Function at 0x403ae0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, dword [0x434f14]
push edi
push 2
call fcn.00406806
xor edi, edi
cmp eax, edi
je 0x403b0c
call eax
movzx eax, ax
push eax
push 0x442000
call fcn.00406358
jmp 0x403b66
mov ebx, 0x42d268
push edi
push ebx
push edi
push str.Control_PanelDesktopResourceLocale
push 0x80000001
mov word [0x442000], 0x30
mov word [0x442002], 0x78
mov word [0x442004], di
call fcn.004062df
cmp word [0x42d268], di
jne 0x403b5b
push edi
push ebx
push 0x4083d4
push str..DEFAULTControl_PanelInternational
push 0x80000003
call fcn.004062df
push ebx
push 0x442000
call sub.KERNEL32.dll_lstrcatW
call fcn.00403db6
mov eax, dword [0x434f1c]
mov ebp, 0x440800
and eax, 0x20
push ebp
mov dword [0x434fa0], eax
mov dword [0x434fbc], 0x10000
call fcn.00405dee
test eax, eax
jne 0x403c21
mov ecx, dword [esi + 0x48]
cmp ecx, edi
je 0x403c21
mov edx, dword [esi + 0x4c]
mov eax, dword [0x434f58]
mov ebx, str.C:Program_Files__x86_Mozilla_Firefox_tobedeleted
push edi
lea edx, [eax + edx*2]
push ebx
lea eax, [eax + ecx*2]
push edx
push eax
push dword [esi + 0x44]
call fcn.004062df
mov ax, word [str.C:Program_Files__x86_Mozilla_Firefox_tobedeleted]
cmp ax, di
je 0x403c21
cmp ax, 0x22
jne 0x403be0
mov ebx, 0x432ea2
push 0x22
push ebx
call fcn.00405d13
mov word [eax], di
push ebx
call sub.KERNEL32.dll_lstrlenW
lea eax, [ebx + eax*2 - 8]
cmp eax, ebx
jbe 0x403c14
push str..exe
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403c14
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x403c0e
test al, 0x10
jne 0x403c14
push ebx
call fcn.00405d32
push ebx
call fcn.00405ce6
push eax
push ebp
call fcn.00406411
push ebp
call fcn.00405dee
test eax, eax
jne 0x403c37
push dword [esi + 0x118]
push ebp
call fcn.0040644e
push 0x8040
push edi
push edi
push 1
push 0x67
push dword [0x434f00]
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [0x433ee8], eax
cmp dword [esi + 0x50], 0xffffffff
mov ebx, 0x433ea0
je 0x403cdd
mov ecx, dword [0x434f00]
mov esi, 0x40a380
push ebx
mov dword [0x433ea4], 0x401000
mov dword [0x433eb0], ecx
mov dword [0x433eb4], eax
mov dword [str.RichEdit20W], esi
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x403dac
lea eax, [esp + 0x10]
push edi
push eax
push edi
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
push edi
push dword [0x434f00]
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x1c]
push edi
push edi
push eax
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 0x24]
push eax
push dword [esp + 0x2c]
push dword [esp + 0x2c]
push 0x80000000
push edi
push esi
push 0x80
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x42d248], eax
push edi
call fcn.0040140b
test eax, eax
je 0x403cef
push 2
pop eax
jmp 0x403dae
call fcn.00403db6
cmp dword [0x434fc0], edi
jne 0x403d83
push 5
push dword [0x42d248]
call dword [sym.imp.USER32.dll_ShowWindow]
push str.RichEd20
call fcn.00406796
test eax, eax
jne 0x403d26
push str.RichEd32
call fcn.00406796
mov esi, dword [sym.imp.USER32.dll_GetClassInfoW]
mov ebp, str.RichEdit20W
push ebx
push ebp
push edi
call esi
test eax, eax
jne 0x403d50
push ebx
push str.RichEdit
push edi
call esi
push ebx
mov dword [str.RichEdit20W], ebp
call dword [sym.imp.USER32.dll_RegisterClassW]
mov eax, dword [0x433ee0]
push edi
add eax, 0x69
push 0x403e8e
movzx eax, ax
push edi
push eax
push dword [0x434f00]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push 5
mov esi, eax
call fcn.0040140b
push 1
call fcn.00403a30
mov eax, esi
jmp 0x403dae
push edi
call fcn.0040554c
test eax, eax
je 0x403da5
cmp dword [0x433ecc], edi
jne 0x403ce7
push 2
call fcn.0040140b
jmp 0x403ce7
push 1
call fcn.0040140b
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret