Function at 0x40ab6e
Capabilities:
Accept command line arguments
Check mutex on windows
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov eax, dword [0x42a6e0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 0x44], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
xor ebx, ebx
push ebx
mov dword [ebp - 0xc], eax
call dword [sym.imp.ole32.dll_CoInitialize]
push ebx
push esi
mov edi, 0x42bbf8
push 0x42bbd4
mov ecx, edi
call fcn.004075c4
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, 0x42268c
push esi
push dword [ebp - 0xc]
mov dword [0x42bc28], eax
mov dword [ebp - 0x40], ebx
jmp 0x40abf0
push str.UnregServer
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x40ac00
push str.RegServer
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x40ac15
push esi
push dword [ebp - 0x2c]
call fcn.004077ab
pop ecx
mov dword [ebp - 0x2c], eax
pop ecx
cmp eax, ebx
jne 0x40abc8
jmp 0x40ac2d
push ebx
push ebx
push 0x64
push edi
call fcn.0040a322
push ebx
push ebx
mov ecx, edi
call fcn.00409a8c
jmp 0x40ac2a
push ebx
push 1
push 0x64
push edi
call fcn.0040a322
push ebx
push 1
mov ecx, edi
call fcn.00409a1d
mov dword [ebp - 0x40], eax
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x3c]
push eax
push 0x422158
push 0x15
push ebx
push 0x422178
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
call esi
test eax, eax
jl 0x40aea2
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x40aea2
mov ecx, dword [eax]
lea edx, [ebp - 0x60]
push edx
push 0x18
push eax
call dword [ecx + 0x10]
test eax, eax
jl 0x40ac7e
push 9
push dword [ebp - 0x50]
call fcn.00401243
pop ecx
pop ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x38], ebx
je 0x40aea2
lea eax, [ebp - 0x34]
push eax
push 0x422158
push 0x15
push ebx
push 0x422178
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0xc], ebx
call esi
test eax, eax
jl 0x40acfc
cmp dword [ebp - 0x34], ebx
je 0x40acfc
push 0x18
lea eax, [ebp - 0x60]
push ebx
push eax
call fcn.0040fc20
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [ebp - 0x60]
push edx
push 0x18
push eax
call dword [ecx + 0x68]
test eax, eax
jl 0x40ace5
mov eax, dword [ebp - 0x50]
jmp 0x40ace8
mov al, byte [ebp - 0xc]
movzx eax, al
shr eax, 1
and eax, 1
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x2c]
push eax
mov esi, 0x2001f
push esi
push ebx
push str.SOFTWAREINTELDISPLAYIGFXCUITVWizard
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x40ad75
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
push esi
push ebx
push ebx
push ebx
push str.SOFTWAREINTELDISPLAYIGFXCUITVWizard
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40ad7e
push 4
lea eax, [ebp - 0x30]
push eax
push 4
push ebx
push str.TVWizardSupported
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
xor eax, eax
inc eax
cmp dword [ebp - 0x30], eax
jne 0x40ad75
push 4
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 4
push ebx
push str.EnableTvWizard
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x30], ebx
jne 0x40adc4
lea eax, [ebp - 0x2c]
push eax
push esi
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionMedia_CenterExtensibilityCategoriesMore_Programs84440044_FAC0_441c_A098_720AB987FE22
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40adc4
mov esi, str.AppID
lea edi, [ebp - 0xc]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc]
movsw word es:[edi], word [esi]
push eax
push dword [ebp - 0x2c]
movsb byte es:[edi], byte [esi]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, 0x42bbf8
push str.IGFXHKMUTEXT
lea ecx, [ebp - 0x28]
call fcn.00401e33
cmp dword [ebp - 0x10], 0x10
mov eax, dword [ebp - 0x24]
jae 0x40addd
lea eax, [ebp - 0x24]
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x40adfa
mov dword [ebp - 0x38], ebx
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.00401620
cmp dword [ebp - 0x38], ebx
je 0x40aea2
push 1
push 4
mov ecx, edi
call fcn.00407f79
push 0x28
lea eax, [ebp - 0x8c]
push ebx
push eax
call fcn.0040fc20
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x7c], eax
add esp, 0xc
lea eax, [ebp - 0x8c]
mov esi, str.HkClass
push eax
mov dword [ebp - 0x88], 0x40a567
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x78], ebx
call dword [sym.imp.USER32.dll_RegisterClassA]
push ebx
push dword [ebp - 0x44]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push str.HkWndName
push esi
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
cmp eax, ebx
je 0x40ae9b
push 0x42bbac
push eax
call fcn.004077ea
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
pop ecx
pop ecx
jmp 0x40ae8e
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push ebx
push ebx
push ebx
lea eax, [ebp - 0x64]
push eax
call esi
test eax, eax
jne 0x40ae84
mov ecx, edi
call fcn.00407fbb
cmp dword [ebp - 0xc], ebx
pop edi
pop esi
pop ebx
je 0x40aeb3
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x40]
xor ecx, ebp
call fcn.0040fc9a
leave
ret 0x10