Function at 0x6d5bd710
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
sub esp, 0xa30
mov eax, dword [0x6d5e2a5c]
xor eax, esp
mov dword [esp + 0xa2c], eax
mov eax, dword [esp + 0xa34]
push ebx
mov ebx, dword [esp + 0xa44]
push ebp
mov ebp, dword [esp + 0xa4c]
push esi
mov esi, dword [esp + 0xa48]
push edi
push 0xfe
xor edi, edi
lea edx, [esp + 0x142]
xor ecx, ecx
push edi
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], esi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x38], ebp
mov word [esp + 0x148], cx
call sub.MSVCR100.dll_memset
push 0xfe
lea ecx, [esp + 0x4e]
xor eax, eax
push edi
push ecx
mov word [esp + 0x54], ax
call sub.MSVCR100.dll_memset
push 0x7fe
lea eax, [esp + 0x25a]
xor edx, edx
push edi
push eax
mov dword [esp + 0x54], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x38], edi
mov word [esp + 0x260], dx
call sub.MSVCR100.dll_memset
mov eax, 0x6d5d83e0
mov edx, esi
add esp, 0x24
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x6d5bd7c3
mov eax, 0x6d5d83e0
mov edx, ebx
sub edx, eax
jmp 0x6d5bd7e0
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x6d5bd7e0
mov eax, 0x6d5d83e0
mov edx, ebp
sub edx, eax
jmp 0x6d5bd800
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x6d5bd800
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x14]
push edx
push edi
push 0x2021f
push edi
push edi
push edi
push str.SoftwareJreMetrics
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov esi, eax
cmp esi, edi
je 0x6d5bd86a
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
push esi
lea eax, [esp + 0x244]
push str.GetUpdatedJreMetrics_____RegCreateKeyEx_failed:__l_Error_Code:__d_n
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea ecx, [esp + 0x24c]
push ecx
call fcn.6d5bb620
add esp, 0x14
mov eax, esi
jmp 0x6d5bdbd7
lea edx, [esp + 0x14]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x40]
push ecx
push edi
push str.MachineCount
push edx
mov dword [esp + 0x2c], 4
mov dword [esp + 0x50], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebp, dword [sym.imp.USER32.dll_wsprintfW]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov esi, eax
cmp esi, 2
jne 0x6d5bd91f
mov ecx, dword [esp + 0x10]
push 4
lea eax, [esp + 0x2c]
push eax
push 4
push edi
push str.MachineCount
push ecx
mov dword [esp + 0x40], 1
mov dword [esp + 0x2c], 4
call ebx
mov esi, eax
cmp esi, edi
jne 0x6d5bd8fe
mov edx, dword [esp + 0x24]
mov eax, str.false
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x6d5bd8e0
push str.GetUpdatedJreMetrics_____MachineCount_registry_value_created_n
call fcn.6d5bb620
add esp, 4
jmp 0x6d5bd975
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
push esi
lea edx, [esp + 0x244]
push str.GetUpdatedJreMetrics_____RegSetValue_for_MachineCount_failed:__l_Error_Code:__d_n
push edx
call ebp
lea eax, [esp + 0x24c]
push eax
jmp 0x6d5bd96d
cmp esi, edi
jne 0x6d5bd94e
mov edx, dword [esp + 0x24]
mov eax, 0x6d5d2518
sub edx, eax
mov edi, edi
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x6d5bd930
push str.GetUpdatedJreMetrics_____MachineCount_registry_value_exists_n
call fcn.6d5bb620
add esp, 4
jmp 0x6d5bd975
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
push esi
lea ecx, [esp + 0x244]
push str.GetUpdatedJreMetrics_____RegQueryValueEx_for_MachineCount_failed:__l_Error_Code:__d_n
push ecx
call ebp
lea edx, [esp + 0x24c]
push edx
call fcn.6d5bb620
add esp, 0x14
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
push str.InstallAttempts
push edx
mov dword [esp + 0x24], 4
call fcn.6d5bc6e0
add esp, 0x10
mov esi, 0x100
test eax, eax
jne 0x6d5bda05
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x40]
push ecx
push str.NewJreVersion
push edx
mov dword [esp + 0x24], esi
call fcn.6d5bc6e0
add esp, 0x10
test eax, eax
jne 0x6d5bda05
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x3c]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x6d5bd9f6
cmp dx, di
je 0x6d5bd9f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x6d5bd9f6
add eax, 4
add ecx, 4
cmp dx, di
jne 0x6d5bd9d0
xor eax, eax
jmp 0x6d5bd9fb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x6d5bda05
inc dword [esp + 0x1c]
jmp 0x6d5bda0d
mov dword [esp + 0x1c], 1
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push ecx
push str.UpdateCount
push edx
mov dword [esp + 0x24], 4
call fcn.6d5bc6e0
add esp, 0x10
test eax, eax
je 0x6d5bda3d
mov dword [esp + 0x18], 0xffffffff
mov eax, dword [esp + 0xa48]
cmp eax, edi
jne 0x6d5bdbf0
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x140]
push ecx
push str.JreVersion
mov dword [esp + 0x20], esi
push edx
xor esi, esi
call fcn.6d5bc6e0
add esp, 0x10
test eax, eax
je 0x6d5bda7a
mov esi, 1
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x13c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x6d5bdaab
cmp dx, di
je 0x6d5bdaa7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x6d5bdaab
add eax, 4
add ecx, 4
cmp dx, di
jne 0x6d5bda85
xor eax, eax
jmp 0x6d5bdab0
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jl 0x6d5bdabc
cmp esi, edi
je 0x6d5bdb64
mov esi, dword [esp + 0x20]
inc dword [esp + 0x18]
mov eax, esi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x6d5bdad0
mov ecx, dword [esp + 0x10]
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push esi
push 1
push edi
push str.JreVersion
push ecx
call ebx
mov esi, eax
cmp esi, edi
je 0x6d5bdb21
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
push esi
lea edx, [esp + 0x244]
push str.GetUpdatedJreMetrics_____RegSetValueEx_failed_for_JreVersion:__l_Error_Code:__d_n
push edx
call ebp
lea eax, [esp + 0x24c]
push eax
call fcn.6d5bb620
add esp, 0x14
mov edx, dword [esp + 0x10]
push 4
lea ecx, [esp + 0x1c]
push ecx
push 4
push edi
push str.UpdateCount
push edx
call ebx
mov esi, eax
cmp esi, edi
je 0x6d5bdb64
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
push esi
lea eax, [esp + 0x244]
push str.GetUpdatedJreMetrics_____RegSetValueEx_failed_for_UpdateCount:__l_Error_Code:__d_n
push eax
call ebp
lea ecx, [esp + 0x24c]
push ecx
call fcn.6d5bb620
add esp, 0x14
mov ecx, dword [esp + 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push str.InstallAttempts
push ecx
call esi
mov edx, dword [esp + 0x10]
push str.NewJreVersion
push edx
call esi
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
jne 0x6d5bdb91
xor eax, eax
mov dword [esp + 0x18], eax
mov esi, dword [esp + 0x34]
push eax
push 0x6d5d76c0
push esi
call ebp
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x38]
push eax
push 0x6d5d76c0
push edi
call ebp
mov ecx, dword [esp + 0x3c]
push esi
push edi
push ecx
lea edx, [esp + 0x260]
push str.GetUpdatedJreMetrics_____MachineCounted:__s__InstallAttempts:__s__UpdateCount:__s_n
push edx
call ebp
lea eax, [esp + 0x268]
push eax
call fcn.6d5bb620
add esp, 0x30
xor eax, eax
mov ecx, dword [esp + 0xa3c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.6d5ca6ac
add esp, 0xa30
ret
cmp eax, 0xffffff80
je 0x6d5bdb64
mov eax, dword [esp + 0x10]
push 4
lea edx, [esp + 0x20]
push edx
push 4
push edi
push str.InstallAttempts
push eax
call ebx
mov esi, eax
cmp esi, edi
je 0x6d5bdc3c
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
push esi
lea ecx, [esp + 0x244]
push str.GetUpdatedJreMetrics_____RegSetValueEx_failed_for_InstallAttempts:__l_Error_Code:__d_n
push ecx
call ebp
lea edx, [esp + 0x24c]
push edx
call fcn.6d5bb620
add esp, 0x14
mov esi, dword [esp + 0x20]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x6d5bdc45
mov ecx, dword [esp + 0x10]
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push esi
push 1
push edi
push str.NewJreVersion
push ecx
call ebx
mov esi, eax
cmp esi, edi
je 0x6d5bdb82
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
push esi
lea edx, [esp + 0x244]
push str.GetUpdatedJreMetrics_____RegSetValueEx_failed_for_NewJreVersion:__l_Error_Code:__d_n
push edx
call ebp
lea eax, [esp + 0x24c]
push eax
call fcn.6d5bb620
add esp, 0x14
jmp 0x6d5bdb82