Function at 0x4b8700
Capabilities:
Set environment variable

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push r14
sub rsp, 0x58
xor ebx, ebx
test rcx, rcx
mov esi, edx
mov ebp, ebx
mov r14, rcx
jne 0x4b874c
call fcn.0049aa50
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rbx
mov dword [rax], 0x16
call fcn.00490eb0
or eax, 0xffffffff
add rsp, 0x58
pop r14
pop rsi
pop rbp
pop rbx
ret
mov qword [rsp + 0x50], r12
mov r12, qword [rcx]
mov qword [rsp + 0x48], r13
test r12, r12
je 0x4b8bd1
mov dx, 0x3d
mov rcx, r12
call fcn.00493ab0
test rax, rax
mov r13, rax
je 0x4b8bd1
cmp r12, rax
je 0x4b8bd1
cmp word [rax + 2], bx
mov qword [rsp + 0x98], rdi
mov rdi, qword [0x0050d3d0]
mov qword [rsp + 0x40], r15
mov r15d, ebx
sete r15b
cmp rdi, qword [0x0050d3d8]
mov dword [rsp + 0x90], r15d
jne 0x4b87c5
mov rcx, rdi
call fcn.004b8660
mov rdi, rax
mov qword [0x0050d3d0], rax
test rdi, rdi
jne 0x4b8885
test esi, esi
mov rax, qword [0x0050d3c0]
je 0x4b8834
test rax, rax
je 0x4b8834
call fcn.004adcd0
mov qword [0x0050d378], rax
call fcn.004adb60
test eax, eax
jns 0x4b882b
call fcn.004ada60
test eax, eax
je 0x4b882b
call fcn.0049aa50
mov dword [rax], 0x16
or eax, 0xffffffff
mov rdi, qword [rsp + 0x98]
mov r15, qword [rsp + 0x40]
mov r12, qword [rsp + 0x50]
mov r13, qword [rsp + 0x48]
add rsp, 0x58
pop r14
pop rsi
pop rbp
pop rbx
ret
mov rdi, qword [0x0050d3d0]
jmp 0x4b8885
test r15d, r15d
jne 0x4b8bca
test rax, rax
jne 0x4b8865
lea ecx, [rax + 8]
call fcn.0049a7d0
test rax, rax
mov qword [0x0050d3c0], rax
je 0x4b8807
mov qword [rax], rbx
mov rdi, qword [0x0050d3d0]
test rdi, rdi
jne 0x4b8885
mov ecx, 8
call fcn.0049a7d0
test rax, rax
mov qword [0x0050d3d0], rax
je 0x4b8807
mov qword [rax], rbx
mov rdi, qword [0x0050d3d0]
test rdi, rdi
je 0x4b8807
sub r13, r12
mov rcx, r12
sar r13, 1
mov edx, r13d
call fcn.004b85c0
test eax, eax
movsxd rsi, eax
js 0x4b8918
cmp qword [rdi], rbx
je 0x4b8918
mov rcx, qword [rdi + rsi*8]
mov rbx, rsi
call fcn.00494180
test r15d, r15d
je 0x4b890f
cmp qword [rdi + rsi*8], rbp
je 0x4b88d9
mov rax, qword [rdi + rbx*8 + 8]
add rbx, 1
add esi, 1
mov qword [rdi + rbx*8 - 8], rax
cmp qword [rdi + rbx*8], rbp
jne 0x4b88c2
movsxd rdx, esi
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
jae 0x4b8978
mov rcx, qword [0x0050d3d0]
mov r8d, 8
call fcn.0049a960
test rax, rax
je 0x4b8978
mov qword [0x0050d3d0], rax
jmp 0x4b8978
mov qword [rdi + rsi*8], r12
mov qword [r14], rbp
jmp 0x4b8978
test r15d, r15d
jne 0x4b8bbf
test eax, eax
jns 0x4b8927
neg esi
lea eax, [rsi + 2]
cmp eax, esi
jl 0x4b8807
movsxd r8, eax
movabs rax, 0x1fffffffffffffff
cmp r8, rax
jae 0x4b8807
mov rcx, qword [0x0050d3d0]
mov edx, 8
call fcn.0049a960
test rax, rax
je 0x4b8807
movsxd rcx, esi
mov qword [rax + rcx*8], r12
mov qword [rax + rcx*8 + 8], rbx
mov qword [r14], rbx
mov qword [0x0050d3d0], rax
cmp dword [rsp + 0x88], ebp
je 0x4b8ba6
xor eax, eax
or rbx, 0xffffffffffffffff
mov rdi, r12
mov rcx, rbx
lea edx, [rax + 2]
repne scasw ax, word [rdi]
not rcx
add rcx, 1
call fcn.0049a840
test rax, rax
mov rsi, rax
je 0x4b8ba6
xor eax, eax
mov rcx, rbx
mov rdi, r12
repne scasw ax, word [rdi]
mov r8, r12
not rcx
lea rdx, [rcx + 1]
mov rcx, rsi
call fcn.00494270
test eax, eax
je 0x4b89e4
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rbp
call fcn.00490dd0
lea rdi, [rsi + r13*2]
add rdi, 2
cmp dword [0x00509a64], 1
mov word [rdi - 2], bp
jne 0x4b8a2b
mov rdx, rdi
test r15d, r15d
mov rcx, rsi
cmovne rdx, rbp
mov r13, rbp
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
jne 0x4b8a2e
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x4b8a27
mov dword [0x00509a64], r13d
jmp 0x4b8a3b
mov ebp, ebx
jmp 0x4b8a2e
xor r13d, r13d
cmp dword [0x00509a64], 0
jne 0x4b8b8e
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov r9d, ebx
mov r8, rsi
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r13d
mov r15, r13
mov r14, r13
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
movsxd r13, eax
jne 0x4b8a73
mov ebp, ebx
jmp 0x4b8b6e
mov rcx, r13
mov edx, 1
call fcn.0049a840
test rax, rax
mov r15, rax
jne 0x4b8a8f
mov ebp, ebx
jmp 0x4b8b6e
xor eax, eax
mov r9d, ebx
mov r8, rsi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x4b8ac0
mov ebp, ebx
jmp 0x4b8b6e
mov eax, dword [rsp + 0x90]
test eax, eax
jne 0x4b8b4d
xor eax, eax
mov r9d, ebx
mov r8, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
movsxd r13, eax
jne 0x4b8aff
mov ebp, ebx
jmp 0x4b8b6e
mov rcx, r13
mov edx, 1
call fcn.0049a840
test rax, rax
mov r14, rax
jne 0x4b8b18
mov ebp, ebx
jmp 0x4b8b6e
xor eax, eax
mov r9d, ebx
mov r8, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x4b8b46
mov ebp, ebx
jmp 0x4b8b6e
mov eax, dword [rsp + 0x90]
cmp ebp, 0xffffffff
je 0x4b8b6e
test eax, eax
mov eax, 0
mov rdx, r14
cmovne rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
cmove ebp, ebx
mov rcx, r14
call fcn.00494180
mov rcx, r15
call fcn.00494180
mov r14, qword [rsp + 0x80]
mov r15d, dword [rsp + 0x90]
cmp ebp, 0xffffffff
jne 0x4b8b9e
call fcn.0049aa50
mov dword [rax], 0x2a
mov rcx, rsi
call fcn.00494180
test r15d, r15d
je 0x4b8bb8
mov rcx, r12
call fcn.00494180
xor eax, eax
mov qword [r14], rax
mov eax, ebp
jmp 0x4b880a
mov rcx, r12
call fcn.00494180
mov qword [r14], rbx
xor eax, eax
jmp 0x4b880a
call fcn.0049aa50
mov dword [rax], 0x16
or eax, 0xffffffff
jmp 0x4b8817