Function at 0x406346
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov edi, dword [0x43ca60]
mov dword [esp], 2
call fcn.00408e3c
mov ebx, dword [0x40c8f4]
push ecx
lea esi, [ebx + 0xc000]
test eax, eax
je 0x406388
call eax
mov dword [esp], esi
movzx eax, ax
mov dword [esp + 4], eax
call fcn.004081f3
jmp 0x406413
mov dword [ebx + 0xc000], 0x780030
mov word [ebx + 0xc004], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x436d60
mov dword [esp + 8], 0
mov dword [esp + 4], str.Control_PanelDesktopResourceLocale
mov dword [esp], 0x80000001
call fcn.00408147
sub esp, 0x14
cmp word [0x436d60], 0
jne 0x406403
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x436d60
mov dword [esp + 8], 0x40c65c
mov dword [esp + 4], str..DEFAULTControl_PanelInternational
mov dword [esp], 0x80000003
call fcn.00408147
sub esp, 0x14
mov dword [esp + 4], 0x436d60
mov dword [esp], esi
call sub.KERNEL32.dll_lstrcatW
push esi
add ebx, 0xa800
push esi
call fcn.00404c7b
mov eax, dword [0x43cac4]
mov dword [esp], ebx
mov dword [0x43ca3c], 0x10000
and eax, 0x20
mov dword [0x43ca20], eax
call fcn.00408a73
push edx
test eax, eax
jne 0x40651f
mov eax, dword [edi + 0x48]
test eax, eax
je 0x40651f
mov dword [esp + 0x10], 0
mov ecx, dword [0x43ca98]
add eax, eax
mov dword [esp + 0xc], 0x43db40
mov edx, dword [edi + 0x4c]
add eax, ecx
add edx, edx
mov dword [esp + 4], eax
add edx, ecx
mov dword [esp + 8], edx
mov eax, dword [edi + 0x44]
mov dword [esp], eax
call fcn.00408147
mov ax, word [0x43db40]
sub esp, 0x14
test ax, ax
je 0x40651f
mov esi, 0x43db40
cmp ax, 0x22
jne 0x4064c4
mov dword [esp + 4], 0x22
mov esi, 0x43db42
mov dword [esp], 0x43db42
call fcn.00407b65
push ecx
push ecx
mov word [eax], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
lea eax, [esi + eax*2 - 8]
push edx
cmp esi, eax
jae 0x406508
mov dword [esp + 4], str..exe
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push ecx
push ecx
test eax, eax
jne 0x406508
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push edx
cmp eax, 0xffffffff
je 0x4064ff
test al, 0x10
jne 0x406508
mov dword [esp], esi
call fcn.00407b92
push eax
mov dword [esp], esi
call fcn.0040830c
push ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.004082d8
push esi
push esi
mov dword [esp], ebx
call fcn.00408a73
push edx
test eax, eax
jne 0x406540
mov eax, dword [edi + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040847e
push esi
push esi
mov eax, dword [0x43caec]
mov dword [esp + 0x14], 0x8040
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x67
mov dword [esp], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
cmp dword [edi + 0x50], 0xffffffff
mov dword [0x43db10], eax
je 0x40665b
mov edx, dword [0x43caec]
mov dword [0x436d04], 0x401000
mov dword [0x436d14], eax
mov dword [0x436d10], edx
mov dword [0x436d24], 0x40c54a
mov dword [esp], 0x436d00
call dword [sym.imp.USER32.dll_RegisterClassW]
push ebx
xor ebx, ebx
test ax, ax
je 0x4067a4
lea eax, [ebp - 0x28]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [0x43caec]
mov ecx, dword [ebp - 0x24]
sub esp, 0x10
mov edx, dword [ebp - 0x28]
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0x2c], 0
sub eax, ecx
mov dword [esp + 0x24], 0
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 0x20], 0
sub eax, edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x80000000
mov dword [esp + 8], 0
mov dword [esp + 4], 0x40c54a
mov dword [esp], pe_nt_image_headers32
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x436d3c], eax
sub esp, 0x30
mov dword [esp], 0
call fcn.00403bd9
mov ebx, eax
push ecx
test eax, eax
jne 0x406790
call fcn.00404c7b
cmp dword [0x43ca40], 0
jne 0x406769
mov eax, dword [0x436d3c]
mov dword [esp + 4], 5
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push eax
push eax
mov dword [esp], str.RichEd20
call fcn.00408dac
push edx
test eax, eax
jne 0x4066ba
mov dword [esp], str.RichEd32
call fcn.00408dac
push eax
mov dword [esp + 8], 0x436d00
mov ebx, dword [sym.imp.USER32.dll_GetClassInfoW]
mov dword [esp + 4], str.RichEdit20W
mov dword [esp], 0
call ebx
sub esp, 0xc
test eax, eax
jne 0x406714
mov dword [esp + 8], 0x436d00
mov dword [esp + 4], 0x40c568
mov dword [esp], 0
call ebx
mov dword [0x436d24], 0x40c57c
sub esp, 0xc
mov dword [esp], 0x436d00
call dword [sym.imp.USER32.dll_RegisterClassW]
push edi
mov eax, dword [0x43db1c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x405214
add eax, 0x69
mov dword [esp + 8], 0
movzx eax, ax
mov dword [esp + 4], eax
mov eax, dword [0x43caec]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
mov ebx, eax
mov dword [esp], 5
call fcn.00403bd9
push esi
mov dword [esp], 1
call fcn.00404b14
jmp 0x4067a3
mov dword [esp], 0
call fcn.00404d8c
push ecx
test eax, eax
je 0x406797
cmp dword [0x43db00], 0
jne 0x406790
mov dword [esp], 2
call fcn.00403bd9
push edx
mov ebx, 2
jmp 0x4067a4
mov dword [esp], 1
call fcn.00403bd9
push eax
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret