Function at 0x100ca3b0
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1024ed7f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a8
push ebx
push esi
push edi
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
push eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 7
push 0x10255fec
mov word [ecx], ax
call fcn.1001a600
push 1
lea ecx, [ebp - 0x130]
call sym.WMCommon.dll_public:_void___thiscall_WM::GMRegValue::constructor_unsigned_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x78]
push 0x3c
xor eax, eax
mov dword [ebp - 0x68], 0
push str.SYSTEMCurrentControlSetControlSession_ManagerEnvironment
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.1001a600
mov byte [ebp - 4], 3
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x60]
push 0
cmovae eax, dword [ebp - 0x78]
push 0x20019
push eax
push reloc.WS2_32.dll_bind
call sym.WMCommon.dll_public:_bool___thiscall_WM::GMRegFile::OpenKey_struct_HKEY_____wchar_t_const___unsigned_long_int__bool_
test al, al
je 0x100ca745
cmp dword [ebp + 0x18], 0
je 0x100ca6a9
cmp dword [ebp + 0x1c], 8
lea ecx, [ebp - 0x130]
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push ecx
push eax
lea ecx, [ebp - 0x60]
call sym.WMCommon.dll_public:_bool___thiscall_WM::GMRegFile::GetValue_wchar_t_const___class_WM::GMRegValue__
test al, al
je 0x100ca745
xor eax, eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x118]
cmp eax, 1
je 0x100ca4cc
cmp eax, 2
jne 0x100ca69a
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x24]
call fcn.1001a380
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x3c]
call fcn.1001a270
lea ecx, [ebp - 0x24]
call fcn.1001a5a0
push str.Path
lea ecx, [ebp - 0x24]
call fcn.1001a2f0
mov edx, dword [ebp - 0x14]
lea ecx, [ebp + 8]
cmp edx, dword [ebp + 0x18]
lea eax, [ebp - 0x24]
cmovb edx, dword [ebp + 0x18]
cmp dword [ebp + 0x1c], 8
push edx
cmovae ecx, dword [ebp + 8]
cmp dword [ebp - 0x10], 8
push ecx
cmovae eax, dword [ebp - 0x24]
push eax
call sym.WMCommon.dll_public:_static_int___cdecl_WM::GMStringUtils::CompareNoCase_wchar_t_const___wchar_t_const___unsigned_int_
add esp, 0xc
lea ecx, [ebp - 0x24]
mov esi, eax
call fcn.1001a5a0
test esi, esi
jne 0x100ca669
xor eax, eax
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x9c], 7
mov word [ebp - 0xb0], ax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
push eax
push 0x20019
push str.Environment
push reloc.WS2_32.dll_accept
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 5
call sym.WMCommon.dll_public:_bool___thiscall_WM::GMRegFile::OpenKey_struct_HKEY_____wchar_t_const___unsigned_long_int__bool_
test al, al
je 0x100ca65e
sub esp, 0x18
mov ecx, esp
push 0x10255fec
call fcn.1001a2f0
push 1
lea ecx, [ebp - 0x1b0]
call sym.WMCommon.dll_public:_void___thiscall_WM::GMRegValue::constructor_unsigned_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___
xor eax, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], 7
mov word [ebp - 0x24], ax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b0]
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
push ecx
cmovae eax, dword [ebp + 8]
lea ecx, [ebp - 0xb0]
push eax
call sym.WMCommon.dll_public:_bool___thiscall_WM::GMRegFile::GetValue_wchar_t_const___class_WM::GMRegValue__
test al, al
je 0x100ca613
mov eax, dword [ebp - 0x198]
cmp eax, 1
je 0x100ca5e7
cmp eax, 2
jne 0x100ca613
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x90]
call fcn.1001a380
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x24]
call fcn.1001a270
lea ecx, [ebp - 0x90]
call fcn.1001a5a0
cmp dword [ebp - 0x14], 0
je 0x100ca64b
push 1
push 0x10266ca8
lea ecx, [ebp - 0x24]
call fcn.1001a7c0
cmp dword [ebp - 0x28], 8
lea eax, [ebp - 0x3c]
push dword [ebp - 0x2c]
cmovae eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x24]
push eax
call fcn.1001a7c0
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x3c]
call sym.WMCommon.dll_public:_class_WM::GMIniFile____thiscall_WM::GMIniFile::operator_class_WM::GMIniFile_const__
lea ecx, [ebp - 0x24]
call fcn.1001a5a0
lea ecx, [ebp - 0x1b0]
call sym.WMCommon.dll_public:_void___thiscall_WM::GMRegValue::destructor_void_
lea ecx, [ebp - 0xb0]
call sym.WMCommon.dll_public:_void___thiscall_WM::GMRegFile::destructor_void_
cmp dword [ebp - 0x28], 8
lea ecx, [ebp - 0x3c]
lea eax, [ebp + 8]
cmovae ecx, dword [ebp - 0x3c]
cmp dword [ebp + 0x1c], 8
push ecx
cmovae eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
cmp eax, 1
lea ecx, [ebp - 0x3c]
sete bl
call fcn.1001a5a0
jmp 0x100ca747
lea ecx, [ebp - 0x3c]
xor bl, bl
call fcn.1001a5a0
jmp 0x100ca747
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x60]
call sym.WMCommon.dll_public:_bool___thiscall_WM::GMRegFile::EnumKeyValueName_class_std::vector_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_std::allocator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_______class_std::vector_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_std::allocator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______
test al, al
je 0x100ca731
mov ecx, dword [ebp - 0x14]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x18]
xor edi, edi
sub ecx, esi
imul ecx
sar edx, 2
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
je 0x100ca72d
cmp dword [esi + 0x10], 0
je 0x100ca725
sub esp, 0x18
mov ecx, esp
push esi
call fcn.1001a380
call sym.WMCommon.dll_public:_static_bool___cdecl_WM::GMShellUtils::RefreshProcessEnvironment_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___
add esp, 0x18
test al, al
je 0x100ca731
inc edi
add esi, 0x18
cmp edi, ebx
jb 0x100ca708
mov bl, 1
jmp 0x100ca733
xor bl, bl
lea ecx, [ebp - 0x18]
call fcn.1001d100
lea ecx, [ebp - 0x30]
call fcn.1001d100
jmp 0x100ca747
xor bl, bl
lea ecx, [ebp - 0x78]
call fcn.1001a5a0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xc8], vtable.WM::GMBuffer_unsigned_char_.0
test eax, eax
je 0x100ca776
push eax
call fcn.1006e708
add esp, 4
mov dword [ebp - 0xc0], 0
lea ecx, [ebp - 0xec]
call fcn.1001a5a0
lea ecx, [ebp - 0xf8]
call fcn.1001d100
lea ecx, [ebp - 0x114]
call fcn.1001a5a0
lea ecx, [ebp - 0x130]
call fcn.1001a5a0
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x100ca7b7
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x44], 0
call fcn.1001a5a0
lea ecx, [ebp + 8]
call fcn.1001a5a0
mov ecx, dword [ebp - 0xc]
mov al, bl
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret