Function at 0x1401ed185
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404da153
mov qword [rsp + 8], rbx
stc
test bl, 0x19
cmp bp, si
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
movzx bp, al
bts ebp, eax
setg bpl
push r12
clc
cmc
bsr ebp, r8d
push r13
push r14
movsx ebp, r15w
push r15
test r12w, sp
sbb rbp, 0x4f37657
sub rsp, 0x30
xor esi, esi
movzx r15, r9w
add r15d, 0x3c38191b
mov ebp, edx
rcr r15b, 0x11
mov r15b, dl
cmovg r15w, bp
mov r15, rcx
cmp bx, bx
test rcx, rcx
jne 0x1404da1da
call fcn.1404b60e7
mov dword [rax], 0x16
cmp r12b, 0x13
cmp ebp, ecx
or rax, 0xffffffffffffffff
jmp 0x1404da700
mov edx, 0x3d
movsxd rdi, r9d
movsx di, r8b
mov dil, r13b
mov rdi, r15
jmp 0x1404da1f2
call fcn.1401e7f18
mov r13, rax
test r15b, 0xe1
stc
test rax, rax
jmp 0x1404da207
je 0x1404da6a3
cmp rax, r15
jmp 0x1404da215
je 0x1404da6a3
mov r14, qword [0x1400ba2e8]
xor r12b, al
cmp dh, 0x3c
clc
cmp r14, qword [0x1400ba2f0]
movsx r12w, bl
setp r12b
movzx r12d, word [rax + 2]
jne 0x1404da256
mov rcx, r14
call fcn.1404da773
mov r14, rax
mov qword [0x1400ba2e8], rax
mov ebx, 1
test r14, r14
jne 0x1404da39d
mov rax, qword [0x1400ba2e0]
test ebp, ebp
je 0x1404da2ce
test rax, rax
je 0x1404da2ce
call fcn.1404b62ce
test rax, rax
jmp 0x1404da289
je 0x1404da6a3
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
jmp 0x1404da2a2
jne 0x1404da38f
mov rcx, r14
jmp 0x1404da2b0
call fcn.1404da773
mov r14, rax
jmp 0x1404da2bd
mov qword [0x1400ba2e8], rax
jmp 0x1404da2c9
jmp 0x1404da38f
test r12w, r12w
jmp 0x1404da2d7
je 0x1404da6c4
test rax, rax
jmp 0x1404da2e5
jne 0x1404da350
lea edx, [rax + 8]
mov rcx, rbx
jmp 0x1404da2f6
call fcn.1404ce378
sub ecx, ecx
jmp 0x1404da302
mov qword [0x1400ba2e0], rax
jmp 0x1404da30e
call fcn.1404ca156
cmp qword [0x1400ba2e0], rsi
jmp 0x1404da31f
jne 0x1404da333
or rbp, 0xffffffffffffffff
jmp 0x1404da32e
jmp 0x1404da6cb
mov r14, qword [0x1400ba2e8]
stc
test r8d, 0x62132fa8
test r14, r14
jmp 0x1404da34a
jne 0x1404da39d
mov edx, 8
movzx rcx, r8w
jmp 0x1404da363
mov rcx, rbx
jmp 0x1404da36b
call fcn.1404ce378
xor ecx, ecx
jmp 0x1404da377
mov qword [0x1400ba2e8], rax
jmp 0x1404da383
call fcn.1404ca156
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404da397
je 0x1404da325
mov rax, qword [r14]
and rbx, rdi
shl bl, 0x9e
bsr bx, ax
sub r13, r15
movsx bx, ah
xor rbx, 0xdd33f6d
sar r13, 1
movsx ebx, si
mov rbx, r14
jmp 0x1404da3d0
test rax, rax
jmp 0x1404da3d8
je 0x1404da45c
mov r8, r13
cdq
mov rcx, 0x39e03592
cqo
mov rdx, rax
xchg cx, cx
not rcx
mov rcx, r15
jmp 0x1404da3fc
call fcn.1404e6596
test eax, eax
jmp 0x1404da408
jne 0x1404da436
mov rax, qword [rbx]
mov ecx, 0x3d
cmp word [rax + r13*2], cx
jmp 0x1404da420
je 0x1404da44b
cmp word [rax + r13*2], si
jmp 0x1404da430
je 0x1404da44b
add rbx, 8
movzx eax, r10w
mov rax, qword [rbx]
jmp 0x1404da446
jmp 0x1404da3d0
sub rbx, r14
sar rbx, 3
jmp 0x1404da457
jmp 0x1404da468
sub rbx, r14
sar rbx, 3
neg rbx
cmc
clc
test rbx, rbx
jmp 0x1404da470
js 0x1404da516
cmp qword [r14], rsi
jmp 0x1404da47e
je 0x1404da516
mov rcx, qword [r14 + rbx*8]
jmp 0x1404da48d
call fcn.1404ca156
test r12w, r12w
jmp 0x1404da49b
je 0x1404da4c0
mov qword [r14 + rbx*8], r15
jmp 0x1404da4aa
jmp 0x1404da5bf
mov rax, qword [r14 + rbx*8 + 8]
mov qword [r14 + rbx*8], rax
inc rbx
jmp 0x1404da4c0
cmp qword [r14 + rbx*8], rsi
jmp 0x1404da4c9
jne 0x1404da4af
mov r8d, 8
mov edx, r10d
cqo
mov rdx, rbx
mov cl, r14b
mov rcx, r14
jmp 0x1404da4e8
call fcn.1404d9b2b
xor ecx, ecx
mov rbx, rax
jmp 0x1404da4f7
call fcn.1404ca156
test rbx, rbx
je 0x1404da5c2
mov qword [0x1400ba2e8], rbx
jmp 0x1404da511
jmp 0x1404da5c2
test r12w, r12w
je 0x1404da6d8
neg rbx
btc dx, bx
stc
lea rdx, [rbx + 2]
cmp rdx, rbx
jmp 0x1404da534
jae 0x1404da548
or rbp, 0xffffffffffffffff
jmp 0x1404da543
jmp 0x1404da6e1
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jae 0x1404da53a
mov r8d, 8
mov rcx, r14
jmp 0x1404da569
call fcn.1404d9b2b
sub ecx, ecx
setp r14b
mov r14, 0x4f851912
cmovno r14d, r15d
mov r14, rax
jmp 0x1404da587
call fcn.1404ca156
test r14, r14
jmp 0x1404da594
je 0x1404da53a
mov qword [r14 + rbx*8], r15
clc
rcr edi, cl
xchg dil, dil
mov qword [r14 + rbx*8 + 8], rsi
setbe dil
bts edi, ebx
mov qword [0x1400ba2e8], r14
sar dil, 0xff
shld edi, eax, 0x32
mov rdi, rsi
test ebp, ebp
je 0x1404da6e9
or rbp, 0xffffffffffffffff
movsx r14d, r15w
bswap r14
mov r14, rbp
jmp 0x1404da5dd
inc r14
cmp r15b, r10b
test r9b, dl
cmp word [r15 + r14*2], si
jne 0x1404da5dd
mov edx, 2
mov cx, cx
stc
shl cx, cl
add r14, rdx
mov rcx, r14
jmp 0x1404da608
call fcn.1404ce378
mov rbx, rax
jmp 0x1404da619
test rax, rax
jmp 0x1404da621
je 0x1404da691
mov r8, r15
mov rdx, r14
mov cl, 0xc7
movsx cx, cl
not ecx
mov rcx, rax
call fcn.1404cae6c
test eax, eax
jne 0x1404da73f
neg r12w
lea rax, [r13 + 1]
movsx rcx, si
movsx ecx, bx
lea rax, [rbx + rax*2]
mov rcx, rbx
jmp 0x1404da660
sbb rdx, rdx
stc
cmc
test r13, 0x406f7934
mov word [rax - 2], si
and rdx, rax
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x1404da691
call fcn.1404b60e7
mov esi, ebp
mov dword [rax], 0x2a
bswap rcx
mov rcx, rbx
jmp 0x1404da699
call fcn.1404ca156
jmp 0x1404da6e9
call fcn.1404b60e7
or rsi, 0xffffffffffffffff
bswap cx
xchg cl, cl
jmp 0x1404da6b6
mov dword [rax], 0x16
jmp 0x1404da6c4
mov ebp, esi
jmp 0x1404da6cb
mov esi, ebp
movsx bp, r13b
movsx ebp, bp
xchg rbp, rcx
mov ebp, esi
movsxd rcx, r12d
mov cx, 0x2415
mov esi, ebp
setns ch
movsxd rcx, r9d
mov rcx, rdi
jmp 0x1404da6f1
call fcn.1404ca156
mov eax, esi
movzx r13, cx
bsf bp, bp
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov di, bx
dec r12d
btr di, r14w
mov rsi, qword [rsp + 0x70]
movsx r14d, cx
add rsp, 0x30
pop r15
bswap di
pop r14
pop r13
pop r12
movzx edi, r12w
bswap di
movzx rdi, cx
pop rdi
jmp 0x1404da73e
ret
sub r9d, r9d
cmp r10w, 0x630e
test r15w, 0x37ab
mov qword [rsp + 0x20], rsi
xor r8d, r8d
cmp r11b, r12b
cmp r11w, 0x282d
sub edx, edx
xor ecx, ecx
jmp 0x1404da768
call fcn.1404b6e2f
int3