Function at 0x410780
Capabilities:
Get common file path

Disassembly:
sub esp, 0x110
mov eax, dword [0x4b59f4]
xor eax, esp
mov dword [esp + 0x10c], eax
mov ecx, 0x104
mov eax, esi
jmp 0x4107a0
cmp byte [eax], 0
je 0x4107af
add eax, 1
sub ecx, 1
jne 0x4107a0
jmp 0x4107ce
test ecx, ecx
je 0x4107ce
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, 0x49c26c
call fcn.00410680
push str._NT_SYMBOL_PATH
lea eax, [esp + 8]
push eax
lea ecx, [esp + 8]
push ecx
call fcn.0047f603
add esp, 0xc
test eax, eax
je 0x410851
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x4107ff
add eax, 1
sub ecx, 1
jne 0x4107f0
jmp 0x41081e
test ecx, ecx
je 0x41081e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, 0x49c280
call fcn.00410680
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x410834
add eax, 1
sub ecx, 1
jne 0x410825
jmp 0x410851
test ecx, ecx
je 0x410851
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esi + eax]
mov eax, dword [esp]
call fcn.00410680
push str._NT_ALT_SYMBOL_PATH
lea edx, [esp + 8]
push edx
lea eax, [esp + 8]
push eax
call fcn.0047f603
add esp, 0xc
test eax, eax
je 0x4108d4
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x410882
add eax, 1
sub ecx, 1
jne 0x410873
jmp 0x4108a1
test ecx, ecx
je 0x4108a1
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x49c280
call fcn.00410680
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x4108b7
add eax, 1
sub ecx, 1
jne 0x4108a8
jmp 0x4108d4
test ecx, ecx
je 0x4108d4
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.00410680
push str.SYSTEMROOT
lea ecx, [esp + 8]
push ecx
lea edx, [esp + 8]
push edx
call fcn.0047f603
add esp, 0xc
test eax, eax
je 0x410a18
mov ecx, 0x104
mov eax, esi
lea ebx, [ebx]
cmp byte [eax], 0
je 0x41090f
add eax, 1
sub ecx, 1
jne 0x410900
jmp 0x41092e
test ecx, ecx
je 0x41092e
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x49c280
call fcn.00410680
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x410944
add eax, 1
sub ecx, 1
jne 0x410935
jmp 0x410961
test ecx, ecx
je 0x410961
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.00410680
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x410977
add eax, 1
sub ecx, 1
jne 0x410968
jmp 0x410996
test ecx, ecx
je 0x410996
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x49c280
call fcn.00410680
mov ecx, 0x104
mov eax, esi
lea ecx, [ecx]
cmp byte [eax], 0
je 0x4109af
add eax, 1
sub ecx, 1
jne 0x4109a0
jmp 0x4109cc
test ecx, ecx
je 0x4109cc
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, dword [esp]
call fcn.00410680
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x4109f5
add eax, 1
sub ecx, 1
jne 0x4109d3
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.0046fe25
add esp, 0x110
ret
test ecx, ecx
je 0x410b55
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, str.System32
jmp 0x410b50
push 0x103
lea eax, [esp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x410b55
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x410a46
add eax, 1
sub ecx, 1
jne 0x410a37
jmp 0x410a65
test ecx, ecx
je 0x410a65
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x49c280
call fcn.00410680
mov ecx, 0x104
mov eax, esi
lea esp, [esp]
cmp byte [eax], 0
je 0x410a7f
add eax, 1
sub ecx, 1
jne 0x410a70
jmp 0x410a9d
test ecx, ecx
je 0x410a9d
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
lea eax, [esp + 8]
call fcn.00410680
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x410ab3
add eax, 1
sub ecx, 1
jne 0x410aa4
jmp 0x410ad2
test ecx, ecx
je 0x410ad2
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x49c280
call fcn.00410680
mov ecx, 0x104
mov eax, esi
lea esp, [esp]
cmp byte [eax], 0
je 0x410aef
add eax, 1
sub ecx, 1
jne 0x410ae0
jmp 0x410b0d
test ecx, ecx
je 0x410b0d
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
lea eax, [esp + 8]
call fcn.00410680
mov ecx, 0x104
mov eax, esi
cmp byte [eax], 0
je 0x410b36
add eax, 1
sub ecx, 1
jne 0x410b14
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.0046fe25
add esp, 0x110
ret
test ecx, ecx
je 0x410b55
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [eax + esi]
mov eax, 0x49c2b0
call fcn.00410680
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.0046fe25
add esp, 0x110
ret