Function at 0x1001a190
Capabilities:
Get common file path

Disassembly:
sub esp, 0x110
mov eax, dword [0x100810a0]
xor eax, esp
mov dword [esp + 0x10c], eax
mov ecx, 0x104
mov eax, esi
jmp 0x1001a1b0
cmp byte [eax], 0
je 0x1001a1bf
add eax, 1
sub ecx, 1
jne 0x1001a1b0
jmp 0x1001a1de
test ecx, ecx
je 0x1001a1de
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, 0x100727a0
call fcn.10015550
push str._NT_SYMBOL_PATH
lea eax, [esp + 8]
push eax
lea ecx, [esp + 8]
push ecx
call fcn.100465f2
add esp, 0xc
test eax, eax
je 0x1001a261
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a20f
add eax, 1
sub ecx, 1
jne 0x1001a200
jmp 0x1001a22e
test ecx, ecx
je 0x1001a22e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, 0x100727b4
call fcn.10015550
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a244
add eax, 1
sub ecx, 1
jne 0x1001a235
jmp 0x1001a261
test ecx, ecx
je 0x1001a261
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, dword [esp]
call fcn.10015550
push str._NT_ALT_SYMBOL_PATH
lea edx, [esp + 8]
push edx
lea eax, [esp + 8]
push eax
call fcn.100465f2
add esp, 0xc
test eax, eax
je 0x1001a2e4
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a292
add eax, 1
sub ecx, 1
jne 0x1001a283
jmp 0x1001a2b1
test ecx, ecx
je 0x1001a2b1
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x100727b4
call fcn.10015550
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a2c7
add eax, 1
sub ecx, 1
jne 0x1001a2b8
jmp 0x1001a2e4
test ecx, ecx
je 0x1001a2e4
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.10015550
push str.SYSTEMROOT
lea ecx, [esp + 8]
push ecx
lea edx, [esp + 8]
push edx
call fcn.100465f2
add esp, 0xc
test eax, eax
je 0x1001a428
mov ecx, 0x104
mov eax, esi
lea ebx, [ebx]
cmp byte [eax], 0
je 0x1001a31f
add eax, 1
sub ecx, 1
jne 0x1001a310
jmp 0x1001a33e
test ecx, ecx
je 0x1001a33e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x100727b4
call fcn.10015550
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a354
add eax, 1
sub ecx, 1
jne 0x1001a345
jmp 0x1001a371
test ecx, ecx
je 0x1001a371
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.10015550
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a387
add eax, 1
sub ecx, 1
jne 0x1001a378
jmp 0x1001a3a6
test ecx, ecx
je 0x1001a3a6
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x100727b4
call fcn.10015550
mov ecx, 0x104
mov eax, esi
lea ecx, [ecx]
cmp byte [eax], 0
je 0x1001a3bf
add eax, 1
sub ecx, 1
jne 0x1001a3b0
jmp 0x1001a3dc
test ecx, ecx
je 0x1001a3dc
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.10015550
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a405
add eax, 1
sub ecx, 1
jne 0x1001a3e3
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.100446ed
add esp, 0x110
ret
test ecx, ecx
je 0x1001a565
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, str.System32
jmp 0x1001a560
push 0x103
lea eax, [esp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x1001a565
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a456
add eax, 1
sub ecx, 1
jne 0x1001a447
jmp 0x1001a475
test ecx, ecx
je 0x1001a475
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x100727b4
call fcn.10015550
mov ecx, 0x104
mov eax, esi
lea esp, [esp]
cmp byte [eax], 0
je 0x1001a48f
add eax, 1
sub ecx, 1
jne 0x1001a480
jmp 0x1001a4ad
test ecx, ecx
je 0x1001a4ad
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
lea eax, [esp + 8]
call fcn.10015550
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a4c3
add eax, 1
sub ecx, 1
jne 0x1001a4b4
jmp 0x1001a4e2
test ecx, ecx
je 0x1001a4e2
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x100727b4
call fcn.10015550
mov ecx, 0x104
mov eax, esi
lea esp, [esp]
cmp byte [eax], 0
je 0x1001a4ff
add eax, 1
sub ecx, 1
jne 0x1001a4f0
jmp 0x1001a51d
test ecx, ecx
je 0x1001a51d
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
lea eax, [esp + 8]
call fcn.10015550
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x1001a546
add eax, 1
sub ecx, 1
jne 0x1001a524
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.100446ed
add esp, 0x110
ret
test ecx, ecx
je 0x1001a565
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, str.System
call fcn.10015550
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.100446ed
add esp, 0x110
ret