Function at 0x1400298dd
Capabilities:
Set environment variable

Disassembly:
push rax
pushf
mov eax, 0xa7d714f8
pushf
not eax
add eax, 0xa15d74fd
xor eax, 0xd2f91dac
rol eax, 0x53
popf
pushf
not eax
add eax, 0xcfd18565
xor eax, 0xc867d42d
rol eax, 9
popf
pushf
not eax
add eax, 0xdd741b4c
xor eax, 0xed7992f6
rol eax, 0x51
popf
cmp eax, 4
jne 0x14002992d
popf
pop rax
jmp 0x140029d27
cmp eax, 0
jne 0x14002993c
popf
pop rax
jmp 0x140029ae0
cmp eax, 3
jne 0x14002994b
popf
pop rax
jmp 0x140029ced
cmp eax, 1
jne 0x14002995a
popf
pop rax
jmp 0x140029bf7
cmp eax, 0xd
jne 0x140029969
popf
pop rax
jmp 0x14002a187
cmp eax, 0x1a
jne 0x140029978
popf
pop rax
jmp 0x14002a6d7
cmp eax, 0xe
jne 0x140029987
popf
pop rax
jmp 0x14002a206
cmp eax, 0xb
jne 0x140029996
popf
pop rax
jmp 0x14002a06d
cmp eax, 0x19
jne 0x1400299a5
popf
pop rax
jmp 0x14002a645
cmp eax, 8
jne 0x1400299b4
popf
pop rax
jmp 0x140029f54
cmp eax, 0x1d
jne 0x1400299c3
popf
pop rax
jmp 0x14002a7f3
cmp eax, 0x17
jne 0x1400299d2
popf
pop rax
jmp 0x14002a5b7
cmp eax, 0x1c
jne 0x1400299e1
popf
pop rax
jmp 0x14002a7b7
cmp eax, 0x12
jne 0x1400299f0
popf
pop rax
jmp 0x14002a35b
cmp eax, 0x18
jne 0x1400299ff
popf
pop rax
jmp 0x14002a60f
cmp eax, 0x11
jne 0x140029a0e
popf
pop rax
jmp 0x14002a30a
cmp eax, 0x1b
jne 0x140029a1d
popf
pop rax
jmp 0x14002a738
cmp eax, 0x16
jne 0x140029a2c
popf
pop rax
jmp 0x14002a514
cmp eax, 0xa
jne 0x140029a3b
popf
pop rax
jmp 0x14002a024
cmp eax, 0x14
jne 0x140029a4a
popf
pop rax
jmp 0x14002a467
cmp eax, 0xf
jne 0x140029a59
popf
pop rax
jmp 0x14002a25c
cmp eax, 0x13
jne 0x140029a68
popf
pop rax
jmp 0x14002a3e8
cmp eax, 0x15
jne 0x140029a77
popf
pop rax
jmp 0x14002a4cb
cmp eax, 2
jne 0x140029a86
popf
pop rax
jmp 0x140029c89
cmp eax, 6
jne 0x140029a95
popf
pop rax
jmp 0x140029e3b
cmp eax, 0xc
jne 0x140029aa4
popf
pop rax
jmp 0x14002a0e7
cmp eax, 7
jne 0x140029ab3
popf
pop rax
jmp 0x140029e9f
cmp eax, 5
jne 0x140029ac2
popf
pop rax
jmp 0x140029da9
cmp eax, 9
jne 0x140029ad1
popf
pop rax
jmp 0x140029fe6
cmp eax, 0x10
jne 0x140029ae0
popf
pop rax
jmp 0x14002a304
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
xor r15d, r15d
mov r14, rdx
mov rsi, rcx
mov qword [rbp + 0x17], r15
xor edx, edx
mov qword [rbp + 0x1f], r15
lea rcx, [rbp - 0x39]
mov qword [rbp + 0x27], r15
mov qword [rbp + 0x2f], r15
mov edi, r15d
mov qword [rbp + 0x37], r15
mov byte [rbp + 0x3f], r15b
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
mov byte [rbp + 0xf], r15b
call fcn.140059661
mov rax, qword [rbp - 0x31]
mov ebx, 0xa3282789
pushf
not ebx
add ebx, 0xa12dc74a
xor ebx, 0xc0e4c438
rol ebx, 0xc6
popf
pushf
not ebx
add ebx, 0xa72d0ebb
xor ebx, 0x902290ab
rol ebx, 0xb1
popf
cmp dword [rax + 0xc], ebx
jne 0x140029bc4
push rax
pushf
mov eax, 0xaa17e797
pushf
not eax
add eax, 0x82a5226a
xor eax, 0xf76e1bcb
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xd0325f6e
xor eax, 0xbf770d94
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x8cd1850f
xor eax, 0xdbe88ca0
rol eax, 0xaf
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0x8859af17
pushf
not eax
add eax, 0xbc048877
xor eax, 0x92bb4dcc
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xd700d075
xor eax, 0x9ccfb72b
rol eax, 0xcd
popf
jmp 0x14002991e
cmp byte [rbp - 0x21], r15b
je 0x140029c43
push rax
pushf
mov eax, 0xad6fcf7b
pushf
not eax
add eax, 0xbbe810bd
xor eax, 0xd6e803da
rol eax, 0x97
popf
pushf
not eax
add eax, 0x99a4548f
xor eax, 0xd205d94a
rol eax, 0x61
popf
pushf
not eax
add eax, 0xd853fd76
xor eax, 0xa4d85126
rol eax, 0xf8
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0xe6c2f6cd
pushf
not eax
add eax, 0x88bccb06
xor eax, 0xfc591ebd
rol eax, 3
popf
pushf
not eax
add eax, 0xd651e31d
xor eax, 0xb878e467
rol eax, 0xea
popf
pushf
not eax
add eax, 0x94a3375d
xor eax, 0xc6fee218
rol eax, 0x2f
popf
jmp 0x14002991e
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xb1ef9ba8
pushf
not eax
add eax, 0xc7ba66d6
xor eax, 0xee56d5b8
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x917b2f66
xor eax, 0xa4a370f3
rol eax, 0x87
popf
pushf
not eax
add eax, 0xa4efefa5
xor eax, 0xbbcd4fc6
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x8caa53f1
xor eax, 0xebbb2b5f
rol eax, 0xce
popf
jmp 0x14002991e
mov r8d, ebx
jmp 0x14002a06d
call fcn.14005ecf8
test eax, eax
jne 0x140029d76
push rax
pushf
mov eax, 0x6019b721
pushf
not eax
add eax, 0xb088df8e
xor eax, 0xc6c4f7c2
rol eax, 0x56
popf
pushf
not eax
add eax, 0xe0599009
xor eax, 0x8b113ff1
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb8c2e1b0
xor eax, 0xb4c5cb98
rol eax, 0xda
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0xa65430b3
pushf
not eax
add eax, 0x96e1b289
xor eax, 0x8b173918
rol eax, 0xab
popf
pushf
not eax
add eax, 0x9b501d0b
xor eax, 0x8589b12e
rol eax, 0x85
popf
jmp 0x14002991e
cmp byte [rbp - 0x21], r15b
je 0x140029df5
push rax
pushf
mov eax, 0x9baa7a31
pushf
not eax
add eax, 0xba2d96ac
xor eax, 0x8eba43da
rol eax, 0x77
popf
pushf
not eax
add eax, 0xb141c417
xor eax, 0xbc9f5ad1
rol eax, 0x50
popf
pushf
not eax
add eax, 0xbe51d060
xor eax, 0xc09773f9
rol eax, 0x8f
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0x20036ed5
pushf
not eax
add eax, 0xb1b43bd0
xor eax, 0x88b1d738
rol eax, 0x68
popf
pushf
not eax
add eax, 0x97c6ae89
xor eax, 0xb7372df6
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x91067370
xor eax, 0xfe9c9756
rol eax, 0xac
popf
jmp 0x14002991e
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xe4aa2746
pushf
not eax
add eax, 0xda1508c8
xor eax, 0x9fe7e4e2
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xbb1a03cf
xor eax, 0xe1372b03
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xa075c63e
xor eax, 0xd947f7ab
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xc6460d22
xor eax, 0xe71a5bf3
rol eax, 0xf0
popf
jmp 0x14002991e
mov r8d, 0x2e419c24
pushf
not r8d
add r8d, 0xa4b3b489
xor r8d, 0xaac660e4
rol r8d, 0xc9
popf
pushf
not r8d
add r8d, 0xb25c7728
xor r8d, 0xcdc863d4
rol r8d, 0xfe
popf
pushf
not r8d
add r8d, 0x92b1dc59
xor r8d, 0xe3134a21
rol r8d, 0xeb
popf
pushf
not r8d
add r8d, 0xcc7e6cec
xor r8d, 0xf99a145f
rol r8d, 0xdd
popf
jmp 0x14002a06d
cmp byte [rbp - 0x21], r15b
je 0x140029fb3
push rax
pushf
mov eax, 0xcf618af3
pushf
not eax
add eax, 0xb05f4721
xor eax, 0x86b1be98
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x8b815771
xor eax, 0x82afdf68
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x90d53700
xor eax, 0x9b5ea131
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x90229aec
xor eax, 0xe6b4fa7e
rol eax, 0x3e
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0x6623d71f
pushf
not eax
add eax, 0xadde9675
xor eax, 0x86b2a73a
rol eax, 0x40
popf
pushf
not eax
add eax, 0xa87d3496
xor eax, 0xed751c26
rol eax, 0x68
popf
jmp 0x14002991e
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x26a84eab
pushf
not eax
add eax, 0xb4c9a0fb
xor eax, 0xfbce9aa0
rol eax, 0x62
popf
pushf
not eax
add eax, 0xa2f275f3
xor eax, 0xcb935235
rol eax, 0xac
popf
jmp 0x14002991e
mov r8d, r15d
push rax
pushf
mov eax, 0x81737b63
pushf
not eax
add eax, 0xa4f98f8f
xor eax, 0x8d0b894c
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xdc0d6150
xor eax, 0xb78fc726
rol eax, 0x75
popf
pushf
not eax
add eax, 0xc2598136
xor eax, 0xe7ca258b
rol eax, 0xf4
popf
jmp 0x14002991e
lea rdx, [rbp + 0x17]
mov rcx, rsi
call fcn.140047800
test eax, eax
jne 0x14002a0b4
push rax
pushf
mov eax, 0x5405c0e8
pushf
not eax
add eax, 0x8015971e
xor eax, 0x96c6ec7d
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x9ad9b5cc
xor eax, 0xfdb55467
rol eax, 0x58
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0x1c66da76
pushf
not eax
add eax, 0xda65f1fd
xor eax, 0xba674077
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x8b03398b
xor eax, 0x99fba733
rol eax, 0x1a
popf
jmp 0x14002991e
xor edx, edx
lea rcx, [rbp - 0x39]
call fcn.140059661
mov rax, qword [rbp - 0x31]
cmp dword [rax + 0xc], ebx
jne 0x14002a154
push rax
pushf
mov eax, 0x911bb9d6
pushf
not eax
add eax, 0xc3341a88
xor eax, 0xe7a35117
rol eax, 0x54
popf
pushf
not eax
add eax, 0xe78d3ccb
xor eax, 0x93455975
rol eax, 0x55
popf
pushf
not eax
add eax, 0x9e4f5127
xor eax, 0xaf3b4924
rol eax, 0x68
popf
pushf
not eax
add eax, 0xc7caca7a
xor eax, 0x8efdd9bc
rol eax, 0xb9
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0xcad86a69
pushf
not eax
add eax, 0xac75c9d8
xor eax, 0x8f2c0732
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x93ad329c
xor eax, 0xce4bc0ff
rol eax, 0x9f
popf
jmp 0x14002991e
cmp byte [rbp - 0x21], r15b
je 0x14002a1c0
push rax
pushf
mov eax, 0x62e1f0c6
pushf
not eax
add eax, 0xbf3bce59
xor eax, 0xd75964f0
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xe00862e1
xor eax, 0x8ea84ba8
rol eax, 0x9f
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0x758a94ed
pushf
not eax
add eax, 0xd399bed2
xor eax, 0x82004594
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xb3964bb1
xor eax, 0x80e82c16
rol eax, 0xac
popf
pushf
not eax
add eax, 0xc23c825e
xor eax, 0xfb1940d8
rol eax, 0x80
popf
jmp 0x14002991e
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x14002a514
call fcn.14005ecf8
test eax, eax
jne 0x14002a2be
push rax
pushf
mov eax, 0x2f2b778
pushf
not eax
add eax, 0xb408fd53
xor eax, 0xbae68633
rol eax, 0x43
popf
pushf
not eax
add eax, 0xa56c69c3
xor eax, 0x94373847
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x9ddc81ba
xor eax, 0xe206a88e
rol eax, 0x81
popf
pushf
not eax
add eax, 0xeb0b85bd
xor eax, 0xe7c18de4
rol eax, 0xbf
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0x1f8abc09
pushf
not eax
add eax, 0xe5c09586
xor eax, 0xe13329cc
rol eax, 0x65
popf
pushf
not eax
add eax, 0xb994fa70
xor eax, 0xd4ae47f1
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xbc892982
xor eax, 0x9841f569
rol eax, 0xc8
popf
jmp 0x14002991e
cmp byte [rbp - 0x21], r15b
je 0x14002a35b
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0x8e4d3719
pushf
not eax
add eax, 0xedc024bd
xor eax, 0xe2b74a44
rol eax, 0x91
popf
pushf
not eax
add eax, 0x9fcd35e1
xor eax, 0xc44699e1
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xf7e44113
xor eax, 0x811ac9ae
rol eax, 0xae
popf
jmp 0x14002991e
mov ebx, 0x8ec549ce
pushf
not ebx
add ebx, 0xccecc73b
xor ebx, 0xd0c0cdd0
rol ebx, 0x12
popf
pushf
not ebx
add ebx, 0xa0800b8a
xor ebx, 0xdd8c47eb
rol ebx, 0x15
popf
jmp 0x14002a514
cmp byte [rbp - 0x21], r15b
je 0x14002a421
push rax
pushf
mov eax, 0x420544cf
pushf
not eax
add eax, 0x99cc7397
xor eax, 0xa724dda5
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xb83548b1
xor eax, 0x8926497a
rol eax, 0x94
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0xfdcf4488
pushf
not eax
add eax, 0xd916033e
xor eax, 0x8c8c7d98
rol eax, 0x90
popf
pushf
not eax
add eax, 0xad3ceae1
xor eax, 0xcac3286e
rol eax, 0x64
popf
pushf
not eax
add eax, 0x97b63053
xor eax, 0x8ac078d0
rol eax, 0x8f
popf
jmp 0x14002991e
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
push rax
pushf
mov eax, 0xb0ec1e98
pushf
not eax
add eax, 0xab77881a
xor eax, 0xb9620891
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x98dfe7d7
xor eax, 0x98173a59
rol eax, 0x61
popf
pushf
not eax
add eax, 0xef88f50d
xor eax, 0x9f27eb3a
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xb3de6e96
xor eax, 0xbce5255a
rol eax, 0x30
popf
jmp 0x14002991e
mov ebx, r15d
push rax
pushf
mov eax, 0x61891a6
pushf
not eax
add eax, 0x842d64bb
xor eax, 0xee94c7f6
rol eax, 0x14
popf
pushf
not eax
add eax, 0xfe15cc36
xor eax, 0xb9e7bb66
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x80c94aa8
xor eax, 0xc4a03fa2
rol eax, 0xa
popf
jmp 0x14002991e
mov r8d, ebx
lea rdx, [rbp - 0x19]
mov rcx, r14
call fcn.140047800
mov rdi, qword [rbp - 9]
test eax, eax
jne 0x14002a571
push rax
pushf
mov eax, 0xcea12147
pushf
not eax
add eax, 0x890443a9
xor eax, 0x8a7b1b54
rol eax, 0x34
popf
pushf
not eax
add eax, 0xa2b259f2
xor eax, 0xf0ce25c8
rol eax, 0x67
popf
pushf
not eax
add eax, 0xa4574fa5
xor eax, 0xdb987d55
rol eax, 0xbc
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0x32688703
pushf
not eax
add eax, 0x8badb431
xor eax, 0xe5f14047
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xad6fe3df
xor eax, 0xbe5e42c3
rol eax, 0xed
popf
pushf
not eax
add eax, 0xe99e64b8
xor eax, 0x933c9b84
rol eax, 0xf0
popf
jmp 0x14002991e
mov rcx, qword [rbp + 0x27]
mov rdx, rdi
jmp 0x14002a5bf
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ebx, eax
jmp 0x14002a645
mov ebx, r15d
push rax
pushf
mov eax, 0x1e8af3b
pushf
not eax
add eax, 0xa6858257
xor eax, 0x9b0962dd
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xd2b5a057
xor eax, 0xa0b8f2fa
rol eax, 0x5f
popf
jmp 0x14002991e
cmp byte [rbp + 0xf], r15b
je 0x14002a67e
push rax
pushf
mov eax, 0xfdcdf0ce
pushf
not eax
add eax, 0xe63a19d1
xor eax, 0xf82cdf14
rol eax, 0x86
popf
pushf
not eax
add eax, 0x858bedda
xor eax, 0xf54e6853
rol eax, 0x22
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0xdfb72ae5
pushf
not eax
add eax, 0xb72039e4
xor eax, 0x991e4257
rol eax, 0x27
popf
pushf
not eax
add eax, 0xdb3f290f
xor eax, 0xb3b169ef
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xd7df2905
xor eax, 0x8ff16259
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xf31a11cc
xor eax, 0xade51dfb
rol eax, 0x29
popf
jmp 0x14002991e
mov rcx, rdi
call fcn.14007221b
push rax
pushf
mov eax, 0x42b160b9
pushf
not eax
add eax, 0xc876a800
xor eax, 0x8db5833a
rol eax, 0x59
popf
pushf
not eax
add eax, 0xd4e08ff2
xor eax, 0xdb497f02
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xeca5601d
xor eax, 0xd1e4d746
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xdef3228b
xor eax, 0xbcddb449
rol eax, 0x8f
popf
jmp 0x14002991e
cmp byte [rbp + 0x3f], r15b
je 0x14002a771
push rax
pushf
mov eax, 0x9bfa55d6
pushf
not eax
add eax, 0xabbe1594
xor eax, 0x9a9f1480
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x9db0d592
xor eax, 0xf2cb7bb9
rol eax, 0xc0
popf
jmp 0x14002991e
push rax
pushf
mov eax, 0x8290490
pushf
not eax
add eax, 0xa2aff4c2
xor eax, 0xf68fe6bc
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x9ccd14b7
xor eax, 0xbcd164fe
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xbe701e9d
xor eax, 0xefc1f347
rol eax, 0xf0
popf
jmp 0x14002991e
mov rcx, qword [rbp + 0x27]
call fcn.14007221b
push rax
pushf
mov eax, 0x84951c0
pushf
not eax
add eax, 0xafb1dd60
xor eax, 0xd3fbcdbc
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x894e9c9f
xor eax, 0x932b280a
rol eax, 0xa4
popf
jmp 0x14002991e
lea r11, [rsp + 0xa0]
mov eax, ebx
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret