Function at 0x445920
Capabilities:
Set registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47f621
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2a0
mov eax, dword [0x4b5200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x298], ecx
sub esp, 8
mov edx, 1
push 0xff005f00
call fcn.00406240
mov esi, eax
mov dword [ebp - 0x2a4], esi
mov dword [ebp - 0x2ac], esi
sub esp, 8
mov dword [ebp - 4], 0
xor edx, edx
push 0xff005f00
call fcn.00406240
mov edi, eax
mov dword [ebp - 0x2b0], edi
push 0x268
lea eax, [ebp - 0x280]
push 0
push eax
call fcn.0046ce00
mov eax, dword [ebp - 0x298]
add esp, 0xc
add eax, 0xd0
mov word [ebp - 0x248], 0
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x170], 0
mov byte [ebp - 0x168], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x280]
push 1
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
call fcn.0041ac10
mov ecx, dword [ebp - 0x284]
lea eax, [ebp - 0x280]
push ecx
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12c
test ecx, ecx
push 0x190
cmovne eax, ecx
lea ecx, [ebp - 0x280]
push 0x4a7980
push str.CDI_THEME_SELECT_WND
mov dword [ebp - 0xc0], eax
call fcn.0040ea00
push ecx
push 0xc
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff000000
push 0x12c
push 0x190
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 3
call fcn.0041a370
movsd xmm0, qword [0x4ab360]
xor eax, eax
mov dword [ebp - 0x5c], 0
movsd qword [ebp - 0x110], xmm0
mov dword [ebp - 0x108], 0x190
mov byte [ebp - 0x104], 1
mov byte [ebp - 0xc2], 0
nop word [eax + eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x445ac0
inc eax
push eax
push str.Arial
lea eax, [ebp - 0x102]
push 0x20
push eax
call fcn.0046e5a3
add esp, 0x10
lea ecx, [ebp - 0x280]
call fcn.0041a8c0
mov ecx, dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x288], ecx
test al, al
je 0x445b76
mov eax, dword [ebp - 0x240]
push 0
push dword [ebp - 0x164]
inc eax
push eax
push dword [ebp - 0x4c]
movzx eax, byte [ebp - 0x38]
push 0x28
push 0x168
push 0x1e
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4a79f0
push 0x4a01b4
push 0
call ecx
test eax, eax
je 0x445b76
push eax
push 0xd
lea ecx, [ebp - 0x280]
call fcn.0041a630
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x244]
mov dword [eax + ecx*8 + 0x24], 0x14
mov dword [eax + ecx*8 + 0x28], 0x1e
mov dword [eax + ecx*8 + 0x2c], 0x168
mov dword [eax + ecx*8 + 0x30], 0x28
push 0xa06060
push 0
sub esp, 0xc
push 0x78
push ecx
push edi
push esi
push 0x4a7a6c
lea ecx, [ebp - 0x280]
call fcn.004150b0
push 0xfffefc
push 0xffffffffffffffff
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x2a8], eax
call fcn.00416d40
push 0xffa0a0
push 0xfffeff
sub esp, 0xc
push 0xa0
push ecx
push edi
push esi
push 0x4a7aa8
lea ecx, [ebp - 0x280]
call fcn.004150b0
push 0x301020
push 0xffffffffffffffff
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x2a0], eax
call fcn.00416d40
lea ecx, [ebp - 0x280]
call fcn.0041a8c0
test al, al
je 0x445c77
mov eax, dword [ebp - 0x240]
push 0
push dword [ebp - 0x164]
inc eax
push eax
push dword [ebp - 0x4c]
movzx eax, byte [ebp - 0x38]
push 0x3c
push 0x168
push 0xdc
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4edea8
push 0x4a01b4
push 0
call dword [ebp - 0x288]
test eax, eax
je 0x445c77
push eax
push 0xd
lea ecx, [ebp - 0x280]
call fcn.0041a630
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x244]
mov dword [eax + ecx*8 + 0x24], 0x14
mov dword [eax + ecx*8 + 0x28], 0xdc
mov dword [eax + ecx*8 + 0x2c], 0x168
mov dword [eax + ecx*8 + 0x30], 0x3c
push 1
push 1
lea ecx, [ebp - 0x280]
call fcn.00410690
mov ecx, dword [ebp - 0x284]
xor edx, edx
mov dword [ebp - 0x29c], edx
test ecx, ecx
je 0x446154
cmp byte [ecx + 0x38], 0
jne 0x446102
push 0
lea eax, [ecx + 0x14]
mov dword [ecx], 0
push 0
mov dword [ecx + 4], 0
xorps xmm0, xmm0
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
movups xmmword [eax], xmm0
push 0
movq qword [eax + 0x10], xmm0
push eax
mov dword [ebp - 0x28c], eax
mov dword [eax + 0x18], 0
call dword [sym.imp.USER32.dll_GetMessageW]
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x290], eax
test eax, eax
je 0x44614c
mov eax, dword [ecx + 0x18]
cmp eax, 0xcae
jne 0x445d68
mov dword [ecx], 0xfffffffa
mov byte [ecx + 0x39], 1
cmp dword [ebp - 0x290], 0
jle 0x44614c
cmp eax, 0x100
jne 0x446086
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0x290], eax
test eax, eax
je 0x446086
mov eax, 0xd
cmp ax, word [ecx + 0x1c]
jne 0x446086
mov eax, dword [ecx + 0x14]
xor edx, edx
mov dword [ebp - 0x294], eax
test eax, eax
jne 0x445fba
jmp 0x446056
test eax, eax
je 0x446106
mov edx, dword [ecx + 0x30]
test edx, edx
je 0x445d18
cmp eax, 0xcb1
jne 0x445d18
cmp dword [edx + 0x3c], 0
mov eax, dword [ecx + 0x1c]
mov dword [ebp - 0x28c], eax
je 0x446106
cmp eax, 1
jl 0x446106
cmp eax, dword [edx + 0x40]
jg 0x446106
mov ecx, dword [edx + 0x3c]
lea eax, [eax + eax*8]
cmp dword [ecx + eax*8 + 0xc], 0
mov ecx, dword [ebp - 0x284]
je 0x446106
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0x288], eax
cmp eax, 0x205
jne 0x445e3d
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x288], eax
mov eax, dword [edx + 0x1c0]
test eax, eax
je 0x446106
mov dword [eax + 0x30], edx
mov eax, dword [edx + 0x1c0]
mov dword [eax], 0xffffffea
mov eax, dword [edx + 0x1c0]
mov dword [eax + 8], 0x205
mov ecx, dword [ebp - 0x288]
mov eax, dword [edx + 0x1c0]
mov dword [eax + 4], ecx
mov eax, dword [edx + 0x1c0]
mov ecx, dword [ebp - 0x28c]
mov dword [eax + 0xc], ecx
mov eax, dword [edx + 0x1c0]
mov ecx, dword [ebp - 0x284]
mov dword [eax + 0x10], 0
mov eax, dword [edx + 0x1c0]
mov byte [eax + 0x38], 1
jmp 0x446106
cmp eax, 0x203
jne 0x445e79
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x288], eax
mov eax, dword [edx + 0x1c0]
test eax, eax
je 0x446106
mov dword [eax + 0x30], edx
mov eax, dword [edx + 0x1c0]
mov dword [eax], 0xfffffff2
mov eax, dword [edx + 0x1c0]
mov dword [eax + 8], 0x203
jmp 0x445dfd
cmp eax, 0x202
jne 0x445ea0
push 0
push 0
push dword [ecx + 0x14]
mov ecx, edx
push eax
push dword [ebp - 0x28c]
call fcn.0041ad60
mov ecx, dword [ebp - 0x284]
jmp 0x446106
cmp eax, 0x402
jne 0x445edf
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x288], eax
mov eax, dword [edx + 0x1c0]
test eax, eax
je 0x446106
mov dword [eax + 0x30], edx
mov eax, dword [edx + 0x1c0]
mov dword [eax], 0xffffff35
mov eax, dword [edx + 0x1c0]
mov dword [eax + 8], 0x402
jmp 0x445dfd
cmp eax, 0x403
je 0x445f7a
cmp eax, 0x404
je 0x445f7a
mov edx, dword [ecx + 0x14]
cmp eax, 0x405
mov dword [ebp - 0x294], edx
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x290], edx
mov eax, dword [edx + 0x1c0]
jne 0x445f43
test eax, eax
je 0x446106
mov ecx, dword [ebp - 0x294]
mov dword [eax + 0x30], edx
mov eax, dword [edx + 0x1c0]
mov dword [eax], 0xffffff34
mov eax, dword [edx + 0x1c0]
mov dword [eax + 8], 0x405
jmp 0x445e03
test eax, eax
je 0x446106
mov ecx, dword [ebp - 0x294]
mov dword [eax + 0x30], edx
mov eax, dword [edx + 0x1c0]
mov dword [eax], 0xffffff36
mov eax, dword [edx + 0x1c0]
mov edx, dword [ebp - 0x288]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x290]
jmp 0x445e03
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x290], eax
mov eax, dword [edx + 0x1c0]
test eax, eax
je 0x446106
mov ecx, dword [ebp - 0x288]
mov dword [eax + 0x30], edx
mov eax, dword [edx + 0x1c0]
mov dword [eax], 0xffffff33
mov eax, dword [edx + 0x1c0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x290]
jmp 0x445e03
push 0xfffffffffffffff4
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [ebp - 0x290]
mov edx, dword [ecx + 0x3c]
test edx, edx
je 0x44604c
cmp eax, 1
jl 0x44604c
cmp eax, dword [ecx + 0x40]
jg 0x44604c
lea ecx, [eax + eax*8]
cmp dword [edx + ecx*8 + 0xc], 0
je 0x44604c
mov ecx, dword [ebp - 0x294]
lea esi, [eax + eax*8]
cmp dword [edx + esi*8 + 4], ecx
mov esi, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x284]
jne 0x446052
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x290], edx
mov edx, dword [edx + 0x3c]
test edx, edx
je 0x446048
mov ecx, dword [ebp - 0x290]
cmp eax, dword [ecx + 0x40]
mov ecx, dword [ebp - 0x284]
jg 0x446048
lea ecx, [eax + eax*8]
cmp dword [edx + ecx*8 + 0xc], 0
mov ecx, dword [ebp - 0x284]
je 0x446048
lea ecx, [eax + eax*8]
mov edx, dword [edx + ecx*8]
mov ecx, dword [ebp - 0x284]
cmp edx, 0x23
je 0x446060
cmp edx, 0x24
jne 0x446056
jmp 0x446060
xor edx, edx
jmp 0x446056
mov ecx, dword [ebp - 0x284]
xor eax, eax
mov edx, eax
cmp edx, 0x22
je 0x446060
cmp edx, 0x25
jne 0x446086
mov ecx, dword [ecx + 0x14]
push ecx
movzx eax, ax
push eax
push 0x111
push ecx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x284]
jmp 0x446106
mov eax, dword [ecx + 0x34]
test eax, eax
je 0x4460e4
lea edx, [ecx + 0x14]
test edx, edx
jne 0x446098
xor dl, dl
jmp 0x4460e0
mov ecx, dword [eax + 0x244]
add eax, 0x230
mov dword [ebp - 0x290], eax
test ecx, ecx
je 0x4460cc
push edx
push ecx
push dword [eax]
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
setne dl
test eax, eax
jne 0x4460da
mov eax, dword [ebp - 0x290]
mov edx, dword [ebp - 0x28c]
push edx
push dword [eax]
call dword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
setne dl
mov ecx, dword [ebp - 0x284]
test dl, dl
jne 0x446102
push dword [ebp - 0x28c]
call dword [sym.imp.USER32.dll_TranslateMessage]
push dword [ebp - 0x28c]
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov ecx, dword [ebp - 0x284]
mov byte [ecx + 0x38], 0
mov eax, dword [ecx]
cmp eax, 0xfffffffa
je 0x446152
mov edx, dword [ebp - 0x298]
lea esi, [ebp - 0x280]
cmp dword [edx + 0x100], esi
mov esi, dword [ebp - 0x2a4]
jne 0x445c9c
cmp eax, dword [ebp - 0x2a8]
je 0x446152
cmp eax, dword [ebp - 0x2a0]
jne 0x445c9c
mov edx, 1
mov dword [ebp - 0x29c], edx
jmp 0x446154
mov dword [ecx], 0xfffffed4
xor edx, edx
test edx, edx
mov eax, 0x301020
mov dword [ebp - 0x2a0], eax
mov ecx, 0xc0c0c0
cmovne eax, ecx
mov ecx, dword [ebp - 0x298]
mov dword [ecx + 0xa4], eax
mov eax, 0xfffefc
cmovne eax, dword [ebp - 0x2a0]
mov dword [ecx + 0xa8], eax
mov eax, edx
neg eax
sbb eax, eax
and eax, 0xffffff
mov dword [ecx + 0xac], eax
mov dword [ecx], edx
mov eax, dword [ecx + 0x9d0]
test eax, eax
je 0x4461b7
push 4
push ecx
push 4
push 0
push str.CurrentTheme
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 4
call fcn.0040efc0
mov eax, dword [ebp - 0x244]
test eax, eax
je 0x4461d9
push eax
call fcn.0046b303
add esp, 4
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x4461ec
push eax
call fcn.0046b303
add esp, 4
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
test edi, edi
je 0x4461fd
push edi
call eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
test esi, esi
je 0x446204
push esi
call eax
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046b2f5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret