Function at 0x40aa20
Capabilities:
Accept command line arguments
Check if file exists
Create process on windows
Extract resource via kernel32 functions
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x623850
mov eax, dword fs:[0]
push eax
sub esp, 0x4a0
mov eax, dword [0x6b94f8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x4ac]
mov dword [ebp - 0x48c], 0
call fcn.00412cf1
xor eax, eax
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
lea eax, [ebp - 0x260]
push str.SOFT_NAME_EN
push eax
mov dword [ebp - 0x21c], 7
call fcn.00416b33
add esp, 8
lea ecx, [ebp - 0x230]
push eax
call fcn.0040b670
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x40aae3
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40aad9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b343
push edx
push ecx
call fcn.0050f532
add esp, 8
xor eax, eax
mov dword [ebp - 0x250], 0
mov word [ebp - 0x260], ax
lea eax, [ebp - 0x278]
push str.SOFT_COMPANY_NAME_EN
push eax
mov dword [ebp - 0x24c], 7
call fcn.00416b33
add esp, 8
lea ecx, [ebp - 0x230]
push eax
call fcn.0040b670
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x40ab60
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab56
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b348
push edx
push ecx
call fcn.0050f532
add esp, 8
xor eax, eax
mov dword [ebp - 0x268], 0
mov word [ebp - 0x278], ax
lea eax, [ebp - 0x290]
push str.SOFT_POPMGR_LINK_NAME
push eax
mov dword [ebp - 0x264], 7
call fcn.00416b33
add esp, 8
lea ecx, [ebp - 0x230]
push eax
call fcn.0040b670
mov edx, dword [ebp - 0x27c]
cmp edx, 8
jb 0x40abdd
mov ecx, dword [ebp - 0x290]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40abd3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b34d
push edx
push ecx
call fcn.0050f532
add esp, 8
xor eax, eax
mov dword [ebp - 0x280], 0
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x4a4]
mov word [ebp - 0x290], ax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
mov dword [ebp - 0x27c], 7
call fcn.00421664
lea ecx, [ebp - 0x4a4]
call fcn.00413d7b
test eax, eax
je 0x40ac33
mov esi, 1
jmp 0x40b2b4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jns 0x40ac46
xor esi, esi
jmp 0x40b2b4
lea ecx, [ebp - 0x494]
call fcn.00412cf1
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x494]
call fcn.00413419
call fcn.00421a14
push 0x1388
sub esp, 0x18
mov ecx, esp
push str.SoftResGameDDZ
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.00408b20
mov esi, dword [0x6c9074]
test esi, esi
jne 0x40acfc
push 0x6c90ac
call fcn.004c6a44
add esp, 4
test eax, eax
je 0x40acb1
push eax
call fcn.004c7274
add esp, 4
mov esi, dword [0x6c9074]
test esi, esi
jne 0x40acd4
push 0x18
call fcn.0050f187
add esp, 4
mov ecx, eax
call fcn.004160cb
mov esi, eax
mov dword [0x6c9074], esi
push 0x6c90ac
mov dword [ebp - 4], 0
call fcn.004c6a69
add esp, 4
test eax, eax
je 0x40acf5
push eax
call fcn.004c7274
add esp, 4
mov dword [ebp - 4], 0xffffffff
push edi
mov ecx, esi
call fcn.00416bcf
mov esi, dword [0x6c8fc0]
test esi, esi
jne 0x40ad73
push 0x6c8f2c
call fcn.004c6a44
add esp, 4
test eax, eax
je 0x40ad28
push eax
call fcn.004c7274
add esp, 4
mov esi, dword [0x6c8fc0]
test esi, esi
jne 0x40ad4b
push 0x3c
call fcn.0050f187
add esp, 4
mov ecx, eax
call fcn.0041a0a9
mov esi, eax
mov dword [0x6c8fc0], esi
push 0x6c8f2c
mov dword [ebp - 4], 1
call fcn.004c6a69
add esp, 4
test eax, eax
je 0x40ad6c
push eax
call fcn.004c7274
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0
push 0
mov ecx, esi
call fcn.0041a968
push 0
push 0
push edi
call fcn.004061f0
mov ecx, eax
call fcn.00413d7f
push 9
call fcn.0042194e
add esp, 4
lea eax, [ebp - 0x2c0]
push str.CMD_SMALLPKG_INST
push eax
call fcn.00416949
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x40adb5
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x494]
call fcn.00413967
movzx eax, al
push eax
call fcn.004062b0
mov ecx, eax
call fcn.0042130b
mov edx, dword [ebp - 0x2ac]
cmp edx, 8
jb 0x40ae11
mov ecx, dword [ebp - 0x2c0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae07
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b352
push edx
push ecx
call fcn.0050f532
add esp, 8
lea eax, [ebp - 0x2d8]
mov ebx, 1
push str.CMD_SILENCE_INSTALLED
push eax
call fcn.00416949
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x40ae32
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x494]
call fcn.00413967
test al, al
jne 0x40ae73
lea eax, [ebp - 0x2a8]
mov ebx, 3
push str.CMD_FORCE_INSTALL
push eax
call fcn.00416949
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x40ae63
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x494]
call fcn.00413967
test al, al
je 0x40ae75
mov al, 1
push eax
call fcn.004062b0
mov ecx, eax
call fcn.004212fe
test bl, 2
je 0x40aee4
mov edx, dword [ebp - 0x294]
cmp edx, 8
jb 0x40aec7
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40aebd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b357
push edx
push ecx
call fcn.0050f532
add esp, 8
xor eax, eax
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
mov edx, dword [ebp - 0x2c4]
cmp edx, 8
jb 0x40af24
mov ecx, dword [ebp - 0x2d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40af1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b35c
push edx
push ecx
call fcn.0050f532
add esp, 8
call fcn.004062b0
mov ecx, eax
call fcn.00421037
test al, al
je 0x40afab
lea eax, [ebp - 0x2f0]
push str.CMD_QUDAO_ID
push eax
call fcn.00416949
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x40af50
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x494]
call fcn.00412ef1
push eax
call fcn.004062b0
mov ecx, eax
call fcn.0042126e
mov edx, dword [ebp - 0x2dc]
cmp edx, 8
jb 0x40afb7
mov ecx, dword [ebp - 0x2f0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40af9f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b361
push edx
push ecx
call fcn.0050f532
add esp, 8
jmp 0x40afb7
call fcn.004062b0
mov ecx, eax
call fcn.004209cc
call fcn.004062b0
mov ecx, eax
call fcn.00421033
test al, al
je 0x40b1a2
lea eax, [ebp - 0x494]
push eax
call fcn.0040b380
mov ecx, eax
call fcn.00404ed0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x6a33d4
mov word [ecx], ax
call fcn.00402c50
lea ecx, [ebp - 0x368]
call fcn.0042134f
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 7
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.GameDDZ
mov word [ecx], ax
call fcn.00402c50
lea ecx, [ebp - 0x368]
call fcn.00421452
test eax, eax
je 0x40b192
call fcn.004062b0
mov ecx, eax
call fcn.00421033
test al, al
je 0x40b192
lea eax, [ebp - 0x248]
push eax
call fcn.004062b0
mov ecx, eax
call fcn.00420ab2
push 0x6a4994
lea ecx, [ebp - 0x248]
call fcn.00406420
call fcn.0041ab5d
test al, al
je 0x40b108
mov eax, dword [0x6c8f08]
test eax, eax
je 0x40b108
cmp dword [eax + 4], 4
jl 0x40b108
cmp dword [ebp - 0x234], 8
lea ebx, [ebp - 0x248]
cmovae ebx, dword [ebp - 0x248]
sub esp, 0xc
push 0x36
push str.wWinMain
push ecx
lea ecx, [ebp - 0x488]
call fcn.00403fa0
mov edi, eax
test ebx, ebx
mov edx, 0x6a45fc
cmovne edx, ebx
push edx
lea esi, [edi + 0x30]
push esi
call fcn.00409bd0
add esp, 8
mov edx, 0x6a49b8
mov ecx, esi
call fcn.0040a890
mov edx, 0x6a49bc
mov ecx, esi
call fcn.0040a890
mov ecx, dword [0x6c8f08]
push edi
call fcn.00406370
lea ecx, [ebp - 0x488]
call fcn.00404390
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40b152
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
push 5
cmovae eax, dword [ebp - 0x248]
push 0
push str._gowhfcbtznwqjrvwnloq
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40b192
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b188
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b366
push edx
push ecx
call fcn.0050f532
add esp, 8
lea ecx, [ebp - 0x368]
call fcn.00421427
jmp 0x40b235
sub esp, 0xc
call fcn.00410db0
test eax, eax
jne 0x40b21d
push edi
call fcn.00435a50
add esp, 4
push 4
call fcn.00435e80
add esp, 4
push 0x6a5188
push 0x84
call fcn.0042dad0
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
je 0x40b21f
push esi
call fcn.0042dad0
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov edi, eax
test edi, edi
je 0x40b214
push esi
call fcn.0042dad0
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
je 0x40b214
push 0
push eax
push edi
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
call fcn.00435e90
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x40b21f
js 0x40b235
call fcn.00411020
mov ecx, dword [0x6c8fb4]
test ecx, ecx
je 0x40b235
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
call fcn.004219c3
lea eax, [ebp - 0x49c]
push eax
push 0xf003f
push 0
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push reloc.gdiplus.dll_Ordinal_1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40b29e
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x40b29e
push 4
lea eax, [ebp - 0x498]
mov dword [ebp - 0x498], 1
push eax
push 4
push 0
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x49c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x494]
mov esi, 1
call fcn.00412d44
lea ecx, [ebp - 0x4a4]
call fcn.00421679
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40b2fb
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b2f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b36b
push edx
push ecx
call fcn.0050f532
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x4ac]
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00412d44
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0050eeb2
mov esp, ebp
pop ebp
ret 0x10
call fcn.0052e0c0
call fcn.0052e0c0
call fcn.0052e0c0
call fcn.0052e0c0
call fcn.0052e0c0
call fcn.0052e0c0
call fcn.0052e0c0
call fcn.0052e0c0
call fcn.0052e0c0
int3