Function at 0x1000df1b
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x68
mov eax, 0x1004e4c0
call fcn.1003755a
mov eax, dword [ebp + 8]
cmp dword [eax + 0x18], 8
mov esi, ecx
mov dword [ebp - 0x4c], esi
jb 0x1000df3a
mov eax, dword [eax + 4]
jmp 0x1000df3d
add eax, 4
push eax
push str.Softwareprojonepodlp_softwareChangedcache
push 0x10058584
lea ecx, [ebp - 0x2c]
call fcn.1002d119
add esp, 0xc
and dword [ebp - 4], 0
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000df63
lea edx, [ebp - 0x28]
push 0x10058944
mov edi, reloc.WS2_32.dll_bind
push edi
lea ecx, [ebp - 0x48]
call fcn.1002d280
pop ecx
pop ecx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000df88
lea eax, [ebp - 0x44]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 0x200
push eax
sub esi, 0xffffff80
push esi
call ebx
cmp word [esi], 0
jne 0x1000dfc4
xor edi, edi
push 0
push 1
lea esi, [ebp - 0x48]
call fcn.100021e2
push 0
push 1
lea esi, [ebp - 0x2c]
call fcn.100021e2
mov eax, edi
call fcn.100375dd
ret 4
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000dfd0
lea edx, [ebp - 0x28]
push 0x10058934
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d280
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.10002131
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.100021e2
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e00c
lea eax, [ebp - 0x44]
push 0x40
push eax
push dword [ebp - 0x4c]
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e020
lea edx, [ebp - 0x28]
push str.location
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d280
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.10002131
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.100021e2
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e05c
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x480
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e079
lea edx, [ebp - 0x28]
push str.unInstall
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d280
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.10002131
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.100021e2
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e0b5
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x880
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e0d2
lea edx, [ebp - 0x28]
push str.icon
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d280
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.10002131
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.100021e2
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e10e
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x1580
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e12b
lea edx, [ebp - 0x28]
push 0x10058990
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d280
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 6
call fcn.10002131
push 0
push 1
lea esi, [ebp - 0x74]
call fcn.100021e2
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e163
lea eax, [ebp - 0x44]
push 0x40
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0xc80
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x1000e17d
lea eax, [ebp - 0x28]
mov ebx, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
push 4
pop esi
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push 0x100589a0
push eax
push edi
mov dword [ebp - 0x54], esi
call ebx
test eax, eax
jne 0x1000e1ac
cmp dword [ebp - 0x58], esi
jne 0x1000e1ac
mov eax, dword [ebp - 0x50]
jmp 0x1000e1ae
xor eax, eax
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0x1984], eax
mov eax, dword [ebp - 0x28]
jae 0x1000e1c3
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push 0x100589ac
push eax
push edi
mov dword [ebp - 0x50], esi
call ebx
test eax, eax
jne 0x1000e1e9
cmp dword [ebp - 0x58], esi
jne 0x1000e1e9
mov eax, dword [ebp - 0x54]
jmp 0x1000e1eb
xor eax, eax
mov ecx, dword [ebp - 0x4c]
xor edi, edi
inc edi
cmp eax, edi
sete al
mov byte [ecx + 0x1988], al
jmp 0x1000dfa2