Function at 0x1002ea2e
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0xc04]
sub esp, 0xc04
push 0xffffffffffffffff
push 0x100cee78
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x10130aa4]
xor eax, ebp
mov dword [ebp + 0xc00], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc0c]
mov edx, dword [ebp + 0xc10]
mov edi, dword [ebp + 0xc18]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x14], edi
cmp eax, dword [ecx + 0x48]
jne 0x1002eb27
push str.https:__javadl_esd_secure.oracle.com_update_baseline.version
push 0x100f56bc
mov esi, 0x400
lea eax, [ebp]
push esi
push eax
call fcn.10011ecc
add esp, 0x10
lea eax, [ebp - 0x18]
xor ebx, ebx
inc ebx
push eax
push ebx
push 0
push 0x100f5700
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1002eb0e
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
lea eax, [ebp + 0x800]
push eax
xor eax, eax
push eax
push eax
push str.URLOverride
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x18]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x1002eb0e
lea eax, [ebp + 0x800]
push eax
push 0x100f5754
lea eax, [ebp]
push 0x400
push eax
call fcn.10011ecc
add esp, 0x10
lea eax, [ebp]
push eax
call fcn.1000f82a
pop ecx
xor ecx, ecx
cmp eax, ebx
sete cl
mov dword [edi + 8], ecx
jmp 0x1002efaa
cmp eax, dword [ecx + 0x4c]
je 0x1002efa4
cmp eax, dword [ecx + 0x50]
jne 0x1002eb4d
cmp byte [ecx + 0x15], 0
je 0x1002eb4d
push edi
push dword [ebp + 0xc14]
push edx
call fcn.1002f730
jmp 0x1002efb2
cmp eax, dword [ecx + 0x54]
jne 0x1002eb5c
cmp byte [ecx + 0x15], 0
jne 0x1002efa4
cmp eax, dword [ecx + 0x58]
jne 0x1002eb6b
cmp byte [ecx + 0x15], 0
jne 0x1002efa4
cmp eax, dword [ecx + 0x5c]
jne 0x1002eb92
cmp byte [ecx + 0x15], 0
je 0x1002eb92
xor eax, eax
cmp dword [ebp + 0xc14], eax
jne 0x1002eb88
call fcn.10039e7d
movzx eax, al
mov dword [edi + 8], eax
mov al, 1
jmp 0x1002efac
cmp eax, dword [ecx + 0x60]
jne 0x1002ebae
cmp byte [ecx + 0x15], 0
je 0x1002ebae
xor eax, eax
cmp dword [ebp + 0xc14], eax
jne 0x1002eb88
call fcn.1003be61
jmp 0x1002eb85
cmp eax, dword [ecx + 0x64]
jne 0x1002ebd9
cmp byte [ecx + 0x15], 0
je 0x1002ebd9
xor esi, esi
cmp dword [ebp + 0xc14], esi
jne 0x1002ebd4
call fcn.10036cb8
cmp al, 0x13
jb 0x1002ebd4
call fcn.1003ae83
movzx esi, al
mov dword [edi + 8], esi
jmp 0x1002eb8b
cmp eax, dword [ecx + 0x6c]
jne 0x1002ebe8
cmp byte [ecx + 0x15], 0
jne 0x1002efa4
cmp eax, dword [ecx + 0x68]
jne 0x1002ed71
cmp byte [ecx + 0x15], 0
je 0x1002ed71
xor eax, eax
mov esi, eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x30], esi
xor ebx, ebx
mov dword [ebp - 4], eax
inc ebx
cmp dword [ebp + 0xc14], ebx
jne 0x1002ec72
cmp dword [edx], 5
jne 0x1002ec72
push ecx
mov eax, esp
mov esi, edx
sub esp, 0x10
mov edi, esp
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1002f87b
add esp, 0x14
lea eax, [ebp - 0x10]
push eax
call fcn.10016133
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.10001787
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1002ec4f
call fcn.10001b13
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x18], esi
test esi, esi
je 0x1002ec72
cmp dword [esi], 0
je 0x1002ec68
push dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
jmp 0x1002ec6a
xor eax, eax
test eax, eax
jne 0x1002ed0e
lea eax, [ebp - 0x44]
push eax
call fcn.100319de
pop ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], eax
lea ecx, [eax + 8]
mov dword [ebp - 0x10], ecx
test eax, eax
je 0x1002ec94
lock inc dword [ecx]
jmp 0x1002ec97
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.1002cdc9
mov esi, dword [ebp - 0x2c]
push ecx
mov eax, esp
sub esp, 0x10
mov edi, esp
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1002f87b
mov edi, dword [ebp - 0x20]
add esp, 0x10
mov eax, esp
mov dword [eax], edi
test edi, edi
je 0x1002eccb
mov eax, dword [ebp - 0x10]
lock inc dword [eax]
call fcn.10016410
mov esi, dword [ebp - 0x18]
pop ecx
pop ecx
test eax, eax
je 0x1002ed03
test esi, esi
je 0x1002ecf9
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1002ecf9
mov ecx, esi
call fcn.10001b86
push 0xc
push esi
call fcn.1005e174
pop ecx
pop ecx
mov esi, edi
test edi, edi
je 0x1002ed41
lock inc dword [edi + 8]
test edi, edi
je 0x1002ed0e
mov ecx, edi
call fcn.10001b13
test esi, esi
je 0x1002ed41
cmp dword [esi], 0
je 0x1002ed21
push dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
jmp 0x1002ed23
xor eax, eax
test eax, eax
je 0x1002ed41
mov edi, dword [ebp - 0x14]
push edi
push ecx
mov eax, esp
mov dword [eax], esi
test esi, esi
je 0x1002ed38
lock inc dword [esi + 8]
call fcn.1002f447
pop ecx
pop ecx
jmp 0x1002ed4a
mov edi, dword [ebp - 0x14]
and dword [edi + 8], 0
mov dword [edi], ebx
test esi, esi
je 0x1002ed6a
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x1002ed6a
mov ecx, esi
call fcn.10001b86
push 0xc
push esi
call fcn.1005e174
pop ecx
pop ecx
mov al, bl
jmp 0x1002efb2
cmp eax, dword [ecx + 0x70]
jne 0x1002ee72
cmp dword [ebp + 0xc14], 2
jne 0x1002ee6b
xor ebx, ebx
inc ebx
cmp dword [edx], ebx
je 0x1002ee6b
lea eax, [edx + 0x10]
mov dword [ebp - 0x2c], eax
cmp dword [eax], ebx
je 0x1002ee6b
cmp dword [edx], 5
jne 0x1002ee6b
cmp dword [eax], 5
jne 0x1002ee6b
sub esp, 0x10
lea eax, [ebp - 0x20]
mov esi, edx
mov edi, esp
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1002f87b
add esp, 0x14
mov eax, dword [eax]
xor ebx, ebx
mov dword [ebp - 4], 2
test eax, eax
je 0x1002eddc
mov eax, dword [eax]
jmp 0x1002edde
mov eax, ebx
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.1003beab
or dword [ebp - 4], 0xffffffff
mov esi, eax
pop ecx
pop ecx
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x1002edfc
call fcn.10001b13
test esi, esi
jne 0x1002ee6b
mov esi, dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
sub esp, 0x10
mov edi, esp
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1002f87b
add esp, 0x14
mov eax, dword [eax]
mov dword [ebp - 4], 3
test eax, eax
je 0x1002ee27
mov ebx, dword [eax]
lea eax, [ebp - 0x28]
push eax
push ebx
call fcn.1003beab
pop ecx
pop ecx
mov ecx, dword [ebp - 0x20]
mov esi, eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
test ecx, ecx
je 0x1002ee47
call fcn.10001b13
test esi, esi
jne 0x1002ee6b
push dword [ebp - 0x24]
mov edi, dword [ebp - 0x14]
push dword [ebp - 0x28]
push dword [ebp - 0x18]
mov dword [edi], 3
push dword [ebp - 0x1c]
call fcn.1003a0ab
add esp, 0x10
mov dword [edi + 8], eax
xor al, al
jmp 0x1002efb2
cmp eax, dword [ecx + 0x78]
jne 0x1002eeef
xor ebx, ebx
inc ebx
cmp dword [ebp + 0xc14], ebx
jne 0x1002ee6b
cmp dword [edx], ebx
je 0x1002ee6b
cmp dword [edx], 5
jne 0x1002ee6b
push ebx
push ecx
mov eax, esp
mov esi, edx
sub esp, 0x10
mov edi, esp
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1002f87b
add esp, 0x14
lea eax, [ebp - 0x18]
push eax
call fcn.10031daf
add esp, 0xc
lea ecx, [ebp - 0x18]
call fcn.10001bc1
test eax, eax
je 0x1002eed8
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
push edi
push ecx
mov ecx, esp
mov dword [ecx], eax
test eax, eax
je 0x1002eecf
lock inc dword [eax + 8]
call fcn.1002f447
pop ecx
pop ecx
jmp 0x1002eeda
xor bl, bl
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1002ed6a
call fcn.10001b13
jmp 0x1002ed6a
cmp eax, dword [ecx + 0x7c]
jne 0x1002ef6c
xor ebx, ebx
inc ebx
cmp dword [ebp + 0xc14], ebx
jne 0x1002ee6b
cmp dword [edx], ebx
je 0x1002ee6b
cmp dword [edx], 5
jne 0x1002ee6b
push 0
push ecx
mov eax, esp
mov esi, edx
sub esp, 0x10
mov edi, esp
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1002f87b
add esp, 0x14
lea eax, [ebp - 0x10]
push eax
call fcn.10031daf
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.10001bc1
test eax, eax
je 0x1002ef62
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
push edi
push ecx
mov ecx, esp
mov dword [ecx], eax
test eax, eax
je 0x1002ef59
lock inc dword [eax + 8]
call fcn.1002f447
pop ecx
pop ecx
jmp 0x1002ef64
xor bl, bl
mov ecx, dword [ebp - 0x10]
jmp 0x1002eedd
cmp eax, dword [ecx + 0x80]
jne 0x1002ef86
mov dword [edi], 3
call fcn.1002ab39
mov dword [edi + 8], eax
mov al, 1
jmp 0x1002efb2
cmp eax, dword [ecx + 0x84]
jne 0x1002ef9b
mov dword [edi], 3
call fcn.1003a25c
jmp 0x1002ef7f
xor eax, eax
mov dword [edi], eax
jmp 0x1002ee68
xor ebx, ebx
inc ebx
mov dword [edi + 8], ebx
mov al, bl
mov dword [edi], 3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xc00]
xor ecx, ebp
call fcn.1005e187
add ebp, 0xc04
leave
ret 0x10