Function at 0x61df30
Capabilities:
Query environment variable

Disassembly:
push edi
mov edi, dword [esp + 8]
test edi, edi
jne 0x61df55
push 0x14a
push 0x6bd898
push 0x43
push 0x6a
push 0x26
call fcn.0059e890
add esp, 0x14
xor eax, eax
pop edi
ret
push esi
push 0x14d
push 0x6bd898
push 0x1e
push 9
call fcn.005b7810
mov esi, dword [0x755604]
add esp, 0x10
test esi, esi
je 0x61e04f
nop word [eax + eax]
mov eax, dword [esi]
mov ecx, edi
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x61dfa4
test dl, dl
je 0x61dfa0
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x61dfa4
add ecx, 2
add eax, 2
test dl, dl
jne 0x61df84
xor eax, eax
jmp 0x61dfa9
sbb eax, eax
or eax, 1
test eax, eax
je 0x61dfb9
mov esi, dword [esi + 0x6c]
test esi, esi
jne 0x61df80
jmp 0x61e04f
test byte [esi + 0x54], 4
je 0x61e04c
call fcn.00602070
mov ecx, eax
test ecx, ecx
jne 0x61dfd2
xor esi, esi
jmp 0x61e04f
mov eax, dword [esi]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [esi + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x14]
mov dword [ecx + 0x14], eax
mov eax, dword [esi + 0x18]
mov dword [ecx + 0x18], eax
mov eax, dword [esi + 0x1c]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi + 0x20]
mov dword [ecx + 0x20], eax
mov eax, dword [esi + 0x24]
mov dword [ecx + 0x24], eax
mov eax, dword [esi + 0x28]
mov dword [ecx + 0x28], eax
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0x2c], eax
mov eax, dword [esi + 0x34]
mov dword [ecx + 0x34], eax
mov eax, dword [esi + 0x38]
mov dword [ecx + 0x38], eax
mov eax, dword [esi + 0x3c]
mov dword [ecx + 0x3c], eax
mov eax, dword [esi + 0x40]
mov dword [ecx + 0x40], eax
mov eax, dword [esi + 0x44]
mov dword [ecx + 0x44], eax
mov eax, dword [esi + 0x48]
mov dword [ecx + 0x48], eax
mov eax, dword [esi + 0x50]
mov dword [ecx + 0x50], eax
mov eax, dword [esi + 0x54]
mov esi, ecx
mov dword [ecx + 0x54], eax
jmp 0x61e04f
inc dword [esi + 0x58]
push 0x164
push 0x6bd898
push 0x1e
push 0xa
call fcn.005b7810
add esp, 0x10
test esi, esi
je 0x61e06e
mov eax, esi
pop esi
pop edi
ret
mov ecx, str.dynamic
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x61e095
test dl, dl
je 0x61e091
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x61e095
add eax, 2
add ecx, 2
test dl, dl
jne 0x61e075
xor eax, eax
jmp 0x61e09a
sbb eax, eax
or eax, 1
push ebx
test eax, eax
je 0x61e142
push str.OPENSSL_ENGINES
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
test eax, eax
mov ebx, str....._releasex86_lib_engines
push str.dynamic
cmovne ebx, eax
call fcn.0061df30
mov esi, eax
add esp, 8
test esi, esi
je 0x61e142
push 0
push edi
push 0x6bd8e4
push esi
call fcn.0063c8b0
add esp, 0x10
test eax, eax
je 0x61e142
push 0
push 0x69c0f8
push str.DIR_LOAD
push esi
call fcn.0063c8b0
add esp, 0x10
test eax, eax
je 0x61e142
push 0
push ebx
push str.DIR_ADD
push esi
call fcn.0063c8b0
add esp, 0x10
test eax, eax
je 0x61e142
push 0
push 0x6edda8
push str.LIST_ADD
push esi
call fcn.0063c8b0
add esp, 0x10
test eax, eax
je 0x61e142
push 0
push 0
push str.LOAD
push esi
call fcn.0063c8b0
add esp, 0x10
test eax, eax
je 0x61e142
pop ebx
mov eax, esi
pop esi
pop edi
ret
push esi
call fcn.00601f30
push 0x186
push 0x6bd898
push 0x74
push 0x6a
push 0x26
call fcn.0059e890
push edi
push 0x6bd8fc
push 2
call fcn.0059d720
add esp, 0x24
xor eax, eax
pop ebx
pop esi
pop edi
ret