Function at 0x10005d8c
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x174
mov eax, 0x10051bef
call fcn.1003755a
mov esi, ecx
movzx eax, word [esi + 0x3d4]
xor ebx, ebx
lea edi, [ebp - 0x88]
mov dword [ebp - 0x13c], esi
mov dword [ebp - 0x140], eax
mov dword [esi + 0x3d8], ebx
call fcn.1001d89a
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], ebx
mov word [ebp - 0x44], ax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 1
call fcn.10005b9c
push 0x10056de8
mov dword [ebp - 0x138], eax
call fcn.1000556d
pop ecx
test eax, eax
jne 0x10005e61
push 0x10056cb0
call fcn.1000556d
pop ecx
test eax, eax
jne 0x10005e61
push str.CryptEnabled
call fcn.1000556d
pop ecx
test eax, eax
jne 0x10005e61
cmp dword [ebp - 0x138], ebx
jne 0x10005e61
cmp byte [ebp - 0x88], bl
jne 0x10005e61
mov eax, dword [ebp - 0x13c]
lea edi, [esi + 0x3bc]
mov esi, 0x10056b20
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [eax + 0x20], 0x20
movsd dword es:[edi], dword [esi]
add eax, 0x14
push eax
push 2
movsd dword es:[edi], dword [esi]
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push ebx
push 1
lea esi, [ebp - 0x48]
call fcn.100021e2
push ebx
push 1
jmp 0x1000610e
xor eax, eax
cmp byte [ebp - 0x88], bl
push str.CryptEnabled
setne al
mov dword [esi + 0x3d8], eax
call fcn.1000556d
test eax, eax
pop ecx
mov eax, 0x10056e04
jne 0x10005e8b
mov eax, 0x10056e14
push eax
lea esi, [ebp - 0x2c]
call fcn.10001eb9
push str.c034105b
push reloc.WS2_32.dll_bind
mov edx, str.Softwareprojonepodlp_smpcache_
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.1002d280
pop ecx
pop ecx
mov byte [ebp - 4], 3
cmp dword [ebp - 0x4c], 8
mov eax, dword [ebp - 0x60]
jae 0x10005ec1
lea eax, [ebp - 0x60]
push eax
call fcn.1002b867
mov edi, 0x10056e30
test eax, eax
je 0x10005f13
push str._g:gI
lea eax, [ebp - 0x2c]
push eax
call fcn.10004e10
push edi
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.100062bf
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.10005436
push ebx
push 1
lea esi, [ebp - 0x164]
mov byte [ebp - 4], 3
call fcn.100021e2
call fcn.1001c22f
test eax, eax
jne 0x10005f34
push str.S_MR
lea eax, [ebp - 0x2c]
push eax
call fcn.10004e10
mov dword [ebp - 0x140], 0x68
push str.CryptEnabled
call fcn.1000556d
pop ecx
test eax, eax
je 0x10005f98
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x164]
push 0x10056e4c
push eax
call fcn.10006305
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.10005436
push ebx
push 1
lea esi, [ebp - 0x164]
mov byte [ebp - 4], 3
call fcn.100021e2
push edi
lea eax, [ebp - 0x2c]
push eax
call fcn.10004e10
cmp dword [ebp - 0x138], ebx
je 0x10005f98
mov dword [ebp - 0x140], 0x69
lea edi, [ebp - 0x134]
call fcn.1000138e
mov eax, edi
push eax
mov byte [ebp - 4], 6
call fcn.1001d440
pop ecx
test eax, eax
je 0x1000601a
mov eax, edi
push eax
lea ecx, [ebp - 0x180]
call fcn.1000120a
pop ecx
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 8
jb 0x10005fd2
mov eax, dword [eax + 4]
jmp 0x10005fd5
add eax, 4
push eax
push 0x10056e58
lea ecx, [ebp - 0x164]
call fcn.1002d119
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.10005436
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x164]
call fcn.100021e2
push ebx
push edi
lea esi, [ebp - 0x180]
mov byte [ebp - 4], 6
call fcn.100021e2
jmp 0x1000601d
xor edi, edi
inc edi
push 4
pop esi
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x144]
push eax
push str.__activeRule
push str.Softwareprojonepodlp_smpcache_
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x138], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x10006064
cmp dword [ebp - 0x144], esi
jne 0x10006064
mov eax, dword [ebp - 0x148]
jmp 0x10006066
xor eax, eax
cmp eax, ebx
je 0x10006083
cmp eax, 2
mov eax, str._u7bVeu
je 0x10006079
mov eax, 0x10056ea0
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10004e10
push 0x10056cb0
call fcn.1000556d
pop ecx
test eax, eax
jne 0x100060b6
mov eax, dword [ebp - 0x13c]
cmp dword [eax + 0x3d8], ebx
jne 0x100060b6
push str.CryptEnabled
call fcn.1000556d
pop ecx
test eax, eax
je 0x100060c4
push 0x10056ed0
jmp 0x100060bb
push 0x10056eb8
lea eax, [ebp - 0x2c]
push eax
call fcn.10004e10
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x100060d0
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x140]
mov eax, dword [ebp - 0x13c]
push edi
call fcn.1000611f
lea esi, [ebp - 0x134]
call fcn.10001a2b
push ebx
push edi
lea esi, [ebp - 0x64]
call fcn.100021e2
push ebx
push edi
lea esi, [ebp - 0x2c]
call fcn.100021e2
push ebx
push edi
lea esi, [ebp - 0x48]
call fcn.100021e2
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.100020e6
call fcn.100375dd
ret