Function at 0x401841
Capabilities:
Check if file exists

Disassembly:
push 0x3c
mov eax, 0x4371ab
call fcn.0041f563
mov esi, ecx
lea ecx, [ebp - 0x30]
call fcn.0041a5b5
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [ebp - 0x30]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
call fcn.00404b8d
inc bl
je 0x4018e9
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.dde5a5b2_e3f2_4725_94b9_0e16aa7fec5d
call fcn.004025e2
and dword [ebp - 4], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.AREA_POSTINSTALL
call fcn.004025e2
push ecx
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.WARNING
call fcn.004025e2
push ecx
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.GENBROBJ_ARPMODIFICATION
call fcn.004025e2
push ecx
mov ecx, esp
mov byte [ebp - 4], 3
push str.CLARA
call fcn.004025e2
or dword [ebp - 4], 0xffffffff
mov ecx, 0x3fb
call fcn.00401320
add esp, 0x14
xor eax, eax
jmp 0x401ae1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x44288c
call fcn.004027a7
sub esp, 0x18
mov dword [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.UninstallString
call fcn.004027a7
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallBoBrowser
call fcn.004027a7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
xor edx, edx
inc edx
call fcn.0041867f
add esp, 0x48
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1c], 0
jne 0x401950
mov esi, 0x3f4
jmp 0x401ad3
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x34]
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.004025e2
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 7
call fcn.004026cf
push eax
lea ecx, [ebp - 0x34]
call fcn.00402630
lea eax, [ebp - 0x30]
lea edi, [esi + 8]
push eax
mov ecx, edi
call fcn.00416b9b
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004026cf
push ecx
lea ecx, [ebp - 0x34]
push dword [eax]
call fcn.0040269e
mov byte [ebp - 4], 7
test eax, eax
mov ecx, dword [ebp - 0x30]
setns bl
lea ecx, [ecx - 0x10]
call fcn.00404b8d
test bl, bl
je 0x4019bf
mov esi, 0x3f3
jmp 0x401ac8
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x40], esp
push eax
call fcn.0040277f
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.UninstallStringOld
call fcn.004027a7
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
mov ebx, str.SoftwareMicrosoftWindowsCurrentVersionUninstallBoBrowser
push ebx
call fcn.004027a7
xor ecx, ecx
mov byte [ebp - 4], 7
mov dl, 1
inc ecx
call fcn.004037f2
lea ecx, [ebp - 0x30]
call fcn.0041a5b5
mov byte [ebp - 4], 0xb
mov esi, dword [eax]
push esi
call fcn.00401140
add esp, 0x4c
lea ecx, [ebp - 0x2c]
push eax
push esi
call fcn.00402bbc
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.00404b8d
mov esi, str.__UNINSTALL
push esi
call fcn.00401140
pop ecx
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.0040303f
lea eax, [ebp - 0x44]
mov ecx, edi
push eax
call fcn.00416b9b
mov byte [ebp - 4], 0xc
mov esi, dword [eax]
push esi
call fcn.00401140
pop ecx
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.0040303f
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00404b8d
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x40], esp
push eax
call fcn.0040277f
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.UninstallString
call fcn.004027a7
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
push ebx
call fcn.004027a7
xor ecx, ecx
mov byte [ebp - 4], 7
mov dl, 1
inc ecx
call fcn.004037f2
add esp, 0x48
mov esi, eax
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00404b8d
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402cb9
mov eax, esi
call fcn.0041f512
ret