Function at 0xbc66caf
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x450
mov eax, dword [0xbc6d328]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0x1c]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x24]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x434], esi
mov esi, dword [ebp + 0x28]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x440], esi
mov esi, dword [ebp + 0x2c]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x444], esi
xor esi, esi
push edi
mov dword [ebp - 0x428], edx
mov dword [ebp - 0x448], ebx
mov dword [ebp - 0x450], ecx
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x424], esi
mov dword [ebp - 0x418], esi
cmp eax, esi
je 0xbc66d3b
mov dword [eax], esi
cmp ecx, esi
je 0xbc670e2
cmp edx, esi
je 0xbc670e2
mov edi, dword [ecx]
mov dword [ebp - 0x41c], edi
cmp edi, esi
je 0xbc670ec
mov esi, 0x104
jmp 0xbc66d6e
mov edi, dword [ebp - 0x41c]
mov ebx, dword [ebp - 0x448]
mov eax, dword [edi + 4]
test eax, eax
je 0xbc6702a
push eax
push dword [ebp - 0x428]
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
test eax, eax
jne 0xbc6702a
test dword [edi + 0x14], 0xf
jne 0xbc66da8
and dword [ebp - 0x418], eax
mov dword [ebp - 0x424], 1
push dword [edi]
xor eax, eax
cmp ax, word [ebx]
je 0xbc66f74
push ebx
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
test eax, eax
jne 0xbc66dd6
and dword [ebp - 0x418], eax
mov dword [ebp - 0x420], 1
jmp 0xbc66ecd
push esi
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0xbc66eb7
lea eax, [ebp - 0x20c]
push eax
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0bc47085
push 0xbc46a98
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0bc470bf
push 0xbc46a84
push esi
lea eax, [ebp - 0x414]
push eax
call fcn.0bc470bf
push esi
lea eax, [ebp - 0x20c]
push eax
push ebx
call sub.msvcrt.dll__wcsnicmp
mov edi, eax
push esi
lea eax, [ebp - 0x414]
neg edi
push eax
sbb edi, edi
push ebx
inc edi
call sub.msvcrt.dll__wcsnicmp
mov ebx, eax
push esi
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [ebp - 0x41c]
push dword [eax]
neg ebx
sbb ebx, ebx
inc ebx
call sub.msvcrt.dll__wcsnicmp
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x42c], eax
push esi
lea eax, [ebp - 0x414]
push eax
mov eax, dword [ebp - 0x41c]
push dword [eax]
call sub.msvcrt.dll__wcsnicmp
add esp, 0x30
neg eax
sbb eax, eax
inc eax
test edi, edi
jne 0xbc66e93
test ebx, ebx
je 0xbc66eb1
cmp dword [ebp - 0x42c], 0
jne 0xbc66ea0
test eax, eax
je 0xbc66eb1
and dword [ebp - 0x418], 0
mov dword [ebp - 0x420], 1
mov edi, dword [ebp - 0x41c]
xor edx, edx
cmp dword [ebp - 0x420], edx
jne 0xbc66ecd
cmp dword [ebp - 0x424], edx
je 0xbc670cf
mov eax, dword [ebp - 0x450]
cmp dword [eax + 0x28], 0
je 0xbc66ee8
mov ecx, edi
call fcn.0bc65e6b
test eax, eax
jne 0xbc6709d
mov eax, dword [edi + 0x14]
mov ecx, dword [ebp - 0x43c]
and eax, 0xf
mov dword [ecx], eax
mov eax, dword [ebp - 0x44c]
test eax, eax
je 0xbc66f05
mov ecx, dword [edi + 0x18]
mov dword [eax], ecx
mov eax, dword [edi + 0xc]
test eax, eax
je 0xbc6706c
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0xbc66f13
sub eax, edx
sar eax, 1
lea ebx, [eax + 1]
xor ecx, ecx
push 2
pop edx
mov eax, ebx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0bc4a105
pop ecx
mov dword [ebp - 0x42c], eax
test eax, eax
je 0xbc67060
push dword [edi + 0xc]
push ebx
push eax
call fcn.0bc47085
mov dword [ebp - 0x418], eax
test eax, eax
jl 0xbc6709d
mov eax, dword [ebp - 0x42c]
mov ecx, dword [ebp - 0x430]
mov dword [ecx], eax
jmp 0xbc67075
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0bc47085
mov dword [ebp - 0x418], eax
test eax, eax
jl 0xbc66eb7
mov eax, dword [edi]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0xbc66f94
sub eax, edx
push 0x5c
sar eax, 1
pop ecx
cmp cx, word [ebp + eax*2 - 0x20e]
je 0xbc66fc7
push 0xbc41320
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.0bc470bf
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
jl 0xbc66eb7
push dword [ebp - 0x428]
lea eax, [ebp - 0x20c]
push esi
push eax
call fcn.0bc470bf
mov dword [ebp - 0x418], eax
test eax, eax
jl 0xbc66eb7
lea eax, [ebp - 0x20c]
push eax
push esi
push dword [ebp - 0x434]
call fcn.0bc47085
mov dword [ebp - 0x418], eax
test eax, eax
jl 0xbc66eb7
xor eax, eax
inc eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x420], eax
jmp 0xbc66eb7
mov eax, dword [edi + 8]
test eax, eax
je 0xbc66eb7
push eax
push dword [ebp - 0x428]
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
test eax, eax
jne 0xbc66eb7
and dword [ebp - 0x418], eax
mov dword [ebp - 0x420], 1
jmp 0xbc66eb7
mov dword [ebp - 0x418], 0x8007000e
jmp 0xbc67075
mov eax, dword [ebp - 0x430]
and dword [eax], 0
cmp dword [ebp - 0x418], 0
jl 0xbc6709d
mov eax, dword [ebp - 0x444]
test eax, eax
je 0xbc6708d
mov ecx, dword [edi + 0x1c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x438]
test eax, eax
je 0xbc6709d
mov dword [eax], 1
mov ecx, dword [ebp - 0x440]
xor edx, edx
cmp ecx, edx
je 0xbc670c1
mov eax, dword [edi + 0x20]
cmp eax, edx
je 0xbc670b5
cmp eax, 1
jne 0xbc670c1
mov eax, dword [edi + 0x14]
and eax, 0xf
cmp al, 2
jne 0xbc670c1
mov dword [ecx], edx
mov dword [ebp - 0x424], edx
cmp dword [ebp - 0x420], edx
jne 0xbc670ec
mov edi, dword [edi + 0x28]
mov dword [ebp - 0x41c], edi
cmp edi, edx
jne 0xbc66d62
jmp 0xbc670ec
mov dword [ebp - 0x418], 0x80070057
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x418]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0bc64d0f
leave
ret 0x28