Function at 0x40e3f0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b1000
mov eax, dword fs:[0]
push eax
sub esp, 0x218
mov eax, dword [0x576f24]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x218], edi
mov byte [ebp - 0x211], 0
call fcn.0040e190
mov edx, dword [ebp + 0xc]
mov dword [ebp - 4], 0
cmp edx, 1
jne 0x40e6e2
mov eax, dword [esi + 8]
lea edi, [esi + 8]
sub eax, edx
je 0x40e4e6
sub eax, edx
je 0x40e4dd
sub eax, edx
je 0x40e470
cmp edx, edx
jne 0x40e6f4
jmp 0x40e60e
cmp byte [esi + 0xe], 0
je 0x40e498
lea eax, [esi + 0x820]
mov ecx, esi
push eax
lea eax, [esi + 0x618]
push eax
call fcn.0040edf0
test al, al
je 0x40e498
mov byte [esi + 0xd], 1
jmp 0x40e60e
movups xmm0, xmmword [str.Bad_update_signature]
mov ax, word [0x549390]
mov byte [ebp - 0x211], 1
movups xmmword [ebp - 0x210], xmm0
mov word [ebp - 0x1e8], ax
movups xmm0, xmmword [0x549378]
movups xmmword [ebp - 0x200], xmm0
movq xmm0, qword [0x549388]
movq qword [ebp - 0x1f0], xmm0
jmp 0x40e60e
mov byte [esi + 0xe], 1
jmp 0x40e60e
push 3
push 0x572d00
lea ecx, [ebp - 0x224]
lea eax, [esi + 0x410]
push ecx
push eax
call fcn.00401670
add esp, 0x10
test eax, eax
je 0x40e5de
cmp byte [esi + 0xc], 0
je 0x40e5a6
mov eax, dword [esi + 0xa2c]
test eax, eax
je 0x40e563
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x40e563
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40e556
test dx, dx
je 0x40e552
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40e556
add eax, 4
add ecx, 4
test dx, dx
jne 0x40e530
xor eax, eax
jmp 0x40e55b
sbb eax, eax
or eax, 1
test eax, eax
je 0x40e563
mov byte [esi + 0xd], 0
mov eax, dword [esi + 0xa30]
test eax, eax
je 0x40e5a6
mov ecx, dword [ebp - 0x21c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40e599
test dx, dx
je 0x40e595
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40e599
add eax, 4
add ecx, 4
test dx, dx
jne 0x40e573
xor eax, eax
jmp 0x40e59e
sbb eax, eax
or eax, 1
test eax, eax
je 0x40e5a6
mov byte [esi + 0xe], 0
lea eax, [ebp - 0x224]
push eax
lea ecx, [esi + 0xa28]
call fcn.0040e260
cmp byte [esi + 0xa50], 0
mov byte [esi + 0xc], 1
je 0x40e601
cmp dword [esi], 0
jne 0x40e601
mov ecx, esi
call fcn.0040e9b0
test al, al
je 0x40e601
mov ecx, esi
call fcn.0040ec20
jmp 0x40e601
movups xmm0, xmmword [str.Bad_update_file]
mov byte [ebp - 0x211], 1
movups xmmword [ebp - 0x210], xmm0
movups xmm0, xmmword [0x549358]
movups xmmword [ebp - 0x200], xmm0
lea eax, [esi + 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [edi], 1
mov dword [esi + 0xa34], 0x64
jne 0x40e6da
mov ecx, esi
call fcn.0040e9b0
test al, al
je 0x40e6da
mov ecx, esi
mov dword [edi], 0
call fcn.0040e320
test al, al
jne 0x40e685
push dword [esi + 0xa30]
lea eax, [ebp - 0x210]
push str.Failed_to_download_signature_from_URL:
push 0x54933c
push eax
call fcn.00406f60
add esp, 0x10
mov byte [ebp - 0x211], 1
lea eax, [ebp - 0x210]
push 0x10
push str.Update_Error
push eax
push dword [0x582a2c]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [esi + 0xc], 0
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp - 0x218]
mov ecx, dword [esi]
test ecx, ecx
je 0x40e6b2
push dword [esi + 4]
cmp byte [ebp - 0x211], 0
push eax
lea eax, [ebp - 0x210]
push edx
cmove eax, edi
push eax
call ecx
add esp, 0x10
lea ecx, [ebp - 0x224]
call fcn.0040e220
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00424790
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi], 0
jmp 0x40e685
test edx, edx
jne 0x40e6f1
mov eax, dword [ebp + 0x10]
mov dword [esi + 0xa34], eax
jmp 0x40e691
lea edi, [esi + 8]
cmp edx, 2
jne 0x40e688
cmp dword [edi], edx
jne 0x40e701
mov byte [esi + 0xc], 0
mov dword [edi], 0
jmp 0x40e688