Function at 0x4271c0
Capabilities:
Create process on windows
Read file via mapping

Disassembly:
push 0xffffffffffffffff
push 0x455062
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x476028]
xor eax, esp
mov dword [esp + 0x44], eax
push ebp
push esi
push edi
mov eax, dword [0x476028]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x68]
cmp dword [ebp + 0xb4], 0
jne 0x427558
push str.KINGSOFT_POWERWORD_FILEMAPPING_NAME
push 0
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
push 0
push 0
push 0
push 4
push eax
mov dword [ebp + 0xb4], eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, eax
test edi, edi
je 0x427541
mov esi, dword [edi]
lea ecx, [esp + 0x24]
call sub.MFC80U.DLL_Ordinal_557
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x64], 0
call fcn.00426950
cmp dword [esp + 0x2c], 0
jg 0x4272bd
push 0
push 0
push 0xbee
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea esi, [esp + 0x38]
mov byte [esp + 0x60], 1
call fcn.00401150
push str.CBTray.exe
mov ecx, esi
call dword [0x45b86c]
cmp dword [esp + 0x50], 8
mov eax, dword [esp + 0x3c]
jae 0x427298
lea eax, [esp + 0x3c]
push 5
push 0
push 0
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x38]
mov byte [esp + 0x60], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
jmp 0x427530
mov ecx, dword [esp + 0x28]
push ecx
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_280]
push 0
push 0x45ddd4
lea ecx, [esp + 0x18]
mov byte [esp + 0x68], 2
call dword [sym.imp.MFC80U.DLL_Ordinal_2261]
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_3990]
push 0x4609bc
lea ecx, [esp + 0x18]
mov byte [esp + 0x64], 3
call dword [sym.imp.MFC80U.DLL_Ordinal_1472]
test eax, eax
jne 0x427402
mov eax, dword [esp + 0x14]
push 0x45cc40
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_5485]
push 0x45cc40
push 0x45ddd4
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_5485]
mov ecx, dword [esp + 0x10]
cmp dword [ecx - 0xc], 0
je 0x4273d8
push str.main
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_1476]
test eax, eax
jne 0x427360
push eax
push eax
push 0xbec
jmp 0x4273d1
push str.mini
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_1476]
test eax, eax
jne 0x42737c
push eax
push eax
push 0xbed
jmp 0x4273d1
push 0x45d678
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_1476]
test eax, eax
jne 0x427398
push eax
push eax
push 0xbee
jmp 0x4273d1
push str.switch
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_1476]
test eax, eax
jne 0x4273b3
push eax
push 0x806b
jmp 0x4273cc
push str.counter_switch
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_1476]
test eax, eax
jne 0x4273d8
push eax
push 0x80e8
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x24]
mov dword [esp + 0x60], 0xffffffff
call sub.MFC80U.DLL_Ordinal_745
jmp 0x427558
push str.lookupword
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_1472]
test eax, eax
je 0x42743f
push str.lookupsentence
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_1472]
test eax, eax
je 0x42743f
push str.translation
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_1472]
test eax, eax
jne 0x427515
mov edx, dword [esp + 0x14]
push 0x45cc40
push edx
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_5485]
push 0x45cc40
push 0x45ddd4
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_5485]
mov ecx, dword [esp + 0x10]
cmp dword [ecx - 0xc], 0
je 0x42751c
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
mov eax, dword [ecx - 0xc]
add eax, eax
push str.lookupword
lea ecx, [esp + 0x18]
mov dword [esp + 0x20], eax
call dword [sym.imp.MFC80U.DLL_Ordinal_1472]
test eax, eax
jne 0x4274a9
mov dword [esp + 0x18], 1
jmp 0x4274e1
push str.lookupsentence
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_1472]
test eax, eax
jne 0x4274c6
mov dword [esp + 0x18], 2
jmp 0x4274e1
push str.translation
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_1472]
test eax, eax
jne 0x42751c
mov dword [esp + 0x18], 3
push 0x45f6b8
push 0x45f720
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80U.DLL_Ordinal_5485]
push 0
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_2460]
lea ecx, [esp + 0x18]
push ecx
push 0
push 0x4a
push esi
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
lea ecx, [esp + 0x24]
mov dword [esp + 0x60], 0xffffffff
call sub.MFC80U.DLL_Ordinal_745
mov edx, dword [ebp + 0xb4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0xb4], 0
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x44]
xor ecx, esp
call fcn.00452313
add esp, 0x54
ret 4