Function at 0x41e660
Capabilities:
Get common file path
Get program files directory
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x628
mov eax, dword [0x448100]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x448b5c], 0
je 0x41e6a1
cmp dword [0x448f70], 0
je 0x41e6a1
cmp dword [0x448f74], 0
je 0x41e6a1
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004284af
mov esp, ebp
pop ebp
ret
push ebx
push edi
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
xor ebx, ebx
push esi
nop dword [eax]
mov esi, 0xe
test ebx, ebx
jne 0x41e76b
push esi
lea eax, [ebp - 0x61c]
push str.SoftwareFujitsuATLASV_i.0EJ
push eax
call edi
add esp, 0xc
mov dword [ebp - 0x620], ebx
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x41e873
lea eax, [ebp - 0x624]
mov dword [ebp - 0x624], 0x40e
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x628]
push eax
push ebx
push str.TRENV_EJ
push dword [ebp - 0x620]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x620]
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
jne 0x41e86d
cmp dword [ebp - 0x628], 1
jne 0x41e86d
lea eax, [ebp - 0x414]
push 0x5c
push eax
call sub.msvcrt.dll_wcsrchr
add esp, 8
test eax, eax
je 0x41e86d
xor ecx, ecx
mov word [eax + 2], cx
jmp 0x41e7a1
lea eax, [ebp - 0x414]
push eax
push 0
push 0
push 0x26
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jne 0x41e873
push eax
lea eax, [ebp - 0x414]
push eax
call sub.msvcrt.dll_wcschr
push esi
push str.ATLAS_V_i_
push eax
call edi
add esp, 0x14
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_wcschr
movups xmm0, xmmword [str.AtleCont.dll]
mov edi, eax
add esp, 8
lea eax, [ebp - 0x414]
movups xmmword [edi], xmm0
push 8
movq xmm0, qword [0x43f694]
movq qword [edi + 0x10], xmm0
mov cx, word [0x43f69c]
push 0
push eax
mov word [edi + 0x18], cx
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
movups xmm0, xmmword [str.awdict.dll]
mov dword [0x448b5c], eax
push 8
movups xmmword [edi], xmm0
mov eax, dword [0x43f6b0]
mov dword [edi + 0x10], eax
movzx eax, word [0x43f6b4]
mov word [edi + 0x14], ax
lea eax, [ebp - 0x414]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
movups xmm0, xmmword [str.awuenv.dll]
mov dword [0x448f70], eax
push 8
movups xmmword [edi], xmm0
mov eax, dword [0x43f6c8]
mov dword [edi + 0x10], eax
movzx eax, word [0x43f6cc]
mov word [edi + 0x14], ax
lea eax, [ebp - 0x414]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
cmp dword [0x448b5c], 0
mov dword [0x448f74], eax
je 0x41e868
cmp dword [0x448f70], 0
je 0x41e868
test eax, eax
jne 0x41e89a
call fcn.0041e8e0
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
dec esi
cmp esi, 0xd
jge 0x41e6b5
inc ebx
cmp ebx, 2
jl 0x41e6b0
pop esi
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004284af
mov esp, ebp
pop ebp
ret
xor eax, eax
xor ecx, ecx
mov word [edi], ax
movzx eax, word [ebp + ecx - 0x414]
lea ecx, [ecx + 2]
mov word [ecx + 0x448b5e], ax
test ax, ax
jne 0x41e8a1
mov ecx, dword [ebp - 4]
mov eax, 1
mov dword [0x449394], esi
xor ecx, ebp
pop esi
pop edi
pop ebx
call fcn.004284af
mov esp, ebp
pop ebp
ret