Function at 0x40d11c
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ebp + 8]
push ebx
sub ebx, ebx
cmp eax, ebx
push edi
mov dword [ebp - 0x10], ebx
jne 0x40d14d
call fcn.00403d9a
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [eax], 0x16
call fcn.00403d3b
add esp, 0x14
or eax, 0xffffffff
jmp 0x40d1b9
push esi
mov esi, dword [eax]
cmp esi, ebx
mov dword [ebp - 4], esi
je 0x40d1aa
push 0x3d
push esi
call fcn.0040d5fa
cmp eax, ebx
pop ecx
pop ecx
mov dword [ebp - 0xc], eax
je 0x40d1aa
cmp esi, eax
je 0x40d1aa
xor ecx, ecx
cmp byte [eax + 1], bl
mov eax, dword [0x4342a0]
sete cl
cmp eax, dword [0x4342a4]
mov dword [ebp - 8], ecx
jne 0x40d190
mov edi, eax
call fcn.0040d0bf
mov dword [0x4342a0], eax
cmp eax, ebx
jne 0x40d1f4
cmp dword [ebp + 0xc], ebx
je 0x40d1bd
cmp dword [0x4342a8], ebx
je 0x40d1bd
call fcn.0040c665
or eax, eax
je 0x40d1f4
call fcn.00403d9a
mov dword [eax], 0x16
or eax, 0xffffffff
pop esi
pop edi
pop ebx
leave
ret
cmp dword [ebp - 8], ebx
jne 0x40d35c
push 4
call fcn.0040513d
cmp eax, ebx
pop ecx
mov dword [0x4342a0], eax
je 0x40d1b5
mov dword [eax], ebx
cmp dword [0x4342a8], ebx
jne 0x40d1f4
push 4
call fcn.0040513d
cmp eax, ebx
pop ecx
mov dword [0x4342a8], eax
je 0x40d1b5
mov dword [eax], ebx
mov esi, dword [0x4342a0]
cmp esi, ebx
mov dword [ebp - 0x14], esi
je 0x40d1b5
mov edi, dword [ebp - 0xc]
sub edi, dword [ebp - 4]
push dword [ebp - 4]
call fcn.0040d072
push eax
pop edi
cmp edi, ebx
pop ecx
jl 0x40d268
cmp dword [esi], ebx
je 0x40d268
lea esi, [esi + edi*4]
push dword [esi]
call fcn.0040504a
cmp dword [ebp - 8], ebx
pop ecx
jne 0x40d245
mov eax, dword [ebp - 4]
mov dword [esi], eax
mov eax, dword [ebp + 8]
mov dword [eax], ebx
jmp 0x40d2bb
mov eax, dword [esi + 4]
mov dword [esi], eax
mov eax, dword [ebp - 0x14]
inc edi
lea esi, [eax + edi*4]
cmp dword [esi], ebx
jne 0x40d239
cmp edi, 0x3fffffff
jae 0x40d2bb
push 4
push edi
push dword [0x4342a0]
call fcn.00405210
add esp, 0xc
cmp eax, ebx
je 0x40d2bb
jmp 0x40d2b6
cmp dword [ebp - 8], ebx
jne 0x40d34e
cmp edi, ebx
jge 0x40d277
neg edi
lea eax, [edi + 2]
cmp eax, edi
jl 0x40d1b5
cmp eax, 0x3fffffff
jae 0x40d1b5
push eax
push 4
push dword [0x4342a0]
call fcn.00405210
add esp, 0xc
cmp eax, ebx
je 0x40d1b5
mov edx, dword [ebp - 4]
lea ecx, [eax + edi*4]
mov dword [ecx], edx
mov dword [ecx + 4], ebx
mov ecx, dword [ebp + 8]
mov dword [ecx], ebx
mov dword [0x4342a0], eax
cmp dword [ebp + 0xc], ebx
je 0x40d338
mov esi, dword [ebp - 4]
push 1
push esi
call fcn.00401d50
inc eax
pop ecx
inc eax
push eax
call fcn.0040517d
push eax
pop edi
cmp edi, ebx
pop ecx
pop ecx
je 0x40d338
push esi
push esi
call fcn.00401d50
inc eax
pop ecx
inc eax
push eax
push edi
call fcn.004050d8
add esp, 0xc
test eax, eax
je 0x40d301
push ebx
push ebx
push ebx
push ebx
push ebx
call fcn.00403c3f
add esp, 0x14
mov ecx, dword [ebp - 8]
mov eax, edi
sub eax, esi
add eax, dword [ebp - 0xc]
mov byte [eax], bl
inc eax
neg ecx
sbb ecx, ecx
not ecx
and ecx, eax
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
jne 0x40d331
or dword [ebp - 0x10], 0xffffffff
call fcn.00403d9a
mov dword [eax], 0x2a
push edi
call fcn.0040504a
pop ecx
cmp dword [ebp - 8], ebx
je 0x40d346
push dword [ebp - 4]
call fcn.0040504a
pop ecx
mov eax, dword [ebp - 0x10]
jmp 0x40d1b8
push dword [ebp - 4]
call fcn.0040504a
mov eax, dword [ebp + 8]
pop ecx
mov dword [eax], ebx
xor eax, eax
jmp 0x40d1b8