Function at 0x1401090d1
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404dc827
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
movzx bp, dl
bsf bp, r9w
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
and bpl, r10b
cmovbe bp, bx
btc rbp, r13
push r14
cmc
push r15
bsf ebp, r12d
not r15b
sub rsp, 0x30
rcl r15b, cl
rol bpl, 0x1f
sub esi, esi
sar bp, 0x3d
mov ebp, edx
mov r15, rcx
clc
cmc
test rcx, rcx
jmp 0x1404dc87b
jne 0x1404dc89d
call fcn.1404b8b59
mov dword [rax], 0x16
test r15b, r13b
or rax, 0xffffffffffffffff
jmp 0x1404dc898
jmp 0x1404dcdc5
mov edx, 0x3d
movzx di, r13b
mov rdi, r15
jmp 0x1404dc8af
call fcn.14024b8d1
mov r13, rax
test rax, rax
jmp 0x1404dc8bf
je 0x1404dcd7d
cmp rax, r15
jmp 0x1404dc8cd
je 0x1404dcd7d
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
mov r12w, r15w
movsx r12w, r9b
movzx r12d, word [rax + 2]
jmp 0x1404dc8f4
jne 0x1404dc91e
mov rcx, r14
jmp 0x1404dc902
call fcn.1404dce2b
mov r14, rax
shl ebx, 0xb9
movzx bx, r10b
jmp 0x1404dc917
mov qword [0x1400ba2e8], rax
mov ebx, 1
stc
test r10, rsp
test r14, r14
jmp 0x1404dc92f
jne 0x1404dca5d
mov rax, qword [0x1400ba2e0]
test ebp, ebp
jmp 0x1404dc943
je 0x1404dc99f
test rax, rax
je 0x1404dc99f
call fcn.1404b8d58
test rax, rax
jmp 0x1404dc95f
je 0x1404dcd7d
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
jne 0x1404dca4f
mov rcx, r14
jmp 0x1404dc981
call fcn.1404dce2b
mov r14, rax
jmp 0x1404dc98e
mov qword [0x1400ba2e8], rax
jmp 0x1404dc99a
jmp 0x1404dca4f
test r12w, r12w
je 0x1404dcd9e
test rax, rax
jmp 0x1404dc9b1
jne 0x1404dca17
lea edx, [rax + 8]
movsx ecx, r8w
movsxd rcx, r13d
mov rcx, rbx
jmp 0x1404dc9c9
call fcn.1404d0b2a
xor ecx, ecx
jmp 0x1404dc9d5
mov qword [0x1400ba2e0], rax
jmp 0x1404dc9e1
call fcn.1404cc9fa
cmp qword [0x1400ba2e0], rsi
jmp 0x1404dc9f2
jne 0x1404dca06
or rbp, 0xffffffffffffffff
jmp 0x1404dca01
jmp 0x1404dcda0
mov r14, qword [0x1400ba2e8]
stc
test r14, r14
jne 0x1404dca5d
mov edx, 8
movsx rcx, r14w
movsx cx, r10b
xchg ch, cl
mov rcx, rbx
jmp 0x1404dca2f
call fcn.1404d0b2a
sub ecx, ecx
jmp 0x1404dca3b
mov qword [0x1400ba2e8], rax
call fcn.1404cc9fa
mov r14, qword [0x1400ba2e8]
cmc
test r14, r14
jmp 0x1404dca57
je 0x1404dc9f8
mov rax, qword [r14]
sub r13, r15
bts bx, sp
jmp 0x1404dca6f
sar r13, 1
mov rbx, r14
clc
cmp sil, 0x8d
test rax, rax
jmp 0x1404dca82
je 0x1404dcb06
mov r8, r13
setle cl
cdq
mov rdx, rax
bswap ecx
mov rcx, r15
jmp 0x1404dca9c
call fcn.1404e8e0c
test eax, eax
jmp 0x1404dcaa8
jne 0x1404dcae0
mov rax, qword [rbx]
rcr cl, cl
sal cl, 0x15
mov ecx, 0x3d
test sp, 0x722a
cmp word [rax + r13*2], cx
jmp 0x1404dcaca
je 0x1404dcaf4
cmp word [rax + r13*2], si
jmp 0x1404dcada
je 0x1404dcaf4
add rbx, 8
mov eax, r11d
mov rax, qword [rbx]
jmp 0x1404dcaef
jmp 0x1404dca7a
sub rbx, r14
stc
sar rbx, 3
jmp 0x1404dcb01
jmp 0x1404dcb1a
sub rbx, r14
cmp dil, 0xb0
clc
test r11b, 0x24
sar rbx, 3
stc
neg rbx
test rbx, rbx
js 0x1404dcbde
cmp qword [r14], rsi
jmp 0x1404dcb2b
je 0x1404dcbde
mov rcx, qword [r14 + rbx*8]
jmp 0x1404dcb3a
call fcn.1404cc9fa
test r12w, r12w
jmp 0x1404dcb48
je 0x1404dcb77
mov qword [r14 + rbx*8], r15
jmp 0x1404dcb57
jmp 0x1404dcc7d
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404dcb66
mov qword [r14 + rbx*8], rax
jmp 0x1404dcb6f
inc rbx
cmp r13w, bx
clc
cmp qword [r14 + rbx*8], rsi
jmp 0x1404dcb80
jne 0x1404dcb5c
mov r8d, 8
jmp 0x1404dcb96
mov rdx, rbx
movsxd rcx, r9d
mov rcx, r14
jmp 0x1404dcba4
call fcn.1404dc271
sub ecx, ecx
mov bx, 0x1468
movzx bx, bh
movzx ebx, r11w
mov rbx, rax
jmp 0x1404dcbbf
call fcn.1404cc9fa
test rbx, rbx
jmp 0x1404dcbcc
je 0x1404dcc84
mov qword [0x1400ba2e8], rbx
jmp 0x1404dcc84
test r12w, r12w
jmp 0x1404dcbe7
je 0x1404dcda2
neg rbx
add dx, sp
lea rdx, [rbx + 2]
cmp rdx, rbx
jmp 0x1404dcbff
jae 0x1404dcc13
or rbp, 0xffffffffffffffff
jmp 0x1404dcc0e
jmp 0x1404dcda4
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jmp 0x1404dcc25
jae 0x1404dcc05
mov r8d, 8
mov rcx, r14
call fcn.1404dc271
xor ecx, ecx
movsxd r14, r13d
movsx r14w, r10b
mov r14, rax
call fcn.1404cc9fa
test r14, r14
je 0x1404dcc05
mov qword [r14 + rbx*8], r15
mov qword [r14 + rbx*8 + 8], rsi
bsf di, r12w
sar dil, 0xa6
btc edi, r8d
mov qword [0x1400ba2e8], r14
movsx di, r12b
neg di
rol di, 0x5a
mov rdi, rsi
test r12, r14
clc
test ebp, ebp
jmp 0x1404dcc8b
je 0x1404dcdb1
or rbp, 0xffffffffffffffff
mov r14b, 0x4a
movsxd r14, r10d
jmp 0x1404dcca0
mov r14, rbp
jmp 0x1404dcca8
inc r14
test r11b, r11b
cmp cl, r14b
cmc
cmp word [r15 + r14*2], si
jne 0x1404dcca8
mov edx, 2
sar ch, cl
mov cx, 0xfdf
add r14, rdx
mov rcx, r14
jmp 0x1404dccd3
call fcn.1404d0b2a
mov rbx, rax
stc
jmp 0x1404dcce1
test rax, rax
jmp 0x1404dcce9
je 0x1404dcd70
mov r8, r15
mov rdx, r14
setle ch
mov rcx, rax
jmp 0x1404dcd00
call fcn.1404cd684
test eax, eax
jmp 0x1404dcd0c
jne 0x1404dce08
neg r12w
lea rax, [r13 + 1]
movzx cx, r14b
lea rax, [rbx + rax*2]
movsx cx, ah
not ecx
mov rcx, rbx
jmp 0x1404dcd31
sbb rdx, rdx
cmp r13b, 0x4b
test r12b, r14b
cmp r9w, di
mov word [rax - 2], si
and rdx, rax
jmp 0x1404dcd4b
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x1404dcd58
jne 0x1404dcd70
call fcn.1404b8b59
mov esi, ebp
setns cl
not cl
mov dword [rax], 0x2a
mov rcx, rbx
call fcn.1404cc9fa
jmp 0x1404dcdb1
call fcn.1404b8b59
or rsi, 0xffffffffffffffff
mov cx, r12w
movsx rcx, r14w
mov dword [rax], 0x16
bswap bp
not cx
movzx rcx, r14w
mov ebp, esi
mov esi, ebp
mov ebp, esi
mov esi, ebp
movsx cx, bpl
mov cx, r15w
xchg cl, ch
mov rcx, rdi
jmp 0x1404dcdb9
call fcn.1404cc9fa
mov eax, esi
bt r12w, dx
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
xadd r15b, sil
adc r13b, 0x52
mov rsi, qword [rsp + 0x70]
xor r13d, 0x44230358
bt r15d, r13d
sub dil, r8b
add rsp, 0x30
cmovae edi, edi
pop r15
movzx r12d, bx
jmp 0x1404dcdfc
pop r14
pop r13
pop r12
seta dil
pop rdi
ret
xor r9d, r9d
mov qword [rsp + 0x20], rsi
jmp 0x1404dce15
sub r8d, r8d
stc
clc
sub edx, edx
cmc
clc
sub ecx, ecx
call fcn.1404b98b7
int3