Function at 0x1001824b
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
sub esp, 0x104
lea ebp, [esp - 4]
mov eax, dword [0x100307e8]
xor eax, ebp
mov dword [ebp + 0x104], eax
push 0x68
mov eax, 0x1001f0fb
call fcn.1001bb08
mov edi, dword [ebp + 0x110]
lea eax, [ebp - 0x1c]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.JNLPFileShellOpenCommand
push SysReAllocStringLen
mov dword [ebp - 0x20], 0x104
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1001856d
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x1c]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
jne 0x1001856d
push 0x1002513b
lea ecx, [ebp - 0x14]
call fcn.10006cf6
push 0x10025142
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], ebx
call fcn.10006cf6
mov esi, dword [sym.imp.msvcr100.dll__mbsstr]
lea eax, [ebp]
push 0x100252c4
push eax
mov byte [ebp - 4], 1
call esi
pop ecx
test eax, eax
pop ecx
lea eax, [ebp]
je 0x1001836a
push str.___1_
push eax
call esi
pop ecx
pop ecx
cmp eax, ebx
je 0x10018555
mov byte [eax], bl
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.10006cf6
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x10018342
call fcn.10007f79
lea eax, [ebp]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10018348
sub eax, edx
mov byte [ebp + eax - 1], bl
lea eax, [ebp + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.10006cf6
mov byte [ebp - 4], 3
jmp 0x10018414
push str.jp2launcher.exe
push eax
call esi
pop ecx
pop ecx
cmp eax, ebx
je 0x10018555
mov byte [eax], bl
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.10006cf6
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x100183aa
call fcn.10007f79
push str.javaws.exe_
lea ecx, [ebp - 0x10]
call fcn.10006cf6
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x100183d7
call fcn.10007f79
lea eax, [ebp + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.10006cf6
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x10018403
call fcn.10007f79
push str.javaws.exe
lea ecx, [ebp - 0x10]
call fcn.10006cf6
mov byte [ebp - 4], 7
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x10018430
call fcn.10007f79
push str.__nocodebase
lea ecx, [ebp - 0x10]
call fcn.10006cf6
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x1001845d
call fcn.10007f79
push 0x10025310
lea ecx, [ebp - 0x10]
call fcn.10006cf6
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x1001848a
call fcn.10007f79
push edi
lea ecx, [ebp - 0x10]
call fcn.10006cf6
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x100184b3
call fcn.10007f79
push 0x10025314
lea ecx, [ebp - 0x10]
call fcn.10006cf6
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
call fcn.1000877c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x100184e0
call fcn.10007f79
push 0x44
pop esi
push esi
lea eax, [ebp - 0x74]
push ebx
push eax
call sub.msvcr100.dll_memset
mov ecx, dword [ebp - 0x14]
add esp, 0xc
mov dword [ebp - 0x74], esi
cmp ecx, ebx
je 0x10018504
call fcn.100060e0
mov esi, eax
jmp 0x10018506
xor esi, esi
mov edi, dword [ebp - 0x18]
cmp edi, ebx
je 0x10018516
mov ecx, edi
call fcn.100060e0
jmp 0x10018518
xor eax, eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x74]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push esi
push eax
call fcn.1000df81
add esp, 0x28
mov esi, eax
neg esi
sbb esi, esi
and esi, 0xfffffff9
cmp edi, ebx
je 0x10018544
mov ecx, edi
call fcn.10007f79
mov ecx, dword [ebp - 0x14]
cmp ecx, ebx
je 0x10018550
call fcn.10007f79
lea eax, [esi + 7]
jmp 0x10018570
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
je 0x10018561
call fcn.10007f79
mov ecx, dword [ebp - 0x14]
cmp ecx, ebx
je 0x1001856d
call fcn.10007f79
push 6
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x104]
xor ecx, ebp
call fcn.1001ba56
add ebp, 0x108
leave
ret