Function at 0x440510
Capabilities:
Get common file path
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe68
mov eax, dword [0x481288]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x634], 0x104
lea eax, [ebp - 0xa4c]
push eax
push 0x20019
push 0
push 0x47190c
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x44055b
jmp 0x440615
lea ecx, [ebp - 0x634]
push ecx
lea edx, [ebp - 0xa48]
push edx
lea eax, [ebp - 4]
push eax
push 0
push 0x471934
mov ecx, dword [ebp - 0xa4c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov word [ebp - 0xc60], 0
push 0x206
push 0
lea edx, [ebp - 0xc5e]
push edx
call fcn.00415680
add esp, 0xc
mov word [ebp - 0xe68], 0
push 0x206
push 0
lea eax, [ebp - 0xe66]
push eax
call fcn.00415680
add esp, 0xc
lea ecx, [ebp - 0xa48]
push ecx
lea edx, [ebp - 0xe68]
push edx
lea eax, [ebp - 0xc60]
push eax
push 0x2e
call fcn.00450110
add esp, 0x10
lea ecx, [ebp - 0xc60]
push ecx
call fcn.004155f7
add esp, 4
mov dword [ebp - 0xa54], eax
cmp dword [ebp - 0xa54], 0
je 0x440608
mov edx, dword [ebp - 0xa54]
mov dword [0x489b38], edx
mov eax, dword [ebp - 0xa4c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp + 8]
push ecx
call fcn.00414d31
add esp, 4
test eax, eax
jne 0x44062f
mov eax, 1
jmp 0x44096e
mov edx, dword [ebp + 8]
push edx
call fcn.00438dc0
add esp, 4
mov eax, dword [ebp + 8]
push eax
push 0x471944
push 0x208
push 0x104
lea ecx, [ebp - 0x630]
push ecx
call fcn.004157ac
add esp, 0x14
lea edx, [ebp - 0x630]
push edx
push str.__sQzoneMusic.exe____UnregServer
push 0x208
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.004157ac
add esp, 0x14
cmp dword [0x48a870], 0
jne 0x4406a5
push 1
lea ecx, [ebp - 0x630]
push ecx
lea edx, [ebp - 0x420]
push edx
push 0
call fcn.0043a810
add esp, 0x10
lea eax, [ebp - 0x630]
push eax
push str.__sQQPlayerSvr.exe____UnregServer
push 0x208
push 0x104
lea ecx, [ebp - 0x420]
push ecx
call fcn.004157ac
add esp, 0x14
push 1
lea edx, [ebp - 0x630]
push edx
lea eax, [ebp - 0x420]
push eax
push 0
call fcn.0043a810
add esp, 0x10
push 0
push 1
push 5
call fcn.0044d8b0
add esp, 0xc
mov dword [ebp - 0xa50], 0
mov word [ebp - 0x210], 0
push 0x206
push 0
lea ecx, [ebp - 0x20e]
push ecx
call fcn.00415680
add esp, 0xc
mov word [ebp - 0x840], 0
push 0x206
push 0
lea edx, [ebp - 0x83e]
push edx
call fcn.00415680
add esp, 0xc
lea eax, [ebp - 0xa50]
push eax
push 0x25
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov dword [ebp - 0x214], eax
lea ecx, [ebp - 0x210]
push ecx
mov edx, dword [ebp - 0xa50]
push edx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [ebp - 0x424], eax
lea eax, [ebp - 0x210]
push eax
push str.__s_regsvr32.exe___s__u_QzoneMusic.dll
push 0x208
push 0x104
lea ecx, [ebp - 0x420]
push ecx
call fcn.004157ac
add esp, 0x14
cmp dword [0x48a870], 0
jne 0x4407b3
push 1
lea edx, [ebp - 0x630]
push edx
lea eax, [ebp - 0x420]
push eax
push 0
call fcn.0043a810
add esp, 0x10
lea ecx, [ebp - 0x210]
push ecx
push str.__s_regsvr32.exe___s__u_QQPlayerProxy.dll
push 0x208
push 0x104
lea edx, [ebp - 0x420]
push edx
call fcn.004157ac
add esp, 0x14
push 1
lea eax, [ebp - 0x630]
push eax
lea ecx, [ebp - 0x420]
push ecx
push 0
call fcn.0043a810
add esp, 0x10
lea edx, [ebp - 0x210]
push edx
push str.__s_regsvr32.exe___s__u_QQIEHelper.dll
push 0x208
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.004157ac
add esp, 0x14
push 1
lea ecx, [ebp - 0x630]
push ecx
lea edx, [ebp - 0x420]
push edx
push 0
call fcn.0043a810
add esp, 0x10
mov eax, dword [ebp + 8]
push eax
push str._sQZone
push 0x208
push 0x104
lea ecx, [ebp - 0x840]
push ecx
call fcn.004157ac
add esp, 0x14
lea edx, [ebp - 0x210]
push edx
push str.__s_regsvr32.exe___s__u_QzoneMediaTools.ocx
push 0x208
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.004157ac
add esp, 0x14
push 1
lea ecx, [ebp - 0x840]
push ecx
lea edx, [ebp - 0x420]
push edx
push 0
call fcn.0043a810
add esp, 0x10
lea eax, [ebp - 0x210]
push eax
push str.__s_regsvr32.exe___s__u_PhotoUploadCtrl.ocx
push 0x208
push 0x104
lea ecx, [ebp - 0x420]
push ecx
call fcn.004157ac
add esp, 0x14
push 1
lea edx, [ebp - 0x840]
push edx
lea eax, [ebp - 0x420]
push eax
push 0
call fcn.0043a810
add esp, 0x10
push 0
push 2
push 5
call fcn.0044d8b0
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043aa10
add esp, 4
push 0
push 3
push 5
call fcn.0044d8b0
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
call fcn.00439180
add esp, 4
mov eax, dword [ebp + 8]
push eax
call fcn.0043dce0
add esp, 4
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043ea30
add esp, 4
push 0x488af8
push str.SectionQQ
call fcn.00438ef0
add esp, 8
push 0x488af8
push str.SectionTT
call fcn.00438ef0
add esp, 8
push 0
push 4
push 5
call fcn.0044d8b0
add esp, 0xc
call fcn.0043a960
test eax, eax
je 0x440969
push 0x488af8
mov edx, dword [ebp + 8]
push edx
call fcn.0043e860
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004151d0
mov esp, ebp
pop ebp
ret