Function at 0x4b1b62
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
push edi
mov dword [ebp - 0x10], ebx
cmp eax, ebx
jne 0x4b1b93
call fcn.004a815c
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [eax], 0x16
call fcn.004a80fd
add esp, 0x14
or eax, 0xffffffff
jmp 0x4b1bff
push esi
mov esi, dword [eax]
mov dword [ebp - 4], esi
cmp esi, ebx
je 0x4b1bf0
push 0x3d
push esi
call fcn.004b3004
pop ecx
pop ecx
mov dword [ebp - 0xc], eax
cmp eax, ebx
je 0x4b1bf0
cmp esi, eax
je 0x4b1bf0
xor ecx, ecx
cmp byte [eax + 1], bl
mov eax, dword [0x51d5c8]
sete cl
mov dword [ebp - 8], ecx
cmp eax, dword [0x51d5cc]
jne 0x4b1bd6
mov edi, eax
call fcn.004b1b05
mov dword [0x51d5c8], eax
cmp eax, ebx
jne 0x4b1c3a
cmp dword [ebp + 0xc], ebx
je 0x4b1c03
cmp dword [0x51d5d0], ebx
je 0x4b1c03
call fcn.004aebfb
test eax, eax
je 0x4b1c3a
call fcn.004a815c
mov dword [eax], 0x16
or eax, 0xffffffff
pop esi
pop edi
pop ebx
leave
ret
cmp dword [ebp - 8], ebx
jne 0x4b1da7
push 4
call fcn.004ac35a
pop ecx
mov dword [0x51d5c8], eax
cmp eax, ebx
je 0x4b1bfb
mov dword [eax], ebx
cmp dword [0x51d5d0], ebx
jne 0x4b1c3a
push 4
call fcn.004ac35a
pop ecx
mov dword [0x51d5d0], eax
cmp eax, ebx
je 0x4b1bfb
mov dword [eax], ebx
mov esi, dword [0x51d5c8]
mov dword [ebp - 0x14], esi
cmp esi, ebx
je 0x4b1bfb
mov edi, dword [ebp - 0xc]
sub edi, dword [ebp - 4]
push dword [ebp - 4]
call fcn.004b1ab8
mov edi, eax
cmp edi, ebx
pop ecx
jl 0x4b1cae
cmp dword [esi], ebx
je 0x4b1cae
lea esi, [esi + edi*4]
push dword [esi]
call fcn.004a3b8f
pop ecx
cmp dword [ebp - 8], ebx
jne 0x4b1c8b
mov eax, dword [ebp - 4]
mov dword [esi], eax
mov eax, dword [ebp + 8]
mov dword [eax], ebx
jmp 0x4b1d01
mov eax, dword [esi + 4]
mov dword [esi], eax
mov eax, dword [ebp - 0x14]
inc edi
lea esi, [eax + edi*4]
cmp dword [esi], ebx
jne 0x4b1c7f
cmp edi, 0x3fffffff
jae 0x4b1d01
push 4
push edi
push dword [0x51d5c8]
call fcn.004ac42d
add esp, 0xc
cmp eax, ebx
je 0x4b1d01
jmp 0x4b1cfc
cmp dword [ebp - 8], ebx
jne 0x4b1d99
cmp edi, ebx
jge 0x4b1cbd
neg edi
lea eax, [edi + 2]
cmp eax, edi
jl 0x4b1bfb
cmp eax, 0x3fffffff
jae 0x4b1bfb
push eax
push 4
push dword [0x51d5c8]
call fcn.004ac42d
add esp, 0xc
cmp eax, ebx
je 0x4b1bfb
mov edx, dword [ebp - 4]
lea ecx, [eax + edi*4]
mov dword [ecx], edx
mov dword [ecx + 4], ebx
mov ecx, dword [ebp + 8]
mov dword [ecx], ebx
mov dword [0x51d5c8], eax
cmp dword [ebp + 0xc], ebx
je 0x4b1d7e
mov esi, dword [ebp - 4]
push 1
push esi
call fcn.004aeb70
inc eax
pop ecx
inc eax
push eax
call fcn.004ac39a
mov edi, eax
pop ecx
pop ecx
cmp edi, ebx
je 0x4b1d7e
push esi
push esi
call fcn.004aeb70
inc eax
pop ecx
inc eax
push eax
push edi
call fcn.004aec90
add esp, 0xc
test eax, eax
je 0x4b1d47
push ebx
push ebx
push ebx
push ebx
push ebx
call fcn.004a7ff6
add esp, 0x14
mov ecx, dword [ebp - 8]
mov eax, edi
sub eax, esi
add eax, dword [ebp - 0xc]
mov byte [eax], bl
inc eax
neg ecx
sbb ecx, ecx
not ecx
and ecx, eax
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
jne 0x4b1d77
or dword [ebp - 0x10], 0xffffffff
call fcn.004a815c
mov dword [eax], 0x2a
push edi
call fcn.004a3b8f
pop ecx
cmp dword [ebp - 8], ebx
je 0x4b1d91
push dword [ebp - 4]
call fcn.004a3b8f
mov eax, dword [ebp + 8]
pop ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x10]
jmp 0x4b1bfe
push dword [ebp - 4]
call fcn.004a3b8f
mov eax, dword [ebp + 8]
pop ecx
mov dword [eax], ebx
xor eax, eax
jmp 0x4b1bfe