Function at 0x40d01d
Capabilities:
Persist via run registry key

Disassembly:
push ebp
lea ebp, [esp - 0x1c8]
sub esp, 0x248
mov eax, dword [0x4362fc]
xor eax, ebp
mov dword [ebp + 0x1c4], eax
push ebx
mov ebx, dword [0x42d2b0]
push esi
push edi
push 0x3f6
push dword [ecx + 4]
mov dword [ebp - 0x68], ecx
call ebx
xor edi, edi
push edi
push edi
push 0xf0
push eax
call dword [0x42d2ac]
mov esi, 0x42d810
test eax, eax
je 0x40d0f5
push 0x42e908
push esi
push 0x437b90
lea eax, [ebp - 0x70]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00405cbd
lea ecx, [ebp - 0x70]
call fcn.00403eb3
mov eax, dword [0x436024]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x60]
push eax
call fcn.00413b17
cmp dword [eax + 0x18], 8
pop ecx
jb 0x40d0ae
mov eax, dword [eax + 4]
jmp 0x40d0b1
add eax, 4
push eax
lea ecx, [ebp - 0x6c]
call fcn.0040425e
push edi
push 1
lea ecx, [ebp - 0x60]
call fcn.004055ed
push 1
push dword [ebp - 0x6c]
push edi
push dword [ebp - 0x64]
push str.open
push edi
call dword [0x42d28c]
push str.CSetupFinishPage::OnWizardFinish__start_YY.exe
call fcn.00413e3d
pop ecx
lea ecx, [ebp - 0x6c]
call fcn.00403eb3
lea ecx, [ebp - 0x64]
call fcn.00403eb3
mov eax, dword [ebp - 0x68]
push 0x3eb
push dword [eax + 4]
call ebx
push edi
push edi
push 0xf0
push eax
call dword [0x42d2ac]
test eax, eax
je 0x40d1ab
push 0x42e908
push esi
push 0x437b90
lea eax, [ebp - 0x74]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00405cbd
push dword [eax]
lea ecx, [ebp - 0x60]
call fcn.00405f02
lea ecx, [ebp - 0x70]
call fcn.00403eb3
lea ecx, [ebp - 0x74]
call fcn.00403eb3
lea eax, [ebp - 0x64]
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push 0x80000001
call dword [0x42d00c]
test eax, eax
jne 0x40d1a0
push str.CSetupFinishPage::OnWizardFinish__write_REGEDIT__auto_run_YY_.
call fcn.00413e3d
cmp dword [ebp - 0x48], 8
mov eax, dword [ebp - 0x5c]
pop ecx
jae 0x40d17f
lea eax, [ebp - 0x5c]
mov ecx, dword [ebp - 0x4c]
add ecx, ecx
push ecx
push eax
push 1
push edi
push 0x42fba0
push dword [ebp - 0x64]
call dword [0x42d004]
push dword [ebp - 0x64]
call dword [0x42d018]
push edi
push 1
lea ecx, [ebp - 0x60]
call fcn.004055ed
mov eax, dword [ebp - 0x68]
push 0x3f4
push dword [eax + 4]
call ebx
push edi
push edi
push 0xf0
push eax
call dword [0x42d2ac]
mov ebx, str.4.17.0.2
test eax, eax
je 0x40d241
push str.ReleaseNotes.txt
push esi
push ebx
push esi
push 0x437b90
lea eax, [ebp - 0x6c]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00405cbd
lea ecx, [ebp - 0x70]
call fcn.00403eb3
lea ecx, [ebp - 0x74]
call fcn.00403eb3
lea ecx, [ebp - 0x6c]
call fcn.00403eb3
push 5
push edi
push edi
push dword [ebp - 0x64]
push str.open
push edi
call dword [0x42d28c]
push str.CSetupFinishPage::OnWizardFinish__view_releaseNote.txt.
call fcn.00413e3d
pop ecx
lea ecx, [ebp - 0x64]
call fcn.00403eb3
mov eax, dword [ebp - 0x68]
push 0x3f5
push dword [eax + 4]
call dword [0x42d2b0]
push edi
push edi
push 0xf0
push eax
call dword [0x42d2ac]
test eax, eax
je 0x40d35b
push str.CSetupFinishPage::OnWizardFinish__collect_offical_website.
call fcn.00413e3d
pop ecx
lea eax, [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x68]
push 6
push dword [eax + 4]
call dword [0x42d278]
test eax, eax
jne 0x40d35b
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x74]
call dword [0x42d284]
test eax, eax
je 0x40d35b
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x70]
call fcn.00404ac4
mov eax, dword [0x436024]
push 0x127
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], eax
call fcn.00404285
lea eax, [ebp - 0x68]
push eax
push esi
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.0040a87f
mov eax, dword [eax]
push edi
push edi
push 2
push edi
push edi
push 0x1f01ff
push eax
call dword [0x42d268]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x6c], eax
call fcn.00403eb3
lea ecx, [ebp - 0x78]
call fcn.00403eb3
cmp dword [ebp - 0x6c], 0xffffffff
je 0x40d342
push str._InternetShortcut__nURLhttp:__www.duowan.com_index3.html
lea ecx, [ebp - 0x64]
call fcn.00404ac4
push edi
lea eax, [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax - 8]
add ecx, ecx
push ecx
push eax
push dword [ebp - 0x6c]
call dword [0x42d25c]
push dword [ebp - 0x6c]
call dword [0x42d264]
lea ecx, [ebp - 0x64]
call fcn.00403eb3
push dword [ebp - 0x74]
call dword [0x42d380]
lea ecx, [ebp - 0x68]
call fcn.00403eb3
lea ecx, [ebp - 0x70]
call fcn.00403eb3
call fcn.0040fc76
mov ecx, eax
call fcn.0040f62b
test al, al
jne 0x40d380
push 5
push edi
push edi
push str.http:__www.duowan.com__yy
push str.open
push edi
call dword [0x42d28c]
push str.installstat.exe
push esi
push ebx
push esi
push 0x437b90
lea eax, [ebp - 0x70]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00405cbd
lea ecx, [ebp - 0x78]
call fcn.00403eb3
lea ecx, [ebp - 0x7c]
call fcn.00403eb3
lea ecx, [ebp - 0x70]
call fcn.00403eb3
mov eax, dword [0x436024]
push 1
push ebx
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push str.__s_di_
push eax
call fcn.0040ccb1
add esp, 0x10
push edi
push dword [0x437b90]
push dword [ebp - 0x68]
push dword [ebp - 0x64]
push str.open
push edi
call dword [0x42d28c]
push dword [ebp - 0x68]
push dword [ebp - 0x64]
push str.CSetupFinishPage::OnWizardFinish__run__s_parameter_is__s.
call fcn.00413e3d
add esp, 0xc
push str.yyrun.exe
push esi
push ebx
push esi
push 0x437b90
lea eax, [ebp - 0x70]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00405cbd
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00405cbd
lea ecx, [ebp - 0x78]
call fcn.00403eb3
lea ecx, [ebp - 0x7c]
call fcn.00403eb3
lea ecx, [ebp - 0x70]
call fcn.00403eb3
push edi
push dword [0x437b90]
push str._reg
push dword [ebp - 0x6c]
push str.open
push edi
call dword [0x42d28c]
push dword [ebp - 0x6c]
push str.CSetupFinishPage::OnWizardFinish__run__s_parameter_is__reg.
call fcn.00413e3d
pop ecx
pop ecx
lea ecx, [ebp - 0x6c]
call fcn.00403eb3
lea ecx, [ebp - 0x68]
call fcn.00403eb3
lea ecx, [ebp - 0x64]
call fcn.00403eb3
mov ecx, dword [ebp + 0x1c4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.00419dc7
add ebp, 0x1c8
leave
ret