Function at 0x4c2b14
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffed8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4c2e8d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4c2b63
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call dword [eax + 0x148]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4c2b6d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
mov eax, dword [eax*4 + 0x4ea51c]
push eax
push 0x4c2ea0
call sub.kernel32.dll_SetEnvironmentVariableA
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
je 0x4c2ba6
mov eax, dword [0x4ea534]
push eax
push 0x4c2eb0
call sub.kernel32.dll_SetEnvironmentVariableA
jmp 0x4c2bc1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
mov eax, dword [eax*4 + 0x4ea528]
push eax
push 0x4c2eb0
call sub.kernel32.dll_SetEnvironmentVariableA
cmp dword [ebp - 8], 0
jbe 0x4c2c0a
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2c0a
mov eax, dword [ebp - 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x10c]
call fcn.0040a894
mov eax, dword [ebp - 0x10c]
call fcn.004059a4
push eax
push 0x4c2ec0
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_GetWindowLongA
mov esi, eax
jmp 0x4c2c0c
xor esi, esi
mov edi, 0x31
mov eax, dword [ebp - 4]
cmp byte [eax + 0x74], 0
je 0x4c2c1d
and edi, 0xffffffef
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
cmp dword [ebp - 8], 0
jbe 0x4c2cdf
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2cdf
test bl, bl
jne 0x4c2c8d
mov eax, dword [ebp - 8]
push eax
push 0x4c2ed0
push 0xff
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x4ee570]
mov eax, dword [eax]
call eax
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x150]
pop ecx
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
test bl, bl
jne 0x4c2cd3
mov eax, dword [ebp - 8]
push eax
push 0x4c2ee0
push 0xff
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x4ee570]
mov eax, dword [eax]
call eax
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x150]
pop ecx
push edi
mov eax, dword [ebp - 4]
call dword [eax + 0x144]
pop ecx
test eax, eax
sete bl
push 0
push 0x4c2ec0
call sub.kernel32.dll_SetEnvironmentVariableA
test bl, bl
je 0x4c2e17
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x1d0]
add esp, 8
test eax, eax
je 0x4c2d36
push 0x4c2efc
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 6
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.004b237c
mov ecx, 7
mov edx, dword [ebp - 4]
call fcn.004b30e8
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 4]
call dword [eax + 0x1d4]
add esp, 8
test eax, eax
je 0x4c2d85
push 0x4c2f1c
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 6
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.004b237c
mov ecx, 7
mov edx, dword [ebp - 4]
call fcn.004b30e8
cmp dword [ebp - 8], 0
jbe 0x4c2dd5
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne 0x4c2dd5
mov eax, dword [ebp - 4]
mov dword [eax + 0x1e8], esi
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_GetWindowLongA
mov edx, dword [ebp - 4]
mov dword [edx + 0x1ec], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e4], 0
je 0x4c2dd5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e0]
push eax
push 0xfffffffffffffffc
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_SetWindowLongA
push 0
push 1
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 4
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 0xd
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
push 0
push 0x18
mov eax, dword [ebp - 4]
call dword [eax + 0x174]
add esp, 8
jmp 0x4c2e69
lea eax, [ebp - 0x118]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 0
mov eax, dword [ebp - 4]
call dword [eax + 0x154]
mov dword [ebp - 0x120], eax
mov byte [ebp - 0x11c], 6
lea edx, [ebp - 0x128]
mov ecx, 1
mov eax, 0x4c2f3c
call fcn.0040c118
mov edx, dword [ebp - 0x118]
mov cl, 1
mov eax, dword [ebp - 4]
call fcn.004c4288
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c2e94
lea eax, [ebp - 0x118]
call fcn.004054f8
lea eax, [ebp - 0x10c]
call fcn.004054f8
ret