Function at 0x402830
Capabilities:
Access peb ldr_data
Get process heap flags
Set registry value

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], edi
mov eax, dword [ecx + 4]
mov ebx, dword [ecx]
mov edx, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
cmp eax, 0x110
je 0x402890
cmp eax, 0x111
jne 0x402879
movzx eax, dx
dec dx
je 0x402970
cmp eax, 2
je 0x402951
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov dword [esp + 8], esi
mov eax, 8
mov dword [esp + 4], eax
mov dword [esp], ebx
call sym._SetWindowLongW_12
mov eax, dword [esi + 4]
sub esp, 0xc
test eax, eax
je 0x402a60
mov dword [esp + 8], eax
mov eax, 0x7d1
mov dword [esp + 4], eax
mov dword [esp], ebx
call sym._SetDlgItemTextW_12
sub esp, 0xc
mov eax, dword [esi + 0xc]
mov edi, 0x400
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x10]
mov esi, 0x7d2
mov dword [esp + 8], edi
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov eax, 0x7d2
mov dword [esp + 4], eax
call sym._SendDlgItemMessageW_20
sub esp, 0x14
mov dword [esp], 0xb
call sym._GetStockObject_4
mov edx, 1
mov ecx, 0x30
sub esp, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._SendDlgItemMessageW_20
mov eax, 1
sub esp, 0x14
jmp 0x40287b
mov dword [esp], ebx
mov edx, 0x7da
mov dword [esp + 4], edx
call sym._error_code_messagebox
mov dword [esp], ebx
xor eax, eax
mov dword [esp + 4], eax
call sym._EndDialog_8
mov eax, 1
sub esp, 8
jmp 0x40287b
mov dword [esp], ebx
mov esi, 8
mov dword [esp + 4], esi
call sym._GetWindowLongW_8
sub esp, 8
mov edi, eax
mov dword [esp], ebx
xor eax, eax
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov eax, 0x401
mov dword [esp + 8], eax
mov eax, 0x7d2
mov dword [esp + 4], eax
call sym._SendDlgItemMessageW_20
mov dword [ebp - 0x1c], eax
sub esp, 0x14
mov dword [esp], eax
call sym._heap_xalloc
mov edx, dword [ebp - 0x1c]
mov dword [esp], ebx
mov dword [esp + 0xc], edx
mov edx, 0x7d2
mov dword [esp + 4], edx
mov dword [esp + 0x10], eax
mov esi, eax
mov eax, 0x401
mov dword [esp + 8], eax
call sym._SendDlgItemMessageW_20
mov edx, dword [ebp - 0x1c]
xor ecx, ecx
sub esp, 0x14
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], esi
mov eax, dword [edi + 8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [edi + 4]
mov dword [esp + 4], eax
mov eax, dword [edi]
mov dword [esp], eax
call sym._RegSetValueExW_24
sub esp, 0x18
mov edi, eax
mov dword [esp + 8], esi
xor esi, esi
mov dword [esp + 4], esi
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
test edi, edi
jne 0x402940
mov dword [esp], ebx
mov ecx, 1
mov dword [esp + 4], ecx
call sym._EndDialog_8
mov eax, 1
sub esp, 8
jmp 0x40287b
mov dword [esp], ebx
mov eax, 0x7d1
mov edi, 0x416e40
mov dword [esp + 8], edi
mov dword [esp + 4], eax
call sym._SetDlgItemTextW_12
sub esp, 0xc
jmp 0x4028cb