Function at 0x4096ab
Capabilities:
Query environment variable
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
lea ebp, [esp - 0xf98]
mov eax, 0x1018
call fcn.00409e10
mov eax, dword [0x411100]
xor eax, ebp
mov dword [ebp + 0xf94], eax
mov eax, dword [ebp + 0xfa4]
push ebx
push esi
push edi
mov edi, dword [ebp + 0xfa0]
xor ebx, ebx
mov esi, 0x7ff
push esi
mov dword [ebp - 0x78], eax
lea eax, [ebp + 0x795]
push ebx
push eax
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x7c], 1
mov byte [ebp + 0x794], bl
call sub.MSVCR100.dll_memset
push esi
lea eax, [ebp - 0x6b]
push ebx
push eax
mov byte [ebp - 0x6c], bl
call sub.MSVCR100.dll_memset
push edi
call dword [sym.imp.MSVCR100.dll_getenv]
add esp, 0x1c
cmp eax, ebx
je 0x40973d
push eax
push dword [ebp + 0xfa8]
push dword [ebp - 0x78]
call dword [sym.imp.MSVCR100.dll_strcpy_s]
add esp, 0xc
neg eax
sbb eax, eax
inc eax
jmp 0x4098b3
call fcn.0040923b
test eax, eax
mov eax, dword [str.SOFTWAREAppDataLowSOFTWAREJavaSoftDeploymentProperties]
jne 0x409750
mov eax, dword [str.SOFTWAREJavaSoftDeploymentProperties]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea ecx, [ebp - 0x70]
push ecx
push 0x20019
push ebx
push eax
push SysReAllocString
call edi
test eax, eax
je 0x409773
xor eax, eax
jmp 0x4098b3
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp + 0xfa8]
push eax
push dword [ebp - 0x78]
lea eax, [ebp - 0x7c]
push eax
push ebx
push dword [ebp - 0x80]
push dword [ebp - 0x70]
call esi
test eax, eax
je 0x4097a4
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4098b3
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp + 0x794]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x40dd34
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0x800
call esi
test eax, eax
je 0x4097ce
xor ebx, ebx
inc ebx
jmp 0x409794
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x70]
push eax
push 0x20019
push ebx
push str.SOFTWAREOracleJavaDeploy
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x4097c9
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push str.deployment.modified.timestamp
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0x800
call esi
test eax, eax
jne 0x4097c9
lea eax, [ebp + 0x794]
push eax
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x74], 0x800
call dword [sym.imp.MSVCR100.dll__mbscmp]
pop ecx
pop ecx
test eax, eax
js 0x4098b0
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x78]
lea eax, [ebp - 0x7c]
push eax
push ebx
push dword [ebp - 0x80]
push dword [ebp - 0x70]
call esi
test eax, eax
jne 0x4097c9
push dword [ebp - 0x70]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
call fcn.0040923b
test eax, eax
mov eax, dword [str.SOFTWAREAppDataLowSOFTWAREJavaSoftDeploymentProperties]
jne 0x409867
mov eax, dword [str.SOFTWAREJavaSoftDeploymentProperties]
lea ecx, [ebp - 0x70]
push ecx
push 0x20006
push ebx
push eax
push SysReAllocString
call edi
test eax, eax
jne 0x40976c
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push 1
push ebx
push dword [ebp - 0x80]
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x409794
push dword [ebp - 0x70]
call esi
push dword [ebp - 0x78]
push dword [ebp - 0x80]
call fcn.00409633
pop ecx
pop ecx
xor eax, eax
inc eax
mov ecx, dword [ebp + 0xf94]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00409df2
add ebp, 0xf98
leave
ret