Function at 0x408670
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff0
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
lea eax, [ebp - 0x844]
push ebx
sub esp, 0x8ac
mov dword [esp + 0x10], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [esp + 0xc], 9
mov dword [esp + 8], 0
mov dword [esp + 4], str.Control_PanelAppearanceNew_Schemes
mov dword [esp], 0x80000001
mov dword [ebp - 0x868], eax
call eax
sub esp, 0x14
test eax, eax
je 0x4086d0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
mov dword [ebp - 0x83c], 0xa
lea eax, [ebp - 0x83c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x80c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x838]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], str.SelectedStyle
mov eax, dword [ebp - 0x844]
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x85c], eax
call eax
sub esp, 0x18
test eax, eax
jne 0x408732
cmp dword [ebp - 0x838], 1
je 0x4092e8
xor eax, eax
mov word [ebp - 0x80c], ax
xor edi, edi
mov dword [ebp - 0x86c], edi
lea esi, cs:[esi]
mov dword [ebp - 0x83c], 5
lea eax, [ebp - 0x83c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x816]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], eax
mov edi, dword [ebp - 0x86c]
mov dword [esp + 4], edi
mov eax, dword [ebp - 0x844]
add edi, 1
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x86c], edi
sub esp, 0x20
mov ebx, eax
test eax, eax
jne 0x408b52
lea eax, [ebp - 0x840]
mov dword [esp + 0xc], 9
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x816]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x844]
mov dword [esp], eax
mov eax, dword [ebp - 0x868]
call eax
sub esp, 0x14
mov ebx, eax
test eax, eax
jne 0x408b52
lea eax, [ebp - 0x83c]
lea esi, [ebp - 0x780]
mov dword [ebp - 0x83c], 0x20a
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x838]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], str.DisplayName
mov eax, dword [ebp - 0x840]
mov dword [esp], eax
mov eax, dword [ebp - 0x85c]
call eax
mov ebx, eax
lea eax, [ebp - 0x816]
sub esp, 0x18
mov dword [ebp - 0x874], eax
test ebx, ebx
jne 0x408862
cmp dword [ebp - 0x838], 1
je 0x409370
mov esi, dword [ebp - 0x840]
lea eax, [ebp - 0x834]
mov dword [esp + 0xc], 9
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x411590
mov dword [esp], esi
mov eax, dword [ebp - 0x868]
call eax
mov dword [ebp - 0x878], eax
sub esp, 0x14
test eax, eax
jne 0x408b40
mov dword [ebp - 0x830], 0xa
lea eax, [ebp - 0x830]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x802]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x82c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], str.SelectedSize
mov dword [esp], esi
mov eax, dword [ebp - 0x85c]
call eax
sub esp, 0x18
test eax, eax
jne 0x408b80
cmp dword [ebp - 0x82c], 1
je 0x409300
xor eax, eax
mov word [ebp - 0x802], ax
jmp 0x408b90
movdqu xmm0, xmmword [0x41611c]
mov esi, 2
movdqu xmm1, xmmword [0x41612c]
movdqu xmm2, xmmword [0x41613c]
movdqu xmm3, xmmword [0x41614c]
movdqu xmm4, xmmword [0x41615c]
movups xmmword [ebp - 0x2f0], xmm0
movdqu xmm5, xmmword [0x416168]
movups xmmword [ebp - 0x2e0], xmm1
movups xmmword [ebp - 0x2b0], xmm4
movups xmmword [ebp - 0x2d0], xmm2
movups xmmword [ebp - 0x2c0], xmm3
movups xmmword [ebp - 0x2a4], xmm5
mov dword [esp + 8], 2
mov dword [esp + 4], str.Font__d
mov dword [esp], ebx
mov eax, dword [ebp - 0x858]
call eax
cmp eax, 6
jg 0x4089d0
lea edi, [ebp - 0x28c]
mov esi, 0x416180
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 8], 3
mov esi, 3
mov dword [esp + 4], str.Font__d
mov dword [esp], ebx
mov eax, dword [ebp - 0x858]
call eax
cmp eax, 6
jle case.0x408f21.3
lea esi, [esi]
mov eax, dword [ebp - 0x84c]
mov ecx, esi
mov edx, ebx
add esi, 1
mov dword [esp], eax
mov eax, dword [ebp - 0x824]
call fcn.00406880
cmp esi, 6
jne 0x408ef8
mov eax, dword [ebp - 0x824]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0x870]
sub esp, 4
test ebx, ebx
je 0x4090d8
mov dword [ebp - 0x81c], 0x20a
mov eax, dword [ebp - 0x864]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x576]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x860]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.DisplayName
mov eax, dword [ebp - 0x828]
mov dword [esp], eax
mov eax, dword [ebp - 0x85c]
call eax
mov esi, dword [ebp - 0x850]
sub esp, 0x18
test eax, eax
jne 0x408a77
cmp dword [ebp - 0x820], 1
je 0x409328
cmp dword [ebp - 0x888], 1
ja 0x409040
mov dword [esp + 8], esi
mov eax, dword [ebp - 0x874]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x84c]
mov dword [esp], eax
call fcn.004083a0
mov ebx, eax
test eax, eax
jne 0x4090f8
mov eax, dword [ebp - 0x828]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
or dword [ebp - 0x878], ebx
sub esp, 4
mov eax, dword [ebp - 0x850]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x850], eax
test eax, eax
jne 0x408cd8
mov ecx, dword [ebp - 0x890]
mov ebx, dword [ebp - 0x88c]
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
mov edi, ecx
lea esi, [esi]
mov eax, edi
mov edi, dword [edi + 0xc]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [0x416008]
mov dword [esp], eax
call esi
sub esp, 0xc
test edi, edi
jne 0x408af0
mov eax, dword [ebp - 0x878]
test eax, eax
je 0x408b40
lea eax, [ebp - 0x80c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x816]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
sub esp, 8
test eax, eax
je 0x4092c0
mov eax, dword [ebp - 0x840]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
sub esp, 4
cmp ebx, 0x103
jne 0x408748
mov eax, dword [ebp - 0x844]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
xor edi, edi
mov word [ebp - 0x802], di
cmp eax, 0x103
je 0x408b40
xor ecx, ecx
mov dword [ebp - 0x858], ebx
mov edi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
xor esi, esi
mov dword [ebp - 0x84c], ecx
lea esi, cs:[esi]
nop
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0
mov eax, dword [0x416008]
mov dword [esp], eax
call edi
sub esp, 0xc
mov ebx, eax
test eax, eax
je 0x408ca0
mov dword [ebp - 0x830], 5
lea eax, [ebp - 0x830]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x834]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
lea ecx, [esi + 1]
sub esp, 0x20
test eax, eax
jne 0x408c48
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x84c], ebx
mov dword [ebx + 0xc], eax
mov esi, ecx
jmp 0x408bb0
mov dword [ebp - 0x854], ecx
mov dword [ebp - 0x850], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword [0x416008]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov edx, dword [ebp - 0x850]
mov ecx, dword [ebp - 0x854]
sub esp, 0xc
cmp edx, 0x103
jne 0x408c3b
mov dword [ebp - 0x888], esi
mov ebx, dword [ebp - 0x858]
mov ecx, dword [ebp - 0x84c]
jmp 0x408cb7
mov eax, esi
mov ebx, dword [ebp - 0x858]
mov ecx, dword [ebp - 0x84c]
sub eax, 1
mov dword [ebp - 0x888], eax
test ecx, ecx
je 0x408b40
mov dword [ebp - 0x850], ecx
mov dword [ebp - 0x88c], ebx
mov dword [ebp - 0x890], ecx
lea esi, [esi]
lea eax, [ebp - 0x828]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov edi, dword [ebp - 0x850]
mov dword [esp + 4], edi
mov eax, dword [ebp - 0x834]
mov dword [esp], eax
mov eax, dword [ebp - 0x868]
call eax
sub esp, 0x14
test eax, eax
jne 0x408ac2
mov eax, dword [sym.imp.KERNEL32.dll_lstrcmpW]
mov dword [esp + 4], 0x41159c
mov dword [esp], edi
mov dword [ebp - 0x884], eax
call eax
mov dword [ebp - 0x870], eax
sub esp, 8
lea eax, [ebp - 0x816]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x576]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_wsprintfW]
mov dword [esp + 0x10], edi
mov dword [esp + 8], str.Control_PanelAppearanceNew_Schemes
mov dword [esp + 4], 0x4115a0
mov dword [ebp - 0x858], eax
call eax
cmp eax, 0x2d
jle 0x409020
mov dword [ebp - 0x824], 0
lea eax, [ebp - 0x824]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x576]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0x80000001
mov eax, dword [ebp - 0x868]
call eax
sub esp, 0x14
test eax, eax
jne 0x409020
mov esi, dword [ebp - 0x870]
test esi, esi
je 0x409130
lea eax, [ebp - 0x7d6]
mov dword [ebp - 0x854], eax
lea eax, [ebp - 0x81c]
mov dword [ebp - 0x864], eax
lea eax, [ebp - 0x820]
mov dword [ebp - 0x860], eax
lea eax, [ebp - 0x36c]
mov dword [ebp - 0x84c], eax
xor ebx, ebx
lea edi, [ebp - 0x7f8]
mov esi, ebx
lea esi, cs:[esi]
nop
mov ebx, dword [ebp - 0x824]
mov dword [esp + 8], esi
mov dword [esp + 4], str.Size__d
mov eax, dword [ebp - 0x854]
mov dword [esp], eax
mov edx, dword [ebp - 0x858]
call edx
cmp eax, 6
jle 0x408fd8
mov dword [ebp - 0x81c], 8
mov edx, dword [ebp - 0x864]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edx
mov ecx, dword [ebp - 0x860]
mov dword [esp + 8], 0
mov dword [esp + 0xc], ecx
mov eax, dword [ebp - 0x854]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x85c]
call eax
sub esp, 0x18
test eax, eax
jne 0x408fd8
cmp dword [ebp - 0x820], 0xb
jne 0x408fd8
mov ecx, dword [0x41600c]
mov eax, dword [ebp - 0x7f8]
cmp ecx, 0x60
je 0x408ebc
mov dword [esp + 8], 0x60
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
sub esp, 0xc
test eax, eax
js 0x408fd8
lea ecx, [esi + esi*2]
mov dword [ecx*4 + 0x410028], eax
mov dword [esp + 4], esi
add esi, 1
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x84c]
mov dword [esp], eax
call fcn.00407040
cmp esi, 0xa
jne 0x408e10
mov ebx, dword [ebp - 0x854]
xor esi, esi
mov dword [esp + 8], esi
mov dword [esp + 4], str.Font__d
mov dword [esp], ebx
mov eax, dword [ebp - 0x858]
call eax
cmp eax, 6
jg 0x4089d0
cmp esi, 5
ja case.0x408f21.0
jmp dword [esi*4 + 0x411618]
movdqu xmm6, xmmword [0x4161dc]
mov esi, 4
movdqu xmm7, xmmword [0x4161ec]
movdqu xmm0, xmmword [0x41621c]
movdqu xmm1, xmmword [0x416228]
movups xmmword [ebp - 0x230], xmm6
movdqu xmm6, xmmword [0x4161fc]
movups xmmword [ebp - 0x220], xmm7
movdqu xmm7, xmmword [0x41620c]
movups xmmword [ebp - 0x1f0], xmm0
movups xmmword [ebp - 0x210], xmm6
movups xmmword [ebp - 0x200], xmm7
movups xmmword [ebp - 0x1e4], xmm1
mov dword [esp + 8], 4
mov dword [esp + 4], str.Font__d
mov dword [esp], ebx
mov eax, dword [ebp - 0x858]
call eax
cmp eax, 6
jg 0x4089d0
mov edx, 4
lea eax, [ebp - 0x1d4]
mov esi, 0x416238
mov ecx, 0x17
mov edi, eax
rep movsd dword es:[edi], dword [esi]
lea esi, [edx + 1]
jmp 0x408ef8
cmp esi, 9
je 0x4090a8
mov dword [esp + 4], esi
lea ecx, [esi + esi*2]
mov dword [esp], 0x4160a0
call fcn.00406d80
mov dword [ecx*4 + 0x410028], eax
mov dword [esp + 4], esi
add esi, 1
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x84c]
mov dword [esp], eax
call fcn.00407040
jmp 0x408e10
mov eax, dword [ebp - 0x828]
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
sub esp, 4
jmp 0x408ac2
mov eax, dword [ebp - 0x850]
mov dword [esp], eax
call fcn.004014b0
cmp eax, 1
je 0x409310
lea ebx, [eax + 1]
cmp eax, 2
mov eax, 2
cmove ebx, eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub esp, 4
cmp eax, 0xc
jle 0x40907c
xor edx, edx
mov word [esi + 0x16], dx
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], str._d__s
mov esi, dword [ebp - 0x854]
mov dword [esp], esi
mov eax, dword [ebp - 0x858]
call eax
jmp 0x408a84
mov dword [0x410094], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 9
mov eax, dword [ebp - 0x84c]
mov dword [esp], eax
call fcn.00407040
jmp 0x408ef0
mov eax, dword [ebp - 0x874]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x84c]
mov dword [esp], eax
call fcn.004081c0
jmp 0x408a14
lea eax, [ebp - 0x802]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x850]
mov dword [esp], eax
mov eax, dword [ebp - 0x884]
call eax
sub esp, 8
test eax, eax
jne 0x408aaa
mov eax, dword [ebp - 0x874]
mov edx, esi
call fcn.00406690
jmp 0x408aaa
lea edx, [ebp - 0x81c]
mov edi, dword [ebp - 0x824]
lea eax, [ebp - 0x7d6]
xor ebx, ebx
mov dword [ebp - 0x864], edx
lea edx, [ebp - 0x820]
lea esi, [ebp - 0x7f8]
mov dword [ebp - 0x860], edx
lea edx, [ebp - 0x36c]
mov dword [ebp - 0x87c], edi
mov edi, dword [ebp - 0x858]
mov dword [ebp - 0x880], esi
mov esi, eax
mov dword [ebp - 0x854], eax
mov dword [ebp - 0x84c], edx
jmp 0x4091a8
mov eax, dword [ebx*4 + 0x4162f4]
mov edx, dword [ebp - 0x84c]
mov dword [edx + ebx*4 + 0x254], eax
add ebx, 1
cmp ebx, 0x1f
je 0x409230
mov dword [esp + 8], ebx
mov dword [esp + 4], str.Color__d
mov dword [esp], esi
call edi
cmp eax, 7
jle 0x409188
mov dword [ebp - 0x7f8], 4
mov eax, dword [ebp - 0x880]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x864]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x860]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x87c]
mov dword [esp], eax
mov eax, dword [ebp - 0x85c]
call eax
sub esp, 0x18
test eax, eax
jne 0x409188
cmp dword [ebp - 0x820], 4
jne 0x409188
mov eax, dword [ebp - 0x81c]
and eax, 0xffffff
jmp 0x40918f
mov esi, dword [ebp - 0x880]
mov edi, dword [ebp - 0x87c]
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x7f8], 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp - 0x864]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x860]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], str.Flat_Menus
mov dword [esp], edi
mov eax, dword [ebp - 0x85c]
call eax
sub esp, 0x18
test eax, eax
je 0x4092d0
xor eax, eax
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0xac]
mov eax, 1
cmp dword [ebp - 0x110], edx
jne 0x4092b4
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x10c], eax
setne al
movzx eax, al
mov dword [ebp - 0x20], eax
jmp 0x408dfc
mov eax, dword [ebp - 0x874]
call fcn.00406750
jmp 0x408b40
cmp dword [ebp - 0x820], 4
jne 0x40928c
mov eax, dword [ebp - 0x81c]
jmp 0x40928c
xor eax, eax
mov word [ebp - 0x804], ax
jmp 0x40873b
xor eax, eax
mov word [ebp - 0x7fa], ax
jmp 0x408b90
xor ebx, ebx
cmp dword [ebp - 0x888], 2
setne bl
add ebx, 2
jmp 0x409065
xor ecx, ecx
lea esi, [ebp - 0x7f8]
lea eax, [ebp - 0x576]
mov word [ebp - 0x36e], cx
mov dword [esp + 4], esi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xe
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_SHLoadIndirectString]
sub esp, 0x10
test eax, eax
lea eax, [ebp - 0x576]
cmovne esi, eax
jmp 0x408a77
xor eax, eax
lea edi, [ebp - 0x7ba]
mov word [ebp - 0x578], ax
mov dword [esp + 4], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x1d
mov dword [esp], esi
call dword [sym.imp.SHLWAPI.dll_SHLoadIndirectString]
sub esp, 0x10
test eax, eax
cmovne edi, esi
mov dword [ebp - 0x874], edi
jmp 0x408862
lea edi, [ebp - 0x174]
mov esi, 0x416298
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
jmp 0x4089f4
xor edx, edx
lea eax, [ebp - 0x354]
mov esi, 0x4160b8
jmp 0x408fc3