Function at 0x14018f294
Capabilities:
Set environment variable

Disassembly:
jmp 0x14048e35a
mov qword [rsp + 8], rbx
stc
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
and bpl, r15b
rcl bp, cl
push rdi
push r12
push r13
inc bpl
bt ebp, r12d
push r14
shrd bp, r12w, 8
add bp, 0x53bc
bts bp, r10w
push r15
sar bpl, 0xa
sub rsp, 0x30
stc
or bpl, 0xcc
xadd r15b, bpl
xor esi, esi
ror bpl, cl
mov ebp, edx
mov r15, rcx
cmc
stc
cmp r12, rdi
test rcx, rcx
jmp 0x14048e3b8
jne 0x14048e3e2
call fcn.14046b6b3
mov dword [rax], 0x16
test r9d, 0x21f450d3
test r10w, r14w
or rax, 0xffffffffffffffff
jmp 0x14048e3dd
jmp 0x14048e909
mov edx, 0x3d
mov rdi, r15
jmp 0x14048e3ef
call fcn.1400f2b2d
mov r13, rax
test r11b, 0xc0
test rax, rax
jmp 0x14048e403
je 0x14048e8c8
cmp rax, r15
je 0x14048e8c8
mov r14, qword [0x1400b9448]
cmp r14, qword [0x1400b9450]
movzx r12d, word [rax + 2]
jmp 0x14048e42a
jne 0x14048e455
mov rcx, r14
call fcn.14048e97e
mov r14, rax
xchg ebx, ebx
cmp r15d, r12d
bts rbx, rbx
mov qword [0x1400b9448], rax
test si, r12w
or bl, r10b
sub ebx, r14d
mov ebx, 1
test r9b, 0xd8
stc
test r14, r14
jmp 0x14048e467
jne 0x14048e5b0
mov rax, qword [0x1400b9440]
test ecx, edi
jmp 0x14048e481
test ebp, ebp
je 0x14048e4f2
test rax, rax
jmp 0x14048e491
je 0x14048e4f2
call fcn.14046b8b3
test rax, rax
jmp 0x14048e4a4
je 0x14048e8c8
mov r14, qword [0x1400b9448]
cmp bpl, 0xc5
jmp 0x14048e4ba
cmp r14, qword [0x1400b9450]
jmp 0x14048e4c6
jne 0x14048e5a2
mov rcx, r14
jmp 0x14048e4d4
call fcn.14048e97e
mov r14, rax
jmp 0x14048e4e1
mov qword [0x1400b9448], rax
jmp 0x14048e4ed
jmp 0x14048e5a2
test r12w, r12w
jmp 0x14048e4fb
je 0x14048e8e2
test rax, rax
jmp 0x14048e509
jne 0x14048e569
lea edx, [rax + 8]
movzx ecx, r13w
mov rcx, rbx
jmp 0x14048e51e
call fcn.1404826b0
xor ecx, ecx
mov qword [0x1400b9440], rax
jmp 0x14048e531
call fcn.14047e5e7
cmp qword [0x1400b9440], rsi
jmp 0x14048e542
jne 0x14048e556
or rbp, 0xffffffffffffffff
jmp 0x14048e551
jmp 0x14048e8e4
mov r14, qword [0x1400b9448]
test r13d, r13d
test r14, r14
jne 0x14048e5b0
mov edx, 8
movzx ecx, dx
movsx ecx, r14w
mov cx, r11w
mov rcx, rbx
jmp 0x14048e581
call fcn.1404826b0
sub ecx, ecx
jmp 0x14048e58d
mov qword [0x1400b9448], rax
call fcn.14047e5e7
mov r14, qword [0x1400b9448]
stc
cmc
test r14, r14
jmp 0x14048e5aa
je 0x14048e548
mov rax, qword [r14]
sub r13, r15
btr bx, 0xff
test r10d, 0x7d7973e1
rol ebx, cl
sar r13, 1
dec bh
neg rbx
mov rbx, r14
clc
stc
test esi, 0x12a96024
test rax, rax
jmp 0x14048e5df
je 0x14048e66a
mov r8, r13
bswap ecx
jmp 0x14048e5f1
mov rdx, rax
mov ch, dl
not cx
setne cl
mov rcx, r15
jmp 0x14048e604
call fcn.14049a69c
test eax, eax
jne 0x14048e644
mov rax, qword [rbx]
btc cx, 0x9d
movsx rcx, r13w
mov ecx, 0x3d
cmc
stc
cmp word [rax + r13*2], cx
jmp 0x14048e62e
je 0x14048e655
cmp word [rax + r13*2], si
jmp 0x14048e63e
je 0x14048e655
add rbx, 8
mov rax, qword [rbx]
jmp 0x14048e650
jmp 0x14048e5d7
sub rbx, r14
clc
test r9b, r11b
sar rbx, 3
jmp 0x14048e665
jmp 0x14048e677
sub rbx, r14
test r13, r9
sar rbx, 3
neg rbx
test rbx, rbx
jmp 0x14048e67f
js 0x14048e72f
cmp qword [r14], rsi
jmp 0x14048e68d
je 0x14048e72f
mov rcx, qword [r14 + rbx*8]
call fcn.14047e5e7
test r12w, r12w
jmp 0x14048e6a5
je 0x14048e6c5
mov qword [r14 + rbx*8], r15
jmp 0x14048e6b4
jmp 0x14048e7c1
mov rax, qword [r14 + rbx*8 + 8]
mov qword [r14 + rbx*8], rax
inc rbx
cmp qword [r14 + rbx*8], rsi
jmp 0x14048e6ce
jne 0x14048e6b9
mov r8d, 8
movsx edx, bp
bswap rcx
cdq
mov rdx, rbx
mov ecx, 0x7c445e39
setge ch
cmovl cx, sp
mov rcx, r14
jmp 0x14048e6f8
call fcn.14048dd5e
sub ecx, ecx
movzx ebx, r8w
movsx bx, sil
mov rbx, rax
jmp 0x14048e710
call fcn.14047e5e7
test rbx, rbx
je 0x14048e7c4
mov qword [0x1400b9448], rbx
jmp 0x14048e72a
jmp 0x14048e7c4
test r12w, r12w
jmp 0x14048e738
je 0x14048e8f3
neg rbx
cqo
lea rdx, [rbx + 2]
test cl, 0x57
cmp rdx, rbx
jae 0x14048e761
or rbp, 0xffffffffffffffff
jmp 0x14048e75c
jmp 0x14048e8f5
movabs rax, 0x1fffffffffffffff
test bl, 0x85
cmp rdx, rax
jmp 0x14048e776
jae 0x14048e753
mov r8d, 8
movzx rcx, r14w
mov rcx, r14
jmp 0x14048e78e
call fcn.14048dd5e
xor ecx, ecx
mov r14b, 0x5e
mov r14, rax
call fcn.14047e5e7
test r14, r14
jmp 0x14048e7a8
je 0x14048e753
mov qword [r14 + rbx*8], r15
movsxd rdi, ebp
mov qword [r14 + rbx*8 + 8], rsi
mov qword [0x1400b9448], r14
mov rdi, rsi
test ebp, ebp
jmp 0x14048e7cb
je 0x14048e8fa
or rbp, 0xffffffffffffffff
dec r14w
movsx r14w, al
mov r14, rbp
jmp 0x14048e7e6
inc r14
stc
test r13w, 0x10ba
cmp word [r15 + r14*2], si
jmp 0x14048e7fa
jne 0x14048e7e6
mov edx, 2
add r14, rdx
mov rcx, r14
jmp 0x14048e810
call fcn.1404826b0
mov rbx, rax
test bpl, al
test rax, rax
jmp 0x14048e823
je 0x14048e8b6
mov r8, r15
mov rdx, r14
mov rcx, rax
jmp 0x14048e837
call fcn.14047f2e1
test eax, eax
jmp 0x14048e843
jne 0x14048e94f
neg r12w
dec ax
inc rcx
lea rax, [r13 + 1]
lea rax, [rbx + rax*2]
mov ecx, 0x28ea0ad4
movzx rcx, si
movsx rcx, sp
mov rcx, rbx
jmp 0x14048e870
sbb rdx, rdx
test ebp, 0x35544352
test r12b, spl
stc
mov word [rax - 2], si
cmc
clc
and rdx, rax
jmp 0x14048e88b
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x14048e898
jne 0x14048e8b6
call fcn.14046b6b3
mov esi, ebp
mov dword [rax], 0x2a
movzx cx, r11b
movsxd rcx, r14d
mov cl, dil
mov rcx, rbx
jmp 0x14048e8be
call fcn.14047e5e7
jmp 0x14048e8fa
call fcn.14046b6b3
or rsi, 0xffffffffffffffff
mov dword [rax], 0x16
setbe bpl
movzx cx, ch
mov cl, r13b
mov ebp, esi
mov esi, ebp
movsx bp, bl
cmova bp, r11w
movzx rcx, bx
mov ebp, esi
mov esi, ebp
mov cx, bp
mov rcx, rdi
jmp 0x14048e902
call fcn.14047e5e7
mov eax, esi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
rol r13b, 0x46
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
xchg r13w, di
movzx r15, si
pop r15
movsx di, dil
mov r13w, 0x2024
pop r14
not r12b
bswap r12w
setae r13b
pop r13
pop r12
movzx edi, si
pop rdi
jmp 0x14048e94e
ret
sub r9d, r9d
test sp, 0x7ec7
mov qword [rsp + 0x20], rsi
cmp r12b, 0xa7
xor r8d, r8d
jmp 0x14048e968
sub edx, edx
cmp edx, ebx
xor ecx, ecx
jmp 0x14048e973
call fcn.14046c3bb
int3