Function at 0x14025eacc
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404dd6e1
mov qword [rsp + 8], rbx
clc
test r8w, r8w
cmc
mov qword [rsp + 0x10], rbp
rcl bpl, cl
neg ebp
xor bpl, al
mov qword [rsp + 0x18], rsi
movzx rbp, dx
push rdi
shr bpl, cl
sub bpl, r12b
push r12
and bpl, r9b
movzx bp, r10b
dec bpl
push r13
rcl bp, cl
neg bpl
and bpl, 0x17
push r14
push r15
sub rsp, 0x30
btr ebp, 0xe3
sub esi, esi
dec bpl
mov bpl, 0x63
rcr bpl, cl
mov ebp, edx
movzx r15w, cl
sar r15b, cl
mov r15, rcx
test rcx, rcx
jne 0x1404dd768
call fcn.1404b95c8
mov dword [rax], 0x16
or rax, 0xffffffffffffffff
jmp 0x1404dd763
jmp 0x1404ddc9b
mov edx, 0x3d
movsxd rdi, esp
jmp 0x1404dd775
mov rdi, r15
call fcn.140256cbc
mov r13, rax
jmp 0x1404dd78a
test rax, rax
jmp 0x1404dd792
je 0x1404ddc55
cmp rax, r15
je 0x1404ddc55
mov r14, qword [0x1400ba2e8]
not r12b
cmp r14, qword [0x1400ba2f0]
mov r12b, r12b
not r12d
movzx r12w, dl
movzx r12d, word [rax + 2]
jmp 0x1404dd7c7
jne 0x1404dd7ec
mov rcx, r14
jmp 0x1404dd7d5
call fcn.1404ddd1c
mov r14, rax
mov qword [0x1400ba2e8], rax
bsr ebx, r8d
dec bl
rcl ebx, cl
mov ebx, 1
cmp ax, 0x3394
jmp 0x1404dd7fa
test r14, r14
jne 0x1404dd940
mov rax, qword [0x1400ba2e0]
cmc
cmp r13b, 0x4a
test spl, 0xc
test ebp, ebp
jmp 0x1404dd81a
je 0x1404dd87b
test rax, rax
jmp 0x1404dd828
je 0x1404dd87b
call fcn.1404b97eb
test rax, rax
jmp 0x1404dd83b
je 0x1404ddc55
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
jmp 0x1404dd854
jne 0x1404dd932
mov rcx, r14
call fcn.1404ddd1c
mov r14, rax
jmp 0x1404dd86a
mov qword [0x1400ba2e8], rax
jmp 0x1404dd876
jmp 0x1404dd932
test r12w, r12w
jmp 0x1404dd884
je 0x1404ddc75
test rax, rax
jmp 0x1404dd892
jne 0x1404dd8fd
lea edx, [rax + 8]
setp cl
mov rcx, rbx
jmp 0x1404dd8a6
call fcn.1404d188b
xor ecx, ecx
jmp 0x1404dd8b2
mov qword [0x1400ba2e0], rax
jmp 0x1404dd8be
call fcn.1404cd66f
cmp qword [0x1400ba2e0], rsi
jmp 0x1404dd8cf
jne 0x1404dd8e3
or rbp, 0xffffffffffffffff
jmp 0x1404dd8de
jmp 0x1404ddc7b
mov r14, qword [0x1400ba2e8]
cmp sp, 0x2ff4
jmp 0x1404dd8f4
test r14, r14
jne 0x1404dd940
mov edx, 8
movsx ecx, r9w
sets ch
mov rcx, rbx
jmp 0x1404dd911
call fcn.1404d188b
xor ecx, ecx
jmp 0x1404dd91d
mov qword [0x1400ba2e8], rax
call fcn.1404cd66f
mov r14, qword [0x1400ba2e8]
cmc
clc
test r14, r14
jmp 0x1404dd93a
je 0x1404dd8d5
mov rax, qword [r14]
add ebx, ecx
sbb rbx, 0x25aa49ab
rol ebx, cl
sub r13, r15
xadd bh, bl
sar r13, 1
test dl, 0x82
mov rbx, r14
stc
test rax, rax
jmp 0x1404dd966
je 0x1404dd9d7
mov r8, r13
cqo
movzx rcx, r11w
mov cl, r9b
mov rdx, rax
movzx ecx, bx
mov rcx, r15
jmp 0x1404dd986
call fcn.1404e9b90
test eax, eax
jmp 0x1404dd992
jne 0x1404dd9ba
mov rax, qword [rbx]
mov ecx, 0x3d
test ax, r10w
cmp word [rax + r13*2], cx
je 0x1404dd9cb
cmp word [rax + r13*2], si
je 0x1404dd9cb
add rbx, 8
mov rax, qword [rbx]
jmp 0x1404dd9c6
jmp 0x1404dd95e
sub rbx, r14
sar rbx, 3
jmp 0x1404dd9ee
sub rbx, r14
cmp dx, 0x52f0
jmp 0x1404dd9e4
sar rbx, 3
neg rbx
cmp r9, rdi
test rbx, rbx
js 0x1404dda91
cmp qword [r14], rsi
jmp 0x1404dd9ff
je 0x1404dda91
mov rcx, qword [r14 + rbx*8]
call fcn.1404cd66f
test r12w, r12w
je 0x1404dda3a
mov qword [r14 + rbx*8], r15
jmp 0x1404dda21
jmp 0x1404ddb47
mov rax, qword [r14 + rbx*8 + 8]
mov qword [r14 + rbx*8], rax
jmp 0x1404dda34
inc rbx
test r8b, sil
cmp qword [r14 + rbx*8], rsi
jmp 0x1404dda43
jne 0x1404dda26
mov r8d, 8
sets dh
not ch
mov rdx, rbx
movsx rcx, sp
not cl
mov rcx, r14
jmp 0x1404dda65
call fcn.1404dd145
sub ecx, ecx
bswap rbx
mov rbx, rax
jmp 0x1404dda77
call fcn.1404cd66f
test rbx, rbx
je 0x1404ddb4a
mov qword [0x1400ba2e8], rbx
jmp 0x1404ddb4a
test r12w, r12w
jmp 0x1404dda9a
je 0x1404ddc81
neg rbx
mov dh, 0x49
lea rdx, [rbx + 2]
cmp rdx, rbx
jmp 0x1404ddab2
jae 0x1404ddac6
or rbp, 0xffffffffffffffff
jmp 0x1404ddac1
jmp 0x1404ddc8a
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jmp 0x1404ddad8
jae 0x1404ddab8
mov r8d, 8
mov rcx, 0x396a5e33
not cx
mov rcx, r14
jmp 0x1404ddaf6
call fcn.1404dd145
xor ecx, ecx
cmovnp r14w, r14w
mov r14b, 6
movsx r14w, r11b
mov r14, rax
call fcn.1404cd66f
test r14, r14
jmp 0x1404ddb1a
je 0x1404ddab8
mov qword [r14 + rbx*8], r15
ror edi, cl
sub di, 0x953
mov qword [r14 + rbx*8 + 8], rsi
and rdi, rdi
setno dil
bt di, 0x31
mov qword [0x1400ba2e8], r14
movsx rdi, dx
mov rdi, rsi
test ebp, ebp
jmp 0x1404ddb51
je 0x1404ddc8c
or rbp, 0xffffffffffffffff
setp r14b
movzx r14, r8w
movsx r14, di
mov r14, rbp
jmp 0x1404ddb6f
inc r14
test rsp, rax
cmp word [r15 + r14*2], si
jmp 0x1404ddb7f
jne 0x1404ddb6f
mov edx, 2
add r14, rdx
mov rcx, r14
jmp 0x1404ddb95
call fcn.1404d188b
mov rbx, rax
test si, 0x6d1c
stc
test r9d, r10d
test rax, rax
jmp 0x1404ddbae
je 0x1404ddc48
mov r8, r15
bswap dx
mov rdx, r14
cmove cx, r15w
mov rcx, rax
jmp 0x1404ddbca
call fcn.1404ce380
test eax, eax
jmp 0x1404ddbd6
jne 0x1404ddcf1
neg r12w
jmp 0x1404ddbe5
lea rax, [r13 + 1]
movzx rcx, bx
xchg ch, cl
dec cl
lea rax, [rbx + rax*2]
mov ch, 0xc5
jmp 0x1404ddbff
mov rcx, rbx
jmp 0x1404ddc07
sbb rdx, rdx
cmp r11w, sp
test cx, 0x2c44
cmp ebx, 0x6a204932
mov word [rax - 2], si
test eax, 0x29ab6728
test r8d, ebp
and rdx, rax
jmp 0x1404ddc2d
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x1404ddc48
call fcn.1404b95c8
mov esi, ebp
mov dword [rax], 0x2a
mov rcx, rbx
call fcn.1404cd66f
jmp 0x1404ddc8c
call fcn.1404b95c8
or rsi, 0xffffffffffffffff
mov bpl, spl
movsx ebp, r9w
mov dword [rax], 0x16
not bp
xchg bp, bp
movzx ebp, r13w
mov ebp, esi
sets sil
mov esi, ebp
cmovae bp, ax
mov ebp, esi
movzx rsi, cx
xchg sil, sil
mov esi, ebp
mov rcx, rdi
jmp 0x1404ddc94
call fcn.1404cd66f
mov eax, esi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
btr rdi, 0xd1
mov rsi, qword [rsp + 0x70]
xor r13, 0x3ef9226c
or r14b, r14b
add rsp, 0x30
pop r15
cmovne r12w, sp
mov r13w, bp
movzx di, r13b
pop r14
mov r12b, sil
pop r13
movsx edi, r13w
movsx rdi, r14w
mov dil, r8b
pop r12
jmp 0x1404ddcea
pop rdi
jmp 0x1404ddcf0
ret
sub r9d, r9d
cmc
jmp 0x1404ddcfa
mov qword [rsp + 0x20], rsi
xor r8d, r8d
clc
stc
cmp r8b, 0x89
sub edx, edx
xor ecx, ecx
jmp 0x1404ddd11
call fcn.1404ba334
int3