Function at 0x435d40
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x32c
mov eax, dword [0x70e00c]
xor eax, esp
mov dword [esp + 0x328], eax
push ebx
push esi
xor esi, esi
mov dword [0x73c938], ecx
xor ebx, ebx
mov dword [esp + 0xc], esi
push edi
cmp dword [0x73c924], ebx
je 0x435d8b
lea eax, [esi + 0xb]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
push 0
push 0x6ec378
call fcn.00403980
add esp, 8
mov dword [0x73c924], eax
test eax, eax
jne 0x435dbd
mov eax, 0xfffffff2
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
push eax
call fcn.00435bf0
shr eax, 0x10
add esp, 4
cmp eax, 1
je 0x435dfc
push 0
push 0x73c924
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, 0xffffffee
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
push 0x90
call fcn.0060a1f7
mov edi, eax
add esp, 4
test edi, edi
je 0x43602b
cmp dword [0x717020], 4
jne 0x436000
lea ecx, [esp + 0x10]
mov dword [edi + 0xc], 0x435cf0
mov dword [edi + 8], 0x435cc0
mov dword [edi + 4], 0x435c50
mov dword [edi], 0x435c30
call fcn.004352a0
mov ebx, eax
test ebx, ebx
jne 0x435e52
lea esi, [eax - 0xe]
jmp 0x435fe4
push dword [esp + 0x10]
mov edx, ebx
mov ecx, 0x6ea908
call fcn.00435190
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
jne 0x435e75
lea esi, [eax - 0xe]
jmp 0x435fe4
push 0x104
lea ecx, [esp + 0x124]
add eax, 0x14
push ecx
push eax
push 0
push 0
push 0
call fcn.00402d30
mov esi, eax
add esp, 0x18
test esi, esi
js 0x435fe4
mov ecx, dword [esp + 0x14]
mov edx, edi
mov eax, dword [ecx]
mov dword [0x73c900], eax
mov eax, dword [ecx + 4]
lea ecx, [esp + 0x120]
mov dword [0x73c904], eax
call fcn.0045c470
mov dword [0x73c910], eax
test eax, eax
jne 0x435ed0
lea esi, [eax - 0x17]
jmp 0x435fe4
push dword [0x73c904]
mov ecx, eax
push dword [0x73c900]
call fcn.0045c740
mov esi, eax
add esp, 8
test esi, esi
js 0x435fe4
push 0x6ec3a4
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov dword [0x73c930], eax
or eax, 0
mov dword [0x73c934], 0
jne 0x435f17
lea esi, [eax - 2]
jmp 0x435fe4
push 0x104
lea eax, [esp + 0x1c]
push eax
push 0x6ec3b0
call dword [sym.imp.KERNEL32.DLL_ExpandEnvironmentStringsA]
test eax, eax
jne 0x435f38
lea esi, [eax - 0x17]
jmp 0x435fe4
mov edx, edi
lea ecx, [esp + 0x18]
call fcn.0045c470
mov dword [0x73c90c], eax
test eax, eax
jne 0x435f54
lea esi, [eax - 0x17]
jmp 0x435fe4
push dword [esp + 0x10]
mov edx, ebx
mov ecx, 0x6ea8ec
call fcn.00435190
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
jne 0x435f74
lea esi, [eax - 2]
jmp 0x435fe4
push 0x104
lea ecx, [esp + 0x22c]
add eax, 0x14
push ecx
push eax
push 0
push 0
push 0
call fcn.00402d30
mov esi, eax
add esp, 0x18
test esi, esi
js 0x435fe4
mov ecx, dword [esp + 0x14]
mov edx, edi
mov eax, dword [ecx]
mov dword [0x73c918], eax
mov eax, dword [ecx + 4]
lea ecx, [esp + 0x228]
mov dword [0x73c91c], eax
call fcn.0045c470
mov dword [0x73c908], eax
test eax, eax
jne 0x435fc8
lea esi, [eax - 0x17]
jmp 0x435fe4
push dword [0x73c91c]
mov ecx, eax
push dword [0x73c918]
call fcn.0045c740
mov esi, eax
add esp, 8
test esi, esi
jns 0x435ffc
push edi
call fcn.005fa0fb
add esp, 4
test ebx, ebx
je 0x43602f
push ebx
call fcn.005fa0fb
add esp, 4
jmp 0x43602f
mov esi, dword [esp + 0x10]
cmp dword [0x73c938], 0
je 0x436014
push esi
mov edx, ebx
call fcn.00435a30
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret
mov esi, dword [esp + 0x14]
mov eax, dword [0x73c908]
mov edi, dword [sym.imp.KERNEL32.DLL_VirtualFree]
test eax, eax
je 0x436052
push 0x8000
push 0
push eax
call edi
mov dword [0x73c908], 0
mov eax, dword [0x73c90c]
test eax, eax
je 0x43606f
push 0x8000
push 0
push eax
call edi
mov dword [0x73c90c], 0
mov eax, dword [0x73c910]
test eax, eax
je 0x43608c
push 0x8000
push 0
push eax
call edi
mov dword [0x73c910], 0
xorps xmm0, xmm0
push 0
push 0x73c924
movlpd qword [0x73c930], xmm0
movlpd qword [0x73c900], xmm0
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
push eax
call fcn.00403a00
mov ecx, dword [esp + 0x338]
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004aa758
mov esp, ebp
pop ebp
ret