Function at 0x4289d1
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push edi
xor edi, edi
mov dword [0x44d1a0], edi
call fcn.0042c14e
push 0x44ddc8
mov dword [0x44d19c], edi
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [0x449df4]
mov dword [0x449054], 9
call fcn.004221e0
mov ecx, dword [0x449df4]
call fcn.00427ede
mov esi, eax
mov eax, edi
mov dword [ebp - 4], esi
mov edx, esi
mov dword [0x44d198], esi
jmp 0x428a30
mov ecx, dword [edx + 4]
mov word [ecx + 0x1a], ax
inc eax
mov edx, dword [edx]
test edx, edx
jne 0x428a26
mov ecx, esi
push ebx
mov ebx, edi
test ecx, ecx
je 0x428a86
mov esi, dword [0x44c990]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x14]
imul eax, eax, 0xc
mov edx, dword [eax + 0x41f398]
cmp dword [edx], 0x12
je 0x428a72
inc esi
mov dword [0x44c990], esi
imul eax, dword [edx], 0x24
test byte [eax + 0x44906c], 1
jne 0x428a6f
add edx, 4
jmp 0x428a52
inc edi
jmp 0x428a6a
cmp edi, ebx
jg 0x428baf
mov ecx, dword [ecx]
push 0
pop edi
test ecx, ecx
jne 0x428a43
mov esi, dword [ebp - 4]
xor eax, eax
inc eax
cmp dword [0x44e6ec], 0
jne 0x43c712
mov dword [0x44d1a8], edi
mov esi, edi
mov ecx, edi
mov eax, dword [0x449df4]
mov dword [eax + 0x10], esi
mov eax, 0x445397
test ecx, ecx
jne 0x428ab6
mov eax, 0x4288ec
push 0x400
push 0x44c998
push edi
mov dword [0x44d1a4], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x43c733
mov esi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ebx, 0x401488
push 0x4014b0
push ebx
call esi
cmp dword [0x44d1a8], 0
jne 0x43c749
call fcn.00428949
call fcn.0042da6d
cmp dword [0x44d1a8], 0
jne 0x43c767
push edi
push ebx
call esi
mov ecx, dword [0x44d198]
mov eax, edi
mov dword [0x44b0ac], eax
pop ebx
test ecx, ecx
je 0x428b37
mov edx, edi
test edx, edx
jne 0x428b32
mov eax, dword [ecx + 0x2c]
mov edx, eax
mov ecx, dword [ecx]
test ecx, ecx
jne 0x428b23
mov dword [0x44b0ac], eax
cmp dword [0x44d19c], 1
je 0x43c771
test eax, eax
jne 0x428b81
mov esi, dword [0x44d198]
test esi, esi
je 0x428b76
cmp dword [esi + 0x28], edi
je 0x428b72
mov ecx, dword [esi + 0x30]
test ecx, ecx
je 0x428b72
push 8
pop edx
call fcn.00427990
mov ecx, dword [esi + 4]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
mov dword [ecx], eax
mov esi, dword [esi]
jmp 0x428b4e
mov ecx, dword [0x449df4]
call fcn.004220f6
mov eax, dword [0x44d1b0]
test eax, eax
je 0x428b91
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [0x44d198]
test esi, esi
je 0x428bb6
cmp dword [esi + 0x30], 0
je 0x428bab
push dword [esi + 0x30]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
pop ecx
mov esi, dword [esi]
jmp 0x428b97
mov ebx, edi
jmp 0x428a7a
push 0x44ddc8
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
pop edi
pop esi
leave
ret
cmp dword [0x44904c], 0
je 0x428a96
cmp ebx, eax
jle 0x428a96
mov dword [0x44d1a8], eax
mov ecx, eax
jmp 0x428aa0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
push edi
push edi
push 1
call dword [sym.imp.KERNEL32.dll_RaiseException]
or dword [0x44abe8], 0xffffffff
call fcn.00445441
cmp dword [0x44d1a8], 0
jne 0x428af9
jmp 0x428af4
call fcn.00445342
jmp 0x428b0b
push 0x1f68
call fcn.00422658
mov eax, dword [0x44b0ac]
pop ecx
jmp 0x428b44