Function at 0x406a30
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x34]
xor esi, esi
push ebx
lea ebx, [ebp - 0x30]
sub esp, 0x4c
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], edx
lea esi, cs:[esi]
nop
lea eax, [ebp - 0x26]
mov dword [esp + 8], esi
mov dword [esp + 4], str.ColorTable_02d
mov dword [esp], eax
call dword [sym.imp.user32.dll_wsprintfW]
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x26]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406aa9
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + esi*4], eax
inc esi
cmp esi, 0x10
jne 0x406a50
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.CursorSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406af1
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x48], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.CursorVisible
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406b33
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x4c], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.EditionMode
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406b78
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x80], eax
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x30], 0x40
mov dword [esp + 0x14], ebx
add eax, 0x8c
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], str.FaceName
mov dword [esp], esi
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontFamily
mov dword [esp], esi
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406f08
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x84], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406c48
mov eax, dword [ebp - 0x2c]
movzx esi, ax
shr eax, 0x10
jne 0x406f6c
test esi, esi
jne 0x406f43
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontWeight
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406c8d
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x88], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.HistoryBufferSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406ccf
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x58], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.HistoryNoDup
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406d11
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x5c], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.wszInsertMode
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406d53
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x60], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.MenuMask
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406d95
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x64], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.PopupColors
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406dd7
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x54], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.QuickEdit
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406e19
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x68], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.ScreenBufferSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406e68
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
mov edx, eax
and eax, 0xffff
shr edx, 0x10
mov dword [ecx + 0x6c], eax
mov dword [ecx + 0x70], edx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.ScreenColors
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406eaa
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
mov dword [edx + 0x50], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.WindowSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x406ef9
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
mov edx, eax
and eax, 0xffff
shr edx, 0x10
mov dword [ecx + 0x74], eax
mov dword [ecx + 0x78], edx
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x2c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontPitchFamily
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
je 0x406bec
jmp 0x406bf8
call dword [sym.imp.user32.dll_GetDpiForSystem]
mov dword [esp + 8], 0x60
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_MulDiv]
mov edx, dword [ebp - 0x3c]
sub esp, 0xc
mov dword [edx + 0x40], eax
jmp 0x406c48
mov dword [ebp - 0x40], eax
call dword [sym.imp.user32.dll_GetDpiForSystem]
mov edx, dword [ebp - 0x40]
mov dword [esp + 8], 0x60
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [sym.imp.kernel32.dll_MulDiv]
mov edx, dword [ebp - 0x3c]
sub esp, 0xc
mov dword [edx + 0x44], eax
test esi, esi
je 0x406c48
jmp 0x406f43