Function at 0x4f1fc0
Capabilities:
Check if file exists
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50242e
mov eax, dword fs:[0]
push eax
sub esp, 0xcc8
mov eax, dword [0x564610]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0
mov word [ebp - 0xa64], 0
push 0x400
push 0
lea eax, [ebp - 0xa62]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x440], 0x200
mov word [ebp - 0x434], 0
push 0x208
push 0
lea ecx, [ebp - 0x432]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov ecx, dword [ebp + 8]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::clear_void_]
mov word [ebp - 0x65c], 0
push 0x208
push 0
lea edx, [ebp - 0x65a]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov word [ebp - 0x224], 0
push 0x208
push 0
lea eax, [ebp - 0x222]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x224]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4f2120
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x224]
push eax
push 0x104
lea ecx, [ebp - 0x65c]
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
push 0x524ec0
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4f2120
lea ecx, [ebp - 0x65c]
push ecx
mov ecx, dword [ebp + 8]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov dword [ebp - 0x448], 1
cmp dword [ebp - 0x448], 0
jne 0x4f22a9
mov dword [ebp - 0xa68], 0
mov dword [ebp - 0xa84], 0
xor edx, edx
mov dword [ebp - 0xa80], edx
mov dword [ebp - 0xa7c], edx
mov dword [ebp - 0xa78], edx
mov dword [ebp - 0xa74], edx
mov dword [ebp - 0xa70], edx
mov dword [ebp - 0xa6c], edx
push 0x1c
lea eax, [ebp - 0xa84]
push eax
push fcn.004f24d0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
jbe 0x4f22a9
mov ecx, dword [ebp - 0xa80]
mov dword [ebp - 0xa68], ecx
mov word [ebp - 0xc9c], 0
push 0x208
push 0
lea edx, [ebp - 0xc9a]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea eax, [ebp - 0xc9c]
push eax
mov ecx, dword [ebp - 0xa68]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
lea edx, [ebp - 0xc9c]
push edx
call sub.MSVCR80.dll_wcsrchr
add esp, 8
mov dword [ebp - 0xa88], eax
cmp dword [ebp - 0xa88], 0
je 0x4f22a9
mov eax, dword [ebp - 0xa88]
mov word [eax], 0
lea ecx, [ebp - 0xc9c]
push ecx
lea ecx, [ebp - 0xcb8]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov dword [ebp - 4], 0
push 0x524ed8
lea ecx, [ebp - 0xcb8]
call dword [0x509758]
push 0x524edc
lea ecx, [ebp - 0xcb8]
call dword [0x509758]
lea ecx, [ebp - 0xcb8]
call dword [sym.imp.MSVCP80.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::data_void_const]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4f227a
lea edx, [ebp - 0xc9c]
push edx
mov ecx, dword [ebp + 8]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov dword [ebp - 0x448], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb8]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
jmp 0x4f22a9
push 0x5c
lea eax, [ebp - 0xc9c]
push eax
call sub.MSVCR80.dll_wcsrchr
add esp, 8
mov dword [ebp - 0xa88], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb8]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
jmp 0x4f21de
cmp dword [ebp - 0x448], 0
jne 0x4f238e
call fcn.004f1f60
neg eax
sbb eax, eax
and eax, 0x200
add eax, 1
mov dword [ebp - 0x438], eax
lea ecx, [ebp - 0x444]
push ecx
mov edx, dword [ebp - 0x438]
push edx
push 0
push str.SOFTWARETencentQQPCMgr
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0
jne 0x4f238e
lea eax, [ebp - 0x440]
push eax
lea ecx, [ebp - 0xa64]
push ecx
push 0
push 0
push str.InstallDir
mov edx, dword [ebp - 0x444]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4f2381
lea eax, [ebp - 0xa64]
push eax
push 0x104
lea ecx, [ebp - 0x224]
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
push 0x524f40
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4f2381
lea ecx, [ebp - 0xa64]
push ecx
mov ecx, dword [ebp + 8]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov dword [ebp - 0x448], 1
mov edx, dword [ebp - 0x444]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x448], 0
jne 0x4f23ea
lea ecx, [ebp - 0xcd4]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov dword [ebp - 4], 1
lea eax, [ebp - 0xcd4]
push eax
call fcn.004f1cd0
add esp, 4
test eax, eax
je 0x4f23d7
lea ecx, [ebp - 0xcd4]
push ecx
mov ecx, dword [ebp + 8]
call dword [0x5096b8]
mov dword [ebp - 0x448], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd4]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f019a
mov esp, ebp
pop ebp
ret