Function at 0x100095b0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, edx
push esi
mov esi, ecx
xor ecx, ecx
push ebx
mov ebx, eax
sub esp, 0x180
mov word [ebp - 0x14c], cx
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 1
mov dword [ebp - 0x140], 0xffffffff
mov dword [ebp - 0x13c], 4
test byte [0x100560c4], 8
jne 0x10009b68
mov edx, dword [ebx + 0xc8]
cmp edx, 2
je 0x10009b50
mov eax, dword [ebx + 0xb0]
test al, 8
jne 0x10009b50
test al, 2
jne 0x10009b3e
mov eax, dword [ebx + 0x24]
cmp dword [eax + 0xc], 0xffffffff
je 0x1000963c
add eax, 8
call sym._read_protocol_data.isra.0
mov edx, dword [ebx + 0xc8]
mov ecx, dword [ebx + 0x90]
mov eax, dword [ebx + 0x18]
test edx, edx
je 0x10009ba8
mov edx, dword [ebx + 0x24]
cmp dword [edx + 0x10], 1
je 0x10009c25
test edi, 4
jne 0x10009c25
mov edx, dword [eax]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 5
lea esi, [esi]
mov ecx, dword [ebp + 8]
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], ecx
call dword [edx + 0x18]
sub esp, 0x14
mov eax, dword [ebx + 0xb0]
test al, 0xa
jne 0x10009b3e
mov edx, dword [ebx + 0x84]
test edx, edx
je 0x10009c48
and eax, 4
mov edi, eax
jne 0x10009b3e
mov eax, dword [ebx]
mov dword [esp], ebx
call dword [eax + 4]
mov ecx, dword [ebx + 0x88]
sub esp, 4
test ecx, ecx
je 0x10009d00
cmp word [ecx], 0
mov eax, ecx
je 0x1000a045
nop
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x100096e0
sub eax, ecx
add eax, 0x38
mov dword [ebp - 0x168], ecx
mov esi, dword [sym.imp.ucrtbase.dll_malloc]
mov dword [esp], eax
call esi
mov ecx, dword [ebp - 0x168]
mov edx, eax
mov eax, dword [str.MIMEDatabaseContent_Type_]
mov dword [edx], eax
mov eax, dword [0x10059564]
mov dword [edx + 4], eax
mov eax, dword [0x10059568]
mov dword [edx + 8], eax
mov eax, dword [0x1005956c]
mov dword [edx + 0xc], eax
mov eax, dword [0x10059570]
mov dword [edx + 0x10], eax
mov eax, dword [0x10059574]
mov dword [edx + 0x14], eax
mov eax, dword [0x10059578]
mov dword [edx + 0x18], eax
mov eax, dword [0x1005957c]
mov dword [edx + 0x1c], eax
mov eax, dword [0x10059580]
mov dword [edx + 0x20], eax
mov eax, dword [0x10059584]
mov dword [edx + 0x24], eax
mov eax, dword [0x10059588]
mov dword [edx + 0x28], eax
mov eax, dword [0x1005958c]
mov dword [edx + 0x2c], eax
mov eax, dword [0x10059590]
mov dword [edx + 0x30], eax
movzx eax, word [0x10059594]
mov word [edx + 0x34], ax
lea esi, [esi]
movzx eax, word [ecx + edi]
mov word [edx + edi + 0x36], ax
add edi, 2
test ax, ax
jne 0x10009780
lea eax, [ebp - 0x138]
mov dword [esp + 4], edx
mov dword [ebp - 0x168], edx
mov dword [esp + 8], eax
mov dword [esp], ParseURLW
call dword [sym.imp.advapi32.dll_RegOpenKeyW]
mov edx, dword [ebp - 0x168]
mov edi, eax
mov eax, dword [sym.imp.ucrtbase.dll_free]
sub esp, 0xc
mov dword [esp], edx
mov dword [ebp - 0x168], eax
call eax
test edi, edi
jne 0x10009e90
mov dword [esp], 0x64
mov dword [ebp - 0x160], 0x64
call esi
mov dword [esp + 8], 0
mov esi, eax
lea eax, [ebp - 0x160]
mov dword [esp + 4], 0x1005928e
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x164]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x138]
mov dword [esp + 0x10], esi
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov edi, eax
mov eax, dword [ebp - 0x138]
sub esp, 0x18
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
test edi, edi
jne 0x10009d9b
lea edi, [ebp - 0x15c]
mov dword [esp], esi
mov dword [esp + 4], edi
call dword [sym.imp.ole32.dll_CLSIDFromString]
sub esp, 8
test eax, eax
js 0x1000a1ae
mov eax, dword [ebx + 0x18]
test esi, esi
je 0x10009db6
mov edx, dword [eax]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0xc
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x18]
mov eax, dword [ebx + 0x18]
sub esp, 0x14
mov edx, dword [eax]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x18]
lea eax, [ebx + 0x98]
sub esp, 0x14
mov ecx, eax
mov dword [ebp - 0x16c], eax
lea eax, [ebx + 0xcc]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 3
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
sub esp, 0x14
test eax, eax
js 0x1000a234
mov eax, dword [ebx + 0xcc]
or dword [ebx + 0xb0], 4
lea edi, [ebp - 0x164]
mov edx, dword [eax]
mov dword [esp + 8], edi
mov dword [esp + 4], 0x1006b278
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
test eax, eax
js 0x10009ed5
mov eax, dword [ebp - 0x164]
lea edi, [ebp - 0x160]
mov edx, dword [eax]
mov dword [esp + 8], edi
mov dword [esp + 4], 0x1006b268
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
test eax, eax
js 0x100099a6
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebx + 0x88]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
mov eax, dword [ebp - 0x160]
sub esp, 0xc
mov edx, dword [eax]
mov dword [esp + 8], esi
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [edx + 0xc]
mov eax, dword [ebp - 0x160]
sub esp, 0xc
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
lea eax, [ebp - 0x138]
mov dword [esp + 0x14], 0
mov edi, dword [ebp - 0x164]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebx + 0xd4]
mov dword [esp], eax
call sym.urlmon.dll_CreateAsyncBindCtxEx
sub esp, 0x18
test eax, eax
js 0x1000a0b6
mov eax, dword [ebp - 0x138]
mov edx, dword [eax]
mov dword [esp + 4], str._BSCB_Holder_
mov dword [esp], eax
call dword [edx + 0x30]
mov eax, dword [ebp - 0x138]
sub esp, 8
mov edx, dword [eax]
mov dword [esp + 8], ebx
mov dword [esp + 4], str.CBinding_Context
mov dword [esp], eax
call dword [edx + 0x24]
mov edx, dword [ebp - 0x138]
mov eax, dword [edi]
sub esp, 0xc
mov dword [esp + 0x10], 0x12
mov dword [esp + 0xc], edx
mov edx, dword [ebx + 0xd0]
mov dword [esp + 8], edx
xor edx, edx
cmp dword [ebx + 0xc8], 2
sete dl
mov dword [esp], edi
mov dword [esp + 4], edx
call dword [eax + 0x14]
mov edi, eax
mov eax, dword [ebp - 0x138]
sub esp, 0x14
mov edx, dword [eax]
mov dword [esp + 4], str.CBinding_Context
mov dword [esp], eax
call dword [edx + 0x30]
mov eax, dword [ebp - 0x138]
sub esp, 8
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
test edi, edi
js 0x1000a07c
mov eax, dword [ebp - 0x164]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xcc]
mov edi, dword [ebp - 0x16c]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [edx + 0x28]
mov eax, dword [ebp - 0x168]
sub esp, 0xc
mov dword [esp], esi
call eax
mov eax, dword [ebx + 0x18]
mov edx, dword [eax]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x18]
mov eax, dword [0x1006bdf8]
xor ecx, ecx
xor edx, edx
sub esp, 0x14
mov dword [ebx + 0xb8], eax
mov eax, dword [0x1006bdfc]
mov dword [ebx + 0xbc], eax
mov eax, dword [0x1006be00]
mov dword [ebx + 0xc0], eax
mov eax, dword [0x1006be04]
mov dword [ebx + 0xc4], eax
mov eax, ebx
call sym._stop_binding
mov eax, dword [ebx]
mov dword [esp], ebx
call dword [eax + 8]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebx + 0x24]
add eax, 8
call sym._read_protocol_data.isra.0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp + 8]
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x10059247
mov dword [esp + 8], str.report_data
mov dword [esp + 4], 0x100560c4
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009600
mov dword [ebx + 0xc8], 1
mov edx, dword [eax]
mov dword [esp + 0x10], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0xc], 4
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0x18]
mov edx, dword [ebx + 0x24]
sub esp, 0x14
mov eax, dword [edx + 0x14]
test eax, eax
je 0x10009cf0
mov edx, dword [ebx + 0x18]
mov ecx, dword [edx]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], 0xe
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], edx
call dword [ecx + 0x18]
mov eax, dword [ebx + 0x24]
sub esp, 0x14
cmp dword [eax + 0x10], 1
je 0x10009c1c
test edi, 4
je 0x1000968c
mov ecx, dword [ebx + 0x90]
mov eax, dword [ebx + 0x18]
mov dword [ebx + 0xc8], 2
mov edx, dword [eax]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 6
jmp 0x10009678
test al, 1
jne 0x10009c6d
mov eax, dword [ebx + 0x20]
mov edx, dword [eax]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x2c]
sub esp, 8
test eax, eax
js 0x10009c6d
or dword [ebx + 0xb0], 1
mov eax, dword [ebx + 0x28]
lea ecx, [ebp - 0x138]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 4]
lea ecx, [ebp - 0x138]
test eax, eax
js 0x10009e78
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebx + 0x8c]
mov word [ebp - 0x14c], ax
mov eax, dword [ebx + 0x18]
mov edx, dword [eax]
mov dword [esp + 0x10], ecx
lea ecx, [ebp - 0x14c]
mov dword [esp + 4], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp], eax
call dword [edx + 0x24]
sub esp, 0x14
mov edi, eax
test eax, eax
jne 0x10009d40
cmp dword [ebx + 0xc8], 2
jne 0x10009b3e
xor ecx, ecx
xor edx, edx
mov eax, ebx
call sym._stop_binding
jmp 0x10009b3e
cmp dword [edx + 0x10], 1
jne 0x10009c10
jmp 0x10009c1c
test byte [0x100560c4], 1
je 0x10009b33
mov dword [esp + 0xc], str.MIME_not_available_n
mov dword [esp + 8], str.create_object
mov dword [esp + 4], 0x100560c4
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009b33
cmp dword [ebx + 0xc8], 2
je 0x10009d7e
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x90]
mov dword [ebx + 0xc8], 2
mov edx, dword [eax]
mov dword [esp + 0x10], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0xc], 6
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 0x14
test byte [0x100560c4], 4
jne 0x10009ea8
xor ecx, ecx
mov edx, edi
mov eax, ebx
call sym._stop_binding
jmp 0x10009b3e
test byte [0x100560c4], 4
jne 0x1000a181
mov eax, dword [ebp - 0x168]
mov dword [esp], esi
call eax
mov eax, dword [ebx + 0x18]
mov edx, dword [eax]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 0x14
test byte [0x100560c4], 1
jne 0x10009f0f
mov eax, dword [ebx + 0x18]
mov edx, dword [eax]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x18]
mov eax, dword [0x1006bdf8]
xor ecx, ecx
mov edx, 0x80040154
sub esp, 0x14
mov dword [ebx + 0xb8], eax
mov eax, dword [0x1006bdfc]
mov dword [ebx + 0xbc], eax
mov eax, dword [0x1006be00]
mov dword [ebx + 0xc0], eax
mov eax, dword [0x1006be04]
mov dword [ebx + 0xc4], eax
mov eax, ebx
call sym._stop_binding
mov eax, dword [ebx + 0x20]
mov edx, dword [eax]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 8
jmp 0x10009b33
mov edx, eax
xor ecx, ecx
mov eax, ebx
call sym._stop_binding
jmp 0x10009b3e
test byte [0x100560c4], 4
jne 0x1000a04f
mov eax, dword [ebx + 0x18]
jmp 0x10009db6
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.OnDataAvailable_returned__lx_n
mov dword [esp + 8], str.report_data
mov dword [esp + 4], 0x100560c4
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009d8b
test byte [0x100560c4], 1
je 0x10009aa1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Could_not_get_IPersistMoniker:__08lx_n
mov dword [esp + 8], str.create_mime_object
mov dword [esp + 4], 0x100560c4
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009aa1
mov esi, dword [ebx + 0x88]
test esi, esi
je 0x1000a20c
mov eax, esi
shr eax, 0x10
je 0x1000a1e8
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, 0x10058e07
sub esp, 8
test eax, eax
jne 0x1000a018
cmp word [esi], 0
je 0x1000a216
nop
lea esi, [esi]
mov edx, eax
lea eax, [eax + 1]
cmp word [esi + edx*2 + 2], 0
jne 0x10009f58
mov eax, 0x224c
mov dword [ebp - 0x168], ebx
lea ecx, [ebp - 0x136]
mov word [ebp - 0x138], ax
jmp 0x10009fb0
cmp ax, 9
je 0x1000a170
cmp ax, 0xa
jne 0x1000a10e
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea eax, [edx - 1]
test edx, edx
jle 0x10009fe4
lea edi, [ebp - 0x16]
cmp ecx, edi
ja 0x10009fe4
mov edx, eax
movzx eax, word [esi]
add esi, 2
cmp ax, 0xd
je 0x1000a0f0
jbe 0x10009f80
cmp ax, 0x22
je 0x1000a15f
cmp ax, 0x5c
jne 0x1000a101
mov ebx, 0x5c5c
add ecx, 2
mov word [ecx - 2], bx
jmp 0x10009fa0
mov byte [ecx], 0x22
mov ebx, dword [ebp - 0x168]
test eax, eax
jle 0x1000a22c
mov edx, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], dx
mov byte [eax], 0
lea eax, [ebp - 0x138]
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Could_not_find_object_for_MIME__s_n
mov dword [esp + 8], str.create_object
mov dword [esp + 4], 0x100560c4
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009dee
mov eax, 0x38
jmp 0x100096ee
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.Could_not_open_MIME_key:__lx_n
mov dword [esp + 8], str.get_mime_clsid
mov dword [esp + 4], 0x100560c4
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009e9d
test byte [0x100560c4], 1
je 0x10009a90
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.Load_failed:__08lx_n
mov dword [esp + 8], str.load_doc_mon
mov dword [esp + 4], 0x100560c4
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009a90
test byte [0x100560c4], 4
je 0x10009a90
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.CreateAsyncBindCtxEx_failed:__08lx_n
mov dword [esp + 8], str.load_doc_mon
mov dword [esp + 4], 0x100560c4
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009a90
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x10009fa0
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x1000a202
mov edi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + 0x100598a0]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [edi + 0x100598a0]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + 0x100598a0]
and edi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [edi + 0x100598a0]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x10009fa0
mov edi, 0x225c
add ecx, 2
mov word [ecx - 2], di
jmp 0x10009fa0
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x10009fa0
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.Could_not_get_CLSID:__08lx_n
mov dword [esp + 8], str.get_mime_clsid
mov dword [esp + 4], 0x100560c4
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009da8
test byte [0x100560c4], 4
je 0x10009da8
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Could_not_parse_CLSID:__08lx_n
mov dword [esp + 8], str.get_mime_clsid
mov dword [esp + 4], 0x100560c4
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_2
jmp 0x10009da8
movzx esi, si
mov dword [esp], 0x10058e11
mov dword [esp + 4], esi
call sym._wine_dbg_sprintf_1
mov edx, eax
jmp 0x1000a018
mov byte [ecx], al
add ecx, 1
jmp 0x10009fa0
mov edx, 0x10058e00
jmp 0x1000a018
mov word [ebp - 0x138], 0x224c
lea ecx, [ebp - 0x136]
mov byte [ebp - 0x136], 0x22
lea eax, [ecx + 1]
jmp 0x1000a005
test byte [0x100560c4], 4
jne 0x1000a299
mov dword [esp], esi
mov eax, dword [ebp - 0x168]
lea edi, [ebx + 0xb8]
mov esi, 0x1006bdf8
call eax
mov eax, dword [ebx + 0x18]
mov edx, dword [eax]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x18]
mov ecx, 4
mov edx, 0x800c0010
mov eax, ebx
rep movsd dword es:[edi], dword [esi]
sub esp, 0x14
call sym._stop_binding
jmp 0x10009e56
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x100592d4
mov dword [esp + 8], str.create_mime_object
mov dword [esp + 4], 0x100560c4
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_2
jmp 0x1000a23d