Function at 0x406ad0
Capabilities:
Set environment variable

Disassembly:
sub esp, 4
cmp dword [esp + 8], 0
push ebx
push esi
push edi
push ebp
je 0x406d12
mov edx, dword [esp + 0x18]
push 0x3d
push edx
call fcn.00406fc0
add esp, 8
mov ebp, eax
test ebp, ebp
je 0x406d12
cmp dword [esp + 0x18], ebp
je 0x406d12
cmp byte [ebp + 1], 1
sbb eax, eax
mov ecx, dword [0x409710]
neg eax
mov dword [esp + 0x10], eax
cmp dword [0x40970c], ecx
jne 0x406b32
mov eax, dword [0x40970c]
push eax
call fcn.00406d80
add esp, 4
mov dword [0x40970c], eax
cmp dword [0x40970c], 0
jne 0x406be2
cmp dword [esp + 0x1c], 0
je 0x406b69
cmp dword [0x409714], 0
je 0x406b69
call fcn.004065f0
test eax, eax
je 0x406be2
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 4
ret
cmp dword [esp + 0x10], 0
je 0x406b7a
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 4
ret
cmp dword [0x40970c], 0
jne 0x406bae
push 4
call fcn.00405ed0
add esp, 4
mov dword [0x40970c], eax
test eax, eax
jne 0x406ba3
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 4
ret
mov eax, dword [0x40970c]
mov dword [eax], 0
cmp dword [0x409714], 0
jne 0x406be2
push 4
call fcn.00405ed0
add esp, 4
mov dword [0x409714], eax
test eax, eax
jne 0x406bd7
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 4
ret
mov eax, dword [0x409714]
mov dword [eax], 0
mov esi, dword [0x40970c]
sub ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
push ebp
push edx
call fcn.00406d20
add esp, 8
mov edi, eax
test edi, edi
jl 0x406c4a
cmp dword [esi], 0
je 0x406c4a
cmp dword [esp + 0x10], 0
je 0x406c41
lea ebx, [esi + edi*4]
mov eax, dword [ebx]
push eax
call fcn.00404320
add esp, 4
cmp dword [ebx], 0
je 0x406c2e
mov eax, dword [ebx + 4]
add ebx, 4
inc edi
mov dword [ebx - 4], eax
cmp dword [ebx], 0
jne 0x406c1f
shl edi, 2
push edi
push esi
call fcn.00406f50
add esp, 8
test eax, eax
je 0x406c92
jmp 0x406c8d
mov edx, dword [esp + 0x18]
mov dword [esi + edi*4], edx
jmp 0x406c92
cmp dword [esp + 0x10], 0
jne 0x406d08
test edi, edi
jge 0x406c5b
neg edi
lea eax, [edi*4 + 8]
push eax
push esi
call fcn.00406f50
add esp, 8
test eax, eax
jne 0x406c7d
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 4
ret
lea ecx, [eax + edi*4]
mov edx, dword [esp + 0x18]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov dword [0x40970c], eax
cmp dword [esp + 0x1c], 0
je 0x406cfe
mov edi, dword [esp + 0x18]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.00405ed0
add esp, 4
mov ebx, eax
test ebx, ebx
je 0x406cfe
mov edi, dword [esp + 0x18]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
shr ecx, 2
mov esi, edi
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [esp + 0x10], 1
sbb eax, eax
lea ecx, [ebx + ebp]
mov byte [ecx], 0
lea ecx, [ecx + 1]
and eax, ecx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
call fcn.00404320
add esp, 4
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 4
ret
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 4
ret
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 4
ret