Function at 0x406d4f
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x5c
mov edi, dword [0x41d130]
mov dword [esp], 2
call fcn.0040a444
mov ebx, dword [0x410ad4]
lea esi, [ebx + 0x30000]
push edx
test eax, eax
je 0x406d91
call eax
mov dword [esp], esi
movzx eax, ax
mov dword [esp + 4], eax
call fcn.00409c82
jmp 0x406e16
mov dword [ebx + 0x30000], 0x780030
xor eax, eax
mov word [ebx + 0x30004], 0
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], 0x43d360
mov dword [esp + 8], eax
mov dword [esp + 4], str.Control_PanelDesktopResourceLocale
mov dword [esp], 0x80000001
call fcn.00409bd8
sub esp, 0x14
cmp word [0x43d360], 0
jne 0x406e06
mov dword [esp + 0xc], 0x43d360
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 8], 0x41043c
mov dword [esp + 4], str..DEFAULTControl_PanelInternational
mov dword [esp], 0x80000003
call fcn.00409bd8
sub esp, 0x14
mov dword [esp + 4], 0x43d360
mov dword [esp], esi
call sub.KERNEL32.dll_lstrcatW
push eax
add ebx, 0x2a000
push eax
call fcn.0040558a
mov eax, dword [0x41d12c]
mov dword [0x41303c], 0x10000
and eax, 0x20
mov dword [0x413020], eax
mov dword [esp], ebx
call fcn.0040a304
push edx
test eax, eax
jne 0x406f3f
cmp dword [edi + 0x48], 0
je 0x406f3f
mov eax, dword [edi + 0x4c]
mov dword [esp], eax
call fcn.00409e0e
push esi
mov esi, eax
mov eax, dword [edi + 0x48]
mov dword [esp], eax
call fcn.00409e0e
xor ecx, ecx
push edx
mov dword [esp + 0x10], ecx
mov dword [esp + 4], eax
mov dword [esp + 0xc], 0x446380
mov dword [esp + 8], esi
mov dword [ebp - 0x2c], eax
mov edx, dword [edi + 0x44]
mov dword [esp], edx
call fcn.00409bd8
mov eax, dword [ebp - 0x2c]
sub esp, 0x14
mov dword [esp], eax
call fcn.00409e7b
push eax
mov dword [esp], esi
call fcn.00409e7b
push eax
movzx eax, word [0x446380]
test eax, eax
je 0x406f3f
cmp eax, 0x22
mov esi, 0x446380
jne 0x406ee4
mov dword [esp + 4], 0x22
mov esi, 0x446382
mov dword [esp], 0x446382
call fcn.00409645
push ecx
push ecx
mov word [eax], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
lea eax, [esi + eax*2 - 8]
push edx
cmp esi, eax
jae 0x406f28
mov dword [esp + 4], str..exe
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push ecx
test eax, eax
push ecx
jne 0x406f28
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push edx
cmp eax, 0xffffffff
je 0x406f1f
test al, 0x10
jne 0x406f28
mov dword [esp], esi
call fcn.00409671
push eax
mov dword [esp], esi
call fcn.00409d86
push edx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00409d52
push ecx
push ecx
mov dword [esp], ebx
call fcn.0040a304
push esi
test eax, eax
jne 0x406f60
mov eax, dword [edi + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040a4b7
push ebx
push ebx
test byte [0x41d12c], 0x10
je 0x406f81
cmp dword [0x41d124], 0
jne 0x406f81
call fcn.00406785
mov dword [0x446360], 1
mov dword [esp + 0x14], 0x8040
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 1
mov dword [esp + 4], 0x67
mov eax, dword [0x431248]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [0x4352a8], eax
sub esp, 0x18
cmp dword [edi + 0x50], 0xffffffff
je 0x407086
mov dword [0x43d304], section..text
mov edx, dword [0x431248]
mov dword [0x43d314], eax
mov dword [0x43d324], 0x4102ec
mov dword [0x43d310], edx
mov dword [esp], 0x43d300
call dword [sym.imp.USER32.dll_RegisterClassW]
push edx
test ax, ax
je 0x4071c2
mov dword [esp], 0x30
xor eax, eax
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
xor eax, eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp + 0x2c], eax
mov eax, dword [0x431248]
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x80000000
mov dword [esp + 4], 0x4102ec
sub eax, edx
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 8], eax
mov dword [esp], pe_nt_image_headers32
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x43d33c], eax
sub esp, 0x30
xor esi, esi
mov dword [esp], esi
call fcn.0040426a
push edi
test eax, eax
jne 0x4071ae
call fcn.0040558a
cmp dword [0x413040], 0
jne 0x407189
mov dword [esp + 4], 5
mov eax, dword [0x43d33c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ecx
push ecx
mov dword [esp], str.RichEd20
call fcn.0040a3b6
push ebx
test eax, eax
jne 0x4070e1
mov dword [esp], str.RichEd32
call fcn.0040a3b6
push edx
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetClassInfoW]
mov dword [esp + 8], 0x43d300
mov dword [esp + 4], str.RichEdit20W
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x407137
mov dword [esp + 8], 0x43d300
xor eax, eax
mov dword [esp + 4], 0x410340
mov dword [esp], eax
call ebx
mov dword [0x43d324], 0x410354
sub esp, 0xc
mov dword [esp], 0x43d300
call dword [sym.imp.USER32.dll_RegisterClassW]
push eax
xor esi, esi
xor edi, edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0x40593f
mov dword [esp + 8], edi
mov eax, dword [0x4352a4]
add eax, 0x69
movzx eax, ax
mov dword [esp + 4], eax
mov eax, dword [0x431248]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
mov ebx, eax
mov dword [esp], 5
call fcn.0040426a
push eax
mov dword [esp], 1
call fcn.0040542c
push eax
jmp 0x4071c4
xor ecx, ecx
mov dword [esp], ecx
call fcn.004056a0
push ebx
test eax, eax
je 0x4071b5
cmp dword [0x43529c], 0
jne 0x4071ae
mov dword [esp], 2
call fcn.0040426a
push edx
mov ebx, 2
jmp 0x4071c4
mov dword [esp], 1
call fcn.0040426a
push eax
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret