Function at 0x1401dcd28
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404d842d
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
bt bp, 0xfd
mov qword [rsp + 0x18], rsi
push rdi
bts bp, r9w
neg rbp
push r12
push r13
cmovns bp, cx
bt rbp, rbx
shr ebp, 0xfd
push r14
cmc
cmp si, r8w
push r15
btc r15, r13
sub rsp, 0x30
xadd r15w, bp
xor esi, esi
movsx r15, r14w
not bpl
mov ebp, edx
or r15b, r9b
mov r15, rcx
cmp eax, esi
test r14b, r15b
test rcx, rcx
jmp 0x1404d848d
jne 0x1404d84af
call fcn.1404b4780
mov dword [rax], 0x16
test r11b, r13b
or rax, 0xffffffffffffffff
jmp 0x1404d84aa
jmp 0x1404d8a1c
mov edx, 0x3d
mov rdi, r15
jmp 0x1404d84bc
call fcn.1401d7173
mov r13, rax
cmp sil, 0x37
test rax, rax
jmp 0x1404d84d0
je 0x1404d89ca
cmp rax, r15
jmp 0x1404d84de
je 0x1404d89ca
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
xchg r12b, r12b
jmp 0x1404d84fe
movzx r12d, word [rax + 2]
jmp 0x1404d8508
jne 0x1404d8531
mov rcx, r14
call fcn.1404d8aaa
mov r14, rax
rcl bh, 0x8f
bts bx, si
bsr ebx, esi
mov qword [0x1400ba2e8], rax
sbb rbx, 0x64df10b6
mov ebx, 1
stc
test r14, r14
jmp 0x1404d853f
jne 0x1404d8675
mov rax, qword [0x1400ba2e0]
test ebp, ebp
jmp 0x1404d8553
je 0x1404d85b4
test rax, rax
jmp 0x1404d8561
je 0x1404d85b4
call fcn.1404b499a
test rax, rax
jmp 0x1404d8574
je 0x1404d89ca
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
jmp 0x1404d858d
jne 0x1404d8667
mov rcx, r14
call fcn.1404d8aaa
mov r14, rax
jmp 0x1404d85a3
mov qword [0x1400ba2e8], rax
jmp 0x1404d85af
jmp 0x1404d8667
test r12w, r12w
jmp 0x1404d85bd
je 0x1404d89e4
test rax, rax
jmp 0x1404d85cb
jne 0x1404d862d
lea edx, [rax + 8]
xchg cl, cl
mov cl, r11b
mov rcx, rbx
call fcn.1404cc7e2
sub ecx, ecx
jmp 0x1404d85e8
mov qword [0x1400ba2e0], rax
jmp 0x1404d85f4
call fcn.1404c874f
cmp qword [0x1400ba2e0], rsi
jmp 0x1404d8605
jne 0x1404d8619
or rbp, 0xffffffffffffffff
jmp 0x1404d8614
jmp 0x1404d89f3
mov r14, qword [0x1400ba2e8]
cmp r8w, r11w
test r14, r14
jne 0x1404d8675
mov edx, 8
mov rcx, rbx
jmp 0x1404d863a
call fcn.1404cc7e2
xor ecx, ecx
jmp 0x1404d8646
mov qword [0x1400ba2e8], rax
jmp 0x1404d8652
call fcn.1404c874f
mov r14, qword [0x1400ba2e8]
test r11b, 0xa6
jmp 0x1404d8667
test r14, r14
jmp 0x1404d866f
je 0x1404d860b
mov rax, qword [r14]
bsf bx, r8w
sar bh, 0x2a
jmp 0x1404d8685
sub r13, r15
bts bx, r9w
sar r13, 1
test r8w, ax
btr ebx, ecx
mov rbx, r14
test r12, 0x1f91529f
stc
test rax, rax
je 0x1404d874f
mov r8, r13
cwd
movzx rcx, r9w
cdq
mov rdx, rax
movsx cx, sil
mov rcx, r15
jmp 0x1404d86c5
call fcn.1404e4ad2
test eax, eax
jmp 0x1404d86d1
jne 0x1404d871d
mov rax, qword [rbx]
and ch, 6
bt rcx, rsi
rcr cx, 0x2d
mov ecx, 0x3d
jmp 0x1404d86fd
cmp word [rax + r13*2], cx
jmp 0x1404d8707
je 0x1404d8737
cmp word [rax + r13*2], si
jmp 0x1404d8717
je 0x1404d8737
add rbx, 8
lahf
movsx rax, bp
mov ax, r13w
mov rax, qword [rbx]
jmp 0x1404d8732
jmp 0x1404d86a2
sub rbx, r14
cmc
test r11w, 0x5288
sar rbx, 3
jmp 0x1404d874a
jmp 0x1404d875d
sub rbx, r14
stc
clc
sar rbx, 3
neg rbx
clc
cmc
test rbx, rbx
jmp 0x1404d8765
js 0x1404d880f
cmp qword [r14], rsi
jmp 0x1404d8773
je 0x1404d880f
mov rcx, qword [r14 + rbx*8]
jmp 0x1404d8782
call fcn.1404c874f
test r12w, r12w
je 0x1404d87b0
mov qword [r14 + rbx*8], r15
jmp 0x1404d879a
jmp 0x1404d88bf
mov rax, qword [r14 + rbx*8 + 8]
mov qword [r14 + rbx*8], rax
jmp 0x1404d87ad
inc rbx
cmp qword [r14 + rbx*8], rsi
jmp 0x1404d87b9
jne 0x1404d879f
mov r8d, 8
mov rdx, rbx
movsx ecx, bx
xchg ch, cl
mov rcx, r14
jmp 0x1404d87d5
call fcn.1404d7e68
sub ecx, ecx
movsx ebx, dx
cmovge rbx, rsi
mov rbx, rax
jmp 0x1404d87eb
call fcn.1404c874f
test rbx, rbx
jmp 0x1404d87f8
je 0x1404d88c7
mov qword [0x1400ba2e8], rbx
jmp 0x1404d880a
jmp 0x1404d88c7
test r12w, r12w
jmp 0x1404d8818
je 0x1404d89fd
neg rbx
add dh, 0xfe
setae dl
movzx dx, spl
lea rdx, [rbx + 2]
cmp r10d, r14d
cmp rdx, rbx
jmp 0x1404d883b
jae 0x1404d884a
or rbp, 0xffffffffffffffff
jmp 0x1404d8a06
movabs rax, 0x1fffffffffffffff
test r8w, 0x2d9a
stc
clc
cmp rdx, rax
jmp 0x1404d8864
jae 0x1404d8841
mov r8d, 8
mov rcx, r14
jmp 0x1404d8878
call fcn.1404d7e68
xor ecx, ecx
mov r14b, r8b
movsx r14, dx
mov r14, rax
call fcn.1404c874f
test r14, r14
jmp 0x1404d8896
je 0x1404d8841
mov qword [r14 + rbx*8], r15
rol di, 0x28
shr dil, 0x31
movsx edi, r10w
mov qword [r14 + rbx*8 + 8], rsi
mov qword [0x1400ba2e8], r14
cmp r15b, 0x86
ror di, cl
mov rdi, rsi
jmp 0x1404d88c7
test ebp, ebp
jmp 0x1404d88ce
je 0x1404d8a12
or rbp, 0xffffffffffffffff
movsx r14w, r13b
movzx r14w, r9b
mov r14, rbp
inc r14
test r9, r8
cmp r10, 0x277212d2
cmp word [r15 + r14*2], si
jne 0x1404d88e5
mov edx, 2
movzx ecx, sp
cmovne rcx, r9
shr cl, 0x4b
add r14, rdx
cmovg ecx, r10d
movsx cx, spl
mov rcx, r14
jmp 0x1404d8920
call fcn.1404cc7e2
mov rbx, rax
cmc
test rax, rax
je 0x1404d89b8
mov r8, r15
not ch
seto dl
mov rdx, r14
not rcx
mov cl, r11b
mov rcx, rax
call fcn.1404c93d7
test eax, eax
jmp 0x1404d8952
jne 0x1404d8a77
neg r12w
movzx ax, r10b
not ch
lea rax, [r13 + 1]
movsx cx, dh
bswap cx
movzx cx, r9b
lea rax, [rbx + rax*2]
movsx rcx, ax
mov rcx, rbx
jmp 0x1404d8983
sbb rdx, rdx
jmp 0x1404d898e
mov word [rax - 2], si
test r13b, dl
and rdx, rax
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x1404d89a5
jne 0x1404d89b8
call fcn.1404b4780
mov esi, ebp
mov dword [rax], 0x2a
mov rcx, rbx
jmp 0x1404d89c0
call fcn.1404c874f
jmp 0x1404d8a12
call fcn.1404b4780
or rsi, 0xffffffffffffffff
jmp 0x1404d89d8
mov dword [rax], 0x16
movsx ecx, r9w
xchg ch, ch
mov ebp, esi
bswap cx
jmp 0x1404d89f3
mov esi, ebp
jmp 0x1404d89fd
mov ebp, esi
movsx si, r9b
not ch
mov esi, ebp
movsx rcx, r11w
movsx ecx, cx
mov cl, r12b
mov rcx, rdi
call fcn.1404c874f
mov eax, esi
mov rbx, qword [rsp + 0x60]
xchg r13b, r12b
sal di, 0x3b
mov rbp, qword [rsp + 0x68]
bts si, cx
sal r13, cl
rcl r13b, cl
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
movsx r12d, bp
setb r13b
pop r15
jmp 0x1404d8a53
pop r14
pop r13
mov r12, 0x79ea7cde
movsx edi, bp
cmovne rdi, r13
pop r12
jmp 0x1404d8a75
pop rdi
ret
sub r9d, r9d
cmc
jmp 0x1404d8a80
mov qword [rsp + 0x20], rsi
cmp dil, r10b
xor r8d, r8d
cmc
stc
xor edx, edx
cmc
jmp 0x1404d8a98
sub ecx, ecx
jmp 0x1404d8a9f
call fcn.1404b54ff
int3