Function at 0x100303e0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd60
mov eax, dword [0x1006de68]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0xc40], 0
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x418]
push ecx
push str.CIMIO_MSG.LOG
call fcn.1002f560
add esp, 8
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x418]
test ecx, ecx
jne 0x1003043b
jmp 0x100306e8
call fcn.10030740
lea edx, [ebp - 0xc3c]
push edx
lea eax, [ebp - 0x418]
push eax
call fcn.1002e540
add esp, 8
test eax, eax
jne 0x10030591
mov dword [ebp - 0xc44], 0x100000
mov dword [ebp - 0xc50], 1
mov dword [ebp - 0xc60], reloc.WSOCK32.dll_bind
mov dword [ebp - 0xc54], 4
call sym.CIMIO_NO_WRITE.dll_GetCimioRegSamViewFlag
mov dword [ebp - 0xc5c], eax
lea ecx, [ebp - 0xc48]
push ecx
mov edx, dword [ebp - 0xc5c]
or edx, 0xf003f
push edx
push 0
push 0x1006a3b8
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xc58], eax
cmp dword [ebp - 0xc58], 0
jne 0x10030543
lea ecx, [ebp - 0xc54]
push ecx
lea edx, [ebp - 0xc50]
push edx
push 0
push 0
push 0x1006a3d4
mov eax, dword [ebp - 0xc48]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0xc4c], eax
cmp dword [ebp - 0xc4c], 0
jne 0x10030510
mov ecx, dword [ebp - 0xc44]
imul ecx, dword [ebp - 0xc50]
mov dword [ebp - 0xc44], ecx
jmp 0x10030543
cmp dword [ebp - 0xc4c], 2
jne 0x10030543
mov edx, dword [ebp - 0xc54]
push edx
lea eax, [ebp - 0xc50]
push eax
push 4
push 0
push str.CIMIOMaxLogSizeMB
mov ecx, dword [ebp - 0xc48]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [ebp - 0xc4c], eax
cmp dword [ebp - 0xc48], 0
je 0x10030559
mov edx, dword [ebp - 0xc48]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0xc44], 0x100000
jge 0x1003056f
mov dword [ebp - 0xc44], 0x100000
mov eax, dword [ebp - 0xc28]
cmp eax, dword [ebp - 0xc44]
jle 0x10030591
call fcn.1002f330
lea ecx, [ebp - 0x418]
push ecx
call fcn.10030720
add esp, 4
mov dword [ebp - 0xc40], 0
push 0x1006a3fc
lea edx, [ebp - 0x418]
push edx
call dword [sym.imp.MSVCR120.dll_fopen]
add esp, 8
mov dword [ebp - 0xc40], eax
cmp dword [ebp - 0xc40], 0
jne 0x100305ee
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCR120.dll__errno]
mov ecx, dword [eax]
push ecx
push 1
call fcn.1002ed90
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
push 0x13f1
push 5
call fcn.1002ed90
add esp, 0xc
jmp 0x100306e8
push 0x1059bf58
call sub.MSVCR120.dll_strlen
add esp, 4
mov esi, eax
push 0x1059bf78
call sub.MSVCR120.dll_strlen
add esp, 4
add esi, eax
jne 0x10030684
lea eax, [ebp - 0xd60]
push eax
call sym.CIMIO_NO_WRITE.dll_CIMIO_USR_GetApplicationID
add esp, 4
push eax
call sub.MSVCR120.dll_strlen
add esp, 4
mov esi, eax
lea ecx, [ebp - 0xce0]
push ecx
call sym.CIMIO_NO_WRITE.dll_CIMIO_USR_GetApplicationID
add esp, 4
add eax, 0x20
push eax
call sub.MSVCR120.dll_strlen
add esp, 4
add esi, eax
je 0x10030684
lea edx, [ebp - 0xca0]
push edx
call sym.CIMIO_NO_WRITE.dll_CIMIO_USR_GetApplicationID
add esp, 4
push eax
push 0x1059bf58
call sub.MSVCR120.dll_strcpy
add esp, 8
lea eax, [ebp - 0xd20]
push eax
call sym.CIMIO_NO_WRITE.dll_CIMIO_USR_GetApplicationID
add esp, 4
add eax, 0x20
push eax
push 0x1059bf78
call sub.MSVCR120.dll_strcpy
add esp, 8
lea ecx, [ebp - 0xc18]
push ecx
push 0x1059bf58
call fcn.1002f650
add esp, 8
lea edx, [ebp - 0xc18]
jmp 0x105b5ee0
cmp dword [ebp - 0xc40], 0
je 0x10030701
mov eax, dword [ebp - 0xc40]
push eax
call dword [sym.imp.MSVCR120.dll_fclose]
add esp, 4
call fcn.100307d0
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10059cde
mov esp, ebp
pop ebp
ret