Function at 0x10022d61
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x288
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10023d87
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x24], 0xa122
mov dword [ebp - 0x1dc], 3
mov dword [ebp - 0x1d8], 3
mov dword [ebp - 0x1d4], 3
mov dword [ebp - 0x1d0], 3
mov dword [ebp - 0x144], 1
mov dword [ebp - 0x14c], 0xfffffffb
mov dword [ebp - 0x5c], 0
jmp 0x10022dcf
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10022de5
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x244], 0x1d018875
jmp 0x10022dc8
cmp dword [ebp - 0x24], 0
jne 0x10022e27
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1f4], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1dc], 1
cmp dword [ebp - 0x24], 0x6173
jle 0x10022e1e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1dc], 0
jne 0x10022e27
and dword [ebp - 0x12c], 0
jmp 0x10022e31
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x12c], eax
jge 0x10022e48
mov dword [ebp - 0x98], 1
jmp 0x10022e4f
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x2e97
jne 0x10022e73
mov dword [ebp - 0xa0], 1
jmp 0x10022e7a
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
add eax, 0x8e46
mov dword [ebp - 0x14c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14c]
mov dword [ebp + eax - 0x244], ecx
mov dword [ebp - 0x24], 0
jmp 0x10022eae
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x10022eca
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x10022ec8
push 0
call fcn.10026649
pop ecx
jmp 0x10022ea7
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0xc], eax
mov dword [ebp - 4], 0xfffffffa
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 4], 0
jmp 0x10022efd
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xfffffff1
jg 0x1002327e
mov dword [ebp - 0x148], 0x2ee6d058
mov dword [ebp - 0x10], 0x8b15e3
mov dword [ebp - 0xcc], 0xe712c519
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x60], 0
jmp 0x10022f3c
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x10022f52
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x16c], 1
jmp 0x10022f35
mov eax, dword [ebp - 4]
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 4], 0
jne 0x10022f70
cmp dword [ebp - 4], 0
jne 0x10022f70
and dword [ebp - 0xa8], 0
jmp 0x10022f7a
mov dword [ebp - 0xa8], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xa8], eax
jl 0x10022f8e
mov dword [ebp - 0x74], 1
jmp 0x10022f92
and dword [ebp - 0x74], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x74]
mov dword [ebp + eax - 0x16c], ecx
cmp dword [ebp - 0x74], 0
jne 0x10022fb4
mov dword [ebp - 0x154], 1
jmp 0x10022fbb
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x148]
jg 0x10022fd8
mov dword [ebp - 0xb4], 1
jmp 0x10022fdf
and dword [ebp - 0xb4], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0xb4]
jne 0x10022ffc
mov dword [ebp - 0x10c], 1
jmp 0x10023003
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x10c]
jle 0x1002301a
mov dword [ebp - 0xbc], 1
jmp 0x10023021
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0xb8b78acc
jbe 0x10023039
mov dword [ebp - 0x134], 1
jmp 0x10023040
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x10], 0
jne 0x100230c9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x16c]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x16c]
jne 0x10023086
mov eax, 0xee1d
test eax, eax
jne 0x10023086
and dword [ebp - 0xc4], 0
jmp 0x10023090
mov dword [ebp - 0xc4], 1
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0xc4]
jg 0x100230a7
mov dword [ebp - 0x114], 1
jmp 0x100230ae
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x100230d2
cmp dword [ebp - 4], 0
je 0x100230d2
cmp dword [ebp - 0x88], 0
jne 0x100230e1
cmp dword [ebp - 0x10], 0
jne 0x100230e1
and dword [ebp - 0x13c], 0
jmp 0x100230eb
mov dword [ebp - 0x13c], 1
cmp dword [ebp - 0x13c], 1
jae 0x10023100
mov dword [ebp - 0xd4], 1
jmp 0x10023107
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xd4]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x10023152
mov dword [ebp - 0x10], 0x14
jmp 0x1002312a
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe6
jne 0x1002314d
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x1002314b
push 0x1fa5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
jmp 0x10023123
jmp 0x10023279
mov dword [ebp - 0x80], 0x8a3d3555
push 0x5472
push 0
push 0xd5f
call fcn.10028fec
add esp, 0xc
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1e4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x16c]
cmp dword [ebp - 4], eax
je 0x1002319d
cmp dword [ebp - 0x10], 0
je 0x1002319d
mov dword [ebp - 0x11c], 1
jmp 0x100231a4
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x11c]
jg 0x100231bb
mov dword [ebp - 0xdc], 1
jmp 0x100231c2
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xdc]
je 0x100231de
xor eax, eax
inc eax
je 0x100231de
mov dword [ebp - 0x140], 1
jmp 0x100231e5
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x140], eax
jle 0x100231fc
mov dword [ebp - 0x180], 1
jmp 0x10023203
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x80], eax
jge 0x10023220
mov dword [ebp - 0xe4], 1
jmp 0x10023227
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0x615a0349
jl 0x1002323f
mov dword [ebp - 0x124], 1
jmp 0x10023246
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x124], eax
jg 0x10023260
mov dword [ebp - 0xec], 1
jmp 0x10023267
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
jmp 0x10022ef6
and dword [ebp - 0x78], 0
jmp 0x10023294
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0xc]
add eax, 0x28
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x78], eax
jge 0x10023d85
mov dword [ebp - 0x50], 0xd1e1e87d
mov dword [ebp - 0x230], 7
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x1c], 0
jmp 0x100232ce
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100232e4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x250], 1
jmp 0x100232c7
mov dword [ebp - 0x1c], 0
jmp 0x100232f4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1002330a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1fc], 0xfffffffd
jmp 0x100232ed
push 0
call fcn.10022c38
pop ecx
mov dword [ebp - 0x50], 2
jmp 0x10023322
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x100234d0
mov dword [ebp - 0x17c], 0xfffffffa
mov dword [ebp - 0x178], 0xfffffffa
mov dword [ebp - 0x174], 0xfffffffa
mov dword [ebp - 0x170], 0xfffffffa
mov dword [ebp - 0x150], 0xfffffffe
mov dword [ebp - 0x68], 0
jmp 0x1002336e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x10023384
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x26c], 0xfffffff9
jmp 0x10023367
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x17c], 0
jmp 0x100233b2
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x17c]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x17c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x17c], 2
jg 0x10023479
mov dword [ebp - 0x1a8], 8
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x17c]
cmp dword [ebp + eax*4 - 0x250], 0x924b5411
jb 0x100233f6
mov dword [ebp - 0xf4], 1
jmp 0x100233fd
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0xf4]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1fc]
je 0x1002343e
cmp dword [ebp - 0x1a8], 0
je 0x1002343e
mov dword [ebp - 0x90], 1
jmp 0x10023445
and dword [ebp - 0x90], 0
cmp dword [ebp - 0x90], 6
jne 0x1002345a
mov dword [ebp - 0xfc], 1
jmp 0x10023461
and dword [ebp - 0xfc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x26c], ecx
jmp 0x10023397
mov dword [ebp - 0x34], 0
jmp 0x10023489
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x100234cb
mov dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0
je 0x100234a4
jmp 0x100234cb
mov byte [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x100234c9
push 0x1ea3
push 0x5905
push 0x34e7
push 1
call fcn.10022a5b
add esp, 0x10
jmp 0x10023482
jmp 0x1002331b
mov dword [ebp - 0x3c], 0xfffffffc
mov dword [ebp - 0x238], 0xfffffff7
mov dword [ebp - 0x58], 0
jmp 0x100234f1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10023507
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x1f0], 1
jmp 0x100234ea
mov byte [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 0x6e37
call fcn.10022c85
add esp, 0xc
mov dword [ebp - 0x3c], 0
jmp 0x1002352e
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jg 0x1002354a
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x1f0]
mov dword [ebp + ecx*4 - 0x1f0], eax
jmp 0x10023527
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x10023563
mov dword [ebp - 0x138], 1
jmp 0x1002356a
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x1002358f
mov dword [ebp - 0x104], 1
jmp 0x10023596
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x100235bb
mov dword [ebp - 0xac], 1
jmp 0x100235c2
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x10023740
push 0x4000
mov eax, dword [ebp - 0xc]
push dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
push dword [eax + 8]
push 0x79b7
push 0x7e0f
call fcn.1001fb4b
pop ecx
pop ecx
call eax
mov dword [ebp - 0x164], 0x7e1
mov dword [ebp - 0x160], 0x7e1
mov dword [ebp - 0x15c], 0x7e1
mov dword [ebp - 0x158], 0x7e1
mov dword [ebp - 0x1a0], 0xd658edf
mov dword [ebp - 0x188], 0xcb1a7a81
mov dword [ebp - 0x14], 0
jmp 0x1002364f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10023665
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x288], 0
jmp 0x10023648
mov dword [ebp - 0x14], 0
jmp 0x10023675
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002368b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x210], 0xfffffffe
jmp 0x1002366e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x164], 0
jne 0x100236eb
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x164], 0xfffc
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x164]
jne 0x100236c7
mov dword [ebp - 0xb0], 1
jmp 0x100236ce
and dword [ebp - 0xb0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xb0]
sub ecx, dword [ebp + eax - 0x164]
jne 0x100236eb
and dword [ebp - 0x18c], 0
jmp 0x100236f5
mov dword [ebp - 0x18c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x164]
mov dword [ebp - 0x1e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x164]
mov dword [ebp - 0x1a0], eax
push 0
push 0x9aa
push 0x7ffe
push 0x4244
lea eax, [ebp - 0x188]
push eax
call fcn.100240a2
add esp, 0x14
jmp 0x10023284
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x84], 0x7d2703d9
mov dword [ebp - 0x9c], 0x9ecf4a41
mov dword [ebp - 0xf0], 0xd6b3bfa3
mov dword [ebp - 0x8c], 0xfffffffd
mov dword [ebp - 0x20], 0xf145ba13
mov dword [ebp - 8], 0
jmp 0x10023786
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x1002379c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1b4], 0x86fd5d70
jmp 0x1002377f
mov dword [ebp - 8], 0
jmp 0x100237ac
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x100237bf
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x6c], 0
jmp 0x100237a5
mov dword [ebp - 8], 0
jmp 0x100237cf
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x100237e2
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x7c], 1
jmp 0x100237c8
mov byte [ebp - 0x2a], 0
push 0x62fc
lea eax, [ebp - 0x2a]
push eax
push 1
call fcn.10022bd2
add esp, 0xc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b4]
mov dword [ebp - 0x218], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
neg eax
neg eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x194], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7c], eax
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x194]
je 0x10023861
mov dword [ebp - 0xb8], 1
jmp 0x10023868
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0xb8]
jl 0x1002387f
mov dword [ebp - 0xc0], 1
jmp 0x10023886
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0xc0], 0xe6da
jge 0x1002389e
mov dword [ebp - 0xc8], 1
jmp 0x100238a5
and dword [ebp - 0xc8], 0
mov dword [ebp - 0x84], 0xe58b
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0xc8]
jle 0x100238c9
mov dword [ebp - 0xd0], 1
jmp 0x100238d0
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xd0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x6c]
cmp eax, 0x4ed25e42
je 0x100238f6
mov dword [ebp - 0xd8], 1
jmp 0x100238fd
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0xd8]
jge 0x10023914
mov dword [ebp - 0xe0], 1
jmp 0x1002391b
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xe0], eax
jne 0x10023932
mov dword [ebp - 0x1ac], 1
jmp 0x10023939
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x220], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
cmp dword [ebp + eax - 0x6c], ecx
jge 0x10023a2f
mov dword [ebp - 0x19c], 0x2c752785
mov dword [ebp - 0x70], 0
jmp 0x10023972
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x10023988
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x1cc], 0x12535b5b
jmp 0x1002396b
mov eax, 0x7342
test eax, eax
je 0x100239b5
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x40], 1
jne 0x100239b5
mov dword [ebp - 0xe8], 1
jmp 0x100239bc
and dword [ebp - 0xe8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe8]
sub ecx, dword [ebp + eax - 0x1cc]
je 0x100239e8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1cc], 0
je 0x100239e8
cmp dword [ebp - 0x84], 0
jne 0x100239fa
cmp dword [ebp - 0x19c], 0
jne 0x100239fa
and dword [ebp - 0x1c0], 0
jmp 0x10023a04
mov dword [ebp - 0x1c0], 1
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x214], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp + ecx - 0x1b4], eax
jmp 0x10023b8e
mov dword [ebp - 0x94], 0x5a6edb5b
mov dword [ebp - 0x20], 0
jmp 0x10023a49
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10023b8e
mov dword [ebp - 0xf8], 0xfffffff9
mov dword [ebp - 0x8c], 6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b4]
cmp dword [ebp - 0x8c], eax
jge 0x10023a88
mov dword [ebp - 0x110], 1
jmp 0x10023a8f
and dword [ebp - 0x110], 0
mov dword [ebp - 0xf8], 0xc3d3
cmp dword [ebp - 0xf8], 0x9e48
je 0x10023ab1
mov dword [ebp - 0x100], 1
jmp 0x10023ab8
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x100], eax
jne 0x10023ad2
mov dword [ebp - 0x108], 1
jmp 0x10023ad9
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 0x2197
jl 0x10023af1
mov dword [ebp - 0x118], 1
jmp 0x10023af8
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x118]
jle 0x10023b12
mov dword [ebp - 0x120], 1
jmp 0x10023b19
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x120]
cmp eax, 0x453d
jle 0x10023b36
mov dword [ebp - 0x128], 1
jmp 0x10023b3d
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp eax, dword [ebp - 0x128]
jle 0x10023b58
mov dword [ebp - 0x130], 1
jmp 0x10023b5f
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x6c], ecx
lea eax, [ebp - 0x94]
push eax
push 0
push 0x499f
lea eax, [ebp - 0x9c]
push eax
call fcn.10028c36
add esp, 0x10
jmp 0x10023a42
push 0x459e
lea eax, [ebp - 0x198]
push eax
push 1
push dword [ebp - 0x1a4]
push dword [ebp - 0xc]
push dword [ebp - 0x184]
push dword [ebp - 0x190]
call fcn.10020b29
add esp, 0x1c
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x20c], 0xffffffff
mov dword [ebp - 0x208], 0xffffffff
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x10023bf8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xf
jne 0x10023c9b
mov dword [ebp - 0x44], 0xfffffffd
mov dword [ebp - 0x44], 0xe
jmp 0x10023c19
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x14
je 0x10023c96
mov dword [ebp - 0x48], 0x3e63e315
mov dword [ebp - 0x48], 0
jmp 0x10023c36
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jg 0x10023c7d
mov dword [ebp - 0x4c], 0x79e672ca
mov dword [ebp - 0x4c], 3
jmp 0x10023c53
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10023c7b
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x10023c79
push 0x137b
push 0xd1f
push 0
call fcn.10029041
add esp, 0xc
jmp 0x10023c4c
jmp 0x10023c2f
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x10023c91
push 1
call fcn.10022c38
pop ecx
jmp 0x10023c12
jmp 0x10023bf1
mov byte [ebp - 0x29], 0
push 1
push 0xa1c
lea eax, [ebp - 0x29]
push eax
call fcn.10022c85
add esp, 0xc
push dword [ebp - 0x54]
push dword [ebp - 0xc]
lea eax, [ebp - 0xa4]
push eax
push 0
call fcn.10022a5b
add esp, 0x10
mov dword [ebp - 0x18], 0
jmp 0x10023cd9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10023cef
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x27c], 2
jmp 0x10023cd2
mov dword [ebp - 0x18], 0
jmp 0x10023cff
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10023d15
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x25c], 0
jmp 0x10023cf8
mov byte [ebp - 0x2b], 0
push 0x5710
push 1
push 0x44d9
lea eax, [ebp - 0x2b]
push eax
call fcn.10022cee
add esp, 0x10
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp + ecx - 0x25c], eax
cmp dword [ebp - 0xa4], 0
jbe 0x10023d80
lea eax, [ebp - 0x234]
push eax
push dword [ebp - 0x198]
push dword [ebp - 0xa4]
mov eax, dword [ebp - 0xc]
push dword [eax + 8]
push 0x79b7
push 0x6857
call fcn.1001fb4b
pop ecx
pop ecx
call eax
jmp 0x10023284
jmp 0x10023d9b
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10023d9b
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov esp, ebp
pop ebp
ret