Function at 0x407bd0
Capabilities:
Check if file exists
Get common file path

Disassembly:
sub esp, 0xc3c
mov eax, dword [0x437164]
xor eax, esp
mov dword [esp + 0xc38], eax
push ebx
push ebp
push esi
push edi
xor esi, esi
push 0x206
lea eax, [esp + 0xa46]
mov edi, ecx
push esi
push eax
mov dword [esp + 0x1c], edi
xor ebx, ebx
xor ebp, ebp
mov word [esp + 0xa4c], si
call fcn.00408700
push 0x206
lea ecx, [esp + 0x642]
push esi
push ecx
mov word [esp + 0x648], si
call fcn.00408700
push 0x206
lea edx, [esp + 0x446]
push esi
push edx
mov word [esp + 0x44c], si
call fcn.00408700
push 0x206
lea eax, [esp + 0x862]
push esi
push eax
mov word [esp + 0x868], si
call fcn.00408700
push 0x206
lea ecx, [esp + 0x256]
push esi
push ecx
mov word [esp + 0x25c], si
call fcn.00408700
push 0x206
lea edx, [esp + 0x5a]
push esi
push edx
mov word [esp + 0x60], si
call fcn.00408700
add esp, 0x48
push esi
push 0x1a
lea eax, [esp + 0xa48]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
xor eax, eax
jmp 0x407cb0
movzx ecx, word [esp + eax + 0xa40]
mov word [esp + eax + 0x220], cx
add eax, 2
cmp cx, si
jne 0x407cb0
lea ecx, [esp + 0x220]
push 0x5c
push ecx
call fcn.004085e0
add esp, 8
cmp eax, esi
jne 0x407ce5
mov ecx, edi
jmp 0x407ebc
mov word [eax], si
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x630], cx
add eax, 2
cmp cx, si
jne 0x407cf0
lea eax, [esp + 0x630]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x407d12
mov edx, dword [str.Local]
mov ecx, dword [0x42d790]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [eax], edx
mov edx, dword [0x42d794]
mov dword [eax + 4], ecx
mov cx, word [0x42d798]
mov dword [eax + 8], edx
lea edx, [esp + 0x630]
push edx
mov word [eax + 0xc], cx
call edi
test eax, eax
je 0x407d5c
mov ebx, 1
xor eax, eax
mov edi, edi
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x428], cx
add eax, 2
cmp cx, si
jne 0x407d60
lea eax, [esp + 0x428]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x407d82
mov ecx, dword [str.LocalLow]
mov edx, dword [0x42d77c]
mov dword [eax], ecx
mov ecx, dword [0x42d780]
mov dword [eax + 4], edx
mov edx, dword [0x42d784]
mov dword [eax + 8], ecx
mov ecx, dword [0x42d788]
mov dword [eax + 0xc], edx
lea edx, [esp + 0x428]
push edx
mov dword [eax + 0x10], ecx
call edi
test eax, eax
je 0x407dcd
mov ebp, 1
xor eax, eax
nop
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x838], cx
add eax, 2
cmp cx, si
jne 0x407dd0
lea eax, [esp + 0x838]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x407df2
mov ecx, dword [str.Roaming]
mov edx, dword [0x42d768]
mov dword [eax], ecx
mov ecx, dword [0x42d76c]
mov dword [eax + 4], edx
mov edx, dword [0x42d770]
mov dword [eax + 8], ecx
mov cx, word [0x42d774]
mov dword [eax + 0xc], edx
lea edx, [esp + 0x838]
push edx
mov word [eax + 0x10], cx
call edi
test eax, eax
mov eax, 1
jne 0x407e41
mov eax, esi
cmp ebx, esi
je 0x407eb6
cmp ebp, esi
je 0x407eb6
cmp eax, esi
je 0x407eb6
mov ebx, dword [esp + 0x10]
mov ecx, ebx
call fcn.00405a00
test eax, eax
je 0x407eba
push str.GuangSu.users
lea eax, [esp + 0x42c]
push eax
lea ecx, [esp + 0x20]
push str._s_s_
push ecx
call fcn.00408610
add esp, 0x10
lea edx, [esp + 0x18]
push edx
call edi
test eax, eax
jne 0x407e90
lea eax, [esp + 0x18]
push eax
call fcn.00408060
lea eax, [esp + 0x18]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x407e97
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [ebx + 0x1c]
call fcn.00401f70
jmp 0x407ec1
mov ebx, dword [esp + 0x10]
mov ecx, ebx
call fcn.004077c0
mov ecx, dword [esp + 0xc48]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004086c2
add esp, 0xc3c
ret