Function at 0x41aee4
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48cafe
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x4c2660]
xor eax, esp
mov dword [esp + 0x50], eax
push ebx
push esi
push edi
mov eax, dword [0x4c2660]
xor eax, esp
push eax
lea eax, [esp + 0x68]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x24], eax
call fcn.0043a5d1
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, str.c:_re_workspace_8_2_build_windows_i586_cygwin_jdk8u171_10807_install_src_windows_wrappers_common_WrapperUtils.cpp
mov edi, 0x4c8640
test eax, eax
jne 0x41af73
lea eax, [esp + 0x10]
push eax
push 0x20119
push 0
push dword [esp + 0x24]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x41b027
cmp dword [0x4c8640], 3
jg 0x41afbc
call esi
push eax
push str.Error_Opening_RegKey_at_64_bit_loaction:__d
lea ecx, [esp + 0x30]
call fcn.0044389e
pop ecx
pop ecx
and dword [esp + 0x70], 0
push str.GetRegValueOfStringType
push 0x24c
push ebx
push 3
mov edx, eax
mov ecx, edi
call fcn.0043fde1
or dword [esp + 0x70], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x30]
call fcn.0040e7d9
lea eax, [esp + 0x10]
push eax
push 0x20219
push 0
push dword [esp + 0x24]
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x41b027
cmp dword [0x4c8640], 3
jg 0x41b0f1
call esi
push eax
push str.Error_Opening_RegKey_at_32_or_64_bit_loaction:__d
lea ecx, [esp + 0x30]
call fcn.0044389e
pop ecx
pop ecx
push str.GetRegValueOfStringType
push 0x251
xor esi, esi
push ebx
inc esi
push 3
mov edx, eax
mov ecx, edi
mov dword [esp + 0x80], esi
call fcn.0043fde1
push 0
push esi
lea ecx, [esp + 0x30]
jmp 0x41b0ec
push dword [esp + 0x24]
lea eax, [esp + 0x24]
push dword [esp + 0x20]
push eax
push 0
push dword [esp + 0x24]
push dword [esp + 0x24]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [esp + 0x10]
mov dword [esp + 0x18], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [esp + 0x14], 0
je 0x41b0a3
cmp dword [0x4c8640], 3
jg 0x41b0f1
call esi
push eax
push str.Registry_Value_not_found:__d
lea ecx, [esp + 0x30]
call fcn.0044389e
pop ecx
pop ecx
push str.GetRegValueOfStringType
push 0x259
push ebx
push 3
mov edx, eax
mov ecx, edi
mov dword [esp + 0x80], 2
call fcn.0043fde1
push 0
push 1
jmp 0x41b01e
xor eax, eax
inc eax
cmp dword [esp + 0x20], eax
je 0x41b0f3
cmp dword [0x4c8640], 3
jg 0x41b0f1
call esi
push eax
push str.Registry_Value_not_of_type_REG_SZ:__d
lea ecx, [esp + 0x4c]
call fcn.0044389e
pop ecx
pop ecx
push 3
pop ecx
push str.GetRegValueOfStringType
push 0x25e
push ebx
mov dword [esp + 0x7c], ecx
push ecx
mov edx, eax
mov ecx, edi
call fcn.0043fde1
push 0
push 1
lea ecx, [esp + 0x4c]
call fcn.0040e7d9
xor eax, eax
mov ecx, dword [esp + 0x68]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x50]
xor ecx, esp
call fcn.00465f42
mov esp, ebp
pop ebp
ret