Function at 0x404010
Capabilities:
Create process on windows
Delete file
Move file
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4065c0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
mov esi, ecx
call sub.MFC42.DLL_CCmdTarget::BeginWaitCursor
lea ecx, [esi + 0x1b8]
push 0x4093d0
call fcn.0040583a
push 0
mov ecx, esi
call sub.MFC42.DLL_CWnd::UpdateData
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.Eps.exe
call sub.MFC42.DLL_CString::CString_2
mov ecx, esi
call fcn.00404440
mov edi, eax
cmp edi, 0xffffffff
je 0x4040c8
lea eax, [esi + 0x60]
push 0x409360
lea ecx, [esp + 0x20]
push eax
push ecx
call sub.MFC42.DLL_operator
mov eax, dword [eax]
push 0
push 1
push eax
mov dword [esp + 0x40], 0
call sub.MFC42.DLL_AfxMessageBox
cmp eax, 1
lea ecx, [esp + 0x1c]
sete bl
mov dword [esp + 0x34], 0xffffffff
call sub.MFC42.DLL_CString::CString
test bl, bl
je 0x4040c8
push edi
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x4040c8
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
push str.taskkill__f__im_Eps.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
mov edx, dword [esi + 0x198]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x402
push edx
call ebp
mov eax, dword [esi + 0x84]
xor ebx, ebx
test eax, eax
mov dword [esp + 0x1c], ebx
jle 0x404274
lea ecx, [esp + 0x10]
call fcn.00405846
lea ecx, [esp + 0x14]
mov dword [esp + 0x34], 1
call fcn.00405846
mov eax, dword [esi + 0x80]
lea edi, [ebx*4]
add eax, edi
lea ecx, [esp + 0x14]
push eax
mov byte [esp + 0x38], 2
call fcn.0040586a
mov ecx, dword [esi + 0x94]
add edi, ecx
lea ecx, [esp + 0x10]
push edi
call fcn.0040586a
fild dword [esp + 0x1c]
mov ecx, dword [esi + 0x84]
push 0
mov dword [esp + 0x24], ecx
fmul qword [0x407a70]
fidiv dword [esp + 0x24]
call sub.MSVCRT.dll__ftol
mov edx, dword [esi + 0x198]
push eax
push 0x402
push edx
call ebp
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [esi + 0x1c0]
push 0x409480
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 3
call sub.MFC42.DLL_CString::Replace
lea ecx, [esp + 0x18]
lea edx, [esp + 0x24]
push ecx
push 0x409338
push edx
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [esi + 0x1b8]
mov byte [esp + 0x38], 4
call fcn.0040586a
lea ecx, [esp + 0x24]
mov byte [esp + 0x34], 3
call sub.MFC42.DLL_CString::CString
push 0
mov ecx, esi
call sub.MFC42.DLL_CWnd::UpdateData
mov eax, dword [esp + 0x10]
push 0
push eax
call dword [sym.imp.MSVCRT.dll__access]
add esp, 8
test eax, eax
jne 0x404200
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x404234
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call sub.MFC42.DLL_CString::CString_1
call fcn.00402050
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push eax
push ecx
call dword [sym.imp.MSVCRT.dll_rename]
mov edx, dword [esp + 0x20]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x34], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov dword [esp + 0x34], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, dword [esi + 0x84]
inc ebx
cmp ebx, eax
mov dword [esp + 0x1c], ebx
jl 0x404101
mov eax, dword [esi + 0x198]
push 0
push 0
push 0x402
push eax
call ebp
mov ecx, dword [esi + 0xac]
xor edi, edi
test ecx, ecx
jle 0x4042ff
xor ebx, ebx
mov eax, ebx
push 0
cdq
idiv ecx
mov ecx, dword [esi + 0x198]
push eax
push 0x402
push ecx
call ebp
mov edx, dword [esi + 0xa8]
mov eax, dword [edx + edi*4]
push eax
lea eax, [esi + 0x1b8]
push 0x409324
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
mov ecx, esi
push 0
call sub.MFC42.DLL_CWnd::UpdateData
push edi
lea ecx, [esi + 0xa4]
call fcn.00403970
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call sub.MFC42.DLL_CString::CString_1
mov ecx, esi
call fcn.00403f50
mov ecx, dword [esi + 0xac]
inc edi
add ebx, 0x64
cmp edi, ecx
jl 0x404294
mov ecx, dword [esi + 0x198]
push 0
push 0
push 0x402
push ecx
call ebp
mov edx, dword [esi + 0x158]
push 0
push 0
push 0x182
push edx
call ebp
lea eax, [esi + 0x60]
push 0x4090cc
lea ecx, [esp + 0x24]
push eax
push ecx
call sub.MFC42.DLL_operator
lea edi, [esi + 0x70]
lea edx, [esp + 0x24]
push edi
push eax
push edx
mov dword [esp + 0x40], 5
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push eax
mov eax, dword [esi + 0x158]
push 0
push 0x180
push eax
call ebp
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::CString
or ebp, 0xffffffff
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], ebp
call sub.MFC42.DLL_CString::CString
push 0x409278
lea ecx, [esi + 0xf8]
call sub.MFC42.DLL_CWnd::SetWindowTextA
push 0x409318
lea ecx, [esi + 0x1b8]
call fcn.0040583a
push 0
mov ecx, esi
call sub.MFC42.DLL_CWnd::UpdateData
lea ebx, [esi + 0x1bc]
push str.update.vcs
lea ecx, [esp + 0x2c]
push ebx
push ecx
call sub.MFC42.DLL_operator
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebx
call sub.MFC42.DLL_CString::CString_1
call fcn.004021c0
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call sub.MFC42.DLL_CString::CString_1
push ecx
mov dword [esp + 0x3c], 6
mov ecx, esp
mov dword [esp + 0x28], esp
push str.Version
call sub.MFC42.DLL_CString::CString_2
push ecx
mov byte [esp + 0x40], 7
mov ecx, esp
mov dword [esp + 0x28], esp
push str.LiveUpdate
call sub.MFC42.DLL_CString::CString_2
mov dword [esp + 0x40], ebp
call fcn.00401da0
add esp, 0xc
mov ecx, esi
call sub.MFC42.DLL_CCmdTarget::EndWaitCursor
mov ecx, dword [esp + 0x2c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x28
ret