Function at 0x42f500
Capabilities:
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53c24b
mov eax, dword fs:[0]
push eax
sub esp, 0x36c
mov eax, dword [0x58d224]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x22c], ecx
push 0x6a
mov ecx, dword [ebp - 0x22c]
call fcn.0048c0cf
mov ecx, dword [ebp - 0x22c]
call fcn.0043ad00
push 0x5465ec
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov ecx, dword [ebp - 0x22c]
mov dword [ecx + 0xc1c], eax
push str.installPath
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov edx, dword [ebp - 0x22c]
mov dword [edx + 0xc20], eax
push str.InstallStatusLayout
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov ecx, dword [ebp - 0x22c]
mov dword [ecx + 0xc24], eax
push str.progres
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov edx, dword [ebp - 0x22c]
mov dword [edx + 0xc28], eax
push 0x546780
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov ecx, dword [ebp - 0x22c]
mov dword [ecx + 0xc2c], eax
push str.pathIsOK
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov edx, dword [ebp - 0x22c]
mov dword [edx + 0xc38], eax
push str.installstatustips
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov ecx, dword [ebp - 0x22c]
mov dword [ecx + 0xc30], eax
push str.installfailed_towebsit
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov edx, dword [ebp - 0x22c]
mov dword [edx + 0xc34], eax
push str.browse
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov ecx, dword [ebp - 0x22c]
mov dword [ecx + 0xc40], eax
push str.startApp
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov edx, dword [ebp - 0x22c]
mov dword [edx + 0xc44], eax
push str.protocol
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov ecx, dword [ebp - 0x22c]
mov dword [ecx + 0xc48], eax
push str.title_zone
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov edx, dword [ebp - 0x22c]
mov dword [edx + 0xc54], eax
push str.grantoption
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov ecx, dword [ebp - 0x22c]
mov dword [ecx + 0xc4c], eax
push str.language_combo
mov ecx, dword [ebp - 0x22c]
add ecx, 0x30
call fcn.00485af6
mov edx, dword [ebp - 0x22c]
mov dword [edx + 0xc50], eax
mov ecx, dword [ebp - 0x22c]
add ecx, 0x798
call fcn.0048358a
movzx eax, al
test eax, eax
je 0x42f76c
lea ecx, [ebp - 0x218]
push ecx
push 1
push 0
push 0x26
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edx, [ebp - 0x218]
push edx
mov ecx, dword [ebp - 0x22c]
add ecx, 0x798
call fcn.00482ec3
push 0x546898
mov ecx, dword [ebp - 0x22c]
add ecx, 0x798
call fcn.00483001
push 0x546460
mov ecx, dword [ebp - 0x22c]
add ecx, 0x798
call fcn.00483001
mov ecx, dword [ebp - 0x22c]
add ecx, 0x798
call fcn.00482f38
push eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax + 0xc20]
mov edx, dword [ebp - 0x22c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0xc20]
mov edx, dword [eax + 0x2c]
call edx
mov eax, dword [ebp - 0x22c]
movzx ecx, byte [eax + 0xc78]
test ecx, ecx
jne 0x42f7bf
mov edx, dword [ebp - 0x22c]
movzx eax, byte [edx + 0xc7a]
test eax, eax
je 0x42f81d
push 0x120
push 0
lea ecx, [ebp - 0x378]
push ecx
call fcn.0050eb70
add esp, 0xc
lea ecx, [ebp - 0x378]
call fcn.0042b380
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x250], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x250]
push eax
mov ecx, dword [ebp - 0x22c]
call fcn.0042dba0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x378]
call fcn.0042bb50
push 8
lea ecx, [ebp - 0x228]
call fcn.0040b430
lea ecx, [ebp - 0x228]
push ecx
call fcn.004231d0
add esp, 4
mov dword [ebp - 4], 1
call fcn.00408f60
mov ecx, eax
call fcn.0042ed70
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x248], 0xffffffff
lea edx, [ebp - 0x228]
mov dword [ebp - 0x240], edx
push 4
lea ecx, [ebp - 0x21c]
call fcn.0040b430
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0x240]
call fcn.0041fb10
push 4
lea ecx, [ebp - 0x220]
call fcn.0040b430
lea ecx, [ebp - 0x220]
push ecx
mov ecx, dword [ebp - 0x240]
call fcn.0041fbe0
jmp 0x42f8bd
lea ecx, [ebp - 0x21c]
call fcn.00418a40
lea edx, [ebp - 0x220]
push edx
lea ecx, [ebp - 0x21c]
call fcn.004188b0
movzx eax, al
test eax, eax
je 0x42fa21
lea ecx, [ebp - 0x21c]
call fcn.00418a00
mov dword [ebp - 0x238], eax
push 0x568
call fcn.004d48fc
add esp, 4
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 2
cmp dword [ebp - 0x234], 0
je 0x42f92e
push 0x568
mov ecx, dword [ebp - 0x234]
call fcn.0040b430
mov ecx, dword [ebp - 0x234]
call fcn.0048fe7b
mov dword [ebp - 0x244], eax
jmp 0x42f938
mov dword [ebp - 0x244], 0
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x254], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x254]
mov dword [ebp - 0x230], edx
mov ecx, dword [ebp - 0x238]
call fcn.0040bae0
push eax
mov eax, dword [ebp - 0x230]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x230]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0x238]
add ecx, 0x18
call fcn.0040bae0
push eax
mov ecx, dword [ebp - 0x230]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x230]
mov eax, dword [edx + 0xfc]
call eax
push 0x19
mov ecx, dword [ebp - 0x230]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x230]
mov eax, dword [edx + 0x9c]
call eax
mov ecx, dword [ebp - 0x238]
add ecx, 0x18
push ecx
mov edx, dword [ebp - 0x258]
push edx
call fcn.004254a0
add esp, 8
movzx eax, al
test eax, eax
je 0x42f9dc
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x230]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax + 0xc50]
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx + 0xc50]
add eax, 0x550
mov edx, dword [ecx + 0x550]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x23c]
add ecx, 1
mov dword [ebp - 0x23c], ecx
jmp 0x42f8b2
push 0
mov edx, dword [ebp - 0x248]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax + 0xc50]
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx + 0xc50]
add eax, 0x698
mov edx, dword [ecx + 0x698]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [ebp - 0x22c]
call fcn.004302a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x228]
call fcn.00422cd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d4e68
mov esp, ebp
pop ebp
ret