Function at 0x404a90
Capabilities:
Check if file exists
Get common file path

Disassembly:
sub esp, 0xc3c
mov eax, dword [0x448728]
xor eax, esp
mov dword [esp + 0xc38], eax
push ebx
push ebp
push esi
push edi
xor esi, esi
push 0x206
lea eax, [esp + 0xa46]
mov edi, ecx
push esi
push eax
mov dword [esp + 0x1c], edi
xor ebp, ebp
xor ebx, ebx
mov word [esp + 0xa4c], si
call fcn.00423e40
push 0x206
lea ecx, [esp + 0x642]
push esi
push ecx
mov word [esp + 0x648], si
call fcn.00423e40
push 0x206
lea edx, [esp + 0x446]
push esi
push edx
mov word [esp + 0x44c], si
call fcn.00423e40
push 0x206
lea eax, [esp + 0x862]
push esi
push eax
mov word [esp + 0x868], si
call fcn.00423e40
push 0x206
lea ecx, [esp + 0x256]
push esi
push ecx
mov word [esp + 0x25c], si
call fcn.00423e40
push 0x206
lea edx, [esp + 0x5a]
push esi
push edx
mov word [esp + 0x60], si
call fcn.00423e40
add esp, 0x48
push esi
push 0x1a
lea eax, [esp + 0xa48]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
xor eax, eax
jmp 0x404b70
movzx ecx, word [esp + eax + 0xa40]
mov word [esp + eax + 0x220], cx
add eax, 2
cmp cx, si
jne 0x404b70
lea ecx, [esp + 0x220]
push 0x5c
push ecx
call fcn.00421e9d
add esp, 8
cmp eax, esi
jne 0x404ba5
mov ebx, edi
jmp 0x404d77
mov word [eax], si
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x630], cx
add eax, 2
cmp cx, si
jne 0x404bb0
lea eax, [esp + 0x630]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x404bd2
mov edx, dword [str.Local]
mov ecx, dword [0x43ecd0]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [eax], edx
mov edx, dword [0x43ecd4]
mov dword [eax + 4], ecx
mov cx, word [0x43ecd8]
mov dword [eax + 8], edx
lea edx, [esp + 0x630]
push edx
mov word [eax + 0xc], cx
call edi
test eax, eax
je 0x404c1c
mov ebp, 1
xor eax, eax
mov edi, edi
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x428], cx
add eax, 2
cmp cx, si
jne 0x404c20
lea eax, [esp + 0x428]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x404c42
mov ecx, dword [str.LocalLow]
mov edx, dword [0x43ece0]
mov dword [eax], ecx
mov ecx, dword [0x43ece4]
mov dword [eax + 4], edx
mov edx, dword [0x43ece8]
mov dword [eax + 8], ecx
mov ecx, dword [0x43ecec]
mov dword [eax + 0xc], edx
lea edx, [esp + 0x428]
push edx
mov dword [eax + 0x10], ecx
call edi
test eax, eax
je 0x404c8d
mov ebx, 1
xor eax, eax
nop
movzx ecx, word [esp + eax + 0x220]
mov word [esp + eax + 0x838], cx
add eax, 2
cmp cx, si
jne 0x404c90
lea eax, [esp + 0x838]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x404cb2
mov ecx, dword [str.Roaming]
mov edx, dword [0x43ecf4]
mov dword [eax], ecx
mov ecx, dword [0x43ecf8]
mov dword [eax + 4], edx
mov edx, dword [0x43ecfc]
mov dword [eax + 8], ecx
mov cx, word [0x43ed00]
mov dword [eax + 0xc], edx
lea edx, [esp + 0x838]
push edx
mov word [eax + 0x10], cx
call edi
test eax, eax
mov eax, 1
jne 0x404d01
mov eax, esi
cmp ebp, esi
je 0x404d73
cmp ebx, esi
je 0x404d73
cmp eax, esi
je 0x404d73
call fcn.00406670
test eax, eax
je 0x404d73
push str.DongFangIME.users
lea eax, [esp + 0x42c]
push eax
lea ecx, [esp + 0x20]
push 0x43ed1c
push ecx
call fcn.00421a5b
add esp, 0x10
lea edx, [esp + 0x18]
push edx
call edi
test eax, eax
jne 0x404d49
lea eax, [esp + 0x18]
call fcn.00406b30
lea eax, [esp + 0x18]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x404d50
mov esi, dword [esp + 0x10]
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x1c]
push eax
add esi, 4
call fcn.00401210
jmp 0x404d7c
mov ebx, dword [esp + 0x10]
call fcn.00406830
mov ecx, dword [esp + 0xc48]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0042178f
add esp, 0xc3c
ret