Function at 0x40ce20
Capabilities:
Check if file exists
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4546e0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x42c
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov eax, dword [ebx + 0x10]
push edi
mov edi, ecx
mov dword [ebp - 0x20], edi
test eax, eax
je 0x40d13a
cmp eax, 6
je 0x40d13a
xor ecx, ecx
mov dword [ebp + 0x10], ecx
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x40cfe5
mov eax, dword [edx]
lea ecx, [ebp + 0x10]
push ecx
push ebx
push edx
call dword [eax + 0x14]
mov ecx, dword [ebp + 0x10]
test ecx, ecx
je 0x40cff6
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0x34]
cmp dword [ebp - 0x1c], 0
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
je 0x40cf5f
mov eax, dword [section..data]
mov ecx, section..data
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
push str.Uninst.exe
mov byte [ebp - 4], 1
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push 0x45be14
push eax
call fcn.004012e0
mov esi, dword [ebp - 0x18]
add esp, 0x10
push esi
call edi
test eax, eax
je 0x40cf41
push 0x45bf7c
lea ecx, [ebp + 0xc]
call fcn.00401560
mov byte [ebp - 4], 2
cmp byte [0x46fb80], 0
jne 0x40cf16
push 0x45decc
push str.Remove
lea eax, [ebp + 0xc]
push 0x45e064
push eax
call fcn.004012e0
add esp, 0x10
mov edx, dword [ebp + 0xc]
sub esp, 8
mov ecx, esi
call fcn.0040efb0
lea ecx, [ebp + 0xc]
test eax, eax
jne 0x40cf3c
call fcn.004018c0
lea ecx, [ebp - 0x18]
call fcn.004018c0
jmp 0x40d126
call fcn.004018c0
add esi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x40cf5f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 0x10]
lea esi, [ebp - 0x14]
mov dword [ebp - 0x14], 0
mov edx, dword [eax]
push esi
push eax
call dword [edx + 0x38]
cmp dword [ebp - 0x14], 0
je 0x40cfdf
mov eax, dword [section..data]
mov ecx, section..data
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0xc], eax
push str.Uninst.exe
mov byte [ebp - 4], 3
push dword [ebp - 0x14]
lea eax, [ebp + 0xc]
push 0x45be14
push eax
call fcn.004012e0
mov esi, dword [ebp + 0xc]
add esp, 0x10
push esi
call edi
test eax, eax
je 0x40cfd3
sub esp, 8
mov edx, 0x45bf7c
mov ecx, esi
call fcn.0040efb0
test eax, eax
jne 0x40cfd3
lea ecx, [ebp + 0xc]
call fcn.004018c0
jmp 0x40d126
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0
call fcn.004018c0
mov edi, dword [ebp - 0x20]
mov ecx, dword [ebp + 0x10]
test ecx, ecx
je 0x40cff6
mov dword [ebp + 0x10], 0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, ebx
mov edx, 0x45cb2c
mov esi, 0xc
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40d01a
add ecx, 4
add edx, 4
sub esi, 4
jae 0x40d002
mov eax, 1
jmp 0x40d01c
xor eax, eax
test eax, eax
je 0x40d024
xor ecx, ecx
jmp 0x40d02a
lea ecx, [ebx + 0xdc]
neg eax
push ecx
sbb eax, eax
push ebx
add eax, 2
push eax
mov ecx, edi
call fcn.0040d2a0
push ecx
push ebx
call fcn.0040d570
mov eax, dword [ebp + 8]
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
push ebx
call fcn.0040cd50
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x22c], ax
lea eax, [ebp - 0x22a]
push eax
call fcn.0043f760
add esp, 0xc
lea eax, [ebp - 0x22c]
push 0x104
push eax
push ebx
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea edi, [ebp - 0x22c]
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40d090
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x434], ax
lea eax, [ebp - 0x432]
mov ecx, 0xd
mov esi, str.AppSmallWindowFirstactive
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.0043f760
add esp, 0xc
lea eax, [ebp - 0x434]
push 0x104
push eax
push ebx
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea edi, [ebp - 0x434]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40d0e2
lea eax, [ebp - 0x22c]
push eax
mov ecx, 0xd
mov esi, str.AppExperWindowFirstactive
push str.Software_bfAppStoreUserConfig
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
push closesocket
call esi
lea eax, [ebp - 0x434]
push eax
push str.Software_bfAppStoreUserConfig
push closesocket
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x40d13a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc