Function at 0x10014f40
Capabilities:
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100abd6e
mov eax, dword fs:[0]
push eax
sub esp, 0x344
mov eax, dword [0x100d800c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x44], edi
mov eax, dword [ebp + 8]
xorps xmm0, xmm0
mov dword [ebp - 0x320], eax
xor eax, eax
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x244], eax
movups xmmword [ebp - 0x22c], xmm0
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x304], edi
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2b4], 7
mov word [ebp - 0x2c8], ax
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], 7
mov word [ebp - 0x2ac], ax
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], 7
mov word [ebp - 0x294], ax
mov byte [ebp - 0x27c], al
mov byte [ebp - 0x248], al
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], 7
mov word [ebp - 0x244], ax
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], 7
mov word [ebp - 0x220], ax
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], 7
mov word [ebp - 0x208], ax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1e8], eax
mov byte [ebp - 0x1e4], al
movups xmmword [ebp - 0x1e0], xmm0
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], 7
mov word [ebp - 0xe4], ax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], 7
mov word [ebp - 0xb0], ax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x338]
mov byte [ebp - 0x38], al
mov edx, str.iconn.cfg
push dword [ebp - 0x38]
call fcn.10018e80
lea eax, [ebp - 0x338]
mov byte [ebp - 4], 2
push eax
mov edx, edi
lea ecx, [ebp - 0x350]
call fcn.10014340
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x300]
push eax
call fcn.10007900
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x33c]
cmp edx, 8
jb 0x100151ac
mov ecx, dword [ebp - 0x350]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100151a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100164f6
push edx
push ecx
call fcn.1006d8b6
add esp, 8
xor eax, eax
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 7
mov word [ebp - 0x350], ax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x1001520d
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015203
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100164f6
push edx
push ecx
call fcn.1006d8b6
add esp, 8
xor eax, eax
mov dword [ebp - 0x328], 0
cmp dword [ebp - 0x2ec], 8
lea esi, [ebp - 0x300]
mov word [ebp - 0x338], ax
xorps xmm0, xmm0
cmovae esi, dword [ebp - 0x300]
push esi
push 0xa
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
push eax
push 0x100c32b8
push str.BandwidthLimit
push str.PPI.WebConfig_Primary
mov dword [ebp - 0x324], 7
movups xmmword [ebp - 0x28], xmm0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x28]
push eax
call fcn.1008c41f
add esp, 4
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
push esi
push 0xa
push eax
push 0x100c32b8
push str.ProxyType
push str.PPI.ProxyConfig_Primary
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x28]
push eax
call fcn.1008c41f
push esi
push str.ProxyAddress
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe8], eax
call fcn.10014e80
add esp, 0xc
lea ecx, [ebp - 0xe4]
push eax
call fcn.1000dab0
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x10015306
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100152fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100164fb
push edx
push ecx
call fcn.1006d8b6
add esp, 8
push esi
push 0xa
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push eax
push 0x100c32b8
push str.ProxyPortNumber
xorps xmm0, xmm0
push str.PPI.ProxyConfig_Primary
movups xmmword [ebp - 0x28], xmm0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x28]
push eax
call fcn.1008c41f
push esi
push str.ProxyUserName
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xcc], eax
call fcn.10014e80
add esp, 0xc
lea ecx, [ebp - 0xc8]
push eax
call fcn.1000dab0
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x10015396
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001538c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016500
push edx
push ecx
call fcn.1006d8b6
add esp, 8
push esi
push str.ProxyUserPassword
lea ecx, [ebp - 0x68]
call fcn.10014e80
add esp, 8
lea ecx, [ebp - 0xb0]
push eax
call fcn.1000dab0
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x100153ed
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100153e3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016505
push edx
push ecx
call fcn.1006d8b6
add esp, 8
mov eax, dword [ebp - 0xec]
lea ecx, [ebp - 0x2c8]
cmp dword [ebp - 0xd0], 8
push dword [ebp - 0xd4]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x2cc], eax
lea eax, [ebp - 0xe4]
cmovae eax, dword [ebp - 0xe4]
push eax
call fcn.10004420
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0x2ac]
cmp dword [ebp - 0xb4], 8
push dword [ebp - 0xb8]
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
push eax
call fcn.10004420
cmp dword [ebp - 0x9c], 8
lea eax, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae eax, dword [ebp - 0xb0]
lea ecx, [ebp - 0x294]
push eax
call fcn.10004420
mov eax, dword [edi + 0x30]
lea ecx, [ebp - 0x2c]
add edi, 0x30
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov esi, dword [eax + 0x24]
xor eax, eax
push eax
push 0x100c32bc
mov word [ebp - 0x2c], ax
call fcn.10004420
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 7
push eax
push str.CustomerID
lea eax, [ebp - 0x31c]
mov ecx, esi
push eax
call dword [0x100b42b0]
mov ecx, edi
call esi
push eax
lea ecx, [ebp - 0x244]
call fcn.1000dab0
mov edx, dword [ebp - 0x308]
cmp edx, 8
jb 0x10015521
mov ecx, dword [ebp - 0x31c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015517
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001650a
push edx
push ecx
call fcn.1006d8b6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 7
mov word [ebp - 0x31c], ax
cmp edx, 8
jb 0x1001557c
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015572
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001650a
push edx
push ecx
call fcn.1006d8b6
add esp, 8
mov eax, dword [edi]
push 0
push str.DelaySupplements
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x100b42b0]
mov ecx, edi
call esi
test eax, eax
mov eax, dword [edi]
push 0
push str.DisableAutomaticDiagnosticLogSubmission
setne byte [ebp - 0x27c]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x100b42b0]
mov ecx, edi
call esi
test eax, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
sete byte [ebp - 0x1e4]
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 9
mov edi, dword [ebp - 0x44]
push eax
push 0x20019
push 0
push str.ServiceDelayUpdating
push dword [edi + 0x34]
mov dword [ebp - 0x34], vtable.RegistryAccess.0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
test esi, esi
jne 0x1001650f
mov dword [ebp - 0x34], vtable.RegistryAccess.0
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c]
push eax
mov dword [ebp - 0x2c], eax
push 0x100c32bc
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.10004420
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
push eax
push 0x100c349c
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x34]
call fcn.10051b60
push eax
lea ecx, [ebp - 0x80]
call fcn.1000dab0
mov edx, dword [ebp - 0x308]
cmp edx, 8
jb 0x100156af
mov ecx, dword [ebp - 0x31c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100156a5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001652a
push edx
push ecx
call fcn.1006d8b6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 7
mov word [ebp - 0x31c], ax
cmp edx, 8
jb 0x1001570a
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015700
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001652a
push edx
push ecx
call fcn.1006d8b6
add esp, 8
xor eax, eax
mov dword [ebp - 0x2c], 0
push eax
push 0x100c32bc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.10004420
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
push eax
push str.Time
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x34]
call fcn.10051b60
push eax
lea ecx, [ebp - 0x68]
call fcn.1000dab0
mov edx, dword [ebp - 0x308]
cmp edx, 8
jb 0x10015798
mov ecx, dword [ebp - 0x31c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1001578e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001652f
push edx
push ecx
call fcn.1006d8b6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 7
mov word [ebp - 0x31c], ax
cmp edx, 8
jb 0x100157f3
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100157e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001652f
push edx
push ecx
call fcn.1006d8b6
add esp, 8
cmp byte [ebp - 0x248], 0
lea ecx, [ebp - 0x278]
je 0x10015832
cmp dword [ebp - 0x6c], 8
lea eax, [ebp - 0x80]
push dword [ebp - 0x70]
cmovae eax, dword [ebp - 0x80]
push eax
call fcn.10004420
cmp dword [ebp - 0x54], 8
lea eax, [ebp - 0x68]
push dword [ebp - 0x58]
cmovae eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x260]
push eax
call fcn.10004420
jmp 0x1001585e
lea eax, [ebp - 0x278]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x80]
push eax
call fcn.10007900
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x260]
call fcn.10007900
mov byte [ebp - 0x248], 1
lea ecx, [ebp - 0x80]
call fcn.10003770
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], vtable.RegistryHandle.0
test eax, eax
je 0x1001587b
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], 6
jmp 0x1001589a
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movq qword [ebp - 0x50], xmm0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
movlpd qword [ebp - 0x34], xmm0
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x13
push eax
push 0x20019
push 0
push str.ServiceCloudSubscriptions
push dword [edi + 0x34]
mov dword [ebp - 0x34], vtable.RegistryAccess.0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
test esi, esi
jne 0x10016534
mov dword [ebp - 0x34], vtable.RegistryAccess.0
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x34]
call fcn.100525b0
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
cmp esi, eax
je 0x10015de2
cmp dword [esi + 0x14], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
mov eax, esi
jb 0x10015932
mov eax, dword [esi]
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x17
push ecx
push 0x20019
push 0
push eax
push dword [ebp - 0x30]
mov dword [ebp - 0x40], vtable.RegistryAccess.0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test edi, edi
jne 0x1001654f
mov dword [ebp - 0x40], vtable.RegistryAccess.0
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], 7
mov word [ebp - 0x1c8], ax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], 7
mov word [ebp - 0x1b0], ax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], 7
mov word [ebp - 0x198], ax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], 7
mov word [ebp - 0x180], ax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], 7
mov word [ebp - 0x168], ax
lea eax, [ebp - 0x1c8]
mov byte [ebp - 4], 0x1a
cmp eax, esi
je 0x10015a22
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x10015a13
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x1c8]
push eax
call fcn.10004420
push str.BaseVersion
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x40]
call fcn.10051b30
mov edi, eax
lea eax, [ebp - 0x180]
cmp eax, edi
je 0x10015aa9
mov eax, dword [ebp - 0x16c]
cmp eax, 8
jb 0x10015a7f
mov ecx, dword [ebp - 0x180]
lea edx, [eax*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015a75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001656a
push edx
push ecx
call fcn.1006d8b6
add esp, 8
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x180], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x170], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x10015ae3
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015ad9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001656a
push edx
push ecx
call fcn.1006d8b6
add esp, 8
xor eax, eax
mov dword [ebp - 0x31c], 0
push eax
push 0x100c32bc
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 7
mov word [ebp - 0x31c], ax
call fcn.10004420
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 0x1b
push eax
push str.FixedVersion
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x40]
call fcn.10051b60
mov edi, eax
lea eax, [ebp - 0x168]
cmp eax, edi
je 0x10015bad
mov edx, dword [ebp - 0x154]
cmp edx, 8
jb 0x10015b83
mov ecx, dword [ebp - 0x168]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015b79
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001656f
push edx
push ecx
call fcn.1006d8b6
add esp, 8
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x168], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x158], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x10015be7
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015bdd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001656f
push edx
push ecx
call fcn.1006d8b6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp edx, 8
jb 0x10015c3f
mov ecx, dword [ebp - 0x31c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015c35
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001656f
push edx
push ecx
call fcn.1006d8b6
add esp, 8
push str.RigidName
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x40]
call fcn.10051b30
mov edi, eax
lea eax, [ebp - 0x1b0]
cmp eax, edi
je 0x10015cc6
mov edx, dword [ebp - 0x19c]
cmp edx, 8
jb 0x10015c9c
mov ecx, dword [ebp - 0x1b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015c92
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016574
push edx
push ecx
call fcn.1006d8b6
add esp, 8
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x1b0], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x1a0], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov edx, dword [ebp - 0x54]
cmp edx, 8
jb 0x10015d00
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015cf6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016574
push edx
push ecx
call fcn.1006d8b6
add esp, 8
push 0x100c3530
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x40]
call fcn.10051b30
mov edi, eax
lea eax, [ebp - 0x198]
cmp eax, edi
je 0x10015d87
mov edx, dword [ebp - 0x184]
cmp edx, 8
jb 0x10015d5d
mov ecx, dword [ebp - 0x198]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10015d53
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016579
push edx
push ecx
call fcn.1006d8b6
add esp, 8
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x198], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x188], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
lea ecx, [ebp - 0x68]
call fcn.10002a60
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c8]
push ecx
cmp eax, dword [ebp - 0x48]
je 0x10015dae
mov edx, eax
call fcn.1000ddb0
add esp, 4
add dword [ebp - 0x4c], 0x78
jmp 0x10015db7
push eax
lea ecx, [ebp - 0x50]
call fcn.1000de40
lea ecx, [ebp - 0x1c8]
call fcn.1000a130
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], vtable.RegistryHandle.0
test eax, eax
je 0x10015dd7
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x38]
add esi, 0x18
jmp 0x10015918
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x15
call fcn.10003920
push dword [ebp - 0x320]
lea ecx, [ebp - 0x22c]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
call fcn.1000e770
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], vtable.RegistryHandle.0
test eax, eax
je 0x10015e21
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x50]
call fcn.10009a00
mov dword [ebp - 4], 6
mov edi, dword [ebp - 0x44]
jmp 0x10015e48
push ecx
push 0x20019
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x34]
push str.ServiceCloudSubscriptions
push dword [edi + 0x34]
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
call fcn.100534e0
mov dword [ebp - 0x34], vtable.RegistryAccess.0
push str.FixedVersionToken
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x34]
call fcn.10051b30
push eax
lea ecx, [ebp - 0x220]
call fcn.1000dab0
lea ecx, [ebp - 0x68]
call fcn.10002a60
push str.FixedVersionName
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x34]
call fcn.10051b30
push eax
lea ecx, [ebp - 0x208]
call fcn.1000dab0
lea ecx, [ebp - 0x68]
call fcn.10002a60
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], vtable.RegistryHandle.0
test eax, eax
je 0x10015ee2
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x10015ee2
push ecx
push 0x20019
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x20
xorps xmm0, xmm0
push str.ServicePolicyFeatures
push dword [edi + 0x34]
movlpd qword [ebp - 0x34], xmm0
call fcn.100534e0
mov dword [ebp - 0x34], vtable.RegistryAccess.0
push str.Features
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x34]
call fcn.10052c90
mov esi, eax
lea eax, [ebp - 0x1f0]
cmp eax, esi
je 0x10015f68
mov ecx, eax
call fcn.10003920
mov ecx, dword [esi]
mov dword [ebp - 0x1f0], ecx
mov eax, dword [esi + 4]
mov dword [ebp - 0x1ec], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x1e8], eax
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
lea ecx, [ebp - 0x20]
call fcn.10003920
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], vtable.RegistryHandle.0
test eax, eax
je 0x10015f93
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x10015f93
mov dword [ebp - 4], 6
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x4c], xmm0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
lea eax, [edi + 0x18]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x34]
movlpd qword [ebp - 0x34], xmm0
call fcn.100148f0
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x10016212
lea esi, [eax + 0x20]
mov ecx, esi
call fcn.10014b60
test al, al
je 0x100161ff
xor eax, eax
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x150], ax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], al
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x26
push eax
mov ecx, esi
call fcn.100142e0
push eax
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0x27
call fcn.10007900
lea ecx, [ebp - 0x150]
call fcn.10002a60
movups xmm0, xmmword [ebp - 0x338]
xor eax, eax
lea ecx, [ebp - 0x338]
mov word [ebp - 0x338], ax
movups xmmword [ebp - 0x150], xmm0
movq xmm0, qword [ebp - 0x328]
movq qword [ebp - 0x140], xmm0
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 7
call fcn.10002a60
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x26
call fcn.10002a60
push esi
lea ecx, [ebp - 0x31c]
call fcn.10007900
movups xmm0, xmmword [ebp - 0x31c]
xor eax, eax
mov word [ebp - 0x31c], ax
movups xmmword [ebp - 0x68], xmm0
movq xmm0, qword [ebp - 0x30c]
movq qword [ebp - 0x58], xmm0
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 7
push ecx
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x338]
call fcn.1005ad30
add esp, 4
lea ecx, [ebp - 0x138]
call fcn.10003840
movups xmm0, xmmword [ebp - 0x338]
lea ecx, [ebp - 0x338]
mov byte [ebp - 0x338], 0
movups xmmword [ebp - 0x138], xmm0
movq xmm0, qword [ebp - 0x328]
movq qword [ebp - 0x128], xmm0
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
call fcn.10003840
lea ecx, [ebp - 0x68]
call fcn.10002a60
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0x26
call fcn.10002a60
mov esi, dword [ebp - 0x94]
lea eax, [ebp - 0x150]
push eax
cmp esi, dword [ebp - 0x90]
je 0x100161d9
mov ecx, esi
mov dword [ebp - 0x38], esi
call fcn.10007900
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x2a
lea ecx, [esi + 0x18]
push eax
call fcn.10007b90
add dword [ebp - 0x94], 0x30
jmp 0x100161e5
push esi
lea ecx, [ebp - 0x98]
call fcn.1000e220
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x25
call fcn.10003840
lea ecx, [ebp - 0x150]
call fcn.10002a60
lea ecx, [ebp - 0x34]
call fcn.10014970
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10016010
mov ecx, dword [ebp - 0x30]
test ecx, ecx
je 0x1001621e
call fcn.10013d80
push ecx
push 0x20019
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x40]
push str.ServiceUpdateCache
push dword [edi + 0x34]
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
call fcn.100534e0
mov dword [ebp - 0x40], vtable.RegistryAccess.0
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x40]
call fcn.100525b0
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x304], eax
cmp esi, eax
je 0x10016425
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 7
mov word [ebp - 0x120], ax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], 7
mov word [ebp - 0x108], ax
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 0x2e
xorps xmm0, xmm0
cmp dword [esi + 0x14], 8
mov eax, esi
movlpd qword [ebp - 0x34], xmm0
jb 0x100162cb
mov eax, dword [esi]
push ecx
push 0x20019
push eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x34]
call fcn.100534e0
mov dword [ebp - 0x34], vtable.RegistryAccess.0
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x2f
cmp eax, esi
je 0x1001630b
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x100162fc
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x120]
push eax
call fcn.10004420
push str.hostname
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x34]
call fcn.10051b30
mov edi, eax
lea eax, [ebp - 0x108]
cmp eax, edi
je 0x10016359
mov ecx, eax
call fcn.10002a60
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x108], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0xf8], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
lea ecx, [ebp - 0x68]
call fcn.10002a60
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 4
push eax
lea eax, [ebp - 0x44]
push eax
push 0
push 0
push str.priority
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
test edi, edi
jne 0x1001657e
mov eax, dword [ebp - 0x44]
mov edi, dword [ebp - 0x88]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x120]
push eax
cmp edi, dword [ebp - 0x84]
je 0x100163d9
mov ecx, edi
mov dword [ebp - 0x38], edi
call fcn.10007900
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x31
lea ecx, [edi + 0x18]
push eax
call fcn.10007900
mov eax, dword [ebp - 0xf0]
mov dword [edi + 0x30], eax
add dword [ebp - 0x88], 0x34
jmp 0x100163e5
push edi
lea ecx, [ebp - 0x8c]
call fcn.1000e030
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], vtable.RegistryHandle.0
test eax, eax
je 0x10016401
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x108]
call fcn.10002a60
lea ecx, [ebp - 0x120]
call fcn.10002a60
mov eax, dword [ebp - 0x304]
add esi, 0x18
jmp 0x10016263
lea ecx, [ebp - 0x20]
call fcn.10003920
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], vtable.RegistryHandle.0
test eax, eax
je 0x10016442
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x320]
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0x1e0]
push dword [ebp - 0x94]
push dword [ebp - 0x98]
call fcn.1000ec40
push dword [ebp - 0x320]
lea ecx, [ebp - 0x1d4]
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
call fcn.1000ea00
mov ecx, dword [ebp - 0x320]
lea eax, [ebp - 0x2e8]
push eax
call fcn.1000d670
lea ecx, [ebp - 0x8c]
call fcn.10009a90
lea ecx, [ebp - 0x98]
call fcn.10009b10
lea ecx, [ebp - 0x300]
call fcn.10002a60
lea ecx, [ebp - 0xec]
call fcn.100089c0
lea ecx, [ebp - 0x2e8]
call fcn.100088c0
mov eax, dword [ebp - 0x320]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1006d58e
mov esp, ebp
pop ebp
ret 4
call fcn.100869bf
call fcn.100869bf
call fcn.100869bf
call fcn.100869bf
call fcn.100869bf
push str.Failed_to_open_registry_key
lea ecx, [ebp - 0x68]
call fcn.10005d60
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0xa
mov ecx, esi
call fcn.1000a4f0
call fcn.100869bf
call fcn.100869bf
push str.Failed_to_open_registry_key
lea ecx, [ebp - 0x68]
call fcn.10005d60
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x14
mov ecx, esi
call fcn.1000a4f0
push str.Failed_to_open_registry_key
lea ecx, [ebp - 0x68]
call fcn.10005d60
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x18
mov ecx, edi
call fcn.1000a4f0
call fcn.100869bf
call fcn.100869bf
call fcn.100869bf
call fcn.100869bf
push str.Failed_to_get_registry_value
lea ecx, [ebp - 0x68]
call fcn.10005d60
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x30
mov ecx, edi
call fcn.1000a4f0
int3