Function at 0x1401ec930
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404d229b
mov qword [rsp + 8], rbx
test r15w, r12w
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
ror bpl, cl
push rdi
bt rbp, 0xcf
push r12
cmp ecx, r11d
shl bpl, cl
push r13
push r14
movsx rbp, r8w
movzx bp, cl
sar bpl, 0xb3
push r15
bts r15, r10
sub rsp, 0x30
sub esi, esi
inc r15w
dec r15d
stc
mov ebp, edx
mov r15, rcx
test rcx, rcx
jmp 0x1404d22f0
jne 0x1404d230f
call fcn.1404ae2e2
mov dword [rax], 0x16
or rax, 0xffffffffffffffff
jmp 0x1404d230a
jmp 0x1404d2835
mov edx, 0x3d
mov rdi, r15
jmp 0x1404d231c
call fcn.1400f4ec5
mov r13, rax
test r9w, 0x4e4f
cmp di, r14w
test rax, rax
jmp 0x1404d2336
je 0x1404d27df
cmp rax, r15
jmp 0x1404d2344
je 0x1404d27df
mov r14, qword [0x1400ba2e8]
shl r12w, cl
cmp r14, qword [0x1400ba2f0]
movsxd r12, eax
cmovns r12, rdi
mov r12, rsi
movzx r12d, word [rax + 2]
jne 0x1404d2386
mov rcx, r14
call fcn.1404d28a9
mov r14, rax
test r8b, r12b
mov qword [0x1400ba2e8], rax
mov ebx, 1
test r14, r14
jmp 0x1404d2393
jne 0x1404d24c8
mov rax, qword [0x1400ba2e0]
test esp, r11d
test ebp, ebp
jmp 0x1404d23aa
je 0x1404d240b
test rax, rax
je 0x1404d240b
call fcn.1404ae4d0
test rax, rax
jmp 0x1404d23c6
je 0x1404d27df
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
jmp 0x1404d23df
jne 0x1404d24ba
mov rcx, r14
jmp 0x1404d23ed
call fcn.1404d28a9
mov r14, rax
jmp 0x1404d23fa
mov qword [0x1400ba2e8], rax
jmp 0x1404d2406
jmp 0x1404d24ba
test r12w, r12w
jmp 0x1404d2414
je 0x1404d27ff
test rax, rax
jmp 0x1404d2422
jne 0x1404d2480
lea edx, [rax + 8]
mov rcx, rbx
call fcn.1404c641c
sub ecx, ecx
jmp 0x1404d243a
mov qword [0x1400ba2e0], rax
jmp 0x1404d2446
call fcn.1404c222f
cmp qword [0x1400ba2e0], rsi
jmp 0x1404d2457
jne 0x1404d246b
or rbp, 0xffffffffffffffff
jmp 0x1404d2466
jmp 0x1404d2805
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404d247a
jne 0x1404d24c8
mov edx, 8
movsx rcx, bp
movzx rcx, cx
mov rcx, rbx
jmp 0x1404d2495
call fcn.1404c641c
xor ecx, ecx
jmp 0x1404d24a1
mov qword [0x1400ba2e8], rax
call fcn.1404c222f
mov r14, qword [0x1400ba2e8]
jmp 0x1404d24ba
test r14, r14
jmp 0x1404d24c2
je 0x1404d245d
mov rax, qword [r14]
sub r13, r15
sar r13, 1
mov rbx, r14
test rax, rax
jmp 0x1404d24dc
je 0x1404d2552
mov r8, r13
mov rdx, rax
mov rcx, r15
call fcn.1404de75b
test eax, eax
jne 0x1404d2526
mov rax, qword [rbx]
ror rcx, cl
or ch, 0xf5
mov ecx, 0x3d
cmp word [rax + r13*2], cx
jmp 0x1404d2510
je 0x1404d253e
cmp word [rax + r13*2], si
jmp 0x1404d2520
je 0x1404d253e
add rbx, 8
movsx eax, bp
movsx rax, r11w
mov rax, qword [rbx]
jmp 0x1404d2539
jmp 0x1404d24d4
sub rbx, r14
cmp rbp, r9
sar rbx, 3
jmp 0x1404d254d
jmp 0x1404d2563
sub rbx, r14
clc
cmc
sar rbx, 3
clc
test r10b, 0x86
neg rbx
test rbx, rbx
jmp 0x1404d256b
js 0x1404d262e
cmp qword [r14], rsi
jmp 0x1404d2579
je 0x1404d262e
mov rcx, qword [r14 + rbx*8]
call fcn.1404c222f
test r12w, r12w
jmp 0x1404d2591
je 0x1404d25c6
mov qword [r14 + rbx*8], r15
jmp 0x1404d25a0
jmp 0x1404d26e8
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404d25af
mov qword [r14 + rbx*8], rax
jmp 0x1404d25b8
inc rbx
cmp r14d, 0x5a2f6e7f
stc
cmp r9b, r11b
cmp qword [r14 + rbx*8], rsi
jmp 0x1404d25cf
jne 0x1404d25a5
mov r8d, 8
movzx ecx, cx
movsx rdx, bx
movzx rcx, r14w
mov rdx, rbx
movzx ecx, ax
movzx cx, r11b
movsx rcx, si
mov rcx, r14
jmp 0x1404d25fd
call fcn.1404d1c88
xor ecx, ecx
setg bh
mov rbx, rax
jmp 0x1404d260f
call fcn.1404c222f
test rbx, rbx
je 0x1404d26f2
mov qword [0x1400ba2e8], rbx
jmp 0x1404d2629
jmp 0x1404d26f2
test r12w, r12w
jmp 0x1404d2637
je 0x1404d2811
neg rbx
ror rdx, 0x32
btc dx, dx
lea rdx, [rbx + 2]
cmp rdx, rbx
jmp 0x1404d2654
jae 0x1404d2668
or rbp, 0xffffffffffffffff
jmp 0x1404d2663
jmp 0x1404d2816
movabs rax, 0x1fffffffffffffff
jmp 0x1404d2677
cmp rdx, rax
jmp 0x1404d267f
jae 0x1404d265a
mov r8d, 8
mov cl, r11b
movsx rcx, cx
movsxd rcx, ebx
mov rcx, r14
jmp 0x1404d269d
call fcn.1404d1c88
xor ecx, ecx
mov r14w, 0x3969
mov r14b, dl
mov r14, rax
jmp 0x1404d26b4
call fcn.1404c222f
test r14, r14
jmp 0x1404d26c1
je 0x1404d265a
mov qword [r14 + rbx*8], r15
bsf rdi, r10
mov qword [r14 + rbx*8 + 8], rsi
rcr di, cl
mov dil, 0x50
ror edi, cl
mov qword [0x1400ba2e8], r14
clc
btc di, di
mov rdi, rsi
test di, 0x46b0
cmc
clc
test ebp, ebp
je 0x1404d281f
or rbp, 0xffffffffffffffff
movsx r14w, bl
dec r14d
mov r14, rbp
jmp 0x1404d270e
inc r14
cmp word [r15 + r14*2], si
jmp 0x1404d271b
jne 0x1404d270e
mov edx, 2
clc
add r14, rdx
xchg rcx, rcx
sete cl
mov rcx, r14
jmp 0x1404d2738
call fcn.1404c641c
mov rbx, rax
test rax, rax
jmp 0x1404d2748
je 0x1404d27cd
mov r8, r15
mov rdx, r14
movsx cx, r15b
mov rcx, rax
call fcn.1404c2f2d
test eax, eax
jmp 0x1404d2768
jne 0x1404d2873
neg r12w
xchg al, ch
bswap rcx
lea rax, [r13 + 1]
lea rax, [rbx + rax*2]
movsx ecx, ax
mov rcx, rbx
jmp 0x1404d278a
sbb rdx, rdx
clc
cmp r13b, 0x2d
mov word [rax - 2], si
cmc
test rsp, 0x2a2045fc
and rdx, rax
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x1404d27ae
jne 0x1404d27cd
call fcn.1404ae2e2
mov esi, ebp
jmp 0x1404d27c4
mov dword [rax], 0x2a
movsx ecx, dx
mov rcx, rbx
jmp 0x1404d27d5
call fcn.1404c222f
jmp 0x1404d281f
call fcn.1404ae2e2
or rsi, 0xffffffffffffffff
movsx ebp, r9w
movzx rcx, ax
mov dword [rax], 0x16
movzx bp, r15b
movsx ebp, r14w
mov ebp, esi
movsx rcx, bx
mov esi, ebp
jmp 0x1404d2811
mov ebp, esi
movsxd rsi, eax
mov esi, ebp
setne ch
not ecx
bswap ecx
mov rcx, rdi
jmp 0x1404d2827
call fcn.1404c222f
mov eax, esi
cmp dil, 0x69
inc rdi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
movsx r14, r9w
movsxd r15, r9d
pop r15
bswap r12w
movsxd rdi, r10d
jmp 0x1404d285d
pop r14
pop r13
movzx rdi, bx
pop r12
mov dil, spl
movzx rdi, r8w
mov dil, pe_nt_image_headers64
pop rdi
ret
xor r9d, r9d
cmp dx, r10w
test r10b, 0xac
jmp 0x1404d2883
mov qword [rsp + 0x20], rsi
cmp r8b, sil
sub r8d, r8d
cmc
sub edx, edx
cmc
stc
test r10w, sp
xor ecx, ecx
jmp 0x1404d289e
call fcn.1404aefbc
int3