Function at 0x4419e0
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0xc
mov eax, dword [esi + 0x118]
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push ebp
mov ebp, dword [esp + 0x18]
push edi
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push eax
push 0
push str.TurboMode
mov edi, 4
push ebp
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441a38
cmp dword [esp + 0xc], edi
jne 0x441a38
cmp dword [esp + 0x10], edi
jne 0x441a38
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x11c]
lea edx, [esp + 0xc]
push edx
mov dword [esi + 0x118], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x18]
push ecx
push 0
push str.PollUnderCursor
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441a81
cmp dword [esp + 0x10], edi
jne 0x441a81
cmp dword [esp + 0xc], edi
jne 0x441a81
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x120]
mov dword [esi + 0x11c], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x24], edx
lea edx, [esp + 0x18]
push edx
push 0
push str.PollForeground
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441aca
cmp dword [esp + 0x10], edi
jne 0x441aca
cmp dword [esp + 0xc], edi
jne 0x441aca
mov eax, dword [esp + 0x14]
mov dword [esi + 0x120], eax
mov eax, dword [esi + 0x124]
lea ecx, [esp + 0xc]
push ecx
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x18]
push eax
push 0
push str.PollFullScreen
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441b13
cmp dword [esp + 0x10], edi
jne 0x441b13
cmp dword [esp + 0xc], edi
jne 0x441b13
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x128]
lea edx, [esp + 0xc]
push edx
mov dword [esi + 0x124], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x18]
push ecx
push 0
push str.OnlyPollConsole
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441b5c
cmp dword [esp + 0x10], edi
jne 0x441b5c
cmp dword [esp + 0xc], edi
jne 0x441b5c
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x12c]
mov dword [esi + 0x128], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x24], edx
lea edx, [esp + 0x18]
push edx
push 0
push str.OnlyPollOnEvent
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441ba5
cmp dword [esp + 0x10], edi
jne 0x441ba5
cmp dword [esp + 0xc], edi
jne 0x441ba5
mov eax, dword [esp + 0x14]
mov dword [esi + 0x12c], eax
mov eax, dword [esi + 0x130]
lea ecx, [esp + 0xc]
push ecx
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x18]
push eax
push 0
push str.EnableDriver
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441bee
cmp dword [esp + 0x10], edi
jne 0x441bee
cmp dword [esp + 0xc], edi
jne 0x441bee
mov eax, dword [esp + 0x14]
mov dword [esi + 0x130], eax
test eax, eax
je 0x441c0b
push 0
call fcn.0040ce70
movzx ecx, al
add esp, 4
mov dword [esi + 0x130], ecx
mov edx, dword [esi + 0x134]
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x24], edx
lea edx, [esp + 0x18]
push edx
push 0
push str.EnableHook
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441c4e
cmp dword [esp + 0x10], edi
jne 0x441c4e
cmp dword [esp + 0xc], edi
jne 0x441c4e
mov eax, dword [esp + 0x14]
mov dword [esi + 0x134], eax
mov eax, dword [esi + 0x138]
lea ecx, [esp + 0xc]
push ecx
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x18]
push eax
push 0
push str.EnableVirtual
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x441c97
cmp dword [esp + 0x10], edi
jne 0x441c97
cmp dword [esp + 0xc], edi
jne 0x441c97
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x13c]
lea edx, [esp + 0xc]
push edx
mov dword [esi + 0x138], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x18]
push ecx
push 0
push str.SingleWindow
push ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], edi
call ebx
test eax, eax
je 0x441cd2
mov eax, dword [esp + 0x1c]
jmp 0x441ce6
cmp dword [esp + 0x10], edi
jne 0x441ccc
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0xc], edi
jne 0x441ce6
mov eax, dword [esp + 0x14]
lea ecx, [esi + 0x140]
push ebp
mov dword [esi + 0x13c], eax
call fcn.004414e0
pop edi
pop ebp
pop ebx
add esp, 0xc
ret 4