Function at 0x4eeff0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x620
call fcn.004c03f0
mov eax, dword [0x6f33d4]
xor eax, ebp
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 0x1ff
mov dword [ebp - 4], 0
xor eax, eax
cmp dword [ebp + 0x10], 0
sete al
mov dword [ebp - 0x10], eax
mov dword [0x6f8c74], 0
mov dword [ebp - 8], 0
mov dword [0x6f8c68], 0
call fcn.004ef540
mov dword [0x6f8c68], 1
cmp dword [ebp + 0x10], 0
jne 0x4ef066
mov ecx, dword [ebp + 8]
push ecx
call fcn.004ef450
add esp, 4
test eax, eax
jne 0x4ef066
jmp 0x4ef2ae
mov dword [0x6f8c68], 2
mov byte [ebp - 0x218], 0
cmp dword [0x6f8c64], 0
je 0x4ef1ff
push 0
push 0
push str.OPENSSL_WIN32_UTF8
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x4ef173
push 0
lea edx, [ebp - 0x21c]
push edx
mov eax, dword [ebp - 0xc]
push eax
lea ecx, [ebp - 0x620]
push ecx
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call dword [sym.imp.KERNEL32.dll_ReadConsoleW]
test eax, eax
je 0x4ef16e
cmp dword [ebp - 0x21c], 2
jb 0x4ef117
mov edx, dword [ebp - 0x21c]
movzx eax, word [ebp + edx*2 - 0x624]
cmp eax, 0xd
jne 0x4ef117
mov ecx, dword [ebp - 0x21c]
movzx edx, word [ebp + ecx*2 - 0x622]
cmp edx, 0xa
jne 0x4ef117
mov eax, 0xa
mov ecx, dword [ebp - 0x21c]
mov word [ebp + ecx*2 - 0x624], ax
mov edx, dword [ebp - 0x21c]
sub edx, 1
mov dword [ebp - 0x21c], edx
xor eax, eax
mov ecx, dword [ebp - 0x21c]
mov word [ebp + ecx*2 - 0x620], ax
push 0
push 0
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x620]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jle 0x4ef15a
lea ecx, [ebp - 0x218]
mov dword [ebp - 4], ecx
push 0x400
lea edx, [ebp - 0x620]
push edx
call fcn.0051c1a0
add esp, 8
jmp 0x4ef1fd
push 0
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
lea edx, [ebp - 0x218]
push edx
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call dword [sym.imp.KERNEL32.dll_ReadConsoleA]
test eax, eax
je 0x4ef1fd
cmp dword [ebp - 0x21c], 2
jb 0x4ef1e6
mov eax, dword [ebp - 0x21c]
movsx ecx, byte [ebp + eax - 0x21a]
cmp ecx, 0xd
jne 0x4ef1e6
mov edx, dword [ebp - 0x21c]
movsx eax, byte [ebp + edx - 0x219]
cmp eax, 0xa
jne 0x4ef1e6
mov ecx, dword [ebp - 0x21c]
mov byte [ebp + ecx - 0x21a], 0xa
mov edx, dword [ebp - 0x21c]
sub edx, 1
mov dword [ebp - 0x21c], edx
mov eax, dword [ebp - 0x21c]
mov byte [ebp + eax - 0x218], 0
lea ecx, [ebp - 0x218]
mov dword [ebp - 4], ecx
jmp 0x4ef21c
mov edx, dword [0x6f8c70]
push edx
mov eax, dword [ebp - 0xc]
push eax
lea ecx, [ebp - 0x218]
push ecx
call fcn.004c156b
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4ef227
jmp 0x4ef2ae
mov edx, dword [0x6f8c70]
push edx
call fcn.006635f6
add esp, 4
test eax, eax
je 0x4ef23c
jmp 0x4ef2ae
mov eax, dword [0x6f8c70]
push eax
call fcn.0066361e
add esp, 4
test eax, eax
je 0x4ef250
jmp 0x4ef2ae
push 0xa
lea ecx, [ebp - 0x218]
push ecx
call fcn.004bb280
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4ef278
cmp dword [ebp + 0x14], 0
je 0x4ef276
mov edx, dword [ebp - 4]
mov byte [edx], 0
jmp 0x4ef28c
mov eax, dword [0x6f8c70]
push eax
call fcn.004ef340
add esp, 4
test eax, eax
jne 0x4ef28c
jmp 0x4ef2ae
lea ecx, [ebp - 0x218]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004eeb40
add esp, 0xc
test eax, eax
jl 0x4ef2ae
mov dword [ebp - 8], 1
cmp dword [0x6f8c74], 2
jne 0x4ef2be
mov dword [ebp - 8], 0xffffffff
cmp dword [ebp - 0x10], 0
je 0x4ef2d8
push 0x6768ec
mov ecx, dword [0x6f8c6c]
push ecx
call fcn.00663c04
add esp, 8
cmp dword [0x6f8c68], 2
jl 0x4ef2fe
cmp dword [ebp + 0x10], 0
jne 0x4ef2fe
mov edx, dword [ebp + 8]
push edx
call fcn.004ef4a0
add esp, 4
test eax, eax
jne 0x4ef2fe
mov dword [ebp - 8], 0
cmp dword [0x6f8c68], 1
jl 0x4ef30c
call fcn.004ef5c0
push 0x200
lea eax, [ebp - 0x218]
push eax
call fcn.0051c1a0
add esp, 8
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004bec6d
mov esp, ebp
pop ebp
ret