Function at 0x56e208
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
xor esi, esi
cmp dword [ebp + 8], esi
push edi
mov dword [ebp - 4], esi
je 0x56e272
push 0x3d
push dword [ebp + 8]
call fcn.00571e4b
mov ebx, eax
cmp ebx, esi
pop ecx
pop ecx
je 0x56e272
cmp dword [ebp + 8], ebx
je 0x56e272
xor eax, eax
cmp word [ebx + 2], si
sete al
mov dword [ebp - 8], eax
mov eax, dword [0x5b1db8]
cmp eax, dword [0x5b1dbc]
jne 0x56e257
mov edi, eax
call fcn.0056e1a7
mov dword [0x5b1db8], eax
cmp eax, esi
jne 0x56e2b5
cmp dword [ebp + 0xc], esi
mov eax, dword [0x5b1db0]
je 0x56e27a
cmp eax, esi
je 0x56e27a
call fcn.00571de1
test eax, eax
je 0x56e2b5
or eax, 0xffffffff
pop edi
pop esi
pop ebx
leave
ret
cmp dword [ebp - 8], esi
jne 0x56e4a9
cmp eax, esi
jne 0x56e2a2
push 4
call fcn.005635a3
cmp eax, esi
pop ecx
mov dword [0x5b1db0], eax
je 0x56e272
mov dword [eax], esi
cmp dword [0x5b1db8], esi
jne 0x56e2b5
push 4
call fcn.005635a3
cmp eax, esi
pop ecx
mov dword [0x5b1db8], eax
je 0x56e272
mov dword [eax], esi
sub ebx, dword [ebp + 8]
mov eax, dword [0x5b1db8]
push dword [ebp + 8]
sar ebx, 1
mov edi, ebx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], ebx
call fcn.0056e156
mov edi, dword [ebp - 0xc]
mov ebx, eax
cmp ebx, esi
pop ecx
jl 0x56e317
cmp dword [edi], esi
je 0x56e317
lea edi, [edi + ebx*4]
push dword [edi]
call fcn.005635b5
cmp dword [ebp - 8], esi
pop ecx
jne 0x56e2fd
mov eax, dword [ebp + 8]
mov dword [edi], eax
jmp 0x56e34e
mov eax, dword [edi + 4]
mov dword [edi], eax
inc ebx
add edi, 4
cmp dword [edi], esi
jne 0x56e2f4
mov eax, ebx
shl eax, 2
push eax
push dword [ebp - 0xc]
call fcn.00564c59
cmp eax, esi
pop ecx
pop ecx
je 0x56e34e
jmp 0x56e349
cmp dword [ebp - 8], esi
jne 0x56e4a0
cmp ebx, esi
jge 0x56e326
neg ebx
lea eax, [ebx*4 + 8]
push eax
push edi
call fcn.00564c59
cmp eax, esi
pop ecx
pop ecx
je 0x56e272
mov ecx, dword [ebp + 8]
lea ebx, [eax + ebx*4]
mov dword [ebx], ecx
mov dword [ebx + 4], esi
mov dword [0x5b1db8], eax
cmp dword [ebp + 0xc], esi
je 0x56e48a
push dword [ebp + 8]
call fcn.00571dcb
lea eax, [eax + eax + 4]
push eax
call fcn.005635a3
mov edi, eax
cmp edi, esi
pop ecx
pop ecx
mov dword [ebp - 0x18], edi
je 0x56e48a
push dword [ebp + 8]
push edi
call fcn.00571daf
mov eax, dword [ebp - 0x14]
lea ebx, [edi + eax*2]
mov word [ebx], si
inc ebx
pop ecx
inc ebx
cmp dword [0x58ca3c], 1
pop ecx
jne 0x56e3c5
mov eax, dword [ebp - 8]
neg eax
sbb eax, eax
not eax
and eax, ebx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x56e3c5
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x56e3c1
mov dword [0x58ca3c], esi
jmp 0x56e3d1
or dword [ebp - 4], 0xffffffff
cmp dword [0x58ca3c], esi
jne 0x56e483
push esi
push esi
push esi
push esi
push 0xffffffffffffffff
push edi
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push esi
push esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], esi
call edi
cmp eax, esi
mov dword [ebp - 0xc], eax
je 0x56e46a
push eax
call fcn.005635a3
cmp eax, esi
pop ecx
mov dword [ebp - 0x14], eax
je 0x56e46a
push esi
push esi
push dword [ebp - 0xc]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x18]
push esi
push esi
call edi
test eax, eax
je 0x56e46a
cmp dword [ebp - 8], esi
jne 0x56e44a
push esi
push esi
push esi
push esi
push 0xffffffffffffffff
push ebx
push esi
push esi
call edi
cmp eax, esi
mov dword [ebp - 0xc], eax
je 0x56e46a
push eax
call fcn.005635a3
cmp eax, esi
pop ecx
mov dword [ebp - 0x10], eax
je 0x56e46a
push esi
push esi
push dword [ebp - 0xc]
push eax
push 0xffffffffffffffff
push ebx
push esi
push esi
call edi
test eax, eax
jne 0x56e44a
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 4], 0xffffffff
je 0x56e46e
mov eax, dword [ebp - 8]
neg eax
sbb eax, eax
not eax
and eax, dword [ebp - 0x10]
push eax
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
jne 0x56e46e
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x10]
call fcn.005635b5
push dword [ebp - 0x14]
call fcn.005635b5
mov edi, dword [ebp - 0x18]
pop ecx
pop ecx
push edi
call fcn.005635b5
pop ecx
cmp dword [ebp - 8], esi
je 0x56e498
push dword [ebp + 8]
call fcn.005635b5
pop ecx
mov eax, dword [ebp - 4]
jmp 0x56e275
push dword [ebp + 8]
call fcn.005635b5
pop ecx
xor eax, eax
jmp 0x56e275