Function at 0x10018cd0
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, 0x1018
call fcn.1003baf0
mov eax, dword [0x100530a0]
xor eax, esp
mov dword [esp + 0x1014], eax
push ebx
push esi
push edi
lea eax, [esp + 0x18]
push eax
push 0x20019
push 0
push str.SOFTWAREOracleJavaDeploy
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x10018e3f
push 0xc
call fcn.10031690
mov esi, eax
add esp, 4
test esi, esi
je 0x10018d3b
push str._Cannot_open_registry_key
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call fcn.10031690
mov dword [esi], eax
jmp 0x10018d3d
xor esi, esi
mov dword [esp + 0x10], esi
test esi, esi
je 0x10019040
push 0xc
call fcn.10031690
mov esi, eax
add esp, 4
test esi, esi
je 0x10018d7e
push str.SOFTWAREJavaSoftJava_Runtime_Environment
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x10019040
jmp 0x10018d80
xor esi, esi
mov dword [esp + 0xc], esi
test esi, esi
je 0x10019040
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x14]
call fcn.10003700
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
jne 0x10018dde
mov eax, dword [esi]
test eax, eax
je 0x10018dbc
push eax
call ebx
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10018dd3
push eax
call fcn.1003b898
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10031690
add esp, 8
mov esi, dword [esp + 0x10]
test esi, esi
je 0x10018dea
mov eax, dword [esi]
jmp 0x10018dec
xor eax, eax
push eax
call fcn.10003ca0
add esp, 4
test esi, esi
je 0x10019026
lock xadd dword [esi + 8], edi
dec edi
jne 0x10019026
mov eax, dword [esi]
test eax, eax
je 0x10018e18
push eax
call ebx
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10018e2f
push eax
call fcn.1003b898
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10031690
add esp, 8
jmp 0x10019026
push 0x1000
lea eax, [esp + 0x24]
mov dword [esp + 0x18], 0x800
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
push 0
push str.WebDeployJava
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x10019019
push str._WebJava_value:
lea ecx, [esp + 0x14]
call fcn.100060b0
push 0xc
call fcn.10031690
mov esi, eax
add esp, 4
test esi, esi
je 0x10018ec6
lea eax, [esp + 0x20]
mov dword [esi + 4], 0
push eax
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
je 0x10019040
jmp 0x10018ec8
xor esi, esi
mov dword [esp + 0xc], esi
test esi, esi
je 0x10019040
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x14]
call fcn.10003700
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
jne 0x10018f26
mov eax, dword [esi]
test eax, eax
je 0x10018f04
push eax
call ebx
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10018f1b
push eax
call fcn.1003b898
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10031690
add esp, 8
mov esi, dword [esp + 0x10]
test esi, esi
je 0x10018f32
mov eax, dword [esi]
jmp 0x10018f34
xor eax, eax
push eax
call fcn.10003ca0
add esp, 4
lea ecx, [esp + 0x20]
mov eax, str.disabled
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10018f6c
test dx, dx
je 0x10018f68
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10018f6c
add eax, 4
add ecx, 4
test dx, dx
jne 0x10018f46
xor eax, eax
jmp 0x10018f71
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10018fdc
push str._System_WebJava_DISABLED
call fcn.10003ca0
add esp, 4
test esi, esi
je 0x10018fbf
lock xadd dword [esi + 8], edi
dec edi
jne 0x10018fbf
mov eax, dword [esi]
test eax, eax
je 0x10018f9d
push eax
call ebx
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x10018fb4
push eax
call fcn.1003b898
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10031690
add esp, 8
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x1014]
xor ecx, esp
call fcn.1003b4ee
add esp, 0x1018
ret
test esi, esi
je 0x10019019
lock xadd dword [esi + 8], edi
dec edi
jne 0x10019019
mov eax, dword [esi]
test eax, eax
je 0x10018ff7
push eax
call ebx
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x1001900e
push eax
call fcn.1003b898
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.10031690
add esp, 8
push str._System_WebJava_ENABLED
call fcn.10003ca0
add esp, 4
mov ecx, dword [esp + 0x1020]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1003b4ee
add esp, 0x1018
ret
push 0x8007000e
call fcn.10031690
int3