Function at 0x10038df4
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x103c]
mov eax, 0x103c
call fcn.1003c230
push 0xffffffffffffffff
push 0x10071a52
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x10095dec]
xor eax, ebp
mov dword [ebp + 0x1038], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0x1044]
xor edi, edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x14], edi
xor eax, eax
push 0xffe
mov word [ebp + 0x38], ax
lea eax, [ebp + 0x3a]
push edi
push eax
mov dword [ebp - 4], 1
call fcn.1003c260
add esp, 0xc
push 0x10085468
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x28], 0x1000
call fcn.100010b1
push 0x10085470
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.100010b1
push 0x1008546c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call fcn.1000b23a
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.1000132e
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 3
cmp ecx, edi
je 0x10038eb7
call fcn.10001238
lea eax, [ebp + 0x1048]
push eax
lea ecx, [ebp - 0x1c]
call fcn.1000132e
mov eax, dword [ebp - 0x1c]
cmp eax, edi
je 0x10038ed1
mov eax, dword [eax]
jmp 0x10038ed3
xor eax, eax
lea ecx, [ebp - 0x2c]
push ecx
push 0x20019
push edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, edi
je 0x10038f05
mov esi, dword [ebp - 0x20]
mov dword [ebx], esi
cmp esi, edi
je 0x10038f00
lea eax, [esi + 8]
push eax
call dword [sym.imp.kernel32.dll_InterlockedIncrement]
jmp 0x10039166
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
push edi
push str.JavaHome
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x2c]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, edi
jne 0x10039153
cmp dword [ebp - 0x30], 1
jne 0x10039153
mov eax, dword [ebp - 0x28]
shr eax, 1
cmp eax, 0x800
jb 0x10038f4e
mov eax, 0x7ff
xor ecx, ecx
mov word [ebp + eax*2 + 0x38], cx
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp - 0x18]
call fcn.100010b1
push 0x100854dc
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 5
call fcn.1000b23a
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call fcn.1000132e
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 5
cmp ecx, edi
je 0x10038f92
call fcn.10001238
push 0x100854e0
lea ecx, [ebp - 0x10]
call fcn.100010b1
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.1000132e
mov ecx, dword [ebp - 0x10]
cmp ecx, edi
je 0x10038fbb
call fcn.10001238
xor eax, eax
mov dword [ebp + 0x30], 7
mov dword [ebp + 0x2c], edi
mov word [ebp + 0x1c], ax
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 8
cmp eax, edi
je 0x10038fda
mov eax, dword [eax]
jmp 0x10038fdc
xor eax, eax
push 1
push 0x40
push 1
push eax
lea ecx, [ebp - 0xe0]
call fcn.10011049
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0xd4], 6
mov byte [ebp - 4], 9
jne 0x10039114
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.10010bdd
pop ecx
pop ecx
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
and al, 6
movsx eax, al
neg eax
sbb eax, eax
not eax
test ecx, eax
je 0x10039109
mov dword [ebp - 0x10], 0x3d
push 1
push edi
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0x1c]
call fcn.1006d75b
mov esi, eax
cmp esi, 0xffffffff
je 0x1003907f
push esi
push edi
lea eax, [ebp]
push eax
lea ecx, [ebp + 0x1c]
call fcn.1006d75b
or dword [ebp - 0x14], 2
push str.javafx.runtime.version
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.1000cd4d
test eax, eax
jne 0x1003907f
mov bl, 1
jmp 0x10039081
xor bl, bl
test byte [ebp - 0x14], 2
mov dword [ebp - 4], 9
je 0x1003909d
and dword [ebp - 0x14], 0xfffffffd
push edi
push 1
lea ecx, [ebp]
call fcn.1000cddd
test bl, bl
jne 0x100390d2
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.10010bdd
pop ecx
pop ecx
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
and al, 6
movsx eax, al
neg eax
sbb eax, eax
not eax
test ecx, eax
jne 0x1003903f
jmp 0x10039106
push 0xffffffffffffffff
inc esi
push esi
lea eax, [ebp]
push eax
lea ecx, [ebp + 0x1c]
call fcn.1006d75b
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xb
jb 0x100390ee
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x20]
call fcn.100012bc
push edi
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 9
call fcn.1000cddd
mov ebx, dword [ebp - 0x24]
lea ecx, [ebp - 0xe0]
call fcn.10010d94
mov esi, dword [ebp - 0x20]
mov dword [ebx], esi
cmp esi, edi
je 0x10039127
lea eax, [esi + 8]
push eax
call dword [sym.imp.kernel32.dll_InterlockedIncrement]
or dword [ebp - 0x14], 1
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 8
call fcn.1001187b
push edi
push 1
lea ecx, [ebp + 0x1c]
call fcn.1000cddd
mov ecx, dword [ebp - 0x18]
cmp ecx, edi
je 0x10039166
call fcn.10001238
jmp 0x10039166
mov esi, dword [ebp - 0x20]
mov dword [ebx], esi
cmp esi, edi
je 0x10039166
lea eax, [esi + 8]
push eax
call dword [sym.imp.kernel32.dll_InterlockedIncrement]
mov ecx, dword [ebp - 0x1c]
cmp ecx, edi
je 0x10039172
call fcn.10001238
cmp esi, edi
je 0x1003917d
mov ecx, esi
call fcn.10001238
mov ecx, dword [ebp + 0x1048]
cmp ecx, edi
je 0x1003918c
call fcn.10001238
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1038]
xor ecx, ebp
call fcn.1003c09c
add ebp, 0x103c
leave
ret