Function at 0x402752
Capabilities:
Create process on windows
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
push ebx
push esi
push edi
call fcn.00402da9
push str.InstallEXE
call fcn.00402d5d
add esp, 4
mov dword [ebp - 8], eax
push str.InstallIME
call fcn.00402d5d
add esp, 4
mov dword [ebp - 0xc], eax
push str.InstallTTE
call fcn.00402d5d
add esp, 4
mov dword [ebp - 4], eax
push str.InstallGAME
call fcn.00402d5d
add esp, 4
mov dword [ebp - 0x21c], eax
push str.InstallSOUND
call fcn.00402d5d
add esp, 4
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0xc], 0
je 0x402807
call fcn.0040459a
test eax, eax
je 0x402807
push 0x408600
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push str.DOIME.EXE
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
push 0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [ebp - 4], 0
je 0x4029ce
call fcn.0040459a
test eax, eax
je 0x4029ce
push 0x408820
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push str.Q9HKSCS.TTE
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
lea eax, [ebp - 0x110]
push eax
push 0x40a358
call fcn.0040566f
add esp, 8
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004059d8
add esp, 8
test eax, eax
je 0x40288f
lea eax, [ebp - 0x110]
push eax
push 0x40a370
push 0x40a388
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
lea eax, [ebp - 0x110]
push eax
push 0x40a398
call fcn.0040566f
add esp, 8
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004059d8
add esp, 8
test eax, eax
je 0x4028d8
lea eax, [ebp - 0x110]
push eax
push 0x40a3a0
push 0x40a3a8
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
lea eax, [ebp - 0x110]
push eax
push 0x40a3b8
call fcn.0040566f
add esp, 8
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004059d8
add esp, 8
test eax, eax
je 0x402921
lea eax, [ebp - 0x110]
push eax
push 0x40a3c4
push 0x40a3d0
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
lea eax, [ebp - 0x110]
push eax
push 0x40a3e0
call fcn.0040566f
add esp, 8
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004059d8
add esp, 8
test eax, eax
je 0x40296a
lea eax, [ebp - 0x110]
push eax
push 0x40a3e8
push 0x40a3f0
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
push 0
call fcn.004054b0
add esp, 4
lea eax, [ebp - 0x218]
push eax
push str.SystemDefaultEUDCFont
call fcn.0040555c
add esp, 8
lea eax, [ebp - 0x218]
push eax
push 0x40a418
call fcn.0040555c
add esp, 8
lea eax, [ebp - 0x218]
push eax
push 0x40a420
call fcn.0040555c
add esp, 8
lea eax, [ebp - 0x218]
push eax
push 0x40a42c
call fcn.0040555c
add esp, 8
push 1
call fcn.004054b0
add esp, 4
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push 1
call fcn.00404790
add esp, 4
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x218]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x402ac1
push 0x408600
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push 0x40a46c
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
push 1
call fcn.00404790
add esp, 4
push eax
call fcn.00405988
add esp, 4
inc eax
push eax
push 1
call fcn.00404790
add esp, 4
push eax
push 1
push 0
push str.DisplayName
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea eax, [ebp - 0x218]
push eax
call fcn.00405988
add esp, 4
inc eax
push eax
lea eax, [ebp - 0x218]
push eax
push 1
push 0
push str.UninstallString
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [ebp - 0x220]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 8], 0
je 0x402b85
push 0x408600
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push str.Q9.EXE
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x218]
push eax
push 4
call fcn.00404790
add esp, 4
push eax
push 0x408600
push 1
call fcn.00404790
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0040412e
add esp, 0x18
push 0x408600
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push str.QTRAYIME.EXE
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x218]
push eax
push 5
call fcn.00404790
add esp, 4
push eax
push 0x408600
push 2
call fcn.00404790
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0040412e
add esp, 0x18
cmp dword [ebp - 0x21c], 0
je 0x402bef
push 0x4083e0
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push str.Q9FIGHT.EXE
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x218]
push eax
push 6
call fcn.00404790
add esp, 4
push eax
push 0x4083e0
push 1
call fcn.00404790
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0040412e
add esp, 0x18
cmp dword [ebp - 8], 0
jne 0x402c03
cmp dword [ebp - 0xc], 0
je 0x402cd2
push 0x40a4b8
push str.Q9SMALLWIN
push 0x40a4c8
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
push 0x408600
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push str.Q9HK30.HLP
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x218]
push eax
push 7
call fcn.00404790
add esp, 4
push eax
push 0x408600
push 1
call fcn.00404790
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0040412e
add esp, 0x18
push 0x408600
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push str.QCODE.URL
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x218]
push eax
push 8
call fcn.00404790
add esp, 4
push eax
push 0x408600
push 1
call fcn.00404790
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0040412e
add esp, 0x18
push 0x408600
lea eax, [ebp - 0x218]
push eax
call fcn.004058f8
add esp, 8
push str.Q930UNW.EXE
lea eax, [ebp - 0x218]
push eax
call fcn.004058f4
add esp, 8
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x218]
push eax
push 9
call fcn.00404790
add esp, 4
push eax
push 0x408600
push 1
call fcn.00404790
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0040412e
add esp, 0x18
call fcn.0040459a
test eax, eax
jne 0x402d51
push 0x40a4f4
push str.Q9NOUDC
push str.Q9WIN
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
xor eax, eax
jmp 0x402d58
pop edi
pop esi
pop ebx
leave
ret