Function at 0x100376d1
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x103c]
mov eax, 0x103c
call fcn.10039d10
push 0xffffffffffffffff
push 0x10059918
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x10080f6c]
xor eax, ebp
mov dword [ebp + 0x1038], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0x1044]
xor edi, edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x14], edi
xor eax, eax
push 0xffe
mov word [ebp + 0x38], ax
lea eax, [ebp + 0x3a]
push edi
push eax
mov dword [ebp - 4], 1
call fcn.10039d40
add esp, 0xc
push 0x1006d8e0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x28], 0x1000
call fcn.10001309
push 0x1006d8e8
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.10001309
push 0x1006d8e4
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call fcn.1001060c
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.10001524
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 3
cmp ecx, edi
je 0x10037794
call fcn.10001441
lea eax, [ebp + 0x1048]
push eax
lea ecx, [ebp - 0x1c]
call fcn.10001524
mov eax, dword [ebp - 0x1c]
cmp eax, edi
je 0x100377ae
mov eax, dword [eax]
jmp 0x100377b0
xor eax, eax
lea ecx, [ebp - 0x2c]
push ecx
push 0x20019
push edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, edi
je 0x100377e2
mov esi, dword [ebp - 0x20]
mov dword [ebx], esi
cmp esi, edi
je 0x100377dd
lea eax, [esi + 8]
push eax
call dword [sym.imp.kernel32.dll_InterlockedIncrement]
jmp 0x10037a43
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
push edi
push str.JavaHome
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x2c]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, edi
jne 0x10037a30
cmp dword [ebp - 0x30], 1
jne 0x10037a30
mov eax, dword [ebp - 0x28]
shr eax, 1
cmp eax, 0x800
jb 0x1003782b
mov eax, 0x7ff
xor ecx, ecx
mov word [ebp + eax*2 + 0x38], cx
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp - 0x18]
call fcn.10001309
push 0x1006d954
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 5
call fcn.1001060c
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call fcn.10001524
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 5
cmp ecx, edi
je 0x1003786f
call fcn.10001441
push 0x1006d958
lea ecx, [ebp - 0x10]
call fcn.10001309
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.10001524
mov ecx, dword [ebp - 0x10]
cmp ecx, edi
je 0x10037898
call fcn.10001441
xor eax, eax
mov dword [ebp + 0x30], 7
mov dword [ebp + 0x2c], edi
mov word [ebp + 0x1c], ax
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 8
cmp eax, edi
je 0x100378b7
mov eax, dword [eax]
jmp 0x100378b9
xor eax, eax
push 1
push 0x40
push 1
push eax
lea ecx, [ebp - 0xe0]
call fcn.10013872
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0xd4], 6
mov byte [ebp - 4], 9
jne 0x100379f1
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.10013641
pop ecx
pop ecx
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
and al, 6
movsx eax, al
neg eax
sbb eax, eax
not eax
test ecx, eax
je 0x100379e6
mov dword [ebp - 0x10], 0x3d
push 1
push edi
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0x1c]
call fcn.10035fb0
mov esi, eax
cmp esi, 0xffffffff
je 0x1003795c
push esi
push edi
lea eax, [ebp]
push eax
lea ecx, [ebp + 0x1c]
call fcn.10035fb0
or dword [ebp - 0x14], 2
push str.javafx.runtime.version
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.1001157d
test eax, eax
jne 0x1003795c
mov bl, 1
jmp 0x1003795e
xor bl, bl
test byte [ebp - 0x14], 2
mov dword [ebp - 4], 9
je 0x1003797a
and dword [ebp - 0x14], 0xfffffffd
push edi
push 1
lea ecx, [ebp]
call fcn.100115e9
test bl, bl
jne 0x100379af
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.10013641
pop ecx
pop ecx
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
and al, 6
movsx eax, al
neg eax
sbb eax, eax
not eax
test ecx, eax
jne 0x1003791c
jmp 0x100379e3
push 0xffffffffffffffff
inc esi
push esi
lea eax, [ebp]
push eax
lea ecx, [ebp + 0x1c]
call fcn.10035fb0
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xb
jb 0x100379cb
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x20]
call fcn.100014b2
push edi
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 9
call fcn.100115e9
mov ebx, dword [ebp - 0x24]
lea ecx, [ebp - 0xe0]
call fcn.1001376b
mov esi, dword [ebp - 0x20]
mov dword [ebx], esi
cmp esi, edi
je 0x10037a04
lea eax, [esi + 8]
push eax
call dword [sym.imp.kernel32.dll_InterlockedIncrement]
or dword [ebp - 0x14], 1
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 8
call fcn.10013ae5
push edi
push 1
lea ecx, [ebp + 0x1c]
call fcn.100115e9
mov ecx, dword [ebp - 0x18]
cmp ecx, edi
je 0x10037a43
call fcn.10001441
jmp 0x10037a43
mov esi, dword [ebp - 0x20]
mov dword [ebx], esi
cmp esi, edi
je 0x10037a43
lea eax, [esi + 8]
push eax
call dword [sym.imp.kernel32.dll_InterlockedIncrement]
mov ecx, dword [ebp - 0x1c]
cmp ecx, edi
je 0x10037a4f
call fcn.10001441
cmp esi, edi
je 0x10037a5a
mov ecx, esi
call fcn.10001441
mov ecx, dword [ebp + 0x1048]
cmp ecx, edi
je 0x10037a69
call fcn.10001441
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1038]
xor ecx, ebp
call fcn.10039bc2
add ebp, 0x103c
leave
ret