Function at 0x1402493bd
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404daa55
mov qword [rsp + 8], rbx
cmp di, 0x3ed0
mov qword [rsp + 0x10], rbp
shl bp, 0xad
mov qword [rsp + 0x18], rsi
clc
bswap bp
mov bp, 0x6073
push rdi
setp bpl
test r12w, r8w
push r12
adc ebp, 0x17a75a56
push r13
push r14
push r15
clc
setnp r15b
btr rbp, r11
sub rsp, 0x30
xor esi, esi
movzx ebp, r10w
bts ebp, ebx
mov ebp, edx
mov r15b, 0x5d
rcr r15b, cl
mov r15, rcx
test rcx, rcx
jmp 0x1404daab5
jne 0x1404daae0
call fcn.1404b6d2b
mov dword [rax], 0x16
test r11w, 0x41cb
cmp r12w, 0x237a
or rax, 0xffffffffffffffff
jmp 0x1404daadb
jmp 0x1404daff8
mov edx, 0x3d
mov rdi, r15
jmp 0x1404daaed
call fcn.140237844
mov r13, rax
cmc
test rax, rax
jmp 0x1404daafe
je 0x1404dafaf
cmp rax, r15
je 0x1404dafaf
mov r14, qword [0x1400ba2e8]
bswap r12w
cmp r14, qword [0x1400ba2f0]
cmovb r12d, esp
movzx r12, r8w
bswap r12d
movzx r12d, word [rax + 2]
jmp 0x1404dab34
jne 0x1404dab54
mov rcx, r14
jmp 0x1404dab42
call fcn.1404db05f
mov r14, rax
rol bl, 0x7e
mov qword [0x1400ba2e8], rax
mov ebx, 1
test r14, r14
jmp 0x1404dab61
jne 0x1404dac91
mov rax, qword [0x1400ba2e0]
cmp r11w, r14w
test ebp, ebp
jmp 0x1404dab79
je 0x1404dabd5
test rax, rax
jmp 0x1404dab87
je 0x1404dabd5
call fcn.1404b6f53
test rax, rax
je 0x1404dafaf
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
jmp 0x1404dabae
jne 0x1404dac83
mov rcx, r14
jmp 0x1404dabbc
call fcn.1404db05f
mov r14, rax
mov qword [0x1400ba2e8], rax
jmp 0x1404dabd0
jmp 0x1404dac83
test r12w, r12w
jmp 0x1404dabde
je 0x1404dafc2
test rax, rax
jne 0x1404dac4b
lea edx, [rax + 8]
cmovnp ecx, edx
mov cl, r15b
mov rcx, rbx
jmp 0x1404dabfe
call fcn.1404cebfc
sub ecx, ecx
jmp 0x1404dac0a
mov qword [0x1400ba2e0], rax
jmp 0x1404dac16
call fcn.1404caa97
cmp qword [0x1400ba2e0], rsi
jmp 0x1404dac27
jne 0x1404dac36
or rbp, 0xffffffffffffffff
jmp 0x1404dafc8
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404dac45
jne 0x1404dac91
mov edx, 8
movsx ecx, r13w
not cl
mov rcx, rbx
jmp 0x1404dac5e
call fcn.1404cebfc
xor ecx, ecx
jmp 0x1404dac6a
mov qword [0x1400ba2e8], rax
jmp 0x1404dac76
call fcn.1404caa97
mov r14, qword [0x1400ba2e8]
stc
test r14, r14
jmp 0x1404dac8b
je 0x1404dac2d
mov rax, qword [r14]
movsx bx, spl
mov bl, 0x61
movzx rbx, bx
sub r13, r15
shr rbx, 0x67
sar r13, 1
xadd bh, bh
sbb bh, 0xfb
mov rbx, r14
test rax, rax
jmp 0x1404dacba
je 0x1404dad49
mov r8, r13
xchg dh, dh
mov rdx, rax
movsx ecx, r11w
mov rcx, r15
jmp 0x1404dacd4
call fcn.1404e6f02
test eax, eax
jne 0x1404dad1d
mov rax, qword [rbx]
adc ecx, 0x14f41092
shl cl, 0xd5
sbb cl, r12b
mov ecx, 0x3d
cmp sil, dl
cmp sp, 0x4a25
cmp word [rax + r13*2], cx
jmp 0x1404dad07
je 0x1404dad33
cmp word [rax + r13*2], si
jmp 0x1404dad17
je 0x1404dad33
add rbx, 8
movsx eax, di
nop
mov rax, qword [rbx]
jmp 0x1404dad2e
jmp 0x1404dacb2
sub rbx, r14
jmp 0x1404dad3b
sar rbx, 3
jmp 0x1404dad44
jmp 0x1404dad5e
sub rbx, r14
cmc
sar rbx, 3
neg rbx
cmp dx, 0x7b17
jmp 0x1404dad5e
test rbx, rbx
jmp 0x1404dad66
js 0x1404dae1c
cmp qword [r14], rsi
je 0x1404dae1c
mov rcx, qword [r14 + rbx*8]
jmp 0x1404dad7e
call fcn.1404caa97
test r12w, r12w
je 0x1404dadb2
mov qword [r14 + rbx*8], r15
jmp 0x1404dad96
jmp 0x1404daebd
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404dada5
mov qword [r14 + rbx*8], rax
jmp 0x1404dadae
inc rbx
stc
cmp qword [r14 + rbx*8], rsi
jmp 0x1404dadbb
jne 0x1404dad9b
mov r8d, 8
movsx ecx, r14w
movsxd rdx, r9d
not edx
mov rdx, rbx
seto cl
jmp 0x1404daddd
mov rcx, r14
jmp 0x1404dade5
call fcn.1404da40e
sub ecx, ecx
movzx rbx, dx
mov rbx, rax
jmp 0x1404dadf8
call fcn.1404caa97
test rbx, rbx
jmp 0x1404dae05
je 0x1404daec0
mov qword [0x1400ba2e8], rbx
jmp 0x1404dae17
jmp 0x1404daec0
test r12w, r12w
jmp 0x1404dae25
je 0x1404dafd2
neg rbx
lea rdx, [rbx + 2]
stc
cmp rdx, rbx
jmp 0x1404dae3b
jae 0x1404dae4f
or rbp, 0xffffffffffffffff
jmp 0x1404dae4a
jmp 0x1404dafdd
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jmp 0x1404dae61
jae 0x1404dae41
mov r8d, 8
bswap ecx
not ch
mov rcx, r14
jmp 0x1404dae79
call fcn.1404da40e
sub ecx, ecx
not r14b
movsx r14d, cx
mov r14, rax
jmp 0x1404dae8f
call fcn.1404caa97
test r14, r14
je 0x1404dae41
mov qword [r14 + rbx*8], r15
movsx di, r8b
and dil, 0x8f
bt di, ax
mov qword [r14 + rbx*8 + 8], rsi
mov qword [0x1400ba2e8], r14
and rdi, rbp
mov rdi, rsi
test ebp, ebp
jmp 0x1404daec7
je 0x1404dafe2
or rbp, 0xffffffffffffffff
mov r14, rbp
jmp 0x1404daed9
inc r14
test dil, spl
cmp word [r15 + r14*2], si
jne 0x1404daed9
mov edx, 2
bt rcx, r14
movsx rcx, r11w
add r14, rdx
setns cl
mov rcx, r14
jmp 0x1404daf05
call fcn.1404cebfc
mov rbx, rax
test edi, 0x76fa43ef
cmp ax, si
test rax, rax
jmp 0x1404daf1e
je 0x1404daf9d
mov r8, r15
movzx rdx, r9w
bswap dx
movzx dx, r10b
mov rdx, r14
bswap ecx
mov rcx, rax
jmp 0x1404daf40
call fcn.1404cb758
test eax, eax
jmp 0x1404daf4c
jne 0x1404db039
neg r12w
movzx rax, bp
lea rax, [r13 + 1]
jmp 0x1404daf63
lea rax, [rbx + rax*2]
cmove cx, r14w
mov rcx, rbx
sbb rdx, rdx
stc
mov word [rax - 2], si
and rdx, rax
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x1404daf9d
call fcn.1404b6d2b
mov esi, ebp
movsx rcx, r8w
mov dword [rax], 0x2a
movsx rcx, sp
mov rcx, rbx
jmp 0x1404dafa5
call fcn.1404caa97
jmp 0x1404dafe2
call fcn.1404b6d2b
or rsi, 0xffffffffffffffff
mov dword [rax], 0x16
cmove cx, dx
mov ebp, esi
movzx rsi, r13w
mov esi, ebp
movsx rcx, r15w
mov ebp, ecx
not cl
mov ebp, esi
movsx rcx, cx
cmovl cx, r9w
mov esi, ebp
not rcx
mov rcx, rdi
call fcn.1404caa97
mov eax, esi
mov bx, si
jmp 0x1404daff8
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
test ax, 0x1b6c
bsf r15w, r11w
rcl esi, cl
mov rsi, qword [rsp + 0x70]
bts r12w, bx
add rsp, 0x30
pop r15
not r12b
pop r14
pop r13
pop r12
movzx di, r10b
bswap di
movzx rdi, r11w
pop rdi
jmp 0x1404db038
ret
xor r9d, r9d
mov qword [rsp + 0x20], rsi
cmc
cmp ecx, 0x55dd290e
xor r8d, r8d
cmp r13b, r15b
stc
sub edx, edx
stc
xor ecx, ecx
call fcn.1404b7a4f
int3