Function at 0x1002a2a4
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x320
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002aa37
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xf4], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x1e8], 8
mov dword [ebp - 0x58], 0xca4e8652
mov dword [ebp - 0xa8], 0x7d1dc6b7
mov dword [ebp - 0x1bc], 0x6fec1b16
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0xec], 0x65ee6d54
mov dword [ebp - 0x78], 0
jmp 0x1002a318
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1002a32e
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x2c8], 1
jmp 0x1002a311
cmp dword [ebp - 0x20], 0
jne 0x1002a391
cmp dword [ebp - 0x20], 0
jne 0x1002a391
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1002a34e
mov dword [ebp - 0x1ec], 1
jmp 0x1002a355
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0xa8]
je 0x1002a397
cmp dword [ebp - 0x58], 0
jne 0x1002a39b
cmp dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x204], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x204]
mov dword [ebp + eax - 0x2c8], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x28], eax
jle 0x1002a3e8
mov dword [ebp - 0x1c0], 1
jmp 0x1002a3ef
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x1002a42c
mov dword [ebp - 0x28], 0
jmp 0x1002a414
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002a42a
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2c8], 9
jmp 0x1002a40d
jmp 0x1002a440
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x1002a440
push 1
call fcn.1002a171
pop ecx
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x14], 0xd16df251
mov dword [ebp - 0x8c], 0
jmp 0x1002a46f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1002a48b
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x2e8], 0xa8c6a53d
jmp 0x1002a462
mov dword [ebp - 0x14], 0
jmp 0x1002a49b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002a4b1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2e8], 0xfffffffd
jmp 0x1002a494
mov dword [ebp - 0x14], 0
jmp 0x1002a4c1
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff0
jl 0x1002a4df
mov dword [ebp - 0x1c8], 0xfffffff8
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1c8], eax
jmp 0x1002a4ba
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
push 8
pop ecx
imul ecx, ecx, 5
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x198], eax
mov dword [ebp - 4], 0xa48bbca6
mov dword [ebp - 0x94], 0x30b9
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x1c4], 9
mov dword [ebp - 0x248], 0x4c5f6b4a
mov dword [ebp - 0x6c], 0
jmp 0x1002a536
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x1002a54c
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x310], 0x265d
jmp 0x1002a52f
mov dword [ebp - 4], 0
jmp 0x1002a55c
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xf
jle 0x1002a81e
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x1e0], 0x6c93846f
mov dword [ebp - 0x190], 0xffffffff
cmp dword [ebp - 8], 0
jne 0x1002a5ee
imul eax, dword [ebp - 4], 0x2a8d
cmp dword [ebp - 8], eax
jne 0x1002a59f
mov dword [ebp - 0x1d0], 1
jmp 0x1002a5a6
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 0x9507
jle 0x1002a5be
mov dword [ebp - 0xfc], 1
jmp 0x1002a5c5
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xfc], eax
jl 0x1002a5dc
mov dword [ebp - 0x1d8], 1
jmp 0x1002a5e3
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x1d8]
jg 0x1002a616
mov eax, 0x7335
test eax, eax
je 0x1002a616
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1002a611
push 0x257a
push 1
call fcn.1002a1b2
pop ecx
pop ecx
jmp 0x1002a819
mov dword [ebp - 0x9c], 0xf2c9a130
mov dword [ebp - 0xcc], 0x58b
mov dword [ebp - 0x1e4], 0xf9491450
cmp dword [ebp - 8], 0
je 0x1002a770
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jne 0x1002a6a1
mov eax, 0x839bf5bf
test eax, eax
jne 0x1002a6a1
and dword [ebp - 0x108], 0
jmp 0x1002a6ab
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0x108]
sub eax, dword [ebp - 0x94]
jne 0x1002a6cb
cmp dword [ebp - 0x94], 0
jne 0x1002a6cb
and dword [ebp - 0x180], 0
jmp 0x1002a6d5
mov dword [ebp - 0x180], 1
cmp dword [ebp - 0x180], 0x62699ff9
jl 0x1002a6ed
mov dword [ebp - 0x110], 1
jmp 0x1002a6f4
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
sub eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jl 0x1002a70e
mov dword [ebp - 0x240], 1
jmp 0x1002a715
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x1b8], 1
cmp dword [ebp - 0x1b8], 0xfffc
jne 0x1002a74f
mov dword [ebp - 0x118], 1
jmp 0x1002a756
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x118], eax
jg 0x1002a770
mov dword [ebp - 0x188], 1
jmp 0x1002a777
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x188], eax
jg 0x1002a78e
mov dword [ebp - 0x120], 1
jmp 0x1002a795
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
imul eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 4]
jg 0x1002a7bf
mov dword [ebp - 0x128], 1
jmp 0x1002a7c6
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
sub eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 8]
jle 0x1002a7ef
mov dword [ebp - 0x130], 1
jmp 0x1002a7f6
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0xcc], 0
je 0x1002a819
jmp 0x1002a81e
jmp 0x1002a555
mov dword [ebp - 4], 3
jmp 0x1002a82e
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x1002a89b
mov dword [ebp - 0x260], 0x942fafec
mov dword [ebp - 0x280], 0xa458230b
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x288], 0x62cc684c
mov dword [ebp - 0x138], 0x3368
mov dword [ebp - 0x74], 0
jmp 0x1002a876
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1002a88c
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x300], 0x82e70d5d
jmp 0x1002a86f
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
jmp 0x1002a827
mov eax, dword [ebp - 0x198]
cmp dword [eax + 4], 0
jbe 0x1002aa32
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x1cc]
add ecx, dword [eax]
mov dword [ebp - 0x150], ecx
mov eax, dword [ebp - 0x150]
cmp dword [eax], 0
jbe 0x1002aa32
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x234], 0
cmp dword [ebp - 0xd0], 0xffffffff
jne 0x1002a91e
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x1002a919
push 0x5040
push 0
call fcn.1002daeb
pop ecx
pop ecx
jmp 0x1002aa00
mov dword [ebp - 0x98], 0
jmp 0x1002a937
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x1002a953
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xb0], 0
jmp 0x1002a92a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 0
jne 0x1002a981
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0xd0], eax
jg 0x1002a981
and dword [ebp - 0x140], 0
jmp 0x1002a98b
mov dword [ebp - 0x140], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x140], eax
jle 0x1002a9ac
mov dword [ebp - 0x1dc], 1
jmp 0x1002a9b3
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0xd0], 0x7979b389
jle 0x1002a9e3
mov dword [ebp - 0x1a0], 1
jmp 0x1002a9ea
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x234], 0xfffffffe
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x238]
push 1
lea eax, [ebp - 0x1cc]
push eax
push 0x16e2
push 0x54e9
push 0x485e
call fcn.1002a210
add esp, 0x1c
jmp 0x1002a8bf
jmp 0x1002b725
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x210], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x210]
add ecx, dword [eax]
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x230], 0xef72d4ea
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1002aa87
push 0
call fcn.1002bf75
pop ecx
mov dword [ebp - 0x5c], 0xffffffe5
jmp 0x1002aa97
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff6
jge 0x1002aad5
cmp dword [ebp - 0x5c], 0
jne 0x1002aaaf
mov dword [ebp - 0x158], 1
jmp 0x1002aab6
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x230], eax
mov byte [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
push eax
push 0
call fcn.1002a1b2
pop ecx
pop ecx
jmp 0x1002aa90
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0x490c4d8e
mov dword [ebp - 0x10c], 0xa1241a59
mov dword [ebp - 0x220], 7
mov dword [ebp - 0x80], 0
jmp 0x1002ab0b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1002ab21
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x1f4], 0xd3df
jmp 0x1002ab04
mov dword [ebp - 0xc], 0
jmp 0x1002ab31
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jg 0x1002aed3
mov dword [ebp - 0x38], 0xf402e31d
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x218], 1
mov dword [ebp - 0xb8], 0xaf1ba137
mov dword [ebp - 0x38], 1
jmp 0x1002ab6d
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1002aece
mov dword [ebp - 0x48], 0xfc257a10
mov dword [ebp - 0x244], 0x43f36fc7
mov dword [ebp - 0x90], 0
jmp 0x1002aba1
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1002abbd
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xdc], 0x478144ad
jmp 0x1002ab94
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xdc], 0
jmp 0x1002abeb
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xdc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xdc], 1
jg 0x1002ad92
mov dword [ebp - 0x34], 0xc590f023
mov dword [ebp - 0x34], 1
jmp 0x1002ac16
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1002ac2c
push 1
push 0x243a
call fcn.10028c66
pop ecx
pop ecx
jmp 0x1002ac0f
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x1f4], 0
jne 0x1002ad46
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x1f4]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x1f4], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdc]
add eax, dword [ebp - 0x1a8]
jne 0x1002ac84
mov eax, 0xd857
test eax, eax
jne 0x1002ac84
and dword [ebp - 0x160], 0
jmp 0x1002ac8e
mov dword [ebp - 0x160], 1
cmp dword [ebp - 0x160], 0x3196e86f
jle 0x1002aca1
cmp dword [ebp - 0x218], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], 0x421d
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp + eax*4 - 0x1f4]
sub ecx, dword [ebp - 0x34]
cmp dword [ebp - 0x40], ecx
jge 0x1002ace2
mov dword [ebp - 0xe0], 1
jmp 0x1002ace9
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 1
jg 0x1002acfe
mov dword [ebp - 0x168], 1
jmp 0x1002ad05
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xdc]
add eax, dword [ebp - 0x168]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xdc]
jne 0x1002ad32
mov dword [ebp - 0x1b0], 1
jmp 0x1002ad39
and dword [ebp - 0x1b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x244], 2
ja 0x1002ad5b
mov dword [ebp - 0x170], 1
jmp 0x1002ad62
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0x71d69170
jne 0x1002ad7a
mov dword [ebp - 0x1d4], 1
jmp 0x1002ad81
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xb8], eax
jmp 0x1002abd0
mov dword [ebp - 0x48], 0
jmp 0x1002ada2
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffeb
jge 0x1002aec9
mov dword [ebp - 0x178], 0x2a05
push 0
push 0x4798
push 0xf2e
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.1002ddc7
add esp, 0x14
mov dword [ebp - 0x40], 0
jmp 0x1002ade8
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x19
jle 0x1002aec4
mov dword [ebp - 0x104], 0xfff9
cmp dword [ebp - 0x178], 0
je 0x1002aea5
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0xb8]
add eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x178]
jge 0x1002ae2f
mov dword [ebp - 0x100], 1
jmp 0x1002ae36
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x220]
add eax, dword [ebp - 0x100]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x10c], eax
je 0x1002ae62
mov dword [ebp - 0x114], 1
jmp 0x1002ae69
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
sub eax, 0xac04
cmp eax, 0xffff
je 0x1002ae87
mov dword [ebp - 0x11c], 1
jmp 0x1002ae8e
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x11c]
jne 0x1002aea5
mov dword [ebp - 0x124], 1
jmp 0x1002aeac
and dword [ebp - 0x124], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x124]
mov dword [ebp + eax - 0xdc], ecx
jmp 0x1002ade1
jmp 0x1002ad9b
jmp 0x1002ab66
jmp 0x1002ab2a
and dword [ebp - 0xc8], 0
jmp 0x1002aef1
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x70]
inc eax
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
cmp dword [ebp - 0xc8], eax
jae 0x1002b636
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x23c], 0xc6f1bf50
mov dword [ebp - 0x54], 0
jmp 0x1002af2b
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfffffff5
je 0x1002af77
push 0
push 0x3e39
lea eax, [ebp - 0x23c]
push eax
push 0x33fa
push 0x1a7e
push 0x639b
push 0x6971
lea eax, [ebp - 0x54]
push eax
call fcn.1002dba7
add esp, 0x20
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1002af75
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
jmp 0x1002af24
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0x10], 0
jmp 0x1002af91
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1002afa7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x200], 0x41651328
jmp 0x1002af8a
mov dword [ebp - 0x10], 0
jmp 0x1002afb7
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1002afcd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2a0], 0xffffffff
jmp 0x1002afb0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x200], 0
jne 0x1002b06b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x200]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x2cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x200], 0
jne 0x1002b01c
mov dword [ebp - 0x12c], 1
jmp 0x1002b023
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0xadacd7d3
jne 0x1002b03b
mov dword [ebp - 0x134], 1
jmp 0x1002b042
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 3
je 0x1002b059
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x200], 0
mov eax, 0xcee61780
test eax, eax
jne 0x1002b06b
and dword [ebp - 0x13c], 0
jmp 0x1002b075
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0xc0]
jne 0x1002b09c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x200], 0
jne 0x1002b09c
and dword [ebp - 0x144], 0
jmp 0x1002b0a6
mov dword [ebp - 0x144], 1
mov eax, 0x951a
sub eax, dword [ebp - 0x144]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x200]
add eax, dword [ebp - 0xc0]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2a0], eax
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x1002b0ec
push 0x239c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov eax, dword [ebp - 0x70]
movzx eax, word [eax]
sar eax, 0xc
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x2a4], 0x69f4981f
mov dword [ebp - 0x2dc], 3
mov dword [ebp - 0x18], 0
jmp 0x1002b126
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002b13c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x25c], 1
jmp 0x1002b11f
mov dword [ebp - 0x18], 0
jmp 0x1002b14c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002b162
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2f4], 0x9884cb8
jmp 0x1002b145
mov byte [ebp - 0x2b], 0
movzx eax, byte [ebp - 0x2b]
test eax, eax
je 0x1002b182
push 0xdc0
push 1
push 0x1175
call fcn.1002a07a
add esp, 0xc
mov dword [ebp - 0x3c], 2
jmp 0x1002b192
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1002b44c
mov dword [ebp - 0x44], 1
mov dword [ebp - 0xbc], 0x22ba7b7e
mov dword [ebp - 0xac], 0xf985589b
mov dword [ebp - 0x1a4], 0x7dcda720
mov dword [ebp - 0x44], 2
jmp 0x1002b1d1
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1002b447
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x228], 0x3489
mov dword [ebp - 0x88], 0
jmp 0x1002b208
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1002b221
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x4c], 0xfbbd0a70
jmp 0x1002b1fb
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x25c]
mov dword [ebp - 0x264], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x4c], 6
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x4c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x4c]
jge 0x1002b25e
mov dword [ebp - 0x14c], 1
jmp 0x1002b265
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x14c], eax
jne 0x1002b27f
mov dword [ebp - 0x154], 1
jmp 0x1002b286
and dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 0xffffffff
jge 0x1002b29b
mov dword [ebp - 0x15c], 1
jmp 0x1002b2a2
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 0xbc]
je 0x1002b2c5
mov eax, 0xeae1
test eax, eax
je 0x1002b2c5
mov dword [ebp - 0x164], 1
jmp 0x1002b2cc
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
sub eax, dword [ebp - 0x1a4]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x25c]
je 0x1002b2f2
mov dword [ebp - 0x16c], 1
jmp 0x1002b2f9
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xac], eax
jne 0x1002b31f
mov dword [ebp - 0x174], 1
jmp 0x1002b326
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x174], eax
jg 0x1002b346
mov eax, 0x79a97a8d
test eax, eax
jne 0x1002b346
and dword [ebp - 0x17c], 0
jmp 0x1002b350
mov dword [ebp - 0x17c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x17c], eax
jl 0x1002b374
cmp dword [ebp - 0x3c], 0
je 0x1002b374
mov dword [ebp - 0x184], 1
jmp 0x1002b37b
and dword [ebp - 0x184], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x184], eax
jge 0x1002b3a3
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x25c], 0
jne 0x1002b3a3
and dword [ebp - 0x18c], 0
jmp 0x1002b3ad
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x18c]
test eax, eax
jne 0x1002b3d7
mov dword [ebp - 0x194], 1
jmp 0x1002b3de
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x25c]
cmp eax, dword [ebp - 0x194]
jl 0x1002b409
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 0
je 0x1002b409
mov dword [ebp - 0x19c], 1
jmp 0x1002b410
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0x1a4]
cmp eax, 0x26ff23b1
je 0x1002b42f
mov dword [ebp - 0x1ac], 1
jmp 0x1002b436
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xbc], eax
jmp 0x1002b1ca
jmp 0x1002b18b
push 0
push 0x248a
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.1002a0bf
add esp, 0x10
mov dword [ebp - 0x1c], 0xbdba76aa
mov dword [ebp - 0x7c], 0
jmp 0x1002b47d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x1002b493
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xa4], 0
jmp 0x1002b476
mov dword [ebp - 0x1c], 0
jmp 0x1002b4a3
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1002b5ee
mov dword [ebp - 0xc4], 0xfffffffe
mov dword [ebp - 0x208], 0xfdb7b241
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x1002b4e7
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x1002b4e7
mov dword [ebp - 0x1b4], 1
jmp 0x1002b4ee
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
je 0x1002b58f
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xa4]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0xc4], 0x4f3f
jl 0x1002b52f
mov dword [ebp - 0x24c], 1
jmp 0x1002b536
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xa4]
mov dword [ebp - 0x274], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x284], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xa4]
jne 0x1002b583
xor eax, eax
inc eax
je 0x1002b58f
mov dword [ebp - 0xe4], 1
jmp 0x1002b596
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0x62d7bc3
jl 0x1002b5ae
mov dword [ebp - 0xe8], 1
jmp 0x1002b5b5
and dword [ebp - 0xe8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa4]
cmp dword [ebp - 0xe8], eax
jg 0x1002b5d6
mov dword [ebp - 0xf0], 1
jmp 0x1002b5dd
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x208], eax
jmp 0x1002b49c
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
je 0x1002b607
jmp 0x1002b631
mov eax, dword [ebp - 0x21c]
add eax, dword [ebp - 0x224]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x22c]
add eax, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov dword [ecx], eax
jmp 0x1002aedc
mov dword [ebp - 0x84], 0xfffffff9
mov dword [ebp - 0x60], 0
jmp 0x1002b650
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1002b666
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x320], 1
jmp 0x1002b649
mov dword [ebp - 0x84], 0xd
jmp 0x1002b67f
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffef
jl 0x1002b712
mov dword [ebp - 0x50], 0xe1e2c0d3
push 0x287d
push 0
lea eax, [ebp - 0x50]
push eax
call fcn.1002a124
add esp, 0xc
mov dword [ebp - 0x50], 3
jmp 0x1002b6b6
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1002b70d
mov dword [ebp - 0x64], 0x928fbc78
mov dword [ebp - 0x64], 3
jmp 0x1002b6d3
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1002b70b
mov byte [ebp - 0x22], 0
push 1
lea eax, [ebp - 0x22]
push eax
push 0x2715
push 0x2ca
call fcn.1002a0bf
add esp, 0x10
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x1002b709
push 0
call fcn.1002b729
pop ecx
jmp 0x1002b6cc
jmp 0x1002b6af
jmp 0x1002b672
lea eax, [ebp - 0x68]
push eax
push 1
push 0x681f
call fcn.1002a124
add esp, 0xc
mov esp, ebp
pop ebp
ret