Function at 0x4c2b04
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffed8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4c2e7d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4c2b53
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call dword [eax + 0x148]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c2b5d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
mov eax, dword [eax*4 + 0x4ea51c]
push eax
push 0x4c2e90
call sub.kernel32.dll_SetEnvironmentVariableA
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
je 0x4c2b96
mov eax, dword [0x4ea534]
push eax
push 0x4c2ea0
call sub.kernel32.dll_SetEnvironmentVariableA
jmp 0x4c2bb1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
mov eax, dword [eax*4 + 0x4ea528]
push eax
push 0x4c2ea0
call sub.kernel32.dll_SetEnvironmentVariableA
cmp dword [ebp - 8], 0
jbe 0x4c2bfa
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2bfa
mov eax, dword [ebp - 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x10c]
call fcn.0040a88c
mov eax, dword [ebp - 0x10c]
call fcn.004059a4
push eax
push 0x4c2eb0
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_GetWindowLongA
mov esi, eax
jmp 0x4c2bfc
xor esi, esi
mov edi, 0x31
mov eax, dword [ebp - 4]
cmp byte [eax + 0x74], 0
je 0x4c2c0d
and edi, 0xffffffef
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
cmp dword [ebp - 8], 0
jbe 0x4c2ccf
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2ccf
test bl, bl
jne 0x4c2c7d
mov eax, dword [ebp - 8]
push eax
push 0x4c2ec0
push 0xff
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x4ee568]
mov eax, dword [eax]
call eax
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x150]
pop ecx
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
test bl, bl
jne 0x4c2cc3
mov eax, dword [ebp - 8]
push eax
push 0x4c2ed0
push 0xff
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x4ee568]
mov eax, dword [eax]
call eax
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x150]
pop ecx
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
push 0
push 0x4c2eb0
call sub.kernel32.dll_SetEnvironmentVariableA
test bl, bl
je 0x4c2e07
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x1d0]
add esp, 8
test eax, eax
je 0x4c2d26
push 0x4c2eec
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 6
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.004b236c
mov ecx, 7
mov edx, dword [ebp - 4]
call fcn.004b30d8
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x1d4]
add esp, 8
test eax, eax
je 0x4c2d75
push 0x4c2f0c
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 6
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.004b236c
mov ecx, 7
mov edx, dword [ebp - 4]
call fcn.004b30d8
cmp dword [ebp - 8], 0
jbe 0x4c2dc5
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2dc5
mov eax, dword [ebp - 4]
mov dword [eax + 0x1e8], esi
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_GetWindowLongA
mov edx, dword [ebp - 4]
mov dword [edx + 0x1ec], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e4], 0
je 0x4c2dc5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e0]
push eax
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_SetWindowLongA
push 0
push 1
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 4
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 0xd
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 0x18
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
jmp 0x4c2e59
lea eax, [ebp - 0x118]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 0
mov eax, dword [ebp - 4]
call dword [eax + 0x154]
mov dword [ebp - 0x120], eax
mov byte [ebp - 0x11c], 6
lea edx, [ebp - 0x128]
mov ecx, 1
mov eax, 0x4c2f2c
call fcn.0040c110
mov edx, dword [ebp - 0x118]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.004c4278
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c2e84
lea eax, [ebp - 0x118]
call fcn.004054f8
lea eax, [ebp - 0x10c]
call fcn.004054f8
ret