Function at 0x4c2ad8
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffed8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4c2e51
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4c2b27
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call dword [eax + 0x148]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c2b31
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
mov eax, dword [eax*4 + 0x4eb51c]
push eax
push 0x4c2e64
call sub.kernel32.dll_SetEnvironmentVariableA
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
je 0x4c2b6a
mov eax, dword [0x4eb534]
push eax
push 0x4c2e74
call sub.kernel32.dll_SetEnvironmentVariableA
jmp 0x4c2b85
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
mov eax, dword [eax*4 + 0x4eb528]
push eax
push 0x4c2e74
call sub.kernel32.dll_SetEnvironmentVariableA
cmp dword [ebp - 8], 0
jbe 0x4c2bce
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2bce
mov eax, dword [ebp - 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x10c]
call fcn.0040a88c
mov eax, dword [ebp - 0x10c]
call fcn.004059a4
push eax
push 0x4c2e84
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_GetWindowLongA
mov esi, eax
jmp 0x4c2bd0
xor esi, esi
mov edi, 0x31
mov eax, dword [ebp - 4]
cmp byte [eax + 0x74], 0
je 0x4c2be1
and edi, 0xffffffef
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
cmp dword [ebp - 8], 0
jbe 0x4c2ca3
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2ca3
test bl, bl
jne 0x4c2c51
mov eax, dword [ebp - 8]
push eax
push 0x4c2e94
push 0xff
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x4ef568]
mov eax, dword [eax]
call eax
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x150]
pop ecx
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
test bl, bl
jne 0x4c2c97
mov eax, dword [ebp - 8]
push eax
push 0x4c2ea4
push 0xff
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x4ef568]
mov eax, dword [eax]
call eax
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x150]
pop ecx
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
push 0
push 0x4c2e84
call sub.kernel32.dll_SetEnvironmentVariableA
test bl, bl
je 0x4c2ddb
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x1d0]
add esp, 8
test eax, eax
je 0x4c2cfa
push 0x4c2ec0
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 6
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.004b2340
mov ecx, 7
mov edx, dword [ebp - 4]
call fcn.004b30ac
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x1d4]
add esp, 8
test eax, eax
je 0x4c2d49
push 0x4c2ee0
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 6
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.004b2340
mov ecx, 7
mov edx, dword [ebp - 4]
call fcn.004b30ac
cmp dword [ebp - 8], 0
jbe 0x4c2d99
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2d99
mov eax, dword [ebp - 4]
mov dword [eax + 0x1e8], esi
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_GetWindowLongA
mov edx, dword [ebp - 4]
mov dword [edx + 0x1ec], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e4], 0
je 0x4c2d99
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e0]
push eax
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_SetWindowLongA
push 0
push 1
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 4
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 0xd
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 0x18
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
jmp 0x4c2e2d
lea eax, [ebp - 0x118]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 0
mov eax, dword [ebp - 4]
call dword [eax + 0x154]
mov dword [ebp - 0x120], eax
mov byte [ebp - 0x11c], 6
lea edx, [ebp - 0x128]
mov ecx, 1
mov eax, 0x4c2f00
call fcn.0040c110
mov edx, dword [ebp - 0x118]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.004c424c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c2e58
lea eax, [ebp - 0x118]
call fcn.004054f8
lea eax, [ebp - 0x10c]
call fcn.004054f8
ret