Function at 0x410970
Capabilities:
Create directory
Query environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x493fdf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2a8
mov eax, dword [0x4bdc98]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor eax, ebp
mov esi, ecx
xor edi, edi
lea ecx, [esp + 0x4c]
mov dword [esp + 0x2ac], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edi
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov word [esp + 0xa0], di
xor eax, eax
mov ecx, 0x81
lea edi, [esp + 0xa2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x68]
push eax
mov ecx, esi
mov dword [esp + 0x2c0], 1
call fcn.00410560
push 0x104
lea ecx, [esp + 0xa4]
push ecx
push str._appdata_
mov byte [esp + 0x2c8], 2
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
je 0x410aaf
lea edx, [esp + 0xa0]
push edx
lea ecx, [esp + 0x88]
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
push 0x4a1130
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov byte [esp + 0x2c8], 3
call fcn.00402280
lea edx, [esp + 0x74]
push edx
push eax
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x2d4], 4
call fcn.00402180
add esp, 0x18
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x2c0], 5
call dword [sym.imp.MSVCP71.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [esp + 0x30]
mov byte [esp + 0x2bc], 4
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x14]
mov byte [esp + 0x2bc], 3
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x84]
mov byte [esp + 0x2bc], 2
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, dword [esp + 0x64]
mov esi, 8
cmp eax, esi
mov eax, dword [esp + 0x50]
jae 0x410ac4
lea eax, [esp + 0x50]
push 0
push eax
call dword [sym.imp.MSVCR71.dll__waccess]
add esp, 8
test eax, eax
je 0x410afe
cmp dword [esp + 0x64], esi
mov eax, dword [esp + 0x50]
jae 0x410ae2
lea eax, [esp + 0x50]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x410afe
push 0x4a5168
mov ecx, ebx
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
jmp 0x410b0b
lea ecx, [esp + 0x4c]
push ecx
mov ecx, ebx
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [esp + 0x68]
mov byte [esp + 0x2bc], 1
mov dword [esp + 0xc], 1
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x2bc], 0
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov ecx, dword [esp + 0x2b4]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x2ac]
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.00491e29
mov esp, ebp
pop ebp
ret 4