Function at 0x6aa8a0
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x650
mov dword [0x009f7384], 0
mov dword [0x009f7380], 0
mov r13, rcx
mov r14, rdx
mov ecx, 0x16
mov ebx, r8d
lea rdx, [0x006aa6f0]
mov esi, r9d
call sub.msvcrt.dll_signal
lea rdx, [0x006aa6f0]
mov ecx, 8
mov qword [0x009f7470], rax
call sub.msvcrt.dll_signal
lea rdx, [0x006aa6f0]
mov ecx, 4
mov qword [0x009f7400], rax
call sub.msvcrt.dll_signal
lea rdx, [0x006aa6f0]
mov ecx, 2
mov qword [0x009f73e0], rax
call sub.msvcrt.dll_signal
lea rdx, [0x006aa6f0]
mov ecx, 0xb
mov qword [0x009f73d0], rax
call sub.msvcrt.dll_signal
lea rdx, [0x006aa6f0]
mov ecx, 0xf
mov qword [0x009f7418], rax
call sub.msvcrt.dll_signal
mov dword [0x009f7380], 1
mov qword [0x009f7438], rax
test ebx, ebx
je 0x6aab30
mov eax, dword [0x009f7388]
mov byte [rsp + 0x50], 0
mov dword [0x009f7380], 2
test eax, eax
je 0x6aab4f
lea rcx, str.OPENSSL_WIN32_UTF8
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov ecx, 0xfffffff6
test eax, eax
je 0x6aaa70
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rsp + 0x4c]
mov r8d, 0x1ff
lea rdi, [rsp + 0x250]
mov qword [rsp + 0x20], 0
mov rcx, rax
mov rdx, rdi
lea r15, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov r12d, eax
test eax, eax
je 0x6aaadb
mov eax, dword [rsp + 0x4c]
cmp eax, 1
jbe 0x6aaa09
lea edx, [rax - 2]
cmp word [rsp + rdx*2 + 0x250], 0xd
je 0x6aace0
xor edx, edx
lea r15, [rsp + 0x50]
mov ecx, 0xfde9
mov r8, rdi
mov word [rsp + rax*2 + 0x250], dx
mov r9d, 0xffffffff
xor edx, edx
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, 0x400
mov rcx, rdi
test eax, eax
jle 0x6aacd0
call fcn.005fddf0
jmp 0x6aab71
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r15, [rsp + 0x50]
lea r9, [rsp + 0x4c]
mov qword [rsp + 0x20], 0
mov rcx, rax
mov r8d, 0x1ff
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_ReadConsoleA]
mov r12d, eax
test eax, eax
je 0x6aaadb
mov eax, dword [rsp + 0x4c]
cmp eax, 1
jbe 0x6aaab9
lea edx, [rax - 2]
cmp byte [rsp + rdx + 0x50], 0xd
je 0x6aad18
mov rcx, qword [0x009f7398]
mov byte [rsp + rax + 0x50], 0
call sub.msvcrt.dll_feof
test eax, eax
je 0x6aab85
nop word [rax + rax]
xor r12d, r12d
mov eax, dword [0x009f7384]
cmp eax, 2
mov eax, 0xffffffff
cmove r12d, eax
test ebx, ebx
je 0x6aac48
mov eax, dword [0x009f7380]
test eax, eax
jg 0x6aabd8
mov edx, 0x200
mov rcx, r15
call fcn.005fddf0
mov eax, r12d
add rsp, 0x650
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
mov r9d, dword [0x009f7388]
test r9d, r9d
jne 0x6aaca0
mov dword [0x009f7380], 2
mov byte [rsp + 0x50], 0
lea r15, [rsp + 0x50]
mov r8, qword [0x009f7398]
mov edx, 0x1ff
mov rcx, r15
call sub.msvcrt.dll_fgets
test rax, rax
je 0x6aaad8
mov rcx, qword [0x009f7398]
call sub.msvcrt.dll_feof
test eax, eax
jne 0x6aaad8
mov rcx, qword [0x009f7398]
call sub.msvcrt.dll_ferror
mov r12d, eax
test eax, eax
jne 0x6aaad8
mov edx, 0xa
mov rcx, r15
call sub.msvcrt.dll_strchr
test rax, rax
je 0x6aad38
test esi, esi
je 0x6aabb9
mov byte [rax], 0
mov r8, r15
mov rdx, r14
mov rcx, r13
call fcn.006aa6a0
not eax
shr eax, 0x1f
mov r12d, eax
jmp 0x6aaadb
mov rdx, qword [0x009f7470]
mov ecx, 0x16
call sub.msvcrt.dll_signal
mov rdx, qword [0x009f7400]
mov ecx, 8
call sub.msvcrt.dll_signal
mov rdx, qword [0x009f73e0]
mov ecx, 4
call sub.msvcrt.dll_signal
mov rdx, qword [0x009f73d0]
mov ecx, 2
call sub.msvcrt.dll_signal
mov rdx, qword [0x009f7418]
mov ecx, 0xb
call sub.msvcrt.dll_signal
mov rdx, qword [0x009f7438]
mov ecx, 0xf
call sub.msvcrt.dll_signal
jmp 0x6aab03
mov rdx, qword [0x009f7390]
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov eax, dword [0x009f7380]
cmp eax, 1
jle 0x6aaafb
mov eax, dword [0x009f7388]
test eax, eax
je 0x6aabd8
mov r13d, dword [0x009f73a0]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
jmp 0x6aaaf5
mov r12d, dword [0x009f73a0]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
and r12d, 0xfffffffb
mov rcx, rax
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
jmp 0x6aa974
call fcn.005fddf0
xor r12d, r12d
jmp 0x6aaadb
lea r8d, [rax - 1]
cmp word [rsp + r8*2 + 0x250], 0xa
mov rcx, r8
jne 0x6aaa09
mov r8d, 0xa
mov dword [rsp + 0x4c], ecx
mov eax, ecx
mov word [rsp + rdx*2 + 0x250], r8w
jmp 0x6aaa09
lea r8d, [rax - 1]
cmp byte [rsp + r8 + 0x50], 0xa
jne 0x6aaab9
mov byte [rsp + rdx + 0x50], 0xa
mov eax, r8d
jmp 0x6aaab9
mov rsi, qword [0x009f7398]
lea rdi, [rsp + 0x250]
jmp 0x6aad66
mov edx, 0xa
mov rcx, rdi
call sub.msvcrt.dll_strchr
test rax, rax
jne 0x6aabb9
mov r8, rsi
mov edx, 4
mov rcx, rdi
call sub.msvcrt.dll_fgets
test rax, rax
jne 0x6aad50
jmp 0x6aaadb