Function at 0x412b30
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x424985
mov eax, dword fs:[0]
push eax
mov eax, 0x102c
call fcn.004216d0
mov eax, dword [0x44c028]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
and dword [ebp - 4], 0
lea ecx, [ebp - 0x1018]
call dword [0x436ac8]
lea eax, [ebp - 0x1030]
mov byte [ebp - 4], 1
mov edi, dword [sym.imp.K9PCUhelper.dll_public:_static_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_CMainApp::GetAppProgramName_void_]
push eax
call edi
pop ecx
lea ecx, [ebp - 0x1028]
call dword [0x436ac8]
mov byte [ebp - 4], 3
push dword [ebp - 0x1030]
lea eax, [ebp - 0x1028]
push str._s.log
push eax
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
add esp, 0xc
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerUser_Shell_Folders
lea ecx, [ebp - 0x102c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
mov byte [ebp - 4], 4
mov eax, dword [0x4a1108]
cmp dword [eax - 0xc], 0
mov esi, dword [sym.imp.K9PCUhelper.dll_enum_PCO_ERROR_CODES___cdecl_STPathAppend_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____const__]
jne 0x412bfa
lea eax, [ebp - 0x101c]
push eax
call dword [sym.imp.K9PCUhelper.dll_public:_static_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_CMainApp::GetAppDataAppPath_void_]
pop ecx
push eax
lea ecx, [ebp - 0x1018]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
jmp 0x412d5d
lea ecx, [ebp - 0x101c]
call dword [0x436ac8]
lea ecx, [ebp - 0x1024]
call dword [0x436ac8]
lea eax, [ebp - 0x101c]
push 0x4a1108
push eax
mov byte [ebp - 4], 7
call esi
lea eax, [ebp - 0x102c]
push eax
lea eax, [ebp - 0x101c]
push eax
call esi
add esp, 0x10
push 1
lea eax, [ebp - 0x1024]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x1020], esp
push str.AppData
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
push ecx
lea eax, [ebp - 0x101c]
mov ecx, esp
mov dword [ebp - 0x1034], esp
push eax
mov byte [ebp - 4], 8
call dword [0x436a20]
mov byte [ebp - 4], 7
call fcn.0041172f
test eax, eax
je 0x412ccf
lea eax, [ebp - 0x1024]
push eax
lea ecx, [ebp - 0x1018]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
push 0x1000
lea eax, [ebp - 0x1014]
push 0
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
push 0x800
lea eax, [ebp - 0x1014]
push eax
push dword [ebp - 0x1024]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x1014]
push eax
lea ecx, [ebp - 0x1018]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
lea eax, [ebp - 0x1020]
push eax
call dword [sym.imp.K9PCUhelper.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_GetCompanyNAME_void_]
pop ecx
push eax
lea eax, [ebp - 0x1018]
push eax
mov byte [ebp - 4], 9
call esi
pop ecx
pop ecx
lea ecx, [ebp - 0x1020]
mov byte [ebp - 4], 7
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea eax, [ebp - 0x1020]
push eax
call dword [sym.imp.K9PCUhelper.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_GetProduct_ABBERIVATED_NAME_void_]
pop ecx
push eax
lea eax, [ebp - 0x1018]
push eax
mov byte [ebp - 4], 0xa
call esi
pop ecx
pop ecx
lea ecx, [ebp - 0x1020]
mov byte [ebp - 4], 7
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea eax, [ebp - 0x1020]
push eax
call edi
pop ecx
push eax
lea eax, [ebp - 0x1018]
push eax
mov byte [ebp - 4], 0xb
call esi
pop ecx
pop ecx
lea ecx, [ebp - 0x1020]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x1024]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x101c]
mov byte [ebp - 4], 4
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea eax, [ebp - 0x1028]
push eax
lea eax, [ebp - 0x1018]
push eax
call esi
pop ecx
pop ecx
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebx + 0x398]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_1]
lea ecx, [ebp - 0x102c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x1028]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x1030]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x1018]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp + 8]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00420e1a
leave
ret 4