Function at 0x4830b0
Capabilities:
Get common file path

Disassembly:
sub esp, 0x208
lea eax, [esp]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push edi
push 0x104
push eax
call esi
lea ecx, [esp + 0x10c]
push 0x104
push ecx
call esi
push 0x5a3ac8
push 0x5ee9ec
push 0x5a3ab8
push 0x5ee7bc
push 0x5a3aa8
push 0x5ee990
lea edi, [esp + 0x20]
or ecx, 0xffffffff
xor eax, eax
push 0x5a3a94
push 0x5ee8b0
push 0x5a3a84
repne scasb al, byte es:[edi]
push 0x5ee8dc
push 0x5a3a74
push 0x5ee9b0
push 0x5a3a68
mov eax, dword [0x5a3a58]
push 0x5ee768
push 0x5a3a4c
push 0x5ee8c8
not ecx
push 0x5a3a40
dec ecx
push 0x5ee75c
push 0x5a3a34
push 0x5ee788
lea edx, [esp + ecx + 0x58]
push 0x5a3a20
push 0x5eea2c
push 0x5a3a14
mov dword [edx], eax
mov eax, dword [0x5a3a5c]
push 0x5ee800
push 0x5a3a08
push 0x5ee984
mov dword [edx + 4], eax
mov eax, dword [0x5a3a60]
push 0x5a39fc
push 0x5ee9f0
push 0x5a39ec
mov dword [edx + 8], eax
mov ax, word [0x5a3a64]
push 0x5ee8b4
push 0x5a39e4
push 0x5ee954
mov word [edx + 0xc], ax
mov edx, dword [0x5a39d8]
mov eax, dword [0x5a39dc]
lea ecx, [esp + ecx + 0x18c]
push 0x5a39cc
push 0x5ee980
push 0x5a39c0
mov dword [ecx], edx
mov dx, word [0x5a39e0]
push 0x5ee9e8
push 0x5a39b0
push 0x5ee8a4
mov dword [ecx + 4], eax
mov al, byte [0x5a39e2]
push 0x5a39a8
push 0x5ee958
push 0x5a399c
mov word [ecx + 8], dx
push 0x5ee890
push 0x5a3990
push 0x5eea28
mov byte [ecx + 0xa], al
push 0x5a3984
push 0x5ee9d8
push 0x5a3974
push 0x5ee7b8
push 0x5a3968
push 0x5eea48
push 0x5a3954
push 0x5ee910
push 0x5a3940
push 0x5ee94c
push 0x5a3930
push 0x5ee9fc
push 0x5a391c
push 0x5ee79c
push 0x5a3910
push 0x5ee77c
push 0x5a3900
push 0x5ee9b8
push 0x5a38f4
push 0x5ee924
push 0x5a38e8
push 0x5ee948
push 0x5a38dc
push 0x5ee960
push 0x5a38cc
push 0x5ee89c
push 0x5a38bc
push 0x5ee774
push 0x5a38b0
push 0x5ee884
push 0x5a38a0
push 0x5ee950
push 0x5a3894
push 0x5ee9c8
push 0x5a3888
push 0x5ee804
push 0x5a3878
push 0x5ee81c
push 0x5a386c
push 0x5eea40
push 0x5a3860
push 0x5ee824
push 0x5a3854
push 0x5ee860
push 0x5a3848
push 0x5ee894
push 0x5a383c
push 0x5ee750
push 0x5a3830
push 0x5ee878
push 0x5a3824
push 0x5ee9bc
push 0x5a3814
push 0x5ee78c
push 0x5a3808
push 0x5ee888
push 0x5a37fc
push 0x5ee9f4
push 0x5a37ec
push 0x5ee928
push 0x5a37dc
push 0x5ee920
push 0x5a37cc
push 0x5ee810
push 0x5a37bc
push 0x5ee808
push 0x5a37ac
push 0x5ee7ac
push 0x5a3798
push 0x5eea08
push 0x5a3788
push 0x5ee82c
push 0x5a3778
push 0x5ee91c
push 0x5a376c
push 0x5ee7fc
push 0x5a3764
push 0x5ee7a0
push 0x5a375c
push 0x5ee9c0
push 0x5a374c
push 0x5ee764
push 0x5a3740
push 0x5ee9e0
push 0x5a3730
push 0x5ee9ac
push 0x5a3720
push 0x5ee938
push 0x5a3710
push 0x5ee780
push 0x5a3704
push 0x5ee7a8
push 0x5a36f8
push 0x5eea34
push 0x5a36ec
push 0x5ee778
push 0x5a36e0
push 0x5ee8e4
push 0x5a36d4
push 0x5ee7c0
push 0x5a36c8
push 0x5ee8f8
push 0x5a36b8
push 0x5ee818
push 0x5a36a8
push 0x5ee898
push 0x5a3698
push 0x5ee7b4
push 0x5a3688
push 0x5ee8cc
push 0x5a3678
push 0x5ee754
push 0x5a3670
push 0x5ee994
push 0x5a3668
push 0x5ee95c
push 0x5a3660
push 0x5eea00
push 0x5a3654
push 0x5ee80c
push 0x5a3648
push 0x5eea30
push 0x5a3638
push 0x5ee7a4
push 0x5a362c
push 0x5ee798
push 0x5a3620
push 0x5ee9c4
push 0x5a3614
push 0x5ee9e4
push 0x5a360c
push 0x5ee7c8
push 0x5a3600
push 0x5ee98c
push 0x5a35f4
push 0x5eea04
push 0x5a35e0
push 0x5ee760
push 0x5a35d0
push 0x5ee76c
push 0x5a35c0
push 0x5ee7c4
push 0x5a35b4
push 0x5ee830
push 0x5a35a8
push 0x5ee828
push 0x5a35a0
push 0x5ee834
push 0x5a3594
push 0x5ee9f8
push 0x5a358c
push 0x5ee8d4
push 0x5a3584
push 0x5ee770
push 0x5a3574
push 0x5ee814
push 0x5a3564
push 0x5eea3c
push 0x5a3558
push 0x5ee998
push 0x5a3548
push 0x5ee7b0
push 0x5a353c
push 0x5ee9a4
push 0x5a3534
push 0x5ee930
push 0x5a3528
push 0x5ee880
push 0x5a351c
push 0x5eea20
push 0x5a3510
push 0x5ee8a0
push 0x5a3500
push 0x5ee99c
push 0x5a34f0
push 0x5ee8c0
push 0x5a34e0
push 0x5ee8ec
lea ecx, [esp + 0x380]
push 0x6f
push ecx
push 0x5eea60
call fcn.00483040
add esp, 0x384
test al, al
je 0x48367a
push 0x5a34d0
push 0x5ee864
push 0x5a34c4
push 0x5ee968
push 0x5a34b4
push 0x5ee9a0
push 0x5a34a0
push 0x5eea44
push 0x5a3490
push 0x5ee964
push 0x5a3488
push 0x5ee8fc
push 0x5a347c
push 0x5ee914
push 0x5a3470
push 0x5ee9cc
push 0x5a3460
push 0x5ee9b4
push 0x5a344c
push 0x5ee918
push 0x5a3434
push 0x5ee8c4
push 0x5a3420
push 0x5eea38
push 0x5a340c
push 0x5eea24
push 0x5a3400
push 0x5ee87c
push 0x5a33ec
push 0x5ee85c
push 0x5a33dc
push 0x5ee7d8
lea edx, [esp + 0x18c]
push 0x10
push edx
push 0x5eea64
call fcn.00483040
add esp, 0x8c
test al, al
je 0x48367a
pop edi
mov eax, 1
pop esi
add esp, 0x208
ret
push 0x5a33c8
xor esi, esi
call fcn.004836e0
add esp, 4
mov eax, esi
pop edi
pop esi
add esp, 0x208
ret