Function at 0x4d0030
Capabilities:
Set environment variable

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push r14
sub rsp, 0x58
xor ebx, ebx
test rcx, rcx
mov esi, edx
mov ebp, ebx
mov r14, rcx
jne 0x4d007c
call fcn.004b2620
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov dword [rax], 0x16
call fcn.004a7cd0
or eax, 0xffffffff
add rsp, 0x58
pop r14
pop rsi
pop rbp
pop rbx
ret
mov qword [rsp + 0x50], r12
mov r12, qword [rcx]
mov qword [rsp + 0x48], r13
test r12, r12
je 0x4d0501
mov dx, 0x3d
mov rcx, r12
call fcn.004a8f70
test rax, rax
mov r13, rax
je 0x4d0501
cmp r12, rax
je 0x4d0501
cmp word [rax + 2], bx
mov qword [rsp + 0x98], rdi
mov rdi, qword [0x005285d0]
mov qword [rsp + 0x40], r15
mov r15d, ebx
sete r15b
cmp rdi, qword [0x005285d8]
mov dword [rsp + 0x90], r15d
jne 0x4d00f5
mov rcx, rdi
call fcn.004cff90
mov rdi, rax
mov qword [0x005285d0], rax
test rdi, rdi
jne 0x4d01b5
test esi, esi
mov rax, qword [0x005285c0]
je 0x4d0164
test rax, rax
je 0x4d0164
call fcn.004c5be0
mov qword [0x00528578], rax
call fcn.004c5a70
test eax, eax
jns 0x4d015b
call fcn.004c5970
test eax, eax
je 0x4d015b
call fcn.004b2620
mov dword [rax], 0x16
or eax, 0xffffffff
mov rdi, qword [rsp + 0x98]
mov r15, qword [rsp + 0x40]
mov r12, qword [rsp + 0x50]
mov r13, qword [rsp + 0x48]
add rsp, 0x58
pop r14
pop rsi
pop rbp
pop rbx
ret
mov rdi, qword [0x005285d0]
jmp 0x4d01b5
test r15d, r15d
jne 0x4d04fa
test rax, rax
jne 0x4d0195
lea ecx, [rax + 8]
call fcn.004b23a0
test rax, rax
mov qword [0x005285c0], rax
je 0x4d0137
mov qword [rax], rbx
mov rdi, qword [0x005285d0]
test rdi, rdi
jne 0x4d01b5
mov ecx, 8
call fcn.004b23a0
test rax, rax
mov qword [0x005285d0], rax
je 0x4d0137
mov qword [rax], rbx
mov rdi, qword [0x005285d0]
test rdi, rdi
je 0x4d0137
sub r13, r12
mov rcx, r12
sar r13, 1
mov edx, r13d
call fcn.004cfef0
test eax, eax
movsxd rsi, eax
js 0x4d0248
cmp qword [rdi], rbx
je 0x4d0248
mov rcx, qword [rdi + rsi*8]
mov rbx, rsi
call fcn.004ab2d0
test r15d, r15d
je 0x4d023f
cmp qword [rdi + rsi*8], rbp
je 0x4d0209
mov rax, qword [rdi + rbx*8 + 8]
add rbx, 1
add esi, 1
mov qword [rdi + rbx*8 - 8], rax
cmp qword [rdi + rbx*8], rbp
jne 0x4d01f2
movsxd rdx, esi
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jae 0x4d02a8
mov rcx, qword [0x005285d0]
mov r8d, 8
call fcn.004b2530
test rax, rax
je 0x4d02a8
mov qword [0x005285d0], rax
jmp 0x4d02a8
mov qword [rdi + rsi*8], r12
mov qword [r14], rbp
jmp 0x4d02a8
test r15d, r15d
jne 0x4d04ef
test eax, eax
jns 0x4d0257
neg esi
lea eax, [rsi + 2]
cmp eax, esi
jl 0x4d0137
movsxd r8, eax
movabs rax, 0x1fffffffffffffff
cmp r8, rax
jae 0x4d0137
mov rcx, qword [0x005285d0]
mov edx, 8
call fcn.004b2530
test rax, rax
je 0x4d0137
movsxd rcx, esi
mov qword [rax + rcx*8], r12
mov qword [rax + rcx*8 + 8], rbx
mov qword [r14], rbx
mov qword [0x005285d0], rax
cmp dword [rsp + 0x88], ebp
je 0x4d04d6
xor eax, eax
or rbx, 0xffffffffffffffff
mov rdi, r12
mov rcx, rbx
lea edx, [rax + 2]
repne scasw ax, word [rdi]
not rcx
add rcx, 1
call fcn.004b2410
test rax, rax
mov rsi, rax
je 0x4d04d6
xor eax, eax
mov rcx, rbx
mov rdi, r12
repne scasw ax, word [rdi]
mov r8, r12
not rcx
lea rdx, [rcx + 1]
mov rcx, rsi
call fcn.004ab500
test eax, eax
je 0x4d0314
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rbp
call fcn.004a7bf0
lea rdi, [rsi + r13*2]
add rdi, 2
cmp dword [0x00524b64], 1
mov word [rdi - 2], bp
jne 0x4d035b
mov rdx, rdi
test r15d, r15d
mov rcx, rsi
cmovne rdx, rbp
mov r13, rbp
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x4d035e
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x4d0357
mov dword [0x00524b64], r13d
jmp 0x4d036b
mov ebp, ebx
jmp 0x4d035e
xor r13d, r13d
cmp dword [0x00524b64], 0
jne 0x4d04be
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov r9d, ebx
mov r8, rsi
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r13d
mov r15, r13
mov r14, r13
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
movsxd r13, eax
jne 0x4d03a3
mov ebp, ebx
jmp 0x4d049e
mov rcx, r13
mov edx, 1
call fcn.004b2410
test rax, rax
mov r15, rax
jne 0x4d03bf
mov ebp, ebx
jmp 0x4d049e
xor eax, eax
mov r9d, ebx
mov r8, rsi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x4d03f0
mov ebp, ebx
jmp 0x4d049e
mov eax, dword [rsp + 0x90]
test eax, eax
jne 0x4d047d
xor eax, eax
mov r9d, ebx
mov r8, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
movsxd r13, eax
jne 0x4d042f
mov ebp, ebx
jmp 0x4d049e
mov rcx, r13
mov edx, 1
call fcn.004b2410
test rax, rax
mov r14, rax
jne 0x4d0448
mov ebp, ebx
jmp 0x4d049e
xor eax, eax
mov r9d, ebx
mov r8, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x4d0476
mov ebp, ebx
jmp 0x4d049e
mov eax, dword [rsp + 0x90]
cmp ebp, 0xffffffff
je 0x4d049e
test eax, eax
mov eax, 0
mov rdx, r14
cmovne rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
cmove ebp, ebx
mov rcx, r14
call fcn.004ab2d0
mov rcx, r15
call fcn.004ab2d0
mov r14, qword [rsp + 0x80]
mov r15d, dword [rsp + 0x90]
cmp ebp, 0xffffffff
jne 0x4d04ce
call fcn.004b2620
mov dword [rax], 0x2a
mov rcx, rsi
call fcn.004ab2d0
test r15d, r15d
je 0x4d04e8
mov rcx, r12
call fcn.004ab2d0
xor eax, eax
mov qword [r14], rax
mov eax, ebp
jmp 0x4d013a
mov rcx, r12
call fcn.004ab2d0
mov qword [r14], rbx
xor eax, eax
jmp 0x4d013a
call fcn.004b2620
mov dword [rax], 0x16
or eax, 0xffffffff
jmp 0x4d0147