Function at 0x423140
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov ecx, dword [esp + 0x28]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0x38]
mov dword [ecx], 0
mov ecx, dword [eax]
xor eax, eax
cmp ecx, 2
je 0x423229
cmp ecx, 4
je 0x4232d7
cmp ecx, 6
jne 0x42338f
mov ecx, dword fs:[0x30]
mov edx, dword [ecx + 0x38]
cmp dword [edx + 0xc], 0
je 0x42338f
lea eax, [edx - 8]
mov dword [esp + 8], eax
xor ecx, ecx
mov dword [esp], edx
jmp 0x4231b0
mov ecx, dword [esp + 4]
inc ecx
xor eax, eax
cmp ecx, dword [edx + 0xc]
jae 0x42338f
mov dword [esp + 4], ecx
lea esi, [ecx + ecx*2]
mov eax, dword [edx + esi*8 + 0x20]
add eax, edx
mov ecx, dword [edx + esi*8 + 0x28]
shr ecx, 1
push ecx
push dword [esp + 0x28]
push eax
call dword [sym.imp.msvcrt.dll__wcsnicmp]
mov edx, dword [esp + 0xc]
add esp, 0xc
test eax, eax
jne 0x4231a0
mov ebx, dword [edx + esi*8 + 0x30]
lea edi, [ebx + ebx*4]
shl edi, 2
add edi, dword [edx + esi*8 + 0x2c]
add edi, dword [esp + 8]
nop
nop
nop
nop
dec ebx
js 0x4231a0
mov ebp, edi
mov eax, dword [edi - 4]
mov esi, dword [edi]
test eax, eax
je 0x42321f
lea edi, [ebp - 0x14]
mov ecx, dword [ebp - 8]
add ecx, edx
shr eax, 1
push eax
push dword [esp + 0x24]
push ecx
call dword [sym.imp.msvcrt.dll__wcsnicmp]
mov edx, dword [esp + 0xc]
add esp, 0xc
test eax, eax
jne 0x4231f0
add edx, esi
add ebp, 4
jmp 0x423382
mov ecx, dword fs:[0x30]
mov edx, dword [ecx + 0x38]
cmp dword [edx + 4], 0
je 0x42338f
xor ecx, ecx
mov dword [esp], edx
jmp 0x423260
mov ecx, dword [esp + 4]
inc ecx
xor eax, eax
cmp ecx, dword [edx + 4]
jae 0x42338f
mov dword [esp + 4], ecx
lea esi, [ecx + ecx*2]
mov eax, dword [edx + esi*4 + 8]
add eax, edx
mov ecx, dword [edx + esi*4 + 0xc]
shr ecx, 1
push ecx
push dword [esp + 0x28]
push eax
call dword [sym.imp.msvcrt.dll__wcsnicmp]
mov edx, dword [esp + 0xc]
add esp, 0xc
test eax, eax
jne 0x423250
mov edi, dword [edx + esi*4 + 0x10]
mov ebx, dword [edx + edi]
mov eax, ebx
shl eax, 4
add edi, edx
add edi, eax
nop
nop
nop
nop
nop
nop
dec ebx
js 0x423250
mov ebp, edi
mov eax, dword [edi - 8]
mov esi, dword [edi - 4]
test eax, eax
je 0x4232d0
lea edi, [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
add ecx, edx
shr eax, 1
push eax
push dword [esp + 0x24]
push ecx
call dword [sym.imp.msvcrt.dll__wcsnicmp]
mov edx, dword [esp + 0xc]
add esp, 0xc
test eax, eax
jne 0x4232a0
add edx, esi
jmp 0x423382
mov ecx, dword fs:[0x30]
mov edx, dword [ecx + 0x38]
cmp dword [edx + 0xc], 0
je 0x42338f
lea eax, [edx + 4]
mov dword [esp + 8], eax
xor ecx, ecx
mov dword [esp], edx
jmp 0x423310
mov ecx, dword [esp + 4]
inc ecx
xor eax, eax
cmp ecx, dword [edx + 0xc]
jae 0x42338f
mov dword [esp + 4], ecx
lea esi, [ecx + ecx*2]
mov eax, dword [edx + esi*8 + 0x14]
add eax, edx
mov ecx, dword [edx + esi*8 + 0x18]
shr ecx, 1
push ecx
push dword [esp + 0x28]
push eax
call dword [sym.imp.msvcrt.dll__wcsnicmp]
mov edx, dword [esp + 0xc]
add esp, 0xc
test eax, eax
jne 0x423300
mov eax, dword [edx + esi*8 + 0x24]
mov edi, dword [edx + eax + 4]
lea ecx, [edi + edi*4]
lea esi, [eax + ecx*4]
add esi, dword [esp + 8]
nop
nop
nop
nop
dec edi
js 0x423300
mov ebp, esi
mov eax, dword [esi - 8]
mov ebx, dword [esi - 4]
test eax, eax
je 0x423380
lea esi, [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
add ecx, edx
shr eax, 1
push eax
push dword [esp + 0x24]
push ecx
call dword [sym.imp.msvcrt.dll__wcsnicmp]
mov edx, dword [esp + 0xc]
add esp, 0xc
test eax, eax
jne 0x423350
add edx, ebx
mov eax, edx
mov ecx, dword [ebp]
shr ecx, 1
mov edx, dword [esp + 0x28]
mov dword [edx], ecx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret