Function at 0x422210
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a0
mov eax, dword [0x5402b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push 0x105
lea eax, [ebp - 0x210]
push eax
push str._appdata_
mov byte [ebp - 0x281], 1
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
xor ebx, ebx
cmp eax, ebx
je 0x42261c
cmp eax, 0x105
ja 0x42261c
push esi
push edi
xor ecx, ecx
mov word [ebp + eax*2 - 0x210], cx
xor edx, edx
mov edi, 7
push ebx
mov eax, 0x51c620
lea esi, [ebp - 0x280]
mov dword [ebp - 0x268], edi
mov dword [ebp - 0x26c], ebx
mov word [ebp - 0x27c], dx
call fcn.004017f0
xor eax, eax
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x218], ebx
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4222b0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x210]
lea esi, [ebp - 0x22c]
call fcn.004017f0
push 0x51bcf8
mov ecx, esi
push ecx
mov edi, 1
call fcn.0040bd50
cmp eax, 0xffffffff
jne 0x422335
mov esi, 8
cmp dword [ebp - 0x214], esi
jb 0x422304
mov edx, dword [ebp - 0x228]
push edx
call fcn.004c097a
add esp, 4
xor eax, eax
mov dword [ebp - 0x214], 7
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
cmp dword [ebp - 0x268], esi
jb 0x42261a
mov ecx, dword [ebp - 0x27c]
push ecx
jmp 0x422612
inc eax
push eax
push ebx
lea eax, [ebp - 0x22c]
xor edx, edx
push eax
mov edi, 7
lea eax, [ebp - 0x2a0]
mov dword [ebp - 0x288], edi
mov dword [ebp - 0x28c], ebx
mov word [ebp - 0x29c], dx
call fcn.004018f0
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2a0]
push ecx
lea eax, [ebp - 0x280]
call fcn.004018f0
mov esi, 8
cmp dword [ebp - 0x288], esi
jb 0x422395
mov edx, dword [ebp - 0x29c]
push edx
call fcn.004c097a
add esp, 4
push 0x1a
push str.LocalATIACEProfiles.xml
lea eax, [ebp - 0x280]
call fcn.0040ba90
lea eax, [ebp - 0x280]
call fcn.0044e7d0
test al, al
jne 0x4223fa
cmp dword [ebp - 0x214], esi
jb 0x4223cd
mov eax, dword [ebp - 0x228]
push eax
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x214], edi
xor ecx, ecx
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], cx
cmp dword [ebp - 0x268], esi
jb 0x42261a
mov edx, dword [ebp - 0x27c]
push edx
jmp 0x422612
lea eax, [ebp - 0x280]
mov esi, 0xf
push eax
lea edi, [ebp - 0x248]
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov byte [ebp - 0x244], bl
call fcn.0044e830
add esp, 4
test al, al
jne 0x422459
cmp dword [ebp - 0x230], 0x10
jb 0x422442
mov ecx, dword [ebp - 0x244]
push ecx
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], ebx
mov byte [ebp - 0x244], bl
jmp 0x4222e8
push 0x1a
push str._name_MLF__value_Enable_
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
mov byte [ebp - 0x260], bl
call fcn.0040b8b0
mov eax, dword [ebp - 0x260]
mov edi, 0x10
cmp dword [ebp - 0x24c], edi
jae 0x422496
lea eax, [ebp - 0x260]
mov edx, dword [ebp - 0x250]
push edx
push eax
lea eax, [ebp - 0x248]
push eax
xor eax, eax
call fcn.0040b9c0
cmp eax, 0xffffffff
jne 0x42252e
cmp dword [ebp - 0x24c], edi
jb 0x4224c8
mov ecx, dword [ebp - 0x260]
push ecx
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
mov byte [ebp - 0x260], bl
cmp dword [ebp - 0x230], edi
jb 0x4224f1
mov edx, dword [ebp - 0x244]
push edx
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x230], esi
mov esi, 8
mov dword [ebp - 0x234], ebx
mov byte [ebp - 0x244], bl
cmp dword [ebp - 0x214], esi
jb 0x42251f
mov eax, dword [ebp - 0x228]
push eax
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x214], 7
jmp 0x4223d3
mov ecx, dword [ebp - 0x250]
push 0x1b
push ecx
lea edi, [ebp - 0x248]
call fcn.00425c30
cmp dword [ebp - 0x230], 0x10
mov eax, dword [ebp - 0x244]
jae 0x422557
lea eax, [ebp - 0x244]
mov edi, dword [ebp - 0x234]
push eax
lea eax, [ebp - 0x280]
call fcn.0044e8f0
add esp, 4
cmp eax, 0xffffffff
jne 0x422577
mov byte [ebp - 0x281], bl
mov edi, 0x10
cmp dword [ebp - 0x24c], edi
jb 0x422593
mov edx, dword [ebp - 0x260]
push edx
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], ebx
mov byte [ebp - 0x260], bl
cmp dword [ebp - 0x230], edi
jb 0x4225bc
mov eax, dword [ebp - 0x244]
push eax
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x230], esi
mov esi, 8
mov dword [ebp - 0x234], ebx
mov byte [ebp - 0x244], bl
cmp dword [ebp - 0x214], esi
jb 0x4225ea
mov ecx, dword [ebp - 0x228]
push ecx
call fcn.004c097a
add esp, 4
xor edx, edx
mov dword [ebp - 0x214], 7
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], dx
cmp dword [ebp - 0x268], esi
jb 0x42261a
mov eax, dword [ebp - 0x27c]
push eax
call fcn.004c097a
add esp, 4
pop edi
pop esi
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0x281]
xor ecx, ebp
pop ebx
call fcn.004c0985
mov esp, ebp
pop ebp
ret