Function at 0x1800e82e0
Capabilities:
Query environment variable

Disassembly:
push rbp
push r12
push r13
push r14
push r15
mov eax, 0x50
call fcn.1800b9c10
sub rsp, rax
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], rdi
mov rax, qword [0x1802e4710]
xor rax, rbp
mov qword [rbp], rax
mov r13, rcx
lea rcx, str.OPENSSL_WIN32_UTF8
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x1800e858b
xor esi, esi
mov r12d, esi
mov ebx, esi
lea r14d, [rsi + 8]
call qword [sym.imp.KERNEL32.dll_GetACP]
mov edi, eax
cmp eax, 0xc42c
je 0x1800e838a
cmp eax, 0xc42d
je 0x1800e838a
cmp eax, 0xc42e
je 0x1800e838a
cmp eax, 0xc431
je 0x1800e838a
cmp eax, 0xc433
je 0x1800e838a
cmp eax, 0xc435
je 0x1800e838a
cmp eax, 0xdeaa
jb 0x1800e837e
cmp eax, 0xdeb3
jbe 0x1800e838a
cmp eax, 0xfde8
je 0x1800e838a
cmp eax, 0x2a
jne 0x1800e838d
mov r14d, esi
or r9d, 0xffffffff
mov r8, r13
mov edx, r14d
mov ecx, eax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r15, eax
test eax, eax
jle 0x1800e8586
lea rcx, [r15 + r15 + 0x10]
movabs rdx, 0xffffffffffffff0
cmp rcx, 0x400
ja 0x1800e83f9
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x1800e83d7
mov rax, rdx
and rax, 0xfffffffffffffff0
call fcn.1800b9c10
sub rsp, rax
lea rsi, [rsp + 0x40]
test rsi, rsi
je 0x1800e8586
mov dword [rsi], 0xcccc
jmp 0x1800e840c
call fcn.1800ad540
mov rsi, rax
test rax, rax
je 0x1800e8410
mov dword [rax], 0xdddd
add rsi, 0x10
test rsi, rsi
je 0x1800e8586
or r9d, 0xffffffff
mov r8, r13
mov edx, r14d
mov ecx, edi
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1800e855d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edi, eax
test eax, eax
je 0x1800e855d
lea rcx, [rdi + rdi + 0x10]
cmp rcx, 0x400
ja 0x1800e8498
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x1800e8476
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.1800b9c10
sub rsp, rax
lea rbx, [rsp + 0x40]
test rbx, rbx
je 0x1800e855d
mov dword [rbx], 0xcccc
jmp 0x1800e84ab
call fcn.1800ad540
mov rbx, rax
test rax, rax
je 0x1800e84af
mov dword [rax], 0xdddd
add rbx, 0x10
test rbx, rbx
je 0x1800e855d
mov r8d, edi
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, edi
jae 0x1800e855d
xor r13d, r13d
or r9d, 0xffffffff
mov r8, rbx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
xor edx, edx
mov ecx, 0xfde9
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rdi, eax
test eax, eax
jle 0x1800e855d
lea r8d, [r13 + 0x46]
lea rdx, str.cryptogetenv.c
mov rcx, rdi
call fcn.1800ca810
mov r12, rax
test rax, rax
je 0x1800e855d
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
or r9d, 0xffffffff
mov r8, rbx
xor edx, edx
mov ecx, 0xfde9
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x1800e855d
lea r8d, [r13 + 0x4c]
lea rdx, str.cryptogetenv.c
mov rcx, r12
call fcn.1800ca8e0
mov r12d, r13d
cmp dword [rsi - 0x10], 0xdddd
lea rcx, [rsi - 0x10]
jne 0x1800e856f
call fcn.1800ad500
test rbx, rbx
je 0x1800e8586
cmp dword [rbx - 0x10], 0xdddd
lea rcx, [rbx - 0x10]
jne 0x1800e8586
call fcn.1800ad500
mov rax, r12
jmp 0x1800e85a0
call fcn.1800169c0
test eax, eax
je 0x1800e8598
xor eax, eax
jmp 0x1800e85a0
mov rcx, r13
call fcn.1800ae390
mov rcx, qword [rbp]
xor rcx, rbp
call fcn.1800acfa0
mov rbx, qword [rbp + 0x40]
mov rsi, qword [rbp + 0x48]
mov rdi, qword [rbp + 0x50]
lea rsp, [rbp + 0x10]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret