Function at 0x140049ab7
Capabilities:
Authenticate hmac
Set environment variable

Disassembly:
push rax
pushf
mov eax, 0x69277002
pushf
not eax
add eax, 0xc2f7e858
xor eax, 0xb56dd605
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xb875f431
xor eax, 0xe9242580
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x9c691f04
xor eax, 0xea546185
rol eax, 6
popf
pushf
not eax
add eax, 0xacd21057
xor eax, 0xd30eaaa9
rol eax, 0x36
popf
cmp eax, 4
jne 0x140049b1a
popf
pop rax
jmp 0x140049f3f
cmp eax, 0
jne 0x140049b29
popf
pop rax
jmp 0x140049ccd
cmp eax, 3
jne 0x140049b38
popf
pop rax
jmp 0x140049f04
cmp eax, 1
jne 0x140049b47
popf
pop rax
jmp 0x140049e0e
cmp eax, 0xd
jne 0x140049b56
popf
pop rax
jmp 0x14004a384
cmp eax, 0x1a
jne 0x140049b65
popf
pop rax
jmp 0x14004a92b
cmp eax, 0xe
jne 0x140049b74
popf
pop rax
jmp 0x14004a403
cmp eax, 0xb
jne 0x140049b83
popf
pop rax
jmp 0x14004a266
cmp eax, 0x19
jne 0x140049b92
popf
pop rax
jmp 0x14004a899
cmp eax, 8
jne 0x140049ba1
popf
pop rax
jmp 0x14004a127
cmp eax, 0x1d
jne 0x140049bb0
popf
pop rax
jmp 0x14004aa5a
cmp eax, 0x17
jne 0x140049bbf
popf
pop rax
jmp 0x14004a7e2
cmp eax, 0x1c
jne 0x140049bce
popf
pop rax
jmp 0x14004aa1e
cmp eax, 0x12
jne 0x140049bdd
popf
pop rax
jmp 0x14004a56b
cmp eax, 0x18
jne 0x140049bec
popf
pop rax
jmp 0x14004a850
cmp eax, 0x11
jne 0x140049bfb
popf
pop rax
jmp 0x14004a507
cmp eax, 0x1b
jne 0x140049c0a
popf
pop rax
jmp 0x14004a979
cmp eax, 0x16
jne 0x140049c19
popf
pop rax
jmp 0x14004a73b
cmp eax, 0xa
jne 0x140049c28
popf
pop rax
jmp 0x14004a21d
cmp eax, 0x14
jne 0x140049c37
popf
pop rax
jmp 0x14004a6a1
cmp eax, 0xf
jne 0x140049c46
popf
pop rax
jmp 0x14004a46c
cmp eax, 0x13
jne 0x140049c55
popf
pop rax
jmp 0x14004a60f
cmp eax, 0x15
jne 0x140049c64
popf
pop rax
jmp 0x14004a6df
cmp eax, 2
jne 0x140049c73
popf
pop rax
jmp 0x140049ea0
cmp eax, 6
jne 0x140049c82
popf
pop rax
jmp 0x14004a066
cmp eax, 0xc
jne 0x140049c91
popf
pop rax
jmp 0x14004a30a
cmp eax, 7
jne 0x140049ca0
popf
pop rax
jmp 0x14004a0a4
cmp eax, 5
jne 0x140049caf
popf
pop rax
jmp 0x140049fe7
cmp eax, 9
jne 0x140049cbe
popf
pop rax
jmp 0x14004a1cc
cmp eax, 0x10
jne 0x140049ccd
popf
pop rax
jmp 0x14004a501
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
xor r15d, r15d
mov r14, rdx
mov rsi, rcx
mov qword [rbp + 0x17], r15
xor edx, edx
mov qword [rbp + 0x1f], r15
lea rcx, [rbp - 0x39]
mov qword [rbp + 0x27], r15
mov qword [rbp + 0x2f], r15
mov edi, r15d
mov qword [rbp + 0x37], r15
mov byte [rbp + 0x3f], r15b
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
mov byte [rbp + 0xf], r15b
call fcn.1400a8336
mov rax, qword [rbp - 0x31]
mov ebx, 0x9994cb4d
pushf
not ebx
add ebx, 0xb8716079
xor ebx, 0x838ce774
rol ebx, 0xd2
popf
pushf
not ebx
add ebx, 0x902f812c
xor ebx, 0xc3e276bc
rol ebx, 0x3f
popf
pushf
not ebx
add ebx, 0xbce21953
xor ebx, 0xc7a3b323
rol ebx, 0x4c
popf
pushf
not ebx
add ebx, 0xa008f63f
xor ebx, 0xe170538c
rol ebx, 0x20
popf
cmp dword [rax + 0xc], ebx
jne 0x140049ddb
push rax
pushf
mov eax, 0x882c6263
pushf
not eax
add eax, 0xc331445a
xor eax, 0xd7370979
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xfd6201e1
xor eax, 0xa8225db5
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xb004331f
xor eax, 0xb36849b5
rol eax, 0x4c
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0xde2c7c0f
pushf
not eax
add eax, 0xc39a1da6
xor eax, 0xa6b48807
rol eax, 0x50
popf
pushf
not eax
add eax, 0xc7045613
xor eax, 0x9c731239
rol eax, 0x6a
popf
jmp 0x140049b0b
cmp byte [rbp - 0x21], r15b
je 0x140049e5a
push rax
pushf
mov eax, 0x8d575176
pushf
not eax
add eax, 0xc05ab259
xor eax, 0xdc29791a
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xcca73cb4
xor eax, 0xaf05841d
rol eax, 0x81
popf
pushf
not eax
add eax, 0xeb3443a2
xor eax, 0xe78b48cf
rol eax, 0xac
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0xb55bc4e0
pushf
not eax
add eax, 0xc05fc1fb
xor eax, 0x8c4d7f11
rol eax, 0x74
popf
pushf
not eax
add eax, 0xe5f7283d
xor eax, 0xabec0317
rol eax, 0x17
popf
pushf
not eax
add eax, 0xf7fb1a2e
xor eax, 0xd643d0d5
rol eax, 0x93
popf
jmp 0x140049b0b
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x55ef340f
pushf
not eax
add eax, 0xf9623dac
xor eax, 0x93cef94f
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xc42d3b8c
xor eax, 0x90971b4f
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xdd91bcee
xor eax, 0x96718894
rol eax, 0x56
popf
pushf
not eax
add eax, 0xd97536a5
xor eax, 0xba8ba794
rol eax, 0x12
popf
jmp 0x140049b0b
mov r9d, ebx
jmp 0x14004a266
call fcn.1400b55e5
test eax, eax
jne 0x140049fa1
push rax
pushf
mov eax, 0x8b8e5f64
pushf
not eax
add eax, 0xa87b4075
xor eax, 0x83c693a8
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xead1311b
xor eax, 0x93ba92c0
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xbee5b70a
xor eax, 0xf3e7dd59
rol eax, 0x87
popf
pushf
not eax
add eax, 0xccdbc536
xor eax, 0xe964469c
rol eax, 0x66
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0x4bf73494
pushf
not eax
add eax, 0xb88d6ace
xor eax, 0xaf44577b
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xec5b8143
xor eax, 0xeaaa9055
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xd9f972cf
xor eax, 0xb67db408
rol eax, 0x58
popf
jmp 0x140049b0b
cmp byte [rbp - 0x21], r15b
je 0x14004a033
push rax
pushf
mov eax, 0xefea32c7
pushf
not eax
add eax, 0xebf526f1
xor eax, 0xc6b4de04
rol eax, 0x21
popf
pushf
not eax
add eax, 0x8ec3743e
xor eax, 0xa4508b5f
rol eax, 8
popf
pushf
not eax
add eax, 0x9cc92c55
xor eax, 0x85386f97
rol eax, 0x2f
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0xec59d6e7
pushf
not eax
add eax, 0xcf8ec832
xor eax, 0xd9ff7ce3
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xf75c26de
xor eax, 0xadf5ca70
rol eax, 0xec
popf
jmp 0x140049b0b
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xec9dbb36
pushf
not eax
add eax, 0x91e95c9f
xor eax, 0x912615ac
rol eax, 0xde
popf
pushf
not eax
add eax, 0xeddc54e1
xor eax, 0xe0c367af
rol eax, 0xb1
popf
jmp 0x140049b0b
mov r9d, 0x112b27b3
pushf
not r9d
add r9d, 0xf6f9749f
xor r9d, 0xd985de00
rol r9d, 0x4a
popf
pushf
not r9d
add r9d, 0xdc316f8f
xor r9d, 0xbde5c29d
rol r9d, 0x24
popf
jmp 0x14004a266
cmp byte [rbp - 0x21], r15b
je 0x14004a186
push rax
pushf
mov eax, 0x3daf4a56
pushf
not eax
add eax, 0x8ab8c311
xor eax, 0xcc709b66
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf7098775
xor eax, 0xf43a165b
rol eax, 0xee
popf
pushf
not eax
add eax, 0x89f48ca4
xor eax, 0x80e3a796
rol eax, 0x75
popf
pushf
not eax
add eax, 0xb85b2df9
xor eax, 0xddfcbfa5
rol eax, 0x50
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0x1add9010
pushf
not eax
add eax, 0xa8b5e339
xor eax, 0x9a86bee2
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xce80f898
xor eax, 0xff689d2f
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x8f472d32
xor eax, 0xba1e8f08
rol eax, 0x4f
popf
jmp 0x140049b0b
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xe24ae090
pushf
not eax
add eax, 0xbfa8574f
xor eax, 0xb0ddaabc
rol eax, 0x59
popf
pushf
not eax
add eax, 0xd8294894
xor eax, 0xf3b02f18
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x95fce2a2
xor eax, 0xaf609892
rol eax, 0x96
popf
jmp 0x140049b0b
mov r9d, r15d
push rax
pushf
mov eax, 0xa0c5f400
pushf
not eax
add eax, 0xafaaa43b
xor eax, 0xd0e980bd
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x826c74fe
xor eax, 0x8193e67c
rol eax, 0x45
popf
pushf
not eax
add eax, 0xd1a89a5f
xor eax, 0xd3d55727
rol eax, 0x32
popf
jmp 0x140049b0b
lea r8, [rbp + 0x77]
mov rcx, rsi
lea rdx, [rbp + 0x17]
call fcn.140065e2b
test eax, eax
jne 0x14004a2b1
push rax
pushf
mov eax, 0x1bc2f989
pushf
not eax
add eax, 0xbb80b698
xor eax, 0x864433c7
rol eax, 0x34
popf
pushf
not eax
add eax, 0x85a794cb
xor eax, 0x8115f532
rol eax, 7
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0xf5030367
pushf
not eax
add eax, 0x91d1ac3b
xor eax, 0xd92e9243
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x9913217c
xor eax, 0xb2e89d42
rol eax, 0x66
popf
pushf
not eax
add eax, 0xee34edfa
xor eax, 0xb919721f
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xc215533e
xor eax, 0xddc7420c
rol eax, 0xf9
popf
jmp 0x140049b0b
xor edx, edx
lea rcx, [rbp - 0x39]
call fcn.1400a8336
mov rax, qword [rbp - 0x31]
cmp dword [rax + 0xc], ebx
jne 0x14004a351
push rax
pushf
mov eax, 0xfa63db39
pushf
not eax
add eax, 0xd47a6152
xor eax, 0xa9a6fc25
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x98068b15
xor eax, 0xc62eed91
rol eax, 0xce
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0xb5f89742
pushf
not eax
add eax, 0x8fe75882
xor eax, 0xd54cf2a7
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xcbc6febc
xor eax, 0xc2f5e4ef
rol eax, 0x49
popf
jmp 0x140049b0b
cmp byte [rbp - 0x21], r15b
je 0x14004a3bd
push rax
pushf
mov eax, 0x4c7b0f4d
pushf
not eax
add eax, 0xfe1f24f3
xor eax, 0x99a945e0
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xe6407753
xor eax, 0xe59b75a8
rol eax, 0x26
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0x7e4c3aee
pushf
not eax
add eax, 0x95a306c7
xor eax, 0xd1793af2
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xc24dce63
xor eax, 0xaa199950
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xb8c39411
xor eax, 0xf8abcda6
rol eax, 0x56
popf
jmp 0x140049b0b
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x14004a73b
call fcn.1400b55e5
test eax, eax
jne 0x14004a4ce
push rax
pushf
mov eax, 0xad7b8670
pushf
not eax
add eax, 0x96dbdaf2
xor eax, 0xa910052b
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xb75aa3bd
xor eax, 0x808a2073
rol eax, 0x46
popf
pushf
not eax
add eax, 0x9ca067b2
xor eax, 0xbf04cac4
rol eax, 0x41
popf
pushf
not eax
add eax, 0x9d5b5583
xor eax, 0xeba4fc6e
rol eax, 0x8f
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0xf52452b0
pushf
not eax
add eax, 0xb70bee38
xor eax, 0xff95aea1
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xfa03b416
xor eax, 0x88dd75a3
rol eax, 0xa6
popf
jmp 0x140049b0b
cmp byte [rbp - 0x21], r15b
je 0x14004a56b
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x5739e683
pushf
not eax
add eax, 0xee9305a9
xor eax, 0xd31fba9f
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xb08b9a68
xor eax, 0xf7a28766
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x8aca5259
xor eax, 0xcbdd6e37
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xa5854cb3
xor eax, 0xabee6c62
rol eax, 0x7e
popf
jmp 0x140049b0b
mov ebx, 0xd5e67173
pushf
not ebx
add ebx, 0x8a10d4ec
xor ebx, 0xdbd762c7
rol ebx, 0xce
popf
pushf
not ebx
add ebx, 0xb348ff20
xor ebx, 0xe738749f
rol ebx, 0x85
popf
pushf
not ebx
add ebx, 0xd9a75571
xor ebx, 0xeb3472bd
rol ebx, 0x55
popf
pushf
not ebx
add ebx, 0xa3c1322d
xor ebx, 0xaa426927
rol ebx, 0xa8
popf
jmp 0x14004a73b
cmp byte [rbp - 0x21], r15b
je 0x14004a65b
push rax
pushf
mov eax, 0x67a2ae66
pushf
not eax
add eax, 0xc8fed71f
xor eax, 0xd3f35859
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xd260520c
xor eax, 0xacbcf573
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xaf391c27
xor eax, 0xa7298578
rol eax, 0x19
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0x929386b6
pushf
not eax
add eax, 0xdebfa8c0
xor eax, 0xeb750e55
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xbefc5bdf
xor eax, 0xeac5829e
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xbe9a011c
xor eax, 0xeec0b836
rol eax, 0xed
popf
jmp 0x140049b0b
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xe23e50e7
pushf
not eax
add eax, 0xc7138470
xor eax, 0xee3a1e58
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xc7c8de2b
xor eax, 0xfc567b6f
rol eax, 0x73
popf
jmp 0x140049b0b
mov ebx, r15d
push rax
pushf
mov eax, 0x530cc1ba
pushf
not eax
add eax, 0xef0ed5f6
xor eax, 0xd2c9049b
rol eax, 0x56
popf
pushf
not eax
add eax, 0x933558b8
xor eax, 0x964f38be
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x8d11edab
xor eax, 0xede7ef2b
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xebeee94f
xor eax, 0xf7013b47
rol eax, 0xbe
popf
jmp 0x140049b0b
mov r9d, ebx
lea r8, [rbp + 0x77]
lea rdx, [rbp - 0x19]
mov rcx, r14
call fcn.140065e2b
mov rdi, qword [rbp - 9]
test eax, eax
jne 0x14004a7af
push rax
pushf
mov eax, 0xc0e39c50
pushf
not eax
add eax, 0xfdf8a0fe
xor eax, 0x82d06b21
rol eax, 0x56
popf
pushf
not eax
add eax, 0x983d266b
xor eax, 0xa58335d1
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xc6deca7e
xor eax, 0xe87d169b
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xb948bc70
xor eax, 0x9f61e532
rol eax, 0x79
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0xe021c2d7
pushf
not eax
add eax, 0xb383730c
xor eax, 0xe287a2b0
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xd9d1cec9
xor eax, 0xc74d9cfa
rol eax, 0
popf
jmp 0x140049b0b
mov rcx, qword [rbp + 0x27]
mov rdx, rdi
jmp 0x14004a7ea
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ebx, eax
jmp 0x14004a899
mov ebx, r15d
push rax
pushf
mov eax, 0x14be5a9
pushf
not eax
add eax, 0xb1380d08
xor eax, 0xf7038ba8
rol eax, 0x26
popf
pushf
not eax
add eax, 0xe9d24a3f
xor eax, 0x90df56e9
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xc21f1ab2
xor eax, 0xa1807e4c
rol eax, 0x7d
popf
jmp 0x140049b0b
cmp byte [rbp + 0xf], r15b
je 0x14004a8d2
push rax
pushf
mov eax, 0x27cc0937
pushf
not eax
add eax, 0x926c71b9
xor eax, 0x804c4aec
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xbb952dfe
xor eax, 0xaa8e3887
rol eax, 0xd
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0x90713d43
pushf
not eax
add eax, 0x844d8322
xor eax, 0xf7bd76f1
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xcd41225f
xor eax, 0xadf1e0e0
rol eax, 0xff
popf
pushf
not eax
add eax, 0x9c3899b7
xor eax, 0x8fe16d82
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xd602321b
xor eax, 0xfa7c57f7
rol eax, 0x62
popf
jmp 0x140049b0b
mov rcx, rdi
call fcn.1400d5e22
push rax
pushf
mov eax, 0x1b904925
pushf
not eax
add eax, 0xc4979ae8
xor eax, 0xdaca4a9a
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xd2962382
xor eax, 0xc29c713f
rol eax, 0x29
popf
pushf
not eax
add eax, 0x9a38551e
xor eax, 0xe228f28b
rol eax, 0xb
popf
jmp 0x140049b0b
cmp byte [rbp + 0x3f], r15b
je 0x14004a9d8
push rax
pushf
mov eax, 0x47da8843
pushf
not eax
add eax, 0xdbce2cc7
xor eax, 0xe126fedb
rol eax, 0x67
popf
pushf
not eax
add eax, 0xba41cb76
xor eax, 0xf02007ca
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xb7cad49d
xor eax, 0xe2d9845b
rol eax, 0x23
popf
pushf
not eax
add eax, 0x8fcac83a
xor eax, 0x9c37004a
rol eax, 0x64
popf
jmp 0x140049b0b
push rax
pushf
mov eax, 0xb2a72613
pushf
not eax
add eax, 0x861cd5d5
xor eax, 0x9b2faa5f
rol eax, 0xef
popf
pushf
not eax
add eax, 0xed5fe789
xor eax, 0x90b8fc65
rol eax, 0x74
popf
pushf
not eax
add eax, 0xe46598a7
xor eax, 0xf1adf623
rol eax, 0x2c
popf
jmp 0x140049b0b
mov rcx, qword [rbp + 0x27]
call fcn.1400d5e22
push rax
pushf
mov eax, 0x62802ab1
pushf
not eax
add eax, 0xe0e8f0cb
xor eax, 0xc9374ab1
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xace5cbd6
xor eax, 0xbb50b3aa
rol eax, 0xba
popf
jmp 0x140049b0b
lea r11, [rsp + 0xa0]
mov eax, ebx
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret