Function at 0x1001d010
Capabilities:
Delete registry value

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
push edi
call fcn.10027420
push ecx
mov ebx, esp
mov ebp, eax
push 0xc
call fcn.1002f9d0
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
add esp, 4
test esi, esi
je 0x1001d058
push str.Cleanup_bogus_RegKeys_in_Java_Plugin_in_and_Web_Start
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call edi
mov dword [esi], eax
test eax, eax
je 0x1001d3e5
jmp 0x1001d05a
xor esi, esi
mov dword [ebx], esi
test esi, esi
je 0x1001d3e5
push ebp
call fcn.10015d80
add esp, 8
mov dword [esp + 0x14], 0
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
push 0x2001f
push str.SOFTWAREOracleJavaFX
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.10003a10
test eax, eax
je 0x1001d0b7
mov eax, dword [esp + 0x14]
test eax, eax
je 0x1001d0b0
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, 1
jmp 0x1001d135
mov ebp, dword [esp + 0x14]
push str.Disabled
push ebp
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov ebx, eax
test ebx, ebx
je 0x1001d125
cmp ebx, 2
je 0x1001d125
push ecx
mov dword [esp + 0x14], esp
push 0xc
call fcn.1002f9d0
mov esi, eax
add esp, 4
test esi, esi
je 0x1001d108
push str.cleanupJavaFXDisabledEntry_error
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call edi
mov dword [esi], eax
test eax, eax
je 0x1001d3e5
jmp 0x1001d10a
xor esi, esi
mov eax, dword [esp + 0x14]
mov dword [eax], esi
test esi, esi
je 0x1001d3e5
push ebx
call fcn.10015220
add esp, 8
xor ebx, ebx
jmp 0x1001d12a
mov ebx, 1
test ebp, ebp
je 0x1001d135
push ebp
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
mov ebp, esp
push 0xc
call fcn.1002f9d0
mov esi, eax
add esp, 4
test esi, esi
je 0x1001d169
push str.Cleanup_bogus_JavaFX_disabled_entry
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call edi
mov dword [esi], eax
test eax, eax
je 0x1001d3e5
jmp 0x1001d16b
xor esi, esi
mov dword [ebp], esi
test esi, esi
je 0x1001d3e5
push ebx
call fcn.10015d80
push str.761497BB_D6F0_462C_B6EB_D4DAF1D92D43
call fcn.10027be0
add esp, 8
mov ebp, eax
mov ebx, esp
push 0xc
call fcn.1002f9d0
mov esi, eax
add esp, 4
test esi, esi
je 0x1001d1be
push str.Cleanup_SSV_disabled_entry
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call edi
mov dword [esi], eax
test eax, eax
je 0x1001d3e5
jmp 0x1001d1c0
xor esi, esi
mov dword [ebx], esi
test esi, esi
je 0x1001d3e5
push ebp
call fcn.10015d80
push str.DBC80044_A445_435b_BC74_9C25C1C588A9
call fcn.10027be0
add esp, 8
mov ebx, eax
mov ebp, esp
push 0xc
call fcn.1002f9d0
mov esi, eax
add esp, 4
test esi, esi
je 0x1001d212
push str.Cleanup_new_SSV_disabled_entry
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call edi
mov dword [esi], eax
test eax, eax
je 0x1001d3e5
jmp 0x1001d214
xor esi, esi
mov dword [ebp], esi
test esi, esi
je 0x1001d3e5
push ebx
call fcn.10015d80
add esp, 8
call fcn.100058e0
test eax, eax
je 0x1001d335
mov dword [esp + 0x10], 0
call fcn.100041d0
mov edi, eax
test edi, edi
jne 0x1001d260
push str.RegistryCleanup:_GetCurrentUserHandle___return_NULL.
call fcn.10003ca0
add esp, 4
lea eax, [edi + 1]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push edi
call dword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
test eax, eax
jne 0x1001d28c
push str.RegistryCleanup:_ImpersonateLoggedOnUser_failed.
call fcn.10003ca0
add esp, 4
push edi
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
lea eax, [esp + 0x10]
push eax
push 0x20019
call dword [sym.imp.ADVAPI32.dll_RegOpenCurrentUser]
test eax, eax
je 0x1001d2c7
push str.RegistryCleanup:_Failed_to_open_current_user_registry.
call fcn.10003ca0
add esp, 4
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
push edi
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push str.8AD9C840_044E_11D1_B3E9_00805F499D93
push dword [esp + 0x14]
call fcn.10005490
add esp, 4
mov esi, eax
mov ecx, esp
push str.Cleanup_HKCU_dynamic_clsid
call fcn.100032a0
push esi
call fcn.10015d80
push str.CAFEEFAC_FFFF_FFFF_FFFF_ABCDEFFEDCBA
push dword [esp + 0x1c]
call fcn.10005490
add esp, 0xc
mov ebx, eax
mov ecx, esp
push str.Cleanup_HKCU_new_dynamic_clsid
call fcn.100032a0
push ebx
call fcn.10015d80
add esp, 8
push dword [esp + 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
push edi
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push str.8AD9C840_044E_11D1_B3E9_00805F499D93
push SysReAllocString
call fcn.10005490
add esp, 4
mov ebp, eax
mov ebx, esp
push 0xc
call fcn.1002f9d0
mov esi, eax
add esp, 4
test esi, esi
je 0x1001d378
push str.Cleanup_HKCU_dynamic_clsid
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call edi
mov dword [esi], eax
test eax, eax
je 0x1001d3e5
jmp 0x1001d37a
xor esi, esi
mov dword [ebx], esi
test esi, esi
je 0x1001d3e5
push ebp
call fcn.10015d80
push str.CAFEEFAC_FFFF_FFFF_FFFF_ABCDEFFEDCBA
push SysReAllocString
call fcn.10005490
add esp, 0xc
mov ebx, eax
mov ebp, esp
push 0xc
call fcn.1002f9d0
mov esi, eax
add esp, 4
test esi, esi
je 0x1001d3c9
push str.Cleanup_HKCU_new_dynamic_clsid
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call edi
mov dword [esi], eax
test eax, eax
je 0x1001d3e5
jmp 0x1001d3cb
xor esi, esi
mov dword [ebp], esi
test esi, esi
je 0x1001d3e5
push ebx
call fcn.10015d80
add esp, 8
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push 0x8007000e
call fcn.1002f9d0
int3