Function at 0x40352e
Capabilities:
Check if file exists
Get file attributes

Disassembly:
sub esp, 0x14
push ebx
push ebp
push esi
mov esi, dword [0x42f028]
push edi
push str.GetUserDefaultUILanguage
push str.KERNEL32.dll
call fcn.00405caa
xor ebx, ebx
cmp eax, ebx
je 0x403562
call eax
movzx eax, ax
push eax
push 0x436000
call fcn.00405902
jmp 0x4035aa
mov edi, 0x42a488
mov dword [0x436000], 0x7830
push edi
push ebx
push str.Control_PanelDesktopResourceLocale
push 0x80000001
call fcn.00405898
cmp byte [0x42a488], bl
jne 0x40359f
push edi
push 0x4072e2
push str..DEFAULTControl_PanelInternational
push 0x80000003
call fcn.00405898
push edi
push 0x436000
call sub.KERNEL32.dll_lstrcatA
call fcn.004037fa
mov eax, dword [0x42f030]
mov ebp, 0x435400
and eax, 0x20
push ebp
mov dword [0x42f0a0], eax
call fcn.0040557d
test eax, eax
jne 0x40364f
mov ecx, dword [esi + 0x48]
cmp ecx, ebx
je 0x40364f
mov edx, dword [esi + 0x4c]
mov eax, dword [0x42f058]
mov edi, 0x42dfc0
add edx, eax
push edi
add ecx, eax
push edx
push ecx
push dword [esi + 0x44]
call fcn.00405898
mov al, byte [0x42dfc0]
cmp al, bl
je 0x40364f
cmp al, 0x22
jne 0x40360e
mov edi, 0x42dfc1
push 0x22
push edi
call fcn.004054c8
mov byte [eax], bl
push edi
call sub.KERNEL32.dll_lstrlenA
lea eax, [eax + edi - 4]
cmp eax, edi
jbe 0x403642
push str..exe
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x403642
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x40363c
test al, 0x10
jne 0x403642
push edi
call fcn.004054e4
push edi
call fcn.0040549d
push eax
push ebp
call fcn.004059a4
push ebp
call fcn.0040557d
test eax, eax
jne 0x403665
push dword [esi + 0x118]
push ebp
call fcn.004059c6
push 0x8040
push ebx
push ebx
push 1
push 0x67
push dword [0x42f020]
call dword [sym.imp.USER32.dll_LoadImageA]
mov dword [0x42e808], eax
cmp dword [esi + 0x50], 0xffffffff
mov edi, 0x42e7c0
je 0x403719
mov ecx, dword [0x42f020]
mov dword [0x42e7d4], eax
lea eax, [esp + 0x10]
push edi
mov dword [esp + 0x14], 0x624e5f
mov dword [0x42e7c4], 0x401000
mov dword [0x42e7d0], ecx
mov dword [0x42e7e4], eax
call dword [sym.imp.USER32.dll_RegisterClassA]
test ax, ax
je 0x4037f0
lea eax, [esp + 0x14]
push ebx
push eax
push ebx
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
push ebx
push dword [0x42f020]
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x20]
push ebx
push ebx
push eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
push eax
lea eax, [esp + 0x28]
push dword [esp + 0x30]
push dword [esp + 0x30]
push 0x80000000
push ebx
push eax
push 0x80
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [0x42a460], eax
push ebx
call fcn.00401410
test eax, eax
je 0x40372b
push 2
pop eax
jmp 0x4037f2
call fcn.004037fa
cmp dword [0x42f0c0], ebx
jne 0x4037c7
push 5
push dword [0x42a460]
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebp, str.RichEd20.dll
push ebp
call esi
test eax, eax
jne 0x403768
push ebp
mov word [0x4092a2], 0x3233
call esi
mov ebp, dword [sym.imp.USER32.dll_GetClassInfoA]
mov esi, 0x409290
push edi
push esi
push ebx
call ebp
test eax, eax
jne 0x40379b
push edi
push esi
push ebx
mov byte [0x409298], bl
call ebp
push edi
mov dword [0x42e7e4], esi
mov byte [0x409298], 0x32
call dword [sym.imp.USER32.dll_RegisterClassA]
mov eax, dword [0x42e800]
push ebx
add eax, 0x69
push 0x4038c7
movzx eax, ax
push ebx
push eax
push dword [0x42f020]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
push 5
mov esi, eax
call fcn.00401410
mov eax, esi
jmp 0x4037f2
push ebx
call fcn.00404e3b
test eax, eax
je 0x4037e9
cmp dword [0x42e7ec], ebx
jne 0x403723
push 2
call fcn.00401410
jmp 0x403723
push 1
call fcn.00401410
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret