Function at 0x6d1c7480
Capabilities:
Check http status code
Connect to http server
Create http request
Delete registry value
Parse url
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push ebp
lea ebp, [esp - 0x1120]
mov eax, 0x1120
call fcn.6d1c9470
push 0xfffffffffffffffe
push 0x6d1cfc60
push 0x6d1c943c
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x6d1d54cc]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp + 0x111c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0x1128]
mov dword [ebp - 0x44], ebx
mov eax, dword [ebp + 0x112c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp + 0x1130]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp + 0x1134]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp + 0x1138]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp + 0x113c]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp + 0x1140]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp + 0x1150]
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp + 0x1154]
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp + 0x1158]
mov dword [ebp - 0x60], edx
mov eax, dword [ebp + 0x115c]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp + 0x1160]
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp + 0x1164]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp + 0x1168]
mov dword [ebp - 0x20], eax
mov byte [ebp + 0x1114], 0
xor eax, eax
mov dword [ebp + 0x1115], eax
mov word [ebp + 0x1119], ax
mov byte [ebp + 0x111b], al
mov byte [ebp + 0x10f0], al
mov dword [ebp + 0x10f1], eax
mov dword [ebp + 0x10f5], eax
mov byte [ebp + 0x10f9], al
mov byte [ebp + 0x1108], al
mov dword [ebp + 0x1109], eax
mov dword [ebp + 0x110d], eax
mov byte [ebp + 0x1111], al
mov byte [ebp + 0x10e4], al
mov dword [ebp + 0x10e5], eax
mov dword [ebp + 0x10e9], eax
mov byte [ebp + 0x10ed], al
push ebx
call dword [sym.imp.kernel32.dll_lstrlenA]
test eax, eax
je 0x6d1c86ff
push ebx
call fcn.6d1c4d10
add esp, 4
test eax, eax
je 0x6d1c86ff
cmp dword [0x6d1d575c], 0
jne 0x6d1c7773
push 0x14
push 0x6d1d5748
push 0x14
push 0x6d1d5734
call fcn.6d1c4a70
mov dword [ebp - 0x2c], 0x20
lea ecx, [ebp - 0x2c]
push ecx
push 0x6d1d5714
push str.VisitorId
push 0
call fcn.6d1c5c10
add esp, 0x20
test eax, eax
je 0x6d1c7614
cmp dword [ebp - 0x2c], 0x10
jae 0x6d1c772d
push 0
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
mov esi, eax
mov edi, edx
call dword [sym.imp.kernel32.dll_GetCurrentProcessId]
push eax
push edi
push esi
call dword [sym.imp.kernel32.dll_GetTickCount]
push eax
push str._lx_lx_lx
lea edx, [ebp + 0x10c4]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea eax, [ebp + 0x10c4]
push eax
call dword [sym.imp.kernel32.dll_lstrlenA]
cmp eax, 0x10
jge 0x6d1c7684
lea ecx, [ebp + 0x10c4]
push ecx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov edx, 0x10
sub edx, eax
push edx
push str.ffffffff
lea eax, [ebp + 0x10c4]
push eax
call dword [sym.imp.MSVCR100.dll_strncat]
add esp, 0xc
lea eax, [ebp + 0x10c4]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x6d1c7690
sub eax, edx
shr eax, 1
push eax
lea ecx, [ebp + 0x10c4]
push ecx
push 0x6d1d5714
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0xc
lea eax, [ebp + 0x10c4]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x6d1c76c0
sub eax, edx
shr eax, 1
mov byte [eax + 0x6d1d5714], cl
mov edi, 0x6d1d5714
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x6d1c76d7
mov dx, word [0x6d1ce920]
mov word [edi], dx
lea eax, [ebp + eax + 0x10c4]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x6d1c76f2
sub eax, ecx
mov esi, ecx
mov edi, 0x6d1d5714
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x6d1c7703
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x6d1d5714
push str.VisitorId
push 0
call fcn.6d1c4190
add esp, 0xc
lea eax, [ebp + 0x380]
push eax
call fcn.6d1c6650
add esp, 4
test eax, eax
je 0x6d1c7759
push 0x1e
lea ecx, [ebp + 0x380]
push ecx
push 0x6d1d56f4
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0xc
jmp 0x6d1c7769
push 0x6d1ce91c
push 0x6d1d56f4
call dword [sym.imp.kernel32.dll_lstrcpyA]
mov dword [0x6d1d575c], 1
push 0x6d1cb9cb
lea edx, [ebp + 0x580]
push edx
mov esi, dword [sym.imp.kernel32.dll_lstrcpyA]
call esi
push str.__xml_version_1.0__encoding_UTF_8_____request_
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f8
lea ecx, [ebp + 0x880]
push ecx
mov esi, dword [sym.imp.kernel32.dll_lstrcatA]
call esi
push str.sc_xml_ver
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ccb74
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f0
lea edx, [ebp + 0x880]
push edx
call esi
push str.sc_xml_ver
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push ebx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [ebp - 0x2c], eax
push 0x6d1cc154
push ebx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
mov edi, eax
cmp dword [ebp - 0x20], 0
jne 0x6d1c7831
push str.suninstallstat
push 0x6d1ccc48
lea edx, [ebp + 0x1094]
push edx
jmp 0x6d1c7841
mov eax, dword [ebp - 0x20]
push eax
push 0x6d1ccc48
lea ecx, [ebp + 0x1094]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
test edi, edi
je 0x6d1c786c
mov eax, edi
sub eax, ebx
mov dword [ebp - 0x2c], eax
inc edi
push edi
push 0x6d1ccc48
lea edx, [ebp + 0x1094]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push str.suninstallstatdev
lea eax, [ebp + 0x1094]
push eax
mov edi, dword [sym.imp.kernel32.dll_lstrcmpA]
call edi
push str.sunjfxinstallstatdev
lea ecx, [ebp + 0x1094]
push ecx
call edi
push 0x6d1ce2f8
lea edx, [ebp + 0x880]
push edx
call esi
push str.reportsuiteid
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
lea edx, [ebp + 0x1094]
push edx
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f0
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.reportsuiteid
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f8
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.visitorid
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1d5714
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f0
lea edx, [ebp + 0x880]
push edx
call esi
push str.visitorid
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f8
lea edx, [ebp + 0x880]
push edx
call esi
push str.prop21
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1d5714
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f0
lea eax, [ebp + 0x880]
push eax
call esi
push str.prop21
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f4
lea edx, [ebp + 0x880]
push edx
call esi
push str.https:__
push ebx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x6d1c7a3e
push str.https:__sjremetrics.java.com
call dword [sym.imp.kernel32.dll_lstrlenA]
push eax
push str.https:__sjremetrics.java.com
push ebx
call dword [sym.imp.MSVCR100.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x6d1c7a17
push 0xb3e9fd
push 0x6d1ceb48
lea eax, [ebp + 0x380]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp + 0x380]
push edx
push str.prop20
lea eax, [ebp + 0x880]
push eax
jmp 0x6d1c7a4f
push str.nonprodpasswd
lea ecx, [ebp + 0x380]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp + 0x380]
push edx
push str.prop20
lea eax, [ebp + 0x880]
push eax
jmp 0x6d1c7a4f
push str.nonhttpspasswd
push str.prop20
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
add esp, 0xc
push 0x6d1ce2f8
lea edx, [ebp + 0x880]
push edx
call esi
push str.pagename
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
mov ebx, dword [ebp - 0x54]
push ebx
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f0
lea eax, [ebp + 0x880]
push eax
call esi
push str.pagename
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f4
lea edx, [ebp + 0x880]
push edx
call esi
push str.jfxic
push ebx
call edi
test eax, eax
je 0x6d1c7c2e
mov eax, dword [ebp - 0x30]
push eax
push str.evar2
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
add esp, 0xc
cmp dword [ebp - 0x24], 0
je 0x6d1c7b16
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
cmp eax, 2
jl 0x6d1c7b16
push 0x6d1ceb00
mov eax, dword [ebp - 0x24]
push eax
call edi
test eax, eax
je 0x6d1c7b16
mov ecx, dword [ebp - 0x24]
push ecx
push str.evar3
lea edx, [ebp + 0x880]
push edx
jmp 0x6d1c7b27
push 0x6d1d56f4
push str.evar3
lea eax, [ebp + 0x880]
push eax
call fcn.6d1c4dd0
add esp, 0xc
push 0x6d1ceaf4
push ebx
call edi
test eax, eax
jne 0x6d1c7c2e
cmp dword [ebp - 0x1c], eax
je 0x6d1c7b58
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.kernel32.dll_lstrlenA]
cmp eax, 2
jl 0x6d1c7b58
mov edx, dword [ebp - 0x1c]
jmp 0x6d1c7b70
push 0x6d1ce91c
lea ecx, [ebp + 0x300]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp + 0x300]
push edx
push str.evar15
lea eax, [ebp + 0x880]
push eax
call fcn.6d1c4dd0
add esp, 0xc
call fcn.6d1c4e20
push eax
push 0x6d1ceae8
lea ecx, [ebp + 0x10e4]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
lea edx, [ebp + 0x10e4]
push edx
push str.evar40
lea eax, [ebp + 0x880]
push eax
call fcn.6d1c4dd0
mov byte [ebp + 0x10fc], 0
xor eax, eax
mov dword [ebp + 0x10fd], eax
mov dword [ebp + 0x1101], eax
mov byte [ebp + 0x1105], al
mov ecx, dword [ebp + 0x114c]
push ecx
push 0x6d1ceae8
lea edx, [ebp + 0x10fc]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp + 0x10fc]
push eax
push str.evar26
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
mov edx, dword [ebp - 0x68]
push edx
push str.evar27
lea eax, [ebp + 0x880]
push eax
call fcn.6d1c4dd0
mov ecx, dword [ebp - 0x5c]
push ecx
push str.evar28
lea edx, [ebp + 0x880]
push edx
call fcn.6d1c4dd0
add esp, 0x48
push 0x6d1ce2f8
lea eax, [ebp + 0x880]
push eax
call esi
push str.evar4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f4
lea edx, [ebp + 0x880]
push edx
call esi
push str.i586
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f0
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.evar4
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f8
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.evar5
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f4
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1d5748
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f0
lea edx, [ebp + 0x880]
push edx
call esi
push str.evar5
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f8
lea edx, [ebp + 0x880]
push edx
call esi
push str.evar6
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1d5734
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f0
lea eax, [ebp + 0x880]
push eax
call esi
push str.evar6
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f4
lea edx, [ebp + 0x880]
push edx
call esi
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x6d1c7d90
mov dword [ebp - 0x40], 0x14
push 0x6d1ce91c
lea eax, [ebp + 0x1080]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp + 0x1080]
push edx
push str.Method
push 0
call fcn.6d1c5c10
add esp, 0x10
jmp 0x6d1c7d9e
push eax
lea eax, [ebp + 0x1080]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x6d1ce2f8
lea ecx, [ebp + 0x880]
push ecx
call esi
push str.evar7
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f4
lea eax, [ebp + 0x880]
push eax
call esi
lea ecx, [ebp + 0x1080]
push ecx
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f0
lea eax, [ebp + 0x880]
push eax
call esi
push str.evar7
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f4
lea edx, [ebp + 0x880]
push edx
call esi
push 0x6d1ce2f8
lea eax, [ebp + 0x880]
push eax
call esi
push str.evar8
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f4
lea edx, [ebp + 0x880]
push edx
call esi
mov eax, dword [ebp - 0x58]
push eax
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ce2f0
lea edx, [ebp + 0x880]
push edx
call esi
push str.evar8
lea eax, [ebp + 0x880]
push eax
call esi
push 0x6d1ce2f4
lea ecx, [ebp + 0x880]
push ecx
call esi
push 0x6d1ceaf4
push ebx
call edi
test eax, eax
jne 0x6d1c80c8
push str.event6_event7
push str.events
lea edx, [ebp + 0x880]
push edx
call fcn.6d1c4dd0
add esp, 0xc
push 0x6d1cb9cb
lea eax, [ebp + 0x680]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x200
lea ecx, [ebp + 0x680]
push ecx
push str.InstallStatus
call fcn.6d1c68f0
push 0
call fcn.6d1c6b00
add esp, 0x10
push str.reinstall
lea edx, [ebp + 0x680]
push edx
call edi
test eax, eax
je 0x6d1c86ff
push str.exists
lea eax, [ebp + 0x680]
push eax
call edi
mov ebx, dword [ebp + 0x1148]
test eax, eax
jne 0x6d1c7efc
cmp ebx, 0x643
je 0x6d1c7f04
cmp ebx, 0x642
je 0x6d1c7f04
cmp ebx, 0x666
jne 0x6d1c7f09
mov ebx, 0xffffff80
call fcn.6d1c6b80
test eax, eax
je 0x6d1c7f35
cmp ebx, 0x643
je 0x6d1c7f22
cmp ebx, 0x642
jne 0x6d1c7f35
call fcn.6d1c5030
mov ebx, eax
neg ebx
sbb ebx, ebx
add ebx, 0xffffff76
jmp 0x6d1c7f4f
test ebx, ebx
jne 0x6d1c7f4f
push str.decline
lea ecx, [ebp + 0x680]
push ecx
call edi
test eax, eax
jne 0x6d1c7fe7
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x1c]
push edx
push 0x2001f
push eax
push 0x6d1cdf5c
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6d1c7f8e
mov dword [ebp - 0x20], 1
push str.VisitorId
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 0
je 0x6d1c7f9b
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x1c]
push ecx
push 0x2001f
push eax
push 0x6d1cdf5c
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6d1c7fda
mov dword [ebp - 0x20], 1
push str.Method
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 0
je 0x6d1c7fe7
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp + 0x1108]
push edx
lea eax, [ebp + 0x10f0]
push eax
lea ecx, [ebp + 0x1114]
push ecx
push ebx
mov edx, dword [ebp - 0x30]
push edx
call fcn.6d1c6c40
lea eax, [ebp + 0x1108]
push eax
push str.evar17
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
lea edx, [ebp + 0x1114]
push edx
push str.evar18
lea eax, [ebp + 0x880]
push eax
call fcn.6d1c4dd0
lea ecx, [ebp + 0x10f0]
push ecx
push str.evar19
lea edx, [ebp + 0x880]
push edx
call fcn.6d1c4dd0
add esp, 0x38
push str.decline
lea eax, [ebp + 0x680]
push eax
call edi
test eax, eax
je 0x6d1c86ff
push ebx
push str._jre_d
lea ecx, [ebp + 0x580]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp + 0x680]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
test eax, eax
jle 0x6d1c80b0
push str.exists
lea eax, [ebp + 0x680]
push eax
call edi
test eax, eax
je 0x6d1c80b0
lea ecx, [ebp + 0x680]
push ecx
lea edx, [ebp + 0x580]
push edx
call esi
lea eax, [ebp + 0x580]
push eax
push str.products
lea ecx, [ebp + 0x880]
push ecx
jmp 0x6d1c8375
push 0x6d1cea34
push ebx
call edi
test eax, eax
jne 0x6d1c81af
xor edi, edi
mov dword [ebp - 0x1c], edi
lea edx, [ebp - 0x1c]
push edx
push 0x2001f
push edi
push 0x6d1cdf5c
push reloc.OLEAUT32.dll_SysReAllocString
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6d1c8114
mov edi, 1
push str.VisitorId
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x1c]
test edi, edi
je 0x6d1c811f
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1c]
push eax
push 0x2001f
push edi
push 0x6d1cdf5c
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x6d1c8155
mov edi, 1
push str.Method
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x1c]
test edi, edi
je 0x6d1c8160
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.event11
push str.events
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
mov edx, dword [ebp + 0x1148]
push edx
push str._jre_d
lea eax, [ebp + 0x580]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp + 0x580]
push ecx
push str.products
lea edx, [ebp + 0x880]
push edx
call fcn.6d1c4dd0
add esp, 0x24
jmp 0x6d1c837d
push 0x6d1cea28
push ebx
call edi
test eax, eax
jne 0x6d1c81ca
push str.event1
push str.events
jmp 0x6d1c836e
push 0x6d1cea1c
push ebx
call edi
test eax, eax
jne 0x6d1c82c7
push str.event2
push str.events
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
add esp, 0xc
mov eax, dword [ebp + 0x1148]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
test eax, eax
jne 0x6d1c8212
push eax
push 0x6d1cea10
lea edx, [ebp + 0x380]
push edx
jmp 0x6d1c821f
push eax
push 0x6d1ce1d8
lea eax, [ebp + 0x380]
push eax
call edi
add esp, 0xc
lea ecx, [ebp + 0x380]
push ecx
push str.evar9
lea edx, [ebp + 0x880]
push edx
call fcn.6d1c4dd0
add esp, 0xc
mov eax, dword [ebp + 0x1144]
test eax, eax
jne 0x6d1c8258
push eax
push 0x6d1cea10
lea eax, [ebp + 0x380]
push eax
jmp 0x6d1c8265
push eax
push 0x6d1ce1d8
lea ecx, [ebp + 0x380]
push ecx
call edi
add esp, 0xc
lea edx, [ebp + 0x380]
push edx
push str.evar10
lea eax, [ebp + 0x880]
push eax
call fcn.6d1c4dd0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x30]
push ecx
push str.NotifyInstall
push 0
call fcn.6d1c5e70
add esp, 0x18
cmp dword [ebp - 0x30], 0
jne 0x6d1c82b8
push 0x6d1ce9fc
push str.evar11
lea edx, [ebp + 0x880]
push edx
jmp 0x6d1c8375
push 0x6d1ce9f0
push str.evar11
jmp 0x6d1c836e
push str.jfxic
push ebx
call edi
test eax, eax
jne 0x6d1c837d
push str.event20
push str.events
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
mov edi, dword [ebp + 0x1148]
push edi
push str._jfx_d
lea edx, [ebp + 0x580]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp + 0x580]
push eax
push str.products
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
mov edx, dword [ebp - 0x60]
push edx
push str.evar16
lea eax, [ebp + 0x880]
push eax
call fcn.6d1c4dd0
mov ecx, dword [ebp - 0x50]
push ecx
push str.evar17
lea edx, [ebp + 0x880]
push edx
call fcn.6d1c4dd0
mov eax, dword [ebp - 0x64]
push eax
push str.evar18
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c4dd0
add esp, 0x48
cmp edi, 3
jne 0x6d1c837d
mov edx, dword [ebp - 0x4c]
push edx
push str.evar19
lea eax, [ebp + 0x880]
push eax
call fcn.6d1c4dd0
add esp, 0xc
push str.__request_
lea ecx, [ebp + 0x880]
push ecx
call esi
xor edi, edi
mov dword [ebp - 0x34], edi
xor ebx, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], edi
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], eax
push eax
push eax
push eax
push eax
push str.jupdate
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x34], eax
test eax, eax
je 0x6d1c86c7
push 0x3c
push ebx
lea edx, [ebp + 0x10a8]
push edx
call sub.MSVCR100.dll_memset
mov dword [ebp + 0x10a8], 0x3c
lea eax, [ebp + 0x200]
mov dword [ebp + 0x10b8], eax
mov eax, pe_nt_image_headers32
mov dword [ebp + 0x10bc], eax
xor ecx, ecx
mov word [ebp + 0x10c0], cx
lea edx, [ebp + 0x100]
mov dword [ebp + 0x10d4], edx
mov dword [ebp + 0x10d8], eax
lea ecx, [ebp]
mov dword [ebp + 0x10dc], ecx
mov dword [ebp + 0x10e0], eax
mov ebx, dword [ebp - 0x2c]
push ebx
mov edx, dword [ebp - 0x44]
push edx
lea eax, [ebp + 0x680]
push eax
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0x18
mov byte [ebp + ebx + 0x680], 0
lea ecx, [ebp + 0x10a8]
push ecx
push edi
push ebx
lea edx, [ebp + 0x680]
push edx
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
push edi
push edi
push 3
push 0x6d1cb9cb
push 0x6d1cb9cb
mov eax, dword [ebp + 0x10c0]
push eax
mov ecx, dword [ebp + 0x10b8]
push ecx
mov edx, dword [ebp - 0x34]
push edx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov ebx, eax
mov dword [ebp - 0x38], ebx
test ebx, ebx
je 0x6d1c86c7
cmp dword [ebp + 0x10d8], edi
je 0x6d1c8495
mov eax, dword [ebp + 0x10d4]
push eax
lea ecx, [ebp + 0x680]
push ecx
jmp 0x6d1c84a1
push 0x6d1ce2a8
lea edx, [ebp + 0x680]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
cmp dword [ebp + 0x10e0], 0
je 0x6d1c84c0
mov eax, dword [ebp + 0x10dc]
push eax
lea ecx, [ebp + 0x680]
push ecx
call esi
push str.https:__
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
push 0
test eax, eax
je 0x6d1c84f2
push 0x4c00000
push 0
push 0x6d1cb9cb
push str.HTTP_1.1
lea eax, [ebp + 0x680]
push eax
jmp 0x6d1c850a
push 0x4400000
push 0
push 0x6d1cb9cb
push str.HTTP_1.1
lea ecx, [ebp + 0x680]
push ecx
push str.POST
push ebx
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov edi, eax
mov dword [ebp - 0x3c], edi
test edi, edi
je 0x6d1c86c7
mov ebx, dword [sym.imp.WININET.dll_InternetErrorDlg]
mov esi, 1
mov dword [ebp - 0x28], esi
lea edx, [ebp + 0x880]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
push eax
lea eax, [ebp + 0x880]
push eax
push 0
push 0
push edi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x6d1c8597
test esi, esi
je 0x6d1c86c4
call dword [sym.imp.kernel32.dll_GetLastError]
mov ecx, eax
sub ecx, 0x2ee2
je 0x6d1c8593
sub ecx, 5
je 0x6d1c8593
sub ecx, 0x16
je 0x6d1c8593
xor esi, esi
mov dword [ebp - 0x28], esi
push esi
push 7
push eax
push edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
cmp eax, 0x2f00
jne 0x6d1c8531
jmp 0x6d1c8529
xor esi, esi
jmp 0x6d1c852e
test esi, esi
je 0x6d1c86c4
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], 4
push 0
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x24]
push edx
push 0x20000013
push edi
mov ebx, dword [sym.imp.WININET.dll_HttpQueryInfoA]
call ebx
test eax, eax
jne 0x6d1c85d9
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x24]
cmp eax, 0x197
jne 0x6d1c864e
cmp dword [ebp - 0x28], 0
je 0x6d1c864e
push 0
push 7
push esi
push edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.WININET.dll_InternetErrorDlg]
cmp eax, 0x2f00
je 0x6d1c8613
mov dword [ebp - 0x28], 0
jmp 0x6d1c85e0
lea eax, [ebp + 0x880]
push eax
call dword [sym.imp.kernel32.dll_lstrlenA]
push eax
lea ecx, [ebp + 0x880]
push ecx
push 0
push 0
push edi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
mov dword [ebp - 0x1c], 4
push 0
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x24]
push eax
push 0x20000013
push edi
call ebx
jmp 0x6d1c85e0
cmp eax, 0xc8
jne 0x6d1c8673
mov dword [ebp - 0x48], 1
lea ecx, [ebp - 0x4c]
push ecx
push 0x200
lea edx, [ebp + 0x680]
push edx
push edi
call dword [sym.imp.WININET.dll_InternetReadFile]
push str.prop20
lea eax, [ebp + 0x880]
push eax
mov ebx, dword [sym.imp.MSVCR100.dll_strstr]
call ebx
add esp, 8
mov esi, eax
test esi, esi
je 0x6d1c86b5
add esi, 7
push str.prop20
push esi
call ebx
add esp, 8
sub eax, esi
sub eax, 2
je 0x6d1c86b5
push eax
push str.XXXXXXXXXXXXXXXXXX
push esi
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0xc
lea ecx, [ebp + 0x880]
push ecx
call fcn.6d1c5940
add esp, 4
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 4], 0xfffffffe
call fcn.6d1c86de
mov eax, dword [ebp - 0x48]
jmp 0x6d1c8704
mov eax, 1
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x111c]
xor ecx, ebp
call fcn.6d1c932c
lea esp, [ebp + 0x1120]
pop ebp
ret