Function at 0x600ea0
Capabilities:
Query environment variable

Disassembly:
mov eax, dword [0x74d1e0]
test eax, eax
je 0x600eb0
ret
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov dword [0x74d1e0], 1
mov dword [esp + 8], 0x30
mov dword [esp + 4], 0x74d180
mov dword [esp], str.OPENSSL_ia32cap
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
sub eax, 1
sub esp, 0xc
cmp eax, 0x2e
ja 0x6010e0
movzx ebp, word [0x74d180]
xor eax, eax
mov edi, 0xa
cmp bp, 0x7e
sete al
add eax, eax
cmp word [eax + 0x74d180], 0x30
lea esi, [eax + 0x74d180]
je 0x601150
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
lea esi, cs:[esi]
movzx ebx, word [esi]
add esi, 2
mov dword [esp], ebx
call fcn.004cbac0
lea ecx, [ebx - 0x30]
test eax, eax
jne 0x601053
mov dword [esp + 4], 0x10
mov dword [esp], ebx
call fcn.004cbaa0
test eax, eax
jne 0x601048
cmp bp, 0x7e
je 0x601100
movzx edx, word [0x74d180]
cmp dx, 0x3a
je 0x601188
test dx, dx
je 0x6010c0
mov eax, 0x74d180
jmp 0x600fa0
movzx edx, word [eax + 2]
add eax, 2
test dx, dx
je 0x6010c0
cmp dx, 0x3a
jne 0x600f90
movzx ebx, word [eax + 2]
xor edx, edx
cmp bx, 0x7e
sete dl
lea esi, [eax + edx*2 + 2]
cmp word [esi], 0x30
je 0x6011d8
mov dword [esp + 0x18], 0xa
mov word [esp + 0x1e], bx
xor edi, edi
xor ebp, ebp
lea esi, [esi]
movzx ebx, word [esi]
add esi, 2
mov dword [esp], ebx
call fcn.004cbac0
lea ecx, [ebx - 0x30]
test eax, eax
jne 0x60108b
mov dword [esp + 4], 0x10
mov dword [esp], ebx
call fcn.004cbaa0
test eax, eax
jne 0x601080
movzx ebx, word [esp + 0x1e]
mov edx, edi
mov eax, ebp
cmp bx, 0x7e
je 0x601170
mov dword [0x74ea1c], edi
mov dword [0x74ea20], ebp
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov eax, esi
mov dword [0x74ea18], edi
or ah, 4
mov dword [0x74ea14], eax
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], ebx
call fcn.004cbb20
lea ecx, [eax - 0x57]
cmp ecx, edi
jae 0x600f61
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mul edi
imul ebx, edi
add edx, ebx
mov ebx, ecx
sar ebx, 0x1f
add ecx, eax
adc ebx, edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
jmp 0x600f30
mov dword [esp], ebx
call fcn.004cbb20
lea ecx, [eax - 0x57]
mov eax, dword [esp + 0x18]
cmp ecx, eax
jae 0x601005
mov ebx, eax
mov eax, edi
mov edi, ecx
imul ebx, ebp
mul dword [esp + 0x18]
add edx, ebx
mov ebx, ecx
sar ebx, 0x1f
add edi, eax
mov ebp, ebx
adc ebp, edx
jmp 0x600fd8
mov dword [0x74ea1c], 0
mov dword [0x74ea20], 0
jmp 0x601024
mov dword [esp], 0x74ea14
call fcn.004deac0
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
jmp 0x601024
mov dword [esp], 0x74ea14
call fcn.004deac0
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ecx, esi
mov ebx, edi
not ecx
not ebx
and ecx, eax
mov eax, esi
and ebx, edx
xor edx, edx
and eax, 0x1000000
or eax, edx
je 0x6011b0
and ebx, 0xedfff7fd
mov dword [esp + 0x10], ecx
movzx edx, word [0x74d180]
mov dword [esp + 0x14], ebx
jmp 0x600f7c
movzx eax, word [esi + 2]
mov dword [esp], eax
call fcn.004cbb20
cmp eax, 0x78
je 0x6011c4
add esi, 2
mov edi, 8
jmp 0x600f18
not edx
not eax
and dword [0x74ea1c], edx
and dword [0x74ea20], eax
jmp 0x601024
mov dword [esp], 0x74ea14
call fcn.004deac0
mov dword [esp + 0x14], edx
movzx edx, word [0x74d180]
mov dword [esp + 0x10], eax
jmp 0x600f7c
mov dword [esp + 0x10], ecx
movzx edx, word [0x74d180]
mov dword [esp + 0x14], ebx
jmp 0x600f7c
add esi, 4
mov edi, 0x10
jmp 0x600f18
movzx eax, word [esi + 2]
mov dword [esp], eax
call fcn.004cbb20
cmp eax, 0x78
je 0x6011f9
mov dword [esp + 0x18], 8
add esi, 2
jmp 0x600fc9
mov dword [esp + 0x18], 0x10
add esi, 4
jmp 0x600fc9