Function at 0x1401bd461
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404d80f1
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
btr bp, 0x8c
rcr bpl, cl
push rdi
rol ebp, 0x3e
btc bp, sp
push r12
mov bp, ax
push r13
shl rbp, cl
not rbp
push r14
movzx ebp, r11w
btc bp, 0xc8
push r15
cmp bp, cx
xor r15b, 0xb
sub rsp, 0x30
sub esi, esi
rcl bpl, cl
test r9w, 0x5eff
shl rbp, cl
mov ebp, edx
adc r15w, r13w
mov r15, rcx
cmp dil, spl
cmp r14b, 0xd8
test rcx, rcx
jmp 0x1404d815b
jne 0x1404d8182
call fcn.1404b434d
mov dword [rax], 0x16
test cx, di
cmc
test r13b, 0x94
or rax, 0xffffffffffffffff
jmp 0x1404d817d
jmp 0x1404d86c2
mov edx, 0x3d
mov dil, dl
movzx rdi, r10w
mov rdi, r15
call fcn.14024e3cc
mov r13, rax
test rax, rax
je 0x1404d866e
cmp rax, r15
jmp 0x1404d81aa
je 0x1404d866e
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
cmovs r12w, r10w
movsx r12d, dx
movzx r12, r8w
movzx r12d, word [rax + 2]
jmp 0x1404d81d5
jne 0x1404d81f8
mov rcx, r14
jmp 0x1404d81e3
call fcn.1404d873a
mov r14, rax
movzx bx, bpl
mov qword [0x1400ba2e8], rax
stc
mov ebx, 1
cmp ebx, 0x6b4528ec
test r14, r14
jmp 0x1404d820b
jne 0x1404d834d
mov rax, qword [0x1400ba2e0]
stc
test r13w, 0x34c5
test ebp, ebp
jmp 0x1404d8226
je 0x1404d8282
test rax, rax
je 0x1404d8282
call fcn.1404b4525
test rax, rax
je 0x1404d866e
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
jmp 0x1404d8256
jne 0x1404d833f
mov rcx, r14
jmp 0x1404d8264
call fcn.1404d873a
mov r14, rax
jmp 0x1404d8271
mov qword [0x1400ba2e8], rax
jmp 0x1404d827d
jmp 0x1404d833f
test r12w, r12w
jmp 0x1404d828b
je 0x1404d8693
test rax, rax
jmp 0x1404d8299
jne 0x1404d830e
lea edx, [rax + 8]
xchg ch, ch
movzx cx, r11b
mov rcx, r15
mov rcx, rbx
jmp 0x1404d82b4
call fcn.1404cc48f
sub ecx, ecx
jmp 0x1404d82c0
mov qword [0x1400ba2e0], rax
jmp 0x1404d82cc
call fcn.1404c8319
cmp qword [0x1400ba2e0], rsi
jmp 0x1404d82dd
jne 0x1404d82ec
or rbp, 0xffffffffffffffff
jmp 0x1404d8699
mov r14, qword [0x1400ba2e8]
cmp r14d, 0x2fa33285
test r13w, 0x43ef
test r14, r14
jmp 0x1404d8308
jne 0x1404d834d
mov edx, 8
setns ch
not ecx
mov rcx, rbx
jmp 0x1404d8320
call fcn.1404cc48f
xor ecx, ecx
mov qword [0x1400ba2e8], rax
jmp 0x1404d8333
call fcn.1404c8319
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404d8347
je 0x1404d82e3
mov rax, qword [r14]
sub r13, r15
movsx rbx, cx
add bl, r11b
sar r13, 1
mov rbx, r14
test r15b, 0xe7
cmc
cmp r12w, r9w
test rax, rax
je 0x1404d83f7
mov r8, r13
cmovp dx, sp
movzx ecx, si
mov cx, 0xa53
mov rdx, rax
mov rcx, r15
jmp 0x1404d838b
call fcn.1404e4612
test eax, eax
jmp 0x1404d8397
jne 0x1404d83cd
mov rax, qword [rbx]
sub cx, r15w
mov ecx, 0x3d
jmp 0x1404d83b2
cmp word [rax + r13*2], cx
jmp 0x1404d83bc
je 0x1404d83e3
cmp word [rax + r13*2], si
je 0x1404d83e3
add rbx, 8
cbw
movsxd rax, r10d
jmp 0x1404d83db
mov rax, qword [rbx]
jmp 0x1404d8369
sub rbx, r14
cmp bx, sp
jmp 0x1404d83ee
sar rbx, 3
jmp 0x1404d8405
sub rbx, r14
clc
cmp r11b, r9b
sar rbx, 3
neg rbx
test rbx, rbx
jmp 0x1404d840d
js 0x1404d84c9
cmp qword [r14], rsi
jmp 0x1404d841b
je 0x1404d84c9
mov rcx, qword [r14 + rbx*8]
jmp 0x1404d842a
call fcn.1404c8319
test r12w, r12w
je 0x1404d8461
mov qword [r14 + rbx*8], r15
jmp 0x1404d8442
jmp 0x1404d8571
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404d8451
mov qword [r14 + rbx*8], rax
jmp 0x1404d845a
inc rbx
cmp r13w, r11w
cmp qword [r14 + rbx*8], rsi
jmp 0x1404d846a
jne 0x1404d8447
mov r8d, 8
not dh
mov rcx, 0x41c451fc
mov rdx, rbx
movsx ecx, dx
jmp 0x1404d848a
mov rcx, r14
jmp 0x1404d8492
call fcn.1404d7afa
sub ecx, ecx
movzx ebx, r11w
mov rbx, rax
jmp 0x1404d84a5
call fcn.1404c8319
test rbx, rbx
jmp 0x1404d84b2
je 0x1404d8581
mov qword [0x1400ba2e8], rbx
jmp 0x1404d84c4
jmp 0x1404d8581
test r12w, r12w
jmp 0x1404d84d2
je 0x1404d86a3
neg rbx
lea rdx, [rbx + 2]
cmp rdx, rbx
jmp 0x1404d84e7
jae 0x1404d84fb
or rbp, 0xffffffffffffffff
jmp 0x1404d84f6
jmp 0x1404d86ad
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jae 0x1404d84ed
mov r8d, 8
mov rcx, r14
jmp 0x1404d851c
call fcn.1404d7afa
sub ecx, ecx
movzx r14, si
mov r14, 0x6b6301db
mov r14, rax
jmp 0x1404d8536
call fcn.1404c8319
test r14, r14
jmp 0x1404d8543
je 0x1404d84ed
mov qword [r14 + rbx*8], r15
shl dil, 0x93
cmp bp, r14w
btr di, r9w
mov qword [r14 + rbx*8 + 8], rsi
btc di, 0xb1
mov dil, spl
mov qword [0x1400ba2e8], r14
bswap rdi
mov rdi, rsi
cmc
jmp 0x1404d8581
test ebp, ebp
je 0x1404d86af
or rbp, 0xffffffffffffffff
mov r14, rbp
inc r14
cmp word [r15 + r14*2], si
jmp 0x1404d859d
jne 0x1404d8590
mov edx, 2
rcr ch, 0xe9
shrd cx, dx, 0x63
add r14, rdx
mov rcx, r14
jmp 0x1404d85bb
call fcn.1404cc48f
mov rbx, rax
cmp ebp, 0x682f1852
test rax, rax
je 0x1404d865c
mov r8, r15
not dl
cwd
mov rdx, r14
setne ch
movsx cx, dh
mov rcx, rax
jmp 0x1404d85eb
call fcn.1404c8fee
test eax, eax
jmp 0x1404d85f7
jne 0x1404d870e
neg r12w
lea rax, [r13 + 1]
inc cx
mov cx, 0x364a
lea rax, [rbx + rax*2]
movsx ecx, r14w
mov rcx, rbx
jmp 0x1404d861c
sbb rdx, rdx
test ah, 0x13
jmp 0x1404d8627
mov word [rax - 2], si
test r15w, 0x5d95
and rdx, rax
jmp 0x1404d8639
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x1404d865c
call fcn.1404b434d
mov esi, ebp
mov cx, di
bswap rcx
not cl
mov dword [rax], 0x2a
mov rcx, rbx
jmp 0x1404d8664
call fcn.1404c8319
jmp 0x1404d86af
call fcn.1404b434d
or rsi, 0xffffffffffffffff
cmovg ebp, ebp
xchg bpl, cl
movsx rcx, r8w
mov dword [rax], 0x16
movsx rcx, r11w
sete bpl
cmovbe rbp, r11
mov ebp, esi
mov cx, r8w
mov esi, ebp
movzx bp, al
movsx ecx, r10w
mov ebp, esi
bswap rsi
movsx si, r12b
mov esi, ebp
mov rcx, rdi
jmp 0x1404d86b7
call fcn.1404c8319
mov eax, esi
btc rdi, rbp
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
xchg r14b, sil
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
cmova di, r14w
movsxd r12, r9d
movzx r12w, dil
pop r15
pop r14
pop r13
movsx rdi, dx
mov r12d, 0x15297d02
movzx di, cl
pop r12
movzx rdi, cx
mov dil, r8b
movsx di, r9b
pop rdi
jmp 0x1404d870d
ret
xor r9d, r9d
clc
cmp r12d, r11d
mov qword [rsp + 0x20], rsi
test bx, bp
xor r8d, r8d
stc
jmp 0x1404d8726
xor edx, edx
jmp 0x1404d872d
sub ecx, ecx
call fcn.1404b5077
int3