Function at 0x479a80
Capabilities:
Set environment variable

Disassembly:
push rbp
sub rsp, 0x70
mov rbp, rsp
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], rbp
mov rax, qword [0x0048a4a0]
mov byte [rax], 1
nop
lea rcx, [0x00473578]
call fcn.0040f5a0
nop
mov rax, qword [0x0048a370]
mov qword [rax], 0
mov rax, qword [0x0048a258]
mov byte [rax], 0
mov rax, qword [0x0048a018]
mov byte [rax], 1
mov cl, 1
call fcn.00404d90
mov rax, qword [0x0048a298]
mov rcx, qword [0x0048a308]
movzx rcx, word [rcx]
mov qword [rax], rcx
xor rcx, rcx
call sub.kernel32.dll_SetThreadUILanguage
mov rcx, qword [0x0048a148]
mov rdx, qword [0x00429af0]
mov r8d, 1
xor r9, r9
call fcn.0040cad0
mov rcx, qword [0x0048a4d0]
mov rdx, qword [0x00429b30]
mov r8d, 1
xor r9, r9
call fcn.0040cad0
mov rcx, qword [0x00472d10]
mov dl, 1
call fcn.00473040
mov qword [0x004a83b0], rax
mov rcx, qword [0x004a83b0]
lea rdx, [0x0047a08c]
mov r8b, 1
call fcn.00473150
test al, al
je 0x479ba9
mov rax, qword [0x004a83b0]
mov rcx, qword [rax + 0x50]
lea rdx, [0x004a83b8]
mov rax, qword [0x004a83b0]
movsxd r8, dword [rax + 0x58]
call fcn.00405640
mov rcx, qword [0x004a83b0]
call fcn.00473130
mov rax, qword [0x0048a538]
mov ecx, dword [0x004a83c4]
mov dword [rax], ecx
mov rcx, qword [0x004a83b0]
lea rdx, [0x0047a0a0]
mov r8b, 1
call fcn.00473150
test al, al
je 0x479fdd
lea rcx, [rbp + 0x60]
call fcn.00429cc0
mov rcx, qword [rbp + 0x60]
call fcn.0040b560
mov qword [0x004a83a8], rax
mov rcx, qword [0x004a83a8]
mov edx, 0x8000
call fcn.00471580
mov dword [0x004a83a4], eax
mov rcx, qword [0x004a83a8]
call fcn.0040aa00
mov dword [0x004a839c], eax
mov rax, qword [0x0048a148]
mov rcx, qword [rax]
call fcn.0040c730
mov dword [0x004a83a0], eax
mov rcx, qword [0x0048a148]
mov rdx, qword [0x00429af0]
mov r8d, 1
mov r9d, dword [0x004a83a0]
add r9d, 1
movsxd r9, r9d
call fcn.0040cad0
mov ecx, dword [0x004a839c]
lea rcx, [rcx + rcx*2]
movsxd rcx, ecx
call fcn.00405270
mov rcx, qword [0x0048a148]
mov rcx, qword [rcx]
movsxd rdx, dword [0x004a83a0]
add rdx, rdx
lea rdx, [rdx + rdx*2]
mov qword [rcx + rdx*8], rax
mov rax, qword [0x0048a148]
mov rax, qword [rax]
movsxd rcx, dword [0x004a83a0]
add rcx, rcx
lea rcx, [rcx + rcx*2]
mov rcx, qword [rax + rcx*8]
mov rdx, qword [0x004a83a8]
call fcn.0041dae0
mov rax, qword [0x0048a148]
mov rax, qword [rax]
movsxd rcx, dword [0x004a83a0]
add rcx, rcx
lea rcx, [rcx + rcx*2]
mov edx, dword [0x004a83a4]
mov dword [rax + rcx*8 + 8], edx
mov ecx, dword [0x004a83a4]
call sub.msvcrt.dll__get_osfhandle
mov rcx, qword [0x0048a148]
mov rcx, qword [rcx]
movsxd rdx, dword [0x004a83a0]
add rdx, rdx
lea rdx, [rdx + rdx*2]
mov qword [rcx + rdx*8 + 0x10], rax
mov rax, qword [0x0048a148]
mov rax, qword [rax]
movsxd rcx, dword [0x004a83a0]
add rcx, rcx
lea rcx, [rcx + rcx*2]
mov rdx, qword [0x004a83b0]
mov edx, dword [rdx + 0x58]
mov dword [rax + rcx*8 + 0x18], edx
mov rax, qword [0x0048a148]
mov rax, qword [rax]
movsxd rcx, dword [0x004a83a0]
add rcx, rcx
lea rcx, [rcx + rcx*2]
movsxd rcx, dword [rax + rcx*8 + 0x18]
call fcn.00405270
mov rcx, qword [0x0048a148]
mov rcx, qword [rcx]
movsxd rdx, dword [0x004a83a0]
add rdx, rdx
lea rdx, [rdx + rdx*2]
mov qword [rcx + rdx*8 + 0x20], rax
mov rax, qword [0x004a83b0]
mov rcx, qword [rax + 0x50]
mov rax, qword [0x0048a148]
mov rax, qword [rax]
movsxd rdx, dword [0x004a83a0]
add rdx, rdx
lea rdx, [rdx + rdx*2]
mov rdx, qword [rax + rdx*8 + 0x20]
mov rax, qword [0x004a83b0]
movsxd r8, dword [rax + 0x58]
call fcn.00405640
mov rax, qword [0x0048a148]
mov rax, qword [rax]
movsxd rcx, dword [0x004a83a0]
add rcx, rcx
lea rcx, [rcx + rcx*2]
mov rcx, qword [rax + rcx*8 + 0x20]
mov rax, qword [0x004a83b0]
mov edx, dword [rax + 0x58]
call fcn.0042a2a0
mov rax, qword [0x0048a148]
mov rax, qword [rax]
movsxd rcx, dword [0x004a83a0]
add rcx, rcx
lea rcx, [rcx + rcx*2]
mov dword [rax + rcx*8 + 0x28], 0
mov rcx, qword [0x004a83b0]
call fcn.00407520
lea rcx, [rbp + 0x58]
mov edx, dword [0x004a83c0]
call fcn.004733f0
call sub.kernel32.dll_GetTickCount_1
lea rcx, [rbp + 0x50]
mov edx, eax
mov r8d, 6
call fcn.0041cd50
mov ecx, 0xff
call fcn.00405990
lea rcx, [rbp + 0x48]
mov edx, eax
mov r8d, 2
call fcn.0041cd30
mov rcx, qword [0x0048a548]
mov edx, 5
mov r8, qword [rbp + 0x58]
lea r9, [0x0047a0b4]
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
lea rax, [0x0047a0c8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x48]
mov qword [rsp + 0x30], rax
call fcn.0040ba20
mov rax, qword [0x0048a548]
mov rcx, qword [rax]
call fcn.0041da40
mov rax, qword [0x0048a548]
mov rcx, qword [rax]
call fcn.0040b560
lea rcx, [0x0047a0cc]
mov rdx, rax
call sub.kernel32.dll_SetEnvironmentVariableW
mov rax, qword [0x0048a290]
mov qword [rax], 0
nop
lea rcx, [rbp + 0x40]
xor rdx, rdx
call fcn.004058f0
mov rcx, qword [0x0046b628]
mov dl, 1
mov r8, qword [rbp + 0x40]
xor r9, r9
mov dword [rsp + 0x20], 0
call fcn.0046c9d0
mov rcx, qword [0x0048a290]
mov qword [rcx], rax
mov rax, qword [0x0048a290]
mov rcx, qword [rax]
mov rax, qword [0x0048a548]
mov rdx, qword [rax]
call fcn.0046d4d0
jmp 0x479f1b
call fcn.0046df00
mov rcx, qword [0x0048a450]
mov qword [rcx], rax
mov rax, qword [0x0048a450]
cmp qword [rax], 0
je 0x479fe9
mov rcx, qword [0x0048a488]
call fcn.00429870
test eax, eax
je 0x479f56
mov ecx, 0xff
call fcn.0046f480
mov ecx, 1
mov rax, qword [0x0048a450]
mov edx, dword [rax]
mov rax, qword [0x0048a1c8]
mov r8d, dword [rax]
call fcn.00432ed0
mov rcx, qword [0x0048a4e8]
mov qword [rcx], rax
mov rax, qword [0x0048a4e8]
cmp qword [rax], 1
jne 0x479f96
mov ecx, 1
call fcn.0046f480
mov rax, qword [0x0048a4e8]
cmp qword [rax], 0xffffffffffffffff
jne 0x479fab
xor rcx, rcx
call fcn.0046f480
xor rcx, rcx
mov rax, qword [0x0048a4e8]
mov rdx, qword [rax]
call fcn.00435bd0
mov rcx, qword [0x0048a028]
mov word [rcx], ax
call fcn.00472290
mov rax, qword [0x0048a028]
movzx ecx, word [rax]
call fcn.0046f480
jmp 0x479fe9
mov rcx, qword [0x004a83b0]
call fcn.00407520
xor rcx, rcx
call fcn.0046f480
mov rax, qword [0x00489f38]
mov dword [rax], 0
nop
lea rcx, [rbp + 0x40]
mov edx, 5
call fcn.0040a350
call fcn.00409ea0
jmp 0x47a01d
lea rsp, [rbp + 0x70]
pop rbp
ret