Function at 0x462f00
Capabilities:
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49fae9
mov eax, dword fs:[0]
push eax
sub esp, 0x4cc
mov eax, dword [0x4cc1c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4cc], ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x4d8], ecx
test ecx, ecx
jne 0x462f48
xor eax, eax
jmp 0x463414
cmp dword [ecx + 0x2c], 0
je 0x46340f
mov eax, dword [ecx + 8]
mov ebx, dword [ecx + 0xc]
mov edi, dword [ecx + 0x10]
mov esi, dword [ecx + 0x14]
mov dword [ebp - 0x4d0], eax
xor eax, eax
push 0xffffffffffffffff
push eax
mov word [ebp - 0x248], ax
lea eax, [ecx + 0x1c]
push eax
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x234], 7
mov dword [ebp - 0x238], 0
call fcn.0040bc90
mov ecx, dword [ebp - 0x4d8]
lea eax, [ebp - 0x248]
cmp dword [ebp - 0x234], 8
mov dword [ebp - 4], 0
cmovae eax, dword [ebp - 0x248]
push dword [ecx + 0x18]
push eax
push esi
push edi
push ebx
push dword [ebp - 0x4d0]
push str.OnHttpNotifyComplete_uTotalSize_I64u_uDownloadSize_I64u_strClsid_s_nError_d
push 0xf3
push str.UpdaterApp.cpp
call fcn.0040fa10
mov ebx, dword [ebp - 0x4cc]
lea eax, [ebp - 0x248]
add esp, 0x24
lea ecx, [ebx + 0x24]
push eax
lea eax, [ebp - 0x4cc]
push eax
call fcn.00463f50
mov esi, dword [ebp - 0x4cc]
cmp esi, dword [ebx + 0x24]
je 0x4633f8
mov eax, dword [esi + 0x28]
lea ecx, [ebp - 0x4c4]
add eax, 0x38
push eax
call fcn.00460fe0
lea eax, [ebp - 0x2e4]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x4c4]
call fcn.00415230
mov eax, dword [esi + 0x28]
xor ecx, ecx
push 0xffffffffffffffff
push ecx
add eax, 0x18
mov word [ebp - 0x2cc], cx
push eax
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 2
mov dword [ebp - 0x2b8], 7
mov dword [ebp - 0x2bc], 0
call fcn.0040bc90
mov edi, dword [esi + 0x28]
mov byte [ebp - 4], 3
test edi, edi
je 0x46307c
mov ecx, edi
call fcn.00461460
push edi
call fcn.00464c70
add esp, 4
push esi
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebx + 0x24]
call fcn.00463ca0
push dword [ebx + 0xc]
mov eax, dword [0x4d0b70]
inc eax
push eax
push str.OnHttpNotifyComplete_nCompleteCount_d_m_nDownloadCount_d
push 0xf3
push str.UpdaterApp.cpp
mov dword [0x4d0b70], eax
call fcn.0040fa10
lea eax, [ebp - 0x278]
push eax
call fcn.0048c850
push str.NfUpgradeRes.zip
push eax
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 4
push eax
call fcn.00405380
add esp, 0x24
cmp dword [ebp - 0x264], 8
jb 0x4630eb
push dword [ebp - 0x278]
call fcn.00464c70
add esp, 4
xor eax, eax
mov dword [ebp - 0x27c], 7
mov dword [ebp - 0x280], 0
mov word [ebp - 0x290], ax
cmp dword [ebp - 0x24c], 8
lea edx, [ebp - 0x290]
push edx
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 7
cmovae ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x2e4]
cmp dword [ebp - 0x2d0], 8
push 0x4b7448
cmovae eax, dword [ebp - 0x2e4]
push ecx
push eax
call fcn.00419b80
add esp, 0x10
cmp dword [ebp - 0x280], 0
je 0x46315a
push str.NfUpgradeRes_DeCrypt_error_
jmp 0x46315f
push str.NfUpgradeRes_DeCrypt_ok_
push 0xf3
push str.UpdaterApp.cpp
call fcn.0040fa10
add esp, 0xc
xor eax, eax
mov word [ebp - 0x218], ax
push 0x206
push eax
lea eax, [ebp - 0x216]
push eax
call fcn.00466700
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.is__x.tmp_
lea eax, [ebp - 0x218]
push 0xffffffffffffffff
push eax
call fcn.004054f0
lea eax, [ebp - 0x278]
push eax
call fcn.0048c850
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 8
push ecx
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.00405380
add esp, 0x20
cmp dword [ebp - 0x264], 8
mov byte [ebp - 4], 0xa
jb 0x4631eb
push dword [ebp - 0x278]
call fcn.00464c70
add esp, 4
xor eax, eax
mov dword [ebp - 0x264], 7
cmp dword [ebp - 0x21c], 8
mov word [ebp - 0x278], ax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
mov dword [ebp - 0x268], 0
call fcn.0048e1c0
add esp, 4
test eax, eax
jne 0x463263
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.0048e020
add esp, 4
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
cmovae eax, dword [ebp - 0x230]
push 6
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
xor eax, eax
mov dword [ebp - 0x2a0], 7
mov dword [ebp - 0x2a4], 0
mov word [ebp - 0x2b4], ax
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
push eax
lea eax, [ebp - 0x4d4]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x2b4]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x230]
movlpd qword [ebp - 0x4d4], xmm0
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.0048ffb0
add esp, 0x14
test eax, eax
je 0x4632d2
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [ebp - 0x230]
push eax
call fcn.0040bc90
mov ecx, ebx
call fcn.00462230
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call fcn.0048db30
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push 1
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.0048cf50
lea eax, [ebx + 0x34]
add esp, 0xc
cmp dword [eax + 0x14], 8
jb 0x463344
mov eax, dword [eax]
push 1
push eax
call fcn.0048cf50
mov eax, dword [0x4d0b70]
add esp, 8
cmp eax, dword [ebx + 0xc]
jne 0x4633a7
lea ecx, [ebp - 0x4c5]
call fcn.0049b400
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
push str.encrydataupgrade1540137600
call fcn.0040b350
lea ecx, [ebp - 0x4c5]
call fcn.0049b180
mov ecx, ebx
call fcn.004637f0
push str.encrydata_upgeade_complete_
push 0xf3
push str.UpdaterApp.cpp
call fcn.0040fa10
add esp, 0xc
push 0
call fcn.004663e9
lea ecx, [ebp - 0x2b4]
call fcn.00461360
lea ecx, [ebp - 0x230]
call fcn.0040bf10
lea ecx, [ebp - 0x290]
call fcn.0040bf10
lea ecx, [ebp - 0x260]
call fcn.0040bf10
lea ecx, [ebp - 0x2cc]
call fcn.0040bf10
lea ecx, [ebp - 0x2e4]
call fcn.0040bf10
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 0
call fcn.00411460
cmp dword [ebp - 0x234], 8
jb 0x46340f
push dword [ebp - 0x248]
call fcn.00464c70
add esp, 4
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004654b1
mov esp, ebp
pop ebp
ret 8