Function at 0x1000e0bf
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x68
mov eax, 0x1004edde
call fcn.10037d5a
mov eax, dword [ebp + 8]
cmp dword [eax + 0x18], 8
mov esi, ecx
mov dword [ebp - 0x4c], esi
jb 0x1000e0de
mov eax, dword [eax + 4]
jmp 0x1000e0e1
add eax, 4
push eax
push str.Softwareprojonepodlp_softwareChangedcache
push 0x1005977c
lea ecx, [ebp - 0x2c]
call fcn.1002d7c0
add esp, 0xc
and dword [ebp - 4], 0
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e107
lea edx, [ebp - 0x28]
push 0x10059b3c
mov edi, reloc.WS2_32.dll_bind
push edi
lea ecx, [ebp - 0x48]
call fcn.1002d927
pop ecx
pop ecx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e12c
lea eax, [ebp - 0x44]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 0x200
push eax
sub esi, 0xffffff80
push esi
call ebx
cmp word [esi], 0
jne 0x1000e168
xor edi, edi
push 0
push 1
lea esi, [ebp - 0x48]
call fcn.100021ef
push 0
push 1
lea esi, [ebp - 0x2c]
call fcn.100021ef
mov eax, edi
call fcn.10037ddd
ret 4
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e174
lea edx, [ebp - 0x28]
push 0x10059b2c
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d927
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.1000213e
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.100021ef
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e1b0
lea eax, [ebp - 0x44]
push 0x40
push eax
push dword [ebp - 0x4c]
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e1c4
lea edx, [ebp - 0x28]
push str.location
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d927
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.1000213e
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.100021ef
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e200
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x480
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e21d
lea edx, [ebp - 0x28]
push str.unInstall
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d927
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.1000213e
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.100021ef
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e259
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x880
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e276
lea edx, [ebp - 0x28]
push str.icon
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d927
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.1000213e
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.100021ef
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e2b2
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x1580
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1000e2cf
lea edx, [ebp - 0x28]
push 0x10059b88
push edi
lea ecx, [ebp - 0x74]
call fcn.1002d927
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 6
call fcn.1000213e
push 0
push 1
lea esi, [ebp - 0x74]
call fcn.100021ef
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1000e307
lea eax, [ebp - 0x44]
push 0x40
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0xc80
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x1000e321
lea eax, [ebp - 0x28]
mov ebx, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
push 4
pop esi
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push 0x10059b98
push eax
push edi
mov dword [ebp - 0x54], esi
call ebx
test eax, eax
jne 0x1000e350
cmp dword [ebp - 0x58], esi
jne 0x1000e350
mov eax, dword [ebp - 0x50]
jmp 0x1000e352
xor eax, eax
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0x1984], eax
mov eax, dword [ebp - 0x28]
jae 0x1000e367
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push 0x10059ba4
push eax
push edi
mov dword [ebp - 0x50], esi
call ebx
test eax, eax
jne 0x1000e38d
cmp dword [ebp - 0x58], esi
jne 0x1000e38d
mov eax, dword [ebp - 0x54]
jmp 0x1000e38f
xor eax, eax
mov ecx, dword [ebp - 0x4c]
xor edi, edi
inc edi
cmp eax, edi
sete al
mov byte [ecx + 0x1988], al
jmp 0x1000e146