Function at 0x1001032e
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x108]
sub esp, 0x108
push 0xffffffffffffffff
push 0x10013f2f
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x10038540]
xor eax, ebp
mov dword [ebp + 0x104], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x110]
lea eax, [ebp - 0x1c]
push eax
push 0x20019
xor ebx, ebx
mov dword [ebp - 0x20], 0x104
push ebx
push str.JNLPFileShellOpenCommand
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1001069e
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x1c]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x1001069e
push 0x1002e9ca
lea ecx, [ebp - 0x14]
call fcn.1000d1fe
push 0x1002e9cb
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], ebx
call fcn.1000d1fe
mov esi, dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsstr]
lea eax, [ebp]
push 0x10030140
push eax
mov byte [ebp - 4], 1
call esi
pop ecx
test eax, eax
lea eax, [ebp]
pop ecx
je 0x1001046f
push str.___1_
push eax
call esi
pop ecx
pop ecx
test eax, eax
je 0x10010659
mov byte [eax], bl
lea ecx, [ebp - 0x10]
lea eax, [ebp]
push eax
call fcn.1000d1fe
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x14]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x1001043a
call fcn.1000d608
lea ecx, [ebp]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10010440
sub ecx, edx
dec ecx
cmp ecx, 0x104
jae 0x100106c4
lea eax, [ebp + 1]
mov byte [ebp + ecx], bl
push eax
lea ecx, [ebp - 0x10]
call fcn.1000d1fe
mov byte [ebp - 4], 3
jmp 0x10010519
push str.jp2launcher.exe
push eax
call esi
pop ecx
pop ecx
test eax, eax
je 0x10010659
mov byte [eax], bl
lea ecx, [ebp - 0x10]
lea eax, [ebp]
push eax
call fcn.1000d1fe
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x14]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x100104af
call fcn.1000d608
push str.javaws.exe_
lea ecx, [ebp - 0x10]
call fcn.1000d1fe
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x14]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x100104dc
call fcn.1000d608
lea eax, [ebp + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000d1fe
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x18]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10010508
call fcn.1000d608
push str.javaws.exe
lea ecx, [ebp - 0x10]
call fcn.1000d1fe
mov byte [ebp - 4], 7
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10010535
call fcn.1000d608
push str.__nocodebase
lea ecx, [ebp - 0x10]
call fcn.1000d1fe
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x14]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10010562
call fcn.1000d608
push 0x1003018c
lea ecx, [ebp - 0x10]
call fcn.1000d1fe
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x14]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x1001058f
call fcn.1000d608
push edi
lea ecx, [ebp - 0x10]
call fcn.1000d1fe
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x14]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x100105b8
call fcn.1000d608
push 0x10030190
lea ecx, [ebp - 0x10]
call fcn.1000d1fe
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x14]
call fcn.1000d2a7
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x100105e5
call fcn.1000d608
push 0x44
pop esi
push esi
lea eax, [ebp - 0x74]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
mov dword [ebp - 0x74], esi
add esp, 0xc
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x10010609
mov ecx, esi
call fcn.1000d419
mov ebx, eax
mov edi, dword [ebp - 0x18]
test edi, edi
je 0x1001061b
mov ecx, edi
call fcn.1000d419
xor edx, edx
jmp 0x1001061f
xor edx, edx
mov eax, edx
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x74]
push ecx
push edx
push edx
push edx
push edx
push edx
push edx
push ebx
push eax
call fcn.10012c4f
add esp, 0x28
neg eax
sbb ebx, ebx
and ebx, 0xfffffff9
test edi, edi
je 0x10010649
mov ecx, edi
call fcn.1000d608
test esi, esi
je 0x10010654
mov ecx, esi
call fcn.1000d608
lea eax, [ebx + 7]
jmp 0x100106a1
mov esi, dword [ebp - 0x18]
or edi, 0xffffffff
test esi, esi
je 0x1001067e
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
jne 0x1001067e
mov ecx, esi
call fcn.1000d62f
push 0xc
push esi
call fcn.10012c4f
pop ecx
pop ecx
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x1001069e
lock xadd dword [esi + 8], edi
dec edi
jne 0x1001069e
mov ecx, esi
call fcn.1000d62f
push 0xc
push esi
call fcn.10012c4f
pop ecx
pop ecx
push 6
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x104]
xor ecx, ebp
call fcn.100111d2
add ebp, 0x108
leave
ret
call fcn.10012c4f
int3