Function at 0x409950
Capabilities:
Set registry value

Disassembly:
push 0xffffffffffffffff
push 0x442f78
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x4513e0]
xor eax, esp
mov dword [esp + 0x48], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4513e0]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
xor ebp, ebp
mov edi, ecx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x68], ebp
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], ebp
mov word [esp + 0x44], bp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov byte [esp + 0x68], 2
cmp byte [edi + 0x3e], 0
mov dword [esp + 0x1c], 0x1000
je 0x409c67
push ebp
lea eax, [esp + 0x18]
push eax
push ebp
push 0xf003f
push ebp
push ebp
push ebp
push str.SoftwareIntelCIM
push 0x80000002
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ebp
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp eax, ebp
jne 0x409c41
mov edx, 0x447188
call fcn.004051c0
test eax, eax
je 0x409a0b
mov ecx, 0x447188
call fcn.00405260
jmp 0x409a16
push edi
mov ecx, 0x44718c
call fcn.00408100
mov ecx, eax
lea esi, [ecx + 2]
jmp 0x409a20
mov dx, word [ecx]
add ecx, 2
cmp dx, bp
jne 0x409a20
mov edx, dword [esp + 0x14]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sub ecx, esi
sar ecx, 1
add ecx, ecx
push ecx
push eax
push 1
push ebp
push str.InstallPath
push edx
call ebx
lea eax, [esp + 0x40]
push eax
call fcn.0041c1a0
mov edx, dword [esp + 0x48]
add esp, 4
cmp dword [esp + 0x58], 8
jae 0x409a64
lea edx, [esp + 0x44]
mov eax, edx
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x409a70
sub eax, esi
sar eax, 1
lea ecx, [eax + eax]
push ecx
push edx
mov edx, dword [esp + 0x1c]
push 1
push ebp
push str.Version
push edx
call ebx
cmp dword [edi + 0x34], ebp
mov edx, 0x4471b4
jne 0x409aa2
mov edx, 0x4471bc
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x409aa7
mov ecx, dword [esp + 0x14]
sub eax, esi
sar eax, 1
add eax, eax
push eax
push edx
push 1
push ebp
push str.Reboot
push ecx
call ebx
cmp dword [edi + 0x38], ebp
mov edx, str.success
je 0x409ad8
mov edx, str.failure
mov eax, edx
lea esi, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x409ae0
mov ecx, dword [esp + 0x14]
sub eax, esi
sar eax, 1
add eax, eax
push eax
push edx
push 1
push ebp
push str.Install
push ecx
call ebx
mov ecx, dword [0x453b6c]
add ecx, 0xa38
mov eax, ecx
lea edx, [eax + 2]
mov si, word [eax]
add eax, 2
cmp si, bp
jne 0x409b13
sub eax, edx
sar eax, 1
lea edx, [eax + eax]
mov eax, dword [esp + 0x14]
push edx
push ecx
push 1
push ebp
push 0x446ba0
push eax
call ebx
mov ecx, dword [edi + 0x44]
mov eax, dword [ecx]
lea ebp, [edi + 0x40]
mov esi, ebp
mov edi, eax
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], edi
lea ebx, [ebx]
test esi, esi
mov edx, dword [ebp + 4]
mov dword [esp + 0x3c], edx
je 0x409b5f
cmp esi, ebp
je 0x409b64
call fcn.00429e93
cmp edi, dword [esp + 0x3c]
je 0x409bd4
test esi, esi
jne 0x409b73
call fcn.00429e93
cmp edi, dword [esi + 4]
jne 0x409b7d
call fcn.00429e93
cmp byte [edi + 0x28], 0
je 0x409bbe
cmp edi, dword [esi + 4]
jne 0x409b8d
call fcn.00429e93
cmp dword [edi + 0x24], 8
lea ebx, [edi + 0xc]
jb 0x409b9b
mov eax, dword [ebx + 4]
jmp 0x409b9e
lea eax, [ebx + 4]
cmp word [eax], 0x40
je 0x409bb8
cmp edi, dword [esi + 4]
jne 0x409bae
call fcn.00429e93
push ebx
lea esi, [esp + 0x24]
call fcn.004159f0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea esi, [esp + 0x30]
call fcn.00404280
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
jmp 0x409b50
xor ecx, ecx
mov eax, 0x1000
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004287d1
mov esi, eax
add esp, 4
lea eax, [esp + 0x1c]
push eax
push esi
lea eax, [esp + 0x28]
call fcn.00427390
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
add esp, 8
lea edx, [ecx + ecx]
push edx
push esi
push 7
push 0
push str.InstallConfig
push eax
call ebx
push esi
call fcn.0042a4d6
mov eax, dword [esp + 0x18]
add esp, 4
test eax, eax
je 0x409c37
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x14], 0
xor ebp, ebp
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x409c67
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x28]
push ecx
call fcn.0041b220
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.00429d64
add esp, 4
cmp dword [esp + 0x58], 8
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
jb 0x409c87
mov eax, dword [esp + 0x44]
push eax
call fcn.00429d64
add esp, 4
mov eax, dword [esp + 0x14]
cmp eax, ebp
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], ebp
mov word [esp + 0x44], bp
je 0x409ca7
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.004289ca
add esp, 0x58
ret