Function at 0x140031573
Capabilities:
Encrypt data using chaskey
Set environment variable

Disassembly:
push rax
pushf
mov eax, 0x9ddede84
pushf
not eax
add eax, 0x8d088aff
xor eax, 0xc49bef66
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xcd6c20c9
xor eax, 0xabde0aef
rol eax, 0x22
popf
cmp eax, 4
jne 0x1400315b0
popf
pop rax
jmp 0x1400319d1
cmp eax, 0
jne 0x1400315bf
popf
pop rax
jmp 0x140031763
cmp eax, 3
jne 0x1400315ce
popf
pop rax
jmp 0x140031983
cmp eax, 1
jne 0x1400315dd
popf
pop rax
jmp 0x1400318a0
cmp eax, 0xd
jne 0x1400315ec
popf
pop rax
jmp 0x140031e7a
cmp eax, 0x1a
jne 0x1400315fb
popf
pop rax
jmp 0x1400323ad
cmp eax, 0xe
jne 0x14003160a
popf
pop rax
jmp 0x140031f0c
cmp eax, 0xb
jne 0x140031619
popf
pop rax
jmp 0x140031d10
cmp eax, 0x19
jne 0x140031628
popf
pop rax
jmp 0x14003232e
cmp eax, 8
jne 0x140031637
popf
pop rax
jmp 0x140031bd1
cmp eax, 0x1d
jne 0x140031646
popf
pop rax
jmp 0x1400324a3
cmp eax, 0x17
jne 0x140031655
popf
pop rax
jmp 0x14003228a
cmp eax, 0x1c
jne 0x140031664
popf
pop rax
jmp 0x140032467
cmp eax, 0x12
jne 0x140031673
popf
pop rax
jmp 0x140032015
cmp eax, 0x18
jne 0x140031682
popf
pop rax
jmp 0x1400322f8
cmp eax, 0x11
jne 0x140031691
popf
pop rax
jmp 0x140031fc4
cmp eax, 0x1b
jne 0x1400316a0
popf
pop rax
jmp 0x1400323e8
cmp eax, 0x16
jne 0x1400316af
popf
pop rax
jmp 0x1400321e3
cmp eax, 0xa
jne 0x1400316be
popf
pop rax
jmp 0x140031cb4
cmp eax, 0x14
jne 0x1400316cd
popf
pop rax
jmp 0x140032149
cmp eax, 0xf
jne 0x1400316dc
popf
pop rax
jmp 0x140031f4f
cmp eax, 0x13
jne 0x1400316eb
popf
pop rax
jmp 0x1400320b7
cmp eax, 0x15
jne 0x1400316fa
popf
pop rax
jmp 0x140032187
cmp eax, 2
jne 0x140031709
popf
pop rax
jmp 0x140031932
cmp eax, 6
jne 0x140031718
popf
pop rax
jmp 0x140031ae4
cmp eax, 0xc
jne 0x140031727
popf
pop rax
jmp 0x140031dc7
cmp eax, 7
jne 0x140031736
popf
pop rax
jmp 0x140031b48
cmp eax, 5
jne 0x140031745
popf
pop rax
jmp 0x140031a79
cmp eax, 9
jne 0x140031754
popf
pop rax
jmp 0x140031c63
cmp eax, 0x10
jne 0x140031763
popf
pop rax
jmp 0x140031fbe
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
xor r15d, r15d
mov r14, rdx
mov rsi, rcx
mov qword [rbp + 0x17], r15
xor edx, edx
mov qword [rbp + 0x1f], r15
lea rcx, [rbp - 0x39]
mov qword [rbp + 0x27], r15
mov qword [rbp + 0x2f], r15
mov edi, r15d
mov qword [rbp + 0x37], r15
mov byte [rbp + 0x3f], r15b
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
mov byte [rbp + 0xf], r15b
call fcn.140070821
mov rax, qword [rbp - 0x31]
mov ebx, 0xb5c616a5
pushf
not ebx
add ebx, 0x951a185c
xor ebx, 0xe86b38a4
rol ebx, 0x8a
popf
pushf
not ebx
add ebx, 0x821e0c86
xor ebx, 0xba4383a9
rol ebx, 0x32
popf
cmp dword [rax + 0xc], ebx
jne 0x140031847
push rax
pushf
mov eax, 0x4fff3a7c
pushf
not eax
add eax, 0xbac30c58
xor eax, 0xd3948920
rol eax, 0xd
popf
pushf
not eax
add eax, 0x8133d362
xor eax, 0xfd382bc8
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xa49c64ae
xor eax, 0xdd3c6dfb
rol eax, 0xab
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0xdb9f58ed
pushf
not eax
add eax, 0xa807c23e
xor eax, 0xf3d114fa
rol eax, 0xef
popf
pushf
not eax
add eax, 0x9043b8d4
xor eax, 0xdd9a91c5
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xdb258b41
xor eax, 0xe132b21c
rol eax, 0x52
popf
pushf
not eax
add eax, 0x86485c42
xor eax, 0xd9a84306
rol eax, 0x1b
popf
jmp 0x1400315a1
cmp byte [rbp - 0x21], r15b
je 0x1400318d9
push rax
pushf
mov eax, 0xec3ee640
pushf
not eax
add eax, 0x9c786ee0
xor eax, 0x97eedcf9
rol eax, 0x47
popf
pushf
not eax
add eax, 0x9ca906b1
xor eax, 0xb0fed399
rol eax, 0x7f
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0x3c535d09
pushf
not eax
add eax, 0x8b40865e
xor eax, 0xd3e276f5
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xbe451a3b
xor eax, 0xdc801c91
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xa81ffd50
xor eax, 0xcebb2419
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x958932b0
xor eax, 0xf4056cfd
rol eax, 0x52
popf
jmp 0x1400315a1
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xa62a159c
pushf
not eax
add eax, 0xe4e9c9b8
xor eax, 0xc9fd8db0
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xf2c3344f
xor eax, 0xa39e8670
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xdafd2167
xor eax, 0x8511febe
rol eax, 0x27
popf
jmp 0x1400315a1
mov r9d, ebx
jmp 0x140031d10
call fcn.140077f54
test eax, eax
jne 0x140031a20
push rax
pushf
mov eax, 0x79386f76
pushf
not eax
add eax, 0xa08f90f4
xor eax, 0x854489b2
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xae63728d
xor eax, 0xe85a62a5
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xad4a2e7e
xor eax, 0xb296879a
rol eax, 0xc6
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0xe5325f82
pushf
not eax
add eax, 0xa37e7e0a
xor eax, 0xc1ac2b25
rol eax, 0x46
popf
pushf
not eax
add eax, 0xda8798cb
xor eax, 0x920128c2
rol eax, 0x61
popf
pushf
not eax
add eax, 0xa5cc4f6a
xor eax, 0xda2b083e
rol eax, 0
popf
pushf
not eax
add eax, 0xf414a776
xor eax, 0x951791cc
rol eax, 0x65
popf
jmp 0x1400315a1
cmp byte [rbp - 0x21], r15b
je 0x140031ab2
push rax
pushf
mov eax, 0x55aa8f46
pushf
not eax
add eax, 0xc0cff30e
xor eax, 0xb8e09a05
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xa99a2b78
xor eax, 0x924b1390
rol eax, 7
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0xe218ea7a
pushf
not eax
add eax, 0xb0db0b56
xor eax, 0xaa803d6a
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x8ac0b4a0
xor eax, 0x868551d4
rol eax, 1
popf
jmp 0x1400315a1
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x92364b6c
pushf
not eax
add eax, 0x9158c920
xor eax, 0x803cbf4f
rol eax, 0x22
popf
pushf
not eax
add eax, 0x846606e7
xor eax, 0xfa1fca27
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xb6bd0b27
xor eax, 0xd4c9a038
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xb6c66d76
xor eax, 0xd0206653
rol eax, 0xb8
popf
jmp 0x1400315a1
mov r9d, 0xcb6aa500
pushf
not r9d
add r9d, 0xc9f6bfa5
xor r9d, 0xab88b9ae
rol r9d, 0x26
popf
pushf
not r9d
add r9d, 0xa2298b69
xor r9d, 0xc6a7ac8d
rol r9d, 0x85
popf
pushf
not r9d
add r9d, 0xbd140f44
xor r9d, 0xc807836f
rol r9d, 0x4b
popf
jmp 0x140031d10
cmp byte [rbp - 0x21], r15b
je 0x140031c0a
push rax
pushf
mov eax, 0x51ee02f8
pushf
not eax
add eax, 0xf1234a09
xor eax, 0xca6eac13
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xd178dccd
xor eax, 0xd6b92776
rol eax, 0x53
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0x18019c26
pushf
not eax
add eax, 0xb76be88f
xor eax, 0x91ffcb02
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xa8cea974
xor eax, 0x9eb81a3a
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xc7b0e3f1
xor eax, 0xa3b872a2
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xcb7f60a1
xor eax, 0xc630c7fc
rol eax, 0xc6
popf
jmp 0x1400315a1
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xc4036807
pushf
not eax
add eax, 0xa04459d0
xor eax, 0xe26b62ab
rol eax, 0x48
popf
pushf
not eax
add eax, 0x985cfa9a
xor eax, 0xf3388100
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xc550433b
xor eax, 0xf97c4518
rol eax, 0xcc
popf
jmp 0x1400315a1
mov r9d, r15d
push rax
pushf
mov eax, 0x50578b10
pushf
not eax
add eax, 0x8e6d9843
xor eax, 0xce854daa
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xc9dcd799
xor eax, 0xc031f8ed
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xe9cd3b31
xor eax, 0xb0ea3a69
rol eax, 0x44
popf
pushf
not eax
add eax, 0xc9e0899e
xor eax, 0x82ac93f3
rol eax, 0x25
popf
jmp 0x1400315a1
lea r8, [rbp + 0x77]
mov rcx, rsi
lea rdx, [rbp + 0x17]
call fcn.140045b60
test eax, eax
jne 0x140031d81
push rax
pushf
mov eax, 0x7e423474
pushf
not eax
add eax, 0xb0bfb06d
xor eax, 0xb33a5a5f
rol eax, 0x18
popf
pushf
not eax
add eax, 0xa5ec19eb
xor eax, 0xafd3f7df
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xe2cbd90c
xor eax, 0x9c7582f4
rol eax, 0x92
popf
pushf
not eax
add eax, 0x88e25ca4
xor eax, 0xf80d832c
rol eax, 0x96
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0x4740d47
pushf
not eax
add eax, 0xd21177b4
xor eax, 0xe0eefc19
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x820fe48e
xor eax, 0x84df1fe1
rol eax, 0x96
popf
pushf
not eax
add eax, 0xd4a0c737
xor eax, 0x90342bbd
rol eax, 0xa3
popf
jmp 0x1400315a1
xor edx, edx
lea rcx, [rbp - 0x39]
call fcn.140070821
mov rax, qword [rbp - 0x31]
cmp dword [rax + 0xc], ebx
jne 0x140031e21
push rax
pushf
mov eax, 0xacd3c319
pushf
not eax
add eax, 0x8bcc7acc
xor eax, 0xda358370
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xa9745c0f
xor eax, 0x8dce6c14
rol eax, 0x12
popf
pushf
not eax
add eax, 0xea5e07ca
xor eax, 0xfd00a1d9
rol eax, 0x71
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0xe0ee2ac0
pushf
not eax
add eax, 0xe78d8cea
xor eax, 0xd677a474
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xbe77fb6b
xor eax, 0x9f37728a
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xd7ea490e
xor eax, 0x8729efcb
rol eax, 0xce
popf
pushf
not eax
add eax, 0xee49aae2
xor eax, 0xbe41e2fa
rol eax, 0x8b
popf
jmp 0x1400315a1
cmp byte [rbp - 0x21], r15b
je 0x140031ed9
push rax
pushf
mov eax, 0x639ffd2a
pushf
not eax
add eax, 0xc1ffee0f
xor eax, 0xabb182ff
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd3efb7b0
xor eax, 0xf4f5ce82
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x8b5d8477
xor eax, 0xdc648adf
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xd88725f7
xor eax, 0xc33b04ad
rol eax, 0x91
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0xb38947b3
pushf
not eax
add eax, 0x883ad70d
xor eax, 0x9dad0ad3
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xb3acbc9c
xor eax, 0x8a884a93
rol eax, 0xc0
popf
jmp 0x1400315a1
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x1400321e3
call fcn.140077f54
test eax, eax
jne 0x140031f8b
push rax
pushf
mov eax, 0xe3a9cc8d
pushf
not eax
add eax, 0x98a1d02b
xor eax, 0xf378b6df
rol eax, 0x45
popf
pushf
not eax
add eax, 0xb20b7351
xor eax, 0xc1f4cb00
rol eax, 0xc1
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0x9648f877
pushf
not eax
add eax, 0xc21272bc
xor eax, 0x8ff42d07
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x8491dc59
xor eax, 0xd8f0193a
rol eax, 0x98
popf
jmp 0x1400315a1
cmp byte [rbp - 0x21], r15b
je 0x140032015
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x9655371f
pushf
not eax
add eax, 0xdd928359
xor eax, 0xc972794a
rol eax, 5
popf
pushf
not eax
add eax, 0x886c2052
xor eax, 0x9b53d0c1
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xbeeab097
xor eax, 0xac8d5484
rol eax, 0x58
popf
jmp 0x1400315a1
mov ebx, 0x726f0cc0
pushf
not ebx
add ebx, 0xd89be2c4
xor ebx, 0xabb72267
rol ebx, 0x13
popf
pushf
not ebx
add ebx, 0xb8d0a439
xor ebx, 0xe9bd4263
rol ebx, 0xd8
popf
pushf
not ebx
add ebx, 0xc45e4eff
xor ebx, 0x89623799
rol ebx, 0x3c
popf
jmp 0x1400321e3
cmp byte [rbp - 0x21], r15b
je 0x140032116
push rax
pushf
mov eax, 0xc36bf846
pushf
not eax
add eax, 0xbb1672d4
xor eax, 0xfd90c8be
rol eax, 0xff
popf
pushf
not eax
add eax, 0xe6349328
xor eax, 0xe9ccf811
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xf08d01b7
xor eax, 0xa16e95e1
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xa7c4407a
xor eax, 0xad665f90
rol eax, 0x12
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0x55ad73c3
pushf
not eax
add eax, 0xc0c9c057
xor eax, 0x9a37864d
rol eax, 8
popf
pushf
not eax
add eax, 0xeada479d
xor eax, 0xba4f68ab
rol eax, 0x6a
popf
jmp 0x1400315a1
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x9fc4e673
pushf
not eax
add eax, 0xce2d745c
xor eax, 0xdd5c99d7
rol eax, 0xde
popf
pushf
not eax
add eax, 0xfb975056
xor eax, 0xff9a4b46
rol eax, 0xec
popf
jmp 0x1400315a1
mov ebx, r15d
push rax
pushf
mov eax, 0x1af1c8c1
pushf
not eax
add eax, 0xa469b063
xor eax, 0xe93bdcbc
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x9e369787
xor eax, 0xc83b394f
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xaad54924
xor eax, 0x9f87fb4f
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xd5eb8b3e
xor eax, 0xbafe927f
rol eax, 0x82
popf
jmp 0x1400315a1
mov r9d, ebx
lea r8, [rbp + 0x77]
lea rdx, [rbp - 0x19]
mov rcx, r14
call fcn.140045b60
mov rdi, qword [rbp - 9]
test eax, eax
jne 0x140032244
push rax
pushf
mov eax, 0x39333e1
pushf
not eax
add eax, 0xd9a9ce44
xor eax, 0xf3f3d08c
rol eax, 0x33
popf
pushf
not eax
add eax, 0xb52af140
xor eax, 0xde7b19ca
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xf4574b93
xor eax, 0xf275dda6
rol eax, 0x22
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0x4e9adab5
pushf
not eax
add eax, 0xd70f711a
xor eax, 0xbe79b72a
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xf24983b9
xor eax, 0xd003fe1a
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xffc6534f
xor eax, 0x9b300413
rol eax, 0xa6
popf
jmp 0x1400315a1
mov rcx, qword [rbp + 0x27]
mov rdx, rdi
jmp 0x140032292
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ebx, eax
jmp 0x14003232e
mov ebx, r15d
push rax
pushf
mov eax, 0xf0be01db
pushf
not eax
add eax, 0xcd0248ba
xor eax, 0xb1ceb763
rol eax, 0x47
popf
pushf
not eax
add eax, 0xc5735d6f
xor eax, 0xfffbeeb8
rol eax, 0x74
popf
jmp 0x1400315a1
cmp byte [rbp + 0xf], r15b
je 0x140032367
push rax
pushf
mov eax, 0x5e333ef3
pushf
not eax
add eax, 0xb56f4229
xor eax, 0x88a60759
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x8bdefaff
xor eax, 0xfe43076e
rol eax, 0xfd
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0x94a14cba
pushf
not eax
add eax, 0xbea0e7a6
xor eax, 0xa1d55512
rol eax, 0x54
popf
pushf
not eax
add eax, 0xb6ae0ffd
xor eax, 0xb159c48d
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xeacb22cd
xor eax, 0x9e8173c6
rol eax, 0xf7
popf
jmp 0x1400315a1
mov rcx, rdi
call fcn.14008f310
push rax
pushf
mov eax, 0xc11bde47
pushf
not eax
add eax, 0xb9f04530
xor eax, 0xfccd0a77
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xb435f9fc
xor eax, 0x9d6c09b7
rol eax, 0x61
popf
jmp 0x1400315a1
cmp byte [rbp + 0x3f], r15b
je 0x140032434
push rax
pushf
mov eax, 0x833af1f
pushf
not eax
add eax, 0xaffcb224
xor eax, 0x8a6bd5f7
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xddc32dc7
xor eax, 0x964ec191
rol eax, 0x61
popf
pushf
not eax
add eax, 0xe23bd0ac
xor eax, 0x960157b1
rol eax, 0x59
popf
jmp 0x1400315a1
push rax
pushf
mov eax, 0xec9bf9ab
pushf
not eax
add eax, 0xedfa25cc
xor eax, 0xc7fcb23d
rol eax, 0x37
popf
pushf
not eax
add eax, 0xa9c29787
xor eax, 0x9adf4597
rol eax, 0xbb
popf
jmp 0x1400315a1
mov rcx, qword [rbp + 0x27]
call fcn.14008f310
push rax
pushf
mov eax, 0x2a3104ed
pushf
not eax
add eax, 0xf448fc48
xor eax, 0xabececae
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x89e520ec
xor eax, 0xfbeaefd4
rol eax, 0x3f
popf
jmp 0x1400315a1
lea r11, [rsp + 0xa0]
mov eax, ebx
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret