Function at 0x428b00
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x526ebc
mov eax, dword fs:[0]
push eax
sub esp, 0x8d8
mov eax, dword [0x590cc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
push 0x7fe
xor ebx, ebx
lea ecx, [ebp - 0x88e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x890], ax
call fcn.004ba010
push ebx
push 0x400
lea edx, [ebp - 0x890]
push edx
push str.HKCUSoftwareKingsoftOffice6.0Commonupdateinfowaitclearversions
call fcn.0041dcb0
add esp, 0x1c
cmp eax, ebx
jne 0x428be9
xor eax, eax
mov word [ebp - 0x8c8], ax
lea eax, [ebp - 0x890]
mov dword [ebp - 0x8b4], 7
mov dword [ebp - 0x8b8], ebx
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x428b90
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x890]
push ecx
lea ecx, [ebp - 0x8c8]
call fcn.00402460
push esi
lea edx, [ebp - 0x8c8]
push 0x53e8ac
push edx
mov dword [ebp - 4], ebx
call fcn.004130e0
add esp, 0xc
cmp dword [ebp - 0x8b4], 8
mov dword [ebp - 4], 0xffffffff
jb 0x428be9
mov eax, dword [ebp - 0x8c8]
push eax
call fcn.004b9008
add esp, 4
lea ecx, [ebp - 0x8ac]
push 0x16
push ecx
call fcn.0041d2b0
push 0x7e
lea eax, [ebp - 0x8e]
xor edx, edx
push ebx
push eax
mov dword [ebp - 4], 1
mov word [ebp - 0x90], dx
call fcn.004ba010
mov eax, dword [ebp - 0x8ac]
add esp, 0x14
cmp dword [ebp - 0x898], 8
jae 0x428c2e
lea eax, [ebp - 0x8ac]
mov edi, dword [sym.imp.KERNEL32.DLL_GetPrivateProfileStringW]
push eax
push 0x40
lea ecx, [ebp - 0x90]
push ecx
push 0x53a154
push str.lowerversion
push 0x53db18
call edi
lea eax, [ebp - 0x90]
lea edx, [eax + 2]
jmp 0x428c60
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x428c60
sub eax, edx
sar eax, 1
cmp eax, ebx
je 0x428d2f
mov eax, dword [esi + 4]
mov ecx, dword [esi]
lea edx, [ebp - 0x90]
push edx
push eax
push ecx
call fcn.00421100
add esp, 0xc
cmp eax, dword [esi + 4]
jne 0x428d04
xor eax, eax
mov word [ebp - 0x8c8], ax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x8b4], 7
mov dword [ebp - 0x8b8], ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x428cb4
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x8c8]
call fcn.00402460
lea edx, [ebp - 0x8c8]
push edx
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.004034c0
cmp dword [ebp - 0x8b4], 8
mov byte [ebp - 4], 1
jb 0x428d04
mov eax, dword [ebp - 0x8c8]
push eax
call fcn.004b9008
add esp, 4
cmp dword [ebp - 0x898], 8
mov eax, dword [ebp - 0x8ac]
jae 0x428d19
lea eax, [ebp - 0x8ac]
push eax
push 0x53a154
push str.lowerversion
push 0x53db18
call dword [sym.imp.KERNEL32.DLL_WritePrivateProfileStringW]
push 0x80
lea ecx, [ebp - 0x90]
push ebx
push ecx
call fcn.004ba010
mov eax, dword [ebp - 0x8ac]
add esp, 0xc
cmp dword [ebp - 0x898], 8
jae 0x428d59
lea eax, [ebp - 0x8ac]
push eax
push 0x40
lea edx, [ebp - 0x90]
push edx
push 0x53a154
push str.higherversion
push 0x53db18
call edi
lea eax, [ebp - 0x90]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x428d80
sub eax, edx
sar eax, 1
cmp eax, ebx
je 0x428e4b
mov eax, dword [esi + 4]
mov ecx, dword [esi]
lea edx, [ebp - 0x90]
push edx
push eax
push ecx
call fcn.00421100
add esp, 0xc
cmp eax, dword [esi + 4]
jne 0x428e20
xor eax, eax
mov word [ebp - 0x8e4], ax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x8d0], 7
mov dword [ebp - 0x8d4], ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x428dd4
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x8e4]
call fcn.00402460
lea edx, [ebp - 0x8e4]
push edx
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.004034c0
cmp dword [ebp - 0x8d0], 8
jb 0x428e20
mov eax, dword [ebp - 0x8e4]
push eax
call fcn.004b9008
add esp, 4
cmp dword [ebp - 0x898], 8
mov eax, dword [ebp - 0x8ac]
jae 0x428e35
lea eax, [ebp - 0x8ac]
push eax
push 0x53a154
push str.higherversion
push 0x53db18
call dword [sym.imp.KERNEL32.DLL_WritePrivateProfileStringW]
cmp dword [ebp - 0x898], 8
jb 0x428e63
mov ecx, dword [ebp - 0x8ac]
push ecx
call fcn.004b9008
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b9ff3
mov esp, ebp
pop ebp
ret 4