Function at 0x406d41
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov edi, dword [0x41a130]
mov dword [esp], 2
call fcn.004092bf
mov ebx, dword [0x40fad4]
lea esi, [ebx + 0x30000]
push edx
test eax, eax
je 0x406d83
call eax
mov dword [esp], esi
movzx eax, ax
mov dword [esp + 4], eax
call fcn.00408b80
jmp 0x406e08
mov dword [ebx + 0x30000], 0x780030
xor eax, eax
mov word [ebx + 0x30004], 0
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], 0x43a360
mov dword [esp + 8], eax
mov dword [esp + 4], str.Control_PanelDesktopResourceLocale
mov dword [esp], 0x80000001
call fcn.00408ad6
sub esp, 0x14
cmp word [0x43a360], 0
jne 0x406df8
mov dword [esp + 0xc], 0x43a360
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 8], 0x40f43c
mov dword [esp + 4], str..DEFAULTControl_PanelInternational
mov dword [esp], 0x80000003
call fcn.00408ad6
sub esp, 0x14
mov dword [esp + 4], 0x43a360
mov dword [esp], esi
call sub.KERNEL32.dll_lstrcatW
push eax
add ebx, 0x2a000
push eax
call fcn.0040558a
mov eax, dword [0x41a12c]
mov dword [0x41003c], 0x10000
and eax, 0x20
mov dword [0x410020], eax
mov dword [esp], ebx
call fcn.0040917f
push edx
test eax, eax
jne 0x406f11
mov eax, dword [edi + 0x48]
test eax, eax
je 0x406f11
xor esi, esi
mov ecx, dword [0x41a158]
add eax, eax
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0x443380
mov edx, dword [edi + 0x4c]
add eax, ecx
mov dword [esp + 4], eax
add edx, edx
add edx, ecx
mov dword [esp + 8], edx
mov eax, dword [edi + 0x44]
mov dword [esp], eax
call fcn.00408ad6
movzx eax, word [0x443380]
sub esp, 0x14
test eax, eax
je 0x406f11
cmp eax, 0x22
mov esi, 0x443380
jne 0x406eb6
mov dword [esp + 4], 0x22
mov esi, 0x443382
mov dword [esp], 0x443382
call fcn.00408543
push ecx
push ecx
mov word [eax], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
lea eax, [esi + eax*2 - 8]
push edx
cmp esi, eax
jae 0x406efa
mov dword [esp + 4], str..exe
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push ecx
test eax, eax
push ecx
jne 0x406efa
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push edx
cmp eax, 0xffffffff
je 0x406ef1
test al, 0x10
jne 0x406efa
mov dword [esp], esi
call fcn.0040856f
push eax
mov dword [esp], esi
call fcn.00408c84
push edx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00408c50
push ecx
push ecx
mov dword [esp], ebx
call fcn.0040917f
push esi
test eax, eax
jne 0x406f32
mov eax, dword [edi + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00409332
push ebx
push ebx
test byte [0x41a12c], 0x10
je 0x406f53
cmp dword [0x41a124], 0
jne 0x406f53
call fcn.00406777
mov dword [0x443360], 1
mov dword [esp + 0x14], 0x8040
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 1
mov dword [esp + 4], 0x67
mov eax, dword [0x42e248]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [0x4322a8], eax
sub esp, 0x18
cmp dword [edi + 0x50], 0xffffffff
je 0x407058
mov dword [0x43a304], section..text
mov edx, dword [0x42e248]
mov dword [0x43a314], eax
mov dword [0x43a324], 0x40f2ec
mov dword [0x43a310], edx
mov dword [esp], 0x43a300
call dword [sym.imp.USER32.dll_RegisterClassW]
push edx
test ax, ax
je 0x407194
mov dword [esp], 0x30
xor eax, eax
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
xor eax, eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp + 0x2c], eax
mov eax, dword [0x42e248]
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x80000000
mov dword [esp + 4], 0x40f2ec
sub eax, edx
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 8], eax
mov dword [esp], pe_nt_image_headers32
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x43a33c], eax
sub esp, 0x30
xor esi, esi
mov dword [esp], esi
call fcn.0040426a
push edi
test eax, eax
jne 0x407180
call fcn.0040558a
cmp dword [0x410040], 0
jne 0x40715b
mov dword [esp + 4], 5
mov eax, dword [0x43a33c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ecx
push ecx
mov dword [esp], str.RichEd20
call fcn.00409231
push ebx
test eax, eax
jne 0x4070b3
mov dword [esp], str.RichEd32
call fcn.00409231
push edx
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetClassInfoW]
mov dword [esp + 8], 0x43a300
mov dword [esp + 4], str.RichEdit20W
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x407109
mov dword [esp + 8], 0x43a300
xor eax, eax
mov dword [esp + 4], 0x40f340
mov dword [esp], eax
call ebx
mov dword [0x43a324], 0x40f354
sub esp, 0xc
mov dword [esp], 0x43a300
call dword [sym.imp.USER32.dll_RegisterClassW]
push eax
xor esi, esi
xor edi, edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0x40593f
mov dword [esp + 8], edi
mov eax, dword [0x4322a4]
add eax, 0x69
movzx eax, ax
mov dword [esp + 4], eax
mov eax, dword [0x42e248]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
mov ebx, eax
mov dword [esp], 5
call fcn.0040426a
push eax
mov dword [esp], 1
call fcn.0040542c
push eax
jmp 0x407196
xor ecx, ecx
mov dword [esp], ecx
call fcn.004056a0
push ebx
test eax, eax
je 0x407187
cmp dword [0x43229c], 0
jne 0x407180
mov dword [esp], 2
call fcn.0040426a
push edx
mov ebx, 2
jmp 0x407196
mov dword [esp], 1
call fcn.0040426a
push eax
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret