Function at 0x1000695e
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x1cc
mov eax, 0x1004c8af
call fcn.10032dfa
mov esi, ecx
movzx eax, word [esi + 0x3d4]
xor ebx, ebx
lea edi, [ebp - 0x8c]
mov dword [ebp - 0x198], esi
mov dword [ebp - 0x194], eax
mov dword [esi + 0x3d8], ebx
call fcn.100168a7
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 1
call fcn.100067ab
push 0x10052020
mov dword [ebp - 0x190], eax
call fcn.100061f3
pop ecx
test eax, eax
jne 0x10006a1e
push 0x1005203c
call fcn.100061f3
pop ecx
test eax, eax
jne 0x10006a1e
push str.CryptEnabled
call fcn.100061f3
pop ecx
test eax, eax
jne 0x10006a1e
cmp dword [ebp - 0x190], ebx
jne 0x10006a1e
cmp byte [ebp - 0x8c], bl
jne 0x10006a1e
mov dword [esi + 0x20], 0x20
add esi, 0x14
push esi
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push ebx
push 1
lea esi, [ebp - 0x4c]
call fcn.1000233d
push ebx
push 1
jmp 0x10006ccb
xor eax, eax
cmp byte [ebp - 0x8c], bl
push str.CryptEnabled
setne al
mov dword [esi + 0x3d8], eax
call fcn.100061f3
test eax, eax
pop ecx
mov eax, 0x10052060
jne 0x10006a48
mov eax, 0x10052070
push eax
lea esi, [ebp - 0x30]
call fcn.10002018
push str.c034105b
push reloc.WS2_32.dll_bind
mov ecx, str.Softwareprojonepodlp_smpcache_
lea esi, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.10026e8b
pop ecx
pop ecx
mov byte [ebp - 4], 3
cmp dword [ebp - 0x50], 8
mov eax, dword [ebp - 0x64]
jae 0x10006a7e
lea eax, [ebp - 0x64]
push eax
call fcn.100254dc
mov edi, 0x1005208c
test eax, eax
je 0x10006ad0
push str._g:gI
lea eax, [ebp - 0x30]
push eax
call fcn.1000596e
push edi
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x1bc]
push eax
call fcn.10006e45
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.10005ff5
push ebx
push 1
lea esi, [ebp - 0x1bc]
mov byte [ebp - 4], 3
call fcn.1000233d
call fcn.1001567f
test eax, eax
jne 0x10006af1
push str.S_MR
lea eax, [ebp - 0x30]
push eax
call fcn.1000596e
mov dword [ebp - 0x194], 0x68
push str.CryptEnabled
call fcn.100061f3
pop ecx
test eax, eax
je 0x10006b55
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1bc]
push 0x100520a8
push eax
call fcn.10006e8b
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.10005ff5
push ebx
push 1
lea esi, [ebp - 0x1bc]
mov byte [ebp - 4], 3
call fcn.1000233d
push edi
lea eax, [ebp - 0x30]
push eax
call fcn.1000596e
cmp dword [ebp - 0x190], ebx
je 0x10006b55
mov dword [ebp - 0x194], 0x69
lea esi, [ebp - 0x18c]
call fcn.10001338
mov eax, esi
push eax
mov byte [ebp - 4], 6
call fcn.100163ff
pop ecx
test eax, eax
je 0x10006bd7
mov eax, esi
push eax
lea ecx, [ebp - 0x1d8]
call fcn.100011b4
pop ecx
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 8
jb 0x10006b8f
mov eax, dword [eax + 4]
jmp 0x10006b92
add eax, 4
push eax
push 0x100520b4
lea ecx, [ebp - 0x1bc]
call fcn.10026cac
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 8
call fcn.10005ff5
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x1bc]
call fcn.1000233d
push ebx
push edi
lea esi, [ebp - 0x1d8]
mov byte [ebp - 4], 6
call fcn.1000233d
jmp 0x10006bda
xor edi, edi
inc edi
push 4
pop esi
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x19c]
push eax
push str.__activeRule
push str.Softwareprojonepodlp_smpcache_
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x190], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x10006c21
cmp dword [ebp - 0x19c], esi
jne 0x10006c21
mov eax, dword [ebp - 0x1a0]
jmp 0x10006c23
xor eax, eax
cmp eax, ebx
je 0x10006c40
cmp eax, 2
mov eax, str._u7bVeu
je 0x10006c36
mov eax, 0x100520fc
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.1000596e
push 0x1005203c
call fcn.100061f3
pop ecx
test eax, eax
jne 0x10006c73
mov eax, dword [ebp - 0x198]
cmp dword [eax + 0x3d8], ebx
jne 0x10006c73
push str.CryptEnabled
call fcn.100061f3
pop ecx
test eax, eax
je 0x10006c81
push 0x1005212c
jmp 0x10006c78
push 0x10052114
lea eax, [ebp - 0x30]
push eax
call fcn.1000596e
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x10006c8d
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x194]
mov eax, dword [ebp - 0x198]
push edi
call fcn.10006cdc
lea esi, [ebp - 0x18c]
call fcn.10001b86
push ebx
push edi
lea esi, [ebp - 0x68]
call fcn.1000233d
push ebx
push edi
lea esi, [ebp - 0x30]
call fcn.1000233d
push ebx
push edi
lea esi, [ebp - 0x4c]
call fcn.1000233d
push ebx
push edi
lea ecx, [ebp - 0x88]
call fcn.10002245
call fcn.10032e7d
ret