Function at 0x405a8c
Capabilities:
Check if file exists
Get file attributes

Disassembly:
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, dword [0x472ddc]
push edi
push 6
call fcn.0040645d
xor ebx, ebx
cmp eax, ebx
je 0x405ab8
call eax
movzx eax, ax
push eax
push 0x4d30c0
call fcn.004060b2
jmp 0x405b13
push 0x30
pop eax
push 0x78
mov word [0x4d30c0], ax
pop eax
push ebx
mov edi, 0x447250
push edi
push ebx
mov word [0x4d30c2], ax
push str.Control_PanelDesktopResourceLocale
xor eax, eax
push 0x80000001
mov word [0x4d30c4], ax
call fcn.00406034
cmp word [0x447250], bx
jne 0x405b08
push ebx
push edi
push 0x4094d4
push str..DEFAULTControl_PanelInternational
push 0x80000003
call fcn.00406034
push edi
push 0x4d30c0
call sub.KERNEL32.dll_lstrcatW
call fcn.00403ff5
mov eax, dword [0x472e28]
and eax, 0x20
mov ebp, 0x4c70a8
push ebp
mov dword [0x472e80], eax
mov dword [0x472e9c], 0x10000
call fcn.004068df
test eax, eax
jne 0x405bd0
mov ecx, dword [esi + 0x48]
cmp ecx, ebx
je 0x405bd0
mov eax, dword [0x472df8]
mov edx, dword [esi + 0x4c]
push ebx
mov edi, str.BeforeInstall
push edi
lea edx, [eax + edx*2]
push edx
lea eax, [eax + ecx*2]
push eax
push dword [esi + 0x44]
call fcn.00406034
mov ax, word [str.BeforeInstall]
cmp ax, bx
je 0x405bd0
cmp ax, 0x22
jne 0x405b8f
push 0x22
mov edi, 0x462542
push edi
call fcn.00405e66
xor ecx, ecx
mov word [eax], cx
push edi
call sub.KERNEL32.dll_lstrlenW
lea eax, [edi + eax*2 - 8]
cmp eax, edi
jbe 0x405bc3
push str..exe
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x405bc3
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x405bbd
test al, 0x10
jne 0x405bc3
push edi
call fcn.004068b2
push edi
call fcn.00406883
push eax
push ebp
call fcn.0040616a
push ebp
call fcn.004068df
test eax, eax
jne 0x405be6
push dword [esi + 0x118]
push ebp
call fcn.00406966
test byte [0x472e28], 0x10
je 0x405c06
cmp dword [0x472e24], ebx
jne 0x405c06
call fcn.00403fd4
mov dword [0x461530], 1
push 0x8040
push ebx
push ebx
push 1
push 0x67
push dword [0x472dd8]
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [0x46ad90], eax
cmp dword [esi + 0x50], 0xffffffff
mov edi, 0x46ad60
je 0x405cc6
mov ecx, dword [0x409430]
mov dword [esp + 0x10], ecx
mov ecx, dword [0x409434]
mov dword [esp + 0x14], ecx
mov ecx, dword [0x472dd8]
mov dword [0x46ad74], eax
lea eax, [esp + 0x10]
push edi
mov dword [0x46ad64], 0x401000
mov dword [0x46ad70], ecx
mov dword [0x46ad84], eax
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x405d95
push ebx
lea eax, [esp + 0x1c]
push eax
push ebx
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x1c]
push ebx
push dword [0x472dd8]
push ebx
push ebx
push eax
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0x2c]
push eax
push dword [esp + 0x34]
lea eax, [esp + 0x2c]
push dword [esp + 0x34]
push 0x80000000
push ebx
push eax
push 0x80
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x437228], eax
push ebx
call fcn.0040141d
test eax, eax
je 0x405cd8
push 2
pop eax
jmp 0x405d97
call fcn.00403ff5
cmp dword [0x472ea0], ebx
jne 0x405d6c
push 5
push dword [0x437228]
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.RichEd20
call esi
test eax, eax
jne 0x405d0f
push str.RichEd32
call esi
mov esi, dword [sym.imp.USER32.dll_GetClassInfoW]
push edi
mov ebp, str.RichEdit20A
push ebp
push ebx
call esi
test eax, eax
jne 0x405d39
push edi
push str.RichEdit
push ebx
call esi
push edi
mov dword [0x46ad84], ebp
call dword [sym.imp.USER32.dll_RegisterClassW]
mov eax, dword [0x46ad9c]
push ebx
push 0x4055d9
add eax, 0x69
movzx eax, ax
push ebx
push eax
push dword [0x472dd8]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push 5
mov esi, eax
call fcn.0040141d
push 1
call fcn.00403dc8
mov eax, esi
jmp 0x405d97
push ebx
call fcn.004051a7
test eax, eax
je 0x405d8e
cmp dword [0x46ad94], ebx
jne 0x405cd0
push 2
call fcn.0040141d
jmp 0x405cd0
push 1
call fcn.0040141d
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret