Function at 0x1402084f0
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x118
cmp qword [rcx + 8], 0
mov rbx, rcx
mov rsi, rdx
mov edi, r8d
je 0x1402087f8
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax + 0x18]
call fcn.140206010
cmp eax, 0x15
jne 0x1402086e0
mov rax, qword [rbx + 8]
mov ebp, 1
mov rdx, qword [rax + 8]
mov rcx, qword [rdx + 8]
mov r15d, dword [rdx]
mov rdx, qword [rax + 0x10]
mov qword [rsp + 0x58], rcx
test rdx, rdx
je 0x14020858e
lea rcx, [rsp + 0xb0]
mov r8d, 2
call fcn.140237310
test eax, eax
je 0x14020887c
mov rbp, qword [rsp + 0xb0]
mov eax, 0x80000000
mov edx, 0xffffffff
add rax, rbp
cmp rdx, rax
mov eax, 0xffffffff
cmovb ebp, eax
mov rax, qword [rbx + 8]
mov rax, qword [rax]
mov rax, qword [rax]
mov rcx, qword [rax]
call fcn.140206010
mov ecx, eax
call fcn.140205eb0
mov rcx, rax
call fcn.1401f9cb0
mov r14, rax
test rax, rax
je 0x140208720
mov r13d, dword [rax + 8]
mov eax, dword [rax]
test r13d, r13d
js 0x1402086f5
lea edx, [rax - 0x3d6]
cmp edx, 1
jbe 0x140208740
cmp eax, 0x329
je 0x140208740
lea r12, [rsp + 0x70]
mov qword [rsp + 0x40], r14
mov r9d, r15d
mov edx, edi
mov qword [rsp + 0x38], r12
mov r8, qword [rsp + 0x58]
mov rcx, rsi
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 3
call fcn.140200b60
test eax, eax
je 0x140208818
call fcn.1401fca10
mov rsi, rax
test rax, rax
je 0x1402087c0
mov r9, r14
mov r8d, r13d
mov rdx, r12
mov rcx, rax
mov qword [rsp + 0x20], 0
call fcn.1401fc420
test eax, eax
je 0x1402087d8
mov rax, qword [rbx + 0x10]
cmp qword [rsi], 0
mov rax, qword [rax + 0x20]
movsxd r8, dword [rax]
mov rdx, qword [rax + 8]
je 0x1402087d8
mov rax, qword [rsi + 8]
test r8, r8
je 0x14020867d
mov rcx, rax
call qword [rax + 0x28]
test eax, eax
je 0x1402087d8
lea rdi, [rsp + 0xb0]
lea r8, [rsp + 0x6c]
mov rcx, rsi
mov rdx, rdi
call fcn.1401fc7c0
test eax, eax
je 0x1402087d8
mov edx, 0x40
mov rcx, r12
call fcn.1402f5e00
mov rcx, rsi
call fcn.1401fc8c0
mov rax, qword [rbx + 8]
mov r8d, dword [rsp + 0x6c]
mov rax, qword [rax]
mov rax, qword [rax + 8]
cmp dword [rax], r8d
jne 0x14020870a
mov rdx, qword [rax + 8]
mov rcx, rdi
call fcn.1402f5e60
test eax, eax
sete al
movzx eax, al
jmp 0x14020870c
mov r8d, 0x79
mov edx, 0x6b
mov ecx, 0x23
call fcn.1402750a0
mov r8d, 0x6d
mov edx, 0x7e
mov ecx, 0x23
call fcn.1402750a0
xor eax, eax
add rsp, 0x118
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r8d, 0x76
mov edx, 0x6b
mov ecx, 0x23
call fcn.1402750a0
jmp 0x1402086f5
lea rcx, str.LEGACY_GOST_PKCS12
call sub.msvcrt.dll_getenv
test rax, rax
jne 0x1402085e0
mov dword [rsp + 0x30], 0x60
mov r9d, r15d
mov edx, edi
mov rcx, rsi
lea r12, [rsp + 0xb0]
mov qword [rsp + 0x28], r14
mov r8, qword [rsp + 0x58]
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x20], ebp
call fcn.1401fcc00
test eax, eax
jne 0x140208840
mov r8d, 0x6b
mov edx, 0x6b
mov ecx, 0x23
call fcn.1402750a0
lea rcx, [rsp + 0x70]
mov edx, 0x40
call fcn.1402f5e00
jmp 0x1402086f5
mov edx, 0x40
mov rcx, r12
call fcn.1402f5e00
jmp 0x1402086f5
mov rcx, r12
mov edx, 0x40
call fcn.1402f5e00
mov rcx, rsi
call fcn.1401fc8c0
jmp 0x1402086f5
mov r8d, 0x6c
mov edx, 0x7e
mov ecx, 0x23
call fcn.1402750a0
jmp 0x14020870a
mov r8d, 0x6b
mov edx, 0x6b
mov ecx, 0x23
call fcn.1402750a0
mov edx, 0x40
mov rcx, r12
call fcn.1402f5e00
jmp 0x1402086f5
mov rcx, r12
mov edx, 0x60
mov r13d, 0x20
movdqa xmm0, xmmword [rsp + 0xf0]
movdqa xmm1, xmmword [rsp + 0x100]
lea r12, [rsp + 0x70]
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x80], xmm1
call fcn.1402f5e00
jmp 0x14020861a
mov ebp, 0xffffffff
jmp 0x14020858a