Function at 0x1001e254
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
lea ebp, [esp - 0x1004]
mov eax, 0x1004
call fcn.1003b1e0
push 0xffffffffffffffff
push 0x10069125
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x100be114]
xor eax, ebp
mov dword [ebp + 0x1000], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0x100c]
xor eax, eax
mov ebx, dword [ebp + 0x1018]
push 0x1000
push eax
lea eax, [ebp]
push eax
call fcn.1003d660
add esp, 0xc
mov dword [ebp - 0x14], 0x800
mov edi, 0x20019
test ebx, ebx
je 0x1001e2d4
xor edx, edx
mov eax, 0x100
cmp dword [ebx], edx
mov ecx, 0x200
cmovne eax, ecx
or edi, eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], eax
cmp dword [ebp + 0x1014], eax
je 0x1001e2f4
mov eax, str.SOFTWAREJavaSoftJava_Plug_in
jmp 0x1001e310
push edi
push str.SOFTWAREJavaSoftJRE
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.1001b2cc
test eax, eax
je 0x1001e336
lea ecx, [ebp - 0x20]
mov eax, 0x10088ec8
push edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.1001b2cc
test eax, eax
je 0x1001e336
cmp dword [ebp - 0x20], 0
je 0x1001e32f
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
jmp 0x1001e467
mov edi, dword [ebp - 0x20]
lea eax, [ebp - 0x28]
push eax
xor ecx, ecx
lea eax, [ebp - 0x14]
push ecx
push ecx
push ecx
push eax
lea eax, [ebp]
mov dword [ebp - 0x10], ecx
push eax
push ecx
jmp 0x1001e3f0
cmp dword [ebp + 0x1014], 0
je 0x1001e399
lea eax, [ebp]
push ebx
push eax
call fcn.1001e7a0
pop ecx
pop ecx
test eax, eax
je 0x1001e37c
lea eax, [ebp]
push ebx
push eax
call fcn.1001eb02
pop ecx
pop ecx
test eax, eax
jne 0x1001e399
push str.Ignore_invalid_deploy_version:
call fcn.100300e1
lea eax, [ebp]
push eax
call fcn.100300e1
pop ecx
xor eax, eax
pop ecx
mov word [ebp], ax
jmp 0x1001e39d
mov ax, word [ebp]
test ax, ax
je 0x1001e3d0
cmp dword [ebp - 0x10], 0
je 0x1001e3b8
lea eax, [ebp]
push esi
push eax
call fcn.1001e6df
pop ecx
pop ecx
test eax, eax
jle 0x1001e3d0
lea eax, [ebp]
push eax
push 0x10088f60
push dword [ebp + 0x1010]
push esi
call fcn.10007104
add esp, 0x10
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x30]
push ecx
inc eax
mov dword [ebp - 0x14], 0x800
xor ecx, ecx
mov dword [ebp - 0x10], eax
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp]
push ecx
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x24], eax
test eax, eax
je 0x1001e353
cmp dword [ebp + 0x1014], 0
mov ecx, str.Latest_deploy_version:
mov eax, str.Latest_JRE_version:
cmovne eax, ecx
push eax
call fcn.100300e1
push esi
call fcn.100300e1
xor eax, eax
lea edx, [esi + 2]
pop ecx
xor ebx, ebx
inc eax
cmp dword [ebp - 0x24], 0x103
pop ecx
mov ecx, ebx
cmove ecx, eax
mov ax, word [esi]
add esi, 2
cmp ax, bx
jne 0x1001e438
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
sub esi, edx
sar esi, 1
push 0
pop esi
cmovne esi, ecx
test edi, edi
je 0x1001e465
push edi
call ebx
xor edx, edx
mov edi, edx
test edi, edi
je 0x1001e465
push edi
call ebx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1000]
xor ecx, ebp
call fcn.1003b105
add ebp, 0x1004
leave
ret