Function at 0x5b7960
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x58
call fcn.00693bc0
sub rsp, rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x50], r12
mov r12, qword [rcx + 0x40]
mov qword [rsp + 0x48], r13
xor r13d, r13d
mov qword [rsp + 0x40], r14
xor r14d, r14d
cmp qword [rcx + 0xe0], r13
mov rbx, rcx
lea ebp, [rax - 0x59]
lea esi, [rax - 0x57]
je 0x5b79b8
xor edi, edi
mov dword [rsp + 0x20], 6
jmp 0x5b79e1
mov rax, qword [rcx + 0x28]
lea rcx, str.OPENSSL_ALLOW_PROXY_CERTS
mov edi, dword [rax + 0x14]
shr edi, 6
and edi, esi
call sub.msvcrt.dll_getenv
test rax, rax
mov rax, qword [rbx + 0x28]
mov eax, dword [rax + 0x18]
cmovne edi, esi
mov dword [rsp + 0x20], eax
xor esi, esi
mov qword [rsp + 0x38], r15
movsxd r15, edi
cmp dword [rbx + 0x9c], esi
jle 0x5b7bed
nop
nop
nop
mov rcx, qword [rbx + 0xa0]
mov edx, esi
call fcn.005c0880
mov rcx, qword [rbx + 0x28]
test byte [rcx + 0x14], 0x10
mov rdi, rax
jne 0x5b7a49
bt dword [rax + 0x40], 9
jae 0x5b7a49
mov rdx, rbx
xor ecx, ecx
mov dword [rbx + 0xb8], Ordinal_41
mov dword [rbx + 0xb4], esi
mov qword [rbx + 0xc0], rax
call r12
test eax, eax
je 0x5b7bf2
test r15, r15
jne 0x5b7a7c
bt dword [rdi + 0x40], 0xa
jae 0x5b7a7c
mov rdx, rbx
xor ecx, ecx
mov dword [rbx + 0xb8], Ordinal_41
mov dword [rbx + 0xb4], esi
mov qword [rbx + 0xc0], rdi
call r12
test eax, eax
je 0x5b7bf2
mov rcx, rdi
call fcn.005c9710
cmp ebp, 0xffffffff
mov r11d, eax
je 0x5b7abf
test ebp, ebp
je 0x5b7aaf
test eax, eax
je 0x5b7aa3
mov rcx, qword [rbx + 0x28]
test byte [rcx + 0x14], 0x20
je 0x5b7afb
cmp eax, 1
je 0x5b7afb
mov dword [rbx + 0xb8], Ordinal_33
jmp 0x5b7ade
test eax, eax
je 0x5b7afb
mov dword [rbx + 0xb8], Ordinal_41
jmp 0x5b7ade
mov rax, qword [rbx + 0x28]
test byte [rax + 0x14], 0x20
je 0x5b7afb
cmp r11d, 1
je 0x5b7afb
test r11d, r11d
je 0x5b7afb
mov dword [rbx + 0xb8], Ordinal_33
mov rdx, rbx
xor ecx, ecx
mov dword [rbx + 0xb4], esi
mov qword [rbx + 0xc0], rdi
call r12
test eax, eax
je 0x5b7bf2
mov rax, qword [rbx + 0x28]
cmp dword [rax + 0x18], 0
jle 0x5b7b54
mov edx, dword [rsp + 0x20]
xor r8d, r8d
test ebp, ebp
setg r8b
mov rcx, rdi
call fcn.005c9e40
test eax, eax
je 0x5b7b2d
mov rcx, qword [rbx + 0x28]
test byte [rcx + 0x14], 0x20
je 0x5b7b54
cmp eax, 1
je 0x5b7b54
mov rdx, rbx
xor ecx, ecx
mov dword [rbx + 0xb8], reloc.WLDAP32.dll_Ordinal_26
mov dword [rbx + 0xb4], esi
mov qword [rbx + 0xc0], rdi
call r12
test eax, eax
je 0x5b7bf2
cmp esi, 1
jle 0x5b7b94
test byte [rdi + 0x40], 0x20
jne 0x5b7b94
mov eax, dword [rdi + 0x38]
cmp eax, 0xffffffff
je 0x5b7b94
lea eax, [rax + r13 + 1]
cmp r14d, eax
jle 0x5b7b94
mov rdx, rbx
xor ecx, ecx
mov dword [rbx + 0xb8], Ordinal_33
mov dword [rbx + 0xb4], esi
mov qword [rbx + 0xc0], rdi
call r12
test eax, eax
je 0x5b7bf2
mov eax, dword [rdi + 0x40]
test al, 0x20
jne 0x5b7b9e
inc r14d
bt eax, 0xa
jae 0x5b7bda
mov eax, dword [rdi + 0x3c]
cmp eax, 0xffffffff
je 0x5b7bd3
cmp esi, eax
jle 0x5b7bd3
mov rdx, rbx
xor ecx, ecx
mov dword [rbx + 0xb8], Ordinal_41
mov dword [rbx + 0xb4], esi
mov qword [rbx + 0xc0], rdi
call r12
test eax, eax
je 0x5b7bf2
inc r13d
xor ebp, ebp
jmp 0x5b7bdf
mov ebp, 1
inc esi
cmp esi, dword [rbx + 0x9c]
jl 0x5b7a00
mov eax, 1
mov r15, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
add rsp, 0x58
ret