Function at 0x1400ef209
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404d053c
mov qword [rsp + 8], rbx
jmp 0x1404d0559
mov qword [rsp + 0x10], rbp
cmp r11b, 0x2f
shl bpl, 0x84
mov qword [rsp + 0x18], rsi
push rdi
push r12
shl bpl, cl
push r13
or bp, si
push r14
sub ebp, r10d
bswap ebp
push r15
sal bpl, 0x4e
sub rsp, 0x30
btr r15, 0x34
xor esi, esi
cmp dl, r9b
mov ebp, edx
mov r15, rcx
jmp 0x1404d059c
test rcx, rcx
jmp 0x1404d05a4
jne 0x1404d05c4
call fcn.1404ac6b8
mov dword [rax], 0x16
cmc
or rax, 0xffffffffffffffff
jmp 0x1404d05bf
jmp 0x1404d0af6
mov edx, 0x3d
movsxd rdi, ecx
movzx rdi, r11w
not dil
mov rdi, r15
call fcn.1401b829f
mov r13, rax
jmp 0x1404d05e3
test rax, rax
je 0x1404d0ab5
cmp rax, r15
jmp 0x1404d05f4
je 0x1404d0ab5
mov r14, qword [0x1400ba2e8]
cmp r14, qword [0x1400ba2f0]
cmovp r12w, si
bswap r12d
movzx r12d, word [rax + 2]
jmp 0x1404d061a
jne 0x1404d064b
mov rcx, r14
jmp 0x1404d0628
call fcn.1404d0b8f
mov r14, rax
btc bx, 0xad
or bx, sp
mov qword [0x1400ba2e8], rax
shl ebx, 0x96
btc bx, r11w
xadd bx, bx
mov ebx, 1
cmc
jmp 0x1404d0657
test r14, r14
jmp 0x1404d065f
jne 0x1404d07a2
mov rax, qword [0x1400ba2e0]
test r8, r8
test ebp, ebp
jmp 0x1404d0676
je 0x1404d06e3
test rax, rax
jmp 0x1404d0684
je 0x1404d06e3
call fcn.1404ac8ec
test rax, rax
jmp 0x1404d0697
je 0x1404d0ab5
mov r14, qword [0x1400ba2e8]
jmp 0x1404d06b0
cmp r14, qword [0x1400ba2f0]
jmp 0x1404d06bc
jne 0x1404d0794
mov rcx, r14
jmp 0x1404d06ca
call fcn.1404d0b8f
mov r14, rax
mov qword [0x1400ba2e8], rax
jmp 0x1404d06de
jmp 0x1404d0794
test r12w, r12w
jmp 0x1404d06ec
je 0x1404d0ad4
test rax, rax
jmp 0x1404d06fa
jne 0x1404d0760
lea edx, [rax + 8]
not cx
movsx cx, r9b
mov rcx, rbx
call fcn.1404c4848
sub ecx, ecx
jmp 0x1404d071a
mov qword [0x1400ba2e0], rax
jmp 0x1404d0726
call fcn.1404c061b
cmp qword [0x1400ba2e0], rsi
jmp 0x1404d0737
jne 0x1404d074b
or rbp, 0xffffffffffffffff
jmp 0x1404d0746
jmp 0x1404d0ad6
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404d075a
jne 0x1404d07a2
mov edx, 8
movsxd rcx, r15d
movzx ecx, cx
seto cl
mov rcx, rbx
jmp 0x1404d0776
call fcn.1404c4848
xor ecx, ecx
mov qword [0x1400ba2e8], rax
call fcn.1404c061b
mov r14, qword [0x1400ba2e8]
test dh, 0x92
stc
test r14, r14
jmp 0x1404d079c
je 0x1404d073d
mov rax, qword [r14]
sub r13, r15
jmp 0x1404d07ad
sar r13, 1
xor ebx, 0x54c910f4
setb bh
mov rbx, r14
test rax, rax
je 0x1404d083d
mov r8, r13
movsx rdx, sp
mov rdx, rax
not cx
movsx rcx, r13w
movzx rcx, r15w
mov rcx, r15
jmp 0x1404d07e2
call fcn.1404dc8ab
test eax, eax
jne 0x1404d0817
mov rax, qword [rbx]
mov ecx, 0x3d
jmp 0x1404d07fc
cmp word [rax + r13*2], cx
je 0x1404d082c
cmp word [rax + r13*2], si
jmp 0x1404d0811
je 0x1404d082c
add rbx, 8
movzx eax, r14w
mov rax, qword [rbx]
jmp 0x1404d0827
jmp 0x1404d07bc
sub rbx, r14
sar rbx, 3
jmp 0x1404d0838
jmp 0x1404d0857
sub rbx, r14
cmc
clc
sar rbx, 3
test r14b, 0x61
test r11, rsp
cmp r8, 0x189f376e
neg rbx
test rbx, rbx
js 0x1404d08f8
cmp qword [r14], rsi
jmp 0x1404d0868
je 0x1404d08f8
mov rcx, qword [r14 + rbx*8]
jmp 0x1404d0877
call fcn.1404c061b
test r12w, r12w
je 0x1404d08aa
mov qword [r14 + rbx*8], r15
jmp 0x1404d088f
jmp 0x1404d09af
mov rax, qword [r14 + rbx*8 + 8]
jmp 0x1404d089e
mov qword [r14 + rbx*8], rax
jmp 0x1404d08a7
inc rbx
cmp qword [r14 + rbx*8], rsi
jmp 0x1404d08b3
jne 0x1404d0894
mov r8d, 8
bswap dx
mov rdx, rbx
mov rcx, r14
jmp 0x1404d08cd
call fcn.1404cff56
xor ecx, ecx
xchg bl, bh
mov rbx, rax
call fcn.1404c061b
test rbx, rbx
jmp 0x1404d08e6
je 0x1404d09bc
mov qword [0x1400ba2e8], rbx
jmp 0x1404d09bc
test r12w, r12w
jmp 0x1404d0901
je 0x1404d0ae0
neg rbx
rol dl, cl
lea rdx, [rbx + 2]
test r12w, ax
test ah, 0x29
cmp rdx, rbx
jae 0x1404d092e
or rbp, 0xffffffffffffffff
jmp 0x1404d0929
jmp 0x1404d0ae2
movabs rax, 0x1fffffffffffffff
cmc
cmp rdx, rax
jmp 0x1404d0941
jae 0x1404d0920
mov r8d, 8
mov rcx, r14
jmp 0x1404d0955
call fcn.1404cff56
sub ecx, ecx
xchg r14w, r14w
mov r14, 0x661a7538
mov r14, rax
jmp 0x1404d096f
call fcn.1404c061b
test r14, r14
jmp 0x1404d097c
je 0x1404d0920
mov qword [r14 + rbx*8], r15
jmp 0x1404d0990
mov qword [r14 + rbx*8 + 8], rsi
btr di, 0x3d
sbb edi, r10d
mov qword [0x1400ba2e8], r14
and di, 0x3fe2
dec dil
bts edi, esp
mov rdi, rsi
cmp r12b, sil
test r10w, 0x112b
clc
test ebp, ebp
jmp 0x1404d09c3
je 0x1404d0ae7
or rbp, 0xffffffffffffffff
mov r14, rbp
inc r14
test r8w, 0x47b8
cmp word [r15 + r14*2], si
jmp 0x1404d09e3
jne 0x1404d09d0
mov edx, 2
xor cl, 0x7c
shr ecx, 0x2f
add r14, rdx
bswap cx
movsx cx, r15b
mov rcx, r14
jmp 0x1404d0a07
call fcn.1404c4848
mov rbx, rax
clc
cmc
test rax, rax
je 0x1404d0aa8
mov r8, r15
mov rcx, r12
jmp 0x1404d0a25
mov rdx, r14
cmovb ecx, r13d
mov cx, 0x2881
mov rcx, rax
jmp 0x1404d0a38
call fcn.1404c1331
test eax, eax
jne 0x1404d0b66
neg r12w
not al
dec cx
lea rax, [r13 + 1]
movsx rcx, bp
lea rax, [rbx + rax*2]
movsx rcx, ax
mov cx, 0x515d
movzx cx, dh
mov rcx, rbx
jmp 0x1404d0a6e
sbb rdx, rdx
stc
mov word [rax - 2], si
test esi, 0x1cc60531
and rdx, rax
jmp 0x1404d0a84
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x1404d0a91
jne 0x1404d0aa8
call fcn.1404ac6b8
mov esi, ebp
movzx ecx, r14w
mov dword [rax], 0x2a
mov rcx, rbx
call fcn.1404c061b
jmp 0x1404d0ae7
call fcn.1404ac6b8
or rsi, 0xffffffffffffffff
movsx rcx, cx
bswap bp
mov dword [rax], 0x16
movsx rbp, r11w
jmp 0x1404d0ad4
mov ebp, esi
mov esi, ebp
mov ecx, 0x4662af0
movsxd rcx, esi
mov ebp, esi
mov esi, ebp
bswap cx
mov rcx, rdi
jmp 0x1404d0aef
call fcn.1404c061b
mov eax, esi
mov rbx, qword [rsp + 0x60]
or r15, 0x2fb06fcf
mov rbp, qword [rsp + 0x68]
shld si, bx, 0xbf
jmp 0x1404d0b15
mov rsi, qword [rsp + 0x70]
movzx r14d, r15w
cmp rdx, r11
ror r12w, cl
add rsp, 0x30
xchg r13b, r14b
cmovae r12w, bx
not edi
pop r15
movsx di, r9b
pop r14
xchg r12w, r13w
movsx rdi, r15w
pop r13
mov r12d, 0x4f824890
mov rdi, rbx
movzx edi, si
pop r12
xchg di, di
movzx edi, bx
movzx di, r8b
pop rdi
jmp 0x1404d0b65
ret
sub r9d, r9d
mov qword [rsp + 0x20], rsi
cmc
jmp 0x1404d0b74
xor r8d, r8d
clc
cmp bl, 0x70
xor edx, edx
xor ecx, ecx
jmp 0x1404d0b84
call fcn.1404ad3bc
int3