Function at 0x1401064ac
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404dd668
mov qword [rsp + 8], rbx
test di, r8w
stc
mov qword [rsp + 0x10], rbp
mov bpl, 0x6a
mov qword [rsp + 0x18], rsi
ror rbp, cl
dec rbp
push rdi
xchg bpl, bpl
sal ebp, 0xbb
push r12
rcl bp, 0x3d
push r13
movsx ebp, bx
push r14
sal bp, 0x23
shrd bp, r14w, 0x9c
push r15
movsx ebp, cx
sub rsp, 0x30
dec bpl
sar bpl, 0xd5
sub esi, esi
test sp, 0xa97
mov ebp, edx
rcl r15b, 0x51
sar r15b, cl
mov r15, rcx
test rcx, rcx
jne 0x1404dd6ef
call fcn.1404b98a4
mov dword [rax], 0x16
stc
jmp 0x1404dd6e1
or rax, 0xffffffffffffffff
jmp 0x1404dd6ea
jmp 0x1404ddc35
mov edx, 0x3d
bswap di
cmovns di, r12w
mov rdi, r15
jmp 0x1404dd704
call fcn.1401d2dd0
mov r13, rax
cmc
clc
stc
test rax, rax
jmp 0x1404dd717
je 0x1404ddc02
cmp rax, r15
je 0x1404ddc02
mov r14, qword [0x1400ba2e8]
movsx r12d, cx
cmp r14, qword [0x1400ba2f0]
mov r12b, 0xe7
mov r12b, r10b
not r12w
movzx r12d, word [rax + 2]
jmp 0x1404dd74c
jne 0x1404dd76d
mov rcx, r14
call fcn.1404ddcab
mov r14, rax
mov qword [0x1400ba2e8], rax
sub bh, 2
sar rbx, 0xbd
ror ebx, cl
mov ebx, 1
cmc
test r14, r14
jmp 0x1404dd77b
jne 0x1404dd8bf
mov rax, qword [0x1400ba2e0]
test ebp, ebp
jmp 0x1404dd78f
je 0x1404dd7f8
test rax, rax
jmp 0x1404dd79d
je 0x1404dd7f8
call fcn.1404b9ab0
test rax, rax
je 0x1404ddc02
mov r14, qword [0x1400ba2e8]
cmp r9b, 0xce
test r10d, r10d
clc
cmp r14, qword [0x1400ba2f0]
jmp 0x1404dd7cc
jne 0x1404dd8b6
mov rcx, r14
jmp 0x1404dd7da
call fcn.1404ddcab
mov r14, rax
jmp 0x1404dd7e7
mov qword [0x1400ba2e8], rax
jmp 0x1404dd7f3
jmp 0x1404dd8b6
test r12w, r12w
je 0x1404ddc15
test rax, rax
jmp 0x1404dd80a
jne 0x1404dd873
lea edx, [rax + 8]
movsx ecx, r11w
mov cx, sp
mov rcx, rbx
jmp 0x1404dd822
call fcn.1404d1988
xor ecx, ecx
jmp 0x1404dd82e
mov qword [0x1400ba2e0], rax
jmp 0x1404dd83a
call fcn.1404cd7c2
cmp qword [0x1400ba2e0], rsi
jmp 0x1404dd84b
jne 0x1404dd85a
or rbp, 0xffffffffffffffff
jmp 0x1404ddc1d
mov r14, qword [0x1400ba2e8]
test rbp, r14
cmc
test r14, r14
jmp 0x1404dd86d
jne 0x1404dd8bf
mov edx, 8
setnp ch
cmovno ecx, r15d
mov ecx, r12d
mov rcx, rbx
jmp 0x1404dd88a
call fcn.1404d1988
xor ecx, ecx
jmp 0x1404dd896
mov qword [0x1400ba2e8], rax
jmp 0x1404dd8a2
call fcn.1404cd7c2
mov r14, qword [0x1400ba2e8]
cmp dil, 0x74
stc
cmp ecx, r15d
test r14, r14
je 0x1404dd851
mov rax, qword [r14]
adc ebx, 0x18d4e51
sub r13, r15
xadd bl, bl
sar r13, 1
shld ebx, r12d, 0xac
ror rbx, 0x1b
bswap bx
mov rbx, r14
test rax, rax
jmp 0x1404dd8e8
je 0x1404dd975
mov r8, r13
movsxd rdx, r9d
mov rdx, rax
movsx ecx, si
bswap cx
mov rcx, r15
jmp 0x1404dd905
call fcn.1404e9a2e
test eax, eax
jmp 0x1404dd911
jne 0x1404dd945
mov rax, qword [rbx]
rcl rcx, cl
or cl, dh
mov ecx, 0x3d
stc
cmp word [rax + r13*2], cx
jmp 0x1404dd92f
je 0x1404dd95f
cmp word [rax + r13*2], si
jmp 0x1404dd93f
je 0x1404dd95f
add rbx, 8
cbw
mov rax, r15
movzx rax, bp
mov rax, qword [rbx]
jmp 0x1404dd95a
jmp 0x1404dd8e0
sub rbx, r14
cmp cx, 0x1282
sar rbx, 3
jmp 0x1404dd970
jmp 0x1404dd980
sub rbx, r14
stc
sar rbx, 3
neg rbx
test rbx, rbx
jmp 0x1404dd988
js 0x1404dda3e
cmp qword [r14], rsi
je 0x1404dda3e
mov rcx, qword [r14 + rbx*8]
jmp 0x1404dd9a0
call fcn.1404cd7c2
test r12w, r12w
jmp 0x1404dd9ae
je 0x1404dd9d3
mov qword [r14 + rbx*8], r15
jmp 0x1404dd9bd
jmp 0x1404ddaff
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404dd9cc
mov qword [r14 + rbx*8], rax
inc rbx
cmp qword [r14 + rbx*8], rsi
jmp 0x1404dd9dc
jne 0x1404dd9c2
mov r8d, 8
movzx rcx, r13w
seta dh
not cl
mov rdx, rbx
movsxd rcx, esi
mov rcx, r14
jmp 0x1404dd9ff
call fcn.1404dd082
xor ecx, ecx
mov bl, sil
movzx rbx, di
jmp 0x1404dda12
mov rbx, rax
jmp 0x1404dda1a
call fcn.1404cd7c2
test rbx, rbx
jmp 0x1404dda27
je 0x1404ddb02
mov qword [0x1400ba2e8], rbx
jmp 0x1404dda39
jmp 0x1404ddb02
test r12w, r12w
jmp 0x1404dda47
je 0x1404ddc22
neg rbx
shr dh, 0xd7
not dx
adc dl, sil
lea rdx, [rbx + 2]
cmp bpl, 0x27
cmp rdx, rbx
jae 0x1404dda78
or rbp, 0xffffffffffffffff
jmp 0x1404dda73
jmp 0x1404ddc24
movabs rax, 0x1fffffffffffffff
cmp rbx, r13
cmp rdx, rax
jmp 0x1404dda8d
jae 0x1404dda6a
mov r8d, 8
movsx rcx, r9w
mov rcx, r14
jmp 0x1404ddaa5
call fcn.1404dd082
xor ecx, ecx
movsxd r14, ecx
movzx r14, bx
jmp 0x1404ddab8
mov r14, rax
jmp 0x1404ddac0
call fcn.1404cd7c2
test r14, r14
jmp 0x1404ddacd
je 0x1404dda6a
mov qword [r14 + rbx*8], r15
setbe dil
btr di, 0x1b
mov qword [r14 + rbx*8 + 8], rsi
sar rdi, 0x43
btr rdi, rcx
and dil, sil
mov qword [0x1400ba2e8], r14
sub dil, 0xe5
movzx rdi, ax
mov rdi, rsi
test ebp, ebp
jmp 0x1404ddb09
je 0x1404ddc26
or rbp, 0xffffffffffffffff
setp r14b
movsx r14d, sp
mov r14, rbp
inc r14
cmc
cmp word [r15 + r14*2], si
jne 0x1404ddb1e
mov edx, 2
add r14, rdx
movzx ecx, sp
mov cx, 0x2814
cmovno cx, bp
mov rcx, r14
jmp 0x1404ddb48
call fcn.1404d1988
mov rbx, rax
test r14b, 0x92
test rax, rax
jmp 0x1404ddb5c
je 0x1404ddbf5
mov r8, r15
movsxd rdx, r12d
movzx cx, r11b
mov edx, edx
mov rdx, r14
mov rcx, rax
jmp 0x1404ddb7a
call fcn.1404ce49c
test eax, eax
jmp 0x1404ddb86
jne 0x1404ddc7d
neg r12w
lea rax, [r13 + 1]
mov ecx, 0x10db4434
inc ecx
lea rax, [rbx + rax*2]
movzx rcx, ax
inc cl
movsxd rcx, esi
mov rcx, rbx
jmp 0x1404ddbb0
sbb rdx, rdx
cmc
test r10d, 0x52076492
mov word [rax - 2], si
cmp bx, 0x141f
cmp r12d, r11d
and rdx, rax
jmp 0x1404ddbcf
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x1404ddbf5
call fcn.1404b98a4
mov esi, ebp
mov dword [rax], 0x2a
movzx cx, r15b
bswap rcx
setne cl
mov rcx, rbx
call fcn.1404cd7c2
jmp 0x1404ddc26
call fcn.1404b98a4
or rsi, 0xffffffffffffffff
movsx ebp, r13w
mov dword [rax], 0x16
mov ebp, esi
not sil
movzx esi, di
mov esi, ebp
movzx ecx, dx
mov ebp, esi
mov esi, ebp
mov rcx, rdi
jmp 0x1404ddc2e
call fcn.1404cd7c2
mov eax, esi
mov rbx, qword [rsp + 0x60]
bts r13w, bx
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
movzx rdi, r15w
add r13w, 0x4582
add rsp, 0x30
movzx di, bpl
movzx rdi, r9w
pop r15
pop r14
movzx r12d, r12w
pop r13
xchg dil, dil
pop r12
cmovb rdi, r9
not dil
pop rdi
jmp 0x1404ddc7c
ret
xor r9d, r9d
cmc
mov qword [rsp + 0x20], rsi
jmp 0x1404ddc8c
xor r8d, r8d
test r9b, 0x85
cmc
xor edx, edx
test dil, r8b
sub ecx, ecx
jmp 0x1404ddca0
call fcn.1404ba609
int3