Function at 0x6d2d0480
Capabilities:
Delete registry value

Disassembly:
mov eax, 0x182c
call fcn.6d2d9470
mov eax, dword [0x6d2e54cc]
xor eax, esp
mov dword [esp + 0x1828], eax
mov edx, dword [esp + 0x1838]
mov ecx, dword [esp + 0x1834]
push ebx
mov eax, dword [esp + 0x1834]
push esi
mov esi, dword [esp + 0x1844]
push edi
xor ebx, ebx
push ebx
lea edi, [esp + 0x838]
push edi
push ebx
push ebx
push ebx
lea edi, [esp + 0x1048]
push edi
push esi
push edx
push ecx
push eax
call fcn.6d2cdea0
mov eax, dword [esp + 0x1874]
add esp, 0x28
cmp eax, 2
je 0x6d2d0575
push eax
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x3c], bl
call fcn.6d2cea70
add esp, 8
test eax, eax
je 0x6d2d05cc
lea eax, [esp + 0x34]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x6d2d0510
mov esi, dword [sym.imp.kernel32.dll_lstrcatA]
sub eax, edx
cmp byte [esp + eax + 0x33], 0x5c
je 0x6d2d0532
push 0x6d2dbb50
lea ecx, [esp + 0x38]
push ecx
call esi
push str.plugins_
lea edx, [esp + 0x38]
push edx
call esi
mov eax, dword [esp + 0x1850]
push 1
push eax
lea ecx, [esp + 0x83c]
push ecx
lea edx, [esp + 0x40]
push edx
call fcn.6d2cfd20
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1828]
xor ecx, esp
call fcn.6d2d932c
add esp, 0x182c
ret
push 0xf003f
push str.SOFTWARE
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x3c], 0x800
call fcn.6d2c2d40
test eax, eax
je 0x6d2d05e6
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x6d2d05cc
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x1828]
xor ecx, esp
call fcn.6d2d932c
add esp, 0x182c
ret
mov edi, dword [esp + 0xc]
push 0xf003f
push str.JavaSoft
push edi
lea ecx, [esp + 0x30]
call fcn.6d2c2d40
test eax, eax
je 0x6d2d0634
mov eax, dword [esp + 0x24]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp eax, ebx
je 0x6d2d0613
push eax
call esi
cmp edi, ebx
je 0x6d2d061a
push edi
call esi
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x1828]
xor ecx, esp
call fcn.6d2d932c
add esp, 0x182c
ret
push ebp
mov ebp, dword [esp + 0x28]
push 0xf003f
push str.Java_Runtime_Environment
push ebp
lea ecx, [esp + 0x28]
call fcn.6d2c2d40
test eax, eax
je 0x6d2d0677
mov eax, dword [esp + 0x1c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp eax, ebx
je 0x6d2d0662
push eax
call esi
cmp ebp, ebx
je 0x6d2d0669
push ebp
call esi
cmp edi, ebx
je 0x6d2d0670
push edi
call esi
xor eax, eax
jmp 0x6d2d070f
lea eax, [esp + 0x34]
push eax
push str.BrowserJavaVersion
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x28]
call fcn.6d2c2e10
mov esi, dword [esp + 0x1c]
test eax, eax
jne 0x6d2d06dd
lea edx, [esp + 0x1038]
push edx
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x6d2d06dd
push str.BrowserJavaVersion
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
je 0x6d2d06dd
lea ecx, [esp + 0x1c]
call fcn.6d2c31a0
lea ecx, [esp + 0x28]
call fcn.6d2c31a0
lea ecx, [esp + 0x10]
call fcn.6d2c31a0
xor eax, eax
jmp 0x6d2d070f
cmp dword [esp + 0x1854], ebx
je 0x6d2d06eb
call sym.deploy.dll_UnregJavaConsole
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
je 0x6d2d06f8
push esi
call edi
cmp ebp, ebx
je 0x6d2d06ff
push ebp
call edi
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x6d2d070a
push eax
call edi
mov eax, 1
mov ecx, dword [esp + 0x1838]
pop ebp
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.6d2d932c
add esp, 0x182c
ret