Function at 0x1401362f0
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x298
mov rax, qword [0x1402b2020]
xor rax, rsp
mov qword [rsp + 0x280], rax
xor r9d, r9d
lea rdx, [rsp + 0x60]
xor cl, cl
lea r10, str.__t_e_m_p______a_p_p_d_a_t_a_____
xor eax, eax
nop dword [rax]
movzx r8d, byte [rax + r10]
cmp r8b, 0x25
jne 0x140136337
test cl, cl
jne 0x140136651
mov cl, 1
jmp 0x140136344
test cl, cl
je 0x140136344
inc r9d
mov byte [rdx], r8b
inc rdx
inc rax
cmp byte [rax + r10], 0
jne 0x140136320
mov qword [rsp + 0x2a0], rbx
mov qword [rsp + 0x290], rdi
test r9d, r9d
jle 0x14013637c
mov r8d, 0x104
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, dword [0x1402917b8]
lea rdx, str.Original_Text:
movups xmm0, xmmword [str.This_is_a_message_for_DES_encryption.]
mov dword [rsp + 0x50], eax
lea rcx, [0x140331300]
movups xmm1, xmmword [0x1402917a8]
movzx eax, word [0x1402917bc]
movups xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x54], ax
movups xmmword [rsp + 0x40], xmm1
call fcn.140134040
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.140134040
mov rcx, rax
call fcn.1401342f0
call fcn.14013ca30
test eax, eax
je 0x140136502
call fcn.14013c5d0
mov rcx, rax
call fcn.14013c610
xor edx, edx
mov ecx, 0x20004
mov rbx, rax
call fcn.14013d310
mov edx, 3
mov ecx, 0x22002
call fcn.14013d310
mov edx, 3
mov ecx, 0x22003
call fcn.14013d310
mov edx, dword [rbx + 8]
mov ecx, 0x21001
call fcn.14013d310
mov edx, dword [rbx + 0xc]
mov ecx, 0x21002
call fcn.14013d310
mov edx, dword [rbx + 0x10]
mov ecx, 0x21003
call fcn.14013d310
mov edx, 8
mov ecx, 0x21004
call fcn.14013d310
mov edx, 0x18
mov ecx, 0x21005
call fcn.14013d310
mov edx, 8
mov ecx, 0x21006
call fcn.14013d310
xor r9d, r9d
mov qword [rsp + 0x20], 0
lea r8, str.glText
mov edx, 0x1e0
mov ecx, 0x280
call fcn.14013cdc0
mov rbx, rax
test rax, rax
je 0x1401364fd
mov rcx, rax
call fcn.14013ae70
mov ecx, 1
call fcn.14013af10
mov rcx, rbx
call fcn.14013d620
test eax, eax
je 0x1401364f5
nop word [rax + rax]
mov edx, 0x100
mov rcx, rbx
call fcn.14013b740
test eax, eax
je 0x1401364de
mov edx, 1
mov rcx, rbx
call fcn.14013d2f0
mov ecx, 0x100
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call fcn.14013d620
test eax, eax
jne 0x1401364c0
mov rcx, rbx
call fcn.14013d210
call fcn.14013cb00
lea r8, str.ppAgent::ModernAppAgent__
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, [0x140293fd0]
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, str.rTypeStg
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, [0x140298fd0]
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, [0x14029b7d0]
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, [0x14029dfd0]
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, [0x1402a07d0]
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, [0x1402a2fd0]
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, [0x1402a57d0]
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea r8, [0x1402a7fd0]
mov edx, 0x19000
lea rcx, [0x140345da0]
call fcn.14014f530
lea rbx, [0x14035eda0]
lea rdi, [0x14035fa20]
cmp qword [rbx + 0x18], 0x10
mov rdx, rbx
jb 0x14013660d
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
call fcn.140136670
mov rcx, rax
call fcn.1401342f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140136600
mov rdi, qword [rsp + 0x290]
xor eax, eax
mov rbx, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.140139290
add rsp, 0x298
ret
movsxd rax, r9d
cmp rax, 0x104
jae 0x140136666
mov byte [rsp + rax + 0x60], 0
jmp 0x14013634e
call fcn.140139428
int3