Function at 0x492a70
Capabilities:
Check if file exists
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x478
mov eax, dword [0x58c758]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
xor eax, eax
mov word [ebp - 0x10], ax
xor ecx, ecx
mov dword [ebp - 0xe], ecx
mov dword [ebp - 0xa], ecx
mov dword [ebp - 6], ecx
mov word [ebp - 2], cx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x238], eax
lea edx, [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0
mov eax, dword [ebp - 0x238]
xor edx, edx
mov ecx, 0x3e8
div ecx
add eax, 0x14
push eax
lea edx, [ebp - 0x10]
push edx
call fcn.0048a2c0
add esp, 0xc
mov dword [ebp - 0x228], 0
xor eax, eax
mov dword [ebp - 0x224], eax
lea ecx, [ebp - 0x228]
push ecx
lea edx, [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
xor eax, eax
mov word [ebp - 0x220], ax
push 0x206
push 0
lea ecx, [ebp - 0x21e]
push ecx
call fcn.004b0ac0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x440], dx
push 0x206
push 0
lea eax, [ebp - 0x43e]
push eax
call fcn.004b0ac0
add esp, 0xc
push 0x208
lea ecx, [ebp - 0x220]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
jne 0x492b51
mov eax, 0xdac0
jmp 0x492d47
push str.smss.exe
lea edx, [ebp - 0x220]
push edx
lea eax, [ebp - 0x440]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [ebp - 0x440]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x492b85
mov eax, 0x101d0
jmp 0x492d47
push 0
push 0
lea edx, [ebp - 0x440]
push edx
push str.smss.exe
call fcn.00492e20
add esp, 0x10
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jne 0x492bb6
mov eax, 0x109a0
jmp 0x492d47
mov dword [ebp - 0x478], 0
xor eax, eax
mov dword [ebp - 0x474], eax
mov dword [ebp - 0x230], 0
xor ecx, ecx
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x458], 0
xor edx, edx
mov dword [ebp - 0x454], edx
mov dword [ebp - 0x460], 0
xor eax, eax
mov dword [ebp - 0x45c], eax
lea ecx, [ebp - 0x460]
push ecx
lea edx, [ebp - 0x458]
push edx
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x478]
push ecx
mov edx, dword [ebp - 0x234]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x234], 0
cmp dword [ebp - 0x464], 0
jne 0x492c57
mov eax, 0x10d88
jmp 0x492d47
lea ecx, [ebp - 0x460]
push ecx
lea edx, [ebp - 0x478]
push edx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
jne 0x492c79
mov eax, 0x101d0
jmp 0x492d47
mov eax, dword [ebp - 0x224]
xor edx, edx
mov cl, 0x20
call fcn.004b5770
mov ecx, dword [ebp - 0x228]
xor esi, esi
add eax, ecx
adc edx, esi
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], edx
mov eax, dword [ebp - 0x45c]
xor edx, edx
mov cl, 0x20
call fcn.004b5770
mov ecx, dword [ebp - 0x460]
xor esi, esi
add eax, ecx
adc edx, esi
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], edx
mov edx, dword [ebp - 0x44c]
cmp edx, dword [ebp - 0x46c]
ja 0x492cec
jb 0x492ce5
mov eax, dword [ebp - 0x450]
cmp eax, dword [ebp - 0x470]
ja 0x492cec
mov eax, 0xafc8
jmp 0x492d47
mov ecx, dword [ebp - 0x450]
sub ecx, dword [ebp - 0x470]
mov edx, dword [ebp - 0x44c]
sbb edx, dword [ebp - 0x46c]
push 0
push 0x989680
push edx
push ecx
call fcn.004b6e70
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0x1e
jae 0x492d28
mov eax, 0x7530
jmp 0x492d47
cmp dword [ebp - 0x444], 0x12c
jbe 0x492d3b
mov eax, 0x493e0
jmp 0x492d47
mov eax, dword [ebp - 0x444]
imul eax, eax, 0x3e8
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b0a79
mov esp, ebp
pop ebp
ret