Function at 0x4291c0
Capabilities:
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c2f90
mov eax, dword fs:[0]
push eax
sub esp, 0x3d8
mov eax, dword [0x64306c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
lea ecx, [ebp - 0x230]
call fcn.00425f30
mov dword [ebp - 4], 0
call fcn.004336a0
cmp eax, 0x20
jne 0x42925d
push str.SystemProcessing.exe
mov ecx, dword [ebp - 0x2dc]
add ecx, 0x478
call fcn.00422ca0
push eax
push 0x627f4c
lea eax, [ebp - 0x36c]
push eax
call fcn.004401d0
add esp, 0x10
mov dword [ebp - 0x2e0], eax
mov ecx, dword [ebp - 0x2e0]
push ecx
lea ecx, [ebp - 0x230]
call fcn.00433560
lea ecx, [ebp - 0x36c]
call fcn.00425b70
jmp 0x4292ab
push str.SystemProcessingx64.exe
mov ecx, dword [ebp - 0x2dc]
add ecx, 0x478
call fcn.00422ca0
push eax
push 0x627f88
lea edx, [ebp - 0x3e4]
push edx
call fcn.004401d0
add esp, 0x10
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x230]
call fcn.00433560
lea ecx, [ebp - 0x3e4]
call fcn.00425b70
lea ecx, [ebp - 0x384]
call fcn.00441de0
mov dword [ebp - 0x2e8], eax
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp - 0x2ec], ecx
mov byte [ebp - 4], 1
push 0x627f94
mov ecx, dword [ebp - 0x2ec]
call fcn.00422ca0
push eax
push str._s_s_
lea edx, [ebp - 0x2a8]
push edx
call fcn.004401d0
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x384]
call fcn.00425b70
lea ecx, [ebp - 0x39c]
call fcn.00441d00
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x2f0], eax
mov byte [ebp - 4], 4
push 0x627fb4
mov ecx, dword [ebp - 0x2f0]
call fcn.00422ca0
push eax
push 0x627fcc
lea ecx, [ebp - 0x2c0]
push ecx
call fcn.004401d0
add esp, 0x10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x39c]
call fcn.00425b70
lea ecx, [ebp - 0x3b4]
call fcn.00441de0
mov dword [ebp - 0x2f4], eax
mov edx, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], edx
mov byte [ebp - 4], 7
push 0x627fd8
mov ecx, dword [ebp - 0x2f8]
call fcn.00422ca0
push eax
push 0x628000
lea eax, [ebp - 0x2d8]
push eax
call fcn.004401d0
add esp, 0x10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3b4]
call fcn.00425b70
lea ecx, [ebp - 0x3cc]
call fcn.00441de0
mov dword [ebp - 0x2fc], eax
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], ecx
mov byte [ebp - 4], 0xa
push 0x62800c
mov ecx, dword [ebp - 0x300]
call fcn.00422ca0
push eax
push 0x62802c
lea edx, [ebp - 0x290]
push edx
call fcn.004401d0
add esp, 0x10
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3cc]
call fcn.00425b70
mov ecx, dword [ebp - 0x2dc]
add ecx, 0x478
call fcn.00422ca0
push eax
push str._suninst.exe
lea eax, [ebp - 0x260]
push eax
call fcn.004401d0
add esp, 0xc
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2a8]
call fcn.00422ca0
mov ecx, eax
call fcn.00442080
push 0
push 0x19
lea ecx, [ebp - 0x218]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea edx, [ebp - 0x218]
push edx
push 0x628054
lea eax, [ebp - 0x248]
push eax
call fcn.004401d0
add esp, 0xc
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x248]
call fcn.00422ca0
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
cmp eax, 0x10
jne 0x429525
push 0x628064
lea ecx, [ebp - 0x248]
call fcn.00422ca0
push eax
push 0x62807c
lea ecx, [ebp - 0x278]
push ecx
call fcn.004401d0
add esp, 0x10
mov byte [ebp - 4], 0xf
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x350], esp
push 0x628088
call fcn.00425a30
mov dword [ebp - 0x304], eax
mov edx, dword [ebp - 0x304]
mov dword [ebp - 0x34c], edx
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x348], esp
push 0x62808c
call fcn.00425a30
mov dword [ebp - 0x344], eax
push 1
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x230]
push ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x2dc]
call fcn.004296e0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x278]
call fcn.00425b70
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x340], esp
push 0x628090
call fcn.00425a30
mov dword [ebp - 0x308], eax
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x33c], edx
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x338], esp
push 0x628094
call fcn.00425a30
mov dword [ebp - 0x334], eax
push 1
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x230]
push ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x2dc]
call fcn.004296e0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x354], esp
push 0x628098
call fcn.00425a30
mov dword [ebp - 0x30c], eax
mov edx, dword [ebp - 0x30c]
mov dword [ebp - 0x318], edx
mov byte [ebp - 4], 0x12
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x31c], esp
push 0x62809c
call fcn.00425a30
mov dword [ebp - 0x320], eax
push 1
lea eax, [ebp - 0x2d8]
push eax
lea ecx, [ebp - 0x230]
push ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x2dc]
call fcn.004296e0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x324], esp
push 0x6280a0
call fcn.00425a30
mov dword [ebp - 0x310], eax
mov edx, dword [ebp - 0x310]
mov dword [ebp - 0x328], edx
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x32c], esp
push 0x6280a4
call fcn.00425a30
mov dword [ebp - 0x330], eax
push 1
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x260]
push ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x2dc]
call fcn.004296e0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x248]
call fcn.00425b70
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x260]
call fcn.00425b70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x290]
call fcn.00425b70
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2d8]
call fcn.00425b70
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c0]
call fcn.00425b70
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a8]
call fcn.00425b70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00425b70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0057e11e
mov esp, ebp
pop ebp
ret