Function at 0x4cf5b4
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
xor eax, eax
push ebp
push 0x4d0425
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004cecb0
cmp dword [0x55b380], 1
jle 0x4cf622
cmp dword [0x55b378], 0
je 0x4cf622
lea eax, [ebp - 4]
call fcn.004ce580
lea edx, [ebp - 8]
mov eax, dword [0x55b354]
call fcn.00409b3c
push dword [ebp - 8]
push 0x4d0438
push dword [ebp - 4]
lea eax, [ebp - 4]
mov edx, 3
call fcn.004047c8
mov eax, dword [ebp - 4]
call fcn.00404908
push eax
push 0x4d043c
call sub.kernel32.dll_SetEnvironmentVariableA
push 8
push 0
mov eax, dword [0x55b354]
call fcn.00404908
push eax
call sub.kernel32.dll_LoadLibraryExA_1
mov dword [0x55b408], eax
cmp word [0x55b360], 0x2328
jb 0x4cf65f
push 8
push 0
mov eax, dword [0x55b358]
call fcn.00404908
push eax
call sub.kernel32.dll_LoadLibraryExA_1
mov dword [0x55b40c], eax
cmp dword [0x55b408], 0
jne 0x4cf6a4
lea eax, [ebp - 4]
mov edx, dword [0x55b354]
call fcn.004044e0
mov eax, 0x55b354
call fcn.00404448
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov edx, 0x4d044c
call fcn.00404754
mov ecx, dword [ebp - 0xc]
mov dl, 1
mov eax, dword [0x407f74]
call fcn.0040d324
call fcn.00403dc4
cmp word [0x55b360], 0x2328
jb 0x4cf6f4
cmp dword [0x55b40c], 0
jne 0x4cf6f4
lea eax, [ebp - 4]
mov edx, dword [0x55b358]
call fcn.004044e0
mov eax, 0x55b358
call fcn.00404448
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 4]
mov edx, 0x4d046c
call fcn.00404754
mov ecx, dword [ebp - 0x10]
mov dl, 1
mov eax, dword [0x407f74]
call fcn.0040d324
call fcn.00403dc4
test byte [0x55b363], 2
je 0x4cf92c
mov eax, 0x4d0484
call fcn.004ce4b0
mov dword [0x55afec], eax
mov eax, 0x4d0494
call fcn.004ce4b0
mov dword [0x55aff0], eax
mov eax, 0x4d04a4
call fcn.004ce4b0
mov dword [0x55aff4], eax
mov eax, 0x4d04b4
call fcn.004ce4b0
mov dword [0x55aff8], eax
mov eax, 0x4d04c4
call fcn.004ce4b0
mov dword [0x55affc], eax
mov eax, 0x4d04d4
call fcn.004ce4b0
mov dword [0x55b000], eax
mov eax, 0x4d04e4
call fcn.004ce4b0
mov dword [0x55b004], eax
mov eax, 0x4d04f4
call fcn.004ce4b0
mov dword [0x55b008], eax
mov eax, 0x4d0504
call fcn.004ce4b0
mov dword [0x55b00c], eax
mov eax, 0x4d0514
call fcn.004ce4b0
mov dword [0x55b010], eax
mov eax, 0x4d0524
call fcn.004ce4b0
mov dword [0x55b014], eax
mov eax, 0x4d0534
call fcn.004ce4b0
mov dword [0x55b018], eax
mov eax, 0x4d0548
call fcn.004ce4b0
mov dword [0x55b01c], eax
mov eax, 0x4d0558
call fcn.004ce4b0
mov dword [0x55b020], eax
mov eax, 0x4d0568
call fcn.004ce4b0
mov dword [0x55b024], eax
mov eax, 0x4d0578
call fcn.004ce4b0
mov dword [0x55b028], eax
mov eax, 0x4d0588
call fcn.004ce4b0
mov dword [0x55b02c], eax
mov eax, 0x4d0598
call fcn.004ce4b0
mov dword [0x55b030], eax
mov eax, 0x4d05a8
call fcn.004ce4b0
mov dword [0x55b034], eax
mov eax, 0x4d05b8
call fcn.004ce4b0
mov dword [0x55b038], eax
mov eax, 0x4d05c8
call fcn.004ce4b0
mov dword [0x55b03c], eax
mov eax, 0x4d05d8
call fcn.004ce4b0
mov dword [0x55b040], eax
mov eax, 0x4d05e8
call fcn.004ce4b0
mov dword [0x55b044], eax
mov eax, 0x4d05f8
call fcn.004ce4b0
mov dword [0x55b048], eax
mov eax, 0x4d0608
call fcn.004ce4b0
mov dword [0x55b04c], eax
mov eax, 0x4d0618
call fcn.004ce4b0
mov dword [0x55b050], eax
mov eax, 0x4d0628
call fcn.004ce4b0
mov dword [0x55b054], eax
mov eax, 0x4d0638
call fcn.004ce4b0
mov dword [0x55b058], eax
mov eax, 0x4d0648
call fcn.004ce4b0
mov dword [0x55b060], eax
mov eax, 0x4d0658
call fcn.004ce4b0
mov dword [0x55b05c], eax
mov eax, 0x4d0668
call fcn.004ce4b0
mov dword [0x55b064], eax
mov eax, 0x4d0678
call fcn.004ce4b0
mov dword [0x55b068], eax
mov eax, 0x4d0688
call fcn.004ce4b0
mov dword [0x55b06c], eax
mov eax, 0x4d0698
call fcn.004ce4b0
mov dword [0x55b070], eax
mov eax, 0x4d06a8
call fcn.004ce4b0
mov dword [0x55b074], eax
mov eax, 0x4d06b8
call fcn.004ce4b0
mov dword [0x55b078], eax
mov eax, 0x4d06c8
call fcn.004ce4b0
mov dword [0x55b07c], eax
test byte [0x55b363], 4
je 0x4d0120
mov eax, 0x4d06d8
call fcn.004ce4b0
mov dword [0x55b080], eax
mov eax, 0x4d06d8
call fcn.004ce4b0
mov dword [0x55b084], eax
mov eax, 0x4d06ec
call fcn.004ce4b0
mov dword [0x55b088], eax
mov eax, 0x4d06ec
call fcn.004ce4b0
mov dword [0x55b08c], eax
mov eax, 0x4d06ec
call fcn.004ce4b0
mov dword [0x55b090], eax
mov eax, 0x4d0700
call fcn.004ce4b0
mov dword [0x55b094], eax
mov eax, 0x4d0720
call fcn.004ce4b0
mov dword [0x55b098], eax
mov eax, 0x4d0738
call fcn.004ce4b0
mov dword [0x55b09c], eax
mov eax, 0x4d0750
call fcn.004ce4b0
mov dword [0x55b0a0], eax
mov eax, 0x4d0768
call fcn.004ce4b0
mov dword [0x55b0a4], eax
mov eax, 0x4d0780
call fcn.004ce4b0
mov dword [0x55b0a8], eax
mov eax, 0x4d0794
call fcn.004ce4b0
mov dword [0x55b0ac], eax
mov eax, 0x4d07b4
call fcn.004ce4b0
mov dword [0x55b0b0], eax
mov eax, 0x4d07cc
call fcn.004ce4b0
mov dword [0x55b0b4], eax
mov eax, 0x4d07e8
call fcn.004ce4b0
mov dword [0x55b0b8], eax
mov eax, 0x4d0800
call fcn.004ce4b0
mov dword [0x55b0bc], eax
mov eax, 0x4d0818
call fcn.004ce4b0
mov dword [0x55b0c0], eax
mov eax, 0x4d0834
call fcn.004ce4b0
mov dword [0x55b0c4], eax
mov eax, 0x4d0850
call fcn.004ce4b0
mov dword [0x55b0c8], eax
mov eax, 0x4d0864
call fcn.004ce4b0
mov dword [0x55b0cc], eax
mov eax, 0x4d0878
call fcn.004ce4b0
mov dword [0x55b0d0], eax
mov eax, 0x4d0890
call fcn.004ce4b0
mov dword [0x55b0d4], eax
mov eax, 0x4d08a8
call fcn.004ce4b0
mov dword [0x55b0d8], eax
mov eax, 0x4d08c0
call fcn.004ce4b0
mov dword [0x55b0dc], eax
mov eax, 0x4d08d8
call fcn.004ce4b0
mov dword [0x55b0e0], eax
mov eax, 0x4d08ec
call fcn.004ce4b0
mov dword [0x55b0e4], eax
mov eax, 0x4d0908
call fcn.004ce4b0
mov dword [0x55b0e8], eax
mov eax, 0x4d0920
call fcn.004ce4b0
mov dword [0x55b0ec], eax
mov eax, 0x4d0938
call fcn.004ce4b0
mov dword [0x55b0f0], eax
mov eax, 0x4d0954
call fcn.004ce4b0
mov dword [0x55b0f4], eax
mov eax, 0x4d096c
call fcn.004ce4b0
mov dword [0x55b0f8], eax
mov eax, 0x4d0984
call fcn.004ce4b0
mov dword [0x55b0fc], eax
mov eax, 0x4d099c
call fcn.004ce4b0
mov dword [0x55b100], eax
mov eax, 0x4d09b4
call fcn.004ce4b0
mov dword [0x55b104], eax
mov eax, 0x4d09cc
call fcn.004ce4b0
mov dword [0x55b108], eax
mov eax, 0x4d09e8
call fcn.004ce4b0
mov dword [0x55b10c], eax
mov eax, 0x4d0a00
call fcn.004ce4b0
mov dword [0x55b110], eax
mov eax, 0x4d0a1c
call fcn.004ce4b0
mov dword [0x55b114], eax
mov eax, 0x4d0a34
call fcn.004ce4b0
mov dword [0x55b118], eax
mov eax, 0x4d0a4c
call fcn.004ce4b0
mov dword [0x55b11c], eax
mov eax, 0x4d0a68
call fcn.004ce4b0
mov dword [0x55b120], eax
mov eax, 0x4d0a80
call fcn.004ce4b0
mov dword [0x55b124], eax
mov eax, 0x4d0a98
call fcn.004ce4b0
mov dword [0x55b128], eax
mov eax, 0x4d0ab4
call fcn.004ce4b0
mov dword [0x55b12c], eax
mov eax, 0x4d0acc
call fcn.004ce4b0
mov dword [0x55b130], eax
mov eax, 0x4d0ae0
call fcn.004ce4b0
mov dword [0x55b134], eax
mov eax, 0x4d0b00
call fcn.004ce4b0
mov dword [0x55b138], eax
mov eax, 0x4d0b20
call fcn.004ce4b0
mov dword [0x55b13c], eax
mov eax, 0x4d0b40
call fcn.004ce4b0
mov dword [0x55b140], eax
mov eax, 0x4d0b54
call fcn.004ce4b0
mov dword [0x55b144], eax
mov eax, 0x4d0b6c
call fcn.004ce4b0
mov dword [0x55b148], eax
mov eax, 0x4d0b88
call fcn.004ce4b0
mov dword [0x55b14c], eax
mov eax, 0x4d0ba4
call fcn.004ce4b0
mov dword [0x55b150], eax
mov eax, 0x4d0bc0
call fcn.004ce4b0
mov dword [0x55b154], eax
mov eax, 0x4d0bd8
call fcn.004ce4b0
mov dword [0x55b158], eax
mov eax, 0x4d0bf4
call fcn.004ce4b0
mov dword [0x55b15c], eax
mov eax, 0x4d0c10
call fcn.004ce4b0
mov dword [0x55b160], eax
mov eax, 0x4d0c28
call fcn.004ce4b0
mov dword [0x55b164], eax
mov eax, 0x4d0c40
call fcn.004ce4b0
mov dword [0x55b168], eax
mov eax, 0x4d0c5c
call fcn.004ce4b0
mov dword [0x55b16c], eax
mov eax, 0x4d0c78
call fcn.004ce4b0
mov dword [0x55b170], eax
mov eax, 0x4d0c8c
call fcn.004ce4b0
mov dword [0x55b178], eax
mov eax, 0x4d0ca0
call fcn.004ce4b0
mov dword [0x55b17c], eax
cmp byte [0x55b364], 0
je 0x4d0120
mov eax, 0x4d0cb4
call fcn.004ce4b0
mov dword [0x55b180], eax
mov eax, 0x4d0ccc
call fcn.004ce4b0
mov dword [0x55b184], eax
mov eax, 0x4d0ce4
call fcn.004ce4b0
mov dword [0x55b188], eax
mov eax, 0x4d0cfc
call fcn.004ce4b0
mov dword [0x55b18c], eax
mov eax, 0x4d0d14
call fcn.004ce4b0
mov dword [0x55b190], eax
mov eax, 0x4d0d2c
call fcn.004ce4b0
mov dword [0x55b194], eax
mov eax, 0x4d0d44
call fcn.004ce4b0
mov dword [0x55b198], eax
mov eax, 0x4d0d5c
call fcn.004ce4b0
mov dword [0x55b19c], eax
mov eax, 0x4d0d74
call fcn.004ce4b0
mov dword [0x55b1a0], eax
mov eax, 0x4d0d8c
call fcn.004ce4b0
mov dword [0x55b1a4], eax
mov eax, 0x4d0da8
call fcn.004ce4b0
mov dword [0x55b1a8], eax
mov eax, 0x4d0dc0
call fcn.004ce4b0
mov dword [0x55b1ac], eax
mov eax, 0x4d0de0
call fcn.004ce4b0
mov dword [0x55b1b0], eax
mov eax, 0x4d0e00
call fcn.004ce4b0
mov dword [0x55b1b4], eax
mov eax, 0x4d0e1c
call fcn.004ce4b0
mov dword [0x55b1b8], eax
mov eax, 0x4d0e38
call fcn.004ce4b0
mov dword [0x55b1bc], eax
mov eax, 0x4d0e54
call fcn.004ce4b0
mov dword [0x55b1c0], eax
mov eax, 0x4d0e6c
call fcn.004ce4b0
mov dword [0x55b1c4], eax
mov eax, 0x4d0e88
call fcn.004ce4b0
mov dword [0x55b1c8], eax
mov eax, 0x4d0eac
call fcn.004ce4b0
mov dword [0x55b1cc], eax
mov eax, 0x4d0ec8
call fcn.004ce4b0
mov dword [0x55b1d0], eax
mov eax, 0x4d0ee0
call fcn.004ce4b0
mov dword [0x55b1d4], eax
mov eax, 0x4d0ef8
call fcn.004ce4b0
mov dword [0x55b1d8], eax
mov eax, 0x4d0f18
call fcn.004ce4b0
mov dword [0x55b1dc], eax
mov eax, 0x4d0f34
call fcn.004ce4b0
mov dword [0x55b1e0], eax
mov eax, 0x4d0f50
call fcn.004ce4b0
mov dword [0x55b1e4], eax
mov eax, 0x4d0f6c
call fcn.004ce4b0
mov dword [0x55b1e8], eax
mov eax, 0x4d0f84
call fcn.004ce4b0
mov dword [0x55b1ec], eax
mov eax, 0x4d0fa4
call fcn.004ce4b0
mov dword [0x55b1f0], eax
mov eax, 0x4d0fbc
call fcn.004ce4b0
mov dword [0x55b1f4], eax
mov eax, 0x4d0fd4
call fcn.004ce4b0
mov dword [0x55b1f8], eax
mov eax, 0x4d0fec
call fcn.004ce4b0
mov dword [0x55b1fc], eax
mov eax, 0x4d1004
call fcn.004ce4b0
mov dword [0x55b200], eax
mov eax, 0x4d101c
call fcn.004ce4b0
mov dword [0x55b204], eax
mov eax, 0x4d1038
call fcn.004ce4b0
mov dword [0x55b208], eax
mov eax, 0x4d1050
call fcn.004ce4b0
mov dword [0x55b20c], eax
mov eax, 0x4d1064
call fcn.004ce4b0
mov dword [0x55b210], eax
mov eax, 0x4d1078
call fcn.004ce4b0
mov dword [0x55b214], eax
mov eax, 0x4d108c
call fcn.004ce4b0
mov dword [0x55b218], eax
mov eax, 0x4d10a4
call fcn.004ce4b0
mov dword [0x55b21c], eax
mov eax, 0x4d10bc
call fcn.004ce4b0
mov dword [0x55b220], eax
mov eax, 0x4d10d4
call fcn.004ce4b0
mov dword [0x55b224], eax
mov eax, 0x4d10ec
call fcn.004ce4b0
mov dword [0x55b228], eax
mov eax, 0x4d1104
call fcn.004ce4b0
mov dword [0x55b22c], eax
mov eax, 0x4d111c
call fcn.004ce4b0
mov dword [0x55b230], eax
mov eax, 0x4d1134
call fcn.004ce4b0
mov dword [0x55b234], eax
mov eax, 0x4d114c
call fcn.004ce4b0
mov dword [0x55b238], eax
mov eax, 0x4d1164
call fcn.004ce4b0
mov dword [0x55b23c], eax
mov eax, 0x4d1180
call fcn.004ce4b0
mov dword [0x55b240], eax
mov eax, 0x4d119c
call fcn.004ce4b0
mov dword [0x55b244], eax
mov eax, 0x4d11b8
call fcn.004ce4b0
mov dword [0x55b248], eax
mov eax, 0x4d11d0
call fcn.004ce4b0
mov dword [0x55b24c], eax
mov eax, 0x4d11e8
call fcn.004ce4b0
mov dword [0x55b250], eax
mov eax, 0x4d1200
call fcn.004ce4b0
mov dword [0x55b254], eax
mov eax, 0x4d1218
call fcn.004ce4b0
mov dword [0x55b258], eax
mov eax, 0x4d122c
call fcn.004ce4b0
mov dword [0x55b25c], eax
mov eax, 0x4d1244
call fcn.004ce4b0
mov dword [0x55b260], eax
mov eax, 0x4d125c
call fcn.004ce4b0
mov dword [0x55b264], eax
mov eax, 0x4d1270
call fcn.004ce4b0
mov dword [0x55b268], eax
mov eax, 0x4d128c
call fcn.004ce4b0
mov dword [0x55b26c], eax
mov eax, 0x4d12a4
call fcn.004ce4b0
mov dword [0x55b270], eax
mov eax, 0x4d12c0
call fcn.004ce4b0
mov dword [0x55b274], eax
mov eax, 0x4d12d8
call fcn.004ce4b0
mov dword [0x55b278], eax
mov eax, 0x4d12f0
call fcn.004ce4b0
mov dword [0x55b27c], eax
mov eax, 0x4d1308
call fcn.004ce4b0
mov dword [0x55b280], eax
mov eax, 0x4d1320
call fcn.004ce4b0
mov dword [0x55b284], eax
mov eax, 0x4d1338
call fcn.004ce4b0
mov dword [0x55b288], eax
mov eax, 0x4d1350
call fcn.004ce4b0
mov dword [0x55b28c], eax
mov eax, 0x4d1368
call fcn.004ce4b0
mov dword [0x55b290], eax
mov eax, 0x4d1380
call fcn.004ce4b0
mov dword [0x55b294], eax
mov eax, 0x4d1398
call fcn.004ce4b0
mov dword [0x55b298], eax
cmp word [0x55b360], 0x1fa4
jb 0x4d01d4
mov eax, 0x4d13b0
call fcn.004ce4b0
mov dword [0x55b29c], eax
mov eax, 0x4d13c8
call fcn.004ce4b0
mov dword [0x55b2a0], eax
mov eax, 0x4d13e0
call fcn.004ce4b0
mov dword [0x55b2a4], eax
mov eax, 0x4d1404
call fcn.004ce4b0
mov dword [0x55b2a8], eax
mov eax, 0x4d1428
call fcn.004ce4b0
mov dword [0x55b2ac], eax
mov eax, 0x4d144c
call fcn.004ce4b0
mov dword [0x55b2b0], eax
mov eax, 0x4d146c
call fcn.004ce4b0
mov dword [0x55b2b4], eax
mov eax, 0x4d1490
call fcn.004ce4b0
mov dword [0x55b2b8], eax
mov eax, 0x4d14ac
call fcn.004ce4b0
mov dword [0x55b2bc], eax
mov eax, 0x4d14cc
call fcn.004ce4b0
mov dword [0x55b2c0], eax
mov eax, 0x4d14e8
call fcn.004ce4b0
mov dword [0x55b2c4], eax
cmp word [0x55b360], 0x2328
jb 0x4d03f0
mov eax, 0x4d1508
call fcn.004ce4b0
mov dword [0x55b2c8], eax
mov eax, 0x4d1528
call fcn.004ce4b0
mov dword [0x55b2cc], eax
mov eax, 0x4d1544
call fcn.004ce4b0
mov dword [0x55b2d0], eax
mov eax, 0x4d1560
call fcn.004ce4b0
mov dword [0x55b2d4], eax
mov eax, 0x4d157c
call fcn.004ce4b0
mov dword [0x55b2d8], eax
mov eax, 0x4d1598
call fcn.004ce4b0
mov dword [0x55b2dc], eax
mov eax, 0x4d15b4
call fcn.004ce4b0
mov dword [0x55b2e0], eax
mov eax, 0x4d15dc
call fcn.004ce4b0
mov dword [0x55b2e4], eax
mov eax, 0x4d1600
call fcn.004ce4b0
mov dword [0x55b2e8], eax
mov eax, 0x4d161c
call fcn.004ce4b0
mov dword [0x55b2ec], eax
mov eax, 0x4d1638
call fcn.004ce4b0
mov dword [0x55b2f0], eax
mov eax, 0x4d1654
call fcn.004ce4b0
mov dword [0x55b2f4], eax
mov eax, 0x4d1670
call fcn.004ce4b0
mov dword [0x55b2f8], eax
mov eax, 0x4d168c
call fcn.004ce4b0
mov dword [0x55b2fc], eax
mov eax, 0x4d16a8
call fcn.004ce4b0
mov dword [0x55b300], eax
mov eax, 0x4d16c4
call fcn.004ce4b0
mov dword [0x55b304], eax
mov eax, 0x4d16e4
call fcn.004ce4b0
mov dword [0x55b308], eax
mov eax, 0x4d1704
call fcn.004ce4b0
mov dword [0x55b30c], eax
mov eax, 0x4d1724
call fcn.004ce4b0
mov dword [0x55b310], eax
mov eax, 0x4d1744
call fcn.004ce4b0
mov dword [0x55b314], eax
mov eax, 0x4d1764
call fcn.004ce4b0
mov dword [0x55b318], eax
mov eax, 0x4d177c
call fcn.004ce4b0
mov dword [0x55b31c], eax
mov eax, 0x4d179c
call fcn.004ce4b0
mov dword [0x55b320], eax
mov eax, 0x4d17b8
call fcn.004ce4b0
mov dword [0x55b324], eax
mov eax, 0x4d17d4
call fcn.004ce4b0
mov dword [0x55b328], eax
mov eax, 0x4d17f0
call fcn.004ce4b0
mov dword [0x55b32c], eax
mov eax, 0x4d1810
call fcn.004ce4b0
mov dword [0x55b330], eax
mov eax, 0x4d182c
call fcn.004ce4b0
mov dword [0x55b334], eax
mov eax, 0x4d1848
call fcn.004ce4b0
mov dword [0x55b338], eax
mov eax, 0x4d1864
call fcn.004ce4b0
mov dword [0x55b33c], eax
mov eax, 0x4d1884
call fcn.004ce4b0
mov dword [0x55b340], eax
mov eax, 0x4d1898
call fcn.004ce4b0
mov dword [0x55b350], eax
mov eax, 0x4d18b0
call fcn.004ce518
mov dword [0x55b344], eax
mov eax, 0x4d18d0
call fcn.004ce518
mov dword [0x55b348], eax
mov eax, 0x4d18e8
call fcn.004ce518
mov dword [0x55b34c], eax
cmp word [0x55b360], 0x2710
jb 0x4d040a
mov eax, 0x4d1900
call fcn.004ce4b0
mov dword [0x55b174], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d042c
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.0040446c
ret