Function at 0x404780
Capabilities:
Check if file exists
Get common file path

Disassembly:
sub esp, 0xc3c
mov eax, dword [0x448728]
xor eax, esp
mov dword [esp + 0xc38], eax
push ebx
push ebp
push esi
push edi
xor esi, esi
push 0x206
lea eax, [esp + 0xa46]
mov edi, ecx
push esi
push eax
mov dword [esp + 0x1c], edi
xor ebx, ebx
xor ebp, ebp
mov word [esp + 0xa4c], si
call fcn.00423e40
push 0x206
lea ecx, [esp + 0x642]
push esi
push ecx
mov word [esp + 0x648], si
call fcn.00423e40
push 0x206
lea edx, [esp + 0x446]
push esi
push edx
mov word [esp + 0x44c], si
call fcn.00423e40
push 0x206
lea eax, [esp + 0x862]
push esi
push eax
mov word [esp + 0x868], si
call fcn.00423e40
push 0x206
lea ecx, [esp + 0x256]
push esi
push ecx
mov word [esp + 0x25c], si
call fcn.00423e40
push 0x206
lea edx, [esp + 0x5a]
push esi
push edx
mov word [esp + 0x60], si
call fcn.00423e40
add esp, 0x48
push esi
push 0x1a
lea eax, [esp + 0xa48]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
xor eax, eax
jmp 0x404860
movzx ecx, word [esp + eax + 0xa40]
mov word [esp + eax + 0x220], cx
add eax, 2
cmp cx, si
jne 0x404860
lea ecx, [esp + 0x220]
push 0x5c
push ecx
call fcn.00421e9d
add esp, 8
cmp eax, esi
jne 0x404895
mov ecx, edi
jmp 0x404a67
mov word [eax], si
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x630], cx
add eax, 2
cmp cx, si
jne 0x4048a0
lea eax, [esp + 0x630]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x4048c2
mov edx, dword [str.Local]
mov ecx, dword [0x43ecd0]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [eax], edx
mov edx, dword [0x43ecd4]
mov dword [eax + 4], ecx
mov cx, word [0x43ecd8]
mov dword [eax + 8], edx
lea edx, [esp + 0x630]
push edx
mov word [eax + 0xc], cx
call edi
test eax, eax
je 0x40490c
mov ebx, 1
xor eax, eax
mov edi, edi
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x428], cx
add eax, 2
cmp cx, si
jne 0x404910
lea eax, [esp + 0x428]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x404932
mov ecx, dword [str.LocalLow]
mov edx, dword [0x43ece0]
mov dword [eax], ecx
mov ecx, dword [0x43ece4]
mov dword [eax + 4], edx
mov edx, dword [0x43ece8]
mov dword [eax + 8], ecx
mov ecx, dword [0x43ecec]
mov dword [eax + 0xc], edx
lea edx, [esp + 0x428]
push edx
mov dword [eax + 0x10], ecx
call edi
test eax, eax
je 0x40497d
mov ebp, 1
xor eax, eax
nop
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x838], cx
add eax, 2
cmp cx, si
jne 0x404980
lea eax, [esp + 0x838]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x4049a2
mov ecx, dword [str.Roaming]
mov edx, dword [0x43ecf4]
mov dword [eax], ecx
mov ecx, dword [0x43ecf8]
mov dword [eax + 4], edx
mov edx, dword [0x43ecfc]
mov dword [eax + 8], ecx
mov cx, word [0x43ed00]
mov dword [eax + 0xc], edx
lea edx, [esp + 0x838]
push edx
mov word [eax + 0x10], cx
call edi
test eax, eax
mov eax, 1
jne 0x4049f1
mov eax, esi
cmp ebx, esi
je 0x404a63
cmp ebp, esi
je 0x404a63
cmp eax, esi
je 0x404a63
call fcn.00406670
test eax, eax
je 0x404a63
push str.DongFangIME
lea eax, [esp + 0x42c]
push eax
lea ecx, [esp + 0x20]
push 0x43ed1c
push ecx
call fcn.00421a5b
add esp, 0x10
lea edx, [esp + 0x18]
push edx
call edi
test eax, eax
jne 0x404a39
lea eax, [esp + 0x18]
call fcn.00406b30
lea eax, [esp + 0x18]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x404a40
mov esi, dword [esp + 0x10]
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x1c]
push eax
add esi, 0x20
call fcn.00401210
jmp 0x404a6c
mov ecx, dword [esp + 0x10]
call fcn.00406700
mov ecx, dword [esp + 0xc48]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0042178f
add esp, 0xc3c
ret