Function at 0x1003d020
Capabilities:
Get common file path
Get program files directory

Disassembly:
mov eax, 0x2230
call fcn.1007e4b0
mov eax, dword [0x100b0380]
xor eax, esp
mov dword [esp + 0x222c], eax
call fcn.10040340
test eax, eax
je 0x1003d05b
mov eax, 1
mov ecx, dword [esp + 0x222c]
xor ecx, esp
call fcn.10079a05
add esp, 0x2230
ret
mov eax, dword [str.Config]
mov ecx, dword [0x100a196c]
mov edx, dword [0x100a1970]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x424], eax
movzx eax, word [0x100a1974]
push 0x1f2
mov dword [esp + 0x42c], ecx
lea ecx, [esp + 0x436]
push 0
push ecx
mov dword [esp + 0x1c], 1
mov dword [esp + 0x438], edx
mov word [esp + 0x43c], ax
call fcn.1007dcf0
mov eax, dword [0x100a197c]
mov edx, dword [str.SoftMgr]
mov ecx, dword [0x100a1980]
push 0x1f0
mov dword [esp + 0x638], eax
mov dword [esp + 0x634], edx
mov edx, dword [0x100a1984]
lea eax, [esp + 0x644]
push 0
push eax
mov dword [esp + 0x644], ecx
mov dword [esp + 0x648], edx
call fcn.1007dcf0
mov ecx, dword [str.Utils]
mov edx, dword [0x100a198c]
mov eax, dword [0x100a1990]
push 0x1f4
mov dword [esp + 0x840], ecx
lea ecx, [esp + 0x84c]
push 0
push ecx
mov dword [esp + 0x84c], edx
mov dword [esp + 0x850], eax
call fcn.1007dcf0
mov eax, dword [0x100a0234]
mov edx, dword [str.safemon]
mov ecx, dword [0x100a0238]
push 0x1f0
mov dword [esp + 0xa50], eax
mov dword [esp + 0xa4c], edx
mov edx, dword [0x100a023c]
lea eax, [esp + 0xa5c]
push 0
push eax
mov dword [esp + 0xa5c], ecx
mov dword [esp + 0xa60], edx
call fcn.1007dcf0
mov ecx, dword [str.360zip]
mov edx, dword [0x100a1998]
mov eax, dword [0x100a199c]
push 0x1f2
mov dword [esp + 0xc5c], edx
mov dword [esp + 0xc58], ecx
mov cx, word [0x100a19a0]
lea edx, [esp + 0xc66]
push 0
push edx
mov dword [esp + 0xc68], eax
mov word [esp + 0xc6c], cx
call fcn.1007dcf0
mov ecx, dword [0x100a19a8]
mov eax, dword [str.antiarp]
mov edx, dword [0x100a19ac]
push 0x1f0
mov dword [esp + 0xe68], ecx
mov dword [esp + 0xe64], eax
mov eax, dword [0x100a19b0]
lea ecx, [esp + 0xe74]
push 0
push ecx
mov dword [esp + 0xe74], edx
mov dword [esp + 0xe78], eax
call fcn.1007dcf0
mov eax, dword [0x100a19b8]
mov ecx, dword [0x100a19bc]
mov edx, dword [str.deepscan]
add esp, 0x48
mov dword [esp + 0x1028], eax
movzx eax, word [0x100a19c4]
push 0x1ee
mov dword [esp + 0x1030], ecx
mov dword [esp + 0x1028], edx
mov edx, dword [0x100a19c0]
lea ecx, [esp + 0x103a]
push 0
push ecx
mov dword [esp + 0x103c], edx
mov word [esp + 0x1040], ax
call fcn.1007dcf0
mov edx, dword [str.endata]
mov eax, dword [0x100a19cc]
mov ecx, dword [0x100a19d0]
push 0x1f2
mov dword [esp + 0x1238], eax
mov dword [esp + 0x1234], edx
mov dx, word [0x100a19d4]
lea eax, [esp + 0x1242]
push 0
push eax
mov dword [esp + 0x1244], ecx
mov word [esp + 0x1248], dx
call fcn.1007dcf0
mov ecx, dword [0x100a19d8]
mov edx, dword [0x100a19dc]
push 0x1f8
lea eax, [esp + 0x1448]
push 0
push eax
mov dword [esp + 0x1448], ecx
mov dword [esp + 0x144c], edx
call fcn.1007dcf0
mov edx, dword [0x100a19e4]
mov ecx, dword [str.modules]
mov eax, dword [0x100a19e8]
push 0x1f0
mov dword [esp + 0x1650], edx
mov dword [esp + 0x164c], ecx
mov ecx, dword [0x100a19ec]
lea edx, [esp + 0x165c]
push 0
push edx
mov dword [esp + 0x165c], eax
mov dword [esp + 0x1660], ecx
call fcn.1007dcf0
mov eax, dword [str.netmon]
mov ecx, dword [0x100a19f4]
mov edx, dword [0x100a19f8]
mov dword [esp + 0x1854], eax
movzx eax, word [0x100a19fc]
push 0x1f2
mov dword [esp + 0x185c], ecx
lea ecx, [esp + 0x1866]
push 0
push ecx
mov dword [esp + 0x1868], edx
mov word [esp + 0x186c], ax
call fcn.1007dcf0
mov eax, dword [0x100a1a04]
mov edx, dword [str.sweeper]
mov ecx, dword [0x100a1a08]
push 0x1f0
mov dword [esp + 0x1a68], eax
mov dword [esp + 0x1a64], edx
mov edx, dword [0x100a1a0c]
lea eax, [esp + 0x1a74]
push 0
push eax
mov dword [esp + 0x1a74], ecx
mov dword [esp + 0x1a78], edx
call fcn.1007dcf0
add esp, 0x48
xor ecx, ecx
mov word [esp + 0x1c24], cx
push 0x206
push ecx
lea edx, [esp + 0x1c2e]
push edx
call fcn.1007dcf0
add esp, 0xc
push 1
push 0x26
lea eax, [esp + 0x1c2c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x1e36]
push edx
mov word [esp + 0x1e38], cx
call fcn.1007dcf0
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x232]
push ecx
mov word [esp + 0x234], ax
call fcn.1007dcf0
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x36]
push eax
mov word [esp + 0x38], dx
call fcn.1007dcf0
mov esi, dword [sym.imp.SHLWAPI.dll_StrCpyW]
add esp, 0x24
lea ecx, [esp + 0x1c24]
push ecx
lea edx, [esp + 0x18]
push edx
call esi
mov ebx, dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x100a1950
lea eax, [esp + 0x18]
push eax
call ebx
push str.360safe
lea ecx, [esp + 0x18]
push ecx
call ebx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x220]
push eax
call esi
mov edi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea ecx, [esp + 0x21c]
push ecx
call edi
lea edx, [esp + 0x21c]
push edx
lea eax, [esp + 0x1e30]
push eax
call esi
lea ecx, [esp + 0x1e2c]
push ecx
call edi
mov ebp, dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
lea edx, [esp + 0x21c]
push edx
call ebp
test eax, eax
je 0x1003d511
lea eax, [esp + 0x14]
push eax
call ebp
test eax, eax
je 0x1003d511
xor edi, edi
lea esi, [esp + 0x424]
nop
push 0x208
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x203c]
push edx
call fcn.10081350
add esp, 0xc
push esi
lea eax, [esp + 0x2038]
push eax
call ebx
lea ecx, [esp + 0x2034]
push ecx
call ebp
test eax, eax
je 0x1003d511
inc edi
add esi, 0x200
cmp edi, 0xc
jl 0x1003d4d0
jmp 0x1003d519
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x223c]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10079a05
add esp, 0x2230
ret