Function at 0x1000c424
Capabilities:
Check if file exists
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2ac
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov eax, dword [0x1005c010]
xor eax, ebp
mov dword [ebp - 0x10], eax
lea eax, [edi + edi]
mov dword [ebp - 0x218], eax
lea ecx, [ebp - 0x218]
xor eax, eax
push ecx
push ebx
push eax
push 2
push eax
push str.CLSID1FD49718_1D00_4B19_AF5F_070AF6D5D54CInProcServer32
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
je 0x1000c4d6
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
push 2
call fcn.1000def1
add esp, 4
test al, al
je 0x1000c4bf
lea edi, [ebp - 0x218]
mov ecx, edi
push 2
push 0x1c8
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000df3a
push 0x24
push str.Failed_to_get_registered_stub_path:
push edi
call fcn.10005eef
add esp, 0xc
mov ecx, eax
push esi
call fcn.10001f90
mov ecx, edi
call fcn.1000e1da
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10025727
mov eax, esi
add esp, 0x2ac
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x218]
shr eax, 1
je 0x1000c51a
cmp eax, 1
je 0x1000c524
lea ecx, [eax - 1]
cmp word [ebx + eax*2 - 2], 0x5c
mov eax, ecx
jne 0x1000c4e0
mov word [ebx + ecx*2], 0
mov esi, 0x80070057
test edi, edi
jle 0x1000c479
mov eax, ebx
mov ecx, edi
cmp word [eax], 0
je 0x1000c52e
add eax, 2
dec ecx
jne 0x1000c509
jmp 0x1000c479
mov esi, 0x80070057
jmp 0x1000c479
mov esi, 0x80004005
jmp 0x1000c479
mov word [eax], 0x5c
cmp ecx, 1
je 0x1000c56e
mov word [eax + 2], 0
lea eax, [ebx - 2]
cmp word [eax + 2], 0
je 0x1000c553
add eax, 2
dec edi
jne 0x1000c541
jmp 0x1000c479
xor ecx, ecx
movzx edx, word [ecx + ecx + str.ie_to_edge_stub.exe]
test dx, dx
je 0x1000c57d
mov word [eax + 2], dx
add eax, 2
inc ecx
cmp edi, ecx
jne 0x1000c555
mov word [eax], 0
mov esi, 0x8007007a
jmp 0x1000c479
mov word [eax + 2], 0
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000c671
xor eax, eax
lea ecx, [ebp - 0x228]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
sub esp, 0x1c
mov dword [esp + 0x18], eax
movaps xmm0, xmmword [0x10052840]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], str.SoftwareAppDataLowSoftwareMicrosoftEdgeIEToEdge
mov dword [esp], SysReAllocString
call fcn.100043f2
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x1000c857
mov esi, 0x208
push esi
push 0xff
lea edi, [ebp - 0x218]
push edi
call fcn.10027f80
add esp, 0xc
lea ecx, [ebp - 0x2b4]
mov dword [ecx], 0xffffffff
lea eax, [ebp - 0x21c]
mov dword [eax], esi
push eax
push edi
push ecx
push 0
push str.LastStubPath
push dword [ebp - 0x228]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1000c701
mov ecx, dword [ebp - 0x2b4]
dec ecx
mov eax, 0xd
cmp ecx, 1
ja 0x1000c701
mov ecx, dword [ebp - 0x21c]
test ecx, ecx
je 0x1000c6f6
test cl, 1
jne 0x1000c701
and ecx, 0xfffffffe
lea edx, [ebp - 0x218]
cmp word [ecx + edx - 2], 0
jne 0x1000c701
jmp 0x1000c6ff
call dword [sym.imp.kernel32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
mov esi, 0x8000ffff
cmovs esi, ecx
push 2
call fcn.1000def1
add esp, 4
test al, al
je 0x1000c4bf
lea edi, [ebp - 0x218]
mov ecx, edi
push 2
push 0x1c5
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000df3a
push 0x1e
push str.Invalid_registered_stub_path:
push edi
call fcn.10005eef
add esp, 0xc
mov dword [ebp - 0x2b8], eax
push ebx
call fcn.10035a4c
add esp, 4
push eax
push ebx
push dword [ebp - 0x2b8]
call fcn.10005eef
add esp, 0xc
push 1
push 0x100536d0
push eax
jmp 0x1000c4a8
mov word [ebp - 0x218], 0
xor eax, eax
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
cmp esi, 0x80070002
jne 0x1000c722
mov word [ebp - 0x218], 0
jmp 0x1000c72a
test esi, esi
js 0x1000c7dc
push ebx
lea eax, [ebp - 0x218]
push eax
call fcn.10035a4c
add esp, 8
xor esi, esi
test eax, eax
je 0x1000c857
call fcn.10024975
test eax, eax
js 0x1000c790
test ebx, ebx
je 0x1000c80c
push ebx
call fcn.10035a4c
add esp, 4
add eax, eax
add eax, 2
push eax
push ebx
push 1
push 0
push str.LastStubPath
push dword [ebp - 0x228]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jle 0x1000c871
movzx esi, ax
or esi, 0x80070000
jmp 0x1000c811
mov edi, eax
push 2
call fcn.1000def1
add esp, 4
test al, al
je 0x1000c7d8
lea esi, [ebp - 0x2b4]
mov ecx, esi
push 2
push 0x1e8
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000df3a
push 0x24
push str.Failed_to_refresh_elevation_policy:
push esi
call fcn.10005eef
add esp, 0xc
mov ecx, eax
push edi
call fcn.10001f90
mov ecx, esi
call fcn.1000e1da
mov esi, edi
jmp 0x1000c857
push 2
call fcn.1000def1
add esp, 4
test al, al
je 0x1000c857
lea edi, [ebp - 0x2b4]
mov ecx, edi
push 2
push 0x1ec
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000df3a
push 0x20
push str.Failed_to_query_last_stub_path:
jmp 0x1000c83f
mov esi, 0x8007000d
push 2
call fcn.1000def1
add esp, 4
test al, al
je 0x1000c857
lea edi, [ebp - 0x2b4]
mov ecx, edi
push 2
push 0x1e5
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000df3a
push 0x21
push str.Failed_to_update_last_stub_path:
push edi
call fcn.10005eef
add esp, 0xc
mov ecx, eax
push esi
call fcn.10001f90
mov ecx, edi
call fcn.1000e1da
mov eax, dword [ebp - 0x228]
test eax, eax
je 0x1000c4bf
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1000c4bf
js 0x1000c8c8
push 0
call fcn.1000def1
add esp, 4
test al, al
je 0x1000c857
lea edi, [ebp - 0x2b4]
mov ecx, edi
push 0
push 0x1e3
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000df3a
push 0x1a
push str.Updated_last_stub_path_to
push edi
call fcn.10005eef
add esp, 0xc
mov edi, eax
push ebx
call fcn.10035a4c
add esp, 4
push eax
push ebx
push edi
call fcn.10005eef
add esp, 0xc
lea ecx, [ebp - 0x2b4]
jmp 0x1000c852
mov esi, eax
jmp 0x1000c811