Function at 0x406be0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x40]
xor esi, esi
push ebx
lea ebx, [ebp - 0x3c]
sub esp, 0x6c
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], edx
lea esi, [esi]
nop
lea eax, [ebp - 0x32]
mov dword [esp + 8], esi
mov dword [esp + 4], str.ColorTable_02d
mov dword [esp], eax
call dword [sym.imp.user32.dll_wsprintfW]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x32]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406c59
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x50]
mov dword [ecx + esi*4], eax
inc esi
cmp esi, 0x10
jne 0x406c00
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.CursorSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406ca1
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x48], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.CursorVisible
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406ce3
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x4c], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.EditionMode
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406d28
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x80], eax
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], 0x40
mov dword [esp + 0x14], ebx
add eax, 0x8c
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], str.FaceName
mov dword [esp], esi
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontFamily
mov dword [esp], esi
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x4070b8
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x84], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406df8
mov eax, dword [ebp - 0x38]
movzx esi, ax
shr eax, 0x10
jne 0x40711c
test esi, esi
jne 0x4070f3
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontWeight
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406e3d
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x88], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.HistoryBufferSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406e7f
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x58], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.HistoryNoDup
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406ec1
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x5c], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.wszInsertMode
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406f03
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x60], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.MenuMask
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406f45
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x64], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.PopupColors
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406f87
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x54], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.QuickEdit
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406fc9
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x68], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.ScreenBufferSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x407018
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x50]
mov edx, eax
and eax, 0xffff
shr edx, 0x10
mov dword [ecx + 0x6c], eax
mov dword [ecx + 0x70], edx
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.ScreenColors
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40705a
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x50], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.WindowSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x4070a9
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x50]
mov edx, eax
and eax, 0xffff
shr edx, 0x10
mov dword [ecx + 0x74], eax
mov dword [ecx + 0x78], edx
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontPitchFamily
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
je 0x406d9c
jmp 0x406da8
call dword [sym.imp.user32.dll_GetDpiForSystem]
mov dword [esp + 8], 0x60
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_MulDiv]
mov edx, dword [ebp - 0x50]
sub esp, 0xc
mov dword [edx + 0x40], eax
jmp 0x406df8
mov dword [ebp - 0x54], eax
call dword [sym.imp.user32.dll_GetDpiForSystem]
mov edx, dword [ebp - 0x54]
mov dword [esp + 8], 0x60
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [sym.imp.kernel32.dll_MulDiv]
mov edx, dword [ebp - 0x50]
sub esp, 0xc
mov dword [edx + 0x44], eax
test esi, esi
je 0x406df8
jmp 0x4070f3