Function at 0x10001a90
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov dword [ebp - 0x38], 0x28
mov ebx, dword [ebp + 8]
test byte [0x10004018], 8
jne 0x10001b88
mov eax, dword fs:[0x18]
test ebx, ebx
je 0x10001b70
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x10001b70
mov dword [eax + 0x34], 0
mov dword [esp + 4], 0xffffffff
mov eax, dword [section..bss]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
lea eax, [ebp - 0x3c]
sub esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x20019
mov dword [esp + 8], 0
mov dword [esp + 4], str.SoftwareMicrosoftWindowsCurrentVersionControls_FolderPowerCfg
mov dword [esp], 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExW]
sub esp, 0x14
test eax, eax
je 0x10001bc0
test byte [0x10004018], 8
jne 0x10001c80
mov eax, dword [ebp + 0xc]
mov dword [ebx], 0xe10
mov dword [eax], 3
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [section..bss]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
mov eax, 1
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 8
mov dword [eax + 0x34], 0x57
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret 8
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.__p___p__n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.GetPwrDiskSpindownRange
mov dword [esp + 4], 0x10004018
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x10001ab0
lea edi, [ebp - 0x38]
lea esi, [ebp - 0x34]
mov dword [esp + 0xc], 0
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], esi
mov dword [esp + 8], 0
mov dword [esp + 4], str.DiskSpindownMax
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov dword [ebp - 0x40], eax
call eax
sub esp, 0x18
test eax, eax
je 0x10001ce0
test byte [0x10004018], 8
jne 0x10001d80
mov eax, 0xe10
mov dword [ebx], eax
mov dword [ebp - 0x38], 0x28
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.DiskSpindownMin
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [ebp - 0x40]
call eax
sub esp, 0x18
test eax, eax
je 0x10001d00
test byte [0x10004018], 8
jne 0x10001d20
mov eax, 3
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
jmp 0x10001b3c
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.RegOpenKeyEx_failed:__ld_n
mov dword [esp + 8], str.GetPwrDiskSpindownRange
mov dword [esp + 4], 0x10004018
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
test byte [0x10004018], 8
je 0x10001b2d
mov dword [esp + 0xc], str.Using_defaults:_3600__3_n
mov dword [esp + 8], str.GetPwrDiskSpindownRange
mov dword [esp + 4], 0x10004018
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x10001b2d
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_wcstol]
jmp 0x10001c13
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_wcstol]
jmp 0x10001c64
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Couldnt_open_DiskSpinDownMin:__ld_n
mov dword [esp + 8], str.GetPwrDiskSpindownRange
mov dword [esp + 4], 0x10004018
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
test byte [0x10004018], 8
je 0x10001c5f
mov dword [esp + 0xc], str.Using_default:_3_n
mov dword [esp + 8], str.GetPwrDiskSpindownRange
mov dword [esp + 4], 0x10004018
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x10001c5f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Couldnt_open_DiskSpinDownMax:__ld_n
mov dword [esp + 8], str.GetPwrDiskSpindownRange
mov dword [esp + 4], 0x10004018
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
test byte [0x10004018], 8
je 0x10001c0e
mov dword [esp + 0xc], str.Using_default:_3600_n
mov dword [esp + 8], str.GetPwrDiskSpindownRange
mov dword [esp + 4], 0x10004018
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x10001c0e