Function at 0x408326
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
mov edi, dword [0x431db0]
push 6
call fcn.004097ed
xor ebx, ebx
test eax, eax
je 0x408357
call eax
movzx eax, ax
push eax
push 0x4e60c0
call fcn.00409aac
jmp 0x4083f0
mov eax, dword fs:[0x2c]
mov ecx, dword [0x48469c]
mov ebx, dword [eax + ecx*4]
mov eax, dword [0x462628]
cmp eax, dword [ebx + 4]
jg 0x40866b
mov eax, dword [0x462680]
cmp eax, dword [ebx + 4]
jg 0x4086aa
mov eax, dword [0x4625d0]
xor ebx, ebx
push 0x30
pop ecx
push 0x78
mov word [0x4e60c0], cx
lea esi, [eax + 0x3c]
pop ecx
push ebx
push 0x452560
push ebx
mov word [0x4e60c2], cx
xor ecx, ecx
push eax
push 0x80000001
mov word [0x4e60c4], cx
call fcn.00409853
cmp word [0x452560], bx
jne 0x4083e1
push ebx
push 0x452560
push esi
push dword [0x46262c]
push 0x80000003
call fcn.00409853
push 0x452560
push 0x4e60c0
call fcn.00409ac7
call fcn.0040824c
mov eax, dword [0x431db4]
and eax, 0x20
mov dword [0x41dc84], 0x10000
push 0x4da0a8
mov dword [0x41dc68], eax
call fcn.0040954e
test eax, eax
jne 0x4084b4
mov edx, dword [edi + 0x48]
test edx, edx
je 0x4084b4
mov ecx, dword [0x431d88]
mov esi, 0x4726b8
mov eax, dword [edi + 0x4c]
push ebx
push esi
lea eax, [ecx + eax*2]
push eax
lea eax, [ecx + edx*2]
push eax
push dword [edi + 0x44]
call fcn.00409853
mov ax, word [0x4726b8]
test ax, ax
je 0x4084b4
push 0x22
pop ecx
cmp ax, cx
jne 0x40846d
push ecx
mov esi, 0x4726ba
push esi
call fcn.00409523
xor ecx, ecx
mov word [eax], cx
push esi
call fcn.00409ae9
add eax, 0xfffffffc
lea eax, [esi + eax*2]
cmp eax, esi
jbe 0x4084a3
push str..exe
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4084a3
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x40849d
test al, 0x10
jne 0x4084a3
push esi
call fcn.00409bdf
push esi
call fcn.00409455
push eax
push 0x4da0a8
call fcn.00409ad1
push 0x4da0a8
call fcn.0040954e
test eax, eax
jne 0x4084d2
push dword [edi + 0x118]
push 0x4da0a8
call fcn.00408ecc
push 0x8040
push ebx
push ebx
push 1
push 0x67
push dword [0x44e3cc]
call dword [sym.imp.USER32.dll_LoadImageW]
mov edx, eax
mov dword [0x452548], edx
cmp dword [edi + 0x50], 0xffffffff
mov edi, dword [sym.imp.USER32.dll_RegisterClassW]
je 0x40858f
mov eax, dword [0x44e3cc]
mov ecx, dword [0x4164a0]
mov dword [0x4625b8], eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov ecx, dword [0x4164a4]
push 0x4625a8
mov dword [ebp - 8], ecx
mov dword [0x4625ac], 0x401d65
mov dword [0x4625bc], edx
mov dword [0x4625cc], eax
call edi
test ax, ax
jne 0x408548
xor eax, eax
jmp 0x40865a
push ebx
lea eax, [ebp - 0x1c]
push eax
push ebx
push 0x30
pop eax
push eax
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
push ebx
push dword [0x44e3cc]
push ebx
push ebx
push eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
lea eax, [ebp - 0xc]
push dword [ebp - 0x1c]
push 0x80000000
push ebx
push eax
push 0x80
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x462588], eax
push ebx
call fcn.00402184
test eax, eax
jne 0x408657
call fcn.0040824c
cmp dword [0x41dc88], 0
jne 0x40863d
push 5
push dword [0x462588]
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.RichEd20
call esi
test eax, eax
jne 0x4085d5
push str.RichEd32
call esi
mov esi, dword [sym.imp.USER32.dll_GetClassInfoW]
push 0x4625a8
push str.RichEdit20A
push ebx
call esi
test eax, eax
jne 0x40860a
push 0x4625a8
push str.RichEdit
push ebx
call esi
push 0x4625a8
mov dword [0x4625cc], 0x416468
call edi
mov eax, dword [0x45254c]
push ebx
push 0x40676b
add eax, 0x69
push ebx
movzx eax, ax
push eax
push dword [0x44e3cc]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push 5
mov esi, eax
call fcn.00402184
push 1
call fcn.004063e0
mov eax, esi
jmp 0x40865a
push ebx
call fcn.00408100
test eax, eax
je 0x40865f
cmp dword [0x452530], 0
jne 0x408657
push 2
call fcn.00402184
push 2
pop eax
pop edi
pop esi
pop ebx
leave
ret
push 1
call fcn.00402184
jmp 0x408541
push 0x462628
call fcn.0040a154
cmp dword [0x462628], 0xffffffff
pop ecx
jne 0x408377
lea ecx, [ebp - 1]
call fcn.004064a0
mov esi, eax
mov ecx, esi
call fcn.004080b4
push 0x462628
mov dword [0x4625d0], esi
call fcn.0040a10a
pop ecx
jmp 0x408377
mov ebx, 0x462680
push ebx
call fcn.0040a154
cmp dword [0x462680], 0xffffffff
pop ecx
jne 0x408388
lea ecx, [ebp - 1]
call fcn.004065d1
mov esi, eax
mov ecx, esi
call fcn.004080da
push ebx
mov dword [0x46262c], esi
call fcn.0040a10a
pop ecx
jmp 0x408388