Function at 0x405e75
Capabilities:
Create process on windows

Disassembly:
push ebp
lea ebp, [esp - 0x58c]
sub esp, 0x60c
mov eax, dword [0x41b044]
xor eax, ebp
mov dword [ebp + 0x588], eax
mov eax, dword [0x41ddd8]
push ebx
push esi
mov esi, ecx
push edi
xor ebx, ebx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x80], esi
mov edi, eax
mov dword [eax + 0x458], esi
mov dword [ebp - 0x7c], ebx
call fcn.00405a45
cmp esi, ebx
je 0x405ee9
push str.__urlhttp
push esi
call fcn.00407090
pop ecx
pop ecx
cmp eax, ebx
jne 0x405ed2
mov ebx, esi
call fcn.00405dd4
xor ebx, ebx
jmp 0x405ee9
push str.http
push eax
call fcn.00407090
pop ecx
pop ecx
lea edx, [ebp - 0x7c]
mov ecx, eax
call fcn.00405c0d
mov esi, 0x41dddc
push str.downloadRoot
mov eax, esi
call fcn.004033e3
test eax, eax
je 0x405f12
push str.package.version
mov eax, esi
call fcn.004033e3
test eax, eax
jne 0x406028
mov esi, 0x1ff
push esi
lea eax, [ebp + 0x389]
push ebx
push eax
mov byte [ebp + 0x388], bl
call fcn.00407320
push esi
lea eax, [ebp + 0x189]
push ebx
push eax
mov byte [ebp + 0x188], bl
call fcn.00407320
push esi
lea eax, [ebp - 0x77]
push ebx
push eax
mov byte [ebp - 0x78], bl
call fcn.00407320
lea eax, [ebp + 0x388]
push eax
push 0x87
call fcn.004043d5
lea eax, [ebp + 0x188]
push eax
push 0x7d
call fcn.004043d5
lea eax, [ebp - 0x78]
push eax
push 0x73
call fcn.004043d5
push str.Failed_to_update
lea eax, [ebp + 0x388]
push esi
push eax
call fcn.004075bd
add esp, 0x48
mov edi, 0x418600
push edi
lea eax, [ebp + 0x388]
push esi
push eax
call fcn.004075bd
push str.__please_get_latest
lea eax, [ebp + 0x388]
push esi
push eax
call fcn.004075bd
push edi
lea eax, [ebp + 0x388]
push esi
push eax
call fcn.004075bd
push str._client_from_our_web_site.
lea eax, [ebp + 0x388]
push esi
push eax
call fcn.004075bd
push edi
lea eax, [ebp + 0x188]
push esi
push eax
call fcn.004075bd
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp + 0x188]
push esi
push eax
call fcn.004075bd
add esp, 0x48
push ebx
lea eax, [ebp + 0x188]
push eax
lea eax, [ebp + 0x388]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push 5
mov eax, 0x417cc6
push eax
push eax
push str.http:__support_officeathand.att.com
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4061cc
push str.actionid
mov eax, esi
call fcn.004033e3
test eax, eax
je 0x40604f
push str.domain
mov eax, esi
call fcn.004033e3
test eax, eax
je 0x40604f
mov byte [edi + 0x45c], 1
cmp dword [ebp - 0x7c], 3
je 0x40605a
cmp dword [ebp - 0x7c], ebx
jne 0x406088
mov eax, dword [0x41dde8]
cmp eax, ebx
je 0x4060c0
push str.confid
call fcn.004024d1
mov dword [ebp - 0x7c], eax
mov eax, dword [0x41dde8]
push str.confno
call fcn.004024d1
cmp dword [ebp - 0x7c], ebx
jne 0x406088
cmp eax, ebx
je 0x4060c0
cmp byte [edi + 0x45c], bl
jne 0x4060c0
call fcn.00403916
test eax, eax
je 0x4060a8
push dword [ebp - 0x80]
mov ecx, esi
call fcn.00403933
jmp 0x4061cc
call fcn.004033fb
test eax, eax
je 0x4060c0
push dword [ebp - 0x80]
mov ecx, esi
call fcn.004034d2
jmp 0x4061cc
mov ecx, edi
call fcn.004065e1
test al, al
jne 0x4061a8
mov esi, 0x1ff
push esi
lea eax, [ebp + 0x389]
push ebx
push eax
mov byte [ebp + 0x388], bl
call fcn.00407320
push esi
lea eax, [ebp + 0x189]
push ebx
push eax
mov byte [ebp + 0x188], bl
call fcn.00407320
push esi
lea eax, [ebp - 0x77]
push ebx
push eax
mov byte [ebp - 0x78], bl
call fcn.00407320
lea eax, [ebp + 0x388]
push eax
push 0x91
call fcn.004043d5
lea eax, [ebp + 0x188]
push eax
push 0x7d
call fcn.004043d5
lea eax, [ebp - 0x78]
push eax
push 0x73
call fcn.004043d5
push str.Failed_to_update
lea eax, [ebp + 0x388]
push esi
push eax
call fcn.004075bd
add esp, 0x48
mov edi, 0x418600
push edi
lea eax, [ebp + 0x388]
push esi
push eax
call fcn.004075bd
push str.___please_check_your_OS_is_in_our_supporting_list.
lea eax, [ebp + 0x388]
push esi
push eax
call fcn.004075bd
push edi
lea eax, [ebp + 0x188]
push esi
push eax
call fcn.004075bd
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp + 0x188]
push esi
push eax
call fcn.004075bd
add esp, 0x30
push ebx
lea eax, [ebp + 0x188]
push eax
lea eax, [ebp + 0x388]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4061cc
lea eax, [edi + 0x44]
mov dword [edi + 0x18], edi
mov dword [edi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ebx
push 0x404ed5
push ebx
push 0x65
push dword [edi + 0x10]
mov dword [edi + 0x20], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov ecx, dword [ebp + 0x588]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00406e30
add ebp, 0x58c
leave
ret