Function at 0x100110d7
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
sub esp, 0x104
lea ebp, [esp - 4]
mov eax, dword [0x10022df0]
xor eax, ebp
mov dword [ebp + 0x104], eax
push 0x68
mov eax, 0x1001647a
call fcn.1001365e
mov edi, dword [ebp + 0x110]
lea eax, [ebp - 0x1c]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.JNLPFileShellOpenCommand
push SysReAllocString
mov dword [ebp - 0x20], 0x104
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x100113f9
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x1c]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
jne 0x100113f9
push 0x1001aaff
lea ecx, [ebp - 0x14]
call fcn.1000e5aa
push 0x1001ab06
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], ebx
call fcn.1000e5aa
mov esi, dword [sym.imp.msvcr100.dll__mbsstr]
lea eax, [ebp]
push 0x1001ac88
push eax
mov byte [ebp - 4], 1
call esi
pop ecx
test eax, eax
pop ecx
lea eax, [ebp]
je 0x100111f6
push str.___1_
push eax
call esi
pop ecx
pop ecx
cmp eax, ebx
je 0x100113e1
mov byte [eax], bl
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x100111ce
call fcn.1000e7cb
lea eax, [ebp]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x100111d4
sub eax, edx
mov byte [ebp + eax - 1], bl
lea eax, [ebp + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
mov byte [ebp - 4], 3
jmp 0x100112a0
push str.jp2launcher.exe
push eax
call esi
pop ecx
pop ecx
cmp eax, ebx
je 0x100113e1
mov byte [eax], bl
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x10011236
call fcn.1000e7cb
push str.javaws.exe_
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x10011263
call fcn.1000e7cb
lea eax, [ebp + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x1001128f
call fcn.1000e7cb
push str.javaws.exe
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
mov byte [ebp - 4], 7
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x100112bc
call fcn.1000e7cb
push str.__nocodebase
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x100112e9
call fcn.1000e7cb
push 0x1001acd4
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x10011316
call fcn.1000e7cb
push edi
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x1001133f
call fcn.1000e7cb
push 0x1001acd8
lea ecx, [ebp - 0x10]
call fcn.1000e5aa
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
call fcn.1000e809
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 1
cmp ecx, ebx
je 0x1001136c
call fcn.1000e7cb
push 0x44
pop esi
push esi
lea eax, [ebp - 0x74]
push ebx
push eax
call sub.msvcr100.dll_memset
mov ecx, dword [ebp - 0x14]
add esp, 0xc
mov dword [ebp - 0x74], esi
cmp ecx, ebx
je 0x10011390
call fcn.1000e489
mov esi, eax
jmp 0x10011392
xor esi, esi
mov edi, dword [ebp - 0x18]
cmp edi, ebx
je 0x100113a2
mov ecx, edi
call fcn.1000e489
jmp 0x100113a4
xor eax, eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x74]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push esi
push eax
call fcn.1000c752
add esp, 0x28
mov esi, eax
neg esi
sbb esi, esi
and esi, 0xfffffff9
cmp edi, ebx
je 0x100113d0
mov ecx, edi
call fcn.1000e7cb
mov ecx, dword [ebp - 0x14]
cmp ecx, ebx
je 0x100113dc
call fcn.1000e7cb
lea eax, [esi + 7]
jmp 0x100113fc
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
je 0x100113ed
call fcn.1000e7cb
mov ecx, dword [ebp - 0x14]
cmp ecx, ebx
je 0x100113f9
call fcn.1000e7cb
push 6
pop eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x104]
xor ecx, ebp
call fcn.10013502
add ebp, 0x108
leave
ret