Function at 0x140203c79
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404d3185
mov qword [rsp + 8], rbx
cmc
test r11b, 0x5c
cmp sil, 0x23
mov qword [rsp + 0x10], rbp
sar bpl, cl
cmp r8b, cl
mov qword [rsp + 0x18], rsi
or bpl, dil
sar bpl, cl
push rdi
bsf rbp, rbx
push r12
shr bp, cl
push r13
push r14
push r15
rcl r15b, 0x8b
xadd ebp, r15d
sal r15b, 0xc
sub rsp, 0x30
shr r15w, cl
rcl r15w, 0xd5
jmp 0x1404d31d7
xor esi, esi
add bpl, spl
mov ebp, edx
sar r15b, cl
cmp dl, r12b
mov r15, rcx
test rcx, rcx
jmp 0x1404d31ef
jne 0x1404d3214
call fcn.1404aeff3
mov dword [rax], 0x16
cmp r11w, 0x7529
or rax, 0xffffffffffffffff
jmp 0x1404d320f
jmp 0x1404d3748
mov edx, 0x3d
movzx edi, bx
not di
mov rdi, r15
jmp 0x1404d3227
call fcn.140286d64
mov r13, rax
jmp 0x1404d3234
test rax, rax
jmp 0x1404d323c
je 0x1404d370b
cmp rax, r15
jmp 0x1404d324a
je 0x1404d370b
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
movzx r12, sp
movzx r12d, ax
setl r12b
movzx r12d, word [rax + 2]
jmp 0x1404d3274
jne 0x1404d3291
mov rcx, r14
jmp 0x1404d3282
call fcn.1404d37c4
mov r14, rax
mov qword [0x1400ba2e8], rax
mov ebx, 1
stc
test r14, r14
jmp 0x1404d329f
jne 0x1404d33f1
mov rax, qword [0x1400ba2e0]
jmp 0x1404d32b5
test ebp, ebp
jmp 0x1404d32bc
je 0x1404d3323
test rax, rax
jmp 0x1404d32ca
je 0x1404d3323
call fcn.1404af1f9
test rax, rax
jmp 0x1404d32dd
je 0x1404d370b
mov r14, qword [0x1400ba2e8]
stc
cmp r14, qword [0x1400ba2f0]
jmp 0x1404d32f7
jne 0x1404d33e3
mov rcx, r14
jmp 0x1404d3305
call fcn.1404d37c4
mov r14, rax
jmp 0x1404d3312
mov qword [0x1400ba2e8], rax
jmp 0x1404d331e
jmp 0x1404d33e3
test r12w, r12w
jmp 0x1404d332c
je 0x1404d3722
test rax, rax
jmp 0x1404d333a
jne 0x1404d33a7
lea edx, [rax + 8]
cmovbe cx, r10w
movsx ecx, bx
movsx cx, dh
mov rcx, rbx
jmp 0x1404d3357
call fcn.1404c71c2
xor ecx, ecx
jmp 0x1404d3363
mov qword [0x1400ba2e0], rax
jmp 0x1404d336f
call fcn.1404c3032
cmp qword [0x1400ba2e0], rsi
jmp 0x1404d3380
jne 0x1404d3394
or rbp, 0xffffffffffffffff
jmp 0x1404d338f
jmp 0x1404d3724
mov r14, qword [0x1400ba2e8]
cmp dil, r12b
test r14, r14
jne 0x1404d33f1
mov edx, 8
cmovbe rcx, r13
not cx
movzx cx, al
mov rcx, rbx
jmp 0x1404d33bf
call fcn.1404c71c2
xor ecx, ecx
jmp 0x1404d33cb
mov qword [0x1400ba2e8], rax
jmp 0x1404d33d7
call fcn.1404c3032
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404d33eb
je 0x1404d3386
mov rax, qword [r14]
add ebx, 0x8565502
sub r13, r15
cmp bh, 0xa
shr bh, cl
btr bx, 0xe6
sar r13, 1
or rbx, r15
sbb bx, 0x55a2
inc bl
mov rbx, r14
test rax, rax
jmp 0x1404d341f
je 0x1404d349f
mov r8, r13
setno dl
mov rdx, rax
mov cx, r15w
mov rcx, r15
jmp 0x1404d343a
call fcn.1404df4e1
test eax, eax
jmp 0x1404d3446
jne 0x1404d3474
mov rax, qword [rbx]
mov ecx, 0x3d
cmp word [rax + r13*2], cx
jmp 0x1404d345e
je 0x1404d348c
cmp word [rax + r13*2], si
jmp 0x1404d346e
je 0x1404d348c
add rbx, 8
mov rax, 0x38d82c7d
mov rax, qword [rbx]
jmp 0x1404d3487
jmp 0x1404d3417
sub rbx, r14
test sil, bl
cmp r10w, r15w
sar rbx, 3
jmp 0x1404d34b2
sub rbx, r14
sar rbx, 3
cmp r11d, r11d
test bh, 0x45
test r9b, r8b
neg rbx
test rbx, rbx
jmp 0x1404d34ba
js 0x1404d356d
cmp qword [r14], rsi
jmp 0x1404d34c8
je 0x1404d356d
mov rcx, qword [r14 + rbx*8]
jmp 0x1404d34d7
call fcn.1404c3032
test r12w, r12w
jmp 0x1404d34e5
je 0x1404d350f
mov qword [r14 + rbx*8], r15
jmp 0x1404d34f4
jmp 0x1404d362b
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404d3503
mov qword [r14 + rbx*8], rax
jmp 0x1404d350c
inc rbx
cmp qword [r14 + rbx*8], rsi
jmp 0x1404d3518
jne 0x1404d34f9
mov r8d, 8
jmp 0x1404d352d
mov rdx, rbx
setbe cl
cmovbe ecx, r13d
mov rcx, r14
call fcn.1404d2ba6
xor ecx, ecx
movsxd rbx, ecx
mov ebx, ecx
mov rbx, rax
jmp 0x1404d354e
call fcn.1404c3032
test rbx, rbx
jmp 0x1404d355b
je 0x1404d362e
mov qword [0x1400ba2e8], rbx
jmp 0x1404d362e
test r12w, r12w
jmp 0x1404d3576
je 0x1404d3729
neg rbx
movsx rdx, bp
lea rdx, [rbx + 2]
cmp r14b, 0xa9
cmp rdx, rbx
jmp 0x1404d3593
jae 0x1404d35a7
or rbp, 0xffffffffffffffff
jmp 0x1404d35a2
jmp 0x1404d372b
movabs rax, 0x1fffffffffffffff
jmp 0x1404d35ba
cmp rdx, rax
jmp 0x1404d35c2
jae 0x1404d3599
mov r8d, 8
mov rcx, r14
jmp 0x1404d35d6
call fcn.1404d2ba6
sub ecx, ecx
bswap r14
movsxd r14, edi
movzx r14d, r11w
mov r14, rax
jmp 0x1404d35ef
call fcn.1404c3032
test r14, r14
jmp 0x1404d35fc
je 0x1404d3599
mov qword [r14 + rbx*8], r15
test bp, sp
mov qword [r14 + rbx*8 + 8], rsi
inc edi
mov dil, 0x40
bsf edi, r13d
mov qword [0x1400ba2e8], r14
btc rdi, rsi
btr di, 0xd1
bsf di, ax
mov rdi, rsi
test ebp, ebp
jmp 0x1404d3635
je 0x1404d3735
or rbp, 0xffffffffffffffff
mov r14b, r8b
bswap r14
movzx r14, di
mov r14, rbp
jmp 0x1404d3651
inc r14
cmp word [r15 + r14*2], si
jmp 0x1404d365e
jne 0x1404d3651
mov edx, 2
clc
add r14, rdx
mov rcx, r14
jmp 0x1404d3675
call fcn.1404c71c2
mov rbx, rax
test rax, rax
je 0x1404d36f9
mov r8, r15
xchg cl, ch
mov ch, 0xa2
mov rdx, r14
mov rcx, rax
call fcn.1404c3d40
test eax, eax
jne 0x1404d3798
neg r12w
movsxd rcx, ebp
inc cx
lea rax, [r13 + 1]
lea rax, [rbx + rax*2]
jmp 0x1404d36b8
mov rcx, rbx
sbb rdx, rdx
cmc
clc
cmp r11d, 0x1a772438
mov word [rax - 2], si
and rdx, rax
jmp 0x1404d36d3
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x1404d36e0
jne 0x1404d36f9
call fcn.1404aeff3
mov esi, ebp
mov dword [rax], 0x2a
movsx rcx, cx
bswap ecx
mov rcx, rbx
jmp 0x1404d3701
call fcn.1404c3032
jmp 0x1404d3735
call fcn.1404aeff3
or rsi, 0xffffffffffffffff
xchg ch, cl
movsx ebp, cx
mov dword [rax], 0x16
movsx ecx, cx
mov ebp, esi
mov esi, ebp
bswap bp
mov ebp, esi
mov esi, ebp
movzx cx, dh
xchg ecx, ecx
not cl
mov rcx, rdi
jmp 0x1404d373d
call fcn.1404c3032
mov eax, esi
bts si, bx
mov rbx, qword [rsp + 0x60]
not edi
movsx esi, r9w
rcr rdi, cl
mov rbp, qword [rsp + 0x68]
movzx r14w, r15b
mov r13b, 0xcf
cmp bp, 0x310c
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
movsx edi, dx
mov r12w, 0x3d1
pop r15
bswap r12d
pop r14
movzx edi, r8w
movsx di, r13b
movsx r12d, bx
pop r13
pop r12
pop rdi
jmp 0x1404d3797
ret
xor r9d, r9d
mov qword [rsp + 0x20], rsi
clc
xor r8d, r8d
test r10b, 0x73
xor edx, edx
test bpl, r12b
cmp eax, 0x30353c0a
sub ecx, ecx
jmp 0x1404d37b9
call fcn.1404afd83
int3