 0x42d4d7
mov dword [esp], 0x4ddf50
call fcn.004ceb90
test eax, eax
je 0x42d4d7
lea eax, [ebp - 0x50]
mov ecx, 0x4e2700
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf89c
call fcn.004013f0
mov dword [esp], 0x4ddf50
call fcn.004cec60
mov ecx, 0x4e2700
call fcn.0042e86c
mov dword [esp], 0x4e2700
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42d4f6
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42b868
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf58]
test al, al
jne 0x42d553
mov dword [esp], 0x4ddf58
call fcn.004ceb90
test eax, eax
je 0x42d553
lea eax, [ebp - 0x50]
mov ecx, 0x4e2740
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf8a8
call fcn.004013f0
mov dword [esp], 0x4ddf58
call fcn.004cec60
mov ecx, 0x4e2740
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2740
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x55401e0e
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf60]
test al, al
jne 0x42d5c1
mov dword [esp], 0x4ddf60
call fcn.004ceb90
test eax, eax
je 0x42d5c1
lea eax, [ebp - 0x50]
mov ecx, 0x4e2760
mov dword [esp], eax
call fcn.0042e89c
push edi
mov dword [esp], 0x4cf8ac
call fcn.004013f0
mov dword [esp], 0x4ddf60
call fcn.004cec60
mov ecx, 0x4e2760
call fcn.0042e86c
mov dword [esp], 0x4e2760
jmp 0x42dbad
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf68]
test al, al
jne 0x42d628
mov dword [esp], 0x4ddf68
call fcn.004ceb90
test eax, eax
je 0x42d628
mov dword [esp], ebx
mov ecx, 0x4e27a0
call fcn.0042e96c
push esi
mov dword [esp], 0x4cf8b8
call fcn.004013f0
mov dword [esp], 0x4ddf68
call fcn.004cec60
mov ecx, 0x4e27a0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e27a0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x69502612
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf70]
test al, al
jne 0x42d696
mov dword [esp], 0x4ddf70
call fcn.004ceb90
test eax, eax
je 0x42d696
lea eax, [ebp - 0x50]
mov ecx, 0x4e27c0
mov dword [esp], eax
call fcn.0042e89c
push ebx
mov dword [esp], 0x4cf8bc
call fcn.004013f0
mov dword [esp], 0x4ddf70
call fcn.004cec60
mov ecx, 0x4e27c0
call fcn.0042e86c
mov dword [esp], 0x4e27c0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42d6b5
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42b844
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf78]
test al, al
jne 0x42d712
mov dword [esp], 0x4ddf78
call fcn.004ceb90
test eax, eax
je 0x42d712
lea eax, [ebp - 0x50]
mov ecx, 0x4e2800
mov dword [esp], eax
call fcn.0042e96c
push ecx
mov dword [esp], 0x4cf8c8
call fcn.004013f0
mov dword [esp], 0x4ddf78
call fcn.004cec60
mov ecx, 0x4e2800
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2800
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x7d602e16
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf80]
test al, al
jne 0x42d780
mov dword [esp], 0x4ddf80
call fcn.004ceb90
test eax, eax
je 0x42d780
lea eax, [ebp - 0x50]
mov ecx, 0x4e2820
mov dword [esp], eax
call fcn.0042e89c
push edx
mov dword [esp], 0x4cf8d8
call fcn.004013f0
mov dword [esp], 0x4ddf80
call fcn.004cec60
mov ecx, 0x4e2820
call fcn.0042e86c
mov dword [esp], 0x4e2820
jmp 0x42dbad
lea eax, [ebp - 0x61]
mov dword [ebp - 0x61], 0x74697865
mov ebx, dword [sym.imp.msvcrt.dll__stricmp]
mov byte [ebp - 0x5d], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call ebx
test eax, eax
jne 0x42d7db
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf88]
test al, al
jne 0x42d871
jmp 0x42d838
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0x6978455f
mov word [ebp - 0x58], 0x74
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call ebx
test eax, eax
je 0x42d7ba
lea eax, [ebp - 0x56]
mov dword [ebp - 0x56], 0x6978655f
mov word [ebp - 0x52], 0x74
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call ebx
test eax, eax
je 0x42d7ba
lea ecx, [ebp - 0x50]
call fcn.0042e4c0
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call ebx
test eax, eax
je 0x42d7ba
jmp 0x42d900
mov dword [esp], 0x4ddf88
call fcn.004ceb90
test eax, eax
je 0x42d871
lea eax, [ebp - 0x50]
mov ecx, 0x4e2860
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf8e4
call fcn.004013f0
mov dword [esp], 0x4ddf88
call fcn.004cec60
mov ecx, 0x4e2860
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2860
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0x9170361a
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddf90]
test al, al
jne 0x42d8df
mov dword [esp], 0x4ddf90
call fcn.004ceb90
test eax, eax
je 0x42d8df
lea eax, [ebp - 0x50]
mov ecx, 0x4e2880
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf8e8
call fcn.004013f0
mov dword [esp], 0x4ddf90
call fcn.004cec60
mov ecx, 0x4e2880
call fcn.0042e86c
mov dword [esp], 0x4e2880
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42d91d
lea eax, [ebp - 0x56]
call eax
jmp 0x42d91d
cmp dword [0x4ded2c], 0
jne 0x42d9fe
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
jmp 0x42dbbb
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42ba2c
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddf98]
test al, al
jne 0x42d97a
mov dword [esp], 0x4ddf98
call fcn.004ceb90
test eax, eax
je 0x42d97a
lea eax, [ebp - 0x50]
mov ecx, 0x4e28c0
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf8f4
call fcn.004013f0
mov dword [esp], 0x4ddf98
call fcn.004cec60
mov ecx, 0x4e28c0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e28c0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xa5803e1e
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddfa8]
test al, al
jne 0x42d9e8
mov dword [esp], 0x4ddfa8
call fcn.004ceb90
test eax, eax
je 0x42d9e8
lea eax, [ebp - 0x50]
mov ecx, 0x4e28e0
mov dword [esp], eax
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf8f8
call fcn.004013f0
mov dword [esp], 0x4ddfa8
call fcn.004cec60
mov ecx, 0x4e28e0
call fcn.0042e86c
mov dword [esp], 0x4e28e0
jmp 0x42dbad
mov dword [ebp - 0x50], 0x776b7945
mov ecx, 0xb
lea ebx, [ebp - 0x50]
mov dword [ebp - 0x4c], 0x64697754
mov dword [ebp - 0x48], 0x797a6d
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x5b], dl
inc ecx
cmp ecx, 0x16
jne 0x42da1b
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
jne 0x42d90d
call fcn.004ce520
mov edi, ebx
mov esi, eax
mov ecx, eax
call fcn.0042e93c
mov dword [esp], esi
mov esi, 0x4dd1a0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xb9904622
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddfb8]
test al, al
jne 0x42dab2
mov dword [esp], 0x4ddfb8
call fcn.004ceb90
test eax, eax
je 0x42dab2
mov dword [esp], ebx
mov ecx, 0x4e2940
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf908
call fcn.004013f0
mov dword [esp], 0x4ddfb8
call fcn.004cec60
mov ecx, 0x4e2940
call fcn.0042e86c
mov dword [esp], 0x4e2940
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42dad1
lea eax, [ebp - 0x56]
call eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0x42b854
mov dword [ebp - 0x50], 0xc1eb1542
mov dword [ebp - 0x4c], 0x7c90ec48
mov byte [ebp - 0x48], 0x42
mov al, byte [0x4ddfc0]
test al, al
jne 0x42db2e
mov dword [esp], 0x4ddfc0
call fcn.004ceb90
test eax, eax
je 0x42db2e
lea eax, [ebp - 0x50]
mov ecx, 0x4e2980
mov dword [esp], eax
call fcn.0042e96c
push edi
mov dword [esp], 0x4cf914
call fcn.004013f0
mov dword [esp], 0x4ddfc0
call fcn.004cec60
mov ecx, 0x4e2980
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e2980
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xcda04e26
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddfc8]
test al, al
jne 0x42db9c
mov dword [esp], 0x4ddfc8
call fcn.004ceb90
test eax, eax
je 0x42db9c
lea eax, [ebp - 0x50]
mov ecx, 0x4e29a0
mov dword [esp], eax
call fcn.0042e89c
push esi
mov dword [esp], 0x4cf918
call fcn.004013f0
mov dword [esp], 0x4ddfc8
call fcn.004cec60
mov ecx, 0x4e29a0
call fcn.0042e86c
mov dword [esp], 0x4e29a0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42dbbb
lea eax, [ebp - 0x56]
call eax
add dword [ebp - 0x78], 4
add dword [ebp - 0x6c], 4
jmp 0x42c2e1
mov al, byte [0x4ddfd0]
test al, al
jne 0x42dc0a
mov dword [esp], 0x4ddfd0
call fcn.004ceb90
test eax, eax
je 0x42dc0a
lea eax, [ebp - 0x50]
mov ecx, 0x4e29e0
mov dword [esp], eax
call fcn.0042e96c
push ebx
mov dword [esp], 0x4cf924
call fcn.004013f0
mov dword [esp], 0x4ddfd0
call fcn.004cec60
mov ecx, 0x4e29e0
lea edi, [ebp - 0x50]
mov esi, 0x4dd1a0
call fcn.0042e93c
mov dword [esp], 0x4e29e0
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xe1b0562a
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4ddfd8]
test al, al
jne 0x42dc78
mov dword [esp], 0x4ddfd8
call fcn.004ceb90
test eax, eax
je 0x42dc78
lea eax, [ebp - 0x50]
mov ecx, 0x4e2a00
mov dword [esp], eax
call fcn.0042e89c
push ecx
mov dword [esp], 0x4cf928
call fcn.004013f0
mov dword [esp], 0x4ddfd8
call fcn.004cec60
mov ecx, 0x4e2a00
call fcn.0042e86c
mov dword [esp], 0x4e2a00
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42dc97
lea eax, [ebp - 0x56]
call eax
add dword [ebp - 0x80], 0x14
add dword [ebp - 0x74], 0x14
jmp 0x42bb62
mov dword [esp], 0x4dddc8
call fcn.004ceb90
test eax, eax
je 0x42dcda
mov dword [esp], ebx
mov ecx, 0x4e1e20
call fcn.0042e96c
push edx
mov dword [esp], 0x4cf934
call fcn.004013f0
mov dword [esp], 0x4dddc8
call fcn.004cec60
mov ecx, 0x4e1e20
mov esi, 0x4dd1a0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e1e20
call fcn.00422510
mov ecx, 0xe
mov dword [ebp - 0x56], 0xf5c05e2e
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4dddd0]
test al, al
jne 0x42dd44
mov dword [esp], 0x4dddd0
call fcn.004ceb90
test eax, eax
je 0x42dd44
mov dword [esp], ebx
mov ecx, 0x4e1e40
call fcn.0042e89c
push eax
mov dword [esp], 0x4cf938
call fcn.004013f0
mov dword [esp], 0x4dddd0
call fcn.004cec60
mov ecx, 0x4e1e40
call fcn.0042e86c
mov dword [esp], 0x4e1e40
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42dd63
lea eax, [ebp - 0x56]
call eax
mov al, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret