Function at 0x40b490
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x40]
xor esi, esi
push ebx
lea ebx, [ebp - 0x3c]
sub esp, 0x6c
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], edx
lea esi, [esi]
nop
lea eax, [ebp - 0x32]
mov dword [esp + 8], esi
mov dword [esp + 4], str.ColorTable_02d
mov dword [esp], eax
call dword [sym.imp.user32.dll_wsprintfW]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x32]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b509
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x50]
mov dword [ecx + esi*4], eax
inc esi
cmp esi, 0x10
jne 0x40b4b0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.CursorSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b551
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x48], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.CursorVisible
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b593
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x4c], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.EditionMode
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b5d8
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x80], eax
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], 0x40
mov dword [esp + 0x14], ebx
add eax, 0x8c
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], str.FaceName
mov dword [esp], esi
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontFamily
mov dword [esp], esi
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b968
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x84], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b6a8
mov eax, dword [ebp - 0x38]
movzx esi, ax
shr eax, 0x10
jne 0x40b9cc
test esi, esi
jne 0x40b9a3
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontWeight
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b6ed
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x88], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.HistoryBufferSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b72f
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x58], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.HistoryNoDup
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b771
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x5c], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.wszInsertMode
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b7b3
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x60], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.MenuMask
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b7f5
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x64], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.PopupColors
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b837
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x54], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.QuickEdit
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b879
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x68], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.ScreenBufferSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b8c8
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x50]
mov edx, eax
and eax, 0xffff
shr edx, 0x10
mov dword [ecx + 0x6c], eax
mov dword [ecx + 0x70], edx
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.ScreenColors
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b90a
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x50], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x3c], 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.WindowSize
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40b959
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x50]
mov edx, eax
and eax, 0xffff
shr edx, 0x10
mov dword [ecx + 0x74], eax
mov dword [ecx + 0x78], edx
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x38]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], str.FontPitchFamily
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
je 0x40b64c
jmp 0x40b658
call dword [sym.imp.user32.dll_GetDpiForSystem]
mov dword [esp + 8], 0x60
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_MulDiv]
mov edx, dword [ebp - 0x50]
sub esp, 0xc
mov dword [edx + 0x40], eax
jmp 0x40b6a8
mov dword [ebp - 0x54], eax
call dword [sym.imp.user32.dll_GetDpiForSystem]
mov edx, dword [ebp - 0x54]
mov dword [esp + 8], 0x60
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [sym.imp.kernel32.dll_MulDiv]
mov edx, dword [ebp - 0x50]
sub esp, 0xc
mov dword [edx + 0x44], eax
test esi, esi
je 0x40b6a8
jmp 0x40b9a3