Function at 0x10039911
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x20c]
sub esp, 0x20c
push 0xffffffffffffffff
push 0x1006b673
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x100be114]
xor eax, ebp
mov dword [ebp + 0x208], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x214]
lea eax, [ebp - 0x1c]
push eax
push 0x20019
xor ebx, ebx
mov dword [ebp - 0x20], 0x208
push ebx
push str.JNLPFileShellOpenCommand
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x10039cc1
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp]
push eax
lea eax, [ebp - 0x24]
push eax
push ebx
push ebx
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x1c]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x10039cc1
cmp dword [ebp - 0x24], 1
jne 0x10039cc1
mov eax, dword [ebp - 0x20]
shr eax, 1
cmp eax, 0x104
jae 0x100399ca
add eax, eax
cmp eax, 0x208
jae 0x10039ce7
jmp 0x100399cf
mov eax, 0x206
xor ecx, ecx
mov word [ebp + eax], cx
lea ecx, [ebp - 0x14]
push 0x100a3b18
call fcn.1000154d
push 0x100a3656
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], ebx
call fcn.100127e8
lea eax, [ebp]
mov byte [ebp - 4], 1
push 0x100a3b1c
push eax
call fcn.1003f2ae
pop ecx
test eax, eax
lea eax, [ebp]
pop ecx
je 0x10039a9c
push str.___1_
push eax
call fcn.1003f2ae
pop ecx
pop ecx
test eax, eax
je 0x10039c7c
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000154d
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x14]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10039a58
call fcn.100016dc
lea ecx, [ebp]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x10039a5e
sub ecx, edx
sar ecx, 1
lea ecx, [ecx*2 - 2]
cmp ecx, 0x208
jae 0x10039ce7
xor eax, eax
mov word [ebp + ecx], ax
lea eax, [ebp + 2]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000154d
mov byte [ebp - 4], 3
jmp 0x10039b4c
push str.jp2launcher.exe
push eax
call fcn.1003f2ae
pop ecx
pop ecx
test eax, eax
je 0x10039c7c
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000154d
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x14]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10039ae2
call fcn.100016dc
push str.javaws.exe_
lea ecx, [ebp - 0x10]
call fcn.1000154d
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x14]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10039b0f
call fcn.100016dc
lea eax, [ebp + 2]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000154d
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x18]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10039b3b
call fcn.100016dc
push str.javaws.exe
lea ecx, [ebp - 0x10]
call fcn.1000154d
mov byte [ebp - 4], 7
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10039b68
call fcn.100016dc
push str.__nocodebase
lea ecx, [ebp - 0x10]
call fcn.1000154d
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x14]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10039b95
call fcn.100016dc
push 0x100a3bac
lea ecx, [ebp - 0x10]
call fcn.1000154d
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x14]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10039bc2
call fcn.100016dc
push edi
lea ecx, [ebp - 0x10]
call fcn.1000154d
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x14]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10039beb
call fcn.100016dc
push 0x100a3bb0
lea ecx, [ebp - 0x10]
call fcn.1000154d
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x14]
call fcn.10001683
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x10039c14
call fcn.100016dc
push 0x44
pop esi
push esi
lea eax, [ebp - 0x78]
push ebx
push eax
call fcn.1003d660
mov dword [ebp - 0x78], esi
add esp, 0xc
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x10039c33
mov eax, dword [esi]
jmp 0x10039c35
mov eax, ebx
mov edi, dword [ebp - 0x18]
test edi, edi
je 0x10039c40
mov ecx, dword [edi]
jmp 0x10039c42
mov ecx, ebx
lea edx, [ebp - 0x34]
push edx
lea edx, [ebp - 0x78]
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push ecx
call fcn.1002f686
add esp, 0x28
neg eax
sbb ebx, ebx
and ebx, 0xfffffff9
test edi, edi
je 0x10039c6c
mov ecx, edi
call fcn.100016dc
test esi, esi
je 0x10039c77
mov ecx, esi
call fcn.100016dc
lea eax, [ebx + 7]
jmp 0x10039cc4
mov esi, dword [ebp - 0x18]
or edi, 0xffffffff
test esi, esi
je 0x10039ca1
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x10039ca1
mov ecx, esi
call fcn.10001703
push 0xc
push esi
call fcn.1003b0f2
pop ecx
pop ecx
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x10039cc1
lock xadd dword [esi + 8], edi
dec edi
jne 0x10039cc1
mov ecx, esi
call fcn.10001703
push 0xc
push esi
call fcn.1003b0f2
pop ecx
pop ecx
push 6
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x208]
xor ecx, ebp
call fcn.1003b105
add ebp, 0x20c
leave
ret
call fcn.1003b8ee
int3