Function at 0x6d1c0200
Capabilities:
Set registry value

Disassembly:
mov eax, 0x2034
call fcn.6d1c9470
mov eax, dword [0x6d1d54cc]
xor eax, esp
mov dword [esp + 0x2030], eax
mov eax, dword [esp + 0x2038]
mov ecx, dword [esp + 0x2044]
mov edx, dword [esp + 0x2048]
push ebx
push ebp
mov ebp, dword [esp + 0x2048]
push edi
mov edi, dword [esp + 0x2048]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x2058]
mov dword [esp + 0x38], ecx
push eax
lea ecx, [esp + 0x40]
xor ebx, ebx
push ecx
mov dword [esp + 0x3c], edx
mov byte [esp + 0x44], bl
call fcn.6d1bea70
add esp, 8
test eax, eax
jne 0x6d1c0281
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2030]
xor ecx, esp
call fcn.6d1c932c
add esp, 0x2034
ret
lea eax, [esp + 0x3c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x6d1c0288
sub eax, edx
cmp byte [esp + eax + 0x3b], 0x5c
push esi
mov esi, dword [sym.imp.kernel32.dll_lstrcatA]
je 0x6d1c02ab
push 0x6d1cbb50
lea edx, [esp + 0x44]
push edx
call esi
push str.plugins_
lea eax, [esp + 0x44]
push eax
call esi
mov esi, dword [esp + 0x2060]
push ebx
push esi
lea ecx, [esp + 0x48]
push ebx
push ecx
call fcn.6d1bfd20
add esp, 0x10
test eax, eax
je 0x6d1c0427
cmp dword [esp + 0x205c], 2
je 0x6d1c02f8
mov eax, dword [esp + 0x34]
push esi
lea edx, [esp + 0x44]
push edx
push eax
call fcn.6d1bff90
add esp, 0xc
jmp 0x6d1c045c
push 1
push ebx
lea ecx, [esp + 0x48]
push ebx
push ecx
call fcn.6d1bfd20
add esp, 0x10
test eax, eax
je 0x6d1c0427
mov ecx, dword [esp + 0x38]
push ebx
push ebx
push ebx
lea edx, [esp + 0x104c]
push edx
mov edx, dword [esp + 0x4c]
push ebx
lea eax, [esp + 0x854]
push eax
push ecx
push edx
push ebp
push edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
call fcn.6d1bdea0
add esp, 0x28
push 0xf003f
push str.SOFTWARE
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x28]
call fcn.6d1b2d40
test eax, eax
jne 0x6d1c040c
mov eax, dword [esp + 0x1c]
push 0xf003f
push str.JavaSoft
push eax
lea ecx, [esp + 0x1c]
call fcn.6d1b2d40
test eax, eax
jne 0x6d1c040c
mov ecx, dword [esp + 0x10]
push 0xf003f
push str.Java_Runtime_Environment
push ecx
lea ecx, [esp + 0x34]
call fcn.6d1b2d40
test eax, eax
jne 0x6d1c040c
lea edx, [esp + 0x1840]
push ebx
push edx
call fcn.6d1bf030
add esp, 8
push 0x6d1cce74
lea eax, [esp + 0x1044]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
js 0x6d1c042b
lea ecx, [esp + 0x840]
push ecx
call dword [sym.imp.kernel32.dll_lstrlenA]
inc eax
push eax
mov eax, dword [esp + 0x2c]
lea edx, [esp + 0x844]
push edx
push 1
push ebx
push str.BrowserJavaVersion
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
cmp eax, ebx
je 0x6d1c042b
lea ecx, [esp + 0x28]
call fcn.6d1b31a0
lea ecx, [esp + 0x10]
call fcn.6d1b31a0
lea ecx, [esp + 0x1c]
call fcn.6d1b31a0
xor eax, eax
jmp 0x6d1c045c
cmp esi, ebx
je 0x6d1c043c
mov ecx, dword [esp + 0x34]
push ecx
call sym.deploy.dll_RegJavaConsole
add esp, 4
lea ecx, [esp + 0x28]
call fcn.6d1b31a0
lea ecx, [esp + 0x10]
call fcn.6d1b31a0
lea ecx, [esp + 0x1c]
call fcn.6d1b31a0
mov eax, 1
mov ecx, dword [esp + 0x2040]
pop esi
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.6d1c932c
add esp, 0x2034
ret