Function at 0x401a00
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4acc9b
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x4e437c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x8c], edi
push 0x11
xor eax, eax
mov dword [ebp - 4], 0
push str.EnableNetworkHook
lea ecx, [ebp - 0x58]
mov dword [edi], 0
mov byte [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.00402f10
push 0x23
xor eax, eax
mov byte [ebp - 4], 1
push str.SoftwareKingsoftOffice6.0Common
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.00402f10
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x40]
push eax
push 0x80000001
call fcn.00425e70
mov edx, dword [ebp - 0x2c]
add esp, 0x10
test eax, eax
mov byte [ebp - 4], 1
setne bl
cmp edx, 8
jb 0x401afd
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401af3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f7a
push edx
push ecx
call fcn.0046e36f
add esp, 8
mov edx, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov byte [ebp - 4], al
cmp edx, 8
jb 0x401b4e
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401b44
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f7a
push edx
push ecx
call fcn.0046e36f
add esp, 8
test bl, bl
je 0x401bcb
lea eax, [ebp - 0x70]
push 1
push eax
call fcn.004629f0
add esp, 8
cmp dword [ebp - 0x5c], 8
lea ebx, [ebp - 0x70]
mov esi, dword [ebp - 0x60]
lea ecx, [ebp + 0x10]
cmovae ebx, dword [ebp - 0x70]
cmp dword [ebp + 0x24], 8
mov eax, dword [ebp + 0x20]
cmovae ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 3
mov dword [ebp - 0x94], ecx
cmp esi, eax
ja 0x401bc3
test esi, esi
je 0x401c3d
sub eax, esi
inc eax
lea eax, [ecx + eax*2]
mov dword [ebp - 0x90], eax
mov edi, edi
sub eax, ecx
sar eax, 1
je 0x401bbd
movzx edx, word [ebx]
lea esp, [esp]
cmp word [ecx], dx
je 0x401c08
add ecx, 2
sub eax, 1
jne 0x401bb0
mov edi, dword [ebp - 0x8c]
lea ecx, [ebp - 0x70]
call fcn.00402420
mov edx, dword [ebp + 0x24]
cmp edx, 8
jb 0x401f5a
mov ecx, dword [ebp + 0x10]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401f50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f7f
jmp 0x401f50
mov edx, ebx
test esi, esi
je 0x401c27
mov edi, ecx
sub edi, ebx
mov ax, word [edi + edx]
cmp ax, word [edx]
jne 0x401cee
add edx, 2
sub esi, 1
jne 0x401c12
sub ecx, dword [ebp - 0x94]
mov edi, dword [ebp - 0x8c]
sar ecx, 1
cmp ecx, 0xffffffff
je 0x401bc3
mov eax, dword [ebp + 0x20]
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x401c7e
push 0x25
push str._addonsknetworkhookknetworkhook.dll
lea ecx, [ebp + 0x10]
call fcn.00402d90
cmp dword [ebp + 0x24], 8
lea eax, [ebp + 0x10]
cmovae eax, dword [ebp + 0x10]
push eax
call esi
test eax, eax
je 0x401c7e
cmp dword [ebp + 0x24], 8
lea eax, [ebp + 0x10]
cmovae eax, dword [ebp + 0x10]
push eax
call ebx
mov dword [edi], eax
mov eax, dword [edi]
test eax, eax
jne 0x401f14
cmp byte [ebp + 0xc], al
je 0x401bc3
lea eax, [ebp - 0x28]
push eax
call fcn.00402ab0
add esp, 4
cmp dword [ebp - 0x18], 0
mov byte [ebp - 4], 4
je 0x401cff
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x401cff
push 8
push str.office6
lea ecx, [ebp - 0x28]
call fcn.00402d90
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
jmp 0x401d51
mov esi, dword [ebp - 0x60]
add ecx, 2
mov eax, dword [ebp - 0x90]
jmp 0x401ba0
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 3
cmp edx, 8
jb 0x401d51
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401d47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f84
push edx
push ecx
call fcn.0046e36f
add esp, 8
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 0x18], eax
push str._addonsknetworkhookknetworkhook.dll
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004017e0
add esp, 0xc
cmp dword [ebp - 0x30], 0
mov byte [ebp - 4], 6
je 0x401ec4
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call esi
test eax, eax
je 0x401ec4
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push eax
call esi
test eax, eax
je 0x401ec4
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x28]
call fcn.00401960
push str.PATH
push 0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 7
push 0
push eax
mov dword [ebp - 0x90], 0
call fcn.0048f494
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov esi, dword [ebp - 0x90]
add eax, 2
add esi, eax
mov edx, 2
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0046e37d
mov edi, eax
mov dword [ebp - 0x94], edi
push esi
push 0
push edi
mov byte [ebp - 4], 8
call fcn.00486380
push str.PATH
push esi
lea eax, [ebp - 0x90]
push edi
push eax
call fcn.0048f494
add esp, 0x30
test eax, eax
jne 0x401e99
push 1
push 0x4b7580
lea ecx, [ebp - 0x28]
call fcn.00402d90
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x401e99
push edi
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.004017e0
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
push str.PATH
call fcn.0048f775
add esp, 0x14
lea ecx, [ebp - 0x88]
call fcn.00402420
test edi, edi
je 0x401ea6
push edi
call fcn.0046e386
add esp, 4
lea ecx, [ebp - 0x28]
call fcn.00402420
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push eax
call ebx
mov edi, dword [ebp - 0x8c]
mov dword [edi], eax
lea ecx, [ebp - 0x58]
call fcn.00402420
mov edx, dword [ebp - 0x2c]
mov byte [ebp - 4], 3
cmp edx, 8
jb 0x401f0a
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401f00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f89
push edx
push ecx
call fcn.0046e36f
add esp, 8
mov eax, dword [edi]
test eax, eax
je 0x401bc3
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.Hook
push eax
call esi
push str.UnHook
push dword [edi]
mov dword [edi + 8], eax
call esi
cmp byte [ebp + 8], 0
mov dword [edi + 0xc], eax
je 0x401bc3
mov eax, dword [edi + 8]
test eax, eax
je 0x401bc3
call eax
mov byte [edi + 4], al
jmp 0x401bc3
push edx
push ecx
call fcn.0046e36f
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046e5dc
mov esp, ebp
pop ebp
ret 0x20
call fcn.0048f279
call fcn.0048f279
call fcn.0048f279
call fcn.0048f279
int3