Function at 0x430610
Capabilities:
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f0555
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x53fbb0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x268], ecx
mov eax, dword [ebp - 0x268]
xor ecx, ecx
cmp dword [eax + 0x58], 1
sete cl
mov byte [0x5436f2], cl
xor edx, edx
mov word [ebp - 0x21c], dx
push 0x206
push 0
lea eax, [ebp - 0x21a]
push eax
call fcn.00491200
add esp, 0xc
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp - 0x268]
call fcn.0042e340
test eax, eax
jne 0x43068f
mov dword [ebp + 0xc], 0
cmp dword [ebp + 0xc], 0
je 0x4306af
mov edx, dword [ebp + 0xc]
push edx
push 0x104
lea eax, [ebp - 0x21c]
push eax
call fcn.00497532
add esp, 0xc
jmp 0x430728
mov ecx, dword [ebp - 0x268]
cmp dword [ecx + 0x58], 0
je 0x4306ee
push 0x104
lea edx, [ebp - 0x21c]
push edx
mov ecx, dword [ebp - 0x268]
call fcn.004304e0
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x4306ec
mov eax, dword [ebp - 0x23c]
jmp 0x4308b2
jmp 0x430701
push 0
push 0x26
lea eax, [ebp - 0x21c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0x15
mov ecx, 0x5437d8
call fcn.0044d380
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x258]
push ecx
call fcn.004eb550
add esp, 8
mov dword [ebp - 0x26c], eax
mov edx, dword [ebp - 0x26c]
mov dword [ebp - 0x270], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x270]
push eax
mov ecx, 0x543ea0
call fcn.004013e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x258]
call fcn.00403c40
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, 0x543740
call fcn.00415130
call fcn.00452360
call fcn.00451f40
call fcn.004516b0
call fcn.0048ed80
lea edx, [ebp - 0x21c]
push edx
mov ecx, dword [ebp - 0x268]
call fcn.0042e340
test eax, eax
jne 0x4307bf
mov eax, 1
jmp 0x4308b2
lea eax, [ebp - 0x21c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push 0x4fab2c
push 0x543740
lea ecx, [ebp - 0x238]
push ecx
call fcn.0041b0d0
add esp, 0xc
mov dword [ebp - 4], 1
push 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x25c], esp
lea edx, [ebp - 0x238]
push edx
call fcn.00401700
mov dword [ebp - 0x274], eax
call fcn.00431f90
add esp, 0x20
mov eax, dword [ebp - 0x268]
mov dword [eax + 0x54], 1
mov ecx, dword [ebp - 0x268]
push ecx
call fcn.0042e930
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x260], esp
lea edx, [ebp - 0x238]
push edx
call fcn.00401700
mov dword [ebp - 0x278], eax
call fcn.00431f90
add esp, 0x20
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
movzx eax, byte [ebp + 8]
test eax, eax
sete cl
movzx edx, cl
push edx
mov ecx, dword [ebp - 0x268]
call fcn.0042fff0
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [0x543d30], 0
jne 0x43088b
call fcn.00452860
jmp 0x430890
call fcn.00452900
mov dword [ebp - 0x264], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.00401740
mov eax, dword [ebp - 0x264]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049115e
mov esp, ebp
pop ebp
ret 8