Function at 0x4bc400
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x597037
mov eax, dword fs:[0]
push eax
sub esp, 0x5ac
mov eax, dword [0x5fae30]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor ebx, ebx
push str.ws2_32.dll
mov dword [ebp - 0x5a8], edi
mov dword [ebp - 0x5a0], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
mov dword [ebp - 0x5a0], esi
cmp esi, ebx
jne 0x4bc502
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.004080a8
add esp, 8
mov esi, eax
push 0x25
push str.Failed_loading_ws2_32.dll_with_error:
lea ecx, [ebp - 0x458]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x444], 0xf
mov dword [ebp - 0x448], ebx
mov byte [ebp - 0x458], bl
call fcn.00402a36
push esi
lea ecx, [ebp - 0x458]
push ecx
push edi
mov byte [ebp - 4], 1
call fcn.00407cd9
mov esi, 0x10
add esp, 0xc
cmp dword [ebp - 0x444], esi
jb 0x4bc4ce
mov edx, dword [ebp - 0x458]
push edx
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x444], 0xf
mov dword [ebp - 0x448], ebx
mov byte [ebp - 0x458], bl
cmp dword [ebp - 0x428], esi
jb 0x4bc4fb
mov eax, dword [ebp - 0x43c]
push eax
call fcn.0053ed60
add esp, 4
mov eax, edi
jmp 0x4bce6b
push str.WSCSetApplicationCategory
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x5b8], eax
cmp eax, ebx
jne 0x4bc5d4
push 0x35
push str.Failed_finding_WSCSetApplicationCategory_with_error:
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0x428], 0xf
mov dword [ebp - 0x42c], ebx
mov byte [ebp - 0x43c], bl
call fcn.00402a36
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x458]
push ecx
call fcn.004080a8
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 3
call fcn.0040373d
cmp dword [ebp - 0x444], 0x10
mov byte [ebp - 4], 2
jb 0x4bc590
mov edx, dword [ebp - 0x458]
push edx
call fcn.0053ed60
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [ebp - 0x43c]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
push eax
mov ecx, edi
mov byte [edi], bl
call fcn.00401604
cmp dword [ebp - 0x428], 0x10
jb 0x4bc4fb
mov ecx, dword [ebp - 0x43c]
push ecx
call fcn.0053ed60
add esp, 4
mov eax, edi
jmp 0x4bce6b
mov dword [ebp - 0x5ac], ebx
cmp byte [ebp + 0xc], bl
je 0x4bc5e9
mov dword [ebp - 0x5ac], 0xf00
mov dword [ebp - 0x59c], ebx
mov dword [ebp - 0x598], ebx
mov dword [ebp - 0x594], ebx
push 0x208
lea edx, [ebp - 0x420]
push edx
push ebx
mov dword [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
mov word [ebp - 0x43c], ax
mov edi, 7
lea eax, [ebp - 0x420]
mov dword [ebp - 0x428], edi
mov dword [ebp - 0x42c], ebx
lea edx, [eax + 2]
jmp 0x4bc640
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4bc640
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x420]
push ecx
lea ecx, [ebp - 0x43c]
call fcn.00403594
lea edx, [ebp - 0x43c]
push edx
lea ecx, [ebp - 0x59c]
mov byte [ebp - 4], 5
call fcn.004025ef
mov esi, 8
mov byte [ebp - 4], 4
cmp dword [ebp - 0x428], esi
jb 0x4bc698
mov eax, dword [ebp - 0x43c]
push eax
call fcn.0053ed60
add esp, 4
xor ecx, ecx
push 0x44
mov word [ebp - 0x500], cx
push str.c:program_filesmicrosoft_visual_studio_12.0common7idedevenv.exe
lea ecx, [ebp - 0x500]
mov dword [ebp - 0x4ec], edi
mov dword [ebp - 0x4f0], ebx
call fcn.00403594
push 0x4a
xor edx, edx
push str.c:program_files__x86_microsoft_visual_studio_12.0common7idedevenv.exe
lea ecx, [ebp - 0x538]
mov byte [ebp - 4], 6
mov dword [ebp - 0x524], edi
mov dword [ebp - 0x528], ebx
mov word [ebp - 0x538], dx
call fcn.00403594
mov byte [ebp - 4], 7
call fcn.00401cb7
mov ecx, eax
call fcn.00406690
test al, al
je 0x4bc713
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x538]
push eax
lea ecx, [ebp - 0x500]
call fcn.0040566e
lea ecx, [ebp - 0x500]
push ecx
lea ecx, [ebp - 0x59c]
call fcn.00406965
push 0x4e
xor edx, edx
push str.c:program_filesmicrosoft_sql_server110_tools_binnmanagementstudio_ssms.exe
lea ecx, [ebp - 0x4ac]
mov dword [ebp - 0x498], edi
mov dword [ebp - 0x49c], ebx
mov word [ebp - 0x4ac], dx
call fcn.00403594
push 0x54
xor eax, eax
push str.c:program_files__x86_microsoft_sql_server110_tools_binnmanagementstudio_ssms.exe
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 8
mov dword [ebp - 0x55c], edi
mov dword [ebp - 0x560], ebx
mov word [ebp - 0x570], ax
call fcn.00403594
mov byte [ebp - 4], 9
call fcn.00401cb7
mov ecx, eax
call fcn.00406690
test al, al
je 0x4bc7a0
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x570]
push ecx
lea ecx, [ebp - 0x4ac]
call fcn.0040566e
lea edx, [ebp - 0x4ac]
push edx
lea ecx, [ebp - 0x59c]
call fcn.00406965
push 0x33
xor eax, eax
push str.c:program_Filesmicrosoft_officeoffice15lync.exe
lea ecx, [ebp - 0x4c8]
mov dword [ebp - 0x4b4], edi
mov dword [ebp - 0x4b8], ebx
mov word [ebp - 0x4c8], ax
call fcn.00403594
xor ecx, ecx
push 0x39
mov word [ebp - 0x58c], cx
push str.c:program_Files__x86_microsoft_officeoffice15lync.exe
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x578], edi
mov dword [ebp - 0x57c], ebx
call fcn.00403594
mov byte [ebp - 4], 0xb
call fcn.00401cb7
mov ecx, eax
call fcn.00406690
test al, al
je 0x4bc82d
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x58c]
push edx
lea ecx, [ebp - 0x4c8]
call fcn.0040566e
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x59c]
call fcn.00406965
xor ecx, ecx
push 0x50
mov word [ebp - 0x554], cx
push str.C:Program_FilesMicrosoft_SQL_ServerMSSQL11.SQLEXPRESSMSSQLBinn_sqlservr.exe
lea ecx, [ebp - 0x554]
mov dword [ebp - 0x540], edi
mov dword [ebp - 0x544], ebx
call fcn.00403594
lea edx, [ebp - 0x554]
push edx
lea ecx, [ebp - 0x59c]
mov byte [ebp - 4], 0xc
call fcn.00406965
call fcn.0040623a
cmp eax, 0xb
je 0x4bc899
cmp eax, 0xc
je 0x4bc899
cmp eax, 0xd
je 0x4bc899
cmp eax, 0xe
jne 0x4bcb07
push 0x104
lea ecx, [ebp - 0x218]
xor eax, eax
push ecx
mov word [ebp - 0x218], ax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor edx, edx
lea eax, [ebp - 0x218]
mov word [ebp - 0x43c], dx
mov dword [ebp - 0x428], edi
mov dword [ebp - 0x42c], ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4bc8d2
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x43c]
call fcn.00403594
push 0xffffffffffffffff
xor ecx, ecx
push ebx
lea edx, [ebp - 0x43c]
mov word [ebp - 0x458], cx
push edx
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x444], edi
mov dword [ebp - 0x448], ebx
call fcn.0040566e
push 9
push str._vmms.exe
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0xe
call fcn.0040605a
lea eax, [ebp - 0x458]
push eax
lea ecx, [ebp - 0x59c]
call fcn.00406965
push 0xffffffffffffffff
xor ecx, ecx
push ebx
lea edx, [ebp - 0x43c]
mov word [ebp - 0x490], cx
push edx
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x47c], edi
mov dword [ebp - 0x480], ebx
call fcn.0040566e
push 9
push str._vmwp.exe
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0xf
call fcn.0040605a
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x59c]
call fcn.00406965
push 0xffffffffffffffff
xor ecx, ecx
push ebx
lea edx, [ebp - 0x43c]
mov word [ebp - 0x4e4], cx
push edx
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 0x4d0], edi
mov dword [ebp - 0x4d4], ebx
call fcn.0040566e
push 0xe
push str._vmconnect.exe
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x10
call fcn.0040605a
lea eax, [ebp - 0x4e4]
push eax
lea ecx, [ebp - 0x59c]
call fcn.00406965
push 0xffffffffffffffff
xor ecx, ecx
push ebx
lea edx, [ebp - 0x43c]
mov word [ebp - 0x51c], cx
push edx
lea ecx, [ebp - 0x51c]
mov dword [ebp - 0x508], edi
mov dword [ebp - 0x50c], ebx
call fcn.0040566e
mov byte [ebp - 4], 0x11
push 0x11
push str.inetsrvw3wp.exe
lea ecx, [ebp - 0x51c]
call fcn.0040605a
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x59c]
call fcn.00406965
cmp dword [ebp - 0x508], esi
jb 0x4bca57
mov ecx, dword [ebp - 0x51c]
push ecx
call fcn.0053ed60
add esp, 4
xor edx, edx
mov dword [ebp - 0x508], edi
mov dword [ebp - 0x50c], ebx
mov word [ebp - 0x51c], dx
cmp dword [ebp - 0x4d0], esi
jb 0x4bca83
mov eax, dword [ebp - 0x4e4]
push eax
call fcn.0053ed60
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x4d0], edi
mov dword [ebp - 0x4d4], ebx
mov word [ebp - 0x4e4], cx
cmp dword [ebp - 0x47c], esi
jb 0x4bcaaf
mov edx, dword [ebp - 0x490]
push edx
call fcn.0053ed60
add esp, 4
xor eax, eax
mov dword [ebp - 0x47c], edi
mov dword [ebp - 0x480], ebx
mov word [ebp - 0x490], ax
cmp dword [ebp - 0x444], esi
jb 0x4bcadb
mov ecx, dword [ebp - 0x458]
push ecx
call fcn.0053ed60
add esp, 4
xor edx, edx
mov dword [ebp - 0x444], edi
mov dword [ebp - 0x448], ebx
mov word [ebp - 0x458], dx
cmp dword [ebp - 0x428], esi
jb 0x4bcb07
mov eax, dword [ebp - 0x43c]
push eax
call fcn.0053ed60
add esp, 4
mov esi, 0xf
mov dword [ebp - 0x460], esi
mov dword [ebp - 0x464], ebx
mov byte [ebp - 0x474], bl
mov ecx, dword [ebp - 0x598]
sub ecx, dword [ebp - 0x59c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov byte [ebp - 4], 0x12
je 0x4bccad
mov esi, dword [ebp - 0x59c]
mov dword [ebp - 0x5a4], eax
jmp 0x4bcb60
mov dword [ebp - 0x5b4], ebx
mov dword [ebp - 0x5b0], ebx
cmp dword [esi + 0x14], 8
mov ecx, dword [esi + 0x10]
jb 0x4bcb79
mov eax, dword [esi]
jmp 0x4bcb7b
mov eax, esi
lea edx, [ebp - 0x5b0]
push edx
lea edx, [ebp - 0x5b4]
push edx
push dword [ebp - 0x5ac]
push ebx
push ebx
push ecx
push eax
call dword [ebp - 0x5b8]
cmp eax, ebx
je 0x4bcc99
cmp dword [ebp - 0x464], ebx
je 0x4bcbb8
push 0x20
push 1
lea ecx, [ebp - 0x474]
call fcn.00405ea2
push 0x35
push str.Failed_calling_WSCSetApplicationCategory_with_error:
lea ecx, [ebp - 0x474]
call fcn.00403dd2
mov eax, dword [ebp - 0x5b0]
push eax
lea ecx, [ebp - 0x43c]
push ecx
call fcn.004080a8
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x474]
mov byte [ebp - 4], 0x13
call fcn.0040373d
mov edi, 0x10
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x428], edi
jb 0x4bcc13
mov edx, dword [ebp - 0x43c]
push edx
call fcn.0053ed60
add esp, 4
lea eax, [ebp - 0x458]
push esi
push eax
call fcn.00406569
push eax
lea ecx, [ebp - 0x43c]
push str._for_path:
push ecx
mov byte [ebp - 4], 0x14
call fcn.0040367f
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x474]
mov byte [ebp - 4], 0x15
call fcn.0040373d
cmp dword [ebp - 0x428], edi
jb 0x4bcc63
mov edx, dword [ebp - 0x43c]
push edx
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x428], 0xf
mov dword [ebp - 0x42c], ebx
mov byte [ebp - 0x43c], bl
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x444], edi
jb 0x4bcc94
mov eax, dword [ebp - 0x458]
push eax
call fcn.0053ed60
add esp, 4
mov edi, 7
add esi, 0x1c
dec dword [ebp - 0x5a4]
jne 0x4bcb60
mov esi, 0xf
mov ecx, dword [ebp - 0x5a0]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 0x5a8]
lea edx, [ebp - 0x474]
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00401604
cmp dword [ebp - 0x460], 0x10
jb 0x4bccec
mov eax, dword [ebp - 0x474]
push eax
call fcn.0053ed60
add esp, 4
mov dword [ebp - 0x460], esi
mov esi, 8
mov dword [ebp - 0x464], ebx
mov byte [ebp - 0x474], bl
cmp dword [ebp - 0x540], esi
jb 0x4bcd1a
mov ecx, dword [ebp - 0x554]
push ecx
call fcn.0053ed60
add esp, 4
xor edx, edx
mov dword [ebp - 0x540], edi
mov dword [ebp - 0x544], ebx
mov word [ebp - 0x554], dx
cmp dword [ebp - 0x578], esi
jb 0x4bcd46
mov eax, dword [ebp - 0x58c]
push eax
call fcn.0053ed60
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x578], edi
mov dword [ebp - 0x57c], ebx
mov word [ebp - 0x58c], cx
cmp dword [ebp - 0x4b4], esi
jb 0x4bcd72
mov edx, dword [ebp - 0x4c8]
push edx
call fcn.0053ed60
add esp, 4
xor eax, eax
mov dword [ebp - 0x4b4], edi
mov dword [ebp - 0x4b8], ebx
mov word [ebp - 0x4c8], ax
cmp dword [ebp - 0x55c], esi
jb 0x4bcd9e
mov ecx, dword [ebp - 0x570]
push ecx
call fcn.0053ed60
add esp, 4
xor edx, edx
mov dword [ebp - 0x55c], edi
mov dword [ebp - 0x560], ebx
mov word [ebp - 0x570], dx
cmp dword [ebp - 0x498], esi
jb 0x4bcdca
mov eax, dword [ebp - 0x4ac]
push eax
call fcn.0053ed60
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x498], edi
mov dword [ebp - 0x49c], ebx
mov word [ebp - 0x4ac], cx
cmp dword [ebp - 0x524], esi
jb 0x4bcdf6
mov edx, dword [ebp - 0x538]
push edx
call fcn.0053ed60
add esp, 4
xor eax, eax
mov dword [ebp - 0x524], edi
mov dword [ebp - 0x528], ebx
mov word [ebp - 0x538], ax
cmp dword [ebp - 0x4ec], esi
jb 0x4bce22
mov ecx, dword [ebp - 0x500]
push ecx
call fcn.0053ed60
add esp, 4
mov esi, dword [ebp - 0x59c]
xor edx, edx
mov dword [ebp - 0x4ec], edi
mov dword [ebp - 0x4f0], ebx
mov word [ebp - 0x500], dx
cmp esi, ebx
je 0x4bce65
mov eax, dword [ebp - 0x5a0]
mov edx, dword [ebp - 0x598]
push eax
lea ecx, [ebp - 0x590]
push ecx
push edx
push esi
call fcn.00402239
push esi
call fcn.0053ed60
add esp, 0x14
mov eax, dword [ebp - 0x5a8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0053fd20
mov esp, ebp
pop ebp
ret