Function at 0x42ded0
Capabilities:
Check mutex on windows
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4df95a
mov eax, dword fs:[0]
push eax
sub esp, 0x414
mov eax, dword [0x53d9f8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x420], 0
lea ecx, [ebp - 0x2b0]
push 0x11
xor eax, eax
mov dword [ebp - 0x2a0], 0
push str.feature_wpsupdate
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
call fcn.004033b0
push dword [0x4fef28]
lea eax, [ebp - 0x2f8]
mov dword [ebp - 4], 0
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
mov esi, eax
push 8
xor eax, eax
mov byte [ebp - 4], 1
push str.callform
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2cc], 7
mov word [ebp - 0x2e0], ax
call fcn.004033b0
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2b4], 0
mov eax, dword [esi]
mov dword [ebp - 0x2c8], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x2c4], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x2c0], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x2bc], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x2b8], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x2b4], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea eax, [ebp - 0x2b0]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2e0]
push eax
push ecx
lea ecx, [ebp - 0x418]
call fcn.004231a0
lea eax, [ebp - 0x2b0]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x418]
mov ecx, edi
push eax
call fcn.004381d0
mov eax, dword [ebp - 0x418]
push dword [eax + 4]
lea eax, [ebp - 0x418]
push eax
mov ecx, eax
call fcn.004136f0
push 0x40
push dword [ebp - 0x418]
call fcn.004bee2d
add esp, 8
mov byte [ebp - 4], 1
lea eax, [ebp - 0x2e0]
push 0x413930
push 1
push 0x30
push eax
call fcn.004bf5a9
mov edx, dword [ebp - 0x2e4]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x42e0a0
mov ecx, dword [ebp - 0x2f8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e096
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e0f6
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x29c]
xor eax, eax
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 7
mov word [ebp - 0x2f8], ax
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x42e106
mov ecx, dword [ebp - 0x2b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e0fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e0fc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov ecx, edi
call fcn.00439c60
push str._WorkerMain_Update_work_thread_begin.
push str.kupdate::KWpsUpdateImpl::Run
push 0x364
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
mov byte [edi + 8], 0
call fcn.00412750
add esp, 0x14
call fcn.0042d3f0
call fcn.0048f8d0
call fcn.0048f9b0
push dword [0x4fef28]
lea eax, [ebp - 0x2c8]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef30]
mov ecx, eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x420], 1
call fcn.00432570
test al, al
jne 0x42e194
call fcn.00452ca0
test al, al
je 0x42e194
push 0
call fcn.004530a0
add esp, 4
test al, al
jne 0x42e194
mov bl, 1
jmp 0x42e196
xor bl, bl
mov edx, dword [ebp - 0x2b4]
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x42e1df
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e1d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e1d5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test bl, bl
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
je 0x42e289
push str.Try_to_check_and_repair_wps_update_service.
push str.kupdate::KWpsUpdateImpl::Run
push 0x36e
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 7
call fcn.00412750
lea eax, [ebp - 0x2b0]
push 0x17
push eax
call fcn.00416f00
cmp dword [ebp - 0x29c], 8
lea eax, [ebp - 0x2b0]
mov dword [ebp - 4], 5
cmovae eax, dword [ebp - 0x2b0]
push eax
call fcn.004168a0
add esp, 0x20
test al, al
jne 0x42e3cc
mov edx, dword [ebp - 0x29c]
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x42e289
mov ecx, dword [ebp - 0x2b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e27f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e49c
push edx
push ecx
call fcn.004bee2d
add esp, 8
call fcn.004d6ef0
test al, al
mov edx, str.Globalwpspatch_C42D7A0A_2868_45FF_92EE_9B7AE7124588
mov ecx, str.Globalwpspdfpatch_C42D7A0A_2868_45FF_92EE_9B7AE7124588
mov esi, str.Globalwpssetup_C42D7A0A_2868_45FF_92EE_9B7AE7124588
cmove ecx, edx
mov edx, str.Globalwpspdfsetup_C42D7A0A_2868_45FF_92EE_9B7AE7124588
cmove edx, esi
mov esi, str.Globalwps_diff_patch_C42D7A0A_2868_45FF_92EE_9B7AE7124588
mov dword [ebp - 0x2e4], edx
mov edx, str.Globalwpspdf_diff_patch_C42D7A0A_2868_45FF_92EE_9B7AE7124588
cmove edx, esi
mov esi, str.Globalwpsuninst_C42D7A0A_2868_45FF_92EE_9B7AE7124588
mov dword [ebp - 0x420], edx
mov edx, str.Globalwpspdfuninst_C42D7A0A_2868_45FF_92EE_9B7AE7124588
push ecx
cmove edx, esi
mov esi, dword [sym.imp.KERNEL32.dll_OpenMutexW]
push 1
push 0x1f0001
mov dword [ebp - 0x41c], edx
call esi
mov dword [ebp - 0x414], eax
test eax, eax
jne 0x42f6ec
call ebx
cmp eax, 5
je 0x42f6e6
push dword [ebp - 0x2e4]
push 1
push 0x1f0001
call esi
mov dword [ebp - 0x414], eax
test eax, eax
jne 0x42f6ec
call ebx
cmp eax, 5
je 0x42f6e6
push dword [ebp - 0x420]
push 1
push 0x1f0001
call esi
mov dword [ebp - 0x414], eax
test eax, eax
jne 0x42f6ec
call ebx
cmp eax, 5
je 0x42f6e6
push dword [ebp - 0x41c]
push 1
push 0x1f0001
call esi
mov esi, eax
test esi, esi
jne 0x42f6e3
call ebx
cmp eax, 5
je 0x42f6e3
mov ecx, edi
call fcn.00437da0
push dword [0x4fef28]
lea eax, [ebp - 0x2c8]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef34]
lea ecx, [ebp - 0x2c8]
call fcn.00432570
test al, al
jne 0x42e4bd
push dword [0x4fef38]
lea ecx, [ebp - 0x2c8]
call fcn.00432570
test al, al
jne 0x42e4bd
xor bl, bl
jmp 0x42e4bf
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov esi, eax
mov dword [ebp - 0x2e4], esi
test esi, esi
je 0x42e433
push 0x10
push dword [0x4ff000]
push esi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 0x41c], eax
test eax, eax
je 0x42e42c
push 0
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x42e4a2
call ebx
cmp eax, 0x420
je 0x42e4a2
push dword [ebp - 0x41c]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push esi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp dword [ebp - 0x29c], 8
lea eax, [ebp - 0x2b0]
push 0
cmovae eax, dword [ebp - 0x2b0]
push str._Service
push eax
call fcn.004548c0
mov edx, dword [ebp - 0x29c]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x42e289
mov ecx, dword [ebp - 0x2b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e27f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e27f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push dword [ebp - 0x41c]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x2e4]
call esi
jmp 0x42e242
mov bl, 1
mov edx, dword [ebp - 0x2b4]
cmp edx, 8
jb 0x42e501
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e4f7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e4f7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test bl, bl
je 0x42e5e1
push 0x208
lea eax, [ebp - 0x298]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0
push 0x104
lea eax, [ebp - 0x298]
push eax
push str.HKCUSoftwareKingsoftOffice6.0Commonupdateinfo_recoverdesktoplink
call fcn.0044b880
add esp, 0x1c
test eax, eax
js 0x42e5e1
lea eax, [ebp - 0x298]
push 0x4f1b88
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x42e5e1
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
push eax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 4], 8
push eax
call fcn.004889c0
push 0
push 1
push str.HKCUSoftwareKingsoftOffice6.0Commonupdateinfo_recoverdesktoplink
call fcn.0044b020
mov edx, dword [ebp - 0x29c]
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x42e5e1
mov ecx, dword [ebp - 0x2b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e5d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e5d7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
mov dword [ebp - 0x41c], edx
mov esi, eax
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x414], esi
push dword [0x4fef28]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef34]
mov ecx, eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x420], 2
call fcn.00432570
test al, al
je 0x42e64f
push dword [0x4fef74]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
jne 0x42e64f
mov bl, 1
jmp 0x42e651
xor bl, bl
mov edx, dword [ebp - 0x2b4]
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x42e69a
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e690
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e690
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test bl, bl
je 0x42e73d
push str.Mark_last_kso_active.
push str.kupdate::KWpsUpdateImpl::Run
push 0x39f
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 7
call fcn.00412750
mov eax, dword [ebp - 0x41c]
push 0x80
mov dword [ebp - 0x2e4], eax
lea eax, [ebp - 0x90]
push 0
push eax
mov dword [ebp - 0x2e8], esi
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x2e8]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
push eax
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x90]
push 0x3f
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_wcsftime]
push 0
lea eax, [ebp - 0x90]
push eax
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfoLastKsoActive
call fcn.0044bf70
add esp, 0x40
test eax, eax
jns 0x42e73d
push eax
push str.Failed_save_last_kso_active_time_to_reg:_0x_08x.
push str.kupdate::KWpsUpdateImpl::MarkLastKsoActiveTime
push 0xc3b
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x18
push dword [0x4fef28]
lea eax, [ebp - 0x2c8]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef34]
mov ecx, eax
call fcn.00432570
mov edx, dword [ebp - 0x2b4]
mov bl, al
cmp edx, 8
jb 0x42e7a7
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e79d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e79d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test bl, bl
je 0x42e7bc
call fcn.0046fe50
mov ecx, eax
call fcn.00473c90
jmp 0x42e842
push dword [0x4fef28]
lea eax, [ebp - 0x2c8]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef38]
mov ecx, eax
call fcn.00432570
mov edx, dword [ebp - 0x2b4]
mov bl, al
cmp edx, 8
jb 0x42e826
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e81c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e81c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test bl, bl
je 0x42e842
call fcn.0046fe50
mov ecx, eax
call fcn.00474810
call fcn.0046fe50
mov ecx, eax
call fcn.00475630
xor eax, eax
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 7
mov word [ebp - 0x358], ax
lea eax, [ebp - 0x358]
mov dword [ebp - 4], 0xa
push eax
mov ecx, edi
call fcn.00426340
lea eax, [ebp - 0x358]
mov ecx, edi
push eax
call fcn.004241c0
lea ecx, [ebp - 0x410]
mov bl, al
call fcn.00476890
push dword [0x4fef74]
mov byte [ebp - 4], 0xb
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x42ea36
push str._WorkerMain_install_mode.
push str.kupdate::KWpsUpdateImpl::Run
push 0x3b5
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
call fcn.00412750
add esp, 0x14
call fcn.00410410
xor ecx, ecx
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], cx
mov ecx, dword [eax]
lea edx, [ebp - 0x2b0]
push edx
push eax
mov byte [ebp - 4], 0xc
call dword [ecx + 0x20]
mov edx, dword [ebp - 0x29c]
mov byte [ebp - 4], 0xb
cmp edx, 8
jb 0x42e944
mov ecx, dword [ebp - 0x2b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e93a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e93a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00434150
test eax, eax
js 0x42e9fb
push dword [0x4fef74]
lea eax, [ebp - 0x2c8]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef7c]
mov ecx, eax
call fcn.00432570
mov edx, dword [ebp - 0x2b4]
mov bl, al
cmp edx, 8
jb 0x42e9c4
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42e9ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e9ba
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test bl, bl
je 0x42e9d9
imul eax, dword [0x4fefcc], 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00425e70
test eax, eax
js 0x42f6b1
mov ecx, edi
call fcn.00431b80
jmp 0x42f6b1
push 0x80004005
push str.Failed_to_parse_xml_file:_0x_08x.
push str.kupdate::KWpsUpdateImpl::Run
push 0x3c2
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x18
push 0x80004005
push 2
call fcn.0042c190
mov ecx, eax
call fcn.00413380
jmp 0x42f6b1
push dword [0x4fef80]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x42eb17
call fcn.004d6ef0
push str._WorkerMain_Uninstall_update_task_scheduler.
push str.kupdate::KWpsUpdateImpl::Run
push 0x3ce
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 7
mov bl, al
call fcn.00412750
mov ecx, dword [str.WpsUpdateTask_]
add esp, 0x14
test bl, bl
cmovne ecx, dword [str.WpsPdfUpdateTask_]
push ecx
lea ecx, [ebp - 0x2c8]
call fcn.00404c50
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0xd
push eax
call fcn.0048cc20
mov edx, dword [ebp - 0x2b4]
add esp, 4
mov byte [ebp - 4], 0xb
mov esi, eax
cmp edx, 8
jb 0x42eaeb
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42eae1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42eae1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test esi, esi
jns 0x42f6b1
push esi
push str.Failed_uinstall_update_task_schduler:_0x_08x.
push str.kupdate::KWpsUpdateImpl::Run
push 0x3d2
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x18
jmp 0x42f6b1
test bl, bl
je 0x42f6b1
mov ecx, edi
call fcn.00433ca0
test al, al
jne 0x42eb40
push dword [ebp - 0x41c]
mov ecx, edi
push esi
call fcn.0042ca80
test al, al
je 0x42f6b1
push str._WorkerMain_nomal_mode.
push str.kupdate::KWpsUpdateImpl::Run
push 0x3d6
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
call fcn.00412750
add esp, 0x14
call fcn.0046fe50
mov ecx, eax
call fcn.00473440
push 0
call fcn.0042c0f0
mov ecx, eax
call fcn.0044e090
mov ecx, edi
call fcn.00433ca0
test al, al
je 0x42ebf8
mov esi, dword [edi + 0xc]
lea eax, [ebp - 0x2c8]
push 0x11
push eax
call fcn.0042c270
mov ecx, eax
call fcn.0042c9d0
mov ecx, eax
cmp dword [ecx + 0x14], 8
mov byte [ebp - 4], 0xe
jb 0x42eba9
mov ecx, dword [ecx]
mov eax, dword [esi]
push ecx
push 1
push esi
call dword [eax + 0x20]
mov edx, dword [ebp - 0x2b4]
mov byte [ebp - 4], 0xb
cmp edx, 8
jb 0x42ebf8
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ebee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42ebee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
call fcn.00410410
mov ecx, eax
call fcn.00446780
test eax, eax
je 0x42ec2c
push 0
push str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsGlobaluseroffline
call fcn.0044b320
add esp, 8
test al, al
je 0x42ec2c
push 0
push 0
push str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsGlobaluseroffline
call fcn.0044bd90
add esp, 0xc
push str.https:__update.wps.cn
lea ecx, [ebp - 0x328]
call fcn.00404c50
push str.begin
lea ecx, [ebp - 0x310]
mov byte [ebp - 4], 0xf
call fcn.00404c50
push str.TrySendFirstRequestBegin
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x10
call fcn.00404c50
lea eax, [ebp - 0x328]
mov byte [ebp - 4], 0x11
push eax
push 0
lea eax, [ebp - 0x310]
mov ecx, edi
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.00434f10
mov edx, dword [ebp - 0x2b4]
mov byte [ebp - 4], 0x10
cmp edx, 8
jb 0x42ecca
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ecc0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42ed40
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x2fc]
mov byte [ebp - 4], 0xf
cmp edx, 8
jb 0x42ed0a
mov ecx, dword [ebp - 0x310]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ed00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42ed40
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x314]
mov byte [ebp - 4], 0xb
cmp edx, 8
jb 0x42ed50
mov ecx, dword [ebp - 0x328]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ed46
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42ed46
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
lea eax, [ebp - 0x420]
mov dword [ebp - 0x420], 0
push eax
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00430b10
mov esi, eax
lea ecx, [ebp - 0x328]
push str.https:__update.wps.cn
mov dword [ebp - 0x2e4], esi
call fcn.00404c50
mov eax, str.fail
mov byte [ebp - 4], 0x12
test esi, esi
mov ecx, 0x4f6060
cmovs ecx, eax
push ecx
lea ecx, [ebp - 0x310]
call fcn.00404c50
push str.TrySendFirstRequestEnd
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x13
call fcn.00404c50
lea eax, [ebp - 0x328]
mov byte [ebp - 4], 0x14
push eax
push 0
lea eax, [ebp - 0x310]
mov ecx, edi
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.00434f10
mov edx, dword [ebp - 0x2b4]
mov byte [ebp - 4], 0x13
cmp edx, 8
jb 0x42ee20
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ee16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42ee96
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x2fc]
mov byte [ebp - 4], 0x12
cmp edx, 8
jb 0x42ee60
mov ecx, dword [ebp - 0x310]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ee56
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42ee96
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x314]
mov byte [ebp - 4], 0xb
cmp edx, 8
jb 0x42eea6
mov ecx, dword [ebp - 0x328]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ee9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42ee9c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x410]
call fcn.00476e10
xor eax, eax
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
lea eax, [ebp - 0x2b0]
mov byte [ebp - 4], 0x16
push eax
mov ecx, edi
call fcn.00426340
cmp dword [ebp - 0x330], 0
mov ebx, dword [ebp - 0x29c]
je 0x42ef8e
cmp dword [ebp - 0x32c], 8
lea eax, [ebp - 0x340]
lea ecx, [ebp - 0x2b0]
cmovae eax, dword [ebp - 0x340]
cmp ebx, 8
cmovae ecx, dword [ebp - 0x2b0]
mov edi, edi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x42ef46
test dx, dx
je 0x42ef42
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x42ef46
add ecx, 4
add eax, 4
test dx, dx
jne 0x42ef20
xor eax, eax
jmp 0x42ef4b
sbb eax, eax
or eax, 1
test eax, eax
je 0x42ef8e
cmp dword [ebp - 0x32c], 8
lea eax, [ebp - 0x340]
push 0
cmovae eax, dword [ebp - 0x340]
push eax
push str.HKCUSoftwareKingsoftOffice6.0Commonupdateinfoupgradetimelimit
call fcn.0044bf70
add esp, 0xc
push 0
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
push eax
push str.HKCUSoftwareKingsoftOffice6.0Commonupdateinfoupgradetimetimeout
call fcn.0044bd90
add esp, 0xc
test esi, esi
jne 0x42f192
push dword [0x4fef5c]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x42f192
push dword [0x4fef5c]
lea eax, [ebp - 0x310]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
mov esi, eax
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfoUpdateResult
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x17
call fcn.00404c50
push 0x4f0efc
push eax
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0x18
push eax
call fcn.00404b80
push esi
push eax
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0x19
push eax
call fcn.00404ad0
add esp, 0x18
mov edx, dword [ebp - 0x35c]
mov byte [ebp - 4], 0x1b
cmp edx, 8
jb 0x42f04e
mov ecx, dword [ebp - 0x370]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42f044
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42f0fe
push edx
push ecx
call fcn.004bee2d
add esp, 8
xor eax, eax
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 7
mov word [ebp - 0x370], ax
mov edx, dword [ebp - 0x314]
mov byte [ebp - 4], 0x1c
cmp edx, 8
jb 0x42f0ab
mov ecx, dword [ebp - 0x328]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42f0a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42f0fe
push edx
push ecx
call fcn.004bee2d
add esp, 8
xor eax, eax
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 7
mov word [ebp - 0x328], ax
mov edx, dword [ebp - 0x2fc]
mov byte [ebp - 4], 0x1d
cmp edx, 8
jb 0x42f10e
mov ecx, dword [ebp - 0x310]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42f104
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42f104
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
xor eax, eax
mov dword [ebp - 0x300], 0
cmp dword [ebp - 0x2b4], 8
mov word [ebp - 0x310], ax
lea eax, [ebp - 0x2c8]
cmovae eax, dword [ebp - 0x2c8]
push 0
push 1
push eax
mov dword [ebp - 0x2fc], 7
call fcn.0044bd90
mov edx, dword [ebp - 0x2b4]
add esp, 0xc
mov byte [ebp - 4], 0x16
cmp edx, 8
jb 0x42f192
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42f188
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42f188
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
lea eax, [ebp - 0x340]
mov ecx, edi
push eax
call fcn.004241c0
test al, al
jne 0x42f1ab
xor esi, esi
jmp 0x42f5b7
mov esi, dword [ebp - 0x420]
test esi, esi
jne 0x42f23c
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x41c]
push 0x80
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x90]
push esi
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
push eax
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x90]
push 0x3f
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_wcsftime]
push esi
lea eax, [ebp - 0x90]
push eax
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfoLastCheckTime
call fcn.0044bf70
add esp, 0x2c
test eax, eax
jns 0x42f23c
push eax
push str.Failed_save_last_check_time_to_reg:_0x_08x.
push str.kupdate::KWpsUpdateImpl::MarkUpdateCheckTime
push 0xc14
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push esi
call fcn.00412750
add esp, 0x18
mov eax, dword [ebp - 0x2e4]
test eax, eax
jns 0x42f3f5
push eax
push 3
call fcn.0042c190
mov ecx, eax
call fcn.00413380
push dword [ebp - 0x2e4]
push str.Failed_to_try_all_update_address:_0x_08x.
push str.kupdate::KWpsUpdateImpl::Run
push 0x413
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x18
mov ecx, edi
call fcn.00433ca0
test al, al
je 0x42f3cf
test esi, esi
jne 0x42f3cf
push esi
push str.NetError
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatusDetail
call fcn.0044bf70
push esi
push dword [0x4ff014]
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatus
call fcn.0044bf70
mov eax, dword [edi + 0xc]
add esp, 0x18
mov dword [ebp - 0x414], esi
mov ecx, dword [eax]
push 0x4f0da4
push 4
push eax
call dword [ecx + 0x20]
lea eax, [ebp - 0x310]
push eax
call fcn.00493830
mov ecx, eax
call fcn.00492df0
mov esi, eax
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0x1e
push 0
push eax
call fcn.00493830
mov ecx, eax
call fcn.00491cf0
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 0x1f
jb 0x42f308
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x42f310
mov eax, dword [eax]
lea ecx, [ebp - 0x414]
push ecx
push 0xfa0
push 0
push esi
push eax
push str.C_NetError
mov ecx, edi
call fcn.00430830
mov edx, dword [ebp - 0x2b4]
mov byte [ebp - 4], 0x1e
cmp edx, 8
jb 0x42f36c
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42f362
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42f3bf
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x2fc]
xor eax, eax
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2b4], 7
mov word [ebp - 0x2c8], ax
mov byte [ebp - 4], 0x16
cmp edx, 8
jb 0x42f3cf
mov ecx, dword [ebp - 0x310]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42f3c5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42f3c5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
call fcn.00410410
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb0]
push eax
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfoLastHttpsMode
call fcn.0044bd90
add esp, 0xc
or esi, 0xffffffff
jmp 0x42f5b7
call fcn.00451a10
test al, al
jne 0x42f5f9
push 0x4f0da4
lea ecx, [ebp - 0x2c8]
call fcn.00404c50
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0x20
push eax
push 4
call fcn.0042c190
mov ecx, eax
call fcn.004131f0
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x16
call fcn.00402d80
push str.Cant_elevated_to_admin.
push str.kupdate::KWpsUpdateImpl::Run
push 0x43b
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x14
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 0
push str.privilege
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x21
call fcn.00404c50
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0043c430
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x21
call fcn.00402d80
lea eax, [ebp - 0x2ec]
push eax
call fcn.0042c0f0
mov ecx, eax
call fcn.0044e5b0
mov ecx, edi
call fcn.00433ca0
test al, al
je 0x42f589
push 0
push str.Envlimit
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatusDetail
call fcn.0044bf70
push 0
push dword [0x4ff014]
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatus
call fcn.0044bf70
mov eax, dword [edi + 0xc]
add esp, 0x18
mov dword [ebp - 0x414], 0
mov ecx, dword [eax]
push 0x4f0da4
push 4
push eax
call dword [ecx + 0x20]
lea eax, [ebp - 0x310]
push eax
call fcn.00493830
mov ecx, eax
call fcn.00492420
mov esi, eax
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0x23
push 0
push eax
call fcn.00493830
mov ecx, eax
call fcn.00491cf0
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 0x24
jb 0x42f54b
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x42f553
mov eax, dword [eax]
lea ecx, [ebp - 0x414]
push ecx
push 0xfa0
push 0
push esi
push eax
push str.C_ENVLIMIT
mov ecx, edi
call fcn.00430830
lea ecx, [ebp - 0x2c8]
call fcn.00402d80
lea ecx, [ebp - 0x310]
mov byte [ebp - 4], 0x21
call fcn.00402d80
call fcn.00410410
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb0]
push eax
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfoLastHttpsMode
call fcn.0044bd90
add esp, 0xc
lea ecx, [ebp - 0x2ec]
mov esi, 0xfffffffe
call fcn.0040ec40
cmp ebx, 8
jb 0x42f5d2
lea eax, [ebx + 1]
push eax
mov eax, dword [ebp - 0x2b0]
lea ecx, [ebp - 0x2b0]
push eax
call fcn.00412080
mov eax, dword [ebp - 0x32c]
cmp eax, 8
jb 0x42f6b3
inc eax
lea ecx, [ebp - 0x340]
push eax
push dword [ebp - 0x340]
call fcn.00412080
jmp 0x42f6b3
mov ecx, edi
call fcn.00431b80
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x410]
call fcn.00476df0
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x25
jb 0x42f61e
mov eax, dword [eax]
push eax
push str.recv_update_reponse_from_tempalte_id:__s
push str.kupdate::KWpsUpdateImpl::Run
push 0x474
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
call fcn.00412750
add esp, 0x18
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x328]
call fcn.00402d80
lea eax, [ebp - 0x410]
mov ecx, edi
push eax
call fcn.00425e70
call fcn.00410410
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb0]
push eax
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfoLastHttpsMode
call fcn.0044bd90
add esp, 0xc
cmp ebx, 8
jb 0x42f693
lea eax, [ebx + 1]
push eax
mov eax, dword [ebp - 0x2b0]
lea ecx, [ebp - 0x2b0]
push eax
call fcn.00412080
mov eax, dword [ebp - 0x32c]
cmp eax, 8
jb 0x42f6b1
inc eax
lea ecx, [ebp - 0x340]
push eax
push dword [ebp - 0x340]
call fcn.00412080
xor esi, esi
lea ecx, [ebp - 0x410]
call fcn.00476920
mov ecx, dword [ebp - 0x344]
cmp ecx, 8
jb 0x42f6dc
inc ecx
push ecx
push dword [ebp - 0x358]
lea ecx, [ebp - 0x358]
call fcn.00412080
mov eax, esi
jmp 0x42f86c
push esi
jmp 0x42f6ed
mov eax, dword [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
call fcn.00433ca0
test al, al
je 0x42f849
push 0
push str.PatchRunning
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatusDetail
call fcn.0044bf70
push 0
push dword [0x4ff014]
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatus
call fcn.0044bf70
mov eax, dword [edi + 0xc]
add esp, 0x18
mov dword [ebp - 0x414], 0
mov ecx, dword [eax]
push 0x4f0da4
push 4
push eax
call dword [ecx + 0x20]
lea eax, [ebp - 0x310]
push eax
call fcn.00493830
mov ecx, eax
call fcn.00493460
mov esi, eax
lea eax, [ebp - 0x2c8]
mov dword [ebp - 4], 6
push 0
push eax
call fcn.00493830
mov ecx, eax
call fcn.00491cf0
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 7
jb 0x42f77f
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x42f787
mov eax, dword [eax]
lea ecx, [ebp - 0x414]
push ecx
push 0xfa0
push 0
push esi
push eax
push str.C_PATCHRUNNING
mov ecx, edi
call fcn.00430830
mov edx, dword [ebp - 0x2b4]
mov byte [ebp - 4], 6
cmp edx, 8
jb 0x42f7e3
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42f7d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42f839
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x2fc]
xor eax, eax
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2b4], 7
mov word [ebp - 0x2c8], ax
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x42f849
mov ecx, dword [ebp - 0x310]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42f83f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42f83f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
push str.KWpsUpdateImpl::Run_kStartFailedPatchRuning
push str.kupdate::KWpsUpdateImpl::Run
push 0x389
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
call fcn.00412750
add esp, 0x14
mov eax, 0xfffffffd
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bee49
mov esp, ebp
pop ebp
ret