Function at 0x6d1fb300
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x5b8]
sub esp, 0x638
mov eax, dword [0x6d22e258]
xor eax, ebp
mov dword [ebp + 0x5b4], eax
mov eax, dword [ebp + 0x5c0]
push ebx
push 0x6d220a28
mov dword [ebp - 0x78], eax
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
xor ebx, ebx
cmp eax, ebx
je 0x6d1fb53f
push esi
mov esi, 0x104
push esi
lea ecx, [ebp + 0x2a8]
push ecx
push eax
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
lea eax, [ebp + 0x2a8]
push str.jvm.dll
push eax
call fcn.6d20b0f0
pop ecx
pop ecx
test eax, eax
je 0x6d1fb53e
push esi
lea eax, [ebp + 0x3ac]
push eax
lea eax, [ebp + 0x2a8]
push eax
call dword [sym.imp.kernel32.dll_GetLongPathNameA]
lea eax, [ebp + 0x3ac]
push 0x6d220a38
push eax
call fcn.6d20b0f0
pop ecx
pop ecx
test eax, eax
je 0x6d1fb3ab
lea eax, [ebp + 0x3ac]
push str._bin
push eax
call fcn.6d20b0f0
pop ecx
pop ecx
mov byte [eax], bl
lea eax, [ebp - 0x70]
push eax
push 0x20019
push ebx
push 0x6d220a48
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x6d1fb53e
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp + 0x4b0]
push eax
mov dword [ebp - 0x6c], ebx
push ebx
jmp 0x6d1fb50f
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x7c], esi
cmp dword [ebp - 0x68], ebx
jbe 0x6d1fb4fa
cmp byte [ebp + eax + 0x4b0], 0x2e
jne 0x6d1fb40c
inc ecx
cmp ecx, 1
jg 0x6d1fb41b
inc eax
cmp eax, dword [ebp - 0x68]
jb 0x6d1fb3fc
cmp ecx, 1
jle 0x6d1fb4fa
push 0x6d220a74
lea eax, [ebp + 0x4b0]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
js 0x6d1fb4fa
lea eax, [ebp + 0x4b0]
push eax
call fcn.6d1fbd29
pop ecx
test al, al
je 0x6d1fb4fa
lea eax, [ebp + 0x4b0]
push eax
push 0x6d220a7c
lea eax, [ebp - 0x64]
push 0x6d220aa8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x74]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x64]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x6d1fb4fa
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp + 0xa0]
push eax
lea eax, [ebp - 0x80]
push eax
push ebx
push 0x6d220ab0
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x6d1fb4f1
push esi
lea eax, [ebp + 0x1a4]
push eax
lea eax, [ebp + 0xa0]
push eax
call dword [sym.imp.kernel32.dll_GetLongPathNameA]
lea ecx, [ebp + 0x3ac]
lea eax, [ebp + 0x1a4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x6d1fb4e8
cmp dl, bl
je 0x6d1fb4e4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x6d1fb4e8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x6d1fb4c8
xor eax, eax
jmp 0x6d1fb4ed
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x6d1fb521
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp - 0x6c]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp + 0x4b0]
push eax
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
mov dword [ebp - 0x68], esi
call edi
test eax, eax
je 0x6d1fb3ec
jmp 0x6d1fb534
lea eax, [ebp + 0x4b0]
push eax
push esi
push dword [ebp - 0x78]
call fcn.6d212a5d
add esp, 0xc
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
mov ecx, dword [ebp + 0x5b4]
xor ecx, ebp
pop ebx
call fcn.6d20a065
add ebp, 0x5b8
leave
ret