Function at 0x41f750
Capabilities:
Get common file path
Get program files directory
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x628
mov eax, dword [0x44d100]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x44db5c], 0
je 0x41f791
cmp dword [0x44df70], 0
je 0x41f791
cmp dword [0x44df74], 0
je 0x41f791
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042c160
mov esp, ebp
pop ebp
ret
push ebx
push edi
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
xor ebx, ebx
push esi
nop dword [eax]
mov esi, 0xe
test ebx, ebx
jne 0x41f85b
push esi
lea eax, [ebp - 0x61c]
push str.SoftwareFujitsuATLASV_i.0EJ
push eax
call edi
add esp, 0xc
mov dword [ebp - 0x620], ebx
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x41f963
lea eax, [ebp - 0x624]
mov dword [ebp - 0x624], 0x40e
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x628]
push eax
push ebx
push str.TRENV_EJ
push dword [ebp - 0x620]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x620]
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
jne 0x41f95d
cmp dword [ebp - 0x628], 1
jne 0x41f95d
lea eax, [ebp - 0x414]
push 0x5c
push eax
call sub.msvcrt.dll_wcsrchr
add esp, 8
test eax, eax
je 0x41f95d
xor ecx, ecx
mov word [eax + 2], cx
jmp 0x41f891
lea eax, [ebp - 0x414]
push eax
push 0
push 0
push 0x26
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jne 0x41f963
push eax
lea eax, [ebp - 0x414]
push eax
call sub.msvcrt.dll_wcschr
push esi
push str.ATLAS_V_i_
push eax
call edi
add esp, 0x14
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_wcschr
movups xmm0, xmmword [str.AtleCont.dll]
mov edi, eax
add esp, 8
lea eax, [ebp - 0x414]
movups xmmword [edi], xmm0
push 8
movq xmm0, qword [0x443ad4]
movq qword [edi + 0x10], xmm0
mov cx, word [0x443adc]
push 0
push eax
mov word [edi + 0x18], cx
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
movups xmm0, xmmword [str.awdict.dll]
mov dword [0x44db5c], eax
push 8
movups xmmword [edi], xmm0
mov eax, dword [0x443af0]
mov dword [edi + 0x10], eax
movzx eax, word [0x443af4]
mov word [edi + 0x14], ax
lea eax, [ebp - 0x414]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
movups xmm0, xmmword [str.awuenv.dll]
mov dword [0x44df70], eax
push 8
movups xmmword [edi], xmm0
mov eax, dword [0x443b08]
mov dword [edi + 0x10], eax
movzx eax, word [0x443b0c]
mov word [edi + 0x14], ax
lea eax, [ebp - 0x414]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
cmp dword [0x44db5c], 0
mov dword [0x44df74], eax
je 0x41f958
cmp dword [0x44df70], 0
je 0x41f958
test eax, eax
jne 0x41f98a
call fcn.0041f9d0
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
dec esi
cmp esi, 0xd
jge 0x41f7a5
inc ebx
cmp ebx, 2
jl 0x41f7a0
pop esi
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042c160
mov esp, ebp
pop ebp
ret
xor eax, eax
xor ecx, ecx
mov word [edi], ax
movzx eax, word [ebp + ecx - 0x414]
lea ecx, [ecx + 2]
mov word [ecx + 0x44db5e], ax
test ax, ax
jne 0x41f991
mov ecx, dword [ebp - 4]
mov eax, 1
mov dword [0x44e394], esi
xor ecx, ebp
pop esi
pop edi
pop ebx
call fcn.0042c160
mov esp, ebp
pop ebp
ret