Function at 0x1000c71c
Capabilities:
Check if file exists
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2ac
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov eax, dword [0x1005d014]
xor eax, ebp
mov dword [ebp - 0x10], eax
lea eax, [edi + edi]
mov dword [ebp - 0x218], eax
lea ecx, [ebp - 0x218]
xor eax, eax
push ecx
push ebx
push eax
push 2
push eax
push str.CLSID1FD49718_1D00_4B19_AF5F_070AF6D5D54CInProcServer32
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
je 0x1000c773
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
jmp 0x1000c7bd
mov eax, dword [ebp - 0x218]
mov esi, 0x80070057
cmp eax, 2
jb 0x1000c7bd
shr eax, 1
cmp eax, 1
je 0x1000c7b8
lea ecx, [eax - 1]
cmp word [ebx + eax*2 - 2], 0x5c
mov eax, ecx
jne 0x1000c785
mov word [ebx + ecx*2], 0
mov esi, 0x80070057
test edi, edi
jle 0x1000c7bd
mov eax, ebx
mov ecx, edi
cmp word [eax], 0
je 0x1000c81a
add eax, 2
dec ecx
jne 0x1000c7aa
jmp 0x1000c7bd
mov esi, 0x80004005
push 2
call fcn.1000e17f
add esp, 4
test al, al
je 0x1000c803
lea edi, [ebp - 0x218]
mov ecx, edi
push 2
push 0x1c8
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000e1c8
push 0x24
push str.Failed_to_get_registered_stub_path:
push edi
call fcn.1000621f
add esp, 0xc
mov ecx, eax
push esi
call fcn.100020a0
mov ecx, edi
call fcn.1000e468
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10025901
mov eax, esi
add esp, 0x2ac
pop esi
pop edi
pop ebx
pop ebp
ret
mov word [eax], 0x5c
cmp ecx, 1
je 0x1000c857
mov word [eax + 2], 0
lea eax, [ebx - 2]
cmp word [eax + 2], 0
je 0x1000c83c
add eax, 2
dec edi
jne 0x1000c82d
jmp 0x1000c7bd
xor ecx, ecx
movzx edx, word [ecx + ecx + str.ie_to_edge_stub.exe]
test dx, dx
je 0x1000c866
mov word [eax + 2], dx
add eax, 2
inc ecx
cmp edi, ecx
jne 0x1000c83e
mov word [eax], 0
mov esi, 0x8007007a
jmp 0x1000c7bd
mov word [eax + 2], 0
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000c95a
xor eax, eax
lea ecx, [ebp - 0x228]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
sub esp, 0x1c
mov dword [esp + 0x18], eax
movaps xmm0, xmmword [0x10053880]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], str.SoftwareAppDataLowSoftwareMicrosoftEdgeIEToEdge
mov dword [esp], SysStringLen
call fcn.100044f2
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x1000cb40
mov esi, 0x208
push esi
push 0xff
lea edi, [ebp - 0x218]
push edi
call fcn.10028220
add esp, 0xc
lea ecx, [ebp - 0x2b4]
mov dword [ecx], 0xffffffff
lea eax, [ebp - 0x21c]
mov dword [eax], esi
push eax
push edi
push ecx
push 0
push str.LastStubPath
push dword [ebp - 0x228]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1000c9ea
mov ecx, dword [ebp - 0x2b4]
dec ecx
mov eax, 0xd
cmp ecx, 1
ja 0x1000c9ea
mov ecx, dword [ebp - 0x21c]
test ecx, ecx
je 0x1000c9df
test cl, 1
jne 0x1000c9ea
and ecx, 0xfffffffe
lea edx, [ebp - 0x218]
cmp word [ecx + edx - 2], 0
jne 0x1000c9ea
jmp 0x1000c9e8
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
mov esi, 0x8000ffff
cmovs esi, ecx
push 2
call fcn.1000e17f
add esp, 4
test al, al
je 0x1000c803
lea edi, [ebp - 0x218]
mov ecx, edi
push 2
push 0x1c5
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000e1c8
push 0x1e
push str.Invalid_registered_stub_path:
push edi
call fcn.1000621f
add esp, 0xc
mov dword [ebp - 0x2b8], eax
push ebx
call fcn.10036d35
add esp, 4
push eax
push ebx
push dword [ebp - 0x2b8]
call fcn.1000621f
add esp, 0xc
push 1
push 0x10054720
push eax
jmp 0x1000c7ec
mov word [ebp - 0x218], 0
xor eax, eax
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
cmp esi, 0x80070002
jne 0x1000ca0b
mov word [ebp - 0x218], 0
jmp 0x1000ca13
test esi, esi
js 0x1000cac5
push ebx
lea eax, [ebp - 0x218]
push eax
call fcn.10036c91
add esp, 8
xor esi, esi
test eax, eax
je 0x1000cb40
call fcn.10024c15
test eax, eax
js 0x1000ca79
test ebx, ebx
je 0x1000caf5
push ebx
call fcn.10036d35
add esp, 4
add eax, eax
add eax, 2
push eax
push ebx
push 1
push 0
push str.LastStubPath
push dword [ebp - 0x228]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jle 0x1000cb5a
movzx esi, ax
or esi, 0x80070000
jmp 0x1000cafa
mov edi, eax
push 2
call fcn.1000e17f
add esp, 4
test al, al
je 0x1000cac1
lea esi, [ebp - 0x2b4]
mov ecx, esi
push 2
push 0x1e8
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000e1c8
push 0x24
push str.Failed_to_refresh_elevation_policy:
push esi
call fcn.1000621f
add esp, 0xc
mov ecx, eax
push edi
call fcn.100020a0
mov ecx, esi
call fcn.1000e468
mov esi, edi
jmp 0x1000cb40
push 2
call fcn.1000e17f
add esp, 4
test al, al
je 0x1000cb40
lea edi, [ebp - 0x2b4]
mov ecx, edi
push 2
push 0x1ec
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000e1c8
push 0x20
push str.Failed_to_query_last_stub_path:
jmp 0x1000cb28
mov esi, 0x8007000d
push 2
call fcn.1000e17f
add esp, 4
test al, al
je 0x1000cb40
lea edi, [ebp - 0x2b4]
mov ecx, edi
push 2
push 0x1e5
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000e1c8
push 0x21
push str.Failed_to_update_last_stub_path:
push edi
call fcn.1000621f
add esp, 0xc
mov ecx, eax
push esi
call fcn.100020a0
mov ecx, edi
call fcn.1000e468
mov eax, dword [ebp - 0x228]
test eax, eax
je 0x1000c803
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1000c803
js 0x1000cbb1
push 0
call fcn.1000e17f
add esp, 4
test al, al
je 0x1000cb40
lea edi, [ebp - 0x2b4]
mov ecx, edi
push 0
push 0x1e3
push str..._.._third_party_ie_to_edge_bho_ie_to_edge_util.cc
call fcn.1000e1c8
push 0x1a
push str.Updated_last_stub_path_to
push edi
call fcn.1000621f
add esp, 0xc
mov edi, eax
push ebx
call fcn.10036d35
add esp, 4
push eax
push ebx
push edi
call fcn.1000621f
add esp, 0xc
lea ecx, [ebp - 0x2b4]
jmp 0x1000cb3b
mov esi, eax
jmp 0x1000cafa