Function at 0x10010633
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x68
mov eax, 0x10059738
call fcn.100422ea
mov eax, dword [ebp + 8]
cmp dword [eax + 0x18], 8
mov esi, ecx
mov dword [ebp - 0x4c], esi
jb 0x10010652
mov eax, dword [eax + 4]
jmp 0x10010655
add eax, 4
push eax
push str.Softwareprojonepodlp_softwareChangedcache
push 0x10065bc4
lea ecx, [ebp - 0x2c]
call fcn.100347ad
add esp, 0xc
and dword [ebp - 4], 0
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x1001067b
lea edx, [ebp - 0x28]
push 0x10065f84
mov edi, reloc.WS2_32.dll_bind
push edi
lea ecx, [ebp - 0x48]
call fcn.10034914
pop ecx
pop ecx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x100106a0
lea eax, [ebp - 0x44]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 0x200
push eax
sub esi, 0xffffff80
push esi
call ebx
cmp word [esi], 0
jne 0x100106dc
xor edi, edi
push 0
push 1
lea esi, [ebp - 0x48]
call fcn.10002370
push 0
push 1
lea esi, [ebp - 0x2c]
call fcn.10002370
mov eax, edi
call fcn.1004236d
ret 4
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x100106e8
lea edx, [ebp - 0x28]
push 0x10065f74
push edi
lea ecx, [ebp - 0x74]
call fcn.10034914
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.100022bf
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.10002370
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x10010724
lea eax, [ebp - 0x44]
push 0x40
push eax
push dword [ebp - 0x4c]
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x10010738
lea edx, [ebp - 0x28]
push str.location
push edi
lea ecx, [ebp - 0x74]
call fcn.10034914
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.100022bf
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.10002370
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x10010774
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x480
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x10010791
lea edx, [ebp - 0x28]
push str.unInstall
push edi
lea ecx, [ebp - 0x74]
call fcn.10034914
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.100022bf
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.10002370
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x100107cd
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x880
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x100107ea
lea edx, [ebp - 0x28]
push str.icon
push edi
lea ecx, [ebp - 0x74]
call fcn.10034914
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.100022bf
push 0
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.10002370
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x10010826
lea eax, [ebp - 0x44]
push 0x200
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x1580
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov edx, dword [ebp - 0x28]
jae 0x10010843
lea edx, [ebp - 0x28]
push 0x10065fd0
push edi
lea ecx, [ebp - 0x74]
call fcn.10034914
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 6
call fcn.100022bf
push 0
push 1
lea esi, [ebp - 0x74]
call fcn.10002370
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x1001087b
lea eax, [ebp - 0x44]
push 0x40
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0xc80
push eax
call ebx
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x10010895
lea eax, [ebp - 0x28]
mov ebx, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
push 4
pop esi
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push 0x10065fe0
push eax
push edi
mov dword [ebp - 0x54], esi
call ebx
test eax, eax
jne 0x100108c4
cmp dword [ebp - 0x58], esi
jne 0x100108c4
mov eax, dword [ebp - 0x50]
jmp 0x100108c6
xor eax, eax
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x4c]
mov dword [ecx + 0x1984], eax
mov eax, dword [ebp - 0x28]
jae 0x100108db
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push 0x10065fec
push eax
push edi
mov dword [ebp - 0x50], esi
call ebx
test eax, eax
jne 0x10010901
cmp dword [ebp - 0x58], esi
jne 0x10010901
mov eax, dword [ebp - 0x54]
jmp 0x10010903
xor eax, eax
mov ecx, dword [ebp - 0x4c]
xor edi, edi
inc edi
cmp eax, edi
sete al
mov byte [ecx + 0x1988], al
jmp 0x100106ba