Function at 0x4602a0
Capabilities:
Check if file exists
Get common file path
Get file attributes
Terminate process

Disassembly:
sub esp, 0x14
push ebx
push ebp
push esi
mov esi, dword [0x424748]
push edi
push 0x4072f8
push str.KERNEL32.dll
call fcn.00462a36
xor ebx, ebx
cmp eax, ebx
je 0x4602d4
call eax
movzx eax, ax
push eax
push 0x42b000
call fcn.0046269a
jmp 0x46031c
mov edi, 0x420d40
mov dword [0x42b000], 0x7830
push edi
push ebx
push 0x4072d0
push 0x80000001
call fcn.00462630
cmp byte [0x420d40], bl
jne 0x460311
push edi
push 0x4072c8
push 0x4072a0
push 0x80000003
call fcn.00462630
push edi
push 0x42b000
call sub.KERNEL32.dll_GetSystemDirectoryA
call fcn.0046056c
mov eax, dword [0x424750]
mov ebp, 0x42a400
and eax, 0x20
push ebp
mov dword [0x4247c0], eax
call fcn.0046230f
test eax, eax
jne 0x4603c1
mov ecx, dword [esi + 0x48]
cmp ecx, ebx
je 0x4603c1
mov edx, dword [esi + 0x4c]
mov eax, dword [0x424778]
mov edi, 0x4236e0
add edx, eax
push edi
add ecx, eax
push edx
push ecx
push dword [esi + 0x44]
call fcn.00462630
mov al, byte [0x4236e0]
cmp al, bl
je 0x4603c1
cmp al, 0x22
jne 0x460380
mov edi, 0x4236e1
push 0x22
push edi
call fcn.0046225a
mov byte [eax], bl
push edi
call sub.KERNEL32.dll_lstrcatA
lea eax, [eax + edi - 4]
cmp eax, edi
jbe 0x4603b4
push str..exe
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push edi
call fcn.0046222f
push eax
push ebp
call fcn.0046273c
push ebp
call fcn.0046230f
test eax, eax
jne 0x4603d7
push dword [esi + 0x118]
push ebp
call fcn.0046275e
push 0x8040
push ebx
push ebx
push 1
push 0x67
push dword [0x424740]
call dword [sym.imp.USER32.dll_GetDC]
mov dword [0x423f28], eax
cmp dword [esi + 0x50], 0xffffffff
mov edi, 0x423ee0
je 0x46048b
mov ecx, dword [0x424740]
mov dword [0x423ef4], eax
lea eax, [esp + 0x10]
push edi
mov dword [esp + 0x14], 0x624e5f
mov dword [0x423ee4], 0x401000
mov dword [0x423ef0], ecx
mov dword [0x423f04], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
test ax, ax
je 0x460562
lea eax, [esp + 0x14]
push ebx
push eax
push ebx
push 0x30
call dword [sym.imp.USER32.dll_CreateWindowExA]
push ebx
push dword [0x424740]
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x20]
push ebx
push ebx
push eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
push eax
lea eax, [esp + 0x28]
push dword [esp + 0x30]
push dword [esp + 0x30]
push 0x80000000
push ebx
push eax
push 0x80
call dword [sym.imp.USER32.dll_GetClassInfoA]
mov dword [0x420d18], eax
push ebx
call fcn.0045e198
test eax, eax
je 0x46049d
push 2
pop eax
jmp 0x460564
call fcn.0046056c
cmp dword [0x4247e0], ebx
jne 0x460539
push 5
push dword [0x420d18]
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov ebp, str.RichEd20.dll
push ebp
call esi
test eax, eax
jne 0x4604da
push ebp
mov word [0x4092b2], 0x3233
call esi
mov ebp, dword [sym.imp.USER32.dll_DialogBoxParamA]
mov esi, str.RichEdit20A
push edi
push esi
push ebx
call ebp
test eax, eax
jne 0x46050d
push edi
push esi
push ebx
mov byte [0x4092a8], bl
call ebp
push edi
mov dword [0x423f04], esi
mov byte [0x4092a8], 0x32
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov eax, dword [0x423f20]
push ebx
add eax, 0x69
push 0x4038b1
movzx eax, ax
push ebx
push eax
push dword [0x424740]
call dword [sym.imp.USER32.dll_CharNextA]
push 5
mov esi, eax
call fcn.0045e198
mov eax, esi
jmp 0x460564
push ebx
call fcn.00461ba2
test eax, eax
je 0x46055b
cmp dword [0x423f0c], ebx
jne 0x460495
push 2
call fcn.0045e198
jmp 0x460495
push 1
call fcn.0045e198
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret