Function at 0x1401a9070
Capabilities:
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xf8
mov r13, rcx
mov rcx, qword [0x140248498]
mov qword [rsp + 0x38], r8
mov rsi, rdx
test rcx, rcx
je 0x1401a934f
lea rdx, str.environ
call qword [sym.imp.python312.dll_PyObject_GetAttrString]
mov rcx, rsi
mov qword [rsp + 0x28], rax
call qword [sym.imp.python312.dll_PyUnicode_FromString]
cmp qword [rsp + 0x38], 0
mov qword [rsp + 0x30], rax
movzx eax, byte [rsi]
je 0x1401a9230
xor r8d, r8d
mov word [rsp + 0x50], r8w
test al, al
je 0x1401a938e
xor r14d, r14d
lea r15, [rsp + 0x50]
lea r12, [rsp + 0x44]
mov edi, 0x28
lea rbp, [rsp + 0x48]
nop word cs:[rax + rax]
mov r13, rdi
mov r8d, 2
mov rdx, r12
mov rcx, rbp
sub r13, r14
mov byte [rsp + 0x44], al
lea rbx, [r15 + r14*2]
mov byte [rsp + 0x45], 0
call sub.msvcrt.dll_mbstowcs
cmp rax, 1
jne 0x14020cd4a
cmp word [r15 + r14*2], 0
movzx eax, word [rsp + 0x48]
je 0x1401a914e
nop dword [rax + rax]
add rbx, 2
sub r13, 1
cmp word [rbx], 0
jne 0x1401a9140
test r13, r13
je 0x14020cd4a
add r14, 1
mov word [rbx], ax
xor ecx, ecx
movzx eax, byte [rsi + r14]
mov word [rbx + 2], cx
test al, al
jne 0x1401a9100
mov rdi, qword [rsp + 0x38]
mov rcx, r15
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.python312.dll_PyUnicode_FromWideChar]
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov rbx, rax
mov r8, rax
call qword [sym.imp.python312.dll_PyObject_SetItem]
test eax, eax
jne 0x1401a9398
mov rax, qword [rbx]
test eax, eax
js 0x1401a91c0
sub rax, 1
mov qword [rbx], rax
je 0x1401a9340
mov rsi, qword [rsp + 0x30]
mov rax, qword [rsi]
test eax, eax
js 0x1401a91d5
sub rax, 1
mov qword [rsi], rax
je 0x1401a9224
mov rcx, qword [rsp + 0x28]
mov rax, qword [rcx]
test eax, eax
js 0x1401a9210
sub rax, 1
mov qword [rcx], rax
jne 0x1401a9210
mov rax, qword [rcx + 8]
mov rax, qword [rax + 0x30]
add rsp, 0xf8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp rax
add rsp, 0xf8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsi + 8]
mov rcx, rsi
call qword [rax + 0x30]
jmp 0x1401a91d5
xor edx, edx
mov word [rsp + 0xa0], dx
test al, al
je 0x1401a93ae
lea rdx, [rsp + 0x4c]
xor r12d, r12d
lea r15, [rsp + 0x46]
mov ebp, 0x28
mov qword [rsp + 0x38], rdx
lea rdi, [rsp + 0xa0]
nop word cs:[rax + rax]
nop dword [rax]
mov rcx, qword [rsp + 0x38]
mov r14, rbp
mov rdx, r15
mov byte [rsp + 0x46], al
mov r8d, 2
sub r14, r12
mov byte [rsp + 0x47], 0
lea rbx, [rdi + r12*2]
call sub.msvcrt.dll_mbstowcs
cmp rax, 1
jne 0x14020cd4a
cmp word [rdi + r12*2], 0
movzx eax, word [rsp + 0x4c]
je 0x1401a92be
nop dword [rax]
add rbx, 2
sub r14, 1
cmp word [rbx], 0
jne 0x1401a92b0
test r14, r14
je 0x14020cd4a
mov word [rbx], ax
add r12, 1
xor eax, eax
mov word [rbx + 2], ax
movzx eax, byte [rsi + r12]
test al, al
jne 0x1401a9270
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.python312.dll_PyObject_DelItem]
test eax, eax
je 0x1401a91c0
mov rcx, qword [r13 + 0x60]
mov qword [r13 + 0x60], 0
test rcx, rcx
je 0x1401a91c0
mov rax, qword [rcx]
test eax, eax
js 0x1401a91c0
sub rax, 1
mov qword [rcx], rax
jne 0x1401a91c0
mov rax, qword [rcx + 8]
call qword [rax + 0x30]
jmp 0x1401a91c0
mov rax, qword [rbx + 8]
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x1401a91c0
lea rcx, [0x140220618]
call qword [sym.imp.python312.dll_PyImport_ImportModule]
mov qword [0x140248498], rax
mov rcx, rax
test rax, rax
jne 0x1401a909e
lea r8, str._Unexpected_failure_of_hard_import_of_os_
lea rdx, str.IMPORT_HARD_OS
lea rcx, str._s_:__s_n
call fcn.1401a8420
call sub.msvcrt.dll_abort
lea r15, [rsp + 0x50]
jmp 0x1401a916d
mov ecx, 1
call qword [sym.imp.python312.dll_PyErr_PrintEx]
mov ecx, 1
call qword [sym.imp.python312.dll_Py_Exit]
lea rdi, [rsp + 0xa0]
jmp 0x1401a92dd
call sub.msvcrt.dll_abort
nop
call sub.msvcrt.dll_abort
nop
call sub.msvcrt.dll_abort
nop