Function at 0x6d2d7480
Capabilities:
Check http status code
Connect to http server
Create http request
Delete registry value
Parse url
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
lea ebp, [esp - 0x1120]
mov eax, 0x1120
call fcn.6d2d9470
push 0xfffffffffffffffe
push 0x6d2dfc60
push 0x6d2d943c
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x6d2e54cc]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp + 0x111c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0x1128]
mov dword [ebp - 0x44], ebx
mov eax, dword [ebp + 0x112c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp + 0x1130]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp + 0x1134]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp + 0x1138]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp + 0x113c]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp + 0x1140]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp + 0x1150]
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp + 0x1154]
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp + 0x1158]
mov dword [ebp - 0x60], edx
mov eax, dword [ebp + 0x115c]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp + 0x1160]
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp + 0x1164]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp + 0x1168]
mov dword [ebp - 0x20], eax
mov byte [ebp + 0x1114], 0
xor eax, eax
mov dword [ebp + 0x1115], eax
mov word [ebp + 0x1119], ax
mov byte [ebp + 0x111b], al
mov byte [ebp + 0x10f0], al
mov dword [ebp + 0x10f1], eax
mov dword [ebp + 0x10f5], eax
mov byte [ebp + 0x10f9], al
mov byte [ebp + 0x1108], al
mov dword [ebp + 0x1109], eax
mov dword [ebp + 0x110d], eax
mov byte [ebp + 0x1111], al
mov byte [ebp + 0x10e4], al
mov dword [ebp + 0x10e5], eax
mov dword [ebp + 0x10e9], eax
mov byte [ebp + 0x10ed], al
push ebx
call dword [sym.imp.kernel32.dll_lstrlenA]
test eax, eax
je 0x6d2d86ff
push ebx
call fcn.6d2d4d10
add esp, 4
test eax, eax
je 0x6d2d86ff
cmp dword [0x6d2e575c], 0
jne 0x6d2d7773
push 0x14
push 0x6d2e5748
push 0x14
push 0x6d2e5734
call fcn.6d2d4a70
mov dword [ebp - 0x2c], 0x20
lea ecx, [ebp - 0x2c]
push ecx
push 0x6d2e5714
push str.VisitorId
push 0
call fcn.6d2d5c10
add esp, 0x20
test eax, eax
je 0x6d2d7614
cmp dword [ebp - 0x2c], 0x10
jae 0x6d2d772d
push 0
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
mov esi, eax
mov edi, edx
call dword [sym.imp.kernel32.dll_GetCurrentProcessId]
push eax
push edi
push esi
call dword [sym.imp.kernel32.dll_GetTickCount]
push eax
push str._lx_lx_lx
lea edx, [ebp + 0x10c4]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea eax, [ebp + 0x10c4]
push eax
call dword [sym.imp.kernel32.dll_lstrlenA]
cmp eax, 0x10
jge 0x6d2d7684
lea ecx, [ebp + 0x10c4]
push ecx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov edx, 0x10
sub edx, eax
push edx
push str.ffffffff
lea eax, [ebp + 0x10c4]
push eax
call dword [sym.imp.MSVCR100.dll_strncat]
add esp, 0xc
lea eax, [ebp + 0x10c4]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x6d2d7690
sub eax, edx
shr eax, 1
push eax
lea ecx, [ebp + 0x10c4]
push ecx
push 0x6d2e5714
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0xc
lea eax, [ebp + 0x10c4]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x6d2d76c0
sub eax, edx
shr eax, 1
mov byte [eax + 0x6d2e5714], cl
mov edi, 0x6d2e5714
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x6d2d76d7
mov dx, word [0x6d2de920]
mov word [edi], dx
lea eax, [ebp + eax + 0x10c4]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x6d2d76f2
sub eax, ecx
mov esi, ecx
mov edi, 0x6d2e5714
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x6d2d7703
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x6d2e5714
push str.VisitorId
push 0
call fcn.6d2d4190
add esp, 0xc
lea eax, [ebp + 0x380]
push eax
call fcn.6d2d6650
add esp, 4
test eax, eax
je 0x6d2d7759
push 0x1e
lea ecx, [ebp + 0x380]
push ecx
push 0x6d2e56f4
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0xc
jmp 0x6d2d7769
push 0x6d2de91c
push 0x6d2e56f4
call dword [sym.imp.kernel32.dll_lstrcpyA]
mov dword [0x6d2e575c], 1
push 0x6d2db9cb
lea edx, [ebp + 0x580]
push edx
mov esi, dword [sym.imp.kernel32.dll_lstrcpyA]
call esi
push str.__xml_version_1.0__encoding_UTF_8_____request_
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f8
lea ecx, [ebp + 0x880]
push ecx
mov esi, dword [sym.imp.kernel32.dll_lstrcatA]
call esi
push str.sc_xml_ver
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2dcb74
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f0
lea edx, [ebp + 0x880]
push edx
call esi
push str.sc_xml_ver
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push ebx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [ebp - 0x2c], eax
push 0x6d2dc154
push ebx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
mov edi, eax
cmp dword [ebp - 0x20], 0
jne 0x6d2d7831
push str.suninstallstat
push 0x6d2dcc48
lea edx, [ebp + 0x1094]
push edx
jmp 0x6d2d7841
mov eax, dword [ebp - 0x20]
push eax
push 0x6d2dcc48
lea ecx, [ebp + 0x1094]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x6d2d786c
mov eax, edi
sub eax, ebx
mov dword [ebp - 0x2c], eax
inc edi
push edi
push 0x6d2dcc48
lea edx, [ebp + 0x1094]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push str.suninstallstatdev
lea eax, [ebp + 0x1094]
push eax
mov edi, dword [sym.imp.kernel32.dll_lstrcmpA]
call edi
push str.sunjfxinstallstatdev
lea ecx, [ebp + 0x1094]
push ecx
call edi
push 0x6d2de2f8
lea edx, [ebp + 0x880]
push edx
call esi
push str.reportsuiteid
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
lea edx, [ebp + 0x1094]
push edx
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f0
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.reportsuiteid
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f8
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.visitorid
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2e5714
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f0
lea edx, [ebp + 0x880]
push edx
call esi
push str.visitorid
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f8
lea edx, [ebp + 0x880]
push edx
call esi
push str.prop21
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2e5714
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f0
lea eax, [ebp + 0x880]
push eax
call esi
push str.prop21
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f4
lea edx, [ebp + 0x880]
push edx
call esi
push str.https:__
push ebx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x6d2d7a3e
push str.https:__sjremetrics.java.com
call dword [sym.imp.kernel32.dll_lstrlenA]
push eax
push str.https:__sjremetrics.java.com
push ebx
call dword [sym.imp.MSVCR100.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x6d2d7a17
push 0xb3e9fd
push 0x6d2deb48
lea eax, [ebp + 0x380]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp + 0x380]
push edx
push str.prop20
lea eax, [ebp + 0x880]
push eax
jmp 0x6d2d7a4f
push str.nonprodpasswd
lea ecx, [ebp + 0x380]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp + 0x380]
push edx
push str.prop20
lea eax, [ebp + 0x880]
push eax
jmp 0x6d2d7a4f
push str.nonhttpspasswd
push str.prop20
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
add esp, 0xc
push 0x6d2de2f8
lea edx, [ebp + 0x880]
push edx
call esi
push str.pagename
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
mov ebx, dword [ebp - 0x54]
push ebx
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f0
lea eax, [ebp + 0x880]
push eax
call esi
push str.pagename
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f4
lea edx, [ebp + 0x880]
push edx
call esi
push str.jfxic
push ebx
call edi
test eax, eax
je 0x6d2d7c2e
mov eax, dword [ebp - 0x30]
push eax
push str.evar2
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
add esp, 0xc
cmp dword [ebp - 0x24], 0
je 0x6d2d7b16
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
cmp eax, 2
jl 0x6d2d7b16
push 0x6d2deb00
mov eax, dword [ebp - 0x24]
push eax
call edi
test eax, eax
je 0x6d2d7b16
mov ecx, dword [ebp - 0x24]
push ecx
push str.evar3
lea edx, [ebp + 0x880]
push edx
jmp 0x6d2d7b27
push 0x6d2e56f4
push str.evar3
lea eax, [ebp + 0x880]
push eax
call fcn.6d2d4dd0
add esp, 0xc
push 0x6d2deaf4
push ebx
call edi
test eax, eax
jne 0x6d2d7c2e
cmp dword [ebp - 0x1c], eax
je 0x6d2d7b58
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.kernel32.dll_lstrlenA]
cmp eax, 2
jl 0x6d2d7b58
mov edx, dword [ebp - 0x1c]
jmp 0x6d2d7b70
push 0x6d2de91c
lea ecx, [ebp + 0x300]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp + 0x300]
push edx
push str.evar15
lea eax, [ebp + 0x880]
push eax
call fcn.6d2d4dd0
add esp, 0xc
call fcn.6d2d4e20
push eax
push 0x6d2deae8
lea ecx, [ebp + 0x10e4]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
lea edx, [ebp + 0x10e4]
push edx
push str.evar40
lea eax, [ebp + 0x880]
push eax
call fcn.6d2d4dd0
mov byte [ebp + 0x10fc], 0
xor eax, eax
mov dword [ebp + 0x10fd], eax
mov dword [ebp + 0x1101], eax
mov byte [ebp + 0x1105], al
mov ecx, dword [ebp + 0x114c]
push ecx
push 0x6d2deae8
lea edx, [ebp + 0x10fc]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp + 0x10fc]
push eax
push str.evar26
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
mov edx, dword [ebp - 0x68]
push edx
push str.evar27
lea eax, [ebp + 0x880]
push eax
call fcn.6d2d4dd0
mov ecx, dword [ebp - 0x5c]
push ecx
push str.evar28
lea edx, [ebp + 0x880]
push edx
call fcn.6d2d4dd0
add esp, 0x48
push 0x6d2de2f8
lea eax, [ebp + 0x880]
push eax
call esi
push str.evar4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f4
lea edx, [ebp + 0x880]
push edx
call esi
push str.i586
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f0
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.evar4
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f8
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.evar5
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2e5748
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f0
lea edx, [ebp + 0x880]
push edx
call esi
push str.evar5
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f8
lea edx, [ebp + 0x880]
push edx
call esi
push str.evar6
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2e5734
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f0
lea eax, [ebp + 0x880]
push eax
call esi
push str.evar6
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f4
lea edx, [ebp + 0x880]
push edx
call esi
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x6d2d7d90
mov dword [ebp - 0x40], 0x14
push 0x6d2de91c
lea eax, [ebp + 0x1080]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp + 0x1080]
push edx
push str.Method
push 0
call fcn.6d2d5c10
add esp, 0x10
jmp 0x6d2d7d9e
push eax
lea eax, [ebp + 0x1080]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x6d2de2f8
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.evar7
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f4
lea eax, [ebp + 0x880]
push eax
call esi
lea ecx, [ebp + 0x1080]
push ecx
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f0
lea eax, [ebp + 0x880]
push eax
call esi
push str.evar7
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f4
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d2de2f8
lea eax, [ebp + 0x880]
push eax
call esi
push str.evar8
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f4
lea edx, [ebp + 0x880]
push edx
call esi
mov eax, dword [ebp - 0x58]
push eax
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2de2f0
lea edx, [ebp + 0x880]
push edx
call esi
push str.evar8
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d2de2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d2deaf4
push ebx
call edi
test eax, eax
jne 0x6d2d80c8
push str.event6_event7
push str.events
lea edx, [ebp + 0x880]
push edx
call fcn.6d2d4dd0
add esp, 0xc
push 0x6d2db9cb
lea eax, [ebp + 0x680]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x200
lea ecx, [ebp + 0x680]
push ecx
push str.InstallStatus
call fcn.6d2d68f0
push 0
call fcn.6d2d6b00
add esp, 0x10
push str.reinstall
lea edx, [ebp + 0x680]
push edx
call edi
test eax, eax
je 0x6d2d86ff
push str.exists
lea eax, [ebp + 0x680]
push eax
call edi
mov ebx, dword [ebp + 0x1148]
test eax, eax
jne 0x6d2d7efc
cmp ebx, 0x643
je 0x6d2d7f04
cmp ebx, 0x642
je 0x6d2d7f04
cmp ebx, 0x666
jne 0x6d2d7f09
mov ebx, 0xffffff80
call fcn.6d2d6b80
test eax, eax
je 0x6d2d7f35
cmp ebx, 0x643
je 0x6d2d7f22
cmp ebx, 0x642
jne 0x6d2d7f35
call fcn.6d2d5030
mov ebx, eax
neg ebx
sbb ebx, ebx
add ebx, 0xffffff76
jmp 0x6d2d7f4f
test ebx, ebx
jne 0x6d2d7f4f
push str.decline
lea ecx, [ebp + 0x680]
push ecx
call edi
test eax, eax
jne 0x6d2d7fe7
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x1c]
push edx
push 0x2001f
push eax
push 0x6d2ddf5c
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6d2d7f8e
mov dword [ebp - 0x20], 1
push str.VisitorId
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 0
je 0x6d2d7f9b
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x1c]
push ecx
push 0x2001f
push eax
push 0x6d2ddf5c
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6d2d7fda
mov dword [ebp - 0x20], 1
push str.Method
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 0
je 0x6d2d7fe7
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp + 0x1108]
push edx
lea eax, [ebp + 0x10f0]
push eax
lea ecx, [ebp + 0x1114]
push ecx
push ebx
mov edx, dword [ebp - 0x30]
push edx
call fcn.6d2d6c40
lea eax, [ebp + 0x1108]
push eax
push str.evar17
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
lea edx, [ebp + 0x1114]
push edx
push str.evar18
lea eax, [ebp + 0x880]
push eax
call fcn.6d2d4dd0
lea ecx, [ebp + 0x10f0]
push ecx
push str.evar19
lea edx, [ebp + 0x880]
push edx
call fcn.6d2d4dd0
add esp, 0x38
push str.decline
lea eax, [ebp + 0x680]
push eax
call edi
test eax, eax
je 0x6d2d86ff
push ebx
push str._jre_d
lea ecx, [ebp + 0x580]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp + 0x680]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
test eax, eax
jle 0x6d2d80b0
push str.exists
lea eax, [ebp + 0x680]
push eax
call edi
test eax, eax
je 0x6d2d80b0
lea ecx, [ebp + 0x680]
push ecx
lea edx, [ebp + 0x580]
push edx
call esi
lea eax, [ebp + 0x580]
push eax
push str.products
lea ecx, [ebp + 0x880]
push ecx
jmp 0x6d2d8375
push 0x6d2dea34
push ebx
call edi
test eax, eax
jne 0x6d2d81af
xor edi, edi
mov dword [ebp - 0x1c], edi
lea edx, [ebp - 0x1c]
push edx
push 0x2001f
push edi
push 0x6d2ddf5c
push reloc.OLEAUT32.dll_SysReAllocString
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6d2d8114
mov edi, 1
push str.VisitorId
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x1c]
test edi, edi
je 0x6d2d811f
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1c]
push eax
push 0x2001f
push edi
push 0x6d2ddf5c
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6d2d8155
mov edi, 1
push str.Method
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x1c]
test edi, edi
je 0x6d2d8160
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.event11
push str.events
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
mov edx, dword [ebp + 0x1148]
push edx
push str._jre_d
lea eax, [ebp + 0x580]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp + 0x580]
push ecx
push str.products
lea edx, [ebp + 0x880]
push edx
call fcn.6d2d4dd0
add esp, 0x24
jmp 0x6d2d837d
push 0x6d2dea28
push ebx
call edi
test eax, eax
jne 0x6d2d81ca
push str.event1
push str.events
jmp 0x6d2d836e
push 0x6d2dea1c
push ebx
call edi
test eax, eax
jne 0x6d2d82c7
push str.event2
push str.events
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
add esp, 0xc
mov eax, dword [ebp + 0x1148]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
test eax, eax
jne 0x6d2d8212
push eax
push 0x6d2dea10
lea edx, [ebp + 0x380]
push edx
jmp 0x6d2d821f
push eax
push 0x6d2de1d8
lea eax, [ebp + 0x380]
push eax
call edi
add esp, 0xc
lea ecx, [ebp + 0x380]
push ecx
push str.evar9
lea edx, [ebp + 0x880]
push edx
call fcn.6d2d4dd0
add esp, 0xc
mov eax, dword [ebp + 0x1144]
test eax, eax
jne 0x6d2d8258
push eax
push 0x6d2dea10
lea eax, [ebp + 0x380]
push eax
jmp 0x6d2d8265
push eax
push 0x6d2de1d8
lea ecx, [ebp + 0x380]
push ecx
call edi
add esp, 0xc
lea edx, [ebp + 0x380]
push edx
push str.evar10
lea eax, [ebp + 0x880]
push eax
call fcn.6d2d4dd0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x30]
push ecx
push str.NotifyInstall
push 0
call fcn.6d2d5e70
add esp, 0x18
cmp dword [ebp - 0x30], 0
jne 0x6d2d82b8
push 0x6d2de9fc
push str.evar11
lea edx, [ebp + 0x880]
push edx
jmp 0x6d2d8375
push 0x6d2de9f0
push str.evar11
jmp 0x6d2d836e
push str.jfxic
push ebx
call edi
test eax, eax
jne 0x6d2d837d
push str.event20
push str.events
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
mov edi, dword [ebp + 0x1148]
push edi
push str._jfx_d
lea edx, [ebp + 0x580]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp + 0x580]
push eax
push str.products
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
mov edx, dword [ebp - 0x60]
push edx
push str.evar16
lea eax, [ebp + 0x880]
push eax
call fcn.6d2d4dd0
mov ecx, dword [ebp - 0x50]
push ecx
push str.evar17
lea edx, [ebp + 0x880]
push edx
call fcn.6d2d4dd0
mov eax, dword [ebp - 0x64]
push eax
push str.evar18
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d4dd0
add esp, 0x48
cmp edi, 3
jne 0x6d2d837d
mov edx, dword [ebp - 0x4c]
push edx
push str.evar19
lea eax, [ebp + 0x880]
push eax
call fcn.6d2d4dd0
add esp, 0xc
push str.__request_
lea ecx, [ebp + 0x880]
push ecx
call esi
xor edi, edi
mov dword [ebp - 0x34], edi
xor ebx, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], edi
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], eax
push eax
push eax
push eax
push eax
push str.jupdate
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x34], eax
test eax, eax
je 0x6d2d86c7
push 0x3c
push ebx
lea edx, [ebp + 0x10a8]
push edx
call sub.MSVCR100.dll_memset
mov dword [ebp + 0x10a8], 0x3c
lea eax, [ebp + 0x200]
mov dword [ebp + 0x10b8], eax
mov eax, pe_nt_image_headers32
mov dword [ebp + 0x10bc], eax
xor ecx, ecx
mov word [ebp + 0x10c0], cx
lea edx, [ebp + 0x100]
mov dword [ebp + 0x10d4], edx
mov dword [ebp + 0x10d8], eax
lea ecx, [ebp]
mov dword [ebp + 0x10dc], ecx
mov dword [ebp + 0x10e0], eax
mov ebx, dword [ebp - 0x2c]
push ebx
mov edx, dword [ebp - 0x44]
push edx
lea eax, [ebp + 0x680]
push eax
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0x18
mov byte [ebp + ebx + 0x680], 0
lea ecx, [ebp + 0x10a8]
push ecx
push edi
push ebx
lea edx, [ebp + 0x680]
push edx
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
push edi
push edi
push 3
push 0x6d2db9cb
push 0x6d2db9cb
mov eax, dword [ebp + 0x10c0]
push eax
mov ecx, dword [ebp + 0x10b8]
push ecx
mov edx, dword [ebp - 0x34]
push edx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov ebx, eax
mov dword [ebp - 0x38], ebx
test ebx, ebx
je 0x6d2d86c7
cmp dword [ebp + 0x10d8], edi
je 0x6d2d8495
mov eax, dword [ebp + 0x10d4]
push eax
lea ecx, [ebp + 0x680]
push ecx
jmp 0x6d2d84a1
push 0x6d2de2a8
lea edx, [ebp + 0x680]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
cmp dword [ebp + 0x10e0], 0
je 0x6d2d84c0
mov eax, dword [ebp + 0x10dc]
push eax
lea ecx, [ebp + 0x680]
push ecx
call esi
push str.https:__
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
push 0
test eax, eax
je 0x6d2d84f2
push 0x4c00000
push 0
push 0x6d2db9cb
push str.HTTP_1.1
lea eax, [ebp + 0x680]
push eax
jmp 0x6d2d850a
push 0x4400000
push 0
push 0x6d2db9cb
push str.HTTP_1.1
lea ecx, [ebp + 0x680]
push ecx
push str.POST
push ebx
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov edi, eax
mov dword [ebp - 0x3c], edi
test edi, edi
je 0x6d2d86c7
mov ebx, dword [sym.imp.WININET.dll_InternetErrorDlg]
mov esi, 1
mov dword [ebp - 0x28], esi
lea edx, [ebp + 0x880]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
push eax
lea eax, [ebp + 0x880]
push eax
push 0
push 0
push edi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x6d2d8597
test esi, esi
je 0x6d2d86c4
call dword [sym.imp.kernel32.dll_GetLastError]
mov ecx, eax
sub ecx, 0x2ee2
je 0x6d2d8593
sub ecx, 5
je 0x6d2d8593
sub ecx, 0x16
je 0x6d2d8593
xor esi, esi
mov dword [ebp - 0x28], esi
push esi
push 7
push eax
push edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
cmp eax, 0x2f00
jne 0x6d2d8531
jmp 0x6d2d8529
xor esi, esi
jmp 0x6d2d852e
test esi, esi
je 0x6d2d86c4
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], 4
push 0
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x24]
push edx
push 0x20000013
push edi
mov ebx, dword [sym.imp.WININET.dll_HttpQueryInfoA]
call ebx
test eax, eax
jne 0x6d2d85d9
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x24]
cmp eax, 0x197
jne 0x6d2d864e
cmp dword [ebp - 0x28], 0
je 0x6d2d864e
push 0
push 7
push esi
push edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.WININET.dll_InternetErrorDlg]
cmp eax, 0x2f00
je 0x6d2d8613
mov dword [ebp - 0x28], 0
jmp 0x6d2d85e0
lea eax, [ebp + 0x880]
push eax
call dword [sym.imp.kernel32.dll_lstrlenA]
push eax
lea ecx, [ebp + 0x880]
push ecx
push 0
push 0
push edi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
mov dword [ebp - 0x1c], 4
push 0
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x24]
push eax
push 0x20000013
push edi
call ebx
jmp 0x6d2d85e0
cmp eax, 0xc8
jne 0x6d2d8673
mov dword [ebp - 0x48], 1
lea ecx, [ebp - 0x4c]
push ecx
push 0x200
lea edx, [ebp + 0x680]
push edx
push edi
call dword [sym.imp.WININET.dll_InternetReadFile]
push str.prop20
lea eax, [ebp + 0x880]
push eax
mov ebx, dword [sym.imp.MSVCR100.dll_strstr]
call ebx
add esp, 8
mov esi, eax
test esi, esi
je 0x6d2d86b5
add esi, 7
push str.prop20
push esi
call ebx
add esp, 8
sub eax, esi
sub eax, 2
je 0x6d2d86b5
push eax
push str.XXXXXXXXXXXXXXXXXX
push esi
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0xc
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d2d5940
add esp, 4
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 4], 0xfffffffe
call fcn.6d2d86de
mov eax, dword [ebp - 0x48]
jmp 0x6d2d8704
mov eax, 1
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x111c]
xor ecx, ebp
call fcn.6d2d932c
lea esp, [ebp + 0x1120]
pop ebp
ret