Function at 0x50bc28b0
Capabilities:
Check os version
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x340
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push edi
lea eax, [ebp - 0x318]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.SoftwareTencentQQBrowserAdvanced
push 0x80000001
mov dword [ebp - 0x318], ebx
mov byte [ebp - 0x30d], bl
call esi
test eax, eax
jne 0x50bc2ce4
push 4
pop edi
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x31c]
push eax
push ebx
push ebx
push str.EnableIE10Core
push dword [ebp - 0x318]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x314], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x50bc297e
cmp dword [ebp - 0x31c], 1
jne 0x50bc297e
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x31c]
push eax
push ebx
push ebx
push str.IE10CoreInstalled
push dword [ebp - 0x318]
mov byte [ebp - 0x30d], 1
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x314], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x50bc297e
cmp dword [ebp - 0x31c], 1
sete byte [ebp - 0x30d]
push dword [ebp - 0x318]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [ebp - 0x30d], bl
je 0x50bc2ce4
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x320]
push eax
push str.IE10Enabled
push str.SoftwareTencentQQBrowserPrivateCfg
push 0x80000001
mov dword [ebp - 0x320], ebx
mov dword [ebp - 0x314], edi
mov dword [ebp - 0x31c], ebx
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x50bc29ea
cmp dword [ebp - 0x314], edi
jne 0x50bc29ea
cmp dword [ebp - 0x31c], ebx
je 0x50bc2b41
lea eax, [ebp - 0x318]
push eax
push 0x20019
push ebx
push str.SOFTWAREMicrosoftInternet_Explorer
push 0x80000002
mov byte [ebp - 0x30d], 1
mov dword [ebp - 0x318], ebx
call esi
mov esi, str.IE10ControlFlag
test eax, eax
jne 0x50bc2ade
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x28c]
push eax
push ebx
push ebx
push str.Version
push dword [ebp - 0x318]
mov dword [ebp - 0x320], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x50bc2ac6
cmp word [ebp - 0x28c], 0x38
je 0x50bc2a70
lea eax, [ebp - 0x340]
lea ecx, [ebp - 0x28c]
call fcn.50bc2875
cmp dword [ebp - 0x340], 9
jge 0x50bc2a79
mov byte [ebp - 0x30d], 1
jmp 0x50bc2ac6
jne 0x50bc2ac0
cmp dword [ebp - 0x33c], 0xa
jge 0x50bc2ac0
lea eax, [ebp - 0x314]
push eax
push esi
mov dword [ebp - 0x314], ebx
call fcn.50bc2ea6
pop ecx
pop ecx
test eax, eax
je 0x50bc2ab3
mov eax, dword [ebp - 0x314]
cmp eax, ebx
je 0x50bc2ab3
xor ecx, ecx
push ebx
inc ecx
call fcn.50bc1041
pop ecx
jmp 0x50bc2ab5
xor al, al
mov byte [ebp - 0x30d], 1
cmp al, bl
je 0x50bc2ac6
mov byte [ebp - 0x30d], bl
push dword [ebp - 0x318]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [ebp - 0x30d], bl
je 0x50bc2ce4
lea eax, [ebp - 0x1a0]
push eax
mov dword [ebp - 0x1a0], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x50bc2b52
cmp dword [ebp - 0x19c], 6
jne 0x50bc2b4c
cmp dword [ebp - 0x198], 1
jne 0x50bc2b4c
cmp word [ebp - 0x8c], 1
jae 0x50bc2b5e
lea eax, [ebp - 0x314]
push eax
push esi
mov dword [ebp - 0x314], ebx
call fcn.50bc2ea6
pop ecx
pop ecx
test eax, eax
je 0x50bc2b41
mov eax, dword [ebp - 0x314]
push ebx
xor ecx, ecx
call fcn.50bc1041
pop ecx
test al, al
jne 0x50bc2b5e
mov byte [ebp - 0x30d], bl
jmp 0x50bc2ce4
mov byte [ebp - 0x30d], bl
cmp byte [ebp - 0x30d], bl
je 0x50bc2ce4
push str.ie10
call fcn.50bc2608
pop ecx
test al, al
je 0x50bc2b41
xor eax, eax
mov dword [ebp - 0x340], ebx
lea edi, [ebp - 0x33c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x330], ebx
lea edi, [ebp - 0x32c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x30c]
push eax
push ebx
mov edi, str.IE10Version
push edi
push str.SoftwareTencentQQBrowserPrivateCfg
mov esi, 0x80
push 0x80000001
mov byte [ebp - 0x30d], 1
mov dword [ebp - 0x314], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x50bc2cb3
lea eax, [ebp - 0x340]
lea ecx, [ebp - 0x30c]
call fcn.50bc2875
cmp dword [ebp - 0x340], 0xa
jne 0x50bc2cb3
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push edi
push str.SoftwareTencentQQBrowserAdvanced
push 0x80000001
mov dword [ebp - 0x314], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x50bc2ca5
lea eax, [ebp - 0x330]
lea ecx, [ebp - 0x84]
call fcn.50bc2875
cmp dword [ebp - 0x330], 0xa
je 0x50bc2c3d
setge byte [ebp - 0x30d]
jmp 0x50bc2cab
lea eax, [ebp - 0x330]
lea ecx, [ebp - 0x84]
call fcn.50bc2875
mov eax, dword [ebp - 0x33c]
cmp eax, dword [ebp - 0x32c]
je 0x50bc2c65
setle byte [ebp - 0x30d]
jmp 0x50bc2cab
lea eax, [ebp - 0x330]
lea ecx, [ebp - 0x84]
call fcn.50bc2875
mov eax, dword [ebp - 0x338]
cmp eax, dword [ebp - 0x328]
jne 0x50bc2c5c
lea eax, [ebp - 0x330]
lea ecx, [ebp - 0x84]
call fcn.50bc2875
mov eax, dword [ebp - 0x334]
cmp eax, dword [ebp - 0x324]
je 0x50bc2cb3
jmp 0x50bc2c5c
mov byte [ebp - 0x30d], bl
cmp byte [ebp - 0x30d], bl
je 0x50bc2ce4
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.AcGenral.dll
call esi
test eax, eax
je 0x50bc2cca
mov byte [ebp - 0x30d], bl
push str.nvd3d9wrap.dll
call esi
test eax, eax
je 0x50bc2cd9
xor al, al
jmp 0x50bc2cea
push str.iertutil.dll
call esi
test eax, eax
jne 0x50bc2cd5
mov al, byte [ebp - 0x30d]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.50bc2edb
leave
ret