Function at 0x43ad50
Capabilities:
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x218
mov ecx, dword [ebp + 8]
mov dword [0x4478a8], ecx
mov eax, dword [0x4478a8]
and eax, 0xffff
je 0x43ad7a
mov dword [0x447894], 0
jmp 0x43ad84
mov dword [0x447894], 1
cmp dword [0x4478a8], 0
jne 0x43ad97
mov dword [0x447894], 0
push 0x1019
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
test eax, eax
je 0x43adaa
int 2
mov ecx, 0x49
mov edx, dword [str.softwareclassesjjjerface000c109f_0000_0000_c000_000000000046proxystubclsid]
mov word [edx + 0x22], cx
mov eax, 0x6e
mov ecx, dword [str.softwareclassesjjjerface000c109f_0000_0000_c000_000000000046proxystubclsid]
mov word [ecx + 0x24], ax
mov edx, 0x74
mov eax, dword [str.softwareclassesjjjerface000c109f_0000_0000_c000_000000000046proxystubclsid]
mov word [eax + 0x26], dx
mov ecx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov dword [0x4478ac], ecx
cmp dword [0x447894], 0
jne 0x43ae0e
push 0x4478b0
mov edx, dword [str.softwareclassesjjjerface000c109f_0000_0000_c000_000000000046proxystubclsid]
push edx
mov eax, dword [0x4472bc]
push eax
call dword [0x4478ac]
test eax, eax
je 0x43ae0e
xor eax, eax
jmp 0x43b148
call fcn.0043ab80
add eax, 0x51615
mov dword [0x44789c], eax
mov ecx, dword [0x44789c]
push ecx
call fcn.0043b150
add esp, 4
mov dword [0x4478b4], eax
mov edx, dword [0x4478b4]
push edx
call fcn.0043b170
add esp, 4
mov dword [0x4478b8], eax
mov dword [0x4478b0], 0
mov dword [0x4478bc], 1
mov dword [ebp - 0x20c], 0x4472dc
mov dword [ebp - 0x218], 3
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x210], eax
push 0
push pe_nt_image_headers32
mov ecx, dword [ebp - 0x218]
push ecx
push 0
push 3
push 1
mov edx, dword [ebp - 0x20c]
push edx
call dword [ebp - 0x210]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xffffffff
je 0x43aebb
cmp dword [ebp - 0x214], 0
je 0x43aebb
mov eax, 0x42
jmp 0x43b148
mov eax, dword [0x4478b4]
mov dword [0x4478c0], eax
mov dword [0x4478c4], 0x23c912
mov ecx, dword [0x4478c4]
sub ecx, 0x23c912
mov dword [0x4478c4], ecx
mov edx, dword [0x4478c4]
mov dword [0x4478c8], edx
mov eax, dword [0x4478c4]
cmp eax, dword [0x4478b4]
jae 0x43af80
mov ecx, dword [0x4478c0]
push ecx
mov edx, dword [0x447208]
push edx
call fcn.0043b200
add esp, 8
mov dword [0x4478cc], eax
mov eax, dword [0x4478cc]
push eax
mov ecx, dword [0x44789c]
add ecx, dword [0x4478c8]
push ecx
mov edx, dword [0x4478b8]
add edx, dword [0x4478c4]
push edx
call fcn.0043b240
add esp, 0xc
mov eax, dword [0x44720c]
add eax, dword [0x447208]
add eax, dword [0x4478c8]
mov dword [0x4478c8], eax
mov ecx, dword [0x4478c4]
add ecx, dword [0x447208]
mov dword [0x4478c4], ecx
mov edx, dword [0x4478c0]
sub edx, dword [0x4478cc]
mov dword [0x4478c0], edx
jmp 0x43aeed
mov eax, dword [0x4478b4]
push eax
mov ecx, dword [0x4478b8]
push ecx
call fcn.0043ac30
add esp, 8
mov dword [0x4478d0], ebp
push 0x5b000
call fcn.0043b170
add esp, 4
mov dword [0x4478d4], eax
mov dword [0x4478b0], 0
mov edx, dword [0x4478b0]
mov dword [0x4478c4], edx
mov eax, dword [0x4478b0]
mov dword [0x4478c8], eax
call fcn.0043abf0
mov ecx, dword [0x44789c]
push ecx
call fcn.0043b150
add esp, 4
mov dword [0x4478b4], eax
mov edx, dword [0x4478b4]
push edx
call fcn.0043b170
add esp, 4
mov dword [0x4478d8], eax
mov eax, dword [0x4478b4]
mov dword [0x4478c0], eax
mov ecx, dword [0x4478c4]
cmp ecx, dword [0x4478b4]
jae 0x43b097
mov edx, dword [0x4478c0]
push edx
mov eax, dword [0x447208]
push eax
call fcn.0043b200
add esp, 8
mov dword [0x4478cc], eax
mov ecx, dword [0x4478cc]
push ecx
mov edx, dword [0x44789c]
add edx, dword [0x4478c8]
push edx
mov eax, dword [0x4478d8]
add eax, dword [0x4478c4]
push eax
call fcn.0043b240
add esp, 0xc
mov ecx, dword [0x44720c]
add ecx, dword [0x447208]
add ecx, dword [0x4478c8]
mov dword [0x4478c8], ecx
mov edx, dword [0x4478c4]
add edx, dword [0x447208]
mov dword [0x4478c4], edx
mov eax, dword [0x4478c0]
sub eax, dword [0x4478cc]
mov dword [0x4478c0], eax
jmp 0x43b004
mov ecx, dword [0x4478b4]
push ecx
mov edx, dword [0x4478d8]
push edx
call fcn.0043ac30
add esp, 8
mov eax, dword [0x4478b8]
mov ecx, dword [0x4478d8]
mov dword [eax], ecx
mov edx, dword [0x4478b8]
push edx
mov eax, dword [0x4478d4]
add eax, 0x200
push eax
call fcn.0043ac10
add esp, 8
call fcn.0043ac00
mov dword [0x4478dc], eax
mov ecx, dword [0x4478d4]
sub ecx, dword [0x4478dc]
push ecx
mov edx, dword [0x4478d4]
push edx
mov eax, dword [0x4478d8]
push eax
call fcn.0043b1a0
add esp, 0xc
mov ecx, dword [0x4478d4]
add ecx, 0x287d2
mov dword [0x4478e0], ecx
mov edx, dword [0x4478e0]
sub edx, 2
mov dword [0x4478e0], edx
mov dword [0x4478a0], 0x43b2b0
mov edx, edx
mov eax, dword [0x4478a0]
push 0x7b
mov eax, dword [0x4478a0]
mov ecx, esp
mov edx, edx
mov dword [ecx], 0
add dword [ecx], eax
mov edx, edx
ret
mov esp, ebp
pop ebp
ret