Function at 0x140073270
Capabilities:
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rdi
mov rbp, rsp
sub rsp, 0x40
mov rbx, rcx
lea rax, [rbp - 0x10]
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsPerformanceShellResponseMonitor
xor r8d, r8d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
nop dword [rax + rax]
test eax, eax
jne 0x14007348e
mov rcx, qword [rbp - 0x10]
lea edi, [rax + 4]
lea rax, [rbp + 0x28]
mov dword [rbp + 0x28], edi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
lea rax, [rbp + 0x38]
xor r8d, r8d
lea rdx, str.MinTriggerPeriod
mov qword [rsp + 0x20], rax
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jne 0x140073303
cmp dword [rbp + 0x30], edi
jne 0x140073303
cmp dword [rbp + 0x28], edi
jne 0x140073303
mov eax, dword [rbp + 0x38]
cmp eax, 0x3e8
jb 0x140073303
mov dword [rbx + 0x18], eax
mov rcx, qword [rbp - 0x10]
lea rax, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
lea rax, [rbp + 0x38]
mov dword [rbp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.LatencyThreshold
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jne 0x14007334f
cmp dword [rbp + 0x30], edi
jne 0x14007334f
cmp dword [rbp + 0x28], edi
jne 0x14007334f
mov eax, dword [rbp + 0x38]
cmp eax, 0x64
jb 0x14007334f
mov dword [rbx + 0xc], eax
mov rcx, qword [rbp - 0x10]
lea rax, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
lea rax, [rbp + 0x38]
mov dword [rbp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.LatencyPeak
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jne 0x14007339b
cmp dword [rbp + 0x30], edi
jne 0x14007339b
cmp dword [rbp + 0x28], edi
jne 0x14007339b
mov eax, dword [rbp + 0x38]
cmp eax, dword [rbx + 0xc]
jbe 0x14007339b
mov dword [rbx + 0x10], eax
mov rcx, qword [rbp - 0x10]
lea rax, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
lea rax, [rbp + 0x38]
mov dword [rbp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.LatencyAverageWeight
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jne 0x1400733e7
cmp dword [rbp + 0x30], edi
jne 0x1400733e7
cmp dword [rbp + 0x28], edi
jne 0x1400733e7
mov eax, dword [rbp + 0x38]
cmp eax, 0x32
jae 0x1400733e7
mov dword [rbx + 8], eax
mov rcx, qword [rbp - 0x10]
lea rax, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
lea rax, [rbp + 0x38]
mov dword [rbp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.LatencyWeigthBoost
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jne 0x140073432
cmp dword [rbp + 0x30], edi
jne 0x140073432
cmp dword [rbp + 0x28], edi
jne 0x140073432
mov eax, dword [rbp + 0x38]
test eax, eax
je 0x140073432
mov dword [rbx + 0x2c], eax
mov rcx, qword [rbp - 0x10]
lea rax, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x30]
lea rax, [rbp + 0x38]
mov dword [rbp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.IdleThreshold
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jne 0x14007347e
cmp dword [rbp + 0x30], edi
jne 0x14007347e
cmp dword [rbp + 0x28], edi
jne 0x14007347e
mov eax, dword [rbp + 0x38]
cmp eax, 0x32
jbe 0x14007347e
mov dword [rbx + 0x30], eax
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
nop dword [rax + rax]
add rsp, 0x40
pop rdi
pop rbx
pop rbp
ret