Mini Kabibi Habibi
/*! $FileVersion=1.2.229 */ var registry_fileVersion = "1.2.229";
function CreateRegistryHelper(){var a={openKey:function(c,b){if(typeof b!=="boolean"){b=false}if(b){logDebug("open registry in write mode");return this._getPlugin().CreateReg(c)}logDebug("open registry in read mode");return this._getPlugin().OpenReg(c)},openKey64:function(c,b){if(typeof b!=="boolean"){b=false}if(b){logDebug("open registry in write mode (x64)");return this._getPlugin().CreateReg64(c)}logDebug("open registry in read mode (x64)");return this._getPlugin().OpenReg64(c)},queryValue:function(c,b){var g=false;try{if(typeof b==="boolean"){g=b}var f=this._getPlugin().QueryValue(c,g);return f}catch(d){logInformation("Failed to query "+(g?"obfuscated ":"")+"registry key '"+c+"': exception is '"+d.message+"'")}return null},setValue:function(d,f,b){var h=false;try{if(typeof b==="boolean"){h=b}var c=this._getPlugin().SetValue(d,f,h);if(!c){logDebug("registry.setvalue failed ("+d+", "+f+")")}return c}catch(g){logInformation("Failed to set "+(h?"obfuscated":"")+" registry key '"+hivePath+"\\"+d+" to '"+f+"': exception is '"+g.message+"'")}return null},executeAction:function(c){try{if(!c){return null}if(!this._customActions){this._customActions=this._createCustomActions(this)}return this._customActions[c.action](c)}catch(b){logError("registry:custom_actions: "+b.message+"datadefinition("+JSON.stringify(c.action)+")")}return null},fetchFromDataDefinition:function(i){try{if(!i){logError("registry:fetchFromDataDefinition Invalid data definition");return null}var g=i.path;if(!g){g=GetEngineSetting("Analytics.Base.RegKey","HKLM\\SOFTWARE\\McAfee\\McClientAnalytics")}var c=(i.wow64_64==true)?true:false;var h;if(c&&a._isWOW6432Node()){h=a.openKey64(g)}else{h=a.openKey(g)}if(!h){logWarning("registry:fetchFromDataDefinition: Unable to open path ("+g+")");return null}var b=i.obfuscated;var f=i.name;return a.queryValue(f,(b?b:false))}catch(d){logError("registry:fetchFromDataDefinition: "+d.message+"datadefinition("+JSON.stringify(i)+")")}return null},_isWOW6432Node:function(){try{return this.openKey("HKLM\\SOFTWARE\\WOW6432Node")==true}catch(b){logError("registry::_isWOW6432 "+b.message)}},_getPlugin:function(){if(!this._regPlugin){this._regPlugin=getPluginFactory().Create("registry")}return this._regPlugin},_createCustomActions:function(c){var b={findbestpath:function(g){var f=g.data;if(f instanceof Array){for(var d in f){var e=c.fetchFromDataDefinition(f[d]);if(e){return e}}}return null},iterateapplist:function(i){var f=i.applist;var h=[];if(f instanceof Array){var g=i.path;for(var d in f){var e=JSON.parse(JSON.stringify(i));e.path=g+"\\"+f[d];if(c.fetchFromDataDefinition(e)){h.push(f[d])}}return JSON.stringify(h)}return null}};return b},_regPlugin:null,_customActions:null};return a}ModuleManager.registerFactory("registry",CreateRegistryHelper);
//3C68914A6055AD9503F7EC8620C6083F92F5C51854173756F431D78DBFBC6647F00BF16A03C015788BD20BD2282927B043F1DA3867F515F78D972C14E3C595A3++