Function at 0x401de2
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x42b63c
call fcn.00412054
sub esp, 0x574
push ebx
push esi
push edi
mov edi, 0xff
xor ebx, ebx
push edi
lea eax, [ebp - 0x31f]
push ebx
push eax
mov byte [ebp - 0x320], bl
call fcn.00411920
mov eax, dword [ebp + 0xc]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
mov byte [eax], bl
lea eax, [ebp - 0x320]
push str._auto
push eax
mov dword [ebp - 0x14], ebx
call esi
add esp, 0x14
cmp dword [ebp + 8], ebx
je 0x401e46
push 0x42c7a8
lea eax, [ebp - 0x320]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
push ebx
lea eax, [ebp - 0x320]
push eax
push dword [ebp + 0x20]
push 0x42c7b4
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
cmp eax, 0x20
setg cl
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
jne 0x401ffb
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c7
jne 0x402066
push ebx
lea ecx, [ebp - 0x580]
call fcn.00401b9b
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x320]
cmp dword [ebp + 8], ebx
je 0x401ea4
push str.__scheduled
jmp 0x401ea9
push 0x42c4c2
push eax
call esi
pop ecx
pop ecx
push edi
lea eax, [ebp - 0x11f]
push ebx
push eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x120], bl
call fcn.00411920
push 0x4c7
lea eax, [ebp - 0x120]
push 0x42c7c8
push eax
call esi
lea eax, [ebp - 0x120]
push eax
call fcn.0040f1c7
push ebx
push dword [ebp + 0x1c]
lea eax, [ebp - 0x14]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00401660
mov eax, dword [ebp - 0x14]
add esp, 0x38
push 1
mov dword [ebp - 0x54c], eax
push 1
lea eax, [ebp - 0x580]
push eax
call fcn.0040bb20
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x580]
push eax
call fcn.0040b6cf
test eax, eax
je 0x402051
cmp dword [ebp - 0x18], 0x2ee2
jne 0x401f97
push 0x100
push dword [ebp + 0xc]
call fcn.004017d8
pop ecx
pop ecx
test eax, eax
je 0x401eae
push edi
lea eax, [ebp - 0x21f]
push ebx
push eax
mov byte [ebp - 0x220], bl
call fcn.00411920
lea eax, [ebp - 0x220]
push str.New_Update_Available_n
push eax
call esi
lea eax, [ebp - 0x220]
push eax
call fcn.0040f1c7
add esp, 0x18
lea ecx, [ebp - 0x580]
call fcn.00401cb3
xor eax, eax
jmp 0x4020a6
push 1
push ebx
lea eax, [ebp - 0x320]
push eax
push dword [ebp + 0x20]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
cmp eax, 0x20
setg cl
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
jne 0x401fd0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c7
je 0x401eae
push ebx
lea ecx, [ebp - 0x580]
call fcn.0040b704
cmp eax, ebx
je 0x401fe7
mov ecx, eax
call fcn.0040c02e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x580]
call fcn.00401cb3
cmp dword [ebp - 0x10], ebx
je 0x402066
push edi
lea eax, [ebp - 0x21f]
push ebx
push eax
mov byte [ebp - 0x220], bl
call fcn.00411920
push dword [ebp + 0x20]
lea eax, [ebp - 0x220]
push str.Started_UpdateChecker_process_Successfully:_s_n
push eax
call esi
add esp, 0x18
cmp dword [ebp + 8], ebx
je 0x40203f
push 0x42c874
push 0x42c89c
push 0x80000001
call fcn.0040ea17
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
call fcn.0040f1c7
pop ecx
jmp 0x401f90
push str.Cancelled_by_user_or_Received_shutdown_signal_n
call fcn.0040f1c7
mov eax, dword [ebp + 0x24]
pop ecx
mov dword [eax], ebx
jmp 0x401fd0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
mov dword [ebp + 8], eax
lea eax, [ebp - 0x11f]
push ebx
push eax
mov byte [ebp - 0x120], bl
call fcn.00411920
push dword [ebp + 8]
lea eax, [ebp - 0x120]
push str.Failed_to_start_UpdateChecker_process:_d_n
push eax
call esi
lea eax, [ebp - 0x120]
push eax
call fcn.0040f1c7
mov eax, dword [ebp + 8]
add esp, 0x1c
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret