Function at 0x41b16c
Capabilities:
Set environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov esi, dword [ebp + 8]
test esi, esi
jne 0x41b190
call fcn.0041711b
mov dword [eax], 0x16
or eax, 0xffffffff
jmp 0x41b3e8
push edi
push 0x3d
push esi
mov edi, esi
call fcn.004070b8
mov dword [ebp - 0x10], eax
pop ecx
pop ecx
test eax, eax
je 0x41b3d2
cmp eax, esi
je 0x41b3d2
movzx ecx, word [eax + 2]
mov eax, ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], eax
call fcn.0041b4b5
mov eax, dword [0x42f088]
xor ebx, ebx
mov dword [ebp - 4], eax
test eax, eax
jne 0x41b269
mov eax, dword [0x42f084]
cmp dword [ebp + 0xc], ebx
je 0x41b20d
test eax, eax
je 0x41b20d
call fcn.00415b48
test eax, eax
jne 0x41b1fe
call fcn.0041711b
mov dword [eax], 0x16
or ebx, 0xffffffff
push esi
jmp 0x41b3b8
call fcn.0041b4b5
mov eax, dword [0x42f088]
mov dword [ebp - 4], eax
jmp 0x41b265
cmp word [ebp - 0xc], bx
je 0x41b1f8
test eax, eax
jne 0x41b242
push 4
push 1
call fcn.00418b92
push ebx
mov dword [0x42f084], eax
call fcn.0041712e
add esp, 0xc
cmp dword [0x42f084], ebx
je 0x41b1f5
mov eax, dword [0x42f088]
mov dword [ebp - 4], eax
test eax, eax
jne 0x41b269
push 4
push 1
call fcn.00418b92
push ebx
mov dword [0x42f088], eax
call fcn.0041712e
mov eax, dword [0x42f088]
add esp, 0xc
mov dword [ebp - 4], eax
test eax, eax
je 0x41b1f5
test eax, eax
je 0x41b1f5
mov eax, dword [ebp - 0x10]
sub eax, esi
sar eax, 1
push eax
push esi
mov dword [ebp - 0x10], eax
call fcn.0041b4cf
pop ecx
pop ecx
mov ecx, eax
mov eax, dword [ebp - 4]
mov dword [ebp - 8], ecx
test ecx, ecx
js 0x41b2d8
cmp dword [eax], ebx
je 0x41b2d8
push dword [eax + ecx*4]
call fcn.0041712e
mov edx, dword [ebp - 8]
pop ecx
cmp word [ebp - 0xc], bx
jne 0x41b2ce
mov ecx, dword [ebp - 4]
jmp 0x41b2ab
mov eax, dword [ecx + edx*4 + 4]
mov dword [ecx + edx*4], eax
inc edx
cmp dword [ecx + edx*4], ebx
jne 0x41b2a3
push 4
push edx
push ecx
call fcn.0041bcf7
push ebx
mov dword [ebp - 0xc], eax
call fcn.0041712e
mov eax, dword [ebp - 0xc]
add esp, 0x10
test eax, eax
je 0x41b32f
jmp 0x41b32a
mov eax, dword [ebp - 4]
mov edi, ebx
mov dword [eax + edx*4], esi
jmp 0x41b32f
cmp word [ebp - 0xc], bx
je 0x41b1f8
neg ecx
mov dword [ebp - 8], ecx
lea edx, [ecx + 2]
cmp edx, ecx
jb 0x41b1f5
cmp edx, 0x3fffffff
jae 0x41b1f5
push 4
push edx
push eax
call fcn.0041bcf7
push ebx
mov dword [ebp - 0xc], eax
call fcn.0041712e
mov eax, dword [ebp - 0xc]
add esp, 0x10
test eax, eax
je 0x41b1f5
mov edx, dword [ebp - 8]
mov edi, ebx
mov dword [eax + edx*4], esi
mov dword [eax + edx*4 + 4], ebx
mov dword [0x42f088], eax
cmp dword [ebp + 0xc], ebx
je 0x41b3c8
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, bx
jne 0x41b33b
sub esi, ecx
sar esi, 1
push 2
lea eax, [esi + 2]
push eax
mov dword [ebp - 0xc], eax
call fcn.00418b92
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x41b368
push ebx
call fcn.0041712e
jmp 0x41b3b6
push dword [ebp + 8]
push dword [ebp - 0xc]
push esi
call fcn.00414c87
add esp, 0xc
test eax, eax
jne 0x41b3ec
mov eax, dword [ebp - 0x10]
xor edx, edx
lea ecx, [eax + 1]
mov word [esi + eax*2], dx
mov eax, dword [ebp - 0x14]
lea ecx, [esi + ecx*2]
movzx eax, ax
neg eax
sbb eax, eax
and eax, ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x41b3c1
call fcn.0041711b
push esi
mov dword [eax], 0x2a
call fcn.0041712e
or ebx, 0xffffffff
pop ecx
push edi
call fcn.0041712e
mov eax, ebx
jmp 0x41b3e6
push esi
call fcn.0041712e
pop ecx
push edi
call fcn.0041712e
xor eax, eax
jmp 0x41b3e6
call fcn.0041711b
push esi
mov dword [eax], 0x16
call fcn.0041712e
or eax, 0xffffffff
pop ecx
pop edi
pop esi
pop ebx
leave
ret
push ebx
push ebx
push ebx
push ebx
push ebx
call fcn.0041706d
int3