Function at 0x409870
Capabilities:
Accept command line arguments
Check os version
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4483b1
mov eax, dword fs:[0]
push eax
sub esp, 0x34c
mov eax, dword [0x4624c8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
cmp dword [esi + 0x248], 8
lea eax, [esi + 0x234]
mov dword [ebp - 0x354], esi
jb 0x4098ba
mov eax, dword [eax]
test eax, eax
je 0x4099a4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
test ax, ax
setne al
test al, al
je 0x4099a4
push str.Reboot_is_pending
push 0x454110
push 0x463614
call fcn.00419150
xor eax, eax
mov dword [ebp - 0x224], 7
add esp, 0xc
mov dword [ebp - 0x228], 0
mov word [ebp - 0x238], ax
mov dword [ebp - 4], eax
mov ecx, 0x465d38
lea eax, [ebp - 0x238]
push eax
push 0x1ff4
call fcn.00423f90
cmp dword [ebp - 0x224], 8
lea eax, [ebp - 0x238]
mov edx, 0x4e20
cmovae eax, dword [ebp - 0x238]
xor ecx, ecx
push eax
push 0
push 0
push 2
call fcn.00422050
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x224], 8
jb 0x40996c
push dword [ebp - 0x238]
call fcn.004213f0
add esp, 4
push 0xa
push 8
lea eax, [ebp - 0x230]
push eax
push 0x4e21
call fcn.0043213f
add esp, 0x10
lea eax, [ebp - 0x230]
lea ecx, [esi + 4]
push eax
push str.IIF_EXITCODE
call fcn.004198c0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x20]
jmp 0x409f04
lea ecx, [esi + 0x1c]
call fcn.00406ed0
mov dword [ebp - 4], 1
call fcn.0041bd60
test al, al
jne 0x409bb8
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp ax, 6
jb 0x409b74
xor eax, eax
mov dword [ebp - 0x224], 7
mov dword [ebp - 0x228], 0
mov word [ebp - 0x238], ax
push str.Relaunching_setup_as_elevated
push 0x453cac
push 0x463614
mov byte [ebp - 4], 2
call fcn.00419150
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea eax, [ebp - 0x220]
push 0x104
push eax
call fcn.004319e1
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.SHLWAPI.dll_PathGetArgsW]
push eax
lea ecx, [ebp - 0x238]
call fcn.00404490
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveArgsW]
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.SHLWAPI.dll_PathQuoteSpacesW]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
jne 0x409a8f
push 0x21e
push str.Setup.cpp
push str.ModuleHandle_is_NULL
push 6
lea ecx, [ebp - 0x350]
call fcn.00402ee0
push 0x45f830
lea eax, [ebp - 0x350]
push eax
call fcn.004337ab
push 0
push eax
push 0
push 0
push 1
push 1
push 0
push 0
push 0x90000000
push 0x453a78
push str.BUTTON
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, eax
test esi, esi
je 0x409b4d
lea eax, [ebp - 0x260]
mov dword [ebp - 0x260], 0x28
push eax
push 2
push esi
call dword [sym.imp.USER32.dll_MonitorFromWindow]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [ebp - 0x250]
sub eax, dword [ebp - 0x258]
cdq
push 0
sub eax, edx
push 1
sar eax, 1
push 1
push eax
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x25c]
cdq
sub eax, edx
sar eax, 1
push eax
push esi
call dword [sym.imp.USER32.dll_MoveWindow]
cmp dword [ebp - 0x224], 8
lea eax, [ebp - 0x238]
push 5
cmovae eax, dword [ebp - 0x238]
push 0
push eax
lea eax, [ebp - 0x220]
push eax
push str.runas
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x238]
call fcn.004062a0
jmp 0x409f04
push str.Error_creating_top_level_window.
push 0x454110
push 0x463614
call fcn.00419150
add esp, 0xc
lea ecx, [ebp - 0x238]
call fcn.004062a0
jmp 0x409f04
push str.Administrator_rights_needed.
push 0x454110
push 0x463614
call fcn.00419150
add esp, 0xc
lea ecx, [ebp - 0x300]
push 0x22f
push str.Setup.cpp
push 0x453a78
push 5
call fcn.00402ee0
push 0x45f830
lea eax, [ebp - 0x300]
push eax
call fcn.004337ab
push str.IIF_INSTALLEDPACKAGEVERSION
lea ecx, [esi + 4]
call fcn.00419860
test al, al
jne 0x409c10
mov ecx, esi
call fcn.0040a160
cmp eax, 0xd
je 0x409be1
mov ecx, esi
call fcn.0040a160
cmp eax, 0xc
jne 0x409c10
push str._uninstall_and__repair_is_invalid_if_the_product_is_not_installed
push 0x454308
push 0x463614
call fcn.00419150
add esp, 0xc
mov ecx, esi
call fcn.0040a330
test al, al
jne 0x409f04
push 0
mov ecx, esi
call fcn.0040d6e0
mov ecx, esi
call fcn.0040a160
test eax, eax
jne 0x409c22
mov ecx, esi
call fcn.00409380
mov ecx, esi
call fcn.0040a160
cmp eax, 0xd
ja case.0x409c35.1
movzx eax, byte [eax + 0x409f3c]
jmp dword [eax*4 + 0x409f20]
push str.Setup_mode:_None
push 0x453cac
push 0x463614
call fcn.00419150
add esp, 0xc
jmp case.0x409c35.1
push str.Setup_mode:_Installation
jmp 0x409c76
push str.Setup_mode:_Update
jmp 0x409c76
push str.Setup_mode:_Repair
jmp 0x409c76
push str.Setup_mode:_Uninstall
jmp 0x409c41
push str.Setup_mode:_Modify
push 0x453cac
push 0x463614
call fcn.00419150
mov eax, dword [esi]
add esp, 0xc
mov ecx, esi
call dword [eax + 0x58]
mov ecx, esi
call fcn.0040a160
test eax, eax
je 0x409e9f
lea ecx, [esi + 0x320]
call fcn.0041ca20
lea ecx, [esi + 0x320]
call fcn.0041cb00
mov ecx, esi
call fcn.0040a330
test al, al
je 0x409cfe
push str.Silent_mode_is_enabled
push 0x453cac
push 0x463614
call fcn.00419150
mov eax, dword [esi]
add esp, 0xc
mov ecx, esi
mov dword [esi + 0x33c], 0
call dword [eax + 0x14]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x24]
push 0xffffffffffffffff
push dword [esi + 0x334]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x409d1c
push str.Preparing_UI
push 0x453cac
push 0x463614
call fcn.00419150
mov eax, dword [esi]
add esp, 0xc
mov ecx, esi
call dword [eax + 0x60]
push str.IIF_EXITCODE
lea ecx, [esi + 4]
call fcn.00419790
push eax
call fcn.00432788
add esp, 4
test eax, eax
je 0x409d48
cmp eax, 0x669
je 0x409d48
cmp eax, 0xbc2
jne 0x409e9f
cmp byte [esi + 0x330], 0
je 0x409e9f
mov ecx, esi
call fcn.0040a160
cmp eax, 9
jl 0x409e9f
cmp eax, 0xc
jle 0x409d7f
cmp eax, 0xd
jne 0x409e9f
mov ecx, esi
call fcn.00409070
jmp 0x409e9f
mov ecx, esi
call fcn.00408a10
jmp 0x409e9f
push str.IIF_EXITCODE
lea ecx, [esi + 4]
mov dword [ebp - 4], 0xffffffff
call fcn.00419790
push eax
call fcn.00432788
add esp, 4
cmp eax, 0xbc2
jne 0x409f04
add esi, 0x234
cmp dword [esi + 0x14], 8
jb 0x409ed1
mov esi, dword [esi]
test esi, esi
je 0x409eed
push esi
call dword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
test ax, ax
setne al
test al, al
je 0x409eed
push str.Created_reboot_lock
jmp 0x409ef2
push str.Failed_to_create_reboot_lock
push 0x453cac
push 0x463614
call fcn.00419150
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00430d5f
mov esp, ebp
pop ebp
ret