Function at 0x46d080
Capabilities:
Get common file path

Disassembly:
sub esp, 0x110
mov eax, dword [0x4fb164]
xor eax, esp
mov dword [esp + 0x10c], eax
mov ecx, 0x104
mov eax, esi
jmp 0x46d0a0
cmp byte [eax], 0
je 0x46d0af
add eax, 1
sub ecx, 1
jne 0x46d0a0
jmp 0x46d0ce
test ecx, ecx
je 0x46d0ce
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, 0x4e1ce4
call fcn.00402ce0
push str._NT_SYMBOL_PATH
lea eax, [esp + 8]
push eax
lea ecx, [esp + 8]
push ecx
call fcn.004a4b1d
add esp, 0xc
test eax, eax
je 0x46d151
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d0ff
add eax, 1
sub ecx, 1
jne 0x46d0f0
jmp 0x46d11e
test ecx, ecx
je 0x46d11e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, 0x4e1cf8
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d134
add eax, 1
sub ecx, 1
jne 0x46d125
jmp 0x46d151
test ecx, ecx
je 0x46d151
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, dword [esp]
call fcn.00402ce0
push str._NT_ALT_SYMBOL_PATH
lea edx, [esp + 8]
push edx
lea eax, [esp + 8]
push eax
call fcn.004a4b1d
add esp, 0xc
test eax, eax
je 0x46d1d4
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d182
add eax, 1
sub ecx, 1
jne 0x46d173
jmp 0x46d1a1
test ecx, ecx
je 0x46d1a1
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4e1cf8
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d1b7
add eax, 1
sub ecx, 1
jne 0x46d1a8
jmp 0x46d1d4
test ecx, ecx
je 0x46d1d4
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.00402ce0
push str.SYSTEMROOT
lea ecx, [esp + 8]
push ecx
lea edx, [esp + 8]
push edx
call fcn.004a4b1d
add esp, 0xc
test eax, eax
je 0x46d318
mov ecx, 0x104
mov eax, esi
lea ebx, [ebx]
cmp byte [eax], 0
je 0x46d20f
add eax, 1
sub ecx, 1
jne 0x46d200
jmp 0x46d22e
test ecx, ecx
je 0x46d22e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4e1cf8
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d244
add eax, 1
sub ecx, 1
jne 0x46d235
jmp 0x46d261
test ecx, ecx
je 0x46d261
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d277
add eax, 1
sub ecx, 1
jne 0x46d268
jmp 0x46d296
test ecx, ecx
je 0x46d296
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4e1cf8
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
lea ecx, [ecx]
cmp byte [eax], 0
je 0x46d2af
add eax, 1
sub ecx, 1
jne 0x46d2a0
jmp 0x46d2cc
test ecx, ecx
je 0x46d2cc
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d2f5
add eax, 1
sub ecx, 1
jne 0x46d2d3
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.004a2094
add esp, 0x110
ret
test ecx, ecx
je 0x46d455
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, str.System32
jmp 0x46d450
push 0x103
lea eax, [esp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x46d455
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d346
add eax, 1
sub ecx, 1
jne 0x46d337
jmp 0x46d365
test ecx, ecx
je 0x46d365
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4e1cf8
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
lea esp, [esp]
cmp byte [eax], 0
je 0x46d37f
add eax, 1
sub ecx, 1
jne 0x46d370
jmp 0x46d39d
test ecx, ecx
je 0x46d39d
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
lea eax, [esp + 8]
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d3b3
add eax, 1
sub ecx, 1
jne 0x46d3a4
jmp 0x46d3d2
test ecx, ecx
je 0x46d3d2
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x4e1cf8
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
lea esp, [esp]
cmp byte [eax], 0
je 0x46d3ef
add eax, 1
sub ecx, 1
jne 0x46d3e0
jmp 0x46d40d
test ecx, ecx
je 0x46d40d
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
lea eax, [esp + 8]
call fcn.00402ce0
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x46d436
add eax, 1
sub ecx, 1
jne 0x46d414
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.004a2094
add esp, 0x110
ret
test ecx, ecx
je 0x46d455
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, str.System
call fcn.00402ce0
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.004a2094
add esp, 0x110
ret