Function at 0x42aca0
Capabilities:
Delete file
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53fc0a
mov eax, dword fs:[0]
push eax
sub esp, 0x66c
mov eax, dword [0x580280]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x678], ecx
mov dword [ebp - 0x220], 0
xor eax, eax
mov word [ebp - 0x42c], ax
push 0x206
push 0
lea ecx, [ebp - 0x42a]
push ecx
call fcn.00486c20
add esp, 0xc
xor edx, edx
mov word [ebp - 0x21c], dx
push 0x206
push 0
lea eax, [ebp - 0x21a]
push eax
call fcn.00486c20
add esp, 0xc
push 0x54dd68
lea ecx, [ebp - 0x434]
call fcn.00421fb0
mov dword [ebp - 4], 0
push 0x54dd6c
lea ecx, [ebp - 0x430]
call fcn.00421fb0
mov byte [ebp - 4], 1
push 0x54dd70
lea ecx, [ebp - 0x224]
call fcn.00421fb0
mov byte [ebp - 4], 2
push 0
push 0x17
lea ecx, [ebp - 0x42c]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x42b183
push 0x54dd74
lea edx, [ebp - 0x42c]
push edx
push 0x54dd80
lea eax, [ebp - 0x21c]
push eax
call fcn.00487ebf
add esp, 0x10
lea ecx, [ebp - 0x21c]
push ecx
call fcn.0044a5b0
add esp, 4
lea edx, [ebp - 0x21c]
push edx
push 0x54dd90
lea eax, [ebp - 0x434]
push eax
call fcn.0042c060
add esp, 0xc
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x21c]
push ecx
push 0x54dda8
lea edx, [ebp - 0x434]
push edx
call fcn.0042c060
add esp, 0xc
call fcn.004058c0
mov ecx, eax
call fcn.00447820
push eax
push 0x54ddc0
lea eax, [ebp - 0x430]
push eax
call fcn.0042c060
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x63c], cx
push 0x206
push 0
lea edx, [ebp - 0x63a]
push edx
call fcn.00486c20
add esp, 0xc
push 0
push 0x26
lea eax, [ebp - 0x63c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0x54ddd8
lea ecx, [ebp - 0x63c]
push ecx
call fcn.00486ab7
add esp, 8
push str.http:__www.rmrili.com_
lea ecx, [ebp - 0x674]
call fcn.00405f30
mov byte [ebp - 4], 3
lea edx, [ebp - 0x674]
push edx
lea eax, [ebp - 0x658]
push eax
call fcn.0044ed60
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x674]
call fcn.00405fb0
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
lea ecx, [ebp - 0x658]
call fcn.004012c0
push eax
push 0x54de30
push 0x54de38
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
lea ecx, [ebp - 0x63c]
push ecx
push 0x54de5c
push 0x54de70
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
push 0x54de94
push 0x54de98
push 0x54dea8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
push 0x54decc
push 0x54ded0
push 0x54dee0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
push 0x54df04
push 0x54df08
push 0x54df1c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x430]
call fcn.00405cf0
push eax
lea ecx, [ebp - 0x658]
call fcn.004012c0
push eax
push 0x54df40
push 0x54df48
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x430]
call fcn.00405cf0
push eax
lea edx, [ebp - 0x63c]
push edx
push str.IconFile
push 0x54df80
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x430]
call fcn.00405cf0
push eax
push 0x54dfa4
push 0x54dfa8
push 0x54dfb8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x430]
call fcn.00405cf0
push eax
push 0x54dfdc
push 0x54dfe0
push 0x54dff0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x430]
call fcn.00405cf0
push eax
push 0x54e014
push 0x54e018
push str.InternetShortcut
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp - 0x21c]
push eax
push 0x54e050
lea ecx, [ebp - 0x434]
push ecx
call fcn.0042c060
add esp, 0xc
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.SoftUpd.exe
call fcn.004058c0
mov ecx, eax
call fcn.00447800
push eax
push 0x54e080
lea edx, [ebp - 0x430]
push edx
call fcn.0042c060
add esp, 0x10
push 0x54e08c
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0x430]
call fcn.00405cf0
push eax
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
mov ecx, dword [ebp - 0x678]
call fcn.0042b570
push 0x54e090
lea eax, [ebp - 0x21c]
push eax
push str._s_s.lnk
lea ecx, [ebp - 0x434]
push ecx
call fcn.0042c060
add esp, 0x10
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x54e0b0
call fcn.004058c0
mov ecx, eax
call fcn.00447800
push eax
push 0x54e0d8
lea edx, [ebp - 0x430]
push edx
call fcn.0042c060
add esp, 0x10
push 0x54e0e4
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0x430]
call fcn.00405cf0
push eax
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
mov ecx, dword [ebp - 0x678]
call fcn.0042b570
lea eax, [ebp - 0x21c]
push eax
push 0x54e0e8
lea ecx, [ebp - 0x434]
push ecx
call fcn.0042c060
add esp, 0xc
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.Uninst.exe
call fcn.004058c0
mov ecx, eax
call fcn.00447800
push eax
push 0x54e114
lea edx, [ebp - 0x430]
push edx
call fcn.0042c060
add esp, 0x10
push 0x54e120
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0x430]
call fcn.00405cf0
push eax
lea ecx, [ebp - 0x434]
call fcn.00405cf0
push eax
mov ecx, dword [ebp - 0x678]
call fcn.0042b570
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x658]
call fcn.00406040
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x224]
call fcn.00402890
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x430]
call fcn.00402890
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.00402890
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00486c08
mov esp, ebp
pop ebp
ret