Function at 0x100281ff
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
lea ebp, [esp - 0x1004]
mov eax, 0x1004
call fcn.1005e2a0
push 0xffffffffffffffff
push 0x100ce182
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x10130aa4]
xor eax, ebp
mov dword [ebp + 0x1000], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0x100c]
xor eax, eax
mov ebx, dword [ebp + 0x1018]
push 0x1000
push eax
lea eax, [ebp]
push eax
call fcn.100621d0
add esp, 0xc
mov dword [ebp - 0x14], 0x800
mov edi, 0x20019
test ebx, ebx
je 0x1002827f
xor edx, edx
mov eax, pe_nt_image_headers32
cmp dword [ebx], edx
mov ecx, 0x200
cmovne eax, ecx
or edi, eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], eax
cmp dword [ebp + 0x1014], eax
je 0x1002829f
mov eax, str.SOFTWAREJavaSoftJava_Plug_in
jmp 0x100282bb
push edi
push str.SOFTWAREJavaSoftJRE
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.10017b89
test eax, eax
je 0x100282e1
lea ecx, [ebp - 0x20]
mov eax, 0x100ec858
push edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.10017b89
test eax, eax
je 0x100282e1
cmp dword [ebp - 0x20], 0
je 0x100282da
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
jmp 0x10028412
mov edi, dword [ebp - 0x20]
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
lea eax, [ebp - 0x14]
push ecx
push ecx
push ecx
push eax
lea eax, [ebp]
mov dword [ebp - 0x10], ecx
push eax
push ecx
jmp 0x1002839b
cmp dword [ebp + 0x1014], 0
je 0x10028344
lea eax, [ebp]
push ebx
push eax
call fcn.10028ea9
pop ecx
pop ecx
test eax, eax
je 0x10028327
lea eax, [ebp]
push ebx
push eax
call fcn.100292d1
pop ecx
pop ecx
test eax, eax
jne 0x10028344
push str.Ignore_invalid_deploy_version:
call fcn.100333b3
lea eax, [ebp]
push eax
call fcn.100333b3
pop ecx
xor eax, eax
pop ecx
mov word [ebp], ax
jmp 0x10028348
mov ax, word [ebp]
test ax, ax
je 0x1002837b
cmp dword [ebp - 0x10], 0
je 0x10028363
lea eax, [ebp]
push esi
push eax
call fcn.1001da13
pop ecx
pop ecx
test eax, eax
jle 0x1002837b
lea eax, [ebp]
push eax
push 0x100ec8f0
push dword [ebp + 0x1010]
push esi
call fcn.1000af1e
add esp, 0x10
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x30]
push ecx
inc eax
mov dword [ebp - 0x14], 0x800
xor ecx, ecx
mov dword [ebp - 0x10], eax
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp]
push ecx
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x24], eax
test eax, eax
je 0x100282fe
cmp dword [ebp + 0x1014], 0
mov ecx, str.Latest_deploy_version:
mov eax, str.Latest_JRE_version:
cmovne eax, ecx
push eax
call fcn.100333b3
push esi
call fcn.100333b3
xor eax, eax
lea edx, [esi + 2]
pop ecx
xor ebx, ebx
inc eax
cmp dword [ebp - 0x24], 0x103
pop ecx
mov ecx, ebx
cmove ecx, eax
mov ax, word [esi]
add esi, 2
cmp ax, bx
jne 0x100283e3
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
sub esi, edx
sar esi, 1
push 0
pop esi
cmovne esi, ecx
test edi, edi
je 0x10028410
push edi
call ebx
xor edx, edx
mov edi, edx
test edi, edi
je 0x10028410
push edi
call ebx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1000]
xor ecx, ebp
call fcn.1005e187
add ebp, 0x1004
leave
ret