Function at 0x4b15e0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5314a8
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x590cc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x48]
xor edi, edi
push eax
mov dword [ebp - 0x68], edi
call fcn.004b0fd0
add esp, 4
mov dword [ebp - 4], edi
cmp dword [ebp - 0x38], edi
je 0x4b178a
push str.wps.exe
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.0040d560
add esp, 0xc
cmp dword [ebp - 0x1c], edi
mov bl, 1
mov byte [ebp - 4], bl
mov edi, 8
je 0x4b16c0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x4b165a
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4b16c0
test al, 0x10
jne 0x4b16c0
lea ecx, [ebp - 0x2c]
mov edi, 7
xor ebx, ebx
xor eax, eax
push ecx
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], ebx
mov ecx, esi
mov word [esi], ax
call fcn.00402630
cmp dword [ebp - 0x18], 8
jb 0x4b1699
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b9008
add esp, 4
xor eax, eax
cmp dword [ebp - 0x34], 8
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
jb 0x4b183b
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004b9008
add esp, 4
jmp 0x4b183b
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x64]
push eax
call fcn.004b10f0
add esp, 8
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00402630
mov byte [ebp - 4], bl
cmp dword [ebp - 0x50], edi
jb 0x4b16f1
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.004b9008
add esp, 4
push 0x10
push str.office6wps.exe
lea ecx, [ebp - 0x2c]
call fcn.00402340
cmp dword [ebp - 0x1c], 0
je 0x4b1777
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x4b1711
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4b1777
test al, 0x10
jne 0x4b1777
lea eax, [ebp - 0x2c]
mov edi, 7
xor ebx, ebx
xor edx, edx
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], ebx
push eax
mov ecx, esi
mov word [esi], dx
call fcn.00402630
cmp dword [ebp - 0x18], 8
jb 0x4b1750
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b9008
add esp, 4
xor edx, edx
cmp dword [ebp - 0x34], 8
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
jb 0x4b183b
mov eax, dword [ebp - 0x48]
push eax
call fcn.004b9008
add esp, 4
jmp 0x4b183b
cmp dword [ebp - 0x18], edi
jb 0x4b178f
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004b9008
add esp, 4
jmp 0x4b178f
mov edi, 8
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], edi
jb 0x4b17a7
mov edx, dword [ebp - 0x48]
push edx
call fcn.004b9008
add esp, 4
push str.InstallRoot
push str.SoftwareKingsoftOffice6.0Common
lea eax, [ebp - 0x2c]
push 0x80000001
push eax
call fcn.004b0e90
add esp, 0x10
xor edi, edi
mov ebx, 3
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x1c], edi
jne 0x4b1859
push str.InstallRoot
push str.SoftwareKingsoftOffice6.0Common
lea ecx, [ebp - 0x64]
push 0x80000002
push ecx
call fcn.004b0e90
add esp, 0x10
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00402630
mov byte [ebp - 4], bl
mov ebx, 8
cmp dword [ebp - 0x50], ebx
jb 0x4b1816
mov edx, dword [ebp - 0x64]
push edx
call fcn.004b9008
add esp, 4
cmp dword [ebp - 0x1c], edi
jne 0x4b185e
cmp dword [ebp - 0x18], ebx
jb 0x4b182c
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004b9008
add esp, 4
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
mov word [esi], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b9ff3
mov esp, ebp
pop ebp
ret
mov ebx, 8
push 0x10
push str.office6wps.exe
lea ecx, [ebp - 0x2c]
call fcn.00402340
cmp dword [ebp - 0x1c], edi
je 0x4b181b
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], ebx
jae 0x4b187d
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4b181b
test al, 0x10
jne 0x4b181b
lea ecx, [ebp - 0x2c]
xor eax, eax
push ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
mov ecx, esi
mov word [esi], ax
call fcn.00402630
cmp dword [ebp - 0x18], ebx
jb 0x4b183b
mov edx, dword [ebp - 0x2c]
push edx
call fcn.004b9008
add esp, 4
jmp 0x4b183b