Function at 0x4efd47
Capabilities:
Persist via run registry key

Disassembly:
push ebp
sub esp, 0x84c
lea ebp, [esp - 4]
mov eax, dword [0x5913d0]
xor eax, ebp
mov dword [ebp + 0x84c], eax
push 0x30
mov eax, 0x512da5
call fcn.004891fa
push str.IDC_ADVANCED_CHECK2
lea eax, [ebp - 0x28]
push eax
call fcn.00404a8a
xor ebx, ebx
mov dword [ebp - 4], ebx
push str.IDC_CHECK_NORMAL_CLOSE_POPUP_TIPS
lea eax, [ebp - 0x24]
push eax
call fcn.00404a8a
mov byte [ebp - 4], 1
push str.IDC_CHECK_NORMAL_EXIT_HIDE
lea eax, [ebp - 0x20]
push eax
call fcn.00404a8a
mov byte [ebp - 4], 2
push str.IDC_CHECK_NORMAL_CLOSE_FUNSHION_TIPS
lea eax, [ebp - 0x1c]
push eax
call fcn.00404a8a
mov byte [ebp - 4], 3
push str.IDC_CHECK_NORMAL_RESTORE_LAYOUT
lea eax, [ebp - 0x18]
push eax
call fcn.00404a8a
mov dword [ebp - 4], 5
mov edi, str.FunShion_Player
push edi
lea eax, [ebp - 0x3c]
push eax
call fcn.00404a8a
mov byte [ebp - 4], 6
mov esi, str.OPTION_SETTING_NORMAL
push esi
lea eax, [ebp - 0x38]
push eax
call fcn.00404a8a
mov byte [ebp - 4], 7
push esi
lea eax, [ebp - 0x34]
push eax
call fcn.00404a8a
mov byte [ebp - 4], 8
push esi
lea eax, [ebp - 0x30]
push eax
call fcn.00404a8a
mov byte [ebp - 4], 9
push esi
lea eax, [ebp - 0x2c]
push eax
call fcn.00404a8a
mov byte [ebp - 4], 0xb
mov eax, dword [0x592e38]
mov dword [ebp + 0x838], eax
mov eax, dword [0x5a160c]
mov dword [ebp + 0x83c], eax
mov eax, dword [0x592e2c]
mov dword [ebp + 0x840], eax
mov eax, dword [0x5a1610]
mov dword [ebp + 0x844], eax
mov eax, dword [0x592e34]
mov dword [ebp + 0x848], eax
xor esi, esi
push dword [ebp + esi + 0x838]
lea eax, [ebp - 0x10]
push eax
call fcn.004ef8ab
mov byte [ebp - 4], 0xc
mov eax, dword [eax]
mov ecx, dword [ebp + esi - 0x28]
mov edx, dword [ebp + esi - 0x3c]
push eax
push ecx
push edx
call fcn.004efa2d
add esp, 0x14
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x10]
call fcn.00401c40
add esi, 4
cmp esi, 0x14
jb 0x4efe52
cmp dword [0x592e30], ebx
je 0x4effb6
mov dword [ebp + 0x34], 7
mov dword [ebp + 0x30], ebx
mov word [ebp + 0x20], bx
mov byte [ebp - 4], 0xd
push 0x54ae98
push str.IDC_ADVANCED_CHECK1
push edi
call fcn.00504c2f
mov esi, str.__tray
lea edi, [ebp + 0x838]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp + 0x846]
stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x400
lea eax, [ebp + 0x38]
push eax
push ebx
call dword [0x53f1e8]
mov esi, 0x54eb94
push esi
lea eax, [ebp + 0x1c]
push eax
call fcn.0040267c
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x1c]
push eax
call fcn.0040ab38
push esi
lea eax, [ebp + 0x1c]
push eax
call fcn.0040ab38
cmp dword [ebp + 0x34], 8
mov ecx, dword [ebp + 0x20]
jae 0x4eff1a
lea ecx, [ebp + 0x20]
lea edx, [ebp + 0x38]
movzx eax, word [ecx]
inc ecx
mov word [edx], ax
inc ecx
inc edx
inc edx
cmp ax, bx
jne 0x4eff1d
lea eax, [ebp + 0x838]
mov edx, eax
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x4eff34
sub eax, edx
lea edi, [ebp + 0x38]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
cmp cx, bx
jne 0x4eff45
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea ebx, [ebp + 0x38]
rep movsb byte es:[edi], byte [esi]
call fcn.00468f57
push eax
lea ecx, [ebp]
call fcn.00404797
mov byte [ebp - 4], 0xe
cmp dword [ebp + 0x18], 0x10
mov eax, dword [ebp + 4]
jae 0x4eff81
lea eax, [ebp + 4]
push eax
push str.Funshion
push 0x54eba4
lea ecx, [ebp - 0x11]
call fcn.005050e0
mov byte [ebp - 4], 0xd
push 0
push 1
lea ecx, [ebp]
call fcn.0040436b
mov byte [ebp - 4], 0xb
push 0
push 1
lea esi, [ebp + 0x1c]
call fcn.00402125
jmp 0x4efff1
lea eax, [ebp - 0x10]
push eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push 0x80000002
call dword [0x53f034]
push 0x54af00
push dword [ebp - 0x10]
call dword [0x53f040]
push dword [ebp - 0x10]
call dword [0x53f02c]
push 0x54e564
push str.IDC_ADVANCED_CHECK1
push edi
call fcn.00504c2f
mov byte [ebp - 4], 5
mov esi, fcn.00401c40
push esi
push 5
push 4
lea eax, [ebp - 0x3c]
push eax
call fcn.0048bfb8
or dword [ebp - 4], 0xffffffff
push esi
push 5
push 4
lea eax, [ebp - 0x28]
push eax
call fcn.0048bfb8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x84c]
xor ecx, ebp
call fcn.004891eb
add ebp, 0x850
leave
ret