Function at 0x41f5a4
Capabilities:
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7d4
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x3eb]
xor ebx, ebx
push 0x3e7
push ebx
push eax
mov byte [ebp - 0x3ec], bl
call fcn.00626f50
push esi
push str.RecoverAirDCPasswords
push str._n__s_Entered_____s_
call fcn.00449974
push esi
call fcn.00631510
add esp, 0x1c
cmp eax, 1
lea eax, [ebp - 0x3ec]
jbe 0x41f672
push esi
mov esi, 0x3e8
push esi
push eax
call fcn.006311ec
lea eax, [ebp - 0x3ec]
push eax
call fcn.00631510
add esp, 0x10
cmp byte [ebp + eax - 0x3ed], 0x5c
jne 0x41f63d
lea eax, [ebp - 0x3ec]
push eax
call fcn.00631510
dec eax
pop ecx
cmp eax, esi
jae 0x41f831
mov byte [ebp + eax - 0x3ec], bl
push str.Favorites.xml
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.00631246
lea eax, [ebp - 0x3ec]
push eax
call fcn.00449791
add esp, 0x10
test eax, eax
je 0x41f820
lea eax, [ebp - 0x3ec]
push eax
jmp 0x41f814
push edi
mov edi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
push eax
push ebx
push ebx
push 0x1a
push ebx
mov byte [ebp - 0x3ec], bl
call edi
mov esi, 0x3e8
test eax, eax
js 0x41f6de
push str.AirDCFavorites.xml
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.00631246
lea eax, [ebp - 0x3ec]
push eax
push str.RecoverAirDCPasswords
push str._n__s_Checking_in_appdata_location_____s_
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
call fcn.00449791
add esp, 0x1c
test eax, eax
je 0x41f6de
lea eax, [ebp - 0x3ec]
push eax
push 0x2de
call fcn.00424d47
pop ecx
pop ecx
lea eax, [ebp - 0x3ec]
mov byte [ebp - 0x3ec], bl
push eax
push ebx
push ebx
push 5
push ebx
call edi
test eax, eax
js 0x41f744
push str.AirDCFavorites.xml
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.00631246
lea eax, [ebp - 0x3ec]
push eax
push str.RecoverAirDCPasswords
push str._n__s_Checking_in_documents_location_____s_
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
call fcn.00449791
add esp, 0x1c
test eax, eax
je 0x41f744
lea eax, [ebp - 0x3ec]
push eax
push 0x2de
call fcn.00424d47
pop ecx
pop ecx
lea eax, [ebp - 0x3ec]
mov byte [ebp - 0x3ec], bl
push eax
push ebx
push ebx
push 0x26
push ebx
call edi
pop edi
test eax, eax
js 0x41f7ab
push str.AirDCSettingsFavorites.xml
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.00631246
lea eax, [ebp - 0x3ec]
push eax
push str.RecoverAirDCPasswords
push str._n__s_Checking_in_program_files_location_____s_
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
call fcn.00449791
add esp, 0x1c
test eax, eax
je 0x41f7ab
lea eax, [ebp - 0x3ec]
push eax
push 0x2de
call fcn.00424d47
pop ecx
pop ecx
cmp dword [0x716864], ebx
je 0x41f820
push 0x3e4
lea eax, [ebp - 0x7d0]
mov dword [ebp - 0x7d4], 0x5c3a43
push ebx
push eax
call fcn.00626f50
add esp, 0xc
lea eax, [ebp - 0x7d4]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
movsx eax, byte [ebp - 0x7d4]
push eax
push str._c:Program_FilesAirDCSettingsFavorites.xml
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x3ec]
push eax
call fcn.00449791
add esp, 0x14
test eax, eax
je 0x41f820
lea ecx, [ebp - 0x3ec]
push ecx
push 0x2de
call fcn.00424d47
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
xor eax, eax
pop esi
xor ecx, ebp
inc eax
pop ebx
call fcn.005fe955
leave
ret
call fcn.005fe87a
int3