Function at 0x469498
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffeb8
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x469d67
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x47cf0c]
call fcn.00403d50
mov eax, dword [0x47ce10]
cmp byte [eax], 1
je 0x469d2f
mov byte [ebp - 0x1d], 0
lea edx, [ebp - 0xc]
mov eax, dword [0x47db88]
mov eax, dword [eax + 0x334]
call fcn.0042aee4
lea eax, [ebp - 0x34]
call fcn.004553bc
push dword [ebp - 0x34]
push 0x469d80
mov eax, dword [0x47cec0]
push dword [eax]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040408c
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0046a0bc
mov edi, dword [0x47ce00]
mov edi, dword [edi + 0xa57]
mov dword [ebp - 0x1c], 1
mov esi, dword [0x47ce00]
add esi, 0xa83
mov ebx, dword [0x47ce00]
add ebx, 0xa5b
mov eax, dword [0x47ce00]
add eax, 0x2ad
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x10]
mov edx, esi
call fcn.00403f70
cmp dword [ebp - 0x10], 0
je 0x469c8b
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.0042aee4
push dword [ebp - 0x48]
push dword [ebp - 0x10]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040408c
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x44]
call fcn.00453b9c
lea ecx, [ebp - 0x44]
mov edx, 0x469d8c
mov eax, 0x469d98
call fcn.004693d0
mov edx, dword [ebp - 8]
mov eax, 0x469dac
call fcn.004042b4
lea edx, [ebp - 8]
mov ecx, eax
mov eax, 1
xchg edx, eax
call fcn.00404210
mov eax, dword [ebp - 8]
call fcn.00403fcc
mov ecx, eax
sub ecx, 0x14
lea eax, [ebp - 8]
mov edx, 0x14
call fcn.00404210
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 8]
call fcn.0045528c
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 8]
call fcn.00403de8
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
call fcn.0042aee4
mov eax, dword [ebp - 0x48]
call fcn.00404190
push eax
mov eax, dword [ebp - 8]
call fcn.00404190
pop edx
call fcn.00408ec0
xor eax, 0
jne 0x469c71
mov eax, dword [ebx]
cmp eax, 2
jne 0x469658
mov edx, dword [0x47ce10]
cmp byte [edx], 1
je 0x469d2f
cmp eax, 3
jne 0x46966c
mov edx, dword [0x47ce10]
cmp byte [edx], 1
je 0x469d2f
cmp eax, 4
jne 0x469680
mov edx, dword [0x47ce10]
cmp byte [edx], 1
je 0x469d2f
cmp eax, 8
jne 0x469694
mov edx, dword [0x47ce10]
cmp byte [edx], 1
je 0x469d2f
cmp eax, 9
jne 0x4696a8
mov edx, dword [0x47ce10]
cmp byte [edx], 1
je 0x469d2f
cmp eax, 0xa
jne 0x4696bc
mov edx, dword [0x47ce10]
cmp byte [edx], 1
je 0x469d2f
dec eax
jne 0x469a3f
mov eax, dword [0x47ce00]
cmp dword [eax + 0x753], 0
jle 0x46973f
mov dl, 1
mov eax, dword [0x40eddc]
call fcn.004030fc
mov ebx, eax
mov edx, dword [ebp - 8]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, dword [ebp - 0xc]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.0042aee4
mov edx, dword [ebp - 0x48]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x34]
mov eax, 0x469db8
call fcn.00455090
mov ecx, dword [ebp - 0x34]
mov edx, dword [0x47cc60]
mov edx, dword [edx]
lea eax, [ebp - 0x30]
call fcn.00404018
mov edx, dword [ebp - 0x30]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, ebx
call fcn.0040312c
mov eax, dword [0x47ce00]
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0xa57], edx
mov eax, dword [0x47ce00]
add eax, 0x33d
mov edx, dword [ebp - 8]
mov ecx, 0xff
call fcn.00403fa8
mov eax, dword [0x47ce00]
mov eax, dword [eax + edi*4 + 0x1e7f]
lea edx, [ebp - 0x30]
call fcn.004085e8
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x148]
mov ecx, 0xff
call fcn.00403fa8
lea edx, [ebp - 0x148]
mov eax, dword [0x47ce00]
add eax, 0x2297
mov cl, 0xa
call fcn.00402c30
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.0042aee4
mov edx, dword [ebp - 0x48]
mov eax, dword [0x47ce00]
add eax, 0x22b8
mov ecx, 0xff
call fcn.00403fa8
mov eax, dword [0x47ce00]
mov byte [eax + 0x32f], 0
lea eax, [ebp - 0x34]
call fcn.004553bc
push dword [ebp - 0x34]
push 0x469d80
mov eax, dword [0x47cec0]
push dword [eax]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040408c
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00469efc
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x44]
mov eax, dword [0x47cec0]
mov eax, dword [eax]
call fcn.00453b9c
lea ecx, [ebp - 0x44]
mov edx, 0x469dd0
mov eax, 0x469d98
call fcn.004693d0
mov edx, dword [ebp - 0x18]
mov eax, 0x469dac
call fcn.004042b4
lea edx, [ebp - 0x18]
mov ecx, eax
mov eax, 1
xchg edx, eax
call fcn.00404210
mov eax, dword [0x47cef4]
cmp dword [eax], 2
jne 0x46988c
mov eax, dword [0x47ce9c]
push dword [eax]
push 0x469d80
lea edx, [ebp - 0x34]
mov eax, 0x469de0
call fcn.00455090
push dword [ebp - 0x34]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040408c
mov ecx, dword [ebp - 0x30]
mov dl, 1
mov eax, dword [0x453db4]
call fcn.00453e5c
mov dword [ebp - 0x24], eax
mov eax, dword [0x47cef4]
cmp dword [eax], 2
je 0x4698b5
lea edx, [ebp - 0x30]
mov eax, 0x469de0
call fcn.00455090
mov ecx, dword [ebp - 0x30]
mov dl, 1
mov eax, dword [0x453db4]
call fcn.00453e5c
mov dword [ebp - 0x24], eax
push 0
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x469df4
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 8]
push eax
mov edx, dword [0x47cec0]
mov edx, dword [edx]
mov ecx, 0x469e08
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 4]
call fcn.00409ab8
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x30]
call fcn.0040a6a0
mov eax, dword [ebp - 0x30]
push eax
mov ecx, 0x469e18
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, 0x469df4
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 4]
call fcn.00409ab8
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x30]
call fcn.0040a6a0
mov eax, dword [ebp - 0x30]
push eax
mov edx, dword [0x47cec0]
mov edx, dword [edx]
mov ecx, 0x469e18
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x28]
push eax
mov edx, dword [0x47cec0]
mov edx, dword [edx]
mov ecx, 0x469df4
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 4]
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.0042aee4
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [0x47cec0]
mov edx, dword [edx]
mov ecx, 0x469e28
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov edx, dword [0x47cec0]
mov edx, dword [edx]
mov ecx, 0x469e3c
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 4]
mov dl, 1
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx - 4]
mov byte [ebp - 0x1d], 1
lea edx, [ebp - 0x30]
mov eax, 0x469e50
call fcn.00455090
mov edx, dword [ebp - 0x30]
mov eax, dword [0x47ccb4]
call fcn.00403da4
lea eax, [ebp - 0x14]
lea edx, [esi + 0xa00]
call fcn.00403f70
xor eax, eax
push ebp
push 0x469a30
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.0042aee4
mov eax, dword [ebp - 0x48]
call fcn.00404190
push eax
push 0x469e5c
call sub.kernel32.dll_SetEnvironmentVariableA
mov eax, dword [ebp - 0x14]
call fcn.00404190
push eax
push 0x469e68
call sub.kernel32.dll_SetEnvironmentVariableA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x469c8b
cmp dword [ebx], 0
mov eax, dword [0x47cef4]
cmp dword [eax], 2
jne 0x469a87
mov eax, dword [0x47ce9c]
push dword [eax]
push 0x469d80
lea edx, [ebp - 0x34]
mov eax, 0x469e78
call fcn.00455090
push dword [ebp - 0x34]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040408c
mov ecx, dword [ebp - 0x30]
mov dl, 1
mov eax, dword [0x453db4]
call fcn.00453e5c
mov dword [ebp - 0x24], eax
mov eax, dword [0x47cef4]
cmp dword [eax], 2
je 0x469ab0
lea edx, [ebp - 0x30]
mov eax, 0x469e78
call fcn.00455090
mov ecx, dword [ebp - 0x30]
mov dl, 1
mov eax, dword [0x453db4]
call fcn.00453e5c
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.0042aee4
mov eax, dword [ebp - 0x48]
push eax
mov ecx, 0x469e28
mov edx, 0x469e8c
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 4]
mov dl, 1
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx - 4]
mov eax, dword [0x47ce00]
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0xa57], edx
mov eax, dword [0x47ce00]
xor edx, edx
mov dword [eax + 0x43d], edx
mov eax, dword [0x47ce00]
mov byte [eax + 0x32f], 0
mov eax, dword [0x47ce00]
add eax, 0x33d
mov edx, dword [ebp - 0xc]
mov ecx, 0xff
call fcn.00403fa8
call fcn.00469ed0
call fcn.00409ab8
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x30]
call fcn.0040a6a0
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x148]
mov ecx, 0xff
call fcn.00403fa8
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 0x2c]
mov cl, 0xc
call fcn.00402c30
call fcn.00409ab8
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x30]
call fcn.0040a6a0
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x148]
mov ecx, 0xff
call fcn.00403fa8
lea edx, [ebp - 0x148]
mov eax, dword [0x47ce00]
add eax, 0x22a2
mov cl, 0xa
call fcn.00402c30
lea eax, [ebp - 0x34]
call fcn.004553bc
push dword [ebp - 0x34]
push 0x469d80
mov eax, dword [0x47cec0]
push dword [eax]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040408c
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00469efc
lea edx, [ebp - 0x30]
mov eax, 0x469ea0
call fcn.00455090
mov edx, dword [ebp - 0x30]
mov eax, dword [0x47ccb4]
call fcn.00403da4
lea eax, [ebp - 0x14]
lea edx, [esi + 0xa00]
call fcn.00403f70
xor eax, eax
push ebp
push 0x469c61
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.0042aee4
mov eax, dword [ebp - 0x48]
call fcn.00404190
push eax
push 0x469eb0
call sub.kernel32.dll_SetEnvironmentVariableA
mov eax, dword [ebp - 0x14]
call fcn.00404190
push eax
push 0x469e68
call sub.kernel32.dll_SetEnvironmentVariableA
mov eax, dword [ebx - 0xa5b]
push eax
push 0x469ebc
call sub.kernel32.dll_SetEnvironmentVariableA
mov eax, dword [ebx - 0xa33]
push eax
push 0x469ec8
call sub.kernel32.dll_SetEnvironmentVariableA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x469c6b
mov byte [ebp - 0x1d], 1
jmp 0x469c8b
inc dword [ebp - 0x1c]
add dword [ebp - 0x2c], 0xd
add ebx, 4
add esi, 0x100
cmp dword [ebp - 0x1c], 0xb
jne 0x469568
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
call fcn.0042aee4
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 8]
call fcn.004040dc
je 0x469cf6
mov eax, dword [0x47cd60]
mov eax, dword [eax]
call fcn.00445f50
push 0x30
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2e4]
call fcn.0042aee4
mov eax, dword [ebp - 0x48]
call fcn.00404190
push eax
mov eax, dword [0x47db90]
call fcn.00404190
mov edx, eax
mov eax, dword [0x47cd60]
mov eax, dword [eax]
pop ecx
call fcn.00446eac
mov eax, dword [0x47cd60]
mov eax, dword [eax]
call fcn.00445f60
cmp byte [ebp - 0x1d], 1
jne 0x469d04
mov eax, dword [ebp - 4]
call fcn.00443b60
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
call fcn.0042aee4
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 8]
call fcn.004040dc
jne 0x469d2f
mov eax, dword [0x47cf0c]
mov edx, dword [ebp - 8]
call fcn.00403da4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x469d6e
lea eax, [ebp - 0x48]
call fcn.00403d50
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00403d74
lea eax, [ebp - 0x28]
call fcn.00403d50
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00403d74
ret