Function at 0x410630
Capabilities:
Check if file exists
Get common file path

Disassembly:
sub esp, 0xc3c
mov eax, dword [0x47edd4]
xor eax, esp
mov dword [esp + 0xc38], eax
push ebx
push ebp
push esi
push edi
xor esi, esi
push 0x206
lea eax, [esp + 0xa46]
mov edi, ecx
push esi
push eax
mov dword [esp + 0x1c], edi
xor ebx, ebx
xor ebp, ebp
mov word [esp + 0xa4c], si
call fcn.00420780
push 0x206
lea ecx, [esp + 0x642]
push esi
push ecx
mov word [esp + 0x648], si
call fcn.00420780
push 0x206
lea edx, [esp + 0x446]
push esi
push edx
mov word [esp + 0x44c], si
call fcn.00420780
push 0x206
lea eax, [esp + 0x862]
push esi
push eax
mov word [esp + 0x868], si
call fcn.00420780
push 0x206
lea ecx, [esp + 0x256]
push esi
push ecx
mov word [esp + 0x25c], si
call fcn.00420780
push 0x206
lea edx, [esp + 0x5a]
push esi
push edx
mov word [esp + 0x60], si
call fcn.00420780
add esp, 0x48
push esi
push 0x1a
lea eax, [esp + 0xa48]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
xor eax, eax
jmp 0x410710
movzx ecx, word [esp + eax + 0xa40]
mov word [esp + eax + 0x220], cx
add eax, 2
cmp cx, si
jne 0x410710
lea ecx, [esp + 0x220]
push 0x5c
push ecx
call fcn.004206b5
add esp, 8
cmp eax, esi
jne 0x410745
mov ecx, edi
jmp 0x410925
mov word [eax], si
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x630], cx
add eax, 2
cmp cx, si
jne 0x410750
lea eax, [esp + 0x630]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x410772
mov edx, dword [str.Local]
mov ecx, dword [0x46c160]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [eax], edx
mov edx, dword [0x46c164]
mov dword [eax + 4], ecx
mov cx, word [0x46c168]
mov dword [eax + 8], edx
lea edx, [esp + 0x630]
push edx
mov word [eax + 0xc], cx
call edi
test eax, eax
je 0x4107bc
mov ebx, 1
xor eax, eax
mov edi, edi
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x428], cx
add eax, 2
cmp cx, si
jne 0x4107c0
lea eax, [esp + 0x428]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x4107e2
mov ecx, dword [str.LocalLow]
mov edx, dword [0x46c14c]
mov dword [eax], ecx
mov ecx, dword [0x46c150]
mov dword [eax + 4], edx
mov edx, dword [0x46c154]
mov dword [eax + 8], ecx
mov ecx, dword [0x46c158]
mov dword [eax + 0xc], edx
lea edx, [esp + 0x428]
push edx
mov dword [eax + 0x10], ecx
call edi
test eax, eax
je 0x41082d
mov ebp, 1
xor eax, eax
nop
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x838], cx
add eax, 2
cmp cx, si
jne 0x410830
lea eax, [esp + 0x838]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x410852
mov ecx, dword [str.Roaming]
mov edx, dword [0x46c138]
mov dword [eax], ecx
mov ecx, dword [0x46c13c]
mov dword [eax + 4], edx
mov edx, dword [0x46c140]
mov dword [eax + 8], ecx
mov cx, word [0x46c144]
mov dword [eax + 0xc], edx
lea edx, [esp + 0x838]
push edx
mov word [eax + 0x10], cx
call edi
test eax, eax
mov eax, 1
jne 0x4108a1
mov eax, esi
cmp ebx, esi
je 0x41091f
cmp ebp, esi
je 0x41091f
cmp eax, esi
je 0x41091f
mov ebx, dword [esp + 0x10]
mov ecx, ebx
call fcn.0040f540
test eax, eax
je 0x410923
push str.7654.users
lea eax, [esp + 0x42c]
push eax
lea ecx, [esp + 0x20]
push str._s_s_
push ecx
call fcn.004206e5
add esp, 0x10
lea edx, [esp + 0x18]
push edx
call edi
test eax, eax
jne 0x4108f3
lea eax, [esp + 0x18]
push eax
call fcn.004109a0
add esp, 4
lea eax, [esp + 0x18]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x410900
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [ebx + 4]
call fcn.00401d60
jmp 0x41092a
mov ebx, dword [esp + 0x10]
mov ecx, ebx
call fcn.004101e0
mov ecx, dword [esp + 0xc48]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004206a6
add esp, 0xc3c
ret