Function at 0x1006730
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x28c
mov eax, dword [0x100eb54]
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
xor eax, eax
lea ecx, [ebx + 0x1600]
inc eax
cmp dword [ecx], 0
jne 0x1006be6
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_LoadStringW]
mov esi, 0x100
push esi
push ebx
mov dword [ecx], eax
push 0x5aa
push dword [0x100eb74]
mov dword [0x10160a8], eax
call edi
push esi
lea eax, [ebx + 0x200]
push eax
push 0x5ab
push dword [0x100eb74]
call edi
push esi
lea eax, [ebx + 0x400]
push eax
push 0x5ac
push dword [0x100eb74]
call edi
push esi
lea eax, [ebx + 0x600]
push eax
push 0x5ad
push dword [0x100eb74]
call edi
push esi
lea eax, [ebx + 0x800]
push eax
push 0x5ae
push dword [0x100eb74]
call edi
push esi
lea eax, [ebx + 0xa00]
push eax
push 0x5af
push dword [0x100eb74]
call edi
push esi
lea eax, [ebx + 0xc00]
push eax
push 0x5b0
push dword [0x100eb74]
call edi
push esi
lea eax, [ebx + 0xe00]
push eax
push 0x5b1
push dword [0x100eb74]
call edi
push esi
lea eax, [ebx + 0x1000]
push eax
push 0x5b2
push dword [0x100eb74]
call edi
push esi
lea eax, [ebx + 0x1200]
push eax
push 0x5b4
push dword [0x100eb74]
call edi
push esi
add ebx, 0x1400
push ebx
push 0x5b5
push dword [0x100eb74]
call edi
push 0xa
xor eax, eax
pop ecx
lea edi, [ebp - 0x238]
rep stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp - 0x238], edi
mov dword [ebp - 0x234], 0x10065f7
mov dword [ebp - 0x230], edi
mov dword [ebp - 0x22c], edi
mov eax, dword [0x100eb74]
push 0x7f00
push edi
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], edi
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x238]
push eax
mov dword [ebp - 0x21c], 0x10
mov dword [ebp - 0x218], edi
mov dword [ebp - 0x214], 0x1002040
call dword [sym.imp.USER32.dll_RegisterClassW]
push edi
call dword [sym.imp.USER32.dll_GetDC]
mov ebx, eax
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push ebx
push edi
mov dword [0x10160a4], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push edi
xor eax, eax
inc eax
push eax
push eax
push eax
push eax
call dword [sym.imp.GDI32.dll_CreateBitmap]
cmp eax, edi
mov dword [ebp - 0x20c], eax
jne 0x10068fe
xor eax, eax
jmp 0x1006be4
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push dword [0x10160a4]
call ebx
push eax
push dword [0x10160a4]
call ebx
push dword [ebp - 0x20c]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.USER32.dll_GetDC]
mov ebx, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push eax
mov dword [ebp - 0x20c], eax
call ebx
push 0x26
push dword [ebp - 0x20c]
mov dword [0x100e75c], eax
call ebx
push dword [ebp - 0x20c]
and eax, esi
push edi
mov dword [0x1016084], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0xf
call dword [sym.imp.GDI32.dll_GetStockObject]
mov esi, dword [sym.imp.GDI32.dll_GetPaletteEntries]
lea ecx, [ebp - 0x248]
push ecx
push 1
push 0xb
push eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x288], 0xffffff
mov dword [ebp - 0x284], edi
mov dword [ebp - 0x280], 0xc0c0c0
mov dword [ebp - 0x27c], 0x808080
mov dword [ebp - 0x278], 0xff
mov dword [ebp - 0x274], 0x80
mov dword [ebp - 0x270], 0xffff
mov dword [ebp - 0x26c], 0x8080
mov dword [ebp - 0x268], 0xff00
mov dword [ebp - 0x264], 0x8000
mov dword [ebp - 0x260], 0xffff00
mov dword [ebp - 0x25c], 0x808000
mov dword [ebp - 0x258], 0xff0000
mov dword [ebp - 0x254], 0x800000
mov dword [ebp - 0x250], 0xff00ff
mov dword [ebp - 0x24c], 0x800080
call esi
mov ebx, dword [sym.imp.GDI32.dll_CreatePalette]
lea eax, [ebp - 0x28c]
push eax
mov dword [ebp - 0x28c], 0x110300
call ebx
mov dword [0x1016080], eax
lea eax, [ebp - 0x248]
push eax
push 4
push 8
push dword [ebp - 0x20c]
call esi
lea eax, [ebp - 0x28c]
push eax
mov dword [ebp - 0x28c], 0x140300
call ebx
mov dword [0x101607c], eax
xor esi, esi
push esi
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [esi*4 + 0x100eb9c], eax
mov dword [esi*4 + 0x1015da8], edi
inc esi
cmp esi, 0x1f
jl 0x1006a66
mov esi, dword [sym.imp.USER32.dll_SystemParametersInfoW]
push edi
lea ecx, [ebp - 0x208]
mov eax, 0x1f4
push ecx
push eax
push 0x29
mov dword [ebp - 0x208], eax
call esi
lea eax, [ebp - 0x208]
push eax
call fcn.01005840
push edi
push 0x1015f4c
push 0x5c
push 0x1f
call esi
push edi
push 1
push edi
push 0x1009
call esi
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0xb
call esi
mov dword [0x100e124], eax
cdq
sub eax, edx
sar eax, 1
mov dword [0x100e130], eax
lea eax, [ebp - 0x210]
push eax
push 0x1001c90
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x1006b74
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x14]
push eax
push edi
push edi
push 0x1001cd8
push dword [ebp - 0x210]
mov dword [ebp - 0x20c], 0x10
call ebx
test eax, eax
jne 0x1006b32
lea eax, [ebp - 0x14]
push eax
call fcn.010058cd
mov dword [0x100e124], eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x14]
push eax
push edi
push edi
push 0x1001cf8
push dword [ebp - 0x210]
mov dword [ebp - 0x20c], 0x10
call ebx
test eax, eax
jne 0x1006b68
lea eax, [ebp - 0x14]
push eax
call fcn.010058cd
mov dword [0x100e130], eax
push dword [ebp - 0x210]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x26
call esi
sub eax, dword [0x100e124]
push 0x2b
mov dword [0x100e10c], eax
pop ebx
jns 0x1006b8e
mov dword [0x100e10c], ebx
push 0x27
call esi
sub eax, dword [0x100e124]
mov dword [0x100e118], eax
jns 0x1006ba5
mov dword [0x100e118], ebx
mov eax, 0x1015e28
mov dword [eax], edi
add eax, 0x60
cmp eax, 0x1016068
jl 0x1006baa
push 1
call fcn.01005742
push 6
call esi
push 5
mov dword [0x1016078], eax
call esi
push 0x2d
mov dword [0x1016074], eax
call esi
push 0x2e
mov dword [0x1016070], eax
call esi
mov dword [0x101606c], eax
xor eax, eax
inc eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
pop ebx
call fcn.0100bd6d
leave
ret