Function at 0x4245c0
Capabilities:
Set environment variable

Disassembly:
mov rax, rsp
sub rsp, 0x78
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax - 8], r12
xor r12d, r12d
test rcx, rcx
mov qword [rax - 0x10], r13
mov qword [rax - 0x20], r15
mov ebp, r12d
mov r15d, edx
mov rsi, rcx
je 0x4249d4
mov dx, 0x3d
call fcn.00428310
test rax, rax
mov r13, rax
je 0x4249d4
cmp rsi, rax
je 0x4249d4
cmp word [rax + 2], bp
mov qword [rsp + 0x98], rdi
mov rdi, qword [0x004369d8]
mov qword [rsp + 0x60], r14
mov r14d, r12d
sete r14b
cmp rdi, qword [0x004369e0]
mov dword [rsp + 0x40], r14d
jne 0x424651
mov rcx, rdi
call fcn.00424510
mov rdi, rax
mov qword [0x004369d8], rax
test rdi, rdi
jne 0x424714
test r15d, r15d
mov rax, qword [0x004369c8]
je 0x4246b6
test rax, rax
je 0x4246b6
call fcn.00428240
test eax, eax
je 0x42470d
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x98]
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
add rsp, 0x78
ret
test r14d, r14d
jne 0x4249cd
test rax, rax
jne 0x4246e7
lea ecx, [rax + 8]
call fcn.00422e20
test rax, rax
mov qword [0x004369c8], rax
je 0x424678
mov qword [rax], r12
mov rdi, qword [0x004369d8]
test rdi, rdi
jne 0x424714
mov ecx, 8
call fcn.00422e20
test rax, rax
mov qword [0x004369d8], rax
je 0x424678
mov qword [rax], r12
mov rdi, qword [0x004369d8]
jmp 0x424714
mov rdi, qword [0x004369d8]
sub r13, rsi
mov rcx, rsi
sar r13, 1
mov edx, r13d
call fcn.00424470
test eax, eax
movsxd rbx, eax
js 0x424788
cmp qword [rdi], rbp
je 0x424788
mov rcx, qword [rdi + rbx*8]
call fcn.0041fe90
test r14d, r14d
je 0x424782
cmp qword [rdi + rbx*8], rbp
je 0x424765
lea rdx, [rdi + rbx*8]
mov rcx, rdx
nop
mov rax, qword [rdx + 8]
add rcx, 8
inc ebx
mov qword [rdx], rax
cmp qword [rcx], rbp
mov rdx, rcx
jne 0x424750
movsxd rdx, ebx
mov rcx, rdi
shl rdx, 3
call fcn.00422f20
test rax, rax
je 0x4247c8
mov qword [0x004369d8], rax
jmp 0x4247c8
mov qword [rdi + rbx*8], rsi
jmp 0x4247c8
test r14d, r14d
jne 0x4249c5
test eax, eax
jns 0x424797
neg ebx
lea eax, [rbx + 2]
mov rcx, rdi
movsxd rdx, eax
shl rdx, 3
call fcn.00422f20
test rax, rax
mov rdx, rax
je 0x424678
movsxd rax, ebx
mov qword [rdx + rax*8], rsi
mov qword [rdx + rax*8 + 8], r12
mov qword [0x004369d8], rdx
test r15d, r15d
je 0x4249b1
xor eax, eax
mov rbx, 0xffffffffffffffff
mov rdi, rsi
mov rcx, rbx
repne scasw ax, word [rdi]
not rcx
lea rcx, [rcx + rcx + 2]
call fcn.00422e20
test rax, rax
mov r12, rax
je 0x4249b1
mov rdx, rax
mov rcx, rsi
sub rdx, rsi
nop
nop
nop
movzx eax, word [rcx]
add rcx, 2
test ax, ax
mov word [rdx + rcx - 2], ax
jne 0x424810
lea rdi, [r12 + r13*2]
add rdi, 2
cmp dword [0x00435b28], 1
mov word [rdi - 2], bp
jne 0x424868
mov rdx, rdi
test r14d, r14d
mov rcx, r12
cmovne rdx, rbp
mov r15, rbp
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x42486b
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x424864
mov dword [0x00435b28], r15d
jmp 0x424878
mov ebp, ebx
jmp 0x42486b
xor r15d, r15d
cmp dword [0x00435b28], 0
jne 0x4249a9
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov r9d, ebx
mov r8, r12
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r15d
mov r13, r15
mov r14, r15
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
movsxd r15, eax
jne 0x4248b0
mov ebp, ebx
jmp 0x424994
mov rcx, r15
call fcn.00422e20
test rax, rax
mov r13, rax
jne 0x4248c7
mov ebp, ebx
jmp 0x424994
xor eax, eax
mov r9d, ebx
mov r8, r12
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x4248f8
mov ebp, ebx
jmp 0x424994
mov eax, dword [rsp + 0x40]
test eax, eax
jne 0x424974
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov r9d, ebx
mov r8, rdi
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
movsxd r15, eax
jne 0x42492e
mov ebp, ebx
jmp 0x424994
mov rcx, r15
call fcn.00422e20
test rax, rax
mov r14, rax
jne 0x424942
mov ebp, ebx
jmp 0x424994
xor eax, eax
mov r9d, ebx
mov r8, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x424970
mov ebp, ebx
jmp 0x424994
mov eax, dword [rsp + 0x40]
cmp ebp, ebx
je 0x424994
test eax, eax
mov eax, 0
mov rdx, r14
cmovne rdx, rax
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
cmove ebp, ebx
mov rcx, r14
call fcn.0041fe90
mov rcx, r13
call fcn.0041fe90
mov r14d, dword [rsp + 0x40]
mov rcx, r12
call fcn.0041fe90
test r14d, r14d
je 0x4249be
mov rcx, rsi
call fcn.0041fe90
mov eax, ebp
jmp 0x42467d
mov rcx, rsi
call fcn.0041fe90
xor eax, eax
jmp 0x42467d
mov eax, 0xffffffff
jmp 0x42468a