Function at 0x4c2b3c
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffed8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4c2eb5
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4c2b8b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call dword [eax + 0x148]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c2b95
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
mov eax, dword [eax*4 + 0x4eb51c]
push eax
push 0x4c2ec8
call sub.kernel32.dll_SetEnvironmentVariableA
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
je 0x4c2bce
mov eax, dword [0x4eb534]
push eax
push 0x4c2ed8
call sub.kernel32.dll_SetEnvironmentVariableA
jmp 0x4c2be9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
mov eax, dword [eax*4 + 0x4eb528]
push eax
push 0x4c2ed8
call sub.kernel32.dll_SetEnvironmentVariableA
cmp dword [ebp - 8], 0
jbe 0x4c2c32
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2c32
mov eax, dword [ebp - 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x10c]
call fcn.0040a894
mov eax, dword [ebp - 0x10c]
call fcn.004059a4
push eax
push 0x4c2ee8
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_GetWindowLongA
mov esi, eax
jmp 0x4c2c34
xor esi, esi
mov edi, 0x31
mov eax, dword [ebp - 4]
cmp byte [eax + 0x74], 0
je 0x4c2c45
and edi, 0xffffffef
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
cmp dword [ebp - 8], 0
jbe 0x4c2d07
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2d07
test bl, bl
jne 0x4c2cb5
mov eax, dword [ebp - 8]
push eax
push 0x4c2ef8
push 0xff
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x4ef574]
mov eax, dword [eax]
call eax
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x150]
pop ecx
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
test bl, bl
jne 0x4c2cfb
mov eax, dword [ebp - 8]
push eax
push 0x4c2f08
push 0xff
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x4ef574]
mov eax, dword [eax]
call eax
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x150]
pop ecx
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
push 0
push 0x4c2ee8
call sub.kernel32.dll_SetEnvironmentVariableA
test bl, bl
je 0x4c2e3f
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x1d0]
add esp, 8
test eax, eax
je 0x4c2d5e
push 0x4c2f24
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 6
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.004b23a4
mov ecx, 7
mov edx, dword [ebp - 4]
call fcn.004b3110
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x1d4]
add esp, 8
test eax, eax
je 0x4c2dad
push 0x4c2f44
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 6
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.004b23a4
mov ecx, 7
mov edx, dword [ebp - 4]
call fcn.004b3110
cmp dword [ebp - 8], 0
jbe 0x4c2dfd
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2dfd
mov eax, dword [ebp - 4]
mov dword [eax + 0x1e8], esi
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_GetWindowLongA
mov edx, dword [ebp - 4]
mov dword [edx + 0x1ec], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e4], 0
je 0x4c2dfd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e0]
push eax
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_SetWindowLongA
push 0
push 1
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 4
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 0xd
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 0x18
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
jmp 0x4c2e91
lea eax, [ebp - 0x118]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 0
mov eax, dword [ebp - 4]
call dword [eax + 0x154]
mov dword [ebp - 0x120], eax
mov byte [ebp - 0x11c], 6
lea edx, [ebp - 0x128]
mov ecx, 1
mov eax, 0x4c2f64
call fcn.0040c118
mov edx, dword [ebp - 0x118]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.004c42b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c2ebc
lea eax, [ebp - 0x118]
call fcn.004054f8
lea eax, [ebp - 0x10c]
call fcn.004054f8
ret