Function at 0x44fa0b
Capabilities:
Set environment variable

Disassembly:
pushal
popal
push ebp
push esp
pop ebp
sub esp, 0xc
push ebx
mov ebx, dword [ebp + 8]
or ebx, ebx
jne 0x44f5c9
call fcn.0044051d
mov dword [eax], 0x16
or eax, 0xffffffff
jmp 0x44f646
push esi
push edi
push 0x3d
push ebx
mov edi, ebx
call fcn.004578b7
mov dword [ebp - 0xc], eax
pop ecx
pop ecx
or eax, eax
je 0x44f62d
cmp eax, ebx
je 0x44f62d
mov esi, dword [0x4724e4]
sub ebx, ebx
cmp word [eax + 2], bx
sete cl
mov byte [ebp - 1], cl
cmp esi, dword [0x4724e8]
jne 0x44f60e
push esi
call fcn.0044f897
pop ecx
mov cl, byte [ebp - 1]
mov esi, eax
mov dword [0x4724e4], esi
test esi, esi
jne 0x44f69d
mov eax, dword [0x4724e0]
cmp dword [ebp + 0xc], ebx
je 0x44f64b
test eax, eax
je 0x44f64b
call fcn.00443b05
test eax, eax
jne 0x44f693
call fcn.0044051d
mov dword [eax], 0x16
or ebx, 0xffffffff
push edi
call fcn.00446642
pop ecx
pop edi
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test cl, cl
jne 0x44f63b
test eax, eax
jne 0x44f67c
push 4
push 1
call fcn.00445a33
push ebx
mov dword [0x4724e0], eax
call fcn.00446642
add esp, 0xc
cmp dword [0x4724e0], ebx
je 0x44f638
mov esi, dword [0x4724e4]
or esi, esi
jne 0x44f69d
push 4
push 1
call fcn.00445a33
push ebx
mov dword [0x4724e4], eax
call fcn.00446642
add esp, 0xc
mov esi, dword [0x4724e4]
or esi, esi
je 0x44f638
mov ecx, dword [ebp - 0xc]
mov eax, edi
sub ecx, eax
sar ecx, 1
push ecx
push eax
mov dword [ebp - 0xc], ecx
call fcn.0044f9a9
mov dword [ebp - 8], eax
pop ecx
pop ecx
test eax, eax
js 0x44f701
cmp dword [esi], ebx
je 0x44f701
push dword [esi + eax*4]
call fcn.00446642
pop ecx
mov ecx, dword [ebp - 8]
cmp byte [ebp - 1], bl
jne 0x44f6e0
mov eax, dword [ebp + 8]
push ebx
pop edi
mov dword [esi + ecx*4], eax
jmp 0x44f757
mov eax, dword [esi + ecx*4 + 4]
mov dword [esi + ecx*4], eax
inc ecx
cmp dword [esi + ecx*4], ebx
jne 0x44f6d8
push 4
push ecx
push esi
call fcn.0044fa16
push ebx
mov esi, eax
call fcn.00446642
add esp, 0x10
mov eax, edi
or esi, esi
je 0x44f757
jmp 0x44f751
cmp byte [ebp - 1], bl
jne 0x44f63b
neg eax
mov dword [ebp - 8], eax
lea ecx, [eax + 2]
cmp ecx, eax
jb 0x44f638
cmp ecx, 0x3fffffff
jae 0x44f638
push 4
push ecx
push esi
call fcn.0044fa16
push ebx
mov esi, eax
call fcn.00446642
add esp, 0x10
test esi, esi
je 0x44f638
mov ecx, dword [ebp - 8]
mov edi, ebx
mov eax, dword [ebp + 8]
mov dword [esi + ecx*4], eax
mov dword [esi + ecx*4 + 4], ebx
mov dword [0x4724e4], esi
cmp dword [ebp + 0xc], ebx
je 0x44f63b
push eax
pop ecx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x44f765
sub ecx, edx
sar ecx, 1
push 2
lea eax, [ecx + 2]
push eax
mov dword [ebp - 8], eax
call fcn.00445a33
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x44f7cf
mov eax, dword [ebp + 8]
push eax
push dword [ebp - 8]
push esi
call fcn.00447a21
add esp, 0xc
test eax, eax
jne 0x44f7db
mov ecx, dword [ebp - 0xc]
inc ecx
lea ecx, [esi + ecx*2]
mov word [ecx - 2], ax
movzx eax, byte [ebp - 1]
neg eax
sbb eax, eax
not eax
and eax, ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x44f7cf
call fcn.0044051d
or ebx, 0xffffffff
mov dword [eax], 0x2a
push esi
call fcn.00446642
pop ecx
jmp 0x44f63b
push ebx
push ebx
push ebx
push ebx
push ebx
call fcn.0043bc59
int3
push ecx
pop ecx
push ebp
push esp
pop ebp
pop ebp
jmp 0x44f5a9