Function at 0x43c0e0
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x214
push ebx
push esi
lea eax, [esp + 8]
push edi
xor ebx, ebx
push eax
push 0x20019
push ebx
push str.Imaging.DocumentDefaultIcon
push SysReAllocString
mov dword [esp + 0x28], 0x104
mov dword [esp + 0x24], 1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x43c152
lea ecx, [esp + 0x14]
lea edx, [esp + 0x11c]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push ebx
push 0x45db8c
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea edx, [esp + 0x11c]
push 0x5c
push edx
call dword [sym.imp.MSVCRT.dll__mbsrchr]
add esp, 8
mov ebx, eax
mov eax, dword [esp + 0xc]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x43c185
mov edi, dword [esp + 0x224]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x11c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x18]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x22
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.MSVCRT.dll__mbschr]
add esp, 8
test eax, eax
je 0x43c1ef
mov edi, 0x45cfe4
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x18]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.___1_
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x18]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push eax
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
push eax
and ecx, 3
lea eax, [esp + 0x124]
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
push eax
push ecx
push str.DCX_Image_Document
push str.DCXImage.Document
push str..dcx
call fcn.0043be00
mov eax, dword [0x45dda8]
add esp, 0x1c
cmp eax, 2
pop edi
pop esi
pop ebx
je 0x43c278
push 0
lea edx, [esp + 0x114]
push 0
lea eax, [esp + 0x14]
push edx
push eax
push str.Fax_Viewer_Document
push str.FaxView.Document
push str..awd
call fcn.0043be00
add esp, 0x1c
push 0
lea ecx, [esp + 0x114]
push 0
lea edx, [esp + 0x14]
push ecx
push edx
push str.PCX_Image_Document
push str.PCXImage.Document
push str..pcx
call fcn.0043be00
push 0
lea eax, [esp + 0x130]
push 0
lea ecx, [esp + 0x30]
push eax
push ecx
push str.TIF_Image_Document
push str.TIFImage.Document
push str..tif
call fcn.0043be00
push 1
push 0
push 0
push 0
push 0
push str.TIFImage.Document
push str..tiff
call fcn.0043be00
add esp, 0x54
push 1
push 0
push 0
push 0
push 0
push str.TIFImage.Document
push str..jfx
call fcn.0043be00
push 0
lea edx, [esp + 0x130]
push 0
lea eax, [esp + 0x30]
push edx
push eax
push str.WIF_Image_Document
push str.WIFImage.Document
push str..wif
call fcn.0043be00
push 0
lea ecx, [esp + 0x14c]
push 0
lea edx, [esp + 0x4c]
push ecx
push edx
push str.XIF_Image_Document
push str.XIFImage.Document
push str..xif
call fcn.0043be00
add esp, 0x54
lea eax, [esp + 0x110]
lea ecx, [esp + 0xc]
push 0
push 0
push eax
push ecx
push str.Image_Bookmark_Document
push str.ImageBookmark.Document
push 0x45c9d8
call fcn.0043be00
mov eax, 1
add esp, 0x230
ret