Function at 0x1400f8570
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rcx
push rbp
mov eax, 0xa0
call fcn.1402b4ee0
sub rsp, rax
lea rbp, [rsp + 0x40]
mov rax, qword [0x14036aa00]
xor rax, rbp
mov qword [rbp + 0x58], rax
xor r8d, r8d
xor edx, edx
lea rcx, str.OPENSSL_WIN32_UTF8
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x1400f8948
mov qword [rbp + 0x28], 0
mov dword [rbp + 0xc], 0
mov qword [rbp + 0x18], 0
mov qword [rbp + 0x20], 0
mov dword [rbp + 4], 0
mov dword [rbp + 0x10], 8
call qword [sym.imp.KERNEL32.dll_GetACP]
mov dword [rbp], eax
cmp dword [rbp], 0xc42c
je 0x1400f863d
cmp dword [rbp], 0xc42d
je 0x1400f863d
cmp dword [rbp], 0xc42e
je 0x1400f863d
cmp dword [rbp], 0xc431
je 0x1400f863d
cmp dword [rbp], 0xc433
je 0x1400f863d
cmp dword [rbp], 0xc435
je 0x1400f863d
cmp dword [rbp], 0xdeaa
jb 0x1400f862e
cmp dword [rbp], 0xdeb3
jbe 0x1400f863d
cmp dword [rbp], 0xfde8
je 0x1400f863d
cmp dword [rbp], 0x2a
jne 0x1400f8644
mov dword [rbp + 0x10], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xffffffff
mov r8, qword [rbp + 0x70]
mov edx, dword [rbp + 0x10]
mov ecx, dword [rbp]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rbp + 8], eax
cmp dword [rbp + 8], 0
jle 0x1400f8736
movsxd rax, dword [rbp + 8]
shl rax, 1
mov rcx, rax
call fcn.1400f84a0
test rax, rax
je 0x1400f8726
movsxd rax, dword [rbp + 8]
shl rax, 1
mov rcx, rax
call fcn.1400f84a0
cmp rax, 0x400
ja 0x1400f86f3
movsxd rax, dword [rbp + 8]
shl rax, 1
mov rcx, rax
call fcn.1400f84a0
mov rcx, rax
add rcx, 0xf
cmp rcx, rax
ja 0x1400f86cc
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1402b4ee0
sub rsp, rax
lea rax, [rsp + 0x40]
mov edx, 0xcccc
mov rcx, rax
call fcn.1400f84f0
mov qword [rbp + 0x38], rax
jmp 0x1400f871c
movsxd rax, dword [rbp + 8]
shl rax, 1
mov rcx, rax
call fcn.1400f84a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, 0xdddd
mov rcx, rax
call fcn.1400f84f0
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x40], rax
jmp 0x1400f872e
mov qword [rbp + 0x40], 0
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x18], rax
cmp qword [rbp + 0x18], 0
je 0x1400f877e
mov eax, dword [rbp + 8]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp + 0x70]
mov edx, dword [rbp + 0x10]
mov ecx, dword [rbp]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rbp + 0x30], eax
cmp dword [rbp + 0x30], 0
jle 0x1400f877e
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
jbe 0x1400f8842
mov eax, dword [rbp + 4]
shl rax, 1
mov rcx, rax
call fcn.1400f84a0
test rax, rax
je 0x1400f8832
mov eax, dword [rbp + 4]
shl rax, 1
mov rcx, rax
call fcn.1400f84a0
cmp rax, 0x400
ja 0x1400f8800
mov eax, dword [rbp + 4]
shl rax, 1
mov rcx, rax
call fcn.1400f84a0
mov rcx, rax
add rcx, 0xf
cmp rcx, rax
ja 0x1400f87d9
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1402b4ee0
sub rsp, rax
lea rax, [rsp + 0x40]
mov edx, 0xcccc
mov rcx, rax
call fcn.1400f84f0
mov qword [rbp + 0x48], rax
jmp 0x1400f8828
mov eax, dword [rbp + 4]
shl rax, 1
mov rcx, rax
call fcn.1400f84a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, 0xdddd
mov rcx, rax
call fcn.1400f84f0
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x50], rax
jmp 0x1400f883a
mov qword [rbp + 0x50], 0
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x20], rax
cmp qword [rbp + 0x20], 0
je 0x1400f889d
mov r8d, dword [rbp + 4]
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, dword [rbp + 4]
jae 0x1400f889d
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xffffffff
mov r8, qword [rbp + 0x20]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [rbp + 0xc], eax
cmp dword [rbp + 0xc], 0
jle 0x1400f88c0
movsxd rax, dword [rbp + 0xc]
mov r8d, 0x46
lea rdx, str.cryptogetenv.c
mov rcx, rax
call fcn.14008ed90
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
je 0x1400f8922
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov eax, dword [rbp + 0xc]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x28]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp + 0x20]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x1400f8922
mov r8d, 0x4c
lea rdx, str.cryptogetenv.c
mov rcx, qword [rbp + 0x28]
call fcn.14008ee10
mov qword [rbp + 0x28], 0
cmp qword [rbp + 0x18], 0
je 0x1400f8932
mov rcx, qword [rbp + 0x18]
call fcn.1400f8520
cmp qword [rbp + 0x20], 0
je 0x1400f8942
mov rcx, qword [rbp + 0x20]
call fcn.1400f8520
mov rax, qword [rbp + 0x28]
jmp 0x1400f895f
call fcn.14007e260
test eax, eax
je 0x1400f8955
xor eax, eax
jmp 0x1400f895f
mov rcx, qword [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rcx, qword [rbp + 0x58]
xor rcx, rbp
call fcn.1402b48e0
lea rsp, [rbp + 0x60]
pop rbp
ret