Function at 0x1000b900
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x1003b010]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
or esi, 0xffffffff
push eax
push 0
push 1
push 0
push 0
push 0
push str.Control_PanelDesktop
push SysReAllocString
call edi
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1000b972
lea eax, [ebp - 8]
mov dword [ebp - 8], 4
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push str.LogPixels
push dword [ebp - 0x14]
call ebx
push dword [ebp - 0x14]
test eax, eax
cmove esi, dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, 0xffffffff
jne 0x1000bb7c
lea eax, [ebp - 0xc]
or esi, esi
push eax
lea eax, [ebp - 0x14]
push eax
push 0
push 1
push 0
push 0
push 0
push str.Control_PanelDesktopWindowMetrics
push SysReAllocString
call edi
test eax, eax
jne 0x1000b9cd
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 4
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push str.AppliedDPI
push dword [ebp - 0x14]
call ebx
push dword [ebp - 0x14]
test eax, eax
cmove esi, dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, 0xffffffff
jne 0x1000bb7c
lea eax, [ebp - 0xc]
or esi, esi
push eax
lea eax, [ebp - 0x14]
push eax
push 0
push 1
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionThemeManager
push SysReAllocString
call edi
test eax, eax
jne 0x1000ba28
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 4
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push str.LastLoadedDPI
push dword [ebp - 0x14]
call ebx
push dword [ebp - 0x14]
test eax, eax
cmove esi, dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, 0xffffffff
jne 0x1000bb7c
lea eax, [ebp - 0xc]
or esi, esi
push eax
lea eax, [ebp - 0x14]
push eax
push 0
push 1
push 0
push 0
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionFontDPI
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x1000ba83
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 4
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push str.LogPixels
push dword [ebp - 0x14]
call ebx
push dword [ebp - 0x14]
test eax, eax
cmove esi, dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, 0xffffffff
jne 0x1000bb7c
lea eax, [ebp - 0xc]
or esi, esi
push eax
lea eax, [ebp - 0x14]
push eax
push 0
push 1
push 0
push 0
push 0
push str..DEFAULTControl_PanelDesktopWindowMetrics
push SysStringLen
call edi
test eax, eax
jne 0x1000bade
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 4
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push str.AppliedDPI
push dword [ebp - 0x14]
call ebx
push dword [ebp - 0x14]
test eax, eax
cmove esi, dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, 0xffffffff
jne 0x1000bb7c
lea eax, [ebp - 0xc]
or esi, esi
push eax
lea eax, [ebp - 0x14]
push eax
push 0
push 1
push 0
push 0
push 0
push str.SoftwareFonts
push SysStringLen
call edi
test eax, eax
jne 0x1000bb39
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 4
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push str.LogPixels
push dword [ebp - 0x14]
call ebx
push dword [ebp - 0x14]
test eax, eax
cmove esi, dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, 0xffffffff
jne 0x1000bb7c
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edi, eax
push 0x58
push edi
call esi
push 0x5a
push edi
mov dword [0x1003cc98], eax
call esi
push edi
push 0
mov dword [0x1003cc9c], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000e891
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop edi
mov dword [0x1003cc9c], esi
xor ecx, ebp
mov dword [0x1003cc98], esi
pop esi
pop ebx
call fcn.1000e891
mov esp, ebp
pop ebp
ret