Function at 0x461bc0
Capabilities:
Get common file path

Disassembly:
sub esp, 0x110
mov eax, dword [0x4df210]
xor eax, esp
mov dword [esp + 0x10c], eax
mov ecx, 0x104
mov eax, esi
jmp 0x461be0
cmp byte [eax], 0
je 0x461bef
add eax, 1
sub ecx, 1
jne 0x461be0
jmp 0x461c0e
test ecx, ecx
je 0x461c0e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, 0x4c8d04
call fcn.004304f0
push str._NT_SYMBOL_PATH
lea eax, [esp + 8]
push eax
lea ecx, [esp + 8]
push ecx
call fcn.0048f238
add esp, 0xc
test eax, eax
je 0x461c91
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461c3f
add eax, 1
sub ecx, 1
jne 0x461c30
jmp 0x461c5e
test ecx, ecx
je 0x461c5e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, 0x4c8d18
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461c74
add eax, 1
sub ecx, 1
jne 0x461c65
jmp 0x461c91
test ecx, ecx
je 0x461c91
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, dword [esp]
call fcn.004304f0
push str._NT_ALT_SYMBOL_PATH
lea edx, [esp + 8]
push edx
lea eax, [esp + 8]
push eax
call fcn.0048f238
add esp, 0xc
test eax, eax
je 0x461d14
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461cc2
add eax, 1
sub ecx, 1
jne 0x461cb3
jmp 0x461ce1
test ecx, ecx
je 0x461ce1
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4c8d18
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461cf7
add eax, 1
sub ecx, 1
jne 0x461ce8
jmp 0x461d14
test ecx, ecx
je 0x461d14
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.004304f0
push str.SYSTEMROOT
lea ecx, [esp + 8]
push ecx
lea edx, [esp + 8]
push edx
call fcn.0048f238
add esp, 0xc
test eax, eax
je 0x461e58
mov ecx, 0x104
mov eax, esi
lea ebx, [ebx]
cmp byte [eax], 0
je 0x461d4f
add eax, 1
sub ecx, 1
jne 0x461d40
jmp 0x461d6e
test ecx, ecx
je 0x461d6e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4c8d18
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461d84
add eax, 1
sub ecx, 1
jne 0x461d75
jmp 0x461da1
test ecx, ecx
je 0x461da1
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461db7
add eax, 1
sub ecx, 1
jne 0x461da8
jmp 0x461dd6
test ecx, ecx
je 0x461dd6
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4c8d18
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
lea ecx, [ecx]
cmp byte [eax], 0
je 0x461def
add eax, 1
sub ecx, 1
jne 0x461de0
jmp 0x461e0c
test ecx, ecx
je 0x461e0c
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461e35
add eax, 1
sub ecx, 1
jne 0x461e13
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.0048cf20
add esp, 0x110
ret
test ecx, ecx
je 0x461f95
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, str.System32
jmp 0x461f90
push 0x103
lea eax, [esp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x461f95
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461e86
add eax, 1
sub ecx, 1
jne 0x461e77
jmp 0x461ea5
test ecx, ecx
je 0x461ea5
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4c8d18
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
lea esp, [esp]
cmp byte [eax], 0
je 0x461ebf
add eax, 1
sub ecx, 1
jne 0x461eb0
jmp 0x461edd
test ecx, ecx
je 0x461edd
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
lea eax, [esp + 8]
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461ef3
add eax, 1
sub ecx, 1
jne 0x461ee4
jmp 0x461f12
test ecx, ecx
je 0x461f12
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4c8d18
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
lea esp, [esp]
cmp byte [eax], 0
je 0x461f2f
add eax, 1
sub ecx, 1
jne 0x461f20
jmp 0x461f4d
test ecx, ecx
je 0x461f4d
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
lea eax, [esp + 8]
call fcn.004304f0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x461f76
add eax, 1
sub ecx, 1
jne 0x461f54
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.0048cf20
add esp, 0x110
ret
test ecx, ecx
je 0x461f95
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, str.System
call fcn.004304f0
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.0048cf20
add esp, 0x110
ret