Function at 0x436b10
Capabilities:
Print debug messages
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x543798
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x5868f4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, ecx
mov dword [ebp - 0x128], eax
movups xmm0, xmmword [str._windir_LogsQualysAgent_]
mov dword [ebp - 0x134], eax
xor edi, edi
mov eax, dword [0x56a350]
xor esi, esi
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x1c], eax
movups xmm0, xmmword [0x56a330]
mov ax, word [0x56a354]
mov dword [ebp - 0x70], 0
movups xmmword [ebp - 0x3c], xmm0
mov word [ebp - 0x18], ax
movups xmm0, xmmword [0x56a340]
mov dword [ebp - 0x70], esi
movups xmmword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x78], xmm0
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
push esi
push esi
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], esi
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [ebp - 0x130], eax
test eax, eax
je 0x436c7c
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 1
push ecx
push eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x12c], esi
call fcn.00437d10
push dword [ebp - 0x130]
mov edi, dword [ebp - 0x78]
lea eax, [ebp - 0x4c]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
je 0x436c72
cmp word [edi], si
jne 0x436bfa
xor ecx, ecx
jmp 0x436c0f
mov ecx, edi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x436c00
sub ecx, edx
sar ecx, 1
mov esi, dword [ebp - 0x128]
push ecx
add esi, 0x410
push edi
mov ecx, esi
mov dword [ebp - 0x12c], esi
call fcn.00403fe0
cmp dword [esi + 0x14], 8
jb 0x436c34
mov ecx, dword [esi]
jmp 0x436c36
mov ecx, esi
push ecx
call fcn.00430ed0
test eax, eax
je 0x436c64
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str.Failed_to_build_logging_directory_path:
call esi
mov eax, dword [ebp - 0x12c]
cmp dword [eax + 0x14], 8
jb 0x436c5b
mov eax, dword [eax]
push eax
call esi
mov esi, dword [ebp - 0x12c]
push 0x17
push 0x562674
mov ecx, esi
call fcn.0040c930
mov dword [ebp - 4], 0
mov esi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x128]
mov ecx, eax
call fcn.00436ec0
test eax, eax
je 0x436dbe
push str.Cloud_agent_installer_failed_to_set_log_path__trying_to_set_log_path_to_default_locations.
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov ecx, dword [ebp - 0x128]
cmp dword [ecx + 0x420], 0
jne 0x436cfb
push str.Default_log_location_is_unavailable.
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test edi, edi
je 0x436cc8
sub esi, edi
lea ecx, [ebp - 0x78]
sar esi, 1
push esi
push edi
call fcn.00403300
xor al, al
jmp 0x436e87
mov eax, dword [ebp - 0x74]
sub eax, edi
sar eax, 1
push eax
push edi
push 0x104
push ecx
call fcn.00522dfd
add esp, 0x10
test eax, eax
je 0x436d3a
push str.Failed_to_set_cloud_agent_installer_log_folder_path.
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test edi, edi
je 0x436cc8
sub esi, edi
lea ecx, [ebp - 0x78]
sar esi, 1
push esi
push edi
call fcn.00403300
xor al, al
jmp 0x436e87
mov eax, dword [ebp - 0x128]
cmp dword [eax + 0x424], 8
lea ecx, [eax + 0x410]
mov edx, dword [eax + 0x420]
jb 0x436d57
mov ecx, dword [ecx]
push edx
push ecx
add eax, 0x208
push 0x104
push eax
mov dword [ebp - 0x12c], eax
call fcn.00522dfd
add esp, 0x10
test eax, eax
je 0x436d90
push str.Failed_to_set_cloud_agent_installer_log_file_path.
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x78]
call fcn.0040ae30
xor al, al
jmp 0x436e87
push str.Installer_log_directory_is:
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push dword [ebp - 0x12c]
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str.Installer_log_path_is:
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push dword [ebp - 0x12c]
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
cmp eax, 2
jne 0x436de1
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x7c]
mov dword [ebp - 0x124], eax
jmp 0x436df0
cmp eax, 0xffffffff
je 0x436cb6
mov eax, dword [ebp - 0x124]
cdq
xorps xmm0, xmm0
mov ecx, eax
mov eax, 0x88888889
xor ecx, edx
sub ecx, edx
mul ecx
movups xmmword [ebp - 0x6c], xmm0
movups xmmword [ebp - 0x5c], xmm0
shr edx, 5
mov eax, edx
shl eax, 4
sub eax, edx
shl eax, 2
sub ecx, eax
xor eax, eax
cmp dword [ebp - 0x124], eax
push ecx
setg al
push edx
lea eax, [eax*2 + 0x2b]
push eax
lea eax, [ebp - 0x6c]
push str.UTC_c_02u:_02u
push eax
call fcn.00438f00
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str._Cloud_Agent_Installer_starting._PID:__u_
push dword [ebp - 0x128]
call fcn.00437360
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x6c]
push eax
push str.Time_zone_is:__s___s_
push dword [ebp - 0x128]
call fcn.00437360
add esp, 0x1c
test edi, edi
je 0x436e85
sub esi, edi
lea ecx, [ebp - 0x78]
sar esi, 1
push esi
push edi
call fcn.00403300
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004fdf3d
mov esp, ebp
pop ebp
ret