Function at 0x140b452aa
Capabilities:
Authenticate hmac
Query environment variable

Disassembly:
push rax
pushf
mov eax, 0x8f953b4b
pushf
not eax
add eax, 0xe7148d08
xor eax, 0xcc541145
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xe1926838
xor eax, 0xa79a7647
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xb1045894
xor eax, 0xf5d4d3b8
rol eax, 0x47
popf
cmp eax, 4
jne 0x140b452fa
popf
pop rax
jmp 0x140b455b0
cmp eax, 0
jne 0x140b45309
popf
pop rax
jmp 0x140b453bd
cmp eax, 3
jne 0x140b45318
popf
pop rax
jmp 0x140b45553
cmp eax, 1
jne 0x140b45327
popf
pop rax
jmp 0x140b45473
cmp eax, 0xd
jne 0x140b45336
popf
pop rax
jmp 0x140b45974
cmp eax, 7
jne 0x140b45345
popf
pop rax
jmp 0x140b4578d
cmp eax, 6
jne 0x140b45354
popf
pop rax
jmp 0x140b456a8
cmp eax, 0xb
jne 0x140b45363
popf
pop rax
jmp 0x140b458be
cmp eax, 0xc
jne 0x140b45372
popf
pop rax
jmp 0x140b45924
cmp eax, 8
jne 0x140b45381
popf
pop rax
jmp 0x140b457cf
cmp eax, 5
jne 0x140b45390
popf
pop rax
jmp 0x140b45620
cmp eax, 2
jne 0x140b4539f
popf
pop rax
jmp 0x140b454bf
cmp eax, 9
jne 0x140b453ae
popf
pop rax
jmp 0x140b45845
cmp eax, 0xa
jne 0x140b453bd
popf
pop rax
jmp 0x140b45897
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0x40
jmp 0x140b453d7
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor esi, esi
mov rbx, rax
test rax, rax
jne 0x140b4542d
push rax
pushf
mov eax, 0x2c68ceb
pushf
not eax
add eax, 0x929d7301
xor eax, 0xb614a5e2
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xb5be9751
xor eax, 0xf1a976e0
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xfac5cdf8
xor eax, 0xed6f7217
rol eax, 0xb2
popf
jmp 0x140b452eb
push rax
pushf
mov eax, 0x54923564
pushf
not eax
add eax, 0xb3742004
xor eax, 0xc4d2cb54
rol eax, 0x35
popf
pushf
not eax
add eax, 0xa70d10e8
xor eax, 0x8d0e493a
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x9462f0ad
xor eax, 0xb3743887
rol eax, 0xf3
popf
jmp 0x140b452eb
xor eax, eax
jmp 0x140b45981
mov rbp, rbx
cmp word [rax], si
je 0x140b45520
push rax
pushf
mov eax, 0xc76e9f8a
pushf
not eax
add eax, 0xbcf5d874
xor eax, 0xae0764f6
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x833bd704
xor eax, 0xb531a986
rol eax, 0x68
popf
pushf
not eax
add eax, 0xead26db5
xor eax, 0xe658db81
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xb25f0213
xor eax, 0xc1d6112a
rol eax, 0xa
popf
jmp 0x140b452eb
push rax
pushf
mov eax, 0x2015234c
pushf
not eax
add eax, 0xe1290c47
xor eax, 0xe9a04953
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x91ef0e09
xor eax, 0xc0686966
rol eax, 0x49
popf
jmp 0x140b452eb
or rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0x19815a63
pushf
not eax
add eax, 0xf29459c2
xor eax, 0x8d1cb747
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x8bb3e0d1
xor eax, 0xa97d9d40
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x9d581974
xor eax, 0xd113abf6
rol eax, 0x14
popf
pushf
not eax
add eax, 0xf9a18fab
xor eax, 0x87eb3875
rol eax, 0x29
popf
jmp 0x140b452eb
inc rax
cmp word [rbp + rax*2], si
jne 0x140b455ed
push rax
pushf
mov eax, 0xa1360882
pushf
not eax
add eax, 0x8ed5f0af
xor eax, 0xe228edc7
rol eax, 0x86
popf
pushf
not eax
add eax, 0x9b60e4a1
xor eax, 0xad8b69dd
rol eax, 0x4e
popf
jmp 0x140b452eb
push rax
pushf
mov eax, 0x7b56d480
pushf
not eax
add eax, 0x9fb54ed4
xor eax, 0x91d9fc38
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xca30c2b2
xor eax, 0xd9624c01
rol eax, 0x32
popf
jmp 0x140b452eb
lea rbp, [rbp + rax*2]
add rbp, 2
cmp word [rbp], si
jne 0x140b45675
push rax
pushf
mov eax, 0xdf0b1b5
pushf
not eax
add eax, 0x85481206
xor eax, 0xae690741
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xc5d9cdd4
xor eax, 0xadaab7c5
rol eax, 0xac
popf
pushf
not eax
add eax, 0xc3e62889
xor eax, 0xceddb82a
rol eax, 0xf0
popf
jmp 0x140b452eb
push rax
pushf
mov eax, 0xf59a7c72
pushf
not eax
add eax, 0xec906167
xor eax, 0xba8aa2f7
rol eax, 0x26
popf
pushf
not eax
add eax, 0xd144a820
xor eax, 0xb1732b4c
rol eax, 0x36
popf
jmp 0x140b452eb
mov qword [rsp + 0x38], rsi
sub rbp, rbx
mov qword [rsp + 0x30], rsi
add rbp, 2
sar rbp, 1
mov r8, rbx
mov r9d, ebp
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call fcn.140b52813
movsxd r14, eax
test eax, eax
jne 0x140b45734
push rax
pushf
mov eax, 0xf563ab03
pushf
not eax
add eax, 0xab83c64a
xor eax, 0xbba50950
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xa7be349f
xor eax, 0x8bf35b48
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xd6023153
xor eax, 0xb4fdadc3
rol eax, 0xac
popf
pushf
not eax
add eax, 0xc8048da8
xor eax, 0xdc5a4f62
rol eax, 0x23
popf
jmp 0x140b452eb
push rax
pushf
mov eax, 0xe11fc12b
pushf
not eax
add eax, 0xc818ff7c
xor eax, 0xfb096a8e
rol eax, 0xad
popf
pushf
not eax
add eax, 0xa496abad
xor eax, 0xb325e816
rol eax, 0x62
popf
pushf
not eax
add eax, 0x94b2a094
xor eax, 0xae9cb592
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xa63eab0e
xor eax, 0xd0d41b6a
rol eax, 0xfb
popf
jmp 0x140b452eb
mov rcx, rbx
jmp 0x140b45791
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x140b45473
mov rcx, r14
call fcn.140b30604
mov rdi, rax
test rax, rax
jne 0x140b45812
push rax
pushf
mov eax, 0xecea3777
pushf
not eax
add eax, 0xafd7789b
xor eax, 0x90dbc343
rol eax, 0x47
popf
pushf
not eax
add eax, 0xead460b8
xor eax, 0xcf933087
rol eax, 0x40
popf
jmp 0x140b452eb
push rax
pushf
mov eax, 0xc22a9f9e
pushf
not eax
add eax, 0xabdb1f6e
xor eax, 0xaed33149
rol eax, 0x17
popf
pushf
not eax
add eax, 0xcea7d6bb
xor eax, 0x8bac2513
rol eax, 0x8e
popf
jmp 0x140b452eb
xor ecx, ecx
call fcn.140b5046f
jmp 0x140b4578d
mov qword [rsp + 0x38], rsi
mov r9d, ebp
mov qword [rsp + 0x30], rsi
mov r8, rbx
mov dword [rsp + 0x28], r14d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call fcn.140b52813
test eax, eax
jne 0x140b45924
mov rcx, rdi
call fcn.140b5046f
jmp 0x140b45974
xor ecx, ecx
call fcn.140b5046f
mov rsi, rdi
push rax
pushf
mov eax, 0x75da5e76
pushf
not eax
add eax, 0x93012ac9
xor eax, 0xd8e83bc7
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xddfe2034
xor eax, 0x9bb05922
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xb339eaaf
xor eax, 0xf4d911a7
rol eax, 0x9e
popf
jmp 0x140b452eb
mov rcx, rbx
jmp 0x140b45978
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret