Function at 0x402bd0
Capabilities:
Copy file
Create process on windows
Delete file
Read file on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov eax, dword [0x40a018]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x40ff3c], 0
push ebx
push esi
push edi
je 0x402d8d
push 0x4074b8
push str.patch.hpl
call dword [sym.imp.MSVCR100.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x402d8d
mov edi, dword [sym.imp.MSVCR100.dll_fread]
push esi
push 1
push 4
push 0x40ff20
call edi
push esi
push 1
push 4
push 0x40ff28
call edi
push esi
push 1
push 4
push 0x40ff24
call edi
push esi
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 0x34
mov ecx, 0x40ff04
call fcn.004039b0
test al, al
je 0x402d8d
lea eax, [ebp - 0x20]
push eax
call fcn.00401970
mov ebx, 0x10
add esp, 4
cmp dword [eax + 0x14], ebx
jb 0x402c6e
mov eax, dword [eax]
push eax
push str._spatch.hpl
call fcn.00402400
add esp, 8
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [ebp - 0xc], ebx
jb 0x402c95
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, dword [0x40ff28]
mov eax, dword [0x40ff24]
mov dword [ebp - 0x40], eax
cmp dword [0x40ff2c], esi
jae 0x402da0
lea edx, [ebp - 0x20]
push edx
call fcn.00401970
add esp, 4
cmp dword [eax + 0x14], ebx
jb 0x402cc2
mov eax, dword [eax]
push eax
push str._slauncher.bin
call fcn.00402400
add esp, 8
mov edi, eax
cmp dword [ebp - 0xc], ebx
jb 0x402ce4
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push str.http:__patch.irosepvp.com
push str._s_launcher.exe
mov dword [ebp - 0xc], 0xf
mov dword [ebp - 0x10], 0
mov byte [ebp - 0x20], 0
call fcn.00402400
mov ebx, edi
add esp, 8
mov edi, eax
call fcn.00401440
cmp al, 1
jne 0x402d6e
mov ecx, 0x40ff04
mov dword [0x40ff2c], esi
call fcn.00403ac0
push 0x40
lea ecx, [ebp - 0x84]
push 0
push ecx
mov dword [ebp - 0x88], 0
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x88]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push str.RoUpdate.exe
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push 0
call dword [sym.imp.MSVCR100.dll_exit]
push 0
push str.Erro_ao_atualizar
mov edi, str.FAIL_DOWNLOAD
call fcn.004011c0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00403650
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004057d1
mov esp, ebp
pop ebp
ret
cmp dword [0x40ff30], eax
jae 0x402e52
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x20]
push ecx
call fcn.00401970
add esp, 4
cmp dword [eax + 0x14], ebx
jb 0x402dca
mov eax, dword [eax]
push eax
push str._sTRose.bin
call fcn.00402400
add esp, 8
lea esi, [ebp - 0x20]
mov ebx, eax
call fcn.004016e0
push str.http:__patch.irosepvp.com
push str._s_TRose.exe
call fcn.00402400
add esp, 8
mov edi, eax
call fcn.00401440
cmp al, 1
jne 0x402d6e
lea edx, [ebp - 0x3c]
push edx
call fcn.00401970
add esp, 4
cmp dword [eax + 0x14], 0x10
jb 0x402e17
mov eax, dword [eax]
push eax
push str._sTRose.exe
call fcn.00402400
add esp, 8
lea esi, [ebp - 0x3c]
mov edi, eax
call fcn.004016e0
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x40]
mov ecx, 0x40ff04
mov dword [0x40ff30], eax
call fcn.00403ac0
mov eax, dword [0x40ff38]
cmp dword [0x40ff20], eax
jbe 0x402d88
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
inc eax
pop ebx
call fcn.004057d1
mov esp, ebp
pop ebp
ret