Function at 0x1400014bc
Capabilities:
Link many functions at runtime
Query or enumerate registry value

Disassembly:
push rbx
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___wargv]
mov rbx, qword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___argc]
mov rdx, rbx
mov ecx, dword [rax]
add rsp, 0x20
pop rbx
jmp 0x1400014bc
push r13
push r14
push r15
mov eax, 0x2110
call fcn.1400085b0
sub rsp, rax
mov qword [rsp + 0xf8], 0xfffffffffffffffe
mov qword [rsp + 0x2130], rsi
mov qword [rsp + 0x2138], rdi
mov qword [rsp + 0x2140], r12
mov rax, qword [0x140017018]
xor rax, rsp
mov qword [rsp + 0x2100], rax
mov rsi, rdx
mov r13d, ecx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov edi, 1
or eax, edi
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
call fcn.140004de4
xor r12d, r12d
test eax, eax
setne r12b
and dword [rsp + 0x70], 0
and dword [rsp + 0x60], 0
and dword [rsp + 0x78], 0
and dword [rsp + 0x50], 0
and dword [rsp + 0x68], 0
xor r15d, r15d
and dword [rsp + 0x80], r15d
and dword [rsp + 0x48], r15d
and dword [rsp + 0x84], r15d
and dword [rsp + 0x40], r15d
mov r14d, edi
cmp r13d, edi
jle 0x140001870
add rsi, 8
lea rdx, str._new
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x140001591
mov r12d, edi
jmp 0x1400016a7
lea rdx, str._old
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x1400015b7
call fcn.140004de4
xor r12d, r12d
test eax, eax
setne r12b
jmp 0x1400016a7
lea rdx, str._high
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x1400015d3
mov dword [rsp + 0x70], edi
jmp 0x1400016a7
lea rdx, str._jpisetup
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x1400015ef
mov dword [rsp + 0x60], edi
jmp 0x1400016a7
lea rdx, str._settreatas
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x14000160b
mov dword [rsp + 0x78], edi
jmp 0x1400016a7
lea rdx, str._fullreg
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x140001627
mov dword [rsp + 0x50], edi
jmp 0x1400016a7
lea rdx, str._regdeploy
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x140001640
mov dword [rsp + 0x68], edi
jmp 0x1400016a7
lea rdx, str._register
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x140001658
mov r15d, edi
jmp 0x1400016a7
lea rdx, str._disablewebjava
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x140001674
mov dword [rsp + 0x80], edi
jmp 0x1400016a7
lea rdx, str._forceinstall
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x14000168d
mov dword [rsp + 0x48], edi
jmp 0x1400016a7
lea rdx, str._nohint
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
jne 0x1400016ad
mov dword [rsp + 0x84], edi
mov eax, dword [rsp + 0x40]
jmp 0x1400016d4
lea rdx, str._doHKCUSSVSetup
mov rcx, qword [rsi]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
mov eax, edi
jne 0x140001e7b
mov dword [rsp + 0x40], eax
cmp r13d, 2
jne 0x140001e7b
add r14d, edi
add rsi, 8
cmp r14d, r13d
jl 0x140001576
test eax, eax
je 0x140001870
mov esi, edi
mov dword [rsp + 0x40], edi
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREOracleJavaDeploy
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140001724
mov eax, edi
jmp 0x140001e7b
mov dword [rsp + 0x50], 0x800
xor edx, edx
mov r8d, 0x1000
lea rcx, [rsp + 0x1100]
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1100]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
xor r8d, r8d
lea rdx, str.deployment.home.bin.ssvagent
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x78]
test eax, eax
je 0x140001783
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000171d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [rsp + 0x1100]
lea rcx, [rsp + 0x70]
call fcn.1400020b8
nop
lea rdx, [0x14000d570]
lea rcx, [rsp + 0x48]
call fcn.140002040
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.1400022d8
nop
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x1400017d8
mov rcx, qword [rax]
jmp 0x1400017da
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140001845
lea rdx, [0x14000d580]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001814
xor edx, edx
xor ecx, ecx
call rax
xor esi, esi
test eax, eax
setne sil
mov dword [rsp + 0x40], esi
lea rdx, [0x14000d5a0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001845
xor edx, edx
xor ecx, ecx
call rax
test esi, esi
je 0x14000183f
test eax, eax
je 0x14000183f
mov esi, edi
mov dword [rsp + 0x40], edi
jmp 0x140001845
xor esi, esi
mov dword [rsp + 0x40], esi
jmp 0x140001850
test r14, r14
je 0x14000185f
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rcx, [rsp + 0x70]
call fcn.140004c94
mov eax, esi
jmp 0x140001e7b
mov r14d, edi
xor edx, edx
mov r8d, 0x1000
lea rcx, [rsp + 0x100]
call sub.VCRUNTIME140.dll_memset
mov r9d, 0x800
lea r8, [rsp + 0x100]
mov edx, edi
xor ecx, ecx
call fcn.140005a24
test eax, eax
je 0x14000171d
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x40]
call fcn.1400020b8
nop
lea rdx, str.deploy.dll
lea rcx, [rsp + 0x58]
call fcn.1400020b8
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.1400022d8
nop
lea rcx, [rsp + 0x58]
call fcn.140004c94
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x1400018f5
mov rcx, qword [rax]
jmp 0x1400018f7
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rsi, rax
test rax, rax
jne 0x140001914
lea rcx, [rsp + 0x40]
call fcn.140004c94
jmp 0x14000171d
cmp dword [rsp + 0x80], 0
je 0x1400019bf
lea rdx, str.UnregisterDeployEx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001905
mov dword [rsp + 0x88], 0x38
mov dword [rsp + 0x8c], 4
and dword [rsp + 0x98], 0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa0], xmm0
and dword [rsp + 0xb0], 0
and dword [rsp + 0xb4], 0
and qword [rsp + 0xb8], 0
mov dword [rsp + 0x94], 2
mov dword [rsp + 0x9c], edi
xor edx, edx
cmp dword [rsp + 0x84], edx
je 0x14000199b
xor ecx, ecx
jmp 0x1400019a3
lea rcx, [rsp + 0x88]
call rax
mov r14d, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r14d, r14d
jne 0x140001a59
jmp 0x140001905
cmp dword [rsp + 0x68], 0
jne 0x1400019cf
test r15d, r15d
je 0x140001a60
lea rdx, str.RegisterDeployEx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001905
xor edx, edx
cmp dword [rsp + 0x48], edx
je 0x140001a47
mov dword [rsp + 0xc0], 0x38
mov dword [rsp + 0xc4], 4
and dword [rsp + 0xd0], edx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xd8], xmm0
and dword [rsp + 0xe8], edx
and dword [rsp + 0xec], edx
and qword [rsp + 0xf0], rdx
mov dword [rsp + 0xcc], edi
mov dword [rsp + 0xd4], edi
lea rcx, [rsp + 0xc0]
jmp 0x140001a49
xor ecx, ecx
call rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r15d, r15d
jne 0x140001a60
xor edi, edi
jmp 0x140001905
mov r9d, 0x400
lea r8, [rsp + 0x100]
mov edx, edi
xor ecx, ecx
call fcn.140005a24
cmp eax, edi
jne 0x140001e6e
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x48]
call fcn.1400020b8
nop
lea rcx, [rsp + 0x58]
test r12d, r12d
je 0x140001abb
lea rdx, str.jp2ssv.dll
call fcn.1400020b8
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x48]
call fcn.1400022d8
nop
jmp 0x140001ad8
lea rdx, str._ssv.dll
call fcn.1400020b8
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x48]
call fcn.1400022d8
nop
lea rcx, [rsp + 0x58]
call fcn.140004c94
nop
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x140001af2
mov rcx, qword [rax]
jmp 0x140001af4
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rsi, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140001e48
xor r14d, r14d
cmp dword [rsp + 0x70], r14d
je 0x140001d10
cmp dword [rsp + 0x78], r14d
jne 0x140001b25
test r15d, r15d
je 0x140001b79
lea rdx, str.UpdateTreatAsKey
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001b56
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
call rax
test r15d, r15d
jne 0x140001b79
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
xor eax, eax
jmp 0x140001e7b
lea rdx, [0x14000d690]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001b9b
xor ecx, ecx
call rax
test eax, eax
je 0x140001b9b
mov r15d, edi
jmp 0x140001b9e
xor r15d, r15d
call fcn.140004fac
test eax, eax
jne 0x140001bac
test r15d, r15d
je 0x140001be3
lea rdx, [0x14000d6b0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001bdd
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
xor edx, edx
mov ecx, edi
call rax
test r12d, r12d
jne 0x140001c1f
lea rdx, str.IsSSVEnabledInMozilla
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001c19
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
call rax
test eax, eax
je 0x140001c52
lea rdx, str.RemoveAllMozillaJavaPlugins
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001c50
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
call rax
cmp dword [rsp + 0x60], r14d
je 0x140001cef
xor ecx, ecx
cmp r12d, edi
sete cl
call fcn.140001170
test eax, eax
je 0x140001c8a
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
mov rcx, rsi
cmp dword [rsp + 0x50], r14d
lea rdx, [0x14000d710]
je 0x140001ca2
lea rdx, [0x14000d738]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001cc9
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
xor edx, edx
xor ecx, ecx
call rax
test eax, eax
jne 0x140001cef
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
test r12d, r12d
je 0x140001cfe
call fcn.140001394
jmp 0x140001e48
lea rcx, [rsp + 0x100]
call fcn.1400013c0
jmp 0x140001e48
lea rdx, str.RegKeyBranchNeedsUpdating
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001d41
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
xor ecx, ecx
call rax
mov r14d, eax
lea rdx, str.CheckMozJavaPlugins
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001d79
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
test r14d, r14d
jne 0x140001df4
call rax
test eax, eax
jne 0x140001df4
lea rdx, str.RedirectAllStaticVersionKeys
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001db5
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
xor edx, edx
xor ecx, ecx
call rax
lea rdx, str.RedirectSelectedStaticVersionKeys
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001dec
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
xor edx, edx
xor ecx, ecx
call rax
jmp 0x140001e3f
lea rdx, str.RunBrokerProcess
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001e22
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, edi
jmp 0x140001e7b
and qword [rsp + 0x30], 0
and dword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
mov r9d, r14d
mov r8d, edi
mov edx, r12d
xor ecx, ecx
call rax
xor r14d, r14d
test eax, eax
sete r14b
jmp 0x140001e54
test rsi, rsi
je 0x140001e63
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rcx, [rsp + 0x48]
call fcn.140004c94
nop
lea rcx, [rsp + 0x40]
call fcn.140004c94
mov eax, r14d
mov rcx, qword [rsp + 0x2100]
xor rcx, rsp
call fcn.140008620
lea r11, [rsp + 0x2110]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov r12, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
ret