Function at 0x10002490
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004c684
mov eax, dword fs:[0]
push eax
sub esp, 0x3d8
mov eax, dword [0x1005f080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edx, ecx
xorps xmm0, xmm0
mov dword [ebp - 0x334], 0
movups xmmword [ebp - 0x344], xmm0
mov dword [ebp - 0x330], 0xf
mov byte [ebp - 0x344], 0
mov dword [ebp - 4], 0
lea esi, [ecx + 1]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x270], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10002510
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x284]
call fcn.100015b0
xorps xmm0, xmm0
mov dword [ebp - 0x2a4], 0
movups xmmword [ebp - 0x2b4], xmm0
mov dword [ebp - 0x2a0], 0xf
mov byte [ebp - 0x2b4], 0
movups xmmword [ebp - 0x29c], xmm0
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], 0xf
mov byte [ebp - 0x29c], 0
mov byte [ebp - 4], 3
lea edi, [ebp - 0x284]
cmp dword [ebp - 0x270], 0xf
mov eax, dword [ebp - 0x274]
cmova edi, dword [ebp - 0x284]
test eax, eax
je 0x100025a5
push eax
push 0x3a
push edi
call fcn.1002a610
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100025a5
sub esi, edi
jmp 0x100025a8
or esi, 0xffffffff
cmp dword [ebp - 0x274], esi
lea eax, [ebp - 0x284]
mov ecx, esi
mov dword [ebp - 0x35c], 0
cmovb ecx, dword [ebp - 0x274]
xorps xmm0, xmm0
cmp dword [ebp - 0x270], 0xf
push ecx
cmova eax, dword [ebp - 0x284]
lea ecx, [ebp - 0x36c]
push eax
movups xmmword [ebp - 0x36c], xmm0
mov dword [ebp - 0x358], 0
call fcn.100015b0
mov ecx, dword [ebp - 0x2a0]
cmp ecx, 0xf
jbe 0x10002630
mov edx, dword [ebp - 0x2b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002626
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002ef3
push ecx
push edx
call fcn.10028555
add esp, 8
movups xmm0, xmmword [ebp - 0x36c]
mov eax, dword [ebp - 0x274]
inc esi
movups xmmword [ebp - 0x2b4], xmm0
movq xmm0, qword [ebp - 0x35c]
lea ecx, [eax - 1]
movq qword [ebp - 0x2a4], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x358], 0
movups xmmword [ebp - 0x36c], xmm0
cmp eax, esi
jb 0x10002ef8
sub eax, esi
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0x270], 0xf
lea eax, [ebp - 0x284]
cmova eax, dword [ebp - 0x284]
push ecx
add eax, esi
lea ecx, [ebp - 0x36c]
push eax
call fcn.100015b0
mov ecx, dword [ebp - 0x288]
cmp ecx, 0xf
jbe 0x100026e2
mov edx, dword [ebp - 0x29c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100026d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002ef3
push ecx
push edx
call fcn.10028555
add esp, 8
movups xmm0, xmmword [ebp - 0x36c]
xor eax, eax
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 7
movups xmmword [ebp - 0x29c], xmm0
mov dword [ebp - 0x304], eax
movq xmm0, qword [ebp - 0x35c]
movq qword [ebp - 0x28c], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x32c], xmm0
mov word [ebp - 0x32c], ax
movups xmmword [ebp - 0x314], xmm0
mov dword [ebp - 0x300], 7
movups xmmword [ebp - 0x2fc], xmm0
mov word [ebp - 0x314], ax
movups xmmword [ebp - 0x2e4], xmm0
mov dword [ebp - 0x2ec], eax
movups xmmword [ebp - 0x2cc], xmm0
mov dword [ebp - 0x2e8], 7
mov word [ebp - 0x2fc], ax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], 7
mov word [ebp - 0x2e4], ax
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], 7
mov word [ebp - 0x2cc], ax
mov byte [ebp - 4], 5
call fcn.1002e285
cmp dword [ebp - 0x2a0], 0xf
lea esi, [ebp - 0x2b4]
mov dword [ebp - 0x34c], eax
cmova esi, dword [ebp - 0x2b4]
mov dword [eax], 0
lea eax, [ebp - 0x350]
push 0xa
push eax
push esi
call fcn.1002e0bf
add esp, 0xc
mov edi, eax
cmp esi, dword [ebp - 0x350]
je 0x10002efd
mov eax, dword [ebp - 0x34c]
cmp dword [eax], 0x22
je 0x10002f07
jmp 0x100027ff
mov dword [ebp - 4], 4
cmp edi, 1
je 0x10002820
cmp edi, 2
je 0x10002820
cmp edi, 0xb
je 0x10002820
mov eax, dword [ebp - 0x34c]
jmp 0x10002a84
push 0x258
lea eax, [ebp - 0x26c]
push 0
push eax
call fcn.1002a4b0
cmp dword [ebp - 0x288], 0xf
lea eax, [ebp - 0x29c]
push 0x122
cmova eax, dword [ebp - 0x29c]
push eax
push 0x12c
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x348]
push eax
call fcn.1002e540
add esp, 0x20
test eax, eax
je 0x1000297b
lea ecx, [ebp - 0x32c]
call fcn.100020d0
mov ecx, dword [ebp - 0x288]
cmp ecx, 0xf
jbe 0x100028b5
mov edx, dword [ebp - 0x29c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100028ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002ef3
push ecx
push edx
call fcn.10028555
add esp, 8
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], 0xf
mov byte [ebp - 0x29c], 0
cmp ecx, 0xf
jbe 0x1000290a
mov edx, dword [ebp - 0x2b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002900
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002ef3
push ecx
push edx
call fcn.10028555
add esp, 8
mov ecx, dword [ebp - 0x270]
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2a0], 0xf
mov byte [ebp - 0x2b4], 0
cmp ecx, 0xf
jbe 0x1000295f
mov edx, dword [ebp - 0x284]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002955
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002ef3
push ecx
push edx
call fcn.10028555
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10028524
mov esp, ebp
pop ebp
ret
xorps xmm0, xmm0
mov dword [ebp - 0x35c], 0
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x358], 0
movups xmmword [ebp - 0x36c], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100029a2
sub ecx, edx
lea eax, [ebp - 0x26c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x36c]
call fcn.10007220
lea edx, [ebp - 0x36c]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3e4]
call fcn.100018c0
push eax
lea ecx, [ebp - 0x32c]
call fcn.10002f60
lea ecx, [ebp - 0x3e4]
call fcn.100020d0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x358]
cmp ecx, 7
jbe 0x10002a34
mov edx, dword [ebp - 0x36c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10002a2a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002f11
push ecx
push edx
call fcn.10028555
add esp, 8
cmp dword [ebp - 0x2bc], 0
jne 0x10002a9c
cmp dword [ebp - 0x2e8], 7
lea esi, [ebp - 0x2fc]
mov edx, dword [ebp - 0x2ec]
cmova esi, dword [ebp - 0x2fc]
cmp edx, 5
jne 0x10002a95
mov ecx, str.https
test edx, edx
je 0x10002a78
sub esi, ecx
mov ax, word [esi + ecx]
cmp ax, word [ecx]
jne 0x10002a95
add ecx, 2
sub edx, 1
jne 0x10002a67
mov eax, 0x1bb
mov dword [ebp - 4], 4
dec edi
cmp edi, 0xa
ja case.0x10002a8e.3
jmp dword [edi*4 + 0x10002f30]
mov eax, 0x50
jmp 0x10002a7d
mov byte [ebp - 4], 8
call fcn.1002e285
cmp dword [ebp - 0x2b8], 7
lea esi, [ebp - 0x2cc]
mov dword [ebp - 0x350], eax
cmova esi, dword [ebp - 0x2cc]
mov dword [eax], 0
lea eax, [ebp - 0x34c]
push 0xa
push eax
push esi
call fcn.1002e105
add esp, 0xc
cmp esi, dword [ebp - 0x34c]
je 0x10002f16
mov ecx, dword [ebp - 0x350]
cmp dword [ecx], 0x22
je 0x10002f20
jmp 0x10002a7d
sub esp, 0x18
movzx esi, ax
lea eax, [ebp - 0x314]
mov dword [ebp - 0x34c], esp
mov ecx, esp
push eax
call fcn.10004d20
sub esp, 0x18
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x314]
mov dword [ebp - 0x350], esp
mov ecx, esp
push eax
call fcn.10004d20
mov byte [ebp - 4], 0xb
jmp 0x10002d94
sub esp, 0x18
movzx esi, ax
lea eax, [ebp - 0x314]
mov dword [ebp - 0x354], esp
mov ecx, esp
push eax
call fcn.10004d20
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x314]
mov dword [ebp - 0x34c], esp
mov ecx, esp
push eax
call fcn.10004d20
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x2e4]
mov ecx, esp
push eax
call fcn.10004d20
mov edx, 1
jmp 0x10002da7
sub esp, 0x18
lea eax, [ebp - 0x344]
mov ecx, esp
push eax
call fcn.10001290
call fcn.10009290
add esp, 0x18
jmp case.0x10002a8e.3
sub esp, 0x18
lea eax, [ebp - 0x29c]
mov ecx, esp
push eax
call fcn.10001290
call fcn.1000f3c0
add esp, 0x18
jmp case.0x10002a8e.3
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0
push 0x11
call esi
push 0
push 0
push 0
push 0x52
call esi
push 0
push 2
push 0
push 0x52
call esi
push 0
push 2
push 0
push 0x11
call esi
jmp case.0x10002a8e.3
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0
push 0x11
call esi
push 0
push 0
push 0
push 0x57
call esi
push 0
push 2
push 0
push 0x57
call esi
push 0
push 2
push 0
push 0x11
call esi
jmp case.0x10002a8e.3
push 0x14
xorps xmm0, xmm0
mov dword [ebp - 0x35c], 0
push str.c:programdata_sound
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0x358], 0
movups xmmword [ebp - 0x36c], xmm0
call fcn.10007220
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x36c]
cmp dword [ebp - 0x358], 7
push 0x104
cmova eax, dword [ebp - 0x36c]
push 0x10062270
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
jne 0x10002d15
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x358]
cmp ecx, 7
jbe 0x10002d0b
mov edx, dword [ebp - 0x36c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10002d01
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002f2a
push ecx
push edx
call fcn.10028555
add esp, 8
call fcn.10007d00
jmp case.0x10002a8e.3
mov ecx, 0x10062270
call fcn.100079e0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x358]
cmp ecx, 7
jbe 0x10002d0b
mov edx, dword [ebp - 0x36c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10002d01
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002f2a
jmp 0x10002d01
sub esp, 0x18
movzx esi, ax
lea eax, [ebp - 0x314]
mov dword [ebp - 0x354], esp
mov ecx, esp
push eax
call fcn.10004d20
sub esp, 0x18
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x314]
mov dword [ebp - 0x34c], esp
mov ecx, esp
push eax
call fcn.10004d20
mov byte [ebp - 4], 0x10
sub esp, 0x18
lea eax, [ebp - 0x2e4]
mov ecx, esp
push eax
call fcn.10004d20
xor edx, edx
mov ecx, esi
mov byte [ebp - 4], 4
call fcn.1000e0a0
add esp, 0x48
lea ecx, [ebp - 0x32c]
call fcn.100020d0
mov ecx, dword [ebp - 0x288]
cmp ecx, 0xf
jbe 0x10002dfa
mov edx, dword [ebp - 0x29c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002df0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002ef3
push ecx
push edx
call fcn.10028555
add esp, 8
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], 0xf
mov byte [ebp - 0x29c], 0
cmp ecx, 0xf
jbe 0x10002e4f
mov edx, dword [ebp - 0x2b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002e45
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002ef3
push ecx
push edx
call fcn.10028555
add esp, 8
mov ecx, dword [ebp - 0x270]
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2a0], 0xf
mov byte [ebp - 0x2b4], 0
cmp ecx, 0xf
jbe 0x10002ea0
mov edx, dword [ebp - 0x284]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002e96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002ef3
push ecx
push edx
call fcn.10028555
add esp, 8
mov ecx, dword [ebp - 0x330]
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x270], 0xf
mov byte [ebp - 0x284], 0
cmp ecx, 0xf
jbe 0x1000295f
mov edx, dword [ebp - 0x344]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002955
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10002955
call fcn.1002d65f
call fcn.10001140
push str.invalid_stoi_argument
call fcn.1000f89a
push str.stoi_argument_out_of_range
call fcn.1000f8da
call fcn.1002d65f
push str.invalid_stoi_argument
call fcn.1000f89a
push str.stoi_argument_out_of_range
call fcn.1000f8da
call fcn.1002d65f
nop
sub eax, dword ss:[eax]
adc byte [ebx + ebp], dh
adc byte [ebp - 0x4aefffd3], dh
sub eax, 0x2db51000
add byte [eax], dl
enter 0x2b, 0x10
out 43, al
add byte [eax], dl
add al, 0x2c
add byte [eax], dl
aaa
sub al, 0
adc byte [edx + 0x2c], ch
add byte [eax], dl
pop ebx
sub eax, -859041792
int3