Function at 0x1401303ec
Capabilities:
Set environment variable

Disassembly:
jmp 0x1404d982c
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
add bpl, 0x15
mov qword [rsp + 0x18], rsi
rcr rbp, cl
rol bp, cl
jmp 0x1404d984a
push rdi
movsx rbp, r12w
sal bpl, cl
push r12
movsx bp, r12b
btc ebp, edx
push r13
cmovp bp, dx
test r9b, 0x2f
push r14
sar rbp, 0xed
sub bpl, r8b
movsx bp, r12b
push r15
xor r15b, 0xec
sar r15b, cl
sub rsp, 0x30
xadd r15, rbp
sbb r15b, r11b
xor esi, esi
btr r15w, 0xb5
sar rbp, 0xc
mov ebp, edx
cmp r9w, 0x388f
xchg r15b, r15b
ror r15b, cl
mov r15, rcx
cmp r12w, ax
test rcx, rcx
jmp 0x1404d98b1
jne 0x1404d98d4
call fcn.1404b5eee
mov dword [rax], 0x16
test di, dx
clc
or rax, 0xffffffffffffffff
jmp 0x1404d98cf
jmp 0x1404d9e3b
mov edx, 0x3d
mov rdi, r15
jmp 0x1404d98e1
call fcn.14026b890
mov r13, rax
test r11b, 0x1e
test rax, rax
jmp 0x1404d98f5
je 0x1404d9de2
cmp rax, r15
jmp 0x1404d9903
je 0x1404d9de2
mov r14, qword [0x1400ba2e8]
add r12b, 0xcc
cmp r14, qword [0x1400ba2f0]
setg r12b
movzx r12d, word [rax + 2]
jne 0x1404d9954
mov rcx, r14
jmp 0x1404d9932
call fcn.1404d9ec8
mov r14, rax
jmp 0x1404d993f
mov qword [0x1400ba2e8], rax
sete bl
xadd bx, bx
adc rbx, 0x5fb45b09
mov ebx, 1
jmp 0x1404d995f
test r14, r14
jmp 0x1404d9967
jne 0x1404d9ab3
mov rax, qword [0x1400ba2e0]
cmp dx, r8w
test ebp, ebp
jmp 0x1404d997f
je 0x1404d99ea
test rax, rax
jmp 0x1404d998d
je 0x1404d99ea
call fcn.1404b60fc
test rax, rax
jmp 0x1404d99a0
je 0x1404d9de2
mov r14, qword [0x1400ba2e8]
jmp 0x1404d99b2
cmp r14, qword [0x1400ba2f0]
jmp 0x1404d99be
jne 0x1404d9aa5
mov rcx, r14
jmp 0x1404d99cc
call fcn.1404d9ec8
mov r14, rax
jmp 0x1404d99d9
mov qword [0x1400ba2e8], rax
jmp 0x1404d99e5
jmp 0x1404d9aa5
test r12w, r12w
jmp 0x1404d99f3
je 0x1404d9e06
test rax, rax
jmp 0x1404d9a01
jne 0x1404d9a77
lea edx, [rax + 8]
movsxd rcx, r13d
mov rcx, rbx
jmp 0x1404d9a15
call fcn.1404cdc03
xor ecx, ecx
jmp 0x1404d9a21
mov qword [0x1400ba2e0], rax
jmp 0x1404d9a2d
call fcn.1404c9bb8
cmp qword [0x1400ba2e0], rsi
jmp 0x1404d9a3e
jne 0x1404d9a52
or rbp, 0xffffffffffffffff
jmp 0x1404d9a4d
jmp 0x1404d9e13
mov r14, qword [0x1400ba2e8]
test rbp, 0x3cd36145
cmp r12b, 0
jmp 0x1404d9a69
test r14, r14
jmp 0x1404d9a71
jne 0x1404d9ab3
mov edx, 8
not cl
mov rcx, rbx
jmp 0x1404d9a86
call fcn.1404cdc03
sub ecx, ecx
mov qword [0x1400ba2e8], rax
jmp 0x1404d9a99
call fcn.1404c9bb8
mov r14, qword [0x1400ba2e8]
test r14, r14
jmp 0x1404d9aad
je 0x1404d9a44
mov rax, qword [r14]
bsr ebx, edx
sar ebx, cl
sub r13, r15
movzx rbx, sp
neg bl
bt rbx, r9
sar r13, 1
xadd rbx, rbx
bt rbx, rdx
mov bl, r14b
mov rbx, r14
test spl, r12b
test rax, rax
jmp 0x1404d9ae4
je 0x1404d9b70
mov r8, r13
movzx dx, dl
jmp 0x1404d9af9
mov rdx, rax
mov rcx, r15
jmp 0x1404d9b04
call fcn.1404e5e13
test eax, eax
jmp 0x1404d9b10
jne 0x1404d9b49
mov rax, qword [rbx]
xor ch, 0xe6
sar cx, cl
btr cx, r14w
mov ecx, 0x3d
cmp dx, 0x3904
cmp word [rax + r13*2], cx
je 0x1404d9b5e
cmp word [rax + r13*2], si
jmp 0x1404d9b43
je 0x1404d9b5e
add rbx, 8
lahf
movsxd rax, r13d
mov rax, qword [rbx]
jmp 0x1404d9b59
jmp 0x1404d9adc
sub rbx, r14
stc
sar rbx, 3
jmp 0x1404d9b6b
jmp 0x1404d9b7b
sub rbx, r14
sar rbx, 3
neg rbx
stc
test rbx, rbx
jmp 0x1404d9b83
js 0x1404d9c36
cmp qword [r14], rsi
jmp 0x1404d9b91
je 0x1404d9c36
mov rcx, qword [r14 + rbx*8]
jmp 0x1404d9ba0
call fcn.1404c9bb8
test r12w, r12w
jmp 0x1404d9bae
je 0x1404d9bce
mov qword [r14 + rbx*8], r15
jmp 0x1404d9cf5
mov rax, qword [r14 + rbx*8 + 8]
mov qword [r14 + rbx*8], rax
jmp 0x1404d9bcb
inc rbx
cmp qword [r14 + rbx*8], rsi
jmp 0x1404d9bd7
jne 0x1404d9bbd
mov r8d, 8
cwd
mov rdx, rbx
setbe cl
movsx cx, dil
movsx rcx, r13w
mov rcx, r14
jmp 0x1404d9bfc
call fcn.1404d9258
xor ecx, ecx
jmp 0x1404d9c0a
mov rbx, rax
jmp 0x1404d9c12
call fcn.1404c9bb8
test rbx, rbx
jmp 0x1404d9c1f
je 0x1404d9d00
mov qword [0x1400ba2e8], rbx
jmp 0x1404d9c31
jmp 0x1404d9d00
test r12w, r12w
jmp 0x1404d9c3f
je 0x1404d9e18
neg rbx
lea rdx, [rbx + 2]
clc
jmp 0x1404d9c52
cmp rdx, rbx
jmp 0x1404d9c5a
jae 0x1404d9c6e
or rbp, 0xffffffffffffffff
jmp 0x1404d9c69
jmp 0x1404d9e1d
movabs rax, 0x1fffffffffffffff
test r14, 0x64de776b
cmp rdx, rax
jae 0x1404d9c60
mov r8d, 8
cmovg cx, r9w
movsxd rcx, r10d
mov rcx, r14
jmp 0x1404d9c9e
call fcn.1404d9258
xor ecx, ecx
not r14b
movzx r14, bp
jmp 0x1404d9cb1
mov r14, rax
jmp 0x1404d9cb9
call fcn.1404c9bb8
test r14, r14
jmp 0x1404d9cc6
je 0x1404d9c60
mov qword [r14 + rbx*8], r15
rcr dil, 0xe5
movsx rdi, r15w
xor edi, 0x17316e3f
mov qword [r14 + rbx*8 + 8], rsi
inc di
btc di, bp
cmp sp, r14w
mov qword [0x1400ba2e8], r14
mov rdi, rsi
test dh, 0xd7
jmp 0x1404d9d00
test ebp, ebp
jmp 0x1404d9d07
je 0x1404d9e2a
or rbp, 0xffffffffffffffff
mov r14b, r15b
movzx r14, r12w
mov r14, rbp
inc r14
cmp word [r15 + r14*2], si
jmp 0x1404d9d28
jne 0x1404d9d1b
mov edx, 2
add r14, rdx
mov cx, r13w
movsx cx, dl
setg cl
mov rcx, r14
call fcn.1404cdc03
mov rbx, rax
clc
test rax, rax
jmp 0x1404d9d55
je 0x1404d9dd0
mov r8, r15
cwd
movzx rcx, di
mov rdx, r14
movsx ecx, r11w
bswap ecx
mov rcx, rax
call fcn.1404ca815
test eax, eax
jmp 0x1404d9d7c
jne 0x1404d9e98
neg r12w
lea rax, [r13 + 1]
movsx ecx, sp
inc ch
movzx cx, r8b
lea rax, [rbx + rax*2]
mov rcx, rbx
sbb rdx, rdx
mov word [rax - 2], si
stc
and rdx, rax
jmp 0x1404d9dab
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jmp 0x1404d9db8
jne 0x1404d9dd0
call fcn.1404b5eee
mov esi, ebp
mov dword [rax], 0x2a
jmp 0x1404d9dd0
mov rcx, rbx
jmp 0x1404d9dd8
call fcn.1404c9bb8
jmp 0x1404d9e2a
call fcn.1404b5eee
or rsi, 0xffffffffffffffff
setle cl
movsx cx, ah
bswap cx
mov dword [rax], 0x16
movsxd rcx, r10d
movzx ecx, cx
movzx bp, r14b
mov ebp, esi
xchg si, cx
movzx ecx, r12w
movzx rcx, r13w
mov esi, ebp
setb cl
mov ebp, esi
xchg sil, cl
mov esi, ebp
bswap cx
setb ch
movsx cx, sil
mov rcx, rdi
call fcn.1404c9bb8
mov eax, esi
xor r14d, r15d
sbb dil, 0xe3
mov rbx, qword [rsp + 0x60]
shrd r14, rcx, 0x5f
bt r13, rdi
mov dil, dl
mov rbp, qword [rsp + 0x68]
cmc
btc edi, r8d
mov rsi, qword [rsp + 0x70]
mov r13, 0x30b70087
rol di, 0xad
add rsp, 0x30
cmovno r13w, r10w
not dil
pop r15
movzx r13d, sp
seta r12b
pop r14
pop r13
movsx rdi, cx
xchg r12b, r12b
jmp 0x1404d9e8c
pop r12
xchg rdi, rdi
pop rdi
jmp 0x1404d9e97
ret
sub r9d, r9d
test sil, cl
cmp r9d, r13d
mov qword [rsp + 0x20], rsi
stc
cmc
xor r8d, r8d
cmp r10b, dil
xor edx, edx
cmp bp, 0x66e2
clc
sub ecx, ecx
jmp 0x1404d9ebd
call fcn.1404b6bea
int3