Function at 0x43b7e0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e0961
mov eax, dword fs:[0]
push eax
sub esp, 0x150
mov eax, dword [0x53d9f8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x158], ebx
push dword [0x4fef84]
mov byte [ebp - 0x151], bl
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x43b843
call fcn.0048e430
mov byte [ebp - 0x151], 1
jmp 0x43bc92
push dword [0x4fef80]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x43b86a
call fcn.0048efb0
mov byte [ebp - 0x151], 1
jmp 0x43bc92
push dword [0x4fef88]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x43b891
call fcn.0048e8f0
mov byte [ebp - 0x151], 1
jmp 0x43bc92
push dword [0x4fef90]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x43b8bf
call fcn.0046fe50
mov ecx, eax
call fcn.00474850
mov byte [ebp - 0x151], 1
jmp 0x43bc92
push dword [0x4fef8c]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x43b8ed
call fcn.0046fe50
mov ecx, eax
call fcn.00475630
mov byte [ebp - 0x151], 1
jmp 0x43bc92
push dword [0x4fef28]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x43b93f
push dword [0x4fef28]
lea eax, [ebp - 0x118]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef2c]
mov ebx, 1
mov dword [ebp - 4], 0
mov ecx, eax
mov dword [ebp - 0x158], ebx
call fcn.00432570
test al, al
je 0x43b982
push dword [0x4fef74]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
je 0x43b98b
push dword [0x4fef74]
lea eax, [ebp - 0x100]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef78]
mov ecx, eax
or ebx, 2
call fcn.00432570
test al, al
je 0x43b98b
mov byte [ebp - 0x152], 0
jmp 0x43b992
mov byte [ebp - 0x152], 1
test bl, 2
je 0x43b9f3
mov edx, dword [ebp - 0xec]
and ebx, 0xfffffffd
cmp edx, 8
jb 0x43b9d6
mov ecx, dword [ebp - 0x100]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43b9cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43ba31
push edx
push ecx
call fcn.004bee2d
add esp, 8
xor eax, eax
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 7
mov word [ebp - 0x100], ax
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x43ba41
mov edx, dword [ebp - 0x104]
cmp edx, 8
jb 0x43ba41
mov ecx, dword [ebp - 0x118]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43ba37
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43ba37
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
cmp byte [ebp - 0x152], 0
je 0x43bc92
push 0x40
lea eax, [ebp - 0x50]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0
push 0x20
lea eax, [ebp - 0x50]
push eax
push str.HKCUSoftwareKingsoftOffice6.0Common_version
call fcn.0044b880
add esp, 0x1c
test eax, eax
jne 0x43bc92
cmp word [ebp - 0x50], ax
je 0x43bc92
lea eax, [ebp - 0x118]
push 1
push eax
call fcn.00416f00
add esp, 8
push 0
lea eax, [ebp - 0x50]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x118]
call fcn.004148a0
cmp eax, 0xffffffff
jne 0x43bc49
lea eax, [ebp - 0x100]
push 0x19
push eax
call fcn.00416f00
push 0x80
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 2
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x14
lea eax, [ebp - 0x100]
cmp dword [ebp - 0xec], 8
cmovae eax, dword [ebp - 0x100]
push eax
push 0x40
lea eax, [ebp - 0xd0]
push eax
push 0x4f0da4
push str.higherversion
push 0x4f0f98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [ebp - 0xd0], 0
jne 0x43bc03
lea eax, [ebp - 0xe8]
push 0
push eax
call fcn.00416f00
add esp, 8
push 0x4f0efc
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 3
call fcn.004202f0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xe8]
call fcn.004202f0
call fcn.004d6ef0
test al, al
mov edx, str.wtoolexwpsupdate.exe
mov ecx, str.wtoolexwpspdfupdate.exe
cmove ecx, edx
push ecx
lea ecx, [ebp - 0xe8]
call fcn.004202f0
cmp dword [ebp - 0xd4], 8
lea eax, [ebp - 0xe8]
cmovae eax, dword [ebp - 0xe8]
push eax
call fcn.004168a0
add esp, 4
test al, al
je 0x43bbbd
cmp dword [ebp - 0xd4], 8
lea eax, [ebp - 0xe8]
push 0
cmovae eax, dword [ebp - 0xe8]
push str._frommanual
push eax
call fcn.004548c0
add esp, 0xc
mov byte [ebp - 0x151], 1
mov edx, dword [ebp - 0xd4]
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x43bc03
mov ecx, dword [ebp - 0xe8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bbf9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43bbf9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0xec]
mov byte [ebp - 4], 1
cmp edx, 8
jb 0x43bc49
mov ecx, dword [ebp - 0x100]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bc3f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43bc3f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x43bc92
mov ecx, dword [ebp - 0x118]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bc88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43bc88
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
call fcn.004da1e0
mov esi, eax
test esi, esi
jne 0x43bcb4
push str.5FCD4425_CA3A_48F4_A57C_B8A75C32ACB1
call fcn.00437160
push str.7AE6DE87_C956_4B40_9C89_3D166C9841D3
call fcn.00437160
add esp, 8
push dword [0x4fef28]
lea eax, [ebp - 0x118]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
push dword [0x4fef38]
mov ecx, eax
call fcn.00432570
mov edx, dword [ebp - 0x104]
mov bl, al
cmp edx, 8
jb 0x43bd1e
mov ecx, dword [ebp - 0x118]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bd14
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43bd14
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test bl, bl
je 0x43c3f4
cmp esi, 2
je 0x43bd33
test esi, esi
jne 0x43c3f4
xor edi, edi
mov dword [ebp - 0x100], str.Word.Document.8
mov dword [ebp - 0xfc], str.Word.Document.12
mov dword [ebp - 0xf8], str.Excel.Sheet.8
mov dword [ebp - 0xf4], str.Excel.Sheet.12
mov dword [ebp - 0xf0], str.PowerPoint.Show.8
mov dword [ebp - 0xec], str.PowerPoint.Show.12
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xd4], edi
mov dword [ebp - 4], 4
xor ebx, ebx
lea esp, [esp]
mov esi, dword [ebp + ebx*4 - 0x100]
call fcn.0040fdf0
mov ecx, eax
test ecx, ecx
je 0x43c416
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x15c], eax
push esi
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 5
call fcn.00420340
test al, al
jne 0x43bdd4
push esi
lea ecx, [ebp - 0x15c]
call fcn.00423870
push 0x13
push str._shellopenddeexec
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 6
call fcn.004240d0
mov esi, dword [ebp - 0x15c]
lea eax, [ebp - 0x158]
push eax
push 0x20019
push 0
push esi
push 0x80000000
mov dword [ebp - 0x158], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x43be41
test edi, edi
je 0x43be23
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0x158]
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xd8], 0
test eax, eax
je 0x43bfc4
mov byte [ebp - 4], 4
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43be5d
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
inc ebx
cmp ebx, 6
jl 0x43bd90
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x43be79
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xe8]
push 7
push eax
call fcn.00416f00
mov esi, eax
xor eax, eax
mov dword [ebp - 4], 8
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x150], ax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
push 0x40
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
call fcn.004bedfd
add esp, 0xc
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0xb
cmp eax, esi
je 0x43bf19
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x43bf0a
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x150]
push eax
call fcn.004033b0
push 1
push 0x4f0efc
lea ecx, [ebp - 0x150]
call fcn.00403230
push 0x10
push str.cfgsproduct.dat
mov ecx, eax
call fcn.00403230
lea eax, [ebp - 0x138]
cmp eax, esi
je 0x43bf5c
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x43bf4d
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x138]
push eax
call fcn.004033b0
push 1
push 0x4f0efc
lea ecx, [ebp - 0x138]
call fcn.00403230
push 0xc
push str.cfgsoem.ini
mov ecx, eax
call fcn.00403230
mov edx, dword [ebp - 0xd4]
mov byte [ebp - 4], 0xd
cmp edx, 8
jb 0x43c0cb
mov ecx, dword [ebp - 0xe8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43c0c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43c0c1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov byte [ebp - 4], 4
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43bfe0
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x43bff2
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xe8]
push 0x13
push eax
call fcn.00416f00
cmp dword [ebp - 0xd4], 8
lea eax, [ebp - 0xe8]
mov dword [ebp - 4], 7
cmovae eax, dword [ebp - 0xe8]
push eax
call fcn.004168a0
add esp, 0xc
test al, al
je 0x43c06f
cmp dword [ebp - 0xd4], 8
lea eax, [ebp - 0xe8]
push 0
cmovae eax, dword [ebp - 0xe8]
push 0x4f9c84
push eax
call fcn.004548c0
add esp, 0xc
test eax, eax
jns 0x43c06f
push eax
push str.Failed_run_ksomisc_:_0x_08x..
push str.kupdate::KWpsUpdateImpl::_execKsomiscProcDelddeexec
push 0xff7
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x18
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x43be79
mov ecx, dword [ebp - 0xe8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43c0b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43c0b2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
jmp 0x43be79
push edx
push ecx
call fcn.004bee2d
add esp, 8
xor eax, eax
mov dword [ebp - 0xd8], 0
push 0x13
push str.Support_AssoWPS2009
lea ecx, [ebp - 0x100]
mov dword [ebp - 0xd4], 7
mov word [ebp - 0xe8], ax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], 7
mov word [ebp - 0x100], ax
call fcn.004033b0
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x150]
call fcn.0041b8d0
cmp dword [ebp - 0x104], 8
lea eax, [ebp - 0x118]
push 0x4f1b88
cmovae eax, dword [ebp - 0x118]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov edx, dword [ebp - 0x104]
add esp, 8
test eax, eax
sete bl
cmp edx, 8
jb 0x43c198
mov ecx, dword [ebp - 0x118]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43c18e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43c18e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0xec]
mov byte [ebp - 4], 0xd
cmp edx, 8
jb 0x43c1de
mov ecx, dword [ebp - 0x100]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43c1d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43c1d4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test bl, bl
je 0x43c1ef
push str.RJeGovWPS.WPSAddin
call fcn.004368c0
add esp, 4
mov edx, dword [ebp - 0x13c]
xor eax, eax
mov word [ebp - 0x118], ax
cmp edx, 8
jb 0x43c238
mov ecx, dword [ebp - 0x150]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43c22e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c3e4
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov eax, dword [ebp - 0x118]
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x144], eax
xor eax, eax
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x118], ax
cmp edx, 8
jb 0x43c2c5
mov ecx, dword [ebp - 0x138]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43c2bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c3e4
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov eax, dword [ebp - 0x118]
mov esi, dword [ebp - 0x120]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x128], 0
mov ecx, eax
mov dword [ebp - 0x124], 7
push dword [esi + 4]
push eax
call fcn.004136f0
mov dword [esi + 4], esi
mov dword [esi], esi
mov dword [esi + 8], esi
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x11c], 0
push dword [eax + 4]
lea eax, [ebp - 0x120]
push eax
mov ecx, eax
call fcn.004136f0
push 0x40
push dword [ebp - 0x120]
call fcn.004bee2d
mov edx, dword [ebp - 0x124]
add esp, 8
cmp edx, 8
jb 0x43c395
mov ecx, dword [ebp - 0x138]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43c38b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c3e4
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x13c]
xor eax, eax
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
cmp edx, 8
jb 0x43c3f4
mov ecx, dword [ebp - 0x150]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43c3ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43c3ea
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov al, byte [ebp - 0x151]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bee49
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.0041d0e0
int3