Function at 0x1003889d
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x20c]
sub esp, 0x20c
push 0xffffffffffffffff
push 0x1006855b
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x100bc054]
xor eax, ebp
mov dword [ebp + 0x208], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x214]
lea eax, [ebp - 0x1c]
push eax
push 0x20019
xor ebx, ebx
mov dword [ebp - 0x20], 0x208
push ebx
push str.JNLPFileShellOpenCommand
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x10038a39
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp]
push eax
lea eax, [ebp - 0x24]
push eax
push ebx
push ebx
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x1c]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x10038a39
cmp dword [ebp - 0x24], 1
jne 0x10038a39
mov eax, dword [ebp - 0x20]
mov ecx, 0x103
shr eax, 1
mov esi, 0x208
cmp eax, 0x104
cmovb ecx, eax
add ecx, ecx
cmp ecx, esi
jae 0x10038c40
xor eax, eax
mov word [ebp + ecx], ax
lea ecx, [ebp - 0x14]
push 0x100a0914
call fcn.1000155e
push 0x100a0597
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], ebx
call fcn.10012712
lea eax, [ebp]
mov byte [ebp - 4], 1
push 0x100a0918
push eax
call fcn.1003e1b7
pop ecx
test eax, eax
lea eax, [ebp]
pop ecx
je 0x10038a5f
push str.___1_
push eax
call fcn.1003e1b7
pop ecx
pop ecx
test eax, eax
je 0x10038a21
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000155e
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x14]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x100389e1
call fcn.100016f0
lea ecx, [ebp]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x100389e7
sub ecx, edx
sar ecx, 1
lea ecx, [ecx*2 - 2]
cmp ecx, esi
jae 0x10038c40
xor eax, eax
mov word [ebp + ecx], ax
lea eax, [ebp + 2]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000155e
mov byte [ebp - 4], 3
jmp 0x10038b0b
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x10038a2d
call fcn.100016f0
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x10038a39
call fcn.100016f0
push 6
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x208]
xor ecx, ebp
call fcn.1003a5a7
add ebp, 0x20c
leave
ret
push str.jp2launcher.exe
push eax
call fcn.1003e1b7
pop ecx
pop ecx
test eax, eax
je 0x10038a21
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000155e
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x14]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10038aa1
call fcn.100016f0
push str.javaws.exe_
lea ecx, [ebp - 0x10]
call fcn.1000155e
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x14]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10038ace
call fcn.100016f0
lea eax, [ebp + 2]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000155e
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x18]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10038afa
call fcn.100016f0
push str.javaws.exe
lea ecx, [ebp - 0x10]
call fcn.1000155e
mov byte [ebp - 4], 7
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10038b27
call fcn.100016f0
push str.__nocodebase
lea ecx, [ebp - 0x10]
call fcn.1000155e
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x14]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10038b54
call fcn.100016f0
push 0x100a09a8
lea ecx, [ebp - 0x10]
call fcn.1000155e
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x14]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10038b81
call fcn.100016f0
push edi
lea ecx, [ebp - 0x10]
call fcn.1000155e
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x14]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10038baa
call fcn.100016f0
push 0x100a09ac
lea ecx, [ebp - 0x10]
call fcn.1000155e
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x14]
call fcn.10001697
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x10038bd3
call fcn.100016f0
push 0x44
pop esi
push esi
lea eax, [ebp - 0x78]
push ebx
push eax
call fcn.1003cd40
mov dword [ebp - 0x78], esi
add esp, 0xc
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x10038bf2
mov eax, dword [esi]
jmp 0x10038bf4
mov eax, ebx
mov edi, dword [ebp - 0x18]
test edi, edi
je 0x10038bff
mov ecx, dword [edi]
jmp 0x10038c01
mov ecx, ebx
lea edx, [ebp - 0x34]
push edx
lea edx, [ebp - 0x78]
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push ecx
call fcn.1004dd7d
add esp, 0x28
mov ebx, eax
neg ebx
sbb ebx, ebx
and ebx, 0xfffffff9
test edi, edi
je 0x10038c2d
mov ecx, edi
call fcn.100016f0
test esi, esi
je 0x10038c38
mov ecx, esi
call fcn.100016f0
lea eax, [ebx + 7]
jmp 0x10038a3c
call fcn.1004dd7d
int3