Function at 0x1401fb099
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404d8166
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
sete bpl
sar bpl, cl
xadd bp, bp
mov qword [rsp + 0x18], rsi
not ebp
movzx rbp, r12w
cmp bx, 0x53f1
push rdi
or bpl, r11b
cmovge ebp, eax
rcl bp, cl
push r12
sal ebp, 0x53
cmp bx, cx
push r13
shrd bp, si, 0xc
btc rbp, r14
push r14
sar rbp, 0x44
dec rbp
neg bpl
push r15
shl bp, 0xcc
bswap rbp
sub rsp, 0x30
adc bp, di
xor esi, esi
shr r15b, cl
bswap r15w
mov ebp, edx
btr r15, r9
mov r15b, r14b
mov r15, rcx
clc
stc
test rcx, rcx
jmp 0x1404d81e3
jne 0x1404d8205
call fcn.1404b4263
mov dword [rax], 0x16
cmc
cmp r12d, 0x24fb702d
or rax, 0xffffffffffffffff
jmp 0x1404d871e
mov edx, 0x3d
movzx di, r12b
bswap edi
mov rdi, r15
jmp 0x1404d8219
call fcn.1401e6eb0
mov r13, rax
cmc
clc
stc
test rax, rax
jmp 0x1404d822c
je 0x1404d86e1
cmp rax, r15
jmp 0x1404d823a
je 0x1404d86e1
mov r14, qword [0x1400ba2e8]
mov r12b, bpl
xchg r12, r12
cmp r14, qword [0x1400ba2f0]
movzx r12w, r15b
mov r12w, dx
jmp 0x1404d8262
movzx r12d, word [rax + 2]
jmp 0x1404d826c
jne 0x1404d8298
mov rcx, r14
jmp 0x1404d827a
call fcn.1404d87b7
mov r14, rax
movzx rbx, bp
mov qword [0x1400ba2e8], rax
cmovp bx, bp
and rbx, 0x82b0545
mov ebx, 1
test r14, r14
jmp 0x1404d82a5
jne 0x1404d83d1
mov rax, qword [0x1400ba2e0]
test r15w, 0x7698
test ebp, ebp
jmp 0x1404d82bf
je 0x1404d8324
test rax, rax
jmp 0x1404d82cd
je 0x1404d8324
call fcn.1404b4470
test rax, rax
jmp 0x1404d82e0
je 0x1404d86e1
mov r14, qword [0x1400ba2e8]
test ax, 0xd29
cmp r14, qword [0x1400ba2f0]
jmp 0x1404d82fd
jne 0x1404d83c8
mov rcx, r14
jmp 0x1404d830b
call fcn.1404d87b7
mov r14, rax
jmp 0x1404d8318
mov qword [0x1400ba2e8], rax
jmp 0x1404d83c8
test r12w, r12w
je 0x1404d86fe
test rax, rax
jne 0x1404d839b
lea edx, [rax + 8]
movzx ecx, cx
mov rcx, rbx
jmp 0x1404d8345
call fcn.1404cc41a
xor ecx, ecx
jmp 0x1404d8351
mov qword [0x1400ba2e0], rax
jmp 0x1404d835d
call fcn.1404c8273
cmp qword [0x1400ba2e0], rsi
jmp 0x1404d836e
jne 0x1404d8382
or rbp, 0xffffffffffffffff
jmp 0x1404d837d
jmp 0x1404d8707
mov r14, qword [0x1400ba2e8]
cmc
cmp dh, 0xfe
test r14, r14
jmp 0x1404d8395
jne 0x1404d83d1
mov edx, 8
mov ch, 0xb6
mov rcx, rbx
call fcn.1404cc41a
sub ecx, ecx
mov qword [0x1400ba2e8], rax
jmp 0x1404d83b9
call fcn.1404c8273
mov r14, qword [0x1400ba2e8]
test esp, r8d
test r14, r14
je 0x1404d8374
mov rax, qword [r14]
sub r13, r15
shr bh, cl
rcr bx, cl
mov rbx, rax
sar r13, 1
xadd ebx, ebx
mov rbx, r14
test rax, rax
jmp 0x1404d83f0
je 0x1404d847d
mov r8, r13
movzx dx, bh
cwd
mov cx, r9w
mov rdx, rax
mov cl, 0x19
movzx cx, al
mov rcx, r15
call fcn.1404e45e1
test eax, eax
jne 0x1404d8452
mov rax, qword [rbx]
rcr cx, 0x9d
mov ecx, 0x3d
clc
cmp rsi, 0x6672379f
cmp esp, eax
cmp word [rax + r13*2], cx
jmp 0x1404d843c
je 0x1404d846c
cmp word [rax + r13*2], si
jmp 0x1404d844c
je 0x1404d846c
add rbx, 8
bswap rax
lahf
movzx ax, r9b
mov rax, qword [rbx]
jmp 0x1404d8467
jmp 0x1404d83e8
sub rbx, r14
sar rbx, 3
jmp 0x1404d8478
jmp 0x1404d8493
sub rbx, r14
clc
cmp ebp, 0x1e6c1582
sar rbx, 3
cmp eax, 0x59a6772b
neg rbx
test rbx, rbx
jmp 0x1404d849b
js 0x1404d854f
cmp qword [r14], rsi
je 0x1404d854f
mov rcx, qword [r14 + rbx*8]
jmp 0x1404d84b3
call fcn.1404c8273
test r12w, r12w
je 0x1404d84e4
mov qword [r14 + rbx*8], r15
jmp 0x1404d84cb
jmp 0x1404d85e8
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404d84da
mov qword [r14 + rbx*8], rax
inc rbx
test r11, r14
cmp qword [r14 + rbx*8], rsi
jmp 0x1404d84ed
jne 0x1404d84d0
mov r8d, 8
bswap rdx
movzx rdx, r11w
mov rdx, rbx
mov cx, 0x5def
xchg cl, ch
mov rcx, r14
jmp 0x1404d8511
call fcn.1404d7b84
xor ecx, ecx
mov bx, bx
jmp 0x1404d8523
mov rbx, rax
jmp 0x1404d852b
call fcn.1404c8273
test rbx, rbx
jmp 0x1404d8538
je 0x1404d85eb
mov qword [0x1400ba2e8], rbx
jmp 0x1404d854a
jmp 0x1404d85eb
test r12w, r12w
jmp 0x1404d8558
je 0x1404d870c
neg rbx
cwd
bsf dx, si
mov dx, 0x4b61
lea rdx, [rbx + 2]
cmp rdx, rbx
jae 0x1404d8586
or rbp, 0xffffffffffffffff
jmp 0x1404d8581
jmp 0x1404d870e
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jmp 0x1404d8598
jae 0x1404d8578
mov r8d, 8
setg ch
mov rcx, r14
jmp 0x1404d85af
call fcn.1404d7b84
sub ecx, ecx
mov r14, rax
jmp 0x1404d85be
call fcn.1404c8273
test r14, r14
je 0x1404d8578
mov qword [r14 + rbx*8], r15
dec di
seta dil
sbb di, 0x3cf4
mov qword [r14 + rbx*8 + 8], rsi
mov qword [0x1400ba2e8], r14
mov rdi, rsi
test ebp, ebp
je 0x1404d8710
or rbp, 0xffffffffffffffff
inc r14b
movsx r14, sp
jmp 0x1404d8603
mov r14, rbp
jmp 0x1404d860b
inc r14
cmc
cmp word [r15 + r14*2], si
jmp 0x1404d8619
jne 0x1404d860b
mov edx, 2
adc cx, si
add r14, rdx
movsx rcx, r14w
setns ch
cmovle cx, r15w
mov rcx, r14
jmp 0x1404d863e
call fcn.1404cc41a
mov rbx, rax
jmp 0x1404d864b
test rax, rax
jmp 0x1404d8653
je 0x1404d86d4
mov r8, r15
mov rdx, r14
movsxd rcx, r10d
bswap cx
mov rcx, rax
call fcn.1404c8f72
test eax, eax
jne 0x1404d8780
neg r12w
movsx eax, dx
lea rax, [r13 + 1]
movzx ecx, r9w
mov cx, dx
lea rax, [rbx + rax*2]
xchg ecx, ecx
mov rcx, rbx
jmp 0x1404d8695
sbb rdx, rdx
mov word [rax - 2], si
cmp rax, rbx
and rdx, rax
jmp 0x1404d86a7
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x1404d86b4
jne 0x1404d86d4
call fcn.1404b4263
mov esi, ebp
movsxd rcx, r13d
setnp ch
mov dword [rax], 0x2a
movsx ecx, bp
movsx cx, cl
mov rcx, rbx
call fcn.1404c8273
jmp 0x1404d8710
call fcn.1404b4263
or rsi, 0xffffffffffffffff
movzx bp, bpl
mov dword [rax], 0x16
movsx bp, r9b
movsx rbp, bp
mov ebp, esi
mov rsi, r11
cmova rcx, r9
mov esi, ebp
movsx ebp, dx
mov ebp, esi
mov esi, ebp
mov rcx, rdi
call fcn.1404c8273
mov eax, esi
cmovl rbx, rsi
mov rbx, qword [rsp + 0x60]
sbb dil, r8b
seto dil
mov rbp, qword [rsp + 0x68]
not dil
adc r15b, 0xe0
ror r15b, cl
mov rsi, qword [rsp + 0x70]
btc r15w, r12w
xchg r15b, r14b
add rsp, 0x30
movsx r14w, cl
movzx r12d, r13w
pop r15
mov di, 0x5286
pop r14
mov dil, 3
bswap r13w
movsxd r12, r13d
pop r13
movzx di, al
pop r12
mov di, 0x4504
not dil
movzx di, r13b
pop rdi
jmp 0x1404d877f
ret
sub r9d, r9d
mov qword [rsp + 0x20], rsi
cmc
test r11, 0x27472217
sub r8d, r8d
test bpl, 0x52
cmp r8b, 2
jmp 0x1404d87a0
sub edx, edx
cmp dil, r15b
xor ecx, ecx
jmp 0x1404d87ac
call fcn.1404b4fe3
int3