Function at 0x140002920
Capabilities:
Link many functions at runtime
Query or enumerate registry value

Disassembly:
push r13
push r14
push r15
mov eax, 0x2150
call fcn.1400093e0
sub rsp, rax
mov qword [rsp + 0x130], 0xfffffffffffffffe
mov qword [rsp + 0x2170], rbx
mov qword [rsp + 0x2178], rsi
mov qword [rsp + 0x2180], rdi
mov qword [rsp + 0x2188], r12
mov rax, qword [0x1400111a0]
xor rax, rsp
mov qword [rsp + 0x2140], rax
mov rdi, rdx
mov r13d, ecx
call fcn.140005798
xor ebx, ebx
mov edx, ebx
test eax, eax
setne dl
mov dword [rsp + 0x58], edx
mov dword [rsp + 0x74], ebx
mov dword [rsp + 0x84], ebx
mov dword [rsp + 0x78], ebx
mov dword [rsp + 0x5c], ebx
mov dword [rsp + 0x7c], ebx
mov r14d, ebx
mov dword [rsp + 0x60], ebx
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x80], ebx
mov r12d, ebx
lea eax, [rbx + 1]
mov r15d, eax
cmp r13d, eax
jle 0x140001ab9
lea r14, [rdi + 8]
lea rdi, str._new
mov rsi, qword [r14]
mov ecx, 5
repe cmpsw word [rsi], word [rdi]
jne 0x140001719
mov dword [rsp + 0x58], eax
jmp 0x14000186b
lea rdi, str._old
mov rsi, qword [r14]
mov ecx, 5
repe cmpsw word [rsi], word [rdi]
jne 0x140001747
call fcn.140005798
mov ecx, ebx
test eax, eax
setne cl
mov dword [rsp + 0x58], ecx
mov eax, 1
jmp 0x14000186b
lea rdi, str._high
mov rsi, qword [r14]
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
jne 0x140001764
mov dword [rsp + 0x74], eax
jmp 0x14000186b
lea rdi, str._jpisetup
mov rsi, qword [r14]
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne 0x140001784
mov dword [rsp + 0x84], eax
jmp 0x14000186b
lea rdi, str._settreatas
mov rsi, qword [r14]
mov ecx, 0xc
repe cmpsw word [rsi], word [rdi]
jne 0x1400017a1
mov dword [rsp + 0x78], eax
jmp 0x14000186b
lea rdi, str._fullreg
mov rsi, qword [r14]
mov ecx, 9
repe cmpsw word [rsi], word [rdi]
jne 0x1400017be
mov dword [rsp + 0x5c], eax
jmp 0x14000186b
lea rdi, str._regdeploy
mov rsi, qword [r14]
mov ecx, 0xb
repe cmpsw word [rsi], word [rdi]
jne 0x1400017db
mov dword [rsp + 0x7c], eax
jmp 0x14000186b
lea rdi, str._register
mov rsi, qword [r14]
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne 0x1400017f5
mov dword [rsp + 0x60], eax
jmp 0x14000186b
lea rdi, str._disablewebjava
mov rsi, qword [r14]
mov ecx, 0x10
repe cmpsw word [rsi], word [rdi]
jne 0x14000180f
mov dword [rsp + 0x70], eax
jmp 0x14000186b
lea rdi, str._forceinstall
mov rsi, qword [r14]
mov ecx, 0xe
repe cmpsw word [rsi], word [rdi]
jne 0x140001829
mov dword [rsp + 0x68], eax
jmp 0x14000186b
lea rdi, str._nohint
mov rsi, qword [r14]
mov ecx, 8
repe cmpsw word [rsi], word [rdi]
jne 0x140001846
mov dword [rsp + 0x80], eax
jmp 0x14000186b
lea rdi, str._doHKCUSSVSetup
mov rsi, qword [r14]
mov ecx, 0x10
repe cmpsw word [rsi], word [rdi]
jne 0x1400028e5
mov r12d, eax
cmp r13d, 2
jne 0x1400028e5
add r15d, eax
add r14, 8
cmp r15d, r13d
jl 0x1400016fc
test r12d, r12d
je 0x140001ab4
mov esi, eax
mov dword [rsp + 0x58], eax
lea rcx, [rsp + 0xa8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREOracleJavaDeploy
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400018c2
mov eax, 1
jmp 0x1400028e5
mov dword [rsp + 0x60], 0x800
mov word [rsp + 0x1140], bx
xor edx, edx
mov r8d, 0xffe
lea rcx, [rsp + 0x1142]
call sub.MSVCR100.dll_memset
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x28], rdx
lea rax, [rsp + 0x1140]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xb8]
xor r8d, r8d
lea rdx, str.deployment.home.bin.ssvagent
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0xa8]
test eax, eax
je 0x140001932
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400018b8
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [rsp + 0x1140]
lea rcx, [rsp + 0x88]
call fcn.140002a54
nop
lea rdx, [0x14000b980]
lea rcx, [rsp + 0x90]
call fcn.1400029dc
nop
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x88]
call fcn.140005544
nop
mov rax, qword [rsp + 0x90]
or r12d, 0xffffffff
test rax, rax
je 0x1400019c4
mov ecx, r12d
lock xadd dword [rax + 0x10], ecx
add ecx, r12d
jne 0x1400019c4
mov rdi, qword [rsp + 0x90]
cmp qword [rdi], rbx
je 0x1400019ad
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400019bb
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
nop
mov rdi, qword [rsp + 0x88]
test rdi, rdi
je 0x1400019d6
mov rcx, qword [rdi]
jmp 0x1400019d9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r13, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140001a47
lea rdx, [0x14000b990]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001a13
xor edx, edx
xor ecx, ecx
call rax
mov esi, ebx
test eax, eax
setne sil
mov dword [rsp + 0x58], esi
lea rdx, [0x14000b9b0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001a47
xor edx, edx
xor ecx, ecx
call rax
test esi, esi
je 0x140001a41
test eax, eax
je 0x140001a41
mov esi, 1
mov dword [rsp + 0x58], esi
jmp 0x140001a47
mov esi, ebx
mov dword [rsp + 0x58], ebx
jmp 0x140001a60
test r13, r13
je 0x140001a6f
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
test rdi, rdi
je 0x140001aad
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140001aad
mov rdi, qword [rsp + 0x88]
cmp qword [rdi], rbx
je 0x140001a97
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001aa5
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov eax, esi
jmp 0x1400028e5
mov r14d, dword [rsp + 0x60]
mov r15d, eax
mov word [rsp + 0x140], bx
xor edx, edx
mov r8d, 0xffe
lea rcx, [rsp + 0x142]
call sub.MSVCR100.dll_memset
mov r9d, 0x800
lea r8, [rsp + 0x140]
mov r13d, 1
mov edx, r13d
xor ecx, ecx
call fcn.140006b68
test eax, eax
jne 0x140001b03
mov eax, r13d
jmp 0x1400028e5
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x48]
call fcn.140002a54
nop
lea rdx, str.deploy.dll
lea rcx, [rsp + 0xb0]
call fcn.140002a54
nop
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x48]
call fcn.140005544
nop
mov rax, qword [rsp + 0xb0]
or r12d, 0xffffffff
test rax, rax
je 0x140001b88
mov ecx, r12d
lock xadd dword [rax + 0x10], ecx
add ecx, r12d
jne 0x140001b88
mov rdi, qword [rsp + 0xb0]
cmp qword [rdi], rbx
je 0x140001b72
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001b80
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140001b97
mov rcx, qword [rdi]
jmp 0x140001b9a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rsi, rax
test rax, rax
jne 0x140001bf0
test rdi, rdi
je 0x140001afb
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140001afb
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x140001bd5
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001be3
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x140001afb
cmp dword [rsp + 0x70], ebx
je 0x140001d0f
lea rdx, str.UnregisterDeployEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001c11
jmp 0x140001ba8
mov dword [rsp + 0xf8], 0x38
mov dword [rsp + 0xfc], 4
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0x104], 2
mov dword [rsp + 0x10c], r13d
xor edx, edx
cmp dword [rsp + 0x80], ebx
je 0x140001c6a
xor ecx, ecx
jmp 0x140001c72
lea rcx, [rsp + 0xf8]
call rax
mov r13d, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r13d, r13d
je 0x140001cc7
test rdi, rdi
je 0x140001cc0
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140001cc0
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x140001caa
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001cb8
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
xor eax, eax
jmp 0x1400028e5
test rdi, rdi
je 0x1400018b8
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x1400018b8
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x140001cf4
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001d02
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x1400018b8
cmp dword [rsp + 0x7c], ebx
jne 0x140001d1e
test r14d, r14d
je 0x140001dab
lea rdx, str.RegisterDeployEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001d38
jmp 0x140001ba8
xor edx, edx
cmp dword [rsp + 0x68], ebx
je 0x140001d94
mov dword [rsp + 0xc0], 0x38
mov dword [rsp + 0xc4], 4
mov qword [rsp + 0xd8], rbx
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0xcc], 1
mov dword [rsp + 0xd4], r13d
lea rcx, [rsp + 0xc0]
jmp 0x140001d96
xor ecx, ecx
call rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r14d, r14d
jne 0x140001dab
jmp 0x140001c85
mov r9d, 0x400
lea r8, [rsp + 0x140]
mov edx, r13d
xor ecx, ecx
call fcn.140006b68
cmp eax, r13d
jne 0x1400028a7
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140002a54
nop
cmp dword [rsp + 0x58], ebx
je 0x140001e35
lea rdx, str.jp2ssv.dll
lea rcx, [rsp + 0xa0]
call fcn.140002a54
nop
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x50]
call fcn.140005544
nop
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x140001ea8
mov ecx, r12d
lock xadd dword [rax + 0x10], ecx
add ecx, r12d
jne 0x140001ea3
mov rdi, qword [rsp + 0xa0]
jmp 0x140001e7f
lea rdx, str._ssv.dll
lea rcx, [rsp + 0x98]
call fcn.140002a54
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x50]
call fcn.140005544
nop
mov rax, qword [rsp + 0x98]
test rax, rax
je 0x140001ea8
mov ecx, r12d
lock xadd dword [rax + 0x10], ecx
add ecx, r12d
jne 0x140001ea3
mov rdi, qword [rsp + 0x98]
cmp qword [rdi], rbx
je 0x140001e8d
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001e9b
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
test rsi, rsi
je 0x140001eb7
mov rcx, qword [rsi]
jmp 0x140001eba
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r13, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14000283c
mov r15d, ebx
cmp dword [rsp + 0x74], ebx
je 0x1400024a2
cmp dword [rsp + 0x78], ebx
jne 0x140001eed
test r14d, r14d
je 0x14000202c
lea rdx, str.UpdateTreatAsKey
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001f95
test rsi, rsi
je 0x140001f4b
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x140001f41
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x140001f2b
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001f39
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140001f8b
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140001f86
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x140001f70
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001f7e
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
call rax
test r14d, r14d
jne 0x14000202c
test rsi, rsi
je 0x140001fe5
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x140001fdb
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x140001fc5
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140001fd3
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140002025
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140002020
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x14000200a
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140002018
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
xor eax, eax
jmp 0x1400028e5
lea rdx, [0x14000baa0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000204f
xor ecx, ecx
call rax
test eax, eax
mov r14d, 1
jne 0x140002052
mov r14d, ebx
call fcn.140005ac8
test eax, eax
jne 0x140002064
test r14d, r14d
je 0x140002113
lea rdx, [0x14000bac0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14000210c
test rsi, rsi
je 0x1400020c2
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x1400020b8
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x1400020a2
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400020b0
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140002102
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x1400020fd
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x1400020e7
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400020f5
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
xor edx, edx
lea ecx, [rdx + 1]
call rax
mov r14d, dword [rsp + 0x58]
test r14d, r14d
jne 0x1400021d3
lea rdx, str.IsSSVEnabledInMozilla
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x1400021c9
test rsi, rsi
je 0x14000217f
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x140002175
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x14000215f
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000216d
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x1400021bf
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x1400021ba
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x1400021a4
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400021b2
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
call rax
test eax, eax
je 0x14000227d
lea rdx, str.RemoveAllMozillaJavaPlugins
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14000227b
test rsi, rsi
je 0x140002231
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x140002227
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x140002211
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000221f
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140002271
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x14000226c
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x140002256
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140002264
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
call rax
cmp dword [rsp + 0x84], ebx
je 0x140002481
mov ecx, ebx
cmp r14d, 1
sete cl
call fcn.140001230
test eax, eax
je 0x14000232f
test rsi, rsi
je 0x1400022e5
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x1400022db
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x1400022c5
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400022d3
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140002325
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140002320
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x14000230a
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140002318
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
mov rcx, r13
cmp dword [rsp + 0x5c], ebx
lea rdx, [0x14000bb20]
je 0x140002346
lea rdx, [0x14000bb48]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x1400023e4
test rsi, rsi
je 0x14000239a
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x140002390
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x14000237a
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140002388
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x1400023da
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x1400023d5
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x1400023bf
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400023cd
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
xor edx, edx
xor ecx, ecx
call rax
test eax, eax
jne 0x140002481
test rsi, rsi
je 0x140002437
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x14000242d
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x140002417
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140002425
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140002477
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140002472
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x14000245c
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000246a
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
test r14d, r14d
je 0x140002490
call fcn.140001200
jmp 0x14000283c
lea rcx, [rsp + 0x140]
call fcn.1400014b0
jmp 0x14000283c
lea rdx, str.RegKeyBranchNeedsUpdating
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14000254a
test rsi, rsi
je 0x140002500
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x1400024f6
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x1400024e0
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400024ee
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140002540
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x14000253b
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x140002525
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140002533
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
xor ecx, ecx
call rax
mov r14d, eax
lea rdx, str.CheckMozJavaPlugins
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x1400025f9
test rsi, rsi
je 0x1400025af
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x1400025a5
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x14000258f
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000259d
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x1400025ef
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x1400025ea
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x1400025d4
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400025e2
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
test r14d, r14d
jne 0x14000276d
call rax
test eax, eax
jne 0x14000276d
lea rdx, str.RedirectAllStaticVersionKeys
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x1400026b4
test rsi, rsi
je 0x14000266a
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x140002660
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x14000264a
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140002658
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x1400026aa
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x1400026a5
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x14000268f
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000269d
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
xor edx, edx
xor ecx, ecx
call rax
lea rdx, str.RedirectSelectedStaticVersionKeys
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140002762
test rsi, rsi
je 0x140002718
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x14000270e
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x1400026f8
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140002706
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140002758
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140002753
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x14000273d
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000274b
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
xor edx, edx
xor ecx, ecx
call rax
jmp 0x140002833
lea rdx, str.RunBrokerProcess
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140002815
test rsi, rsi
je 0x1400027cb
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x1400027c1
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x1400027ab
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400027b9
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x50], rbx
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x14000280b
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x140002806
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x1400027f0
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400027fe
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov qword [rsp + 0x48], rbx
mov eax, 1
jmp 0x1400028e5
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, r14d
mov r8d, 1
mov edx, dword [rsp + 0x58]
xor ecx, ecx
call rax
mov r15d, ebx
test eax, eax
sete r15b
jmp 0x140002858
test r13, r13
je 0x140002867
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
test rsi, rsi
je 0x1400028a7
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
add eax, r12d
jne 0x1400028a2
mov rdi, qword [rsp + 0x50]
cmp qword [rdi], rbx
je 0x14000288c
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000289a
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x1400028e2
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
add eax, r12d
jne 0x1400028e2
mov rdi, qword [rsp + 0x48]
cmp qword [rdi], rbx
je 0x1400028cc
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400028da
call sub.MSVCR100.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, rdi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void____ptr64_
mov eax, r15d
mov rcx, qword [rsp + 0x2140]
xor rcx, rsp
call fcn.1400093b0
lea r11, [rsp + 0x2150]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov rdx, qword [sym.imp.MSVCR100.dll___wargv]
mov rax, qword [sym.imp.MSVCR100.dll___argc]
mov rdx, qword [rdx]
mov ecx, dword [rax]
jmp 0x140001650