Function at 0x426ba0
Capabilities:
Get common file path

Disassembly:
sub esp, 0xc70
mov eax, dword [0x4bc7b8]
xor eax, esp
mov dword [esp + 0xc6c], eax
push ebx
push ebp
mov ebp, dword [esp + 0xc7c]
push esi
push edi
xor edi, edi
push 0x206
lea eax, [esp + 0x45e]
push edi
push eax
mov word [esp + 0x464], di
call fcn.0046adc0
push 0x206
lea ecx, [esp + 0x262]
push edi
push ecx
mov word [esp + 0x268], di
call fcn.0046adc0
push 0x206
lea edx, [esp + 0x66]
push edi
push edx
call fcn.0046adc0
push 0x206
lea eax, [esp + 0x892]
push edi
push eax
mov word [esp + 0x898], di
call fcn.0046adc0
mov eax, str.ljp1100inst
add esp, 0x30
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x426c30
sub eax, edx
sar eax, 1
mov word [esp + 0x48], di
je 0x426c57
push str.ljp1100inst
push 0x104
lea ecx, [esp + 0x50]
push ecx
jmp 0x426c66
push 0x4a2764
push 0x104
lea edx, [esp + 0x50]
push edx
call fcn.00467e2b
lea eax, [esp + 0x54]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x426c75
sub eax, edx
sar eax, 1
cmp word [esp + eax*2 + 0x40], 0x2e
jne 0x426ca7
lea eax, [esp + 0x48]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x426c93
sub eax, edx
sar eax, 1
mov word [esp + eax*2 + 0x40], di
lea eax, [esp + 0x48]
push 0x5c
push eax
call fcn.004695f9
add esp, 8
test eax, eax
jne 0x426d0d
push 0x104
lea ecx, [esp + 0x86c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push str.Temp
lea edx, [esp + 0x86c]
push 0x104
push edx
call fcn.0046837e
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x878]
push ecx
push 0x498c0c
lea edx, [esp + 0x268]
push 0x104
push edx
call fcn.00468098
add esp, 0x20
jmp 0x426d2c
lea eax, [esp + 0x48]
push eax
push 0x49a8a0
lea ecx, [esp + 0x258]
push 0x104
push ecx
call fcn.00468098
add esp, 0x10
lea edx, [esp + 0x250]
push edx
push str._s.log
lea eax, [esp + 0x460]
push 0x104
push eax
call fcn.00468098
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x46c]
push edx
call fcn.00469718
add esp, 0x18
test eax, eax
je 0x426d71
lea ecx, [esp + 0x458]
push ecx
jmp 0x426e8e
cmp dword [esp + 0x2c], 0x7a120
jl 0x426e86
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, 4
lea ebx, [ebx]
push 0x206
lea eax, [esp + 0x666]
push edi
push eax
mov word [esp + 0x66c], di
call fcn.0046adc0
push 0x206
lea ecx, [esp + 0xa82]
push edi
push ecx
mov word [esp + 0xa88], di
call fcn.0046adc0
add esp, 0x18
cmp esi, edi
jne 0x426df1
lea edx, [esp + 0x250]
push edx
push str._s.log
lea eax, [esp + 0x668]
push 0x104
push eax
call fcn.00468098
add esp, 0x10
jmp 0x426e14
push esi
lea ecx, [esp + 0x254]
push ecx
push str._s_d.log
lea edx, [esp + 0x66c]
push 0x104
push edx
call fcn.00468098
add esp, 0x14
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x664]
push ecx
call fcn.00469718
add esp, 8
cmp esi, 4
jne 0x426e3e
cmp eax, edi
jne 0x426e7d
lea edx, [esp + 0x660]
push edx
call ebx
jmp 0x426e7d
cmp eax, edi
jne 0x426e7d
lea eax, [esi + 1]
push eax
lea ecx, [esp + 0x254]
push ecx
push str._s_d.log
lea edx, [esp + 0xa7c]
push 0x104
push edx
call fcn.00468098
lea eax, [esp + 0xa84]
push eax
lea ecx, [esp + 0x678]
push ecx
call fcn.0046901e
add esp, 0x1c
sub esi, 1
jns 0x426d90
lea edx, [esp + 0x458]
push edx
lea eax, [ebp + 0x40]
push 0x104
push eax
mov word [eax], di
call fcn.00467e2b
mov ecx, dword [esp + 0xc88]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004677d8
add esp, 0xc70
ret 4