Function at 0x40bc70
Capabilities:
Delete registry key
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [sym.imp.WINSPOOL.DRV_EnumMonitorsW]
push 0x42ef3c
push 0x42e91c
push 0
push 0
push 1
push 0
call edi
test eax, eax
jne 0x40bca7
mov eax, dword [0x42e91c]
push eax
call fcn.0040e309
add esp, 4
mov esi, eax
jmp 0x40bcaa
mov esi, dword [ebp - 4]
mov ecx, dword [0x42e91c]
push 0x42ef3c
push 0x42e91c
push ecx
push esi
push 1
push 0
call edi
test eax, eax
je 0x40bfb6
xor eax, eax
mov dword [0x42ed30], eax
cmp eax, dword [0x42ef3c]
jae 0x40bd0c
lea esp, [esp]
mov edx, dword [esi + eax*4]
push str.Brocadesoft_Printer_Monitor
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
mov eax, dword [0x42ed30]
je 0x40bd06
inc eax
mov dword [0x42ed30], eax
cmp eax, dword [0x42ef3c]
jb 0x40bce0
cmp eax, dword [0x42ef3c]
jne 0x40bd7d
push str.Not_any_brocadesoft_monitor_install_
push 0x42d6f0
call fcn.0040d7e0
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov eax, dword [esi]
mov eax, dword [eax + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40bd50
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40bd50
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x40bd71
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x40bd69
or eax, 4
push 0
push eax
call fcn.004015f0
mov eax, 3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call fcn.0040f98d
mov edi, dword [sym.imp.WINSPOOL.DRV_EnumPortsW]
add esp, 4
push 0x42ef3c
push 0x42e91c
push 0
push 0
push 2
push 0
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x42ed34], eax
test eax, eax
jne 0x40bdc7
call ebx
cmp eax, 0x7a
jne 0x40bdc7
mov edx, dword [0x42e91c]
push edx
call fcn.0040e309
add esp, 4
mov esi, eax
mov eax, dword [0x42e91c]
push 0x42ef3c
push 0x42e91c
push eax
push esi
push 2
push 0
call edi
mov dword [0x42ed34], eax
mov dword [0x42e918], esi
test eax, eax
je 0x40bf88
xor eax, eax
mov dword [0x42ed30], eax
cmp dword [0x42ef3c], eax
jbe 0x40be34
mov edx, dword [0x42e918]
lea ecx, [eax + eax*4]
mov eax, dword [edx + ecx*4 + 4]
push str.Brocadesoft_Printer_Monitor
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x40becd
mov eax, dword [0x42ed30]
inc eax
mov dword [0x42ed30], eax
cmp eax, dword [0x42ef3c]
jb 0x40be00
push esi
call fcn.0040f98d
add esp, 4
push str.Brocadesoft_Printer_Monitor
push 0
push 0
call dword [sym.imp.WINSPOOL.DRV_DeleteMonitorW]
test eax, eax
jne 0x40bf3c
call ebx
push eax
push ecx
push str.DeleteMonitor___error:
push 0x42d6f0
call fcn.0040d7e0
add esp, 0xc
push eax
call fcn.00409350
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov edx, dword [esi]
mov eax, dword [edx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40bea0
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40bea0
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x40bec1
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x40beb9
or eax, 4
push 0
push eax
call fcn.004015f0
mov eax, 6
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.The_monitor_still_in_useing_
push 0x42d6f0
call fcn.0040d7e0
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40bf0f
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40bf0f
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x40bf30
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x40bf28
or eax, 4
push 0
push eax
call fcn.004015f0
mov eax, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x42ef38
push 0xf003f
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [0x42ed34], eax
test eax, eax
jne 0x40bf7f
mov edx, dword [0x42ef38]
push 0x426c68
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov eax, dword [0x42ef38]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call ebx
push eax
push ecx
push str.EnumPorts___error:
push 0x42d6f0
call fcn.0040d7e0
add esp, 0xc
push eax
call fcn.00409350
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
jmp 0x40bfe6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
push str.EnumMonitors___error:
push 0x42d6f0
call fcn.0040d7e0
add esp, 0xc
push eax
call fcn.00409350
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov edx, dword [esi]
mov eax, dword [edx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40c006
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40c006
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x40c027
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x40c01f
or eax, 4
push 0
push eax
call fcn.004015f0
pop edi
pop esi
mov eax, 4
pop ebx
mov esp, ebp
pop ebp
ret