Function at 0x405e60
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x47238e
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push ebx
push ebp
push esi
push edi
mov eax, dword [0x492bec]
xor eax, esp
push eax
lea eax, [esp + 0x5c]
mov dword fs:[0], eax
lea eax, [esp + 0x24]
push eax
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::BinPath_void_
push eax
lea ecx, [esp + 0x20]
push ecx
mov edi, str.Update.exe
mov dword [esp + 0x70], 0
call fcn.00407810
add esp, 0xc
lea ecx, [esp + 0x24]
mov byte [esp + 0x64], 2
call dword [sym.imp.mfc90.dll_Ordinal_601]
push 0x47ee18
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90.dll_Ordinal_310]
push 0x494058
lea ecx, [esp + 0x50]
mov byte [esp + 0x68], 3
call dword [sym.imp.mfc90.dll_Ordinal_300]
push 0x47ee18
lea ecx, [esp + 0x18]
mov byte [esp + 0x68], 4
call dword [sym.imp.mfc90.dll_Ordinal_310]
push 0x48068c
lea ecx, [esp + 0x30]
mov byte [esp + 0x68], 5
call dword [sym.imp.mfc90.dll_Ordinal_310]
push 0x48068c
lea ecx, [esp + 0x2c]
mov byte [esp + 0x68], 6
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x64], 7
mov esi, dword [esp + 0x6c]
add esi, 0x65c
push 1
mov ecx, esi
call sub.HZDKernel.dll_public:_void___thiscall_HZD::Kernel::OS::CHash::SetHashFormat_int_
push 2
mov ecx, esi
call sub.HZDKernel.dll_public:_void___thiscall_HZD::Kernel::OS::CHash::SetHashOperation_int_
mov edx, dword [esp + 0x18]
push edx
mov ecx, esi
call sub.HZDKernel.dll_public:_void___thiscall_HZD::Kernel::OS::CHash::SetHashFile_char_const__
push 5
mov ecx, esi
call sub.HZDKernel.dll_public:_void___thiscall_HZD::Kernel::OS::CHash::SetHashAlgorithm_int_
lea eax, [esp + 0x38]
push eax
mov ecx, esi
call sub.HZDKernel.dll_public:_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______thiscall_HZD::Kernel::OS::CHash::DoHash_void_
mov bl, 8
mov byte [esp + 0x64], bl
mov ecx, dword [esp + 0x18]
mov ebp, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push ecx
call ebp
test eax, eax
je 0x405fb2
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
lea eax, [esp + 0x28]
push eax
mov ecx, 0x49403c
call sub.HZDKernel.dll_public:_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______thiscall_HZD::Kernel::OS::CBaseOS::GetVersion_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char____
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x68], 9
call dword [sym.imp.mfc90.dll_Ordinal_817]
lea ecx, [esp + 0x24]
mov byte [esp + 0x64], bl
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x20]
push ecx
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::BinPath_void_
push eax
lea edx, [esp + 0x2c]
push edx
mov edi, 0x480b54
mov byte [esp + 0x70], 0xa
call fcn.00407810
mov eax, dword [eax]
add esp, 0xc
push eax
call ebp
lea ecx, [esp + 0x24]
mov esi, eax
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x20]
mov byte [esp + 0x64], bl
call dword [sym.imp.mfc90.dll_Ordinal_601]
test esi, esi
je 0x40606c
lea eax, [esp + 0x20]
push eax
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::BinPath_void_
push eax
lea ecx, [esp + 0x2c]
push ecx
mov byte [esp + 0x70], 0xb
call fcn.00407810
add esp, 0xc
lea ecx, [esp + 0x20]
mov byte [esp + 0x64], 0xd
call dword [sym.imp.mfc90.dll_Ordinal_601]
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
lea eax, [esp + 0x20]
push eax
mov ecx, 0x49403c
call sub.HZDKernel.dll_public:_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______thiscall_HZD::Kernel::OS::CBaseOS::GetVersion_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char____
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x68], 0xe
call dword [sym.imp.mfc90.dll_Ordinal_817]
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x24]
mov byte [esp + 0x64], bl
call dword [sym.imp.mfc90.dll_Ordinal_601]
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x4c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
lea eax, [esp + 0x38]
push eax
mov ecx, 0x49403c
call sub.HZDKernel.dll_public:_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______thiscall_HZD::Kernel::OS::CBaseOS::GetHZDSignerSN_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char____
mov byte [esp + 0x64], 0xf
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x4940b4]
push edx
push eax
push ecx
lea edx, [esp + 0x40]
push edx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x10
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
lea ecx, [esp + 0x28]
push ecx
mov ecx, 0x49403e
call sub.HZDKernel.dll_public:_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______thiscall_HZD::Kernel::Net::CHttp::ReadHtmlInfo_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char____
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x68], 0x10
call dword [sym.imp.mfc90.dll_Ordinal_817]
lea ecx, [esp + 0x24]
mov byte [esp + 0x64], 0xf
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_6670]
push 0x47ee18
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x406324
push 0x60
push 0
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x54]
push eax
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::GetSubStr_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______int__char_
push 0x60
push 1
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x60]
push edx
mov byte [esp + 0x84], 0x11
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::GetSubStr_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______int__char_
mov esi, eax
lea eax, [esp + 0x60]
push eax
mov byte [esp + 0x88], 0x12
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::BinPath_void_
push eax
lea ecx, [esp + 0x64]
push ecx
mov edi, 0x48078c
mov byte [esp + 0x90], 0x13
call fcn.00407810
lea edx, [esp + 0x50]
push esi
push edx
mov ecx, eax
mov byte [esp + 0x98], 0x14
call fcn.00407790
add esp, 0x34
lea ecx, [esp + 0x3c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x44]
mov byte [esp + 0x64], 0x18
call dword [sym.imp.mfc90.dll_Ordinal_601]
push 0x60
push 2
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
push ecx
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::GetSubStr_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______int__char_
push 0x60
push 3
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x84], 0x19
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::GetSubStr_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______int__char_
add esp, 0x20
mov bl, 0x1a
mov byte [esp + 0x64], bl
mov ecx, dword [esp + 0x38]
push ecx
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x4062f7
mov edx, dword [esp + 0x24]
push edx
call ebp
push ecx
mov ecx, esp
test eax, eax
jne 0x40625e
mov dword [esp + 0x48], esp
push 0x48068c
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x68], 0x1b
mov eax, dword [esp + 0x70]
push 0
push eax
push ecx
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x7c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
push ecx
mov byte [esp + 0x78], 0x1c
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov ecx, 0x49403e
mov byte [esp + 0x78], bl
call sub.HZDKernel.dll_public:_void___thiscall_HZD::Kernel::Net::CHttp::DownLoad_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char_____class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char_____class_CWnd___bool__class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char____
jmp 0x4062f7
lea edx, [esp + 0x20]
mov dword [esp + 0x40], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x6c], 0x1d
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::BinPath_void_
mov byte [esp + 0x6c], 0x1e
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
push ecx
mov edi, str._tempUpdate.exe
call fcn.00407810
add esp, 4
mov byte [esp + 0x70], 0x1f
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x60], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
lea eax, [esp + 0x50]
push eax
mov byte [esp + 0x74], 0x20
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::BinPath_void_
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
push ecx
mov edi, str.Update.exe
mov byte [esp + 0x7c], 0x21
call fcn.00407810
add esp, 8
mov edi, dword [esp + 0x7c]
mov byte [esp + 0x74], 0x23
call fcn.004063e0
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x48]
mov byte [esp + 0x64], 0xf
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea edx, [esp + 0x48]
push edx
call sub.HZDKernel.dll_public:_static_class_ATL::CStringT_char__class_StrTraitMFC_DLL_char__class_ATL::ChTraitsCRT_char______cdecl_HZD::Kernel::Helper::CBaseHelper::BinPath_void_
push eax
lea eax, [esp + 0x74]
push eax
mov edi, str.Update.exe
mov byte [esp + 0x70], 0x24
call fcn.00407810
mov ecx, dword [eax]
add esp, 0xc
push 1
push 0
push 0x481214
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [esp + 0x6c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x4c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x5c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x54
ret 4