Function at 0x14010bd0f
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404da26e
mov qword [rsp + 8], rbx
test dl, 0x20
mov qword [rsp + 0x10], rbp
add bp, r10w
mov qword [rsp + 0x18], rsi
bt ebp, r9d
sbb bp, 0x6388
push rdi
push r12
push r13
push r14
bts bp, r15w
push r15
ror bp, cl
sub rsp, 0x30
xor esi, esi
bt r15w, 0xd3
bts r15w, r14w
sub bp, di
mov ebp, edx
add r15b, dl
mov r15, rcx
stc
test rcx, rcx
jmp 0x1404da2c3
jne 0x1404da2eb
call fcn.1404b6235
mov dword [rax], 0x16
cmp si, r15w
test r8w, r8w
clc
or rax, 0xffffffffffffffff
jmp 0x1404da2e6
jmp 0x1404da842
mov edx, 0x3d
mov rdi, r15
jmp 0x1404da2f8
call fcn.14021ed11
mov r13, rax
test dl, 7
test rax, rax
je 0x1404da7f8
cmp rax, r15
jmp 0x1404da314
je 0x1404da7f8
mov r14, qword [0x1400ba2e8]
rcr r12b, cl
sbb r12b, spl
cmp r14, qword [0x1400ba2f0]
bswap r12d
movzx r12d, word [rax + 2]
jmp 0x1404da33b
jne 0x1404da358
mov rcx, r14
jmp 0x1404da349
call fcn.1404da8b6
mov r14, rax
mov qword [0x1400ba2e8], rax
mov ebx, 1
clc
cmc
test r14, r14
jmp 0x1404da367
jne 0x1404da4a4
mov rax, qword [0x1400ba2e0]
cmp r9b, dil
test spl, r8b
test ebp, ebp
jmp 0x1404da381
je 0x1404da3e9
test rax, rax
je 0x1404da3e9
call fcn.1404b6429
test rax, rax
jmp 0x1404da39d
je 0x1404da7f8
mov r14, qword [0x1400ba2e8]
clc
test r10, 0x1d8d294b
cmp r9b, 0x93
cmp r14, qword [0x1400ba2f0]
jmp 0x1404da3c2
jne 0x1404da496
mov rcx, r14
call fcn.1404da8b6
mov r14, rax
jmp 0x1404da3d8
mov qword [0x1400ba2e8], rax
jmp 0x1404da3e4
jmp 0x1404da496
test r12w, r12w
jmp 0x1404da3f2
je 0x1404da815
test rax, rax
jmp 0x1404da400
jne 0x1404da462
lea edx, [rax + 8]
movzx rcx, di
mov rcx, rbx
jmp 0x1404da415
call fcn.1404ce361
sub ecx, ecx
jmp 0x1404da421
mov qword [0x1400ba2e0], rax
jmp 0x1404da42d
call fcn.1404ca184
cmp qword [0x1400ba2e0], rsi
jmp 0x1404da43e
jne 0x1404da44d
or rbp, 0xffffffffffffffff
jmp 0x1404da820
mov r14, qword [0x1400ba2e8]
jmp 0x1404da459
test r14, r14
jne 0x1404da4a4
mov edx, 8
mov rcx, rbx
call fcn.1404ce361
sub ecx, ecx
jmp 0x1404da476
mov qword [0x1400ba2e8], rax
jmp 0x1404da482
call fcn.1404ca184
mov r14, qword [0x1400ba2e8]
test sp, 0x5154
cmp cl, r13b
test r14, r14
jmp 0x1404da49e
je 0x1404da444
mov rax, qword [r14]
sal bx, 0x73
bsf bx, r12w
sub r13, r15
sar r13, 1
ror bx, 0x20
shr bx, cl
mov rbx, r14
test rax, rax
jmp 0x1404da4c8
je 0x1404da565
mov r8, r13
movsx dx, r12b
xchg edx, edx
mov edx, 0x4cfd0271
mov rdx, rax
movsx cx, sil
setbe cl
mov rcx, r15
jmp 0x1404da4f0
call fcn.1404e66f3
test eax, eax
jmp 0x1404da4fc
jne 0x1404da53b
mov rax, qword [rbx]
movzx cx, r15b
bts ecx, r15d
mov ecx, 0x3d
test dx, bp
jmp 0x1404da51b
cmp word [rax + r13*2], cx
jmp 0x1404da525
je 0x1404da554
cmp word [rax + r13*2], si
jmp 0x1404da535
je 0x1404da554
add rbx, 8
setp ah
jmp 0x1404da547
mov rax, qword [rbx]
jmp 0x1404da54f
jmp 0x1404da4c0
sub rbx, r14
sar rbx, 3
jmp 0x1404da560
jmp 0x1404da580
sub rbx, r14
cmp r15, 0x50a10f3a
sar rbx, 3
test dil, 0x29
stc
jmp 0x1404da57d
neg rbx
test rbx, rbx
jmp 0x1404da588
js 0x1404da633
cmp qword [r14], rsi
jmp 0x1404da596
je 0x1404da633
mov rcx, qword [r14 + rbx*8]
jmp 0x1404da5a5
call fcn.1404ca184
test r12w, r12w
jmp 0x1404da5b3
je 0x1404da5e3
mov qword [r14 + rbx*8], r15
jmp 0x1404da5c2
jmp 0x1404da6e7
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404da5d1
mov qword [r14 + rbx*8], rax
jmp 0x1404da5da
inc rbx
test r14b, 0x61
clc
stc
cmp qword [r14 + rbx*8], rsi
jmp 0x1404da5ec
jne 0x1404da5c7
mov r8d, 8
mov rdx, rbx
movsx rcx, r8w
mov rcx, r14
jmp 0x1404da607
call fcn.1404d9c1a
sub ecx, ecx
not bx
mov rbx, rax
call fcn.1404ca184
test rbx, rbx
jmp 0x1404da621
je 0x1404da6ed
mov qword [0x1400ba2e8], rbx
jmp 0x1404da6ed
test r12w, r12w
jmp 0x1404da63c
je 0x1404da829
neg rbx
clc
lea rdx, [rbx + 2]
clc
test bpl, 0xcf
cmp rdx, rbx
jmp 0x1404da657
jae 0x1404da66b
or rbp, 0xffffffffffffffff
jmp 0x1404da666
jmp 0x1404da82e
movabs rax, 0x1fffffffffffffff
cmp spl, 0x2f
cmp rdx, rax
jmp 0x1404da681
jae 0x1404da65d
mov r8d, 8
movsx rcx, r12w
xchg ch, cl
movsx cx, bpl
mov rcx, r14
jmp 0x1404da6a0
call fcn.1404d9c1a
xor ecx, ecx
mov r14b, 0xd3
sete r14b
mov r14, rax
jmp 0x1404da6b6
call fcn.1404ca184
test r14, r14
je 0x1404da65d
mov qword [r14 + rbx*8], r15
dec di
sub dil, sil
sar di, cl
mov qword [r14 + rbx*8 + 8], rsi
stc
test sp, r15w
mov qword [0x1400ba2e8], r14
stc
btc di, bp
mov rdi, rsi
cmp rdi, rsp
test ebp, ebp
jmp 0x1404da6f4
je 0x1404da833
or rbp, 0xffffffffffffffff
mov r14, rbp
jmp 0x1404da706
inc r14
cmp di, ax
test edx, eax
cmp word [r15 + r14*2], si
jmp 0x1404da718
jne 0x1404da706
mov edx, 2
mov cx, di
bt cx, 0x28
add r14, rdx
movzx ecx, cx
mov rcx, r14
call fcn.1404ce361
mov rbx, rax
test cx, 0x42b5
test rax, rax
jmp 0x1404da749
je 0x1404da7e6
mov r8, r15
movsx edx, cx
jmp 0x1404da75a
mov rdx, r14
movsx ecx, bx
xchg rcx, rcx
movsx rcx, r9w
mov rcx, rax
jmp 0x1404da76f
call fcn.1404cae5a
test eax, eax
jne 0x1404da88e
neg r12w
lea rax, [r13 + 1]
jmp 0x1404da78d
lea rax, [rbx + rax*2]
movzx cx, r15b
not ch
mov rcx, rbx
sbb rdx, rdx
cmc
test r11, 0x3ad8668f
mov word [rax - 2], si
clc
test r9d, r8d
cmp esi, 0x758142d
and rdx, rax
jmp 0x1404da7bc
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x1404da7c9
jne 0x1404da7e6
call fcn.1404b6235
mov esi, ebp
movzx cx, r14b
mov dword [rax], 0x2a
jmp 0x1404da7e6
mov rcx, rbx
jmp 0x1404da7ee
call fcn.1404ca184
jmp 0x1404da833
call fcn.1404b6235
or rsi, 0xffffffffffffffff
bswap ebp
movzx ecx, ax
movsx rcx, dx
mov dword [rax], 0x16
movzx cx, r14b
mov ebp, esi
movsxd rcx, ebx
mov cl, sil
not cx
mov esi, ebp
cmovne rcx, rsi
movsxd rcx, ebx
mov ebp, esi
xchg cx, cx
mov esi, ebp
movsxd rcx, ebp
mov rcx, rdi
jmp 0x1404da83b
call fcn.1404ca184
mov eax, esi
mov rbx, qword [rsp + 0x60]
rcl sil, cl
mov rbp, qword [rsp + 0x68]
bt r13w, 0x76
cmc
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
movzx r13d, bp
pop r15
not dil
cmovbe edi, r12d
xchg r13b, r14b
pop r14
xchg r13d, r13d
movzx edi, ax
pop r13
movsx di, r8b
movzx r12, r11w
movsxd r12, ebx
pop r12
pop rdi
jmp 0x1404da88d
ret
sub r9d, r9d
test rdx, r15
jmp 0x1404da899
mov qword [rsp + 0x20], rsi
test sil, r12b
sub r8d, r8d
sub edx, edx
cmp dh, 0xe3
xor ecx, ecx
call fcn.1404b6f80
int3