Function at 0x14022b000
Capabilities:
Query environment variable

Disassembly:
push rbp
push rdi
lea rbp, [rsp - 0x1c8]
sub rsp, 0x2c8
mov rax, qword [0x1404a3f78]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
xor edi, edi
lea rdx, [rbp - 0x70]
mov r9d, edi
lea r10, str.__t_e_m_p______a_p_p_d_a_t_a_____
xor cl, cl
mov eax, edi
nop word [rax + rax]
movzx r8d, byte [rax + r10]
cmp r8b, 0x25
jne 0x14022b057
test cl, cl
jne 0x14022b0f3
mov cl, 1
jmp 0x14022b064
test cl, cl
je 0x14022b064
inc r9d
mov byte [rdx], r8b
inc rdx
inc rax
cmp byte [rax + r10], dil
jne 0x14022b040
test r9d, r9d
jle 0x14022b089
mov r8d, 0x104
lea rdx, [rbp + 0xa0]
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor edx, edx
mov qword [rsp + 0x2e0], rbx
lea ecx, [rdx + 0xc]
call fcn.140234460
mov edx, 8
lea rcx, [rsp + 0x38]
call fcn.140233000
cmp eax, 1
je 0x14022b10c
lea rdx, str.Error_generating_random_key.
lea rcx, [0x140523f60]
call fcn.14022b6d0
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.14022c000
movzx edx, al
mov rcx, rbx
call fcn.14022be50
mov rcx, rbx
call fcn.14022bcf0
mov eax, 1
jmp 0x14022b588
movsxd rax, r9d
cmp rax, 0x104
jae 0x14022b5a9
mov byte [rbp + rax - 0x70], dil
jmp 0x14022b06d
mov eax, dword [0x14046f718]
lea rdx, str.Original_Text:
movups xmm0, xmmword [str.This_is_a_message_for_DES_encryption.]
mov dword [rsp + 0x60], eax
movups xmm1, xmmword [0x14046f708]
movzx eax, word [0x14046f71c]
mov qword [rsp + 0x2f0], r12
lea r12, [0x140523dc0]
mov rcx, r12
mov word [rsp + 0x64], ax
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm1
call fcn.14022b6d0
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14022b6d0
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.14022c000
movzx edx, al
mov rcx, rbx
call fcn.14022be50
mov rcx, rbx
call fcn.14022bcf0
call fcn.14022ed40
mov rbx, rax
test rax, rax
je 0x14022b3f3
mov qword [rsp + 0x2e8], rsi
call fcn.140235520
mov rdx, rax
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x38]
xor r8d, r8d
mov rcx, rbx
call fcn.140230020
cmp eax, 1
jne 0x14022b3e3
mov rcx, rbx
call fcn.140231680
add eax, 0x25
mov ecx, eax
mov rax, 0xffffffffffffffff
cmovb rcx, rax
call fcn.1403a4844
mov rsi, rax
test rax, rax
je 0x14022b3e3
lea r9, [rsp + 0x40]
mov dword [rsp + 0x34], edi
lea r8, [rsp + 0x34]
mov dword [rsp + 0x20], 0x25
mov rdx, rax
mov rcx, rbx
call fcn.140230060
cmp eax, 1
jne 0x14022b3d1
movsxd rdx, dword [rsp + 0x34]
lea r8, [rsp + 0x30]
add rdx, rsi
mov dword [rsp + 0x30], edi
mov rcx, rbx
call fcn.14022fdd0
cmp eax, 1
jne 0x14022b3d1
mov qword [rsp + 0x2f8], r14
mov rcx, rbx
mov qword [rsp + 0x2c0], r15
call fcn.14022ecc0
mov r15d, dword [rsp + 0x30]
lea rdx, str.Encrypted_Data__Hex_:
add r15d, dword [rsp + 0x34]
mov rcx, r12
call fcn.14022b6d0
movsxd r14, r15d
test r15d, r15d
jle 0x14022b298
mov rbx, rdi
nop dword [rax]
movzx edx, byte [rsi + rbx]
lea rcx, str._02x
call fcn.14022a240
inc rbx
cmp rbx, r14
jl 0x14022b280
mov rax, qword [0x140523dc0]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
add rcx, r12
call fcn.14022c000
movzx edx, al
mov rcx, r12
call fcn.14022be50
mov rcx, r12
call fcn.14022bcf0
call fcn.14022ed40
mov rbx, rax
test rax, rax
je 0x14022b3b7
call fcn.140235520
mov rdx, rax
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x38]
xor r8d, r8d
mov rcx, rbx
call fcn.14022f9b0
cmp eax, 1
jne 0x14022b3af
mov rcx, r14
call fcn.1403a4844
mov r14, rax
test rax, rax
je 0x14022b3af
mov r9, rsi
mov dword [rsp + 0x30], edi
lea r8, [rsp + 0x30]
mov dword [rsp + 0x20], r15d
mov rdx, rax
mov rcx, rbx
call fcn.14022f9e0
cmp eax, 1
jne 0x14022b39d
movsxd rdx, dword [rsp + 0x30]
lea r8, [rsp + 0x34]
add rdx, r14
mov dword [rsp + 0x34], edi
mov rcx, rbx
call fcn.14022f610
cmp eax, 1
jne 0x14022b39d
mov rcx, rbx
call fcn.14022ecc0
lea rdx, str.Decrypted_Text:
mov rcx, r12
call fcn.14022b6d0
mov rdx, r14
mov rcx, rax
call fcn.14022b6d0
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.14022c000
movzx edx, al
mov rcx, rbx
call fcn.14022be50
mov rcx, rbx
call fcn.14022bcf0
mov rcx, r14
call fcn.1403a4414
jmp 0x14022b3b7
mov rcx, rbx
call fcn.14022ecc0
mov rcx, r14
call fcn.1403a4414
jmp 0x14022b3b7
mov rcx, rbx
call fcn.14022ecc0
mov rcx, rsi
call fcn.1403a4414
mov r15, qword [rsp + 0x2c0]
mov r14, qword [rsp + 0x2f8]
jmp 0x14022b3eb
mov rcx, rbx
call fcn.14022ecc0
mov rcx, rsi
call fcn.1403a4414
jmp 0x14022b3eb
mov rcx, rbx
call fcn.14022ecc0
mov rsi, qword [rsp + 0x2e8]
lea r8, [rsp + 0x68]
mov edx, reloc.WS2_32.dll_select
lea rcx, str.This_is_a_message.
call fcn.140232ea0
lea rcx, str.SHA_1_Hash:
call fcn.14022a240
mov r12, qword [rsp + 0x2f0]
mov rbx, rdi
movzx edx, byte [rsp + rbx + 0x68]
lea rcx, str._02x
call fcn.14022a240
inc rbx
cmp rbx, 0x14
jl 0x14022b420
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.14022a240
lea r8, [rsp + 0x68]
mov edx, reloc.WS2_32.dll_select
lea rcx, str.This_is_a_message.
call fcn.140232f00
lea rcx, str.SHA_256_Hash:
call fcn.14022a240
nop dword [rax + rax]
movzx edx, byte [rsp + rdi + 0x68]
lea rcx, str._02x
call fcn.14022a240
inc rdi
cmp rdi, 0x20
jl 0x14022b470
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.14022a240
lea r8, [0x14046f780]
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, str.String_IS___AND__WorkId0_
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, [0x140474780]
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, str.d_inside_a_transaction
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, [0x140479780]
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, [0x14047bf80]
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, [0x14047e780]
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, [0x140480f80]
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, [0x140483780]
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
lea r8, [0x140485f80]
mov edx, 0x19000
lea rcx, [0x140525550]
call fcn.1403a43b4
xor eax, eax
mov rbx, qword [rsp + 0x2e0]
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.1403980c0
add rsp, 0x2c8
pop rdi
pop rbp
ret
call fcn.1403981f0
int3