Function at 0x40eef0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bf118
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x4e2210]
xor eax, ebp
mov dword [ebp - 0x20], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x90], ecx
lea ecx, [ebp - 0x44]
call fcn.00417fe0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00418790
mov byte [ebp - 4], 1
push 0x10
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0049d120
add esp, 0xc
lea ecx, [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [ebp - 0x10]
push edx
movzx eax, word [ebp - 0x12]
push eax
movzx ecx, word [ebp - 0x14]
push ecx
movzx edx, word [ebp - 0x16]
push edx
movzx eax, word [ebp - 0x1a]
push eax
movzx ecx, word [ebp - 0x1c]
push ecx
push str._04d__02d__02d__02d:_02d:_02d
lea edx, [ebp - 0x44]
push edx
call fcn.00405770
add esp, 0x20
push 0
push 0x4caef8
push SysReAllocString
lea ecx, [ebp - 0x40]
call fcn.0040c500
test eax, eax
je 0x40f058
mov ecx, dword [ebp - 0x90]
add ecx, 0x2c
call fcn.004683f0
push eax
lea ecx, [ebp - 0x60]
call fcn.004089f0
mov byte [ebp - 4], 2
lea esi, [ebp - 0x60]
call fcn.004886c0
lea ecx, [ebp - 0x60]
call fcn.0048a4e0
push eax
push 0x4caf2c
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4caf44
mov eax, dword [ebp - 0x90]
add eax, 0x2c
push eax
lea ecx, [ebp - 0x80]
push ecx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x94]
call fcn.004683f0
push eax
push 0x4caf64
lea ecx, [ebp - 0x40]
call fcn.00418420
lea ecx, [ebp - 0x80]
call fcn.00417fc0
lea ecx, [ebp - 0x44]
call fcn.004683f0
push eax
push 0x4caf78
lea ecx, [ebp - 0x40]
call fcn.00418420
mov ecx, 0x4e7700
call fcn.004683f0
push eax
push 0x4caf90
lea ecx, [ebp - 0x40]
call fcn.00418420
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x60]
call fcn.0042a190
push 0
push 0x4cafa0
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x40]
call fcn.0040c500
test eax, eax
je 0x40f12f
mov ecx, dword [ebp - 0x90]
add ecx, 0x2c
call fcn.004683f0
push eax
lea ecx, [ebp - 0x7c]
call fcn.004089f0
mov byte [ebp - 4], 3
lea esi, [ebp - 0x7c]
call fcn.004886c0
lea ecx, [ebp - 0x7c]
call fcn.0048a4e0
push eax
push 0x4cafd4
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4cafec
mov edx, dword [ebp - 0x90]
add edx, 0x2c
push edx
lea eax, [ebp - 0x84]
push eax
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0x98]
call fcn.004683f0
push eax
push 0x4cb00c
lea ecx, [ebp - 0x40]
call fcn.00418420
lea ecx, [ebp - 0x84]
call fcn.00417fc0
lea ecx, [ebp - 0x44]
call fcn.004683f0
push eax
push str.InstallTime
lea ecx, [ebp - 0x40]
call fcn.00418420
mov ecx, 0x4e7700
call fcn.004683f0
push eax
push 0x4cb038
lea ecx, [ebp - 0x40]
call fcn.00418420
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7c]
call fcn.0042a190
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallSoftMgr
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x40]
call fcn.0040c500
test eax, eax
je 0x40f217
push 0x4cb0c0
mov ecx, dword [ebp - 0x90]
add ecx, 0x2c
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
call fcn.004683f0
push eax
push str.DisplayIcon
lea ecx, [ebp - 0x40]
call fcn.00418420
lea ecx, [ebp - 0x88]
call fcn.00417fc0
push 0x4cb0f8
push str.DisplayName
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4cb11c
mov eax, dword [ebp - 0x90]
add eax, 0x2c
push eax
lea ecx, [ebp - 0x8c]
push ecx
call fcn.00403cf0
add esp, 0xc
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0xa0]
call fcn.004683f0
push eax
push str.UninstallString
lea ecx, [ebp - 0x40]
call fcn.00418420
lea ecx, [ebp - 0x8c]
call fcn.00417fc0
mov ecx, 0x4e7700
call fcn.004683f0
push eax
push str.DisplayVersion
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4cb174
push str.Publisher
lea ecx, [ebp - 0x40]
call fcn.00418420
mov ecx, dword [ebp - 0x90]
add ecx, 0x2c
call fcn.004683f0
push eax
lea ecx, [ebp - 0x3c]
call fcn.004089f0
mov byte [ebp - 4], 4
push str.npQMExtensionsMozilla.dll
lea edi, [ebp - 0x3c]
call fcn.0048a8a0
mov edx, dword [ebp - 0x90]
cmp dword [edx + 0x198], 0
jne 0x40f360
lea ecx, [ebp - 0x3c]
call fcn.0048a4e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40f360
call fcn.00488860
test eax, eax
jne 0x40f2ea
push 0
push str.SOFTWAREMozillaPlugins_qq.com_QQPCMgr
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x40]
call fcn.0040c500
test eax, eax
je 0x40f2e8
lea ecx, [ebp - 0x3c]
call fcn.0048a4e0
push eax
push 0x4cb228
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4cb234
push 0x4cb258
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4cb270
push 0x4cb294
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4cb2ac
push 0x4cb2bc
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4cb2cc
push 0x4cb2dc
lea ecx, [ebp - 0x40]
call fcn.00418420
jmp 0x40f360
push 0
push str.SOFTWAREWow6432NodeMozillaPlugins_qq.com_QQPCMgr
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x40]
call fcn.0040c500
test eax, eax
je 0x40f360
lea ecx, [ebp - 0x3c]
call fcn.0048a4e0
push eax
push str.Path
lea ecx, [ebp - 0x40]
call fcn.00418420
push 0x4cb360
push str.Description
lea ecx, [ebp - 0x40]
call fcn.00418420
push str.QQPCMgr_Detector
push str.ProductName
lea ecx, [ebp - 0x40]
call fcn.00418420
push str.Tencent
push str.Vendor
lea ecx, [ebp - 0x40]
call fcn.00418420
push str.2.0.0.2
push 0x4cb408
lea ecx, [ebp - 0x40]
call fcn.00418420
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.0042a190
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.00407190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.00417fc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.0049d270
mov esp, ebp
pop ebp
ret