Function at 0x100067b6
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x1cc
mov eax, 0x1005de2a
call fcn.100422ea
mov esi, ecx
movzx eax, word [esi + 0x3d4]
xor ebx, ebx
lea edi, [ebp - 0x8c]
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x198], eax
mov dword [esi + 0x3d8], ebx
call fcn.100246d9
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 1
call fcn.10006603
push 0x100640e8
mov dword [ebp - 0x190], eax
call fcn.10006056
pop ecx
test eax, eax
jne 0x1000688b
push 0x10064104
call fcn.10006056
pop ecx
test eax, eax
jne 0x1000688b
push str.CryptEnabled
call fcn.10006056
pop ecx
test eax, eax
jne 0x1000688b
cmp dword [ebp - 0x190], ebx
jne 0x1000688b
cmp byte [ebp - 0x8c], bl
jne 0x1000688b
mov eax, dword [ebp - 0x194]
lea edi, [esi + 0x3bc]
mov esi, 0x10063ec8
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [eax + 0x20], 0x20
movsd dword es:[edi], dword [esi]
add eax, 0x14
push eax
push 2
movsd dword es:[edi], dword [esi]
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push ebx
push 1
lea esi, [ebp - 0x4c]
call fcn.10002370
push ebx
push 1
jmp 0x10006b38
xor eax, eax
cmp byte [ebp - 0x8c], bl
push str.CryptEnabled
setne al
mov dword [esi + 0x3d8], eax
call fcn.10006056
test eax, eax
pop ecx
mov eax, 0x10064128
jne 0x100068b5
mov eax, 0x10064138
push eax
lea esi, [ebp - 0x30]
call fcn.10002030
push str.c034105b
push reloc.WS2_32.dll_bind
mov edx, str.Softwareprojonepodlp_smpcache_
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.10034914
pop ecx
pop ecx
mov byte [ebp - 4], 3
cmp dword [ebp - 0x50], 8
mov eax, dword [ebp - 0x64]
jae 0x100068eb
lea eax, [ebp - 0x64]
push eax
call fcn.10032d06
mov edi, 0x10064154
test eax, eax
je 0x1000693d
push str._g:gI
lea eax, [ebp - 0x30]
push eax
call fcn.10005834
push edi
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x1bc]
push eax
call fcn.10006cd0
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.10005e49
push ebx
push 1
lea esi, [ebp - 0x1bc]
mov byte [ebp - 4], 3
call fcn.10002370
call fcn.10022fae
test eax, eax
jne 0x1000695e
push str.S_MR
lea eax, [ebp - 0x30]
push eax
call fcn.10005834
mov dword [ebp - 0x198], 0x68
push str.CryptEnabled
call fcn.10006056
pop ecx
test eax, eax
je 0x100069c2
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1bc]
push 0x10064170
push eax
call fcn.10006d16
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.10005e49
push ebx
push 1
lea esi, [ebp - 0x1bc]
mov byte [ebp - 4], 3
call fcn.10002370
push edi
lea eax, [ebp - 0x30]
push eax
call fcn.10005834
cmp dword [ebp - 0x190], ebx
je 0x100069c2
mov dword [ebp - 0x198], 0x69
lea esi, [ebp - 0x18c]
call fcn.10001363
mov eax, esi
push eax
mov byte [ebp - 4], 6
call fcn.1002422b
pop ecx
test eax, eax
je 0x10006a44
mov eax, esi
push eax
lea ecx, [ebp - 0x1d8]
call fcn.100011df
pop ecx
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 8
jb 0x100069fc
mov eax, dword [eax + 4]
jmp 0x100069ff
add eax, 4
push eax
push 0x1006417c
lea ecx, [ebp - 0x1bc]
call fcn.100347ad
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 8
call fcn.10005e49
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x1bc]
call fcn.10002370
push ebx
push edi
lea esi, [ebp - 0x1d8]
mov byte [ebp - 4], 6
call fcn.10002370
jmp 0x10006a47
xor edi, edi
inc edi
push 4
pop esi
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x19c]
push eax
push str.__activeRule
push str.Softwareprojonepodlp_smpcache_
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x190], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x10006a8e
cmp dword [ebp - 0x19c], esi
jne 0x10006a8e
mov eax, dword [ebp - 0x1a0]
jmp 0x10006a90
xor eax, eax
cmp eax, ebx
je 0x10006aad
cmp eax, 2
mov eax, str._u7bVeu
je 0x10006aa3
mov eax, 0x100641c4
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10005834
push 0x10064104
call fcn.10006056
pop ecx
test eax, eax
jne 0x10006ae0
mov eax, dword [ebp - 0x194]
cmp dword [eax + 0x3d8], ebx
jne 0x10006ae0
push str.CryptEnabled
call fcn.10006056
pop ecx
test eax, eax
je 0x10006aee
push 0x100641f4
jmp 0x10006ae5
push 0x100641dc
lea eax, [ebp - 0x30]
push eax
call fcn.10005834
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x10006afa
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x194]
push edi
call fcn.10006b49
lea esi, [ebp - 0x18c]
call fcn.10001b84
push ebx
push edi
lea esi, [ebp - 0x68]
call fcn.10002370
push ebx
push edi
lea esi, [ebp - 0x30]
call fcn.10002370
push ebx
push edi
lea esi, [ebp - 0x4c]
call fcn.10002370
push ebx
push edi
lea ecx, [ebp - 0x88]
call fcn.10002274
call fcn.1004236d
ret