Function at 0x14011bd68
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404d4d05
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
movzx ebp, r14w
movzx rbp, dx
and bpl, r14b
mov qword [rsp + 0x18], rsi
ror rbp, cl
mov bp, 0x1f4e
add ebp, edx
push rdi
or bpl, 0x5d
movzx rbp, r9w
bt bp, 0x4d
push r12
shr bp, 0x97
movsxd rbp, edi
push r13
push r14
shl bpl, 0x97
push r15
mov r15b, al
shl bp, 0x81
sub rsp, 0x30
cmovle bp, bp
sub esi, esi
not bpl
ror bp, 0x60
mov ebp, edx
mov r15, rcx
test r13b, r12b
test rcx, rcx
jmp 0x1404d4d71
jne 0x1404d4d96
call fcn.1404b1162
mov dword [rax], 0x16
cmp r14w, 0x6cea
or rax, 0xffffffffffffffff
jmp 0x1404d4d91
jmp 0x1404d529d
mov edx, 0x3d
movzx rdi, dx
mov rdi, r15
jmp 0x1404d4da7
call fcn.14021ede9
mov r13, rax
jmp 0x1404d4db7
test rax, rax
jmp 0x1404d4dbf
je 0x1404d5265
cmp rax, r15
jmp 0x1404d4dcd
je 0x1404d5265
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
bswap r12w
mov r12w, r10w
movzx r12d, word [rax + 2]
jne 0x1404d4e0b
mov rcx, r14
jmp 0x1404d4dfc
call fcn.1404d5310
mov r14, rax
mov qword [0x1400ba2e8], rax
mov ebx, 1
cmp dx, 0x5cf
test rcx, 0x64df790e
test r14, r14
jmp 0x1404d4e24
jne 0x1404d4f4c
mov rax, qword [0x1400ba2e0]
test r12w, r8w
clc
test ebp, ebp
jmp 0x1404d4e3d
je 0x1404d4e9f
test rax, rax
jmp 0x1404d4e4b
je 0x1404d4e9f
call fcn.1404b1374
test rax, rax
je 0x1404d5265
mov r14, qword [0x1400ba2e8]
stc
cmp r14, qword [0x1400ba2f0]
jmp 0x1404d4e73
jne 0x1404d4f3e
mov rcx, r14
jmp 0x1404d4e81
call fcn.1404d5310
mov r14, rax
jmp 0x1404d4e8e
mov qword [0x1400ba2e8], rax
jmp 0x1404d4e9a
jmp 0x1404d4f3e
test r12w, r12w
je 0x1404d527e
test rax, rax
jmp 0x1404d4eb1
jne 0x1404d4f17
lea edx, [rax + 8]
bswap rcx
mov rcx, rbx
jmp 0x1404d4ec5
call fcn.1404c9167
xor ecx, ecx
jmp 0x1404d4ed1
mov qword [0x1400ba2e0], rax
jmp 0x1404d4edd
call fcn.1404c5041
cmp qword [0x1400ba2e0], rsi
jmp 0x1404d4eee
jne 0x1404d4f02
or rbp, 0xffffffffffffffff
jmp 0x1404d4efd
jmp 0x1404d5280
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404d4f11
jne 0x1404d4f4c
mov edx, 8
mov rcx, rbx
call fcn.1404c9167
sub ecx, ecx
mov qword [0x1400ba2e8], rax
jmp 0x1404d4f32
call fcn.1404c5041
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404d4f46
je 0x1404d4ef4
mov rax, qword [r14]
bt rbx, 0x27
sar bl, 0xe5
sub r13, r15
xor bl, r12b
sar r13, 1
cmp edx, 0x2b4f7c66
shld rbx, r8, 0xf0
and bx, r12w
mov rbx, r14
stc
test rax, rax
jmp 0x1404d4f7b
je 0x1404d5005
mov r8, r13
not dx
cwd
movzx ecx, r15w
mov rdx, rax
mov cl, r8b
movzx rcx, cx
setg ch
mov rcx, r15
jmp 0x1404d4fa2
call fcn.1404e1183
test eax, eax
jmp 0x1404d4fae
jne 0x1404d4fe4
mov rax, qword [rbx]
add cl, spl
rcr ch, cl
or cl, dl
mov ecx, 0x3d
clc
cmp word [rax + r13*2], cx
jmp 0x1404d4fce
je 0x1404d4ff9
cmp word [rax + r13*2], si
jmp 0x1404d4fde
je 0x1404d4ff9
add rbx, 8
cmovnp eax, r12d
mov rax, qword [rbx]
jmp 0x1404d4ff4
jmp 0x1404d4f73
sub rbx, r14
sar rbx, 3
jmp 0x1404d501b
sub rbx, r14
test r11, 0x67cd3f69
jmp 0x1404d5014
sar rbx, 3
neg rbx
test rbx, rbx
jmp 0x1404d5023
js 0x1404d50db
cmp qword [r14], rsi
jmp 0x1404d5031
je 0x1404d50db
mov rcx, qword [r14 + rbx*8]
jmp 0x1404d5040
call fcn.1404c5041
test r12w, r12w
jmp 0x1404d504e
je 0x1404d507f
mov qword [r14 + rbx*8], r15
jmp 0x1404d505d
jmp 0x1404d517d
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404d506c
mov qword [r14 + rbx*8], rax
jmp 0x1404d5075
inc rbx
cmp ebp, 0x210f4828
clc
cmp qword [r14 + rbx*8], rsi
jmp 0x1404d5088
jne 0x1404d5062
mov r8d, 8
mov rdx, rbx
setg ch
movzx rcx, r15w
movsx ecx, bx
mov rcx, r14
call fcn.1404d476b
sub ecx, ecx
mov ebx, esi
movsx ebx, r10w
bswap bx
mov rbx, rax
jmp 0x1404d50bc
call fcn.1404c5041
test rbx, rbx
je 0x1404d5184
mov qword [0x1400ba2e8], rbx
jmp 0x1404d50d6
jmp 0x1404d5184
test r12w, r12w
jmp 0x1404d50e4
je 0x1404d5289
neg rbx
lea rdx, [rbx + 2]
test r13b, r12b
cmp cx, bx
cmp rdx, rbx
jmp 0x1404d50ff
jae 0x1404d5113
or rbp, 0xffffffffffffffff
jmp 0x1404d510e
jmp 0x1404d528e
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jmp 0x1404d5125
jae 0x1404d5105
mov r8d, 8
movsx ecx, r13w
mov rcx, r14
call fcn.1404d476b
xor ecx, ecx
bswap r14d
mov r14w, 0x2441
mov r14, rax
jmp 0x1404d514f
call fcn.1404c5041
test r14, r14
jmp 0x1404d515c
je 0x1404d5105
mov qword [r14 + rbx*8], r15
mov qword [r14 + rbx*8 + 8], rsi
xor di, r8w
movsx edi, bp
and dil, 0x43
mov qword [0x1400ba2e8], r14
mov rdi, rsi
test r12, r14
cmc
test ebp, ebp
jmp 0x1404d518b
je 0x1404d5293
or rbp, 0xffffffffffffffff
mov r14b, cl
movsx r14w, r8b
bswap r14
mov r14, rbp
jmp 0x1404d51a8
inc r14
cmp word [r15 + r14*2], si
jmp 0x1404d51b5
jne 0x1404d51a8
mov edx, 2
add r14, rdx
mov rcx, r14
jmp 0x1404d51cb
call fcn.1404c9167
mov rbx, rax
stc
cmc
test rax, rax
jmp 0x1404d51dd
je 0x1404d5253
mov r8, r15
cdq
mov rdx, r14
cmovo cx, bx
mov rcx, rax
jmp 0x1404d51f6
call fcn.1404c5cd3
test eax, eax
jmp 0x1404d5202
jne 0x1404d52d4
neg r12w
lea rax, [r13 + 1]
lea rax, [rbx + rax*2]
mov rcx, rbx
jmp 0x1404d521c
sbb rdx, rdx
cmp sil, 0x4c
jmp 0x1404d5229
mov word [rax - 2], si
clc
and rdx, rax
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x1404d5253
call fcn.1404b1162
mov esi, ebp
mov dword [rax], 0x2a
xchg rcx, rcx
movzx rcx, r9w
mov rcx, rbx
jmp 0x1404d525b
call fcn.1404c5041
jmp 0x1404d5293
call fcn.1404b1162
or rsi, 0xffffffffffffffff
not ch
mov dword [rax], 0x16
jmp 0x1404d527e
mov ebp, esi
mov esi, ebp
movsx ecx, r13w
movsxd rcx, edi
mov ebp, esi
bswap cx
mov esi, ebp
movsxd rcx, r14d
mov rcx, rdi
call fcn.1404c5041
mov eax, esi
mov rbx, qword [rsp + 0x60]
clc
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
shl r12d, cl
add rsp, 0x30
pop r15
movzx r12, ax
xchg dil, dil
cmovns r13d, r9d
pop r14
mov r13b, r12b
movsx r13w, r8b
pop r13
movsxd rdi, esp
pop r12
pop rdi
ret
sub r9d, r9d
clc
jmp 0x1404d52dd
mov qword [rsp + 0x20], rsi
cmp r13b, al
sub r8d, r8d
test r15d, 0x7ba31ce5
sub edx, edx
cmp r12d, edi
cmp bh, 0xb3
test rdx, 0x55f271e
sub ecx, ecx
jmp 0x1404d5305
call fcn.1404b1ee6
int3