Function at 0x40345f
Capabilities:
Create directory
Query environment variable
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
mov eax, dword [ebp + 0xc]
push ebx
xor ebx, ebx
push esi
cmp eax, ebx
push edi
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
je 0x403482
movsx eax, byte [eax]
mov dword [ebp + 0xc], eax
jmp 0x403485
mov dword [ebp + 0xc], ebx
mov esi, str._unknown_
lea edi, [ebp - 0x168]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x3e
xor eax, eax
pop ecx
lea edi, [ebp - 0x15e]
cmp dword [ebp + 0xc], ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
je 0x4034b4
cmp dword [ebp + 0xc], 8
jl 0x4034cd
mov edi, str.perl58.dll
push edi
call esi
test eax, eax
je 0x4034cd
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
jne 0x4034f2
cmp dword [ebp + 0xc], 0
je 0x4034d9
cmp dword [ebp + 0xc], 6
jne 0x40350d
mov edi, str.perl56.dll
push edi
call esi
test eax, eax
je 0x40350d
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x40350d
push edi
lea eax, [ebp - 0x168]
push str.Already_loaded__s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov esi, dword [ebp + 8]
add esp, 0xc
jmp 0x40352e
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x28]
push ecx
mov eax, dword [esi]
mov eax, dword [eax]
push eax
mov dword [ebp - 8], eax
push dword [ebp + 0xc]
call fcn.00403f0b
add esp, 0xc
mov dword [ebp - 4], eax
test eax, eax
jne 0x403561
mov eax, dword [0x40f750]
test eax, eax
je 0x403561
mov edi, dword [eax + 8]
test edi, edi
je 0x403561
mov eax, dword [edi + 4]
lea ecx, [ebp - 0x28]
push ecx
mov eax, dword [eax]
push eax
mov dword [ebp - 8], eax
push dword [ebp + 0xc]
call fcn.00403f0b
add esp, 0xc
mov dword [ebp - 4], eax
test eax, eax
jne 0x403561
mov edi, dword [edi]
jmp 0x40353a
cmp dword [0x40f75c], 0
je 0x40359f
cmp dword [ebp - 4], 0
je 0x403781
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x40359f
push dword [ebp - 4]
lea eax, [ebp - 0x168]
push str.dyndll_loaded__s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
and dword [ebp - 4], 0
cmp dword [ebp - 4], 0
je 0x403781
mov al, byte [0x40c35c]
push 7
mov byte [ebp - 0x48], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x47]
push dword [esi + 0x250]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push esi
stosb byte es:[edi], al
call fcn.00403f63
pop ecx
mov dword [ebp - 0xc], eax
test eax, eax
pop ecx
jne 0x4035e2
push str.Panic:_Cant_find_temp_dir_for_perlapp
call fcn.004038b6
jmp 0x403801
push eax
call sub.MSVCRT.dll_strlen
push dword [ebp - 4]
mov edi, eax
call sub.MSVCRT.dll_strlen
mov ebx, eax
pop ecx
add ebx, edi
cmp dword [esi + 0x250], 0
pop ecx
jne 0x403640
lea eax, [ebp - 0x64]
push eax
push 8
push str.perl.md5
push dword [ebp - 8]
call fcn.0040745c
add esp, 0x10
test eax, eax
je 0x40365c
lea eax, [ebp - 0x64]
push eax
call fcn.00407251
cmp eax, 0x20
pop ecx
jne 0x40365c
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00407291
pop ecx
test eax, eax
pop ecx
je 0x40365c
add ebx, 0x21
lea eax, [ebx + 1]
push eax
call dword [sym.imp.MSVCRT.dll_malloc]
mov esi, eax
pop ecx
test esi, esi
jne 0x403669
push ebx
push str.Panic:_Cant_malloc_name___d__n
jmp 0x4037fb
push dword [ebp - 4]
push str.Panic:_Cant_extract_MD5_checksum_for__s_n
jmp 0x4037fb
mov ebx, dword [sym.imp.MSVCRT.dll_strncpy]
push edi
push dword [ebp - 0xc]
push esi
call ebx
mov eax, dword [ebp + 8]
add esp, 0xc
cmp dword [eax + 0x250], 0
jne 0x4036a8
lea eax, [ebp - 0x48]
push 0x20
push eax
lea eax, [esi + edi]
push eax
call ebx
and byte [esi + edi + 0x20], 0
add edi, 0x20
push esi
call dword [sym.imp.MSVCRT.dll__mkdir]
add esp, 0x10
mov byte [esi + edi], 0x5c
inc edi
push dword [ebp - 4]
lea eax, [esi + edi]
push eax
call sub.MSVCRT.dll_strcpy
mov edi, dword [sym.imp.MSVCRT.dll_fopen]
push 0x40c54c
push esi
call edi
add esp, 0x10
mov dword [ebp - 4], eax
test eax, eax
jne 0x403750
lea eax, [ebp - 0x28]
push eax
call fcn.00407251
mov ebx, eax
lea eax, [ebx + 1]
push eax
call dword [sym.imp.MSVCRT.dll_malloc]
pop ecx
mov dword [ebp - 8], eax
test eax, eax
pop ecx
jne 0x4036f9
push esi
push str.Panic:_Cant_allocate_memory_for__s
jmp 0x4037fb
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00407291
pop ecx
test eax, eax
pop ecx
jne 0x403714
push esi
push str.Panic:_Cant_extract__s
jmp 0x4037fb
mov eax, dword [ebp - 8]
push 0x40c548
push esi
and byte [eax + ebx], 0
call edi
pop ecx
mov dword [ebp - 4], eax
test eax, eax
pop ecx
jne 0x403737
push esi
push str.Panic:_Cant_create__s_n
jmp 0x4037fb
push eax
push ebx
push 1
push dword [ebp - 8]
call dword [sym.imp.MSVCRT.dll_fwrite]
push dword [ebp - 8]
call dword [sym.imp.MSVCRT.dll_free]
add esp, 0x14
push dword [ebp - 4]
call dword [sym.imp.MSVCRT.dll_fclose]
pop ecx
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x403776
lea eax, [ebp - 0x168]
push esi
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
push esi
call dword [sym.imp.MSVCRT.dll_free]
mov esi, dword [ebp + 8]
pop ecx
test ebx, ebx
jne 0x4037e0
add esi, 0x466
cmp byte [esi], bl
je 0x4037b0
push dword [ebp + 0xc]
push esi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x168]
push esi
push eax
call fcn.00403e09
mov ebx, eax
add esp, 0x10
test ebx, ebx
jne 0x4037e0
mov esi, dword [sym.imp.MSVCRT.dll_getenv]
push str.PERLAPP_LIBPERL
call esi
mov edi, eax
pop ecx
test edi, edi
je 0x403809
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x403809
lea eax, [ebp - 0x168]
push edi
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
push ebx
call fcn.0040396c
test eax, eax
pop ecx
jne 0x4038af
lea eax, [ebp - 0x168]
push eax
push str.Panic:_Some_symbols_not_resolvable_from__s_n
call fcn.004038b6
pop ecx
pop ecx
xor eax, eax
jmp 0x4038b1
push str.PATH
call esi
mov esi, eax
pop ecx
test esi, esi
je 0x403860
test ebx, ebx
jne 0x4037e0
push 0x3b
push esi
call dword [sym.imp.MSVCRT.dll_strchr]
pop ecx
test eax, eax
pop ecx
je 0x40382e
sub eax, esi
jmp 0x403835
push esi
call sub.MSVCRT.dll_strlen
pop ecx
push dword [ebp + 0xc]
mov edi, eax
lea eax, [ebp - 0x168]
push edi
push esi
push eax
call fcn.00403e09
mov ebx, eax
lea eax, [edi + esi]
add esp, 0x10
cmp byte [eax], 0
je 0x40385c
lea esi, [eax + 1]
test esi, esi
jne 0x403817
test ebx, ebx
jne 0x4037e0
cmp dword [ebp + 0xc], 0
jne 0x403887
push str.Make_sure_the_ActivePerl_bin_directory_is_in_your_PATH_n
push str.perl58.dll
push str.perl56.dll
push str.Error:_Cant_locate_either__s_or__s_n_s
call fcn.004038b6
add esp, 0x10
jmp 0x403802
cmp dword [ebp + 0xc], 6
mov eax, str.perl56.dll
je 0x403897
mov eax, str.perl58.dll
push str.Make_sure_the_ActivePerl_bin_directory_is_in_your_PATH_n
push eax
push str.Error:_Cant_locate__s_n_s
call fcn.004038b6
add esp, 0xc
jmp 0x403802
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret