Function at 0x42972a
Capabilities:
Create process on windows
Delete directory
Delete file
Get common file path
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x29c
push ebx
push esi
push edi
xor esi, esi
push str._seiteFreeware_
lea ecx, [ebp - 0x14]
mov dword [0x45a040], esi
call fcn.0040182e
push str._Uninstall
lea ecx, [ebp - 8]
call fcn.0040182e
push eax
lea eax, [ebp - 0x14]
push 0x4ca400
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00401044
pop ecx
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 4]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004019f3
lea ecx, [ebp - 4]
call fcn.00401802
lea ecx, [ebp - 0x4c]
call fcn.00401802
lea ecx, [ebp - 0x10]
call fcn.00401802
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp - 0x14]
call fcn.00401802
mov eax, dword [0x4ca400]
cmp dword [eax - 0xc], esi
jl 0x4297cb
mov dword [ebp - 0xc], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4297dd
mov ecx, dword [0x4581d0]
push eax
mov dword [ebp - 0xc], ecx
lea ecx, [ebp - 0xc]
call fcn.00401988
lea eax, [ebp - 0xc]
push str._Uninstall.ini
mov edi, 0x45b008
push eax
mov ebx, 0x4cae2c
push edi
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.00401a95
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00401a95
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp - 0x10]
call fcn.00401802
lea eax, [ebp - 0x48]
push eax
call fcn.0042a5b9
lea eax, [ebp - 0xc]
mov dword [esp], str..ini
push eax
push edi
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.00401a95
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00401a95
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp - 0x10]
call fcn.00401802
lea eax, [ebp - 0xc]
push str..exe
push eax
push edi
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.00401a95
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00401a95
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp - 0x10]
call fcn.00401802
lea eax, [ebp - 0xc]
push str._x64.exe
push eax
push edi
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.00401a95
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00401a95
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp - 0x10]
call fcn.00401802
mov eax, dword [0x4cae2c]
cmp dword [eax - 0xc], esi
jl 0x4298eb
mov dword [ebp - 0x24], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4298fd
mov ecx, dword [0x4581d0]
push eax
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x24]
call fcn.00401988
mov edi, 0x80
push edi
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push esi
push edi
push 4
push esi
push 1
push 0x40000000
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x429d20
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x20]
mov ecx, 0x4ca3fc
push eax
call fcn.0040711b
push 0xffffffffffffffff
push str.for_all_install
call fcn.0042a5a1
pop ecx
cmp eax, 0xffffffff
pop ecx
mov dword [ebp - 0x14], eax
jne 0x42999c
lea eax, [ebp - 4]
push 0x1877e
push eax
call fcn.0042b86c
pop ecx
lea eax, [ebp - 0x20]
pop ecx
push eax
lea eax, [ebp - 8]
push 0x45c3b0
push eax
call fcn.00408ead
push eax
lea ecx, [ebp - 4]
call fcn.00401b5d
lea ecx, [ebp - 8]
call fcn.00401802
push esi
push esi
push dword [ebp - 4]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 4]
jmp 0x429dd4
push esi
push str.portable_install
call fcn.0042a5a1
push esi
push str.admin_install
mov dword [ebp - 0x10], eax
call fcn.0042a5a1
add esp, 0x10
xor eax, eax
cmp dword [ebp - 0x14], esi
lea edi, [ebp - 0x8c]
push 6
mov dword [ebp - 0x9c], esi
pop ecx
mov dword [ebp - 0x98], 2
mov dword [ebp - 0x94], 0x1a
mov dword [ebp - 0x90], 0xb
rep stosd dword es:[edi], eax
push 6
lea edi, [ebp - 0x64]
pop ecx
mov dword [ebp - 0x74], 0x19
mov dword [ebp - 0x70], 0x17
mov dword [ebp - 0x6c], 0x16
mov dword [ebp - 0x68], 0x23
lea ebx, [ebp - 0x9c]
rep stosd dword es:[edi], eax
je 0x429a1b
lea ebx, [ebp - 0x74]
mov eax, dword [0x4581d0]
push esi
push dword [ebx]
mov edi, 0x400
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x18], eax
push edi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], eax
call fcn.00401b75
push eax
push esi
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call esi
push 0xffffffffffffffff
lea ecx, [ebp - 0x3c]
call fcn.00401bdd
push 0
lea ecx, [ebp - 0x30]
push dword [ebx + 4]
push edi
call fcn.00401b75
push eax
push 0
call esi
push 0xffffffffffffffff
lea ecx, [ebp - 0x30]
call fcn.00401bdd
push 0
lea ecx, [ebp - 0x34]
push dword [ebx + 8]
push edi
call fcn.00401b75
push eax
push 0
call esi
push 0xffffffffffffffff
lea ecx, [ebp - 0x34]
call fcn.00401bdd
push 0
lea ecx, [ebp - 0x44]
push dword [ebx + 0xc]
push edi
call fcn.00401b75
xor ebx, ebx
push eax
push ebx
call esi
push 0xffffffffffffffff
lea ecx, [ebp - 0x44]
call fcn.00401bdd
push str._s_s.lnk
lea ecx, [ebp - 0x28]
call fcn.004070c2
push dword [0x4ca400]
lea eax, [ebp - 0x18]
push dword [ebp - 0x3c]
push dword [ebp - 0x28]
push eax
call fcn.00408f2b
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0x10
push dword [ebp - 0x18]
call esi
push dword [0x4ca400]
lea eax, [ebp - 0x18]
push dword [ebp - 0x34]
push dword [ebp - 0x28]
push eax
call fcn.00408f2b
add esp, 0x10
push dword [ebp - 0x18]
call esi
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 0xc]
push 0x45c304
push eax
lea eax, [ebp - 8]
push eax
call fcn.00401a95
push dword [eax]
lea eax, [ebp - 0x18]
push dword [0x4cae2c]
push edi
push eax
call fcn.00408f2b
add esp, 0x10
lea ecx, [ebp - 8]
call fcn.00401802
push dword [ebp - 0x18]
call esi
push dword [ebp - 0x20]
call esi
push dword [ebp - 0x40]
call esi
push dword [ebp - 0x1c]
call esi
push dword [ebp - 0x38]
call esi
push dword [ebp - 0x24]
mov edi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
call edi
cmp dword [ebp - 0x10], ebx
jne 0x429c74
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x30]
push 0x45b008
push eax
lea eax, [ebp - 8]
push eax
call fcn.00401a95
push eax
lea eax, [ebp - 4]
push eax
call fcn.004019f3
lea ecx, [ebp - 8]
call fcn.00401802
push dword [ebp - 4]
call edi
push dword [0x4ca400]
lea eax, [ebp - 0x18]
push dword [ebp - 4]
push dword [ebp - 0x28]
push eax
call fcn.00408f2b
add esp, 0x10
push dword [ebp - 0x18]
call esi
xor eax, eax
cmp dword [ebp - 0x14], ebx
setne al
push eax
call fcn.004293f8
pop ecx
push dword [ebp - 4]
call edi
lea ecx, [ebp - 4]
call fcn.00401802
push ebx
push dword [ebp - 0xc]
call fcn.0043feb0
cmp dword [ebp - 0x14], ebx
pop ecx
pop ecx
je 0x429bda
push 1
push dword [ebp - 0xc]
call fcn.0043feb0
pop ecx
pop ecx
call fcn.00427304
test eax, eax
je 0x429c90
lea eax, [ebp - 0x29c]
push eax
push 0xff
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x29c]
lea ecx, [ebp - 4]
push eax
call fcn.004070c2
lea eax, [ebp - 4]
push eax
call fcn.00427025
lea ecx, [ebp - 0x14]
mov dword [esp], str.softwareok_tmp_link.url
call fcn.0040182e
lea eax, [ebp - 0x14]
lea ecx, [ebp - 4]
push eax
call fcn.00401b5d
lea ecx, [ebp - 0x14]
call fcn.00401802
push ecx
lea eax, [ebp - 0x2c]
mov ecx, esp
push eax
call fcn.004017bc
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.004017bc
call fcn.00427046
pop ecx
pop ecx
push 3
push ebx
push dword [ebp - 4]
push 0x45a328
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 4]
call fcn.00401802
jmp 0x429ca3
push ebx
push dword [0x4ca400]
call fcn.0043ff13
pop ecx
test eax, eax
pop ecx
je 0x429bda
push ebx
jmp 0x429bd0
push 3
push ebx
push ebx
push dword [ebp - 0x2c]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
call fcn.00429e20
lea ecx, [ebp - 0x28]
call fcn.00401802
lea ecx, [ebp - 0x3c]
call fcn.00401802
lea ecx, [ebp - 0x34]
call fcn.00401802
lea ecx, [ebp - 0x44]
call fcn.00401802
lea ecx, [ebp - 0x30]
call fcn.00401802
lea ecx, [ebp - 0x18]
call fcn.00401802
lea ecx, [ebp - 0x24]
call fcn.00401802
lea ecx, [ebp - 0x38]
call fcn.00401802
lea ecx, [ebp - 0x1c]
call fcn.00401802
lea ecx, [ebp - 0x40]
call fcn.00401802
lea ecx, [ebp - 0x48]
call fcn.00401802
lea ecx, [ebp - 0x20]
call fcn.00401802
lea ecx, [ebp - 0xc]
call fcn.00401802
lea ecx, [ebp - 0x2c]
call fcn.00401802
push 1
pop eax
jmp 0x429e1b
lea eax, [ebp - 4]
push 0x1877e
push eax
call fcn.0042b86c
pop ecx
pop ecx
push 0x45c5d4
lea ecx, [ebp - 0x14]
call fcn.0040182e
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x10]
push str.:_r_n
push eax
call fcn.00408ead
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
mov eax, dword [eax]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401ae1
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp - 0x10]
call fcn.00401802
lea ecx, [ebp - 0x14]
call fcn.00401802
mov edi, str._r_n_r_n
mov eax, edi
test eax, eax
je 0x429d95
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
push eax
lea ecx, [ebp - 4]
call fcn.00401ae1
lea eax, [ebp - 8]
push 0x1877d
push eax
call fcn.0042b86c
pop ecx
pop ecx
push eax
lea ecx, [ebp - 4]
call fcn.00401b5d
lea ecx, [ebp - 8]
call fcn.00401802
push esi
push esi
push dword [ebp - 4]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004089fd
lea ecx, [ebp - 4]
call fcn.00401802
lea ecx, [ebp - 0x24]
call fcn.00401802
lea ecx, [ebp - 0x38]
call fcn.00401802
lea ecx, [ebp - 0x1c]
call fcn.00401802
lea ecx, [ebp - 0x40]
call fcn.00401802
lea ecx, [ebp - 0x48]
call fcn.00401802
lea ecx, [ebp - 0x20]
call fcn.00401802
lea ecx, [ebp - 0xc]
call fcn.00401802
lea ecx, [ebp - 0x2c]
call fcn.00401802
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret