Function at 0x406383
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov edi, dword [0x41b930]
mov dword [esp], 2
call fcn.004084bc
mov ebx, dword [0x40c8b4]
push edx
lea esi, [ebx + 0xc000]
test eax, eax
je 0x4063c5
call eax
mov dword [esp], esi
movzx eax, ax
mov dword [esp + 4], eax
call fcn.004080c8
jmp 0x40644a
mov dword [ebx + 0xc000], 0x780030
xor eax, eax
mov word [ebx + 0xc004], 0
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], 0x43c6a0
mov dword [esp + 8], eax
mov dword [esp + 4], str.Control_PanelDesktopResourceLocale
mov dword [esp], 0x80000001
call fcn.0040801e
sub esp, 0x14
cmp word [0x43c6a0], 0
jne 0x40643a
xor ecx, ecx
mov dword [esp + 0xc], 0x43c6a0
mov dword [esp + 0x10], ecx
mov dword [esp + 8], 0x40c63c
mov dword [esp + 4], str..DEFAULTControl_PanelInternational
mov dword [esp], 0x80000003
call fcn.0040801e
sub esp, 0x14
mov dword [esp + 4], 0x43c6a0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrcatW
push eax
add ebx, 0xa800
push eax
call fcn.00404d16
mov eax, dword [0x41b92c]
mov dword [0x41903c], 0x10000
and eax, 0x20
mov dword [0x419020], eax
mov dword [esp], ebx
call fcn.0040837a
push edx
test eax, eax
jne 0x406554
mov eax, dword [edi + 0x48]
test eax, eax
je 0x406554
xor esi, esi
mov ecx, dword [0x41b958]
add eax, eax
mov dword [esp + 0xc], 0x43e6a0
mov dword [esp + 0x10], esi
mov edx, dword [edi + 0x4c]
add eax, ecx
add edx, edx
mov dword [esp + 4], eax
add edx, ecx
mov dword [esp + 8], edx
mov eax, dword [edi + 0x44]
mov dword [esp], eax
call fcn.0040801e
mov ax, word [0x43e6a0]
sub esp, 0x14
test ax, ax
je 0x406554
mov esi, 0x43e6a0
cmp ax, 0x22
jne 0x4064f9
mov dword [esp + 4], 0x22
mov esi, 0x43e6a2
mov dword [esp], 0x43e6a2
call fcn.00407a87
push ecx
push ecx
mov word [eax], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
lea eax, [esi + eax*2 - 8]
push edx
cmp esi, eax
jae 0x40653d
mov dword [esp + 4], str..exe
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push ecx
push ecx
test eax, eax
jne 0x40653d
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push edx
cmp eax, 0xffffffff
je 0x406534
test al, 0x10
jne 0x40653d
mov dword [esp], esi
call fcn.00407ab4
push eax
mov dword [esp], esi
call fcn.004081dd
push edx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.004081a9
push ecx
push ecx
mov dword [esp], ebx
call fcn.0040837a
push esi
test eax, eax
jne 0x406575
mov eax, dword [edi + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040852e
push ebx
push ebx
xor ecx, ecx
mov dword [esp + 0x14], 0x8040
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 1
mov dword [esp + 4], 0x67
mov eax, dword [0x439588]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
cmp dword [edi + 0x50], 0xffffffff
mov dword [0x43a5e8], eax
je 0x40667a
mov edx, dword [0x439588]
mov dword [0x43c644], 0x401000
mov dword [0x43c654], eax
mov dword [0x43c650], edx
mov dword [0x43c664], 0x40c52a
mov dword [esp], 0x43c640
call dword [sym.imp.USER32.dll_RegisterClassW]
push edx
test ax, ax
je 0x4067b6
xor eax, eax
mov dword [esp], 0x30
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
xor eax, eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp + 0x2c], eax
mov eax, dword [0x439588]
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 0x14], ecx
sub eax, edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 0xc], 0x80000000
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40c52a
mov dword [esp], pe_nt_image_headers32
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x43c67c], eax
sub esp, 0x30
xor esi, esi
mov dword [esp], esi
call fcn.00403bad
push edi
test eax, eax
jne 0x4067a2
call fcn.00404d16
cmp dword [0x419040], 0
jne 0x40677d
mov dword [esp + 4], 5
mov eax, dword [0x43c67c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ecx
push ecx
mov dword [esp], str.RichEd20
call fcn.0040842e
push ebx
test eax, eax
jne 0x4066d5
mov dword [esp], str.RichEd32
call fcn.0040842e
push edx
xor eax, eax
mov dword [esp + 8], 0x43c640
mov ebx, dword [sym.imp.USER32.dll_GetClassInfoW]
mov dword [esp + 4], str.RichEdit20W
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x40672b
xor eax, eax
mov dword [esp + 8], 0x43c640
mov dword [esp + 4], 0x40c548
mov dword [esp], eax
call ebx
mov dword [0x43c664], 0x40c55c
sub esp, 0xc
mov dword [esp], 0x43c640
call dword [sym.imp.USER32.dll_RegisterClassW]
push eax
xor esi, esi
xor edi, edi
mov dword [esp + 0xc], 0x4050a0
mov dword [esp + 0x10], esi
mov dword [esp + 8], edi
mov eax, dword [0x43a5e4]
add eax, 0x69
movzx eax, ax
mov dword [esp + 4], eax
mov eax, dword [0x439588]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
mov ebx, eax
mov dword [esp], 5
call fcn.00403bad
push eax
mov dword [esp], 1
call fcn.00404bb8
push eax
jmp 0x4067b8
xor ecx, ecx
mov dword [esp], ecx
call fcn.00404e20
push ebx
test eax, eax
je 0x4067a9
cmp dword [0x43a5dc], 0
jne 0x4067a2
mov dword [esp], 2
call fcn.00403bad
push edx
mov ebx, 2
jmp 0x4067b8
mov dword [esp], 1
call fcn.00403bad
push eax
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret