Function at 0x40312c
Capabilities:
Delete directory
Delete file
Delete registry key
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
push ebx
push esi
lea eax, [ebp - 0x38]
push edi
mov ebx, ecx
push eax
mov dword [ebp - 0x24], ebx
call fcn.0044c670
lea ecx, [ebp - 0x20]
mov dword [esp], 0x48c080
call fcn.00401355
mov eax, dword [0x481530]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push ecx
lea eax, [ebp - 0x20]
mov ecx, esp
push eax
call fcn.00401355
call fcn.0044c7f1
pop ecx
pop ecx
push 0x138d
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
xor esi, esi
push esi
push esi
push 0xf0
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x48c090], eax
mov eax, dword [0x481530]
mov edi, 0x494f48
lea ecx, [ebp - 0x30]
push edi
mov dword [ebp - 0x34], eax
call fcn.00401355
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
call fcn.00401521
push esi
push 0x481a34
call fcn.00463a78
pop ecx
mov dword [ebp - 0x14], eax
pop ecx
lea eax, [ebp - 0x30]
push eax
mov ecx, edi
call fcn.00401521
mov dword [ebp - 0x2c], esi
mov dword [ebp - 8], esi
push esi
lea ecx, [ebp - 0x1c]
call fcn.004016d3
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov edi, dword [ecx - 8]
mov ecx, dword [0x481530]
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x2c]
push ecx
push edi
push eax
call fcn.0046362f
add esp, 0x10
test eax, eax
je 0x4032be
lea eax, [ebp - 0x18]
lea ecx, [ebp - 4]
push eax
call fcn.00401355
lea ecx, [ebp - 4]
call fcn.00408827
lea ecx, [ebp - 4]
call fcn.004087d7
push esi
push 0x481a30
lea ecx, [ebp - 4]
call fcn.00401799
test eax, eax
jne 0x403289
push 1
push esi
lea ecx, [ebp - 4]
call fcn.00408871
cmp dword [ebp - 8], esi
je 0x4032a5
push esi
push 0x2a
lea ecx, [ebp - 4]
call fcn.0040865c
test eax, eax
jne 0x40327e
push 1
push esi
lea ecx, [ebp - 4]
call fcn.00408871
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
mov dword [ebx + 0x1c], esi
call fcn.00401355
mov ecx, ebx
call fcn.00406a35
jmp 0x4032a5
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x4032a5
cmp dword [ebp - 8], esi
jne 0x4032a5
push 0xa0
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 4]
call fcn.0040139b
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x2c]
push eax
push edi
push dword [ebp - 0xc]
jmp 0x4031fe
cmp dword [ebp - 8], esi
jne 0x4032da
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], 1
mov dword [ebp - 0x2c], esi
call fcn.0040139b
jmp 0x4031d9
cmp dword [ebp - 0x14], esi
mov ecx, reloc.SHELL32.dll_SHChangeNotifyRegister
jne 0x4032e5
dec ecx
mov eax, dword [0x48c088]
lea edx, [ebp - 8]
push edx
push 0xf003f
push esi
push eax
push ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 8], esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x403314
lea ecx, [ebp - 0x10]
call fcn.0040372d
mov eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
push 0x481a20
lea ecx, [ebp - 8]
call fcn.004013c7
lea eax, [ebp - 8]
mov ebx, 0x4950a8
push eax
lea eax, [ebp - 0xc]
push ebx
push eax
call fcn.004015b5
push dword [eax]
mov edi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push dword [ebp - 0x10]
call edi
lea ecx, [ebp - 0xc]
call fcn.0040139b
lea ecx, [ebp - 8]
call fcn.0040139b
push 0x481a0c
lea ecx, [ebp - 8]
call fcn.004013c7
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push ebx
push eax
call fcn.004015b5
push dword [eax]
push dword [ebp - 0x10]
call edi
lea ecx, [ebp - 0xc]
call fcn.0040139b
lea ecx, [ebp - 8]
call fcn.0040139b
push dword [0x4950a8]
push dword [ebp - 0x10]
call edi
cmp dword [ebp - 0x10], esi
je 0x40339f
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], esi
cmp dword [0x48c090], esi
je 0x40340d
lea eax, [ebp - 0xc]
mov dword [ebp - 8], esi
push eax
call fcn.0044d010
mov eax, dword [eax]
pop ecx
lea ecx, [ebp - 4]
mov dword [ebp - 4], esi
push ecx
push 0xf003f
push esi
push eax
push SHChangeNotifyDeregister
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4033e1
lea ecx, [ebp - 8]
call fcn.0040372d
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0xc]
call fcn.0040139b
lea eax, [ebp - 0xc]
push eax
call fcn.0044d023
pop ecx
push dword [eax]
lea ecx, [ebp - 8]
call fcn.00403744
lea ecx, [ebp - 0xc]
call fcn.0040139b
lea ecx, [ebp - 8]
call fcn.0040372d
cmp dword [ebp - 0x14], esi
je 0x403597
push 1
mov ebx, str.Folder
pop edi
push esi
push edi
push ecx
mov dword [0x48c08c], edi
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
cmp eax, esi
je 0x40344e
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
push esi
push edi
push ecx
mov ebx, str.Directory
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
cmp eax, esi
je 0x40347d
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
push esi
push edi
push ecx
mov ebx, str.CLSID20D04FE0_3AEA_1069_A2D8_08002B30309D
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
cmp eax, esi
je 0x4034ac
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
push esi
push edi
push ecx
mov ebx, str.CLSID450D8FBA_AD25_11D0_98A8_0800361B1103
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
cmp eax, esi
je 0x4034db
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
push esi
push edi
push ecx
mov ebx, str.CLSID645FF040_5081_101B_9F08_00AA002F954E
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
cmp eax, esi
je 0x40350a
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
push esi
push edi
push ecx
mov ebx, str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
cmp eax, esi
je 0x403539
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
push esi
push edi
push ecx
mov ebx, str.CLSID46e06680_4bf0_11d1_83ee_00a0c90dc849
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
cmp eax, esi
je 0x403568
push esi
push esi
push ecx
mov ecx, esp
push ebx
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
push esi
push edi
push ecx
mov edi, str.CLSIDBDEADF00_C265_11D0_BCED_00A0C90AB50F
mov ecx, esp
push edi
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
cmp eax, esi
je 0x403597
push esi
push esi
push ecx
mov ecx, esp
push edi
call fcn.004013c7
call fcn.004309dc
add esp, 0xc
mov edi, dword [ebp - 0x24]
push esi
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push str.__seiteFreeware_
lea ecx, [ebp - 0x14]
call fcn.004013c7
push str._Uninstall
lea ecx, [ebp - 4]
call fcn.004013c7
push eax
lea eax, [ebp - 0x14]
push 0x494f4c
push eax
lea eax, [ebp - 8]
push eax
call fcn.0041329f
pop ecx
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004015b5
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004015b5
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004015b5
lea ecx, [ebp - 0x24]
call fcn.0040139b
lea ecx, [ebp - 0xc]
call fcn.0040139b
lea ecx, [ebp - 8]
call fcn.0040139b
lea ecx, [ebp - 4]
call fcn.0040139b
lea ecx, [ebp - 0x14]
call fcn.0040139b
call fcn.00430931
test eax, eax
je 0x4036b5
lea eax, [ebp - 0x238]
push eax
push 0xff
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x238]
lea ecx, [ebp - 4]
push eax
call fcn.00407ed4
lea eax, [ebp - 4]
push eax
call fcn.00452f05
lea ecx, [ebp - 0x14]
mov dword [esp], str.softwareok_tmp_link.url
call fcn.004013c7
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401657
lea ecx, [ebp - 0x14]
call fcn.0040139b
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00401355
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.00401355
call fcn.00401e8d
pop ecx
pop ecx
push 3
push esi
push dword [ebp - 4]
push str.explorer.exe
push str.open
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 4]
call fcn.0040139b
jmp 0x4036c8
push 3
push esi
push esi
push dword [ebp - 0x28]
push str.open
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
call fcn.00403866
movzx ebx, word [ebp + 0xc]
push ebx
push dword [edi + 4]
call dword [sym.imp.USER32.dll_EndDialog]
lea ecx, [ebp - 0x28]
call fcn.0040139b
cmp dword [ebp - 0x10], esi
je 0x4036f4
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], esi
lea ecx, [ebp - 0x18]
call fcn.0040139b
lea ecx, [ebp - 0x30]
call fcn.0040139b
lea ecx, [ebp - 0x34]
call fcn.0040139b
lea ecx, [ebp - 0x1c]
call fcn.0040139b
lea ecx, [ebp - 0x20]
call fcn.0040139b
lea ecx, [ebp - 0x38]
call fcn.0040139b
pop edi
mov eax, ebx
pop esi
pop ebx
leave
ret 0x10