Function at 0x100067ea
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x1cc
mov eax, 0x1005d309
call fcn.100418da
mov esi, ecx
movzx eax, word [esi + 0x3d4]
xor ebx, ebx
lea edi, [ebp - 0x8c]
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x198], eax
mov dword [esi + 0x3d8], ebx
call fcn.100240a9
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 1
call fcn.10006637
push 0x10063080
mov dword [ebp - 0x190], eax
call fcn.1000608a
pop ecx
test eax, eax
jne 0x100068bf
push 0x1006309c
call fcn.1000608a
pop ecx
test eax, eax
jne 0x100068bf
push str.CryptEnabled
call fcn.1000608a
pop ecx
test eax, eax
jne 0x100068bf
cmp dword [ebp - 0x190], ebx
jne 0x100068bf
cmp byte [ebp - 0x8c], bl
jne 0x100068bf
mov eax, dword [ebp - 0x194]
lea edi, [esi + 0x3bc]
mov esi, 0x10062e60
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [eax + 0x20], 0x20
movsd dword es:[edi], dword [esi]
add eax, 0x14
push eax
push 2
movsd dword es:[edi], dword [esi]
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push ebx
push 1
lea esi, [ebp - 0x4c]
call fcn.1000233f
push ebx
push 1
jmp 0x10006b6c
xor eax, eax
cmp byte [ebp - 0x8c], bl
push str.CryptEnabled
setne al
mov dword [esi + 0x3d8], eax
call fcn.1000608a
test eax, eax
pop ecx
mov eax, 0x100630c0
jne 0x100068e9
mov eax, 0x100630d0
push eax
lea esi, [ebp - 0x30]
call fcn.10002030
push str.c034105b
push reloc.WS2_32.dll_bind
mov edx, str.Softwareprojonepodlp_smpcache_
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.100342d2
pop ecx
pop ecx
mov byte [ebp - 4], 3
cmp dword [ebp - 0x50], 8
mov eax, dword [ebp - 0x64]
jae 0x1000691f
lea eax, [ebp - 0x64]
push eax
call fcn.100326c4
mov edi, 0x100630ec
test eax, eax
je 0x10006971
push str._g:gI
lea eax, [ebp - 0x30]
push eax
call fcn.10005857
push edi
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x1bc]
push eax
call fcn.10006d04
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.10005e7d
push ebx
push 1
lea esi, [ebp - 0x1bc]
mov byte [ebp - 4], 3
call fcn.1000233f
call fcn.1002294b
test eax, eax
jne 0x10006992
push str.S_MR
lea eax, [ebp - 0x30]
push eax
call fcn.10005857
mov dword [ebp - 0x198], 0x68
push str.CryptEnabled
call fcn.1000608a
pop ecx
test eax, eax
je 0x100069f6
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1bc]
push 0x10063108
push eax
call fcn.10006d4a
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.10005e7d
push ebx
push 1
lea esi, [ebp - 0x1bc]
mov byte [ebp - 4], 3
call fcn.1000233f
push edi
lea eax, [ebp - 0x30]
push eax
call fcn.10005857
cmp dword [ebp - 0x190], ebx
je 0x100069f6
mov dword [ebp - 0x198], 0x69
lea esi, [ebp - 0x18c]
call fcn.10001363
mov eax, esi
push eax
mov byte [ebp - 4], 6
call fcn.10023bfb
pop ecx
test eax, eax
je 0x10006a78
mov eax, esi
push eax
lea ecx, [ebp - 0x1d8]
call fcn.100011df
pop ecx
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 8
jb 0x10006a30
mov eax, dword [eax + 4]
jmp 0x10006a33
add eax, 4
push eax
push 0x10063114
lea ecx, [ebp - 0x1bc]
call fcn.1003416b
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 8
call fcn.10005e7d
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x1bc]
call fcn.1000233f
push ebx
push edi
lea esi, [ebp - 0x1d8]
mov byte [ebp - 4], 6
call fcn.1000233f
jmp 0x10006a7b
xor edi, edi
inc edi
push 4
pop esi
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x19c]
push eax
push str.__activeRule
push str.Softwareprojonepodlp_smpcache_
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x190], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x10006ac2
cmp dword [ebp - 0x19c], esi
jne 0x10006ac2
mov eax, dword [ebp - 0x1a0]
jmp 0x10006ac4
xor eax, eax
cmp eax, ebx
je 0x10006ae1
cmp eax, 2
mov eax, str._u7bVeu
je 0x10006ad7
mov eax, 0x1006315c
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10005857
push 0x1006309c
call fcn.1000608a
pop ecx
test eax, eax
jne 0x10006b14
mov eax, dword [ebp - 0x194]
cmp dword [eax + 0x3d8], ebx
jne 0x10006b14
push str.CryptEnabled
call fcn.1000608a
pop ecx
test eax, eax
je 0x10006b22
push 0x1006318c
jmp 0x10006b19
push 0x10063174
lea eax, [ebp - 0x30]
push eax
call fcn.10005857
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x10006b2e
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x194]
push edi
call fcn.10006b7d
lea esi, [ebp - 0x18c]
call fcn.10001b84
push ebx
push edi
lea esi, [ebp - 0x68]
call fcn.1000233f
push ebx
push edi
lea esi, [ebp - 0x30]
call fcn.1000233f
push ebx
push edi
lea esi, [ebp - 0x4c]
call fcn.1000233f
push ebx
push edi
lea ecx, [ebp - 0x88]
call fcn.10002243
call fcn.1004195d
ret