Function at 0x40b9cf
Capabilities:
Delete directory
Delete file
Delete registry key
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c4
push ebx
push esi
push edi
xor esi, esi
push dword [ebp + 8]
mov dword [ebp - 8], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x18], esi
call fcn.004044ca
test eax, eax
pop ecx
jne 0x40ba01
push 0xb
call fcn.00406cd3
push eax
push esi
jmp 0x40bd09
push dword [ebp + 8]
mov esi, dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringA]
lea eax, [ebp - 0x5c4]
mov ebx, 0x412a30
push 0x104
push eax
push ebx
mov edi, str.Uninstall
push str.StartMenuFolder
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x2b4]
push 0x104
push eax
push ebx
push str.DestFolder
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x64]
push 0x40
push eax
push ebx
push 0x4111f8
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x1ac]
push 0x40
push eax
push ebx
push str.RegProductName
push edi
call esi
lea eax, [ebp - 0x64]
push eax
push 0xc
call fcn.00406cd3
pop ecx
push eax
lea eax, [ebp - 0x9c4]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x9c4]
xor edi, edi
push eax
push edi
call fcn.0040151e
add esp, 0x14
cmp eax, 6
jne 0x40bd42
push edi
call fcn.0040377a
call fcn.00403754
push 0xd
call fcn.00406cd3
push eax
call fcn.004037b7
call fcn.00401366
lea eax, [ebp - 0x4bc]
push eax
push dword [ebp + 8]
call fcn.0040468f
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x4bc]
push eax
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 0x1c
test eax, eax
jne 0x40bc6d
push dword [ebp + 8]
push edi
push str.NumOfFiles
push str.InstFiles
call dword [sym.imp.KERNEL32.DLL_GetPrivateProfileIntA]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x2b4]
push eax
mov dword [ebp - 0x10], edi
call sub.MSVCRT.dll_strlen
cmp dword [ebp - 0x14], edi
pop ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], edi
jle 0x40bc5e
mov dl, byte [0x412a30]
push 0x3f
pop ecx
xor eax, eax
lea edi, [ebp - 0x3b3]
mov byte [ebp - 0x3b4], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x167]
mov byte [ebp - 0x168], dl
push dword [ebp - 4]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push str.File
lea eax, [ebp - 0x3b4]
push str._s_d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x168]
push dword [ebp + 8]
push 0x104
push eax
lea eax, [ebp - 0x3b4]
push ebx
push eax
push str.InstFiles
call esi
lea eax, [ebp - 0x168]
xor edi, edi
push eax
call fcn.004046b9
test eax, eax
pop ecx
je 0x40bbb2
push 0x412858
push eax
call dword [sym.imp.MSVCRT.dll__strcmpi]
pop ecx
test eax, eax
pop ecx
jne 0x40bbb2
push 1
pop edi
cmp byte [ebp - 0x168], 0
je 0x40bc4d
test edi, edi
jne 0x40bbe1
push dword [ebp - 0x20]
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x2b4]
push eax
call dword [sym.imp.MSVCRT.dll__strnicmp]
add esp, 0xc
test eax, eax
jne 0x40bc4d
xor edi, edi
lea eax, [ebp - 0x168]
push eax
call fcn.0040b948
test eax, eax
pop ecx
jne 0x40bc41
cmp dword [ebp - 0x18], eax
jne 0x40bc3b
lea eax, [ebp - 0x168]
push eax
call fcn.004044ca
test eax, eax
pop ecx
je 0x40bc3b
lea eax, [ebp - 0x168]
push eax
call fcn.004037e5
push eax
call fcn.0040be3b
pop ecx
cmp eax, 3
pop ecx
jne 0x40bc28
push 1
pop edi
jmp 0x40bbe3
cmp eax, 4
je 0x40bc4d
cmp eax, 5
je 0x40bc46
cmp eax, 2
je 0x40bcfa
test edi, edi
je 0x40bc4d
jmp 0x40bbe3
inc dword [ebp - 0x10]
jmp 0x40bc4d
mov dword [ebp - 0x18], 1
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x14]
jl 0x40bb1e
xor edi, edi
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x10], eax
jne 0x40bc6d
mov dword [ebp - 8], 1
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
lea eax, [ebp - 0x2b4]
push eax
call fcn.004015e6
pop ecx
lea eax, [ebp - 0x5c4]
push eax
call dword [sym.imp.KERNEL32.DLL_RemoveDirectoryA]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040b60b
test eax, eax
pop ecx
jne 0x40bcbf
lea eax, [ebp - 0x1ac]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xc], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.004037cd
cmp dword [ebp - 0xc], edi
je 0x40bd16
cmp dword [ebp - 8], edi
je 0x40bd1b
lea eax, [ebp - 0x64]
push eax
push 0xf
call fcn.00406cd3
pop ecx
push eax
lea eax, [ebp - 0x9c4]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x9c4]
push eax
push edi
call fcn.00401508
add esp, 0x14
jmp 0x40bd42
call fcn.004037cd
push 0xe
call fcn.00406cd3
push eax
push 0
call fcn.004014f2
add esp, 0xc
push 1
pop eax
jmp 0x40bd44
cmp dword [ebp - 8], edi
jne 0x40bd31
push 0x10
call fcn.00406cd3
push eax
push edi
call fcn.004014f2
add esp, 0xc
cmp dword [ebp - 0xc], edi
jne 0x40bd42
push 0x11
call fcn.00406cd3
push eax
push edi
call fcn.004014f2
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret