Function at 0x40ca2d
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x466c]
mov eax, 0x466c
call fcn.00413d20
push 0xffffffffffffffff
push 0x43f455
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x455834]
xor eax, ebp
mov dword [ebp + 0x4668], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x4674]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x4678]
push ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp + 0x467c]
push 0x20019
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x4680]
push 0
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x4684]
push eax
push 0x80000002
mov dword [ebp - 0x18], eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40cd2b
xor ecx, ecx
mov esi, ecx
mov dword [ebp - 0x10], ecx
mov ebx, ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ecx
mov eax, 0x1770
mov dword [ebp - 4], ecx
mov dword [ebp - 0x1c], eax
mov edi, ecx
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x1788]
push eax
push ecx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 0x2ef8]
push eax
push ecx
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, 0x103
je 0x40cbca
mov ebx, dword [ebp - 0x2c]
cmp byte [ebp + 0x468c], 0
lea esi, [ebp + 0x2ef8]
je 0x40cb39
push 5
mov eax, esi
push str.zulu_
push eax
call fcn.0041f7e0
add esp, 0xc
lea ecx, [ebp + 0x2efd]
test eax, eax
cmovne ecx, esi
mov esi, ecx
lea eax, [ebp + 0x2ef8]
push eax
push esi
push str.test_key_name__S__S
call fcn.0040f3f5
push dword [ebp - 0x28]
push ebx
push esi
call fcn.0040bd28
add esp, 0x18
test al, al
je 0x40cb84
lea eax, [ebp + 0x2ef8]
push eax
lea ecx, [ebp]
call fcn.00403581
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.00403455
lea ecx, [ebp]
mov byte [ebp - 4], 0
call fcn.004036e9
mov eax, 0x1770
inc edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x1788]
push eax
push 0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 0x2ef8]
push eax
push edi
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, 0x103
jne 0x40cb0b
mov esi, dword [ebp - 0x3c]
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x10], esi
push 0x40be40
push ebx
push esi
call fcn.0040a59f
mov edi, esi
add esp, 0xc
cmp edi, ebx
je 0x40cc05
mov esi, dword [ebp - 0x18]
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x40cbec
mov eax, dword [edi]
push eax
push esi
push str.found_in__S:__S
call fcn.0040f3f5
add edi, 0x18
add esp, 0xc
cmp edi, ebx
jne 0x40cbe2
mov esi, dword [ebp - 0x10]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x40cd16
cmp byte [ebp + 0x4688], 0
je 0x40cc7e
mov eax, dword [esi + 0x10]
add eax, 0x64
push eax
call fcn.004137f4
cmp dword [esi + 0x14], 0x10
mov edx, eax
pop ecx
mov dword [ebp - 0x18], edx
mov ecx, esi
jb 0x40cc35
mov ecx, dword [esi]
mov eax, dword [esi + 0x10]
push ecx
push str._shotspotMSI
add eax, 0x64
push eax
push edx
call fcn.0040ea0f
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
push dword [ebp - 0x18]
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push dword [ebp - 0x18]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x24], eax
call fcn.00413d73
mov eax, dword [ebp - 0x24]
pop ecx
mov ecx, str.Path
jmp 0x40ccb7
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x40cc88
mov eax, dword [esi]
lea ecx, [ebp - 0x10]
push ecx
push 0x20019
push 0
push eax
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
neg eax
mov ecx, str.InstallationPath
mov edx, str.JavaHome
sbb al, al
inc al
cmp byte [ebp + 0x468c], 0
cmove ecx, edx
test al, al
je 0x40cd13
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0x1770
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp - 0x44]
push eax
push 0
push ecx
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40cd0e
lea eax, [ebp + 0x18]
push eax
push dword [ebp - 0x30]
call fcn.0040c776
pop ecx
pop ecx
test al, al
je 0x40cd0e
push 1
push 1
push 0
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push dword [ebp - 0x40]
push dword [ebp - 0x30]
call fcn.0040baf8
add esp, 0x1c
test al, al
jne 0x40cd50
push dword [ebp - 0x10]
call edi
add esi, 0x18
cmp esi, ebx
jne 0x40cc10
push dword [ebp - 0x14]
call edi
lea ecx, [ebp - 0x3c]
call fcn.004036b1
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x4668]
xor ecx, ebp
call fcn.00413c4b
add ebp, 0x466c
leave
ret
lea ecx, [ebp - 0x3c]
call fcn.004036b1
mov al, 1
jmp 0x40cd2d