Function at 0x40c710
Capabilities:
Delete registry key
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [sym.imp.WINSPOOL.DRV_EnumMonitorsW]
push 0x42ef3c
push 0x42e91c
push 0
push 0
push 1
push 0
call edi
test eax, eax
jne 0x40c747
mov eax, dword [0x42e91c]
push eax
call fcn.0040e309
add esp, 4
mov esi, eax
jmp 0x40c74a
mov esi, dword [ebp - 4]
mov ecx, dword [0x42e91c]
push 0x42ef3c
push 0x42e91c
push ecx
push esi
push 1
push 0
call edi
test eax, eax
je 0x40ca56
xor eax, eax
mov dword [0x42ed30], eax
cmp eax, dword [0x42ef3c]
jae 0x40c7ac
lea esp, [esp]
mov edx, dword [esi + eax*4]
push str.Brocadesoft_Mobile_Monitor
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
mov eax, dword [0x42ed30]
je 0x40c7a6
inc eax
mov dword [0x42ed30], eax
cmp eax, dword [0x42ef3c]
jb 0x40c780
cmp eax, dword [0x42ef3c]
jne 0x40c81d
push str.Not_any_brocadesoft_monitor_install_
push 0x42d6f0
call fcn.0040d7e0
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov eax, dword [esi]
mov eax, dword [eax + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40c7f0
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40c7f0
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x40c811
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x40c809
or eax, 4
push 0
push eax
call fcn.004015f0
mov eax, 3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call fcn.0040f98d
mov edi, dword [sym.imp.WINSPOOL.DRV_EnumPortsW]
add esp, 4
push 0x42ef3c
push 0x42e91c
push 0
push 0
push 2
push 0
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x42ed34], eax
test eax, eax
jne 0x40c867
call ebx
cmp eax, 0x7a
jne 0x40c867
mov edx, dword [0x42e91c]
push edx
call fcn.0040e309
add esp, 4
mov esi, eax
mov eax, dword [0x42e91c]
push 0x42ef3c
push 0x42e91c
push eax
push esi
push 2
push 0
call edi
mov dword [0x42ed34], eax
mov dword [0x42e918], esi
test eax, eax
je 0x40ca28
xor eax, eax
mov dword [0x42ed30], eax
cmp dword [0x42ef3c], eax
jbe 0x40c8d4
mov edx, dword [0x42e918]
lea ecx, [eax + eax*4]
mov eax, dword [edx + ecx*4 + 4]
push str.Brocadesoft_Mobile_Monitor
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x40c96d
mov eax, dword [0x42ed30]
inc eax
mov dword [0x42ed30], eax
cmp eax, dword [0x42ef3c]
jb 0x40c8a0
push esi
call fcn.0040f98d
add esp, 4
push str.Brocadesoft_Mobile_Monitor
push 0
push 0
call dword [sym.imp.WINSPOOL.DRV_DeleteMonitorW]
test eax, eax
jne 0x40c9dc
call ebx
push eax
push ecx
push str.DeleteMonitor___error:
push 0x42d6f0
call fcn.0040d7e0
add esp, 0xc
push eax
call fcn.00409350
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov edx, dword [esi]
mov eax, dword [edx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40c940
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40c940
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x40c961
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x40c959
or eax, 4
push 0
push eax
call fcn.004015f0
mov eax, 6
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.The_monitor_still_in_useing_
push 0x42d6f0
call fcn.0040d7e0
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40c9af
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40c9af
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x40c9d0
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x40c9c8
or eax, 4
push 0
push eax
call fcn.004015f0
mov eax, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x42ef38
push 0xf003f
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [0x42ed34], eax
test eax, eax
jne 0x40ca1f
mov edx, dword [0x42ef38]
push 0x426d84
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov eax, dword [0x42ef38]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call ebx
push eax
push ecx
push str.EnumPorts___error:
push 0x42d6f0
call fcn.0040d7e0
add esp, 0xc
push eax
call fcn.00409350
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
jmp 0x40ca86
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
push str.EnumMonitors___error:
push 0x42d6f0
call fcn.0040d7e0
add esp, 0xc
push eax
call fcn.00409350
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040d650
mov edx, dword [esi]
mov eax, dword [edx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40caa6
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40caa6
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x40cac7
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x40cabf
or eax, 4
push 0
push eax
call fcn.004015f0
pop edi
pop esi
mov eax, 4
pop ebx
mov esp, ebp
pop ebp
ret