Function at 0x422210
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x9ac
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x558], eax
lea ecx, [ebp - 9]
call fcn.00424fb0
mov ecx, eax
call fcn.00401a80
mov dword [esp], eax
call fcn.00401450
lea ecx, [ebp - 0xa]
call fcn.00425060
mov ecx, eax
call fcn.00401b50
mov dword [esp], eax
call fcn.00401450
mov eax, dword [0x48f277]
mov dword [ebp - 0xe], eax
lea ecx, [ebp - 0xf]
call fcn.00425110
mov ecx, eax
call fcn.00421730
mov dword [esp], eax
call sub.msvcrt.dll_getenv
cmp eax, 0
je 0x4222c6
lea eax, [ebp - 0xe]
mov dword [esp], eax
call fcn.00401c40
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4222c3
lea ecx, [ebp - 0x15]
call fcn.004251c0
mov ecx, eax
call fcn.00401b50
mov dword [esp], eax
call fcn.00401c50
xor eax, eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
sub esp, 4
call dword [ebp - 0x14]
lea ecx, [ebp - 0x16]
call fcn.00425270
mov ecx, eax
call fcn.00401e00
mov dword [esp], eax
call fcn.00401450
mov ecx, dword [ebp - 0x558]
call fcn.00401340
cmp eax, 2
jae 0x4222fe
call fcn.00421240
mov dword [ebp - 8], eax
jmp 0x424f95
lea ecx, [ebp - 0x17]
call fcn.00425320
mov ecx, eax
call fcn.00401a80
mov dword [esp], eax
call fcn.00401450
lea ecx, [ebp - 0x18]
call fcn.004253d0
mov ecx, eax
call fcn.00401b50
mov dword [esp], eax
call fcn.00401450
mov eax, dword [0x48f27b]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x1d]
call fcn.00425480
mov ecx, eax
call fcn.00421730
mov dword [esp], eax
call sub.msvcrt.dll_getenv
cmp eax, 0
je 0x422398
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.00401c40
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x422395
lea ecx, [ebp - 0x25]
call fcn.00425530
mov ecx, eax
call fcn.00401b50
mov dword [esp], eax
call fcn.00401c50
xor eax, eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
sub esp, 4
call dword [ebp - 0x24]
lea ecx, [ebp - 0x26]
call fcn.004255e0
mov ecx, eax
call fcn.00401e00
mov ecx, eax
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
mov ecx, dword [ebp - 0x55c]
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0x34]
call fcn.00461c70
sub esp, 4
lea ecx, [ebp - 0x35]
call fcn.00425690
mov dword [ebp - 0x560], eax
jmp 0x4223da
mov ecx, dword [ebp - 0x560]
call fcn.00401a80
mov dword [ebp - 0x564], eax
jmp 0x4223f0
mov ecx, dword [ebp - 0x564]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422404
lea ecx, [ebp - 0x41]
call fcn.00425740
mov dword [ebp - 0x568], eax
jmp 0x422417
mov ecx, dword [ebp - 0x568]
call fcn.00401b50
mov dword [ebp - 0x56c], eax
jmp 0x42242d
mov ecx, dword [ebp - 0x56c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422441
mov dword [ebp - 0x48], 0x6580bede
lea ecx, [ebp - 0x49]
call fcn.004257f0
mov dword [ebp - 0x570], eax
jmp 0x42245b
mov ecx, dword [ebp - 0x570]
call fcn.00421730
mov dword [ebp - 0x574], eax
jmp 0x422471
mov ecx, dword [ebp - 0x574]
mov eax, esp
mov dword [eax], ecx
call sub.msvcrt.dll_getenv
mov dword [ebp - 0x578], eax
jmp 0x42248b
mov eax, dword [ebp - 0x578]
cmp eax, 0
je 0x422537
mov eax, esp
lea ecx, [ebp - 0x48]
mov dword [eax], ecx
call fcn.00401c40
mov dword [ebp - 0x57c], eax
jmp 0x4224b1
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x422528
lea ecx, [ebp - 0x51]
call fcn.004258a0
mov dword [ebp - 0x580], eax
jmp 0x4224d7
mov ecx, dword [ebp - 0x580]
call fcn.00401b50
mov dword [ebp - 0x584], eax
jmp 0x4224ed
mov ecx, dword [ebp - 0x584]
mov eax, esp
mov dword [eax], ecx
call fcn.00401c50
jmp 0x422501
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_GlobalFlags]
call eax
sub esp, 4
jmp 0x422518
jmp 0x422528
mov eax, dword [ebp - 0x50]
call eax
jmp 0x422532
jmp 0x422537
lea ecx, [ebp - 0x52]
call fcn.00425950
mov dword [ebp - 0x588], eax
jmp 0x42254a
mov ecx, dword [ebp - 0x588]
call fcn.00401e00
mov dword [ebp - 0x58c], eax
jmp 0x422560
mov ecx, dword [ebp - 0x58c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422574
mov eax, esp
mov dword [eax], 4
call fcn.00460e10
mov dword [ebp - 0x590], eax
jmp 0x42258c
mov ecx, dword [ebp - 0x590]
mov dword [ecx], 0
call fcn.00425a00
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x59]
call fcn.00425a30
mov dword [ebp - 0x594], eax
jmp 0x4225b9
mov ecx, dword [ebp - 0x594]
call fcn.00401a80
mov dword [ebp - 0x598], eax
jmp 0x4225cf
mov ecx, dword [ebp - 0x598]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x4225e3
lea ecx, [ebp - 0x5a]
call fcn.00425ae0
mov dword [ebp - 0x59c], eax
jmp 0x4225f6
mov ecx, dword [ebp - 0x59c]
call fcn.00401b50
mov dword [ebp - 0x5a0], eax
jmp 0x42260c
mov ecx, dword [ebp - 0x5a0]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422620
mov dword [ebp - 0x60], 0x7990c6e2
lea ecx, [ebp - 0x61]
call fcn.00425b90
mov dword [ebp - 0x5a4], eax
jmp 0x42263a
mov ecx, dword [ebp - 0x5a4]
call fcn.00421730
mov dword [ebp - 0x5a8], eax
jmp 0x422650
mov ecx, dword [ebp - 0x5a8]
mov eax, esp
mov dword [eax], ecx
call sub.msvcrt.dll_getenv
mov dword [ebp - 0x5ac], eax
jmp 0x42266a
mov eax, dword [ebp - 0x5ac]
cmp eax, 0
je 0x42270b
mov eax, esp
lea ecx, [ebp - 0x60]
mov dword [eax], ecx
call fcn.00401c40
mov dword [ebp - 0x5b0], eax
jmp 0x422690
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x4226fc
lea ecx, [ebp - 0x69]
call fcn.00425c40
mov dword [ebp - 0x5b4], eax
jmp 0x4226b6
mov ecx, dword [ebp - 0x5b4]
call fcn.00401b50
mov dword [ebp - 0x5b8], eax
jmp 0x4226cc
mov ecx, dword [ebp - 0x5b8]
mov eax, esp
mov dword [eax], ecx
call fcn.00401c50
jmp 0x4226e0
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_GlobalFlags]
call eax
sub esp, 4
jmp 0x4226f7
jmp 0x4226fc
mov eax, dword [ebp - 0x68]
call eax
jmp 0x422706
jmp 0x42270b
lea ecx, [ebp - 0x6a]
call fcn.00425cf0
mov dword [ebp - 0x5bc], eax
jmp 0x42271e
mov ecx, dword [ebp - 0x5bc]
call fcn.00401e00
mov dword [ebp - 0x5c0], eax
jmp 0x422734
mov ecx, dword [ebp - 0x5c0]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422748
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c4], eax
mov eax, esp
lea ecx, [ebp - 0x34]
mov dword [eax], ecx
lea ecx, [ebp - 0x84]
call fcn.00461c70
sub esp, 4
jmp 0x42276b
mov edx, dword [ebp - 0x5c4]
mov eax, dword [edx]
mov eax, dword [eax + 4]
mov ecx, esp
lea esi, [ebp - 0x84]
mov dword [ecx + 4], esi
mov dword [ecx], edx
lea ecx, [ebp - 0x78]
call eax
sub esp, 8
jmp 0x422790
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x5cc], ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x34]
call fcn.00425da0
sub esp, 4
mov ecx, dword [ebp - 0x5cc]
call fcn.00461ca0
lea ecx, [ebp - 0x84]
call fcn.00461ca0
lea ecx, [ebp - 0x85]
call fcn.00425dd0
mov dword [ebp - 0x5c8], eax
jmp 0x4227d4
mov ecx, dword [ebp - 0x5c8]
call fcn.00401a80
mov dword [ebp - 0x5d0], eax
jmp 0x4227ea
mov ecx, dword [ebp - 0x5d0]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x4227fe
lea ecx, [ebp - 0x86]
call fcn.00425e80
mov dword [ebp - 0x5d4], eax
jmp 0x422814
mov ecx, dword [ebp - 0x5d4]
call fcn.00401b50
mov dword [ebp - 0x5d8], eax
jmp 0x42282a
mov ecx, dword [ebp - 0x5d8]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x42283e
mov dword [ebp - 0x8c], 0x8da0cee6
lea ecx, [ebp - 0x8d]
call fcn.00425f30
mov dword [ebp - 0x5dc], eax
jmp 0x42285e
mov ecx, dword [ebp - 0x5dc]
call fcn.00421730
mov dword [ebp - 0x5e0], eax
jmp 0x422874
mov ecx, dword [ebp - 0x5e0]
mov eax, esp
mov dword [eax], ecx
call sub.msvcrt.dll_getenv
mov dword [ebp - 0x5e4], eax
jmp 0x42288e
mov eax, dword [ebp - 0x5e4]
cmp eax, 0
je 0x422954
mov eax, esp
lea ecx, [ebp - 0x8c]
mov dword [eax], ecx
call fcn.00401c40
mov dword [ebp - 0x5e8], eax
jmp 0x4228b7
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jne 0x422942
lea ecx, [ebp - 0x95]
call fcn.00425fe0
mov dword [ebp - 0x5ec], eax
jmp 0x4228e6
mov ecx, dword [ebp - 0x5ec]
call fcn.00401b50
mov dword [ebp - 0x5f0], eax
jmp 0x4228fc
mov ecx, dword [ebp - 0x5f0]
mov eax, esp
mov dword [eax], ecx
call fcn.00401c50
jmp 0x422910
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_GlobalFlags]
call eax
sub esp, 4
jmp 0x422927
jmp 0x422942
mov eax, dword [ebp - 0x94]
call eax
jmp 0x42294f
jmp 0x422954
lea ecx, [ebp - 0x96]
call fcn.00426090
mov dword [ebp - 0x5f4], eax
jmp 0x42296a
mov ecx, dword [ebp - 0x5f4]
call fcn.00401e00
mov dword [ebp - 0x5f8], eax
jmp 0x422980
mov ecx, dword [ebp - 0x5f8]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422994
mov eax, esp
lea ecx, [ebp - 0x34]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xa4]
mov dword [eax], ecx
call fcn.00426140
jmp 0x4229ae
mov eax, esp
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x600], ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x34]
call fcn.00425da0
sub esp, 4
mov ecx, dword [ebp - 0x600]
call fcn.00461ca0
lea ecx, [ebp - 0xa5]
call fcn.00426450
mov dword [ebp - 0x5fc], eax
jmp 0x4229ea
mov ecx, dword [ebp - 0x5fc]
call fcn.00401a80
mov dword [ebp - 0x604], eax
jmp 0x422a00
mov ecx, dword [ebp - 0x604]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422a14
lea ecx, [ebp - 0xa6]
call fcn.00426500
mov dword [ebp - 0x608], eax
jmp 0x422a2a
mov ecx, dword [ebp - 0x608]
call fcn.00401b50
mov dword [ebp - 0x60c], eax
jmp 0x422a40
mov ecx, dword [ebp - 0x60c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422a54
mov dword [ebp - 0xac], 0xa1b0d6ea
lea ecx, [ebp - 0xad]
call fcn.004265b0
mov dword [ebp - 0x610], eax
jmp 0x422a74
mov ecx, dword [ebp - 0x610]
call fcn.00421730
mov dword [ebp - 0x614], eax
jmp 0x422a8a
mov ecx, dword [ebp - 0x614]
mov eax, esp
mov dword [eax], ecx
call sub.msvcrt.dll_getenv
mov dword [ebp - 0x618], eax
jmp 0x422aa4
mov eax, dword [ebp - 0x618]
cmp eax, 0
je 0x422b54
mov eax, esp
lea ecx, [ebp - 0xac]
mov dword [eax], ecx
call fcn.00401c40
mov dword [ebp - 0x61c], eax
jmp 0x422acd
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jne 0x422b42
lea ecx, [ebp - 0xb5]
call fcn.00426660
mov dword [ebp - 0x620], eax
jmp 0x422afc
mov ecx, dword [ebp - 0x620]
call fcn.00401b50
mov dword [ebp - 0x624], eax
jmp 0x422b12
mov ecx, dword [ebp - 0x624]
mov eax, esp
mov dword [eax], ecx
call fcn.00401c50
jmp 0x422b26
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_GlobalFlags]
call eax
sub esp, 4
jmp 0x422b3d
jmp 0x422b42
mov eax, dword [ebp - 0xb4]
call eax
jmp 0x422b4f
jmp 0x422b54
lea ecx, [ebp - 0xb6]
call fcn.00426710
mov dword [ebp - 0x628], eax
jmp 0x422b6a
mov ecx, dword [ebp - 0x628]
call fcn.00401e00
mov dword [ebp - 0x62c], eax
jmp 0x422b80
mov ecx, dword [ebp - 0x62c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422b94
mov ecx, dword [ebp - 0x558]
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xc4]
call fcn.00461c70
sub esp, 4
jmp 0x422bb1
mov eax, esp
lea ecx, [ebp - 0x34]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xc4]
mov dword [eax], ecx
call fcn.004267c0
jmp 0x422bcb
lea ecx, [ebp - 0xc4]
call fcn.00461ca0
lea ecx, [ebp - 0xc5]
call fcn.00426c70
mov dword [ebp - 0x630], eax
jmp 0x422bec
mov ecx, dword [ebp - 0x630]
call fcn.00401a80
mov dword [ebp - 0x634], eax
jmp 0x422c02
mov ecx, dword [ebp - 0x634]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422c16
lea ecx, [ebp - 0xc6]
call fcn.00426d20
mov dword [ebp - 0x638], eax
jmp 0x422c2c
mov ecx, dword [ebp - 0x638]
call fcn.00401b50
mov dword [ebp - 0x63c], eax
jmp 0x422c42
mov ecx, dword [ebp - 0x63c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422c56
mov dword [ebp - 0xcc], 0xb5c0deee
lea ecx, [ebp - 0xcd]
call fcn.00426dd0
mov dword [ebp - 0x640], eax
jmp 0x422c76
mov ecx, dword [ebp - 0x640]
call fcn.00421730
mov dword [ebp - 0x644], eax
jmp 0x422c8c
mov ecx, dword [ebp - 0x644]
mov eax, esp
mov dword [eax], ecx
call sub.msvcrt.dll_getenv
mov dword [ebp - 0x648], eax
jmp 0x422ca6
mov eax, dword [ebp - 0x648]
cmp eax, 0
je 0x422d6c
mov eax, esp
lea ecx, [ebp - 0xcc]
mov dword [eax], ecx
call fcn.00401c40
mov dword [ebp - 0x64c], eax
jmp 0x422ccf
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jne 0x422d5a
lea ecx, [ebp - 0xd5]
call fcn.00426e80
mov dword [ebp - 0x650], eax
jmp 0x422cfe
mov ecx, dword [ebp - 0x650]
call fcn.00401b50
mov dword [ebp - 0x654], eax
jmp 0x422d14
mov ecx, dword [ebp - 0x654]
mov eax, esp
mov dword [eax], ecx
call fcn.00401c50
jmp 0x422d28
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_GlobalFlags]
call eax
sub esp, 4
jmp 0x422d3f
jmp 0x422d5a
mov eax, dword [ebp - 0xd4]
call eax
jmp 0x422d67
jmp 0x422d6c
lea ecx, [ebp - 0xd6]
call fcn.00426f30
mov dword [ebp - 0x658], eax
jmp 0x422d82
mov ecx, dword [ebp - 0x658]
call fcn.00401e00
mov dword [ebp - 0x65c], eax
jmp 0x422d98
mov ecx, dword [ebp - 0x65c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422dac
mov eax, esp
lea ecx, [ebp - 0x34]
mov dword [eax], ecx
lea ecx, [ebp - 0xe4]
call fcn.00461c70
sub esp, 4
jmp 0x422dc6
mov eax, esp
lea ecx, [ebp - 0xfd]
mov dword [eax], ecx
call fcn.00426fe0
jmp 0x422dda
lea ecx, [ebp - 0xfd]
call fcn.00427000
mov dword [ebp - 0x660], eax
jmp 0x422df0
mov ecx, dword [ebp - 0x660]
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xf0]
call fcn.004210c0
sub esp, 4
jmp 0x422e0d
lea ecx, [ebp - 0xe4]
lea eax, [ebp - 0xf0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00422150
mov byte [ebp - 0x661], al
lea ecx, [ebp - 0xf0]
call fcn.00461ca0
lea ecx, [ebp - 0xe4]
call fcn.00461ca0
mov al, byte [ebp - 0x661]
test al, 1
jne 0x422e54
jmp 0x422e80
mov dword [ebp - 8], 0
mov dword [ebp - 0x104], 1
jmp 0x424f7b
mov eax, esp
lea ecx, [ebp - 0x34]
mov dword [eax], ecx
lea ecx, [ebp - 0x110]
call fcn.00461c70
sub esp, 4
jmp 0x422e9a
mov eax, esp
lea ecx, [ebp - 0x129]
mov dword [eax], ecx
call fcn.00427010
jmp 0x422eae
lea ecx, [ebp - 0x129]
call fcn.00427030
mov dword [ebp - 0x668], eax
jmp 0x422ec4
mov ecx, dword [ebp - 0x668]
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0x11c]
call fcn.004210c0
sub esp, 4
jmp 0x422ee1
lea ecx, [ebp - 0x110]
lea eax, [ebp - 0x11c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00422150
mov byte [ebp - 0x669], al
lea ecx, [ebp - 0x11c]
call fcn.00461ca0
lea ecx, [ebp - 0x110]
call fcn.00461ca0
mov al, byte [ebp - 0x669]
test al, 1
jne 0x422f28
jmp 0x4232fb
lea ecx, [ebp - 0x12a]
call fcn.00427040
mov dword [ebp - 0x670], eax
jmp 0x422f3e
mov ecx, dword [ebp - 0x670]
call fcn.00401a80
mov dword [ebp - 0x674], eax
jmp 0x422f54
mov ecx, dword [ebp - 0x674]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422f68
lea ecx, [ebp - 0x12b]
call fcn.004270f0
mov dword [ebp - 0x678], eax
jmp 0x422f7e
mov ecx, dword [ebp - 0x678]
call fcn.00401b50
mov dword [ebp - 0x67c], eax
jmp 0x422f94
mov ecx, dword [ebp - 0x67c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x422fa8
mov dword [ebp - 0x130], 0xc9d0e6f2
lea ecx, [ebp - 0x131]
call fcn.004271a0
mov dword [ebp - 0x680], eax
jmp 0x422fc8
mov ecx, dword [ebp - 0x680]
call fcn.00421730
mov dword [ebp - 0x684], eax
jmp 0x422fde
mov ecx, dword [ebp - 0x684]
mov eax, esp
mov dword [eax], ecx
call sub.msvcrt.dll_getenv
mov dword [ebp - 0x688], eax
jmp 0x422ff8
mov eax, dword [ebp - 0x688]
cmp eax, 0
je 0x4230be
mov eax, esp
lea ecx, [ebp - 0x130]
mov dword [eax], ecx
call fcn.00401c40
mov dword [ebp - 0x68c], eax
jmp 0x423021
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jne 0x4230ac
lea ecx, [ebp - 0x139]
call fcn.00427250
mov dword [ebp - 0x690], eax
jmp 0x423050
mov ecx, dword [ebp - 0x690]
call fcn.00401b50
mov dword [ebp - 0x694], eax
jmp 0x423066
mov ecx, dword [ebp - 0x694]
mov eax, esp
mov dword [eax], ecx
call fcn.00401c50
jmp 0x42307a
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_GlobalFlags]
call eax
sub esp, 4
jmp 0x423091
jmp 0x4230ac
mov eax, dword [ebp - 0x138]
call eax
jmp 0x4230b9
jmp 0x4230be
lea ecx, [ebp - 0x13a]
call fcn.00427300
mov dword [ebp - 0x698], eax
jmp 0x4230d4
mov ecx, dword [ebp - 0x698]
call fcn.00401e00
mov dword [ebp - 0x69c], eax
jmp 0x4230ea
mov ecx, dword [ebp - 0x69c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x4230fe
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x6a4], ecx
call fcn.004273b0
mov ecx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a0], eax
call fcn.00401340
mov ecx, dword [ebp - 0x6a0]
mov edx, eax
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.00411b70
jmp 0x423136
lea ecx, [ebp - 0x13b]
call fcn.004273d0
mov dword [ebp - 0x6a8], eax
jmp 0x42314c
mov ecx, dword [ebp - 0x6a8]
call fcn.00401a80
mov dword [ebp - 0x6ac], eax
jmp 0x423162
mov ecx, dword [ebp - 0x6ac]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x423176
lea ecx, [ebp - 0x13c]
call fcn.00427480
mov dword [ebp - 0x6b0], eax
jmp 0x42318c
mov ecx, dword [ebp - 0x6b0]
call fcn.00401b50
mov dword [ebp - 0x6b4], eax
jmp 0x4231a2
mov ecx, dword [ebp - 0x6b4]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x4231b6
mov dword [ebp - 0x140], 0xdde0eef6
lea ecx, [ebp - 0x141]
call fcn.00427530
mov dword [ebp - 0x6b8], eax
jmp 0x4231d6
mov ecx, dword [ebp - 0x6b8]
call fcn.00421730
mov dword [ebp - 0x6bc], eax
jmp 0x4231ec
mov ecx, dword [ebp - 0x6bc]
mov eax, esp
mov dword [eax], ecx
call sub.msvcrt.dll_getenv
mov dword [ebp - 0x6c0], eax
jmp 0x423206
mov eax, dword [ebp - 0x6c0]
cmp eax, 0
je 0x4232b6
mov eax, esp
lea ecx, [ebp - 0x140]
mov dword [eax], ecx
call fcn.00401c40
mov dword [ebp - 0x6c4], eax
jmp 0x42322f
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jne 0x4232a4
lea ecx, [ebp - 0x149]
call fcn.004275e0
mov dword [ebp - 0x6c8], eax
jmp 0x42325e
mov ecx, dword [ebp - 0x6c8]
call fcn.00401b50
mov dword [ebp - 0x6cc], eax
jmp 0x423274
mov ecx, dword [ebp - 0x6cc]
mov eax, esp
mov dword [eax], ecx
call fcn.00401c50
jmp 0x423288
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_GlobalFlags]
call eax
sub esp, 4
jmp 0x42329f
jmp 0x4232a4
mov eax, dword [ebp - 0x148]
call eax
jmp 0x4232b1
jmp 0x4232b6
lea ecx, [ebp - 0x14a]
call fcn.00427690
mov dword [ebp - 0x6d0], eax
jmp 0x4232cc
mov ecx, dword [ebp - 0x6d0]
call fcn.00401e00
mov dword [ebp - 0x6d4], eax
jmp 0x4232e2
mov ecx, dword [ebp - 0x6d4]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x4232f6
jmp 0x4232fb
mov eax, esp
lea ecx, [ebp - 0x34]
mov dword [eax], ecx
lea ecx, [ebp - 0x158]
call fcn.00461c70
sub esp, 4
jmp 0x423315
mov eax, esp
lea ecx, [ebp - 0x179]
mov dword [eax], ecx
call fcn.00427740
jmp 0x423329
lea ecx, [ebp - 0x179]
call fcn.00427760
mov dword [ebp - 0x6d8], eax
jmp 0x42333f
mov ecx, dword [ebp - 0x6d8]
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0x164]
call fcn.004210c0
sub esp, 4
jmp 0x42335c
lea ecx, [ebp - 0x158]
lea eax, [ebp - 0x164]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00422150
mov byte [ebp - 0x6d9], al
lea ecx, [ebp - 0x164]
call fcn.00461ca0
lea ecx, [ebp - 0x158]
call fcn.00461ca0
mov al, byte [ebp - 0x6d9]
test al, 1
jne 0x4233a3
jmp 0x42394a
lea ecx, [ebp - 0x17a]
call fcn.00427770
mov dword [ebp - 0x6e0], eax
jmp 0x4233b9
mov ecx, dword [ebp - 0x6e0]
call fcn.00401a80
mov dword [ebp - 0x6e4], eax
jmp 0x4233cf
mov ecx, dword [ebp - 0x6e4]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x4233e3
lea ecx, [ebp - 0x17b]
call fcn.00427820
mov dword [ebp - 0x6e8], eax
jmp 0x4233f9
mov ecx, dword [ebp - 0x6e8]
call fcn.00401b50
mov dword [ebp - 0x6ec], eax
jmp 0x42340f
mov ecx, dword [ebp - 0x6ec]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x423423
mov dword [ebp - 0x180], 0xf1f0f6fa
lea ecx, [ebp - 0x181]
call fcn.004278d0
mov dword [ebp - 0x6f0], eax
jmp 0x423443
mov ecx, dword [ebp - 0x6f0]
call fcn.00421730
mov dword [ebp - 0x6f4], eax
jmp 0x423459
mov ecx, dword [ebp - 0x6f4]
mov eax, esp
mov dword [eax], ecx
call sub.msvcrt.dll_getenv
mov dword [ebp - 0x6f8], eax
jmp 0x423473
mov eax, dword [ebp - 0x6f8]
cmp eax, 0
je 0x423539
mov eax, esp
lea ecx, [ebp - 0x180]
mov dword [eax], ecx
call fcn.00401c40
mov dword [ebp - 0x6fc], eax
jmp 0x42349c
lea ecx, [ebp - 0x18a]
call fcn.00427a30
mov dword [ebp - 0x708], eax
jmp 0x42354f
mov eax, esp
lea ecx, [ebp - 0x34]
mov dword [eax], ecx
lea ecx, [ebp - 0x3d4]
call fcn.00461c70
sub esp, 4
jmp 0x423964
mov eax, esp
lea ecx, [ebp - 0x3ef]
mov dword [eax], ecx
call fcn.004282b0
jmp 0x423978
lea ecx, [ebp - 0x3ef]
call fcn.004282d0
mov dword [ebp - 0x770], eax
jmp 0x42398e
mov ecx, dword [ebp - 0x770]
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0x3e0]
call fcn.004210c0
sub esp, 4
jmp 0x4239ab
lea ecx, [ebp - 0x3d4]
lea eax, [ebp - 0x3e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00422150
mov byte [ebp - 0x771], al
lea ecx, [ebp - 0x3e0]
call fcn.00461ca0
lea ecx, [ebp - 0x3d4]
call fcn.00461ca0
mov al, byte [ebp - 0x771]
test al, 1
jne 0x4239f2
jmp 0x4248fc
lea ecx, [ebp - 0x3f0]
call fcn.004282e0
mov dword [ebp - 0x778], eax
jmp 0x423a08
mov ecx, dword [ebp - 0x778]
call fcn.00401a80
mov dword [ebp - 0x77c], eax
jmp 0x423a1e
mov ecx, dword [ebp - 0x77c]
mov eax, esp
mov dword [eax], ecx
call fcn.00401450
jmp 0x423a32
lea ecx, [ebp - 0x3f1]
call fcn.00428390
mov dword [ebp - 0x780], eax
jmp 0x423a48
mov ecx, dword [ebp - 0x780]
call fcn.00401b50
mov dword [ebp - 0x784], eax
jmp 0x423a5e
mov eax, esp
lea ecx, [ebp - 0x34]
mov dword [eax], ecx
lea ecx, [ebp - 0x4e0]
call fcn.00461c70
sub esp, 4
jmp 0x424916
mov eax, esp
lea ecx, [ebp - 0x4fe]
mov dword [eax], ecx
call fcn.00429ca0
jmp 0x42492a
lea ecx, [ebp - 0x4fe]
call fcn.00429cc0
mov dword [ebp - 0x900], eax
jmp 0x424940
mov ecx, dword [ebp - 0x900]
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0x4ec]
call fcn.004210c0
sub esp, 4
jmp 0x42495d
lea ecx, [ebp - 0x34]
call fcn.00461ca0
jmp 0x424f95
mov eax, dword [ebp - 8]
add esp, 0x9ac
pop esi
pop ebp
ret