Function at 0x415914
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x278
mov eax, 0x437cfe
call fcn.004226b6
mov dword [ebp - 0x258], edx
mov esi, ecx
mov dword [ebp - 0x238], esi
mov bl, byte [ebp + 8]
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp + 0x10]
xor edi, edi
or eax, 0x20019
mov ecx, str.SoftwareJavaSoftJava_Runtime_Environment_
push eax
test bl, bl
mov eax, str.SoftwareJavaSoftJava_Development_Kit_
push edi
cmove eax, ecx
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x415c8c
mov ebx, dword [ebp - 0x26c]
mov dword [ebp - 0x284], 0x446df8
mov dword [ebp - 0x280], ebx
mov dword [ebp - 4], edi
mov dword [ebp - 0x268], edi
mov dword [ebp - 0x264], edi
mov dword [ebp - 0x260], edi
mov byte [ebp - 4], 1
mov eax, edi
mov dword [ebp - 0x25c], edi
push edi
push edi
push edi
push edi
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x270], 0x208
push ecx
lea ecx, [ebp - 0x218]
push ecx
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x278], eax
test eax, eax
jne 0x415c52
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x24c]
call fcn.00402742
push 2
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x22c]
lea eax, [ebp - 0x24c]
push eax
call fcn.004121e0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x24c]
lea ecx, [ecx - 0x10]
call fcn.00402471
push esi
lea ecx, [ebp - 0x22c]
call fcn.00412219
test eax, eax
js 0x415c52
lea eax, [ebp - 0x274]
push eax
push 0x20019
push edi
lea eax, [ebp - 0x218]
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x415c52
mov eax, edi
mov dword [ebp - 0x234], 0x446df8
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x274]
test esi, esi
je 0x415a79
lea ecx, [ebp - 0x234]
call fcn.00414fcc
mov eax, esi
mov dword [ebp - 0x230], eax
lea ecx, [ebp - 0x250]
push ecx
push edi
push edi
push edi
push str.JavaHome
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x250]
test eax, eax
je 0x415ae0
xor ecx, ecx
push 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004221b0
mov esi, eax
pop ecx
mov dword [ebp - 0x27c], esi
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 4
push eax
push esi
push edi
push edi
push str.JavaHome
push dword [ebp - 0x230]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x415b12
push esi
call fcn.004221b9
pop ecx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x230], 0
mov dword [ebp - 0x234], 0x446df8
je 0x415c4c
push dword [ebp - 0x230]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x230], edi
jmp 0x415c4c
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x248]
call fcn.00415e2d
cmp dword [ebp - 0x244], 0
jle 0x415b58
push edi
lea ecx, [ebp - 0x248]
call fcn.00415fb7
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, eax
call fcn.00412219
test eax, eax
js 0x415c1b
inc edi
cmp edi, dword [ebp - 0x244]
jl 0x415b2d
cmp dword [ebp - 0x248], 0
je 0x415b74
push dword [ebp - 0x248]
call fcn.0042623f
and dword [ebp - 0x248], 0
pop ecx
and dword [ebp - 0x244], 0
and dword [ebp - 0x240], 0
or edi, 0xffffffff
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x268]
call fcn.00415dae
push esi
lea ecx, [ebp - 0x254]
call fcn.00402742
mov ecx, dword [ebp - 0x258]
lea eax, [ebp - 0x254]
push eax
mov byte [ebp - 4], 5
call fcn.004042a2
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x254]
lea ecx, [ecx - 0x10]
call fcn.00402471
cmp edi, 0xffffffff
je 0x415bea
mov edx, edi
lea ecx, [ebp - 0x268]
call fcn.00415e9c
mov ecx, dword [ebp - 0x258]
mov edx, edi
call fcn.00415f20
push esi
call fcn.004221b9
mov byte [ebp - 4], 1
cmp dword [ebp - 0x230], 0
pop ecx
mov dword [ebp - 0x234], 0x446df8
je 0x415c4a
push dword [ebp - 0x230]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
jmp 0x415b07
cmp dword [ebp - 0x248], 0
je 0x415c37
push dword [ebp - 0x248]
call fcn.0042623f
and dword [ebp - 0x248], 0
pop ecx
and dword [ebp - 0x244], 0
and dword [ebp - 0x240], 0
jmp 0x415b85
xor edi, edi
mov esi, dword [ebp - 0x238]
mov eax, dword [ebp - 0x25c]
inc eax
cmp dword [ebp - 0x278], 0
mov dword [ebp - 0x25c], eax
je 0x4159a1
cmp dword [ebp - 0x268], 0
je 0x415c81
push dword [ebp - 0x268]
call fcn.0042623f
pop ecx
test ebx, ebx
je 0x415c8c
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.00422671
ret