Function at 0x49cfb0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10
call fcn.0057a390
mov eax, dword [0x5faea4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0
push 0
push str.OPENSSL_WIN32_UTF8
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x49d225
mov ebx, 8
mov dword [ebp - 8], 0
xor esi, esi
mov dword [ebp - 0x10], ebx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov edi, eax
cmp edi, 0xc42c
je 0x49d047
cmp edi, 0xc42d
je 0x49d047
cmp edi, 0xc42e
je 0x49d047
cmp edi, 0xc431
je 0x49d047
cmp edi, 0xc433
je 0x49d047
cmp edi, 0xc435
je 0x49d047
cmp edi, 0xdeaa
jb 0x49d03a
cmp edi, 0xdeb3
jbe 0x49d047
cmp edi, 0xfde8
je 0x49d047
cmp edi, 0x2a
jne 0x49d04c
xor ebx, ebx
mov dword [ebp - 0x10], ebx
push 0
push 0
push 0xffffffffffffffff
push dword [ebp + 8]
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0xc], eax
test eax, eax
jle 0x49d20e
lea edx, [eax + eax]
lea ecx, [edx + 8]
cmp edx, ecx
sbb eax, eax
test ecx, eax
je 0x49d20e
cmp edx, ecx
sbb eax, eax
and eax, ecx
lea ecx, [edx + 8]
cmp eax, 0x400
ja 0x49d0a7
cmp edx, ecx
sbb eax, eax
and eax, ecx
call fcn.0057a3c0
mov ebx, esp
test ebx, ebx
je 0x49d20e
mov dword [ebx], 0xcccc
jmp 0x49d0c6
cmp edx, ecx
sbb eax, eax
and eax, ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x49d20e
mov dword [ebx], 0xdddd
add ebx, 8
test ebx, ebx
je 0x49d20e
push dword [ebp - 0xc]
push ebx
push 0xffffffffffffffff
push dword [ebp + 8]
push dword [ebp - 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x49d1e2
push 0
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edi, eax
test edi, edi
je 0x49d1e2
lea edx, [edi + edi]
lea ecx, [edx + 8]
cmp edx, ecx
sbb eax, eax
test ecx, eax
je 0x49d1e0
cmp edx, ecx
sbb eax, eax
and eax, ecx
lea ecx, [edx + 8]
cmp eax, 0x400
ja 0x49d140
cmp edx, ecx
sbb eax, eax
and eax, ecx
call fcn.0057a3c0
mov esi, esp
test esi, esi
je 0x49d1e2
mov dword [esi], 0xcccc
jmp 0x49d15f
cmp edx, ecx
sbb eax, eax
and eax, ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov esi, eax
add esp, 4
test esi, esi
je 0x49d1e2
mov dword [esi], 0xdddd
add esi, 8
test esi, esi
je 0x49d1e2
push edi
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, edi
jae 0x49d1e2
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0xc], eax
test eax, eax
jle 0x49d1e2
push 0x46
push str.cryptogetenv.c
push eax
call fcn.0045fd70
mov edi, eax
add esp, 0xc
mov dword [ebp - 8], edi
test edi, edi
je 0x49d1e2
push 0
push 0
push dword [ebp - 0xc]
push edi
push 0xffffffffffffffff
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x49d1e2
push 0x4c
push str.cryptogetenv.c
push edi
call fcn.0045fdf0
add esp, 0xc
mov dword [ebp - 8], 0
jmp 0x49d1e2
xor esi, esi
add ebx, 0xfffffff8
cmp dword [ebx], 0xdddd
jne 0x49d1f6
push ebx
call fcn.0057b51a
add esp, 4
test esi, esi
je 0x49d20e
add esi, 0xfffffff8
cmp dword [esi], 0xdddd
jne 0x49d20e
push esi
call fcn.0057b51a
add esp, 4
mov eax, dword [ebp - 8]
lea esp, [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00579fe8
mov esp, ebp
pop ebp
ret
call fcn.00475780
test eax, eax
je 0x49d244
xor eax, eax
lea esp, [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00579fe8
mov esp, ebp
pop ebp
ret
push dword [ebp + 8]
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
add esp, 4
lea esp, [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00579fe8
mov esp, ebp
pop ebp
ret