Function at 0x4b93e0
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 6
push 0
push 0
dec ecx
jne 0x4b93e9
xchg dword [ebp - 4], ecx
push ebx
push esi
mov dword [ebp - 8], ecx
mov ebx, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov eax, dword [ebp + 8]
call fcn.00404740
xor eax, eax
push ebp
push 0x4b9744
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x515b54], 0
jne 0x4b943d
mov eax, dword [ebp - 4]
add eax, 0x20
mov edx, 0x4b9760
call fcn.004042c8
mov byte [ebp - 9], 0
jmp 0x4b96ec
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.004b9834
test al, al
je 0x4b9454
mov byte [ebp - 9], 1
jmp 0x4b96ec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [eax]
call dword [edx]
xor edx, edx
push ebp
push 0x4b96e5
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [ebp - 8], 0
je 0x4b94d2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0x4b94bd
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0xb
lea edx, [ebp - 0x18]
xor ecx, ecx
mov eax, 0x4b977c
call fcn.0040a194
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
add eax, 0x20
call fcn.004042c8
mov byte [ebp - 9], 0
call fcn.00403c9c
jmp 0x4b96ec
mov eax, dword [ebp - 8]
call fcn.00404750
push eax
push 0x4b979c
call sub.kernel32.dll_SetEnvironmentVariableA
jmp 0x4b94de
push 0
push 0x4b979c
call sub.kernel32.dll_SetEnvironmentVariableA
cmp dword [ebp + 8], 0
je 0x4b9544
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0x4b952f
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0xb
lea edx, [ebp - 0x18]
xor ecx, ecx
mov eax, 0x4b97b4
call fcn.0040a194
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
add eax, 0x20
call fcn.004042c8
mov byte [ebp - 9], 0
call fcn.00403c9c
jmp 0x4b96ec
mov eax, dword [ebp + 8]
call fcn.00404750
push eax
push 0x4b97d4
call sub.kernel32.dll_SetEnvironmentVariableA
jmp 0x4b9550
push 0
push 0x4b97d4
call sub.kernel32.dll_SetEnvironmentVariableA
push 0x4b97e4
push 0x4b97e8
call dword [0x515af0]
add esp, 8
push 0x31
call dword [0x515b54]
pop ecx
test eax, eax
sete byte [ebp - 9]
cmp byte [ebp - 9], 0
je 0x4b9644
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
mov edx, ebx
call fcn.0041b924
push 0
push 0x400
call dword [0x515b50]
add esp, 8
push 0
push 0x201
call dword [0x515b50]
add esp, 8
push 0
push 0x8000
call dword [0x515b50]
add esp, 8
call dword [0x515a54]
mov edx, eax
mov eax, dword [ebp - 4]
add eax, 0x18
call fcn.0040446c
call dword [0x515a84]
mov edx, eax
mov eax, dword [ebp - 4]
add eax, 0x1c
call fcn.0040446c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov edx, dword [eax]
call dword [edx + 0x44]
push 0
call dword [0x515a68]
pop ecx
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x4b96cc
inc ebx
xor esi, esi
push 0
push esi
call dword [0x515a6c]
add esp, 8
mov edx, eax
lea eax, [ebp - 0x28]
call fcn.0040446c
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
call fcn.004967d0
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0x20]
call fcn.00404518
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc esi
dec ebx
jne 0x4b9601
jmp 0x4b96cc
lea eax, [ebp - 0x2c]
push eax
call dword [0x515a1c]
mov edx, eax
lea eax, [ebp - 0x34]
call fcn.0040446c
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
call fcn.004967d0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0xf
lea edx, [ebp - 0x18]
xor ecx, ecx
mov eax, 0x4b9814
call fcn.0040a194
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x20
call fcn.004042c8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [eax]
call dword [edx + 4]
xor eax, eax
push ebp
push 0x4b96c5
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.004b98b4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b96cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [eax]
call dword [edx]
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b96ec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [eax]
call dword [edx + 4]
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b974b
lea eax, [ebp - 0x34]
call fcn.00404274
lea eax, [ebp - 0x30]
call fcn.0040499c
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00404298
lea eax, [ebp - 0x24]
call fcn.0040499c
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00404298
lea eax, [ebp - 0x10]
call fcn.00404274
lea eax, [ebp - 8]
call fcn.00404274
lea eax, [ebp + 8]
call fcn.00404274
ret