Function at 0x4c3d50
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x514b65
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x550144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
lea eax, [esi + 0xc]
push eax
call fcn.004b8240
add esp, 4
test eax, eax
jne 0x4c4063
lea ecx, [ebp - 0x5c]
call fcn.00479be0
lea edi, [esi + 4]
mov dword [ebp - 4], 0
mov ecx, edi
call fcn.0044c0a0
push eax
lea ecx, [ebp - 0x28]
call fcn.0048cfc0
push str.npQMExtensionsMozilla.dll
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.0048f4e0
lea ecx, [ebp - 0x28]
call fcn.0044a630
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4c3e62
call fcn.004878d0
lea ecx, [ebp - 0x5c]
push 0
push 0
test eax, eax
jne 0x4c3df1
push str.SOFTWAREMozillaPlugins_qq.com_QQPCMgr
jmp 0x4c3df6
push str.SOFTWAREWow6432NodeMozillaPlugins_qq.com_QQPCMgr
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00479c10
test eax, eax
je 0x4c3e62
lea ecx, [ebp - 0x28]
call fcn.0044a630
push eax
push str.Path
lea ecx, [ebp - 0x5c]
call fcn.00492cf0
push str.QQPCMgr_Detector
push str.Description
lea ecx, [ebp - 0x5c]
call fcn.00492cf0
push str.QQPCMgr_Detector
push 0x536cd0
lea ecx, [ebp - 0x5c]
call fcn.00492cf0
push 0x51f128
push str.Vendor
lea ecx, [ebp - 0x5c]
call fcn.00492cf0
push str.2.0.0.2
push str.Version
lea ecx, [ebp - 0x5c]
call fcn.00492cf0
mov ecx, edi
call fcn.0044c0a0
push eax
lea ecx, [ebp - 0x28]
call fcn.0048d020
push str.QQPCClinic.exe
lea ecx, [ebp - 0x28]
call fcn.0048f4e0
lea ecx, [ebp - 0x28]
call fcn.0044a630
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4c3f10
push str.SoftwareMicrosoftInternet_ExplorerLow_RightsElevationPolicy_
lea ecx, [ebp - 0x60]
call fcn.0044f140
push str.16EE6530_8649_4F42_A9E4_F6A3295AF975
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 2
call fcn.0048c580
push 0
push 0
lea ecx, [ebp - 0x60]
call fcn.0044c0a0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x5c]
call fcn.00479c10
test eax, eax
je 0x4c3f04
mov ecx, edi
call fcn.0044c0a0
push eax
push str.AppPath
lea ecx, [ebp - 0x5c]
call fcn.00492cf0
push str.QQPCClinic.exe
push str.AppName
lea ecx, [ebp - 0x5c]
call fcn.00492cf0
push 3
push str.Policy
lea ecx, [ebp - 0x5c]
call fcn.00492cc0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.0044c080
push str.Set_Relation_File_Type
push 0x550bb8
call fcn.0048d540
add esp, 8
mov ecx, 0x553028
call fcn.004b1720
test eax, eax
je 0x4c3f63
push str.IsConvertInstall_TRUE
push 0x550bb8
call fcn.0048d540
add esp, 8
cmp dword [esi + 0x4c], 0
je 0x4c3f4f
push str.m_bFileOpenWasSet_TRUE
jmp 0x4c3f68
push str.m_bFileOpenWasSet_FALSE
push 0x550bb8
call fcn.0048d540
add esp, 8
jmp 0x4c3f7d
push str.IsConvertInstall_FALSE
push 0x550bb8
call fcn.0048d540
add esp, 8
mov ecx, esi
push edi
call fcn.004c4ae0
push str.Reload_WebClinic
push 0x550bb8
call fcn.0048d540
add esp, 4
mov ecx, esp
push str.QQPCMgr.WebGame
call fcn.0044f140
mov ecx, esi
call fcn.004c4590
push ecx
mov ecx, esp
push str.QQPCMgr.QQPCSafebox
call fcn.0044f140
mov ecx, esi
call fcn.004c4590
push ecx
mov ecx, esp
push str.PCMgrRepairIEExtensions
call fcn.0044f140
mov ecx, esi
call fcn.004c4590
push str.QQPCMgr.exe
lea eax, [ebp - 0x60]
push edi
push eax
call fcn.0048c050
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.0044c0a0
push eax
push str.URL:
push str.PCMgrRepairIEExtensions
mov ecx, esi
call fcn.004c4350
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.0044c080
mov ecx, edi
call fcn.0044c0a0
push eax
lea ecx, [ebp - 0x58]
call fcn.0044a6a0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x40]
call fcn.004c3cd0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 6
call fcn.0044a640
cmp dword [esi + 0x14], 0
jne 0x4c404b
lea ecx, [ebp - 0x40]
call fcn.004c5780
test eax, eax
je 0x4c404b
lea ecx, [ebp - 0x40]
call fcn.004c4080
lea ecx, [ebp - 0x40]
call fcn.004c3d30
lea ecx, [ebp - 0x28]
call fcn.0044a640
lea ecx, [ebp - 0x5c]
call fcn.00479bf0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004de46d
mov esp, ebp
pop ebp
ret