Function at 0x40e3d0
Capabilities:
Create process on windows
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x43b423
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb4
push ebx
push ebp
mov ebp, ecx
mov eax, dword [ebp + 0x9c]
push esi
sub eax, 0x10
push edi
push eax
mov dword [esp + 0x2c], ebp
call fcn.004030d0
add esp, 4
add eax, 0x10
push 0x80
push eax
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [ebp + 0xa4]
mov eax, dword [eax - 0xc]
test eax, eax
mov dword [esp + 0xcc], 0
je 0x40e4e5
mov ecx, dword [ebp + 0xa8]
mov eax, dword [ecx - 0xc]
test eax, eax
je 0x40e4e5
call fcn.00431cfd
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0xa8]
push 2
push eax
lea ecx, [esp + 0x28]
push str._s__d
push ecx
mov byte [esp + 0xdc], 1
call fcn.004053d0
mov esi, dword [esp + 0x30]
mov eax, dword [ebp + 0xa4]
add esp, 0x10
push esi
push eax
push str.Hotfix
lea ecx, [esp + 0x1c]
call fcn.00410bd0
push 0xa7
push str..UpdateHotFixDlg.cpp
call fcn.00402180
mov ecx, eax
call fcn.00406c80
mov edx, dword [ebp + 0xa4]
push edx
push str._s_Update_Success
push 4
call fcn.00411820
lea eax, [esi - 0x10]
add esp, 0xc
mov byte [esp + 0xcc], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e4e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [ebp + 0x8c]
test eax, eax
je 0x40ebc8
jmp 0x40e500
mov eax, dword [ebp + 0x8c]
test eax, eax
lea esi, [ebp + 0x84]
jle 0x40ebd6
mov eax, dword [esi + 4]
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004030d0
lea ebx, [eax + 0x10]
mov dword [esp + 0x1c], ebx
lea eax, [esp + 0x1c]
push eax
lea edi, [ebp + 0xa0]
lea ecx, [esp + 0x2c]
push edi
push ecx
mov byte [esp + 0xdc], 2
call fcn.004054d0
add esp, 0x10
push 1
push 0
mov ecx, esi
mov byte [esp + 0xd4], 3
call fcn.0042fcf8
call fcn.00431cfd
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 4
call fcn.0042fb60
lea eax, [ebp + 0x9c]
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xd0], 5
call fcn.00405420
mov eax, dword [esp + 0x10]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [esp + 0x14]
push ecx
push ebx
push str.Hotfix
lea ecx, [esp + 0x1c]
call fcn.00410c40
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x3c]
push edx
push 0x2c
push eax
call fcn.00410390
mov eax, dword [esp + 0x50]
add esp, 0xc
cmp eax, 2
jne 0x40e641
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004030d0
lea esi, [eax + 0x10]
add esp, 4
mov dword [esp + 0x1c], esi
cmp dword [esp + 0x44], 1
mov byte [esp + 0xcc], 6
jle 0x40ebd6
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + 4]
push eax
call fcn.00422f01
add esp, 4
cmp eax, 1
je 0x40e6a6
lea eax, [esi - 0x10]
mov byte [esp + 0xcc], 5
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40e641
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 4
call fcn.0042fbb2
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e678
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e69e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebx - 0x10]
jmp 0x40eb95
lea ecx, [esp + 0x2c]
call fcn.00430a84
mov dword [esp + 0x2c], 0x43d5e8
mov ebx, dword [esp + 0x24]
push 0
push 0
push ebx
lea ecx, [esp + 0x38]
mov byte [esp + 0xd8], 7
call fcn.0041a230
test eax, eax
jne 0x40e700
push 0xcc
push str..UpdateHotFixDlg.cpp
call fcn.00402180
mov ecx, eax
call fcn.00406c80
push ebx
push str.Open__s__failed.
push 4
call fcn.00411820
add esp, 0xc
jmp 0x40eafe
xor eax, eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0xcc], 8
call fcn.0043097c
mov esi, eax
push esi
mov dword [esp + 0x58], esi
call fcn.00431cf3
mov ebp, eax
xor eax, eax
add esp, 4
cmp eax, esi
sbb eax, eax
and eax, ebp
push esi
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x60], ebp
call fcn.0041a2c0
cmp eax, esi
je 0x40e77b
push 0xd5
push str..UpdateHotFixDlg.cpp
call fcn.00402180
mov ecx, eax
call fcn.00406c80
push ebx
push str.Read__s__failed.
push 4
call fcn.00411820
add esp, 0xc
lea ecx, [esp + 0x2c]
call fcn.00430a22
jmp 0x40eaf1
lea ecx, [esp + 0x2c]
call fcn.00430a22
xor eax, eax
cmp eax, esi
sbb eax, eax
and eax, ebp
push esi
push eax
lea ecx, [esp + 0x64]
push ecx
call fcn.00410990
mov edx, dword [esp + 0x28]
mov eax, dword [eax]
push edx
push eax
call fcn.00422239
add esp, 0x14
test eax, eax
mov eax, dword [esp + 0x5c]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e7cb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test bl, bl
je 0x40e880
push 0xdd
push str..UpdateHotFixDlg.cpp
call fcn.00402180
mov ecx, eax
call fcn.00406c80
mov esi, dword [esp + 0x24]
push esi
push str.Md5_Check__s__failed.
push 4
call fcn.00411820
add esp, 0xc
test ebp, ebp
je 0x40e80a
push ebp
call fcn.00431cf8
add esp, 4
lea ecx, [esp + 0x2c]
mov byte [esp + 0xcc], 6
call fcn.00430ac3
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e841
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 4
call fcn.0042fbb2
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e878
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esi - 0x10]
jmp 0x40eb6f
call fcn.00431cfd
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
push str.UpdateHotfix.ini
lea eax, [esp + 0x54]
push edi
push eax
mov byte [esp + 0xd8], 9
call fcn.00405580
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xd0], 0xa
call fcn.00405420
mov ecx, dword [esp + 0x10]
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 9
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40e8f6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x20]
push eax
push ecx
push str.Hotfix
lea ecx, [esp + 0x1c]
call fcn.00410c40
xor eax, eax
mov ecx, 0x10
lea edi, [esp + 0x84]
rep stosd dword es:[edi], eax
push 0x43dfdc
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x74]
push eax
mov dword [esp + 0x8c], 0x44
call fcn.00405580
lea ecx, [esp + 0x2c]
push ecx
push eax
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0xe4], 0xb
call fcn.004054d0
add esp, 0x18
mov esi, eax
mov eax, dword [esi]
mov edi, dword [eax - 4]
sub eax, 0x10
mov eax, dword [eax + 8]
mov ecx, 1
sub ecx, edi
or eax, ecx
mov byte [esp + 0xcc], 0xc
jge 0x40e981
push 0
mov ecx, esi
call fcn.00403080
mov esi, dword [esi]
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x84]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov edi, eax
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 0xb
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40e9cd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40e9f3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test edi, edi
mov esi, str.success
jne 0x40ea01
mov esi, str.failed
push 0xf7
push str..UpdateHotFixDlg.cpp
call fcn.00402180
mov ecx, eax
call fcn.00406c80
mov ebx, dword [esp + 0x24]
push esi
push ebx
push str._s_Update..._CreateProcess__s_
push 4
call fcn.00411820
add esp, 0x10
push 0x43e290
lea ecx, [esp + 0x68]
call fcn.00406d20
lea ecx, [esp + 0x18]
push ecx
push eax
lea edx, [esp + 0x68]
push edx
mov byte [esp + 0xd8], 0xd
call fcn.004054d0
add esp, 0xc
mov eax, dword [eax]
mov esi, dword [esp + 0x28]
push eax
push 0x3e8
mov ecx, esi
mov byte [esp + 0xd4], 0xe
call fcn.00435b46
mov ecx, eax
call fcn.00435bd1
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 0xd
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ea9d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40eac3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test edi, edi
jne 0x40ebdb
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40eaf1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test ebp, ebp
je 0x40eafe
push ebp
call fcn.00431cf8
add esp, 4
lea ecx, [esp + 0x2c]
mov byte [esp + 0xcc], 6
call fcn.00430ac3
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40eb35
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 4
call fcn.0042fbb2
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40eb6c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebx - 0x10]
mov byte [esp + 0xcc], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40eb8e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ebb4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x8c]
test ecx, ecx
mov ebp, eax
jne 0x40e500
push 2
mov ecx, ebp
call fcn.00431fb0
jmp 0x40ed01
jmp fcn.0042fb3b
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esi + 0xa4]
mov dword [esi + 0xac], eax
call fcn.00405420
lea edx, [esp + 0x1c]
lea ecx, [esi + 0xa8]
push edx
call fcn.00405420
mov eax, dword [esi + 0x1c]
push 0
push 0x3e8
push 1
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ec3e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test ebp, ebp
je 0x40ec4b
push ebp
call fcn.00431cf8
add esp, 4
lea ecx, [esp + 0x2c]
mov byte [esp + 0xcc], 6
call fcn.00430ac3
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ec82
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 4
call fcn.0042fbb2
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ecb9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebx - 0x10]
mov byte [esp + 0xcc], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ecdb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0xcc], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ed01
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [esp + 0xcc], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ed2a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0xc4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xc0
ret