Function at 0x6d1c0480
Capabilities:
Delete registry value

Disassembly:
mov eax, 0x182c
call fcn.6d1c9470
mov eax, dword [0x6d1d54cc]
xor eax, esp
mov dword [esp + 0x1828], eax
mov edx, dword [esp + 0x1838]
mov ecx, dword [esp + 0x1834]
push ebx
mov eax, dword [esp + 0x1834]
push esi
mov esi, dword [esp + 0x1844]
push edi
xor ebx, ebx
push ebx
lea edi, [esp + 0x838]
push edi
push ebx
push ebx
push ebx
lea edi, [esp + 0x1048]
push edi
push esi
push edx
push ecx
push eax
call fcn.6d1bdea0
mov eax, dword [esp + 0x1874]
add esp, 0x28
cmp eax, 2
je 0x6d1c0575
push eax
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x3c], bl
call fcn.6d1bea70
add esp, 8
test eax, eax
je 0x6d1c05cc
lea eax, [esp + 0x34]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x6d1c0510
mov esi, dword [sym.imp.kernel32.dll_lstrcatA]
sub eax, edx
cmp byte [esp + eax + 0x33], 0x5c
je 0x6d1c0532
push 0x6d1cbb50
lea ecx, [esp + 0x38]
push ecx
call esi
push str.plugins_
lea edx, [esp + 0x38]
push edx
call esi
mov eax, dword [esp + 0x1850]
push 1
push eax
lea ecx, [esp + 0x83c]
push ecx
lea edx, [esp + 0x40]
push edx
call fcn.6d1bfd20
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1828]
xor ecx, esp
call fcn.6d1c932c
add esp, 0x182c
ret
push 0xf003f
push str.SOFTWARE
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x3c], 0x800
call fcn.6d1b2d40
test eax, eax
je 0x6d1c05e6
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x6d1c05cc
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x1828]
xor ecx, esp
call fcn.6d1c932c
add esp, 0x182c
ret
mov edi, dword [esp + 0xc]
push 0xf003f
push str.JavaSoft
push edi
lea ecx, [esp + 0x30]
call fcn.6d1b2d40
test eax, eax
je 0x6d1c0634
mov eax, dword [esp + 0x24]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp eax, ebx
je 0x6d1c0613
push eax
call esi
cmp edi, ebx
je 0x6d1c061a
push edi
call esi
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x1828]
xor ecx, esp
call fcn.6d1c932c
add esp, 0x182c
ret
push ebp
mov ebp, dword [esp + 0x28]
push 0xf003f
push str.Java_Runtime_Environment
push ebp
lea ecx, [esp + 0x28]
call fcn.6d1b2d40
test eax, eax
je 0x6d1c0677
mov eax, dword [esp + 0x1c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp eax, ebx
je 0x6d1c0662
push eax
call esi
cmp ebp, ebx
je 0x6d1c0669
push ebp
call esi
cmp edi, ebx
je 0x6d1c0670
push edi
call esi
xor eax, eax
jmp 0x6d1c070f
lea eax, [esp + 0x34]
push eax
push str.BrowserJavaVersion
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x28]
call fcn.6d1b2e10
mov esi, dword [esp + 0x1c]
test eax, eax
jne 0x6d1c06dd
lea edx, [esp + 0x1038]
push edx
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x6d1c06dd
push str.BrowserJavaVersion
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
je 0x6d1c06dd
lea ecx, [esp + 0x1c]
call fcn.6d1b31a0
lea ecx, [esp + 0x28]
call fcn.6d1b31a0
lea ecx, [esp + 0x10]
call fcn.6d1b31a0
xor eax, eax
jmp 0x6d1c070f
cmp dword [esp + 0x1854], ebx
je 0x6d1c06eb
call sym.deploy.dll_UnregJavaConsole
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
je 0x6d1c06f8
push esi
call edi
cmp ebp, ebx
je 0x6d1c06ff
push ebp
call edi
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x6d1c070a
push eax
call edi
mov eax, 1
mov ecx, dword [esp + 0x1838]
pop ebp
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.6d1c932c
add esp, 0x182c
ret