Function at 0x4234b0
Capabilities:
Check if file exists
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5723e2
mov eax, dword fs:[0]
push eax
sub esp, 0x210
mov eax, dword [0x5bb250]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x21c], esi
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x214], eax
lea eax, [ebp - 0x214]
push eax
push 0x596804
mov dword [ebp - 0x218], 1
mov dword [edi + 4], 0x208
call fcn.00422b60
test eax, eax
je 0x42378b
cmp dword [ebp - 0x214], 0
je 0x42378b
cmp dword [ebp + 0xc], 0
je 0x423594
cmp dword [edi + 0xa0], 0
jne 0x423572
cmp dword [edi + 0x4c], 8
lea eax, [edi + 0x38]
jb 0x42355f
mov eax, dword [eax]
push 0x596804
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
jmp 0x423594
cmp dword [edi + 0xb8], 8
lea eax, [edi + 0xa4]
jb 0x423583
mov eax, dword [eax]
push 0x5966e0
push 0x596804
push eax
call dword [sym.imp.WININET.dll_InternetSetCookieW]
xor eax, eax
push 0x7e
push eax
mov word [ebp - 0x110], ax
lea eax, [ebp - 0x10e]
push eax
call fcn.0053ca90
add esp, 8
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push str.chkupdate
call fcn.00422c80
test eax, eax
je 0x42378b
cmp word [ebp - 0x110], 0
je 0x42378b
cmp dword [ebp + 0xc], 0
je 0x423627
cmp dword [edi + 0xa0], 0
jne 0x423605
cmp dword [edi + 0x4c], 8
lea eax, [edi + 0x38]
jb 0x4235f2
mov eax, dword [eax]
push str.chkupdate
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
jmp 0x423627
cmp dword [edi + 0xb8], 8
lea eax, [edi + 0xa4]
jb 0x423616
mov eax, dword [eax]
push 0x5966e0
push str.chkupdate
push eax
call dword [sym.imp.WININET.dll_InternetSetCookieW]
mov ecx, edi
call fcn.004217c0
mov edi, eax
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42378b
xor eax, eax
push 0x7e
push eax
mov word [ebp - 0x90], ax
lea eax, [ebp - 0x8e]
push eax
call fcn.0053ca90
add esp, 8
lea edx, [ebp - 0x90]
mov ecx, edi
call fcn.004141d0
lea ecx, [ebp - 0x90]
add esp, 4
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423673
sub ecx, edx
sar ecx, 1
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x90]
push eax
push 0x5bc674
call fcn.0053c3c0
xor eax, eax
push 0x7e
push eax
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x20e]
push eax
call fcn.0053ca90
add esp, 0x14
lea eax, [ebp - 0x210]
mov edx, 0xf0
mov ecx, 0x5bc650
push eax
call fcn.004140d0
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0053d642
add esp, 0x10
test eax, eax
jne 0x42378b
push 0x7e
push eax
mov word [ebp - 0x190], ax
lea eax, [ebp - 0x18e]
push eax
call fcn.0053ca90
push 0x3f
lea edx, [ebp - 0x190]
mov ecx, edi
call fcn.00411900
add esp, 0x10
test eax, eax
je 0x42378b
cmp word [0x5c0d08], 0
jne 0x423750
cmp word [0x5c0d90], 0
jne 0x42373c
push 0x103
push 0x5c0d90
push dword [0x5c13bc]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x3f
mov edx, 0x5c0d08
mov ecx, 0x5c0d90
call fcn.00411900
add esp, 4
lea edx, [ebp - 0x190]
mov ecx, 0x5c0d08
call fcn.004175a0
test eax, eax
jns 0x42378b
cmp word [edi], 0
jne 0x42376e
xor ecx, ecx
jmp 0x423782
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423773
sub ecx, edx
sar ecx, 1
push ecx
push edi
mov ecx, esi
call fcn.004203d0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0053e21c
mov esp, ebp
pop ebp
ret 8