Function at 0x14000b970
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x78
mov dword [rsp + 0x54], 4
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x54], 4
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
xor r8d, r8d
lea rdx, [0x14002d020]
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x14000ba12
xor eax, eax
test eax, eax
jne 0x14000ba0d
lea rcx, [0x14002d038]
call fcn.140005070
test eax, eax
je 0x14000ba0b
lea rax, [0x14002d058]
mov qword [rsp + 0x20], rax
mov r9d, 0x4f4
lea r8, [0x14002d060]
lea rdx, [0x14002d070]
lea rcx, [0x14002d090]
call fcn.140004c80
xor eax, eax
jmp 0x14000bad4
cmp dword [rsp + 0x4c], 4
jne 0x14000ba90
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x50], eax
cmp dword [0x140038018], 0
jne 0x14000ba34
mov dword [rsp + 0x58], 0
jmp 0x14000ba72
lea rcx, [0x14002d0b0]
call fcn.140005070
test eax, eax
je 0x14000ba62
mov edx, dword [rsp + 0x50]
lea rcx, str.restoring_SPI_SETMOUSESPEED___d.
call fcn.140004d20
test eax, eax
je 0x14000ba62
mov dword [rsp + 0x5c], 1
jmp 0x14000ba6a
mov dword [rsp + 0x5c], 0
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x58], eax
movsxd r8, dword [rsp + 0x50]
mov r9d, 1
xor edx, edx
mov ecx, 0x71
call qword [sym.imp.USER32.dll_SystemParametersInfoA]
mov dword [rsp + 0x48], eax
jmp 0x14000bad4
xor eax, eax
test eax, eax
jne 0x14000bad4
lea rcx, [0x14002d0f8]
call fcn.140005070
test eax, eax
je 0x14000bad2
lea rax, [0x14002d118]
mov qword [rsp + 0x20], rax
mov r9d, 0x507
lea r8, [0x14002d120]
lea rdx, [0x14002d130]
lea rcx, [0x14002d150]
call fcn.140004c80
xor eax, eax
mov dword [rsp + 0x54], 4
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
xor r8d, r8d
lea rdx, [0x14002d170]
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x14000bb5d
xor eax, eax
test eax, eax
jne 0x14000bb58
lea rcx, [0x14002d180]
call fcn.140005070
test eax, eax
je 0x14000bb56
lea rax, [0x14002d1a0]
mov qword [rsp + 0x20], rax
mov r9d, 0x514
lea r8, [0x14002d1a8]
lea rdx, [0x14002d1b8]
lea rcx, [0x14002d1d8]
call fcn.140004c80
xor eax, eax
jmp 0x14000bd4d
mov dword [rsp + 0x54], 4
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
xor r8d, r8d
lea rdx, [0x14002d1f8]
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x14000bbee
xor eax, eax
test eax, eax
jne 0x14000bbe9
lea rcx, [0x14002d208]
call fcn.140005070
test eax, eax
je 0x14000bbe7
lea rax, [0x14002d228]
mov qword [rsp + 0x20], rax
mov r9d, 0x51d
lea r8, [0x14002d230]
lea rdx, [0x14002d240]
lea rcx, [0x14002d260]
call fcn.140004c80
xor eax, eax
jmp 0x14000bd4d
mov dword [rsp + 0x54], 4
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4c]
xor r8d, r8d
lea rdx, [0x14002d280]
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x14000bc7f
xor eax, eax
test eax, eax
jne 0x14000bc7a
lea rcx, [0x14002d290]
call fcn.140005070
test eax, eax
je 0x14000bc78
lea rax, [0x14002d2b0]
mov qword [rsp + 0x20], rax
mov r9d, 0x526
lea r8, [0x14002d2b8]
lea rdx, [0x14002d2c8]
lea rcx, [0x14002d2e8]
call fcn.140004c80
xor eax, eax
jmp 0x14000bd4d
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x3c], eax
cmp dword [0x140038018], 0
jne 0x14000bc9a
mov dword [rsp + 0x60], 0
jmp 0x14000bce2
lea rcx, [0x14002d308]
call fcn.140005070
test eax, eax
je 0x14000bcd2
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x3c]
mov edx, dword [rsp + 0x38]
lea rcx, str.restoring_SPI_SETMOUSE____d__d__d_.
call fcn.140004d20
test eax, eax
je 0x14000bcd2
mov dword [rsp + 0x64], 1
jmp 0x14000bcda
mov dword [rsp + 0x64], 0
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x60], eax
mov r9d, 1
lea r8, [rsp + 0x38]
xor edx, edx
mov ecx, 4
call qword [sym.imp.USER32.dll_SystemParametersInfoA]
mov r11d, eax
mov eax, dword [rsp + 0x48]
and eax, r11d
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0
jne 0x14000bd4d
lea rcx, [0x14002d350]
call fcn.140005070
test eax, eax
je 0x14000bd4b
lea rax, str.bStatus___FALSE
mov qword [rsp + 0x20], rax
mov r9d, 0x52f
lea r8, [0x14002d388]
lea rdx, str.WndRestoreMouseSpeedAndAccel
lea rcx, [0x14002d3b8]
call fcn.140004c80
xor eax, eax
mov eax, dword [rsp + 0x48]
add rsp, 0x78
ret