Function at 0x277b3158
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
push ebx
push esi
xor esi, esi
push edi
cmp dword [0x27829060], esi
jne 0x277b318e
cmp dword [0x27828f64], esi
mov dword [0x27829060], 1
je 0x277c9264
mov dword [0x27829074], 0x20a
cmp dword [0x27828f64], esi
mov edi, dword [sym.imp.USER32.dll_SystemParametersInfoA]
je 0x277c92a8
push esi
push 0x27829010
push esi
push 0x68
call edi
push 0xb
call fcn.277b3383
push 0xc
mov dword [0x278290b0], eax
call fcn.277b3383
push 0x26
mov dword [0x278290c4], eax
call fcn.277b3383
push 0x27
mov dword [0x2782906c], eax
call fcn.277b3383
cmp dword [ebp + 8], esi
mov dword [0x27829078], eax
jne 0x277c92e3
push esi
push 0x278290c0
push 4
push 0x26
call edi
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 4]
push eax
push 0x20019
push esi
push str.Control_PanelDesktop
push SysReAllocStringLen
mov dword [0x278290bc], 1
call ebx
test eax, eax
jne 0x277b3243
lea eax, [ebp - 8]
mov dword [ebp - 8], 4
push eax
push 0x278290bc
push esi
push esi
push str.SmoothScroll
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp + 8], esi
jne 0x277c92f2
push 0x2d
call fcn.277b3383
push 0x2e
mov dword [0x2782908c], eax
call fcn.277b3383
push 5
mov dword [0x278290a8], eax
call fcn.277b3383
push 6
mov dword [0x278290c8], eax
call fcn.277b3383
push esi
mov dword [0x27829068], eax
call fcn.277b3383
push 1
mov dword [0x27829070], eax
call fcn.277b3383
push 0x20
mov dword [0x2782909c], eax
call fcn.277b3383
push 0x21
mov dword [0x2782907c], eax
call fcn.277b3383
mov dword [0x27829084], eax
lea ecx, [ebp - 0x15c]
mov eax, 0x154
push esi
push ecx
push eax
push 0x29
mov dword [ebp - 0x15c], eax
call edi
mov eax, dword [ebp - 0x154]
push 0x24
mov dword [0x278290ac], eax
mov dword [0x27829094], eax
mov eax, dword [ebp - 0x150]
mov dword [0x27829098], eax
mov dword [0x278290a4], eax
mov eax, dword [0x278290c8]
shl eax, 3
mov dword [0x278290a0], eax
mov eax, dword [0x278290a8]
mov dword [0x27829064], eax
add eax, eax
mov dword [0x278290b4], eax
mov eax, dword [0x2782908c]
mov dword [0x27829088], eax
call fcn.277b3383
push 0x25
mov dword [0x278290b8], eax
call fcn.277b3383
mov dword [0x27829090], eax
lea eax, [ebp + 8]
mov dword [0x27829080], esi
push eax
push 0x20019
push esi
push str.Control_PanelMouse
push SysReAllocStringLen
call ebx
test eax, eax
jne 0x277b337c
push 4
lea eax, [ebp - 8]
pop edi
push eax
lea eax, [ebp - 4]
push 0x27829080
push eax
push esi
push str.MouseHoverTime
push dword [ebp + 8]
mov dword [ebp - 8], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x277c9301
mov dword [0x27829080], esi
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebx
leave
ret 4
cmp dword [0x27829874], esi
jne 0x277b3184
mov edi, dword [sym.imp.USER32.dll_RegisterWindowMessageA]
push str.MSWHEEL_ROLLMSG
call edi
push str.MSH_SCROLL_LINES_MSG
mov dword [0x27829074], eax
call edi
push str.Magellan_MSWHEEL
push str.MouseZ
mov dword [0x2782b314], eax
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x2782b310], eax
jmp 0x277b318e
cmp dword [0x27829874], esi
jne 0x277b31a0
mov ecx, dword [0x2782b310]
cmp ecx, esi
je 0x277b31ab
mov eax, dword [0x2782b314]
cmp eax, esi
je 0x277b31ab
push esi
push esi
push eax
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [0x27829010], eax
jmp 0x277b31ab
cmp dword [ebp + 8], 0x25
je 0x277b31e4
jmp 0x277b31f0
cmp dword [ebp + 8], 0x2a
je 0x277b324c
jmp 0x277b3323
cmp dword [ebp - 4], edi
jne 0x277b336d
jmp 0x277b3373