Function at 0x100241b0
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x128
mov eax, 0x1005c0f8
call fcn.100420aa
mov eax, dword [ebp + 8]
mov esi, ecx
xor ecx, ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x9c], eax
cmp dword [eax + 0x14], ecx
jne 0x100241f6
mov eax, dword [ebp + 0xc]
or eax, dword [ebp + 0x10]
jne 0x100241f6
push 0x10063ba0
call fcn.100057e7
mov eax, esi
jmp 0x10024566
push 7
pop ebx
xor eax, eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], ecx
mov word [ebp - 0x7c], ax
push str.Softwareprojonepodlpuploadcache
lea esi, [ebp - 0x48]
mov dword [ebp - 4], 1
call fcn.100057e7
mov byte [ebp - 4], 2
cmp dword [ebp - 0x30], 8
mov ecx, dword [ebp - 0x44]
jae 0x10024229
lea ecx, [ebp - 0x44]
lea eax, [ebp - 0xf8]
push eax
call fcn.10027ced
pop ecx
xor eax, eax
mov word [ebp - 0xd8], ax
lea edi, [ebp - 0xd6]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xd8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
and dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], ebx
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xf8]
lea edi, [ebp - 0xa8]
lea esi, [ebp - 0x98]
mov dword [ebp - 0xa8], eax
call fcn.1001a3e4
test al, al
jne 0x10024517
call fcn.10016265
cmp dword [eax + 0x18], 8
jb 0x100242c3
mov eax, dword [eax + 4]
jmp 0x100242c6
add eax, 4
cmp dword [ebp - 0x30], 8
mov ecx, dword [ebp - 0x44]
jae 0x100242d2
lea ecx, [ebp - 0x44]
push eax
push ecx
push str._ls_ls
lea ecx, [ebp - 0x114]
call fcn.100276d0
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [ebp - 0x2c]
push ecx
xor ebx, ebx
mov byte [ebp - 4], 5
call fcn.10006576
push ebx
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 4
call fcn.10006669
mov ecx, dword [ebp - 0x28]
xor eax, eax
cmp dword [ebp - 0x14], 8
mov word [ebp - 0xc8], ax
lea edi, [ebp - 0xc6]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
jae 0x1002432a
lea ecx, [ebp - 0x28]
push str.timeStr
push reloc.WS2_32.dll_bind
lea esi, [ebp - 0x114]
call fcn.10027957
pop ecx
pop ecx
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 8
jb 0x10024350
mov eax, dword [eax + 4]
jmp 0x10024353
add eax, 4
lea ecx, [ebp - 0xc8]
push ecx
push eax
call fcn.100266e9
push ebx
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 4
call fcn.10006669
lea esi, [ebp - 0xc8]
lea edi, [ebp - 0x134]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0xd8]
lea edi, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push eax
call esi
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x134]
push eax
call esi
mov eax, dword [ebp - 0xb0]
sub eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xb4]
push ebx
push 0x2710
push ecx
push eax
call fcn.10049d00
mov esi, edx
mov edi, eax
push esi
push edi
push str.diff:_lld
call fcn.100293a0
add esp, 0xc
cmp esi, ebx
jg 0x100244e1
jl 0x10024406
cmp edi, 0x493e0
ja 0x100244e1
mov ecx, dword [ebp - 0x28]
push 8
pop edi
cmp dword [ebp - 0x14], edi
jae 0x10024414
lea ecx, [ebp - 0x28]
push str.filePath
push reloc.WS2_32.dll_bind
lea esi, [ebp - 0x64]
call fcn.10027957
pop ecx
pop ecx
mov eax, dword [ebp - 0x9c]
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], ebx
je 0x10024463
cmp dword [eax + 0x18], edi
jb 0x10024441
mov eax, dword [eax + 4]
jmp 0x10024444
add eax, 4
mov ecx, dword [ebp - 0x60]
cmp dword [ebp - 0x4c], edi
jae 0x1002444f
lea ecx, [ebp - 0x60]
push ecx
mov ebx, eax
call fcn.10027646
test eax, eax
jne 0x1002445e
push eax
jmp 0x100244c3
push 8
xor ebx, ebx
pop edi
mov eax, dword [ebp + 0xc]
or eax, dword [ebp + 0x10]
je 0x100244f3
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0xa0], edi
cmp dword [ebp - 0x14], edi
jae 0x1002448c
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0xa0]
push ecx
lea ecx, [ebp - 0x90]
push ecx
push ebx
push str.fileSize
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp + 0xc]
jne 0x100244c2
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp + 0x10]
je 0x100244f3
push ebx
push 1
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 4
call fcn.10006669
lea esi, [ebp - 0x98]
call fcn.1000e3c7
jmp 0x10024282
mov esi, dword [ebp - 0x84]
push 0x10063ba0
call fcn.100057e7
jmp 0x10024529
mov esi, dword [ebp - 0x84]
lea eax, [ebp - 0x64]
push eax
call fcn.10005807
xor edi, edi
inc edi
push ebx
push edi
lea esi, [ebp - 0x64]
mov dword [ebp - 0x88], edi
call fcn.10006669
jmp 0x10024532
mov esi, dword [ebp - 0x84]
push 0x10063ba0
call fcn.100057e7
xor ebx, ebx
xor edi, edi
inc edi
mov dword [ebp - 0x88], edi
push ebx
push edi
lea esi, [ebp - 0x2c]
call fcn.10006669
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 2
call fcn.1000a984
push ebx
push edi
lea esi, [ebp - 0x48]
call fcn.10006669
push ebx
push edi
lea esi, [ebp - 0x80]
call fcn.10006669
mov eax, dword [ebp - 0x84]
call fcn.1004212d
ret