Function at 0x406353
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov edi, dword [0x41b930]
mov dword [esp], 2
call fcn.0040848c
mov ebx, dword [0x40c8b4]
push edx
lea esi, [ebx + 0xc000]
test eax, eax
je 0x406395
call eax
mov dword [esp], esi
movzx eax, ax
mov dword [esp + 4], eax
call fcn.00408098
jmp 0x40641a
mov dword [ebx + 0xc000], 0x780030
xor eax, eax
mov word [ebx + 0xc004], 0
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], 0x432b60
mov dword [esp + 8], eax
mov dword [esp + 4], str.Control_PanelDesktopResourceLocale
mov dword [esp], 0x80000001
call fcn.00407fee
sub esp, 0x14
cmp word [0x432b60], 0
jne 0x40640a
xor ecx, ecx
mov dword [esp + 0xc], 0x432b60
mov dword [esp + 0x10], ecx
mov dword [esp + 8], 0x40c63c
mov dword [esp + 4], str..DEFAULTControl_PanelInternational
mov dword [esp], 0x80000003
call fcn.00407fee
sub esp, 0x14
mov dword [esp + 4], 0x432b60
mov dword [esp], esi
call sub.KERNEL32.dll_lstrcatW
push eax
add ebx, 0xa800
push eax
call fcn.00404ce6
mov eax, dword [0x41b92c]
mov dword [0x41903c], 0x10000
and eax, 0x20
mov dword [0x419020], eax
mov dword [esp], ebx
call fcn.0040834a
push edx
test eax, eax
jne 0x406524
mov eax, dword [edi + 0x48]
test eax, eax
je 0x406524
xor esi, esi
mov ecx, dword [0x41b958]
add eax, eax
mov dword [esp + 0xc], 0x434b60
mov dword [esp + 0x10], esi
mov edx, dword [edi + 0x4c]
add eax, ecx
add edx, edx
mov dword [esp + 4], eax
add edx, ecx
mov dword [esp + 8], edx
mov eax, dword [edi + 0x44]
mov dword [esp], eax
call fcn.00407fee
mov ax, word [0x434b60]
sub esp, 0x14
test ax, ax
je 0x406524
mov esi, 0x434b60
cmp ax, 0x22
jne 0x4064c9
mov dword [esp + 4], 0x22
mov esi, 0x434b62
mov dword [esp], 0x434b62
call fcn.00407a57
push ecx
push ecx
mov word [eax], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
lea eax, [esi + eax*2 - 8]
push edx
cmp esi, eax
jae 0x40650d
mov dword [esp + 4], str..exe
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push ecx
push ecx
test eax, eax
jne 0x40650d
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push edx
cmp eax, 0xffffffff
je 0x406504
test al, 0x10
jne 0x40650d
mov dword [esp], esi
call fcn.00407a84
push eax
mov dword [esp], esi
call fcn.004081ad
push edx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00408179
push ecx
push ecx
mov dword [esp], ebx
call fcn.0040834a
push esi
test eax, eax
jne 0x406545
mov eax, dword [edi + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004084fe
push ebx
push ebx
xor ecx, ecx
mov dword [esp + 0x14], 0x8040
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 1
mov dword [esp + 4], 0x67
mov eax, dword [0x42fa48]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
cmp dword [edi + 0x50], 0xffffffff
mov dword [0x430aa8], eax
je 0x40664a
mov edx, dword [0x42fa48]
mov dword [0x432b04], 0x401000
mov dword [0x432b14], eax
mov dword [0x432b10], edx
mov dword [0x432b24], 0x40c52a
mov dword [esp], 0x432b00
call dword [sym.imp.USER32.dll_RegisterClassW]
push edx
test ax, ax
je 0x406786
xor eax, eax
mov dword [esp], 0x30
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
xor eax, eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp + 0x2c], eax
mov eax, dword [0x42fa48]
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 0x14], ecx
sub eax, edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 0xc], 0x80000000
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40c52a
mov dword [esp], pe_nt_image_headers32
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x432b3c], eax
sub esp, 0x30
xor esi, esi
mov dword [esp], esi
call fcn.00403bad
push edi
test eax, eax
jne 0x406772
call fcn.00404ce6
cmp dword [0x419040], 0
jne 0x40674d
mov dword [esp + 4], 5
mov eax, dword [0x432b3c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ecx
push ecx
mov dword [esp], str.RichEd20
call fcn.004083fe
push ebx
test eax, eax
jne 0x4066a5
mov dword [esp], str.RichEd32
call fcn.004083fe
push edx
xor eax, eax
mov dword [esp + 8], 0x432b00
mov ebx, dword [sym.imp.USER32.dll_GetClassInfoW]
mov dword [esp + 4], str.RichEdit20W
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x4066fb
xor eax, eax
mov dword [esp + 8], 0x432b00
mov dword [esp + 4], 0x40c548
mov dword [esp], eax
call ebx
mov dword [0x432b24], 0x40c55c
sub esp, 0xc
mov dword [esp], 0x432b00
call dword [sym.imp.USER32.dll_RegisterClassW]
push eax
xor esi, esi
xor edi, edi
mov dword [esp + 0xc], 0x405070
mov dword [esp + 0x10], esi
mov dword [esp + 8], edi
mov eax, dword [0x430aa4]
add eax, 0x69
movzx eax, ax
mov dword [esp + 4], eax
mov eax, dword [0x42fa48]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
mov ebx, eax
mov dword [esp], 5
call fcn.00403bad
push eax
mov dword [esp], 1
call fcn.00404b88
push eax
jmp 0x406788
xor ecx, ecx
mov dword [esp], ecx
call fcn.00404df0
push ebx
test eax, eax
je 0x406779
cmp dword [0x430a9c], 0
jne 0x406772
mov dword [esp], 2
call fcn.00403bad
push edx
mov ebx, 2
jmp 0x406788
mov dword [esp], 1
call fcn.00403bad
push eax
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret