Function at 0x4036c0
Capabilities:
Get common file path

Disassembly:
sub esp, 0xc70
mov eax, dword [0x435db4]
xor eax, esp
mov dword [esp + 0xc6c], eax
push ebx
push ebp
mov ebp, dword [esp + 0xc7c]
push esi
push edi
xor edi, edi
push 0x206
lea eax, [esp + 0x45e]
push edi
push eax
mov word [esp + 0x464], di
call fcn.004151b0
push 0x206
lea ecx, [esp + 0x262]
push edi
push ecx
mov word [esp + 0x268], di
call fcn.004151b0
push 0x206
lea edx, [esp + 0x66]
push edi
push edx
call fcn.004151b0
push 0x206
lea eax, [esp + 0x892]
push edi
push eax
mov word [esp + 0x898], di
call fcn.004151b0
mov eax, 0x42f080
add esp, 0x30
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x403750
sub eax, edx
sar eax, 1
mov word [esp + 0x48], di
je 0x403777
push 0x42f080
push 0x104
lea ecx, [esp + 0x50]
push ecx
jmp 0x403786
push 0x42f960
push 0x104
lea edx, [esp + 0x50]
push edx
call fcn.00413404
lea eax, [esp + 0x54]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x403795
sub eax, edx
sar eax, 1
cmp word [esp + eax*2 + 0x40], 0x2e
jne 0x4037c7
lea eax, [esp + 0x48]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4037b3
sub eax, edx
sar eax, 1
mov word [esp + eax*2 + 0x40], di
lea eax, [esp + 0x48]
push 0x5c
push eax
call fcn.00413d74
add esp, 8
test eax, eax
jne 0x40382d
push 0x104
lea ecx, [esp + 0x86c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push str.Temp
lea edx, [esp + 0x86c]
push 0x104
push edx
call fcn.004131a5
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x878]
push ecx
push 0x42ec88
lea edx, [esp + 0x268]
push 0x104
push edx
call fcn.00413072
add esp, 0x20
jmp 0x40384c
lea eax, [esp + 0x48]
push eax
push 0x42f984
lea ecx, [esp + 0x258]
push 0x104
push ecx
call fcn.00413072
add esp, 0x10
lea edx, [esp + 0x250]
push edx
push str._s.log
lea eax, [esp + 0x460]
push 0x104
push eax
call fcn.00413072
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x46c]
push edx
call fcn.00412cc0
add esp, 0x18
test eax, eax
je 0x403891
lea ecx, [esp + 0x458]
push ecx
jmp 0x4039ae
cmp dword [esp + 0x2c], 0x7a120
jl 0x4039a6
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, 4
lea ebx, [ebx]
push 0x206
lea eax, [esp + 0x666]
push edi
push eax
mov word [esp + 0x66c], di
call fcn.004151b0
push 0x206
lea ecx, [esp + 0xa82]
push edi
push ecx
mov word [esp + 0xa88], di
call fcn.004151b0
add esp, 0x18
cmp esi, edi
jne 0x403911
lea edx, [esp + 0x250]
push edx
push str._s.log
lea eax, [esp + 0x668]
push 0x104
push eax
call fcn.00413072
add esp, 0x10
jmp 0x403934
push esi
lea ecx, [esp + 0x254]
push ecx
push str._s_d.log
lea edx, [esp + 0x66c]
push 0x104
push edx
call fcn.00413072
add esp, 0x14
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x664]
push ecx
call fcn.00412cc0
add esp, 8
cmp esi, 4
jne 0x40395e
cmp eax, edi
jne 0x40399d
lea edx, [esp + 0x660]
push edx
call ebx
jmp 0x40399d
cmp eax, edi
jne 0x40399d
lea eax, [esi + 1]
push eax
lea ecx, [esp + 0x254]
push ecx
push str._s_d.log
lea edx, [esp + 0xa7c]
push 0x104
push edx
call fcn.00413072
lea eax, [esp + 0xa84]
push eax
lea ecx, [esp + 0x678]
push ecx
call fcn.00413d96
add esp, 0x1c
sub esi, 1
jns 0x4038b0
lea edx, [esp + 0x458]
push edx
lea eax, [ebp + 0x40]
push 0x104
push eax
mov word [eax], di
call fcn.00413404
mov ecx, dword [esp + 0xc88]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00412bb4
add esp, 0xc70
ret 4