Function at 0x14015ec80
Capabilities:
Query environment variable

Disassembly:
push rsi
mov eax, 0x30
call fcn.1401abae0
sub rsp, rax
mov rsi, rcx
test rcx, rcx
jne 0x14015ecbd
lea r9, str.cryptoengineeng_list.c
mov dword [rsp + 0x20], 0x11f
lea edx, [rax + 0x3a]
lea ecx, [rax - 0xa]
lea r8d, [rax + 0x13]
call fcn.1400d9bd0
xor eax, eax
add rsp, 0x30
pop rsi
ret
lea rdx, [0x140121c50]
mov qword [rsp + 0x50], rdi
lea rcx, [0x14028b900]
call fcn.1400dd800
xor edi, edi
test eax, eax
mov ecx, edi
cmovne ecx, dword [0x14028b904]
test ecx, ecx
jne 0x14015ed11
lea r9, str.cryptoengineeng_list.c
mov dword [rsp + 0x20], 0x123
lea edx, [rdi + 0x6a]
lea ecx, [rdi + 0x26]
lea r8d, [rdi + 0x41]
call fcn.1400d9bd0
mov rdi, qword [rsp + 0x50]
xor eax, eax
add rsp, 0x30
pop rsi
ret
mov rcx, qword [0x14028cda8]
mov qword [rsp + 0x40], rbx
call fcn.1400dd8c0
mov rbx, qword [0x14028ba30]
test rbx, rbx
je 0x14015ee33
mov r8, qword [rbx]
mov rax, rsi
sub r8, rsi
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14015ed53
inc rax
test ecx, ecx
jne 0x14015ed40
test edx, edx
je 0x14015ed68
mov rbx, qword [rbx + 0xb8]
test rbx, rbx
jne 0x14015ed32
jmp 0x14015ee33
test byte [rbx + 0x98], 4
je 0x14015ee2d
call fcn.140121a70
mov rcx, rax
test rax, rax
jne 0x14015ed8a
mov rbx, rdi
jmp 0x14015ee33
mov rax, qword [rbx]
mov qword [rcx], rax
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rbx + 0x10]
mov qword [rcx + 0x10], rax
mov rax, qword [rbx + 0x18]
mov qword [rcx + 0x18], rax
mov rax, qword [rbx + 0x20]
mov qword [rcx + 0x20], rax
mov rax, qword [rbx + 0x28]
mov qword [rcx + 0x28], rax
mov rax, qword [rbx + 0x30]
mov qword [rcx + 0x30], rax
mov rax, qword [rbx + 0x38]
mov qword [rcx + 0x38], rax
mov rax, qword [rbx + 0x40]
mov qword [rcx + 0x40], rax
mov rax, qword [rbx + 0x48]
mov qword [rcx + 0x48], rax
mov rax, qword [rbx + 0x58]
mov qword [rcx + 0x58], rax
mov rax, qword [rbx + 0x60]
mov qword [rcx + 0x60], rax
mov rax, qword [rbx + 0x68]
mov qword [rcx + 0x68], rax
mov rax, qword [rbx + 0x70]
mov qword [rcx + 0x70], rax
mov rax, qword [rbx + 0x78]
mov qword [rcx + 0x78], rax
mov rax, qword [rbx + 0x80]
mov qword [rcx + 0x80], rax
mov rax, qword [rbx + 0x90]
mov qword [rcx + 0x90], rax
mov eax, dword [rbx + 0x98]
mov rbx, rcx
mov dword [rcx + 0x98], eax
jmp 0x14015ee33
inc dword [rbx + 0x9c]
mov rcx, qword [0x14028cda8]
call fcn.1400dd8a0
test rbx, rbx
je 0x14015ee57
mov rdi, qword [rsp + 0x50]
mov rax, rbx
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rsi
ret
mov qword [rsp + 0x48], rbp
lea rbp, str.dynamic
movzx eax, byte [rsi + rdi]
inc rdi
cmp al, byte [rdi + rbp - 1]
jne 0x14015eec9
cmp rdi, 8
jne 0x14015ee63
mov rcx, rbx
call fcn.1401219b0
mov edx, 0x6a
mov dword [rsp + 0x20], 0x153
lea r9, str.cryptoengineeng_list.c
lea ecx, [rdx - 0x44]
lea r8d, [rdx + 0xa]
call fcn.1400d9bd0
mov r8, rsi
lea rdx, [0x140206328]
mov ecx, 2
call fcn.1400d8ec0
xor eax, eax
mov rbp, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rsi
ret
lea rcx, str.OPENSSL_ENGINES
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
test rax, rax
lea rdi, str.C:.hunter_Base59b2b88274849f_aa3cb20BuildOpenSSLInstalllibengines_1_1
mov rcx, rbp
cmovne rdi, rax
call fcn.14015ec80
mov rbx, rax
test rax, rax
je 0x14015ee76
xor r9d, r9d
lea rdx, [0x1401fb380]
mov r8, rsi
mov rcx, rax
call fcn.14017e510
test eax, eax
je 0x14015ee76
xor r9d, r9d
lea r8, [0x140206320]
lea rdx, str.DIR_LOAD
mov rcx, rbx
call fcn.14017e510
test eax, eax
je 0x14015ee76
xor r9d, r9d
lea rdx, str.DIR_ADD
mov r8, rdi
mov rcx, rbx
call fcn.14017e510
test eax, eax
je 0x14015ee76
xor r9d, r9d
lea r8, [0x140206324]
lea rdx, str.LIST_ADD
mov rcx, rbx
call fcn.14017e510
test eax, eax
je 0x14015ee76
xor r9d, r9d
lea rdx, str.LOAD
xor r8d, r8d
mov rcx, rbx
call fcn.14017e510
test eax, eax
je 0x14015ee76
mov rax, rbx
jmp 0x14015eeb4