Function at 0x402bb4
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
lea eax, [ebp - 0x14]
mov edi, 0xf003f
xor esi, esi
push eax
push edi
push esi
push str.Software
push 0x80000002
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, esi
jne 0x402c97
lea ecx, [ebp - 0x10]
call fcn.004023f1
mov ecx, dword [ebp - 0x14]
cmp eax, esi
mov dword [ebp - 0x10], ecx
jne 0x402c97
lea eax, [ebp - 0x18]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push eax
lea eax, [ebp - 0x14]
push eax
push esi
push edi
push esi
push esi
push esi
push str.JavaSoft
push ecx
mov dword [ebp - 0x14], esi
call ebx
cmp eax, esi
jne 0x402c97
lea ecx, [ebp - 0xc]
call fcn.004023f1
mov ecx, dword [ebp - 0x14]
cmp eax, esi
mov dword [ebp - 0xc], ecx
jne 0x402c97
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], esi
push eax
lea eax, [ebp - 0x14]
push eax
push esi
push edi
push esi
push esi
push esi
push str.Java_Update
push ecx
call ebx
cmp eax, esi
jne 0x402c97
lea ecx, [ebp - 8]
call fcn.004023f1
mov ecx, dword [ebp - 0x14]
cmp eax, esi
mov dword [ebp - 8], ecx
jne 0x402c97
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], esi
push eax
lea eax, [ebp - 0x14]
push eax
push esi
push edi
push esi
push esi
push esi
push str.Policy
push ecx
call ebx
cmp eax, esi
jne 0x402c97
lea ecx, [ebp - 4]
call fcn.004023f1
mov ecx, dword [ebp - 0x14]
cmp eax, esi
mov dword [ebp - 4], ecx
je 0x402cbc
lea ecx, [ebp - 4]
call fcn.004023f1
lea ecx, [ebp - 8]
call fcn.004023f1
lea ecx, [ebp - 0xc]
call fcn.004023f1
lea ecx, [ebp - 0x10]
call fcn.004023f1
jmp 0x402d53
cmp dword [ebp + 0xc], esi
jne 0x402cfb
push dword [ebp + 8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
je 0x402d57
lea ecx, [ebp - 4]
call fcn.004023f1
lea ecx, [ebp - 8]
call fcn.004023f1
lea ecx, [ebp - 0xc]
call fcn.004023f1
cmp dword [ebp - 0x10], esi
je 0x402d53
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x402d53
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push dword [ebp + 0xc]
push 1
push esi
push dword [ebp + 8]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x402d57
cmp dword [ebp - 4], esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
je 0x402d2f
push dword [ebp - 4]
call edi
mov dword [ebp - 4], esi
cmp dword [ebp - 8], esi
je 0x402d3c
push dword [ebp - 8]
call edi
mov dword [ebp - 8], esi
cmp dword [ebp - 0xc], esi
je 0x402d49
push dword [ebp - 0xc]
call edi
mov dword [ebp - 0xc], esi
cmp dword [ebp - 0x10], esi
je 0x402d53
push dword [ebp - 0x10]
call edi
xor eax, eax
jmp 0x402d91
cmp dword [ebp - 4], esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
je 0x402d6a
push dword [ebp - 4]
call edi
mov dword [ebp - 4], esi
cmp dword [ebp - 8], esi
je 0x402d77
push dword [ebp - 8]
call edi
mov dword [ebp - 8], esi
cmp dword [ebp - 0xc], esi
je 0x402d84
push dword [ebp - 0xc]
call edi
mov dword [ebp - 0xc], esi
cmp dword [ebp - 0x10], esi
je 0x402d8e
push dword [ebp - 0x10]
call edi
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret