Function at 0x140039f30
Capabilities:
Check for time delay via gettickcount
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5a8]
sub rsp, 0x680
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14031b940]
xor rax, rsp
mov qword [rbp + 0x560], rax
mov r15, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
movdqa xmm1, xmmword [0x1402d4850]
movdqu xmmword [rbp + 0x208], xmm1
mov word [rbp + 0x1f8], r12w
mov byte [rbp + 0x1f0], r12b
lea rdx, str.srl::Monitor::GetMonitorInfoW
lea rcx, [rbp + 0x1f8]
call fcn.1400182b0
nop
call fcn.140020e90
cmp dword [rax + 8], 4
jl 0x140039fc5
lea rcx, [rbp + 0x1f0]
call fcn.140016100
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetEnumDISPLAY
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003b389
mov r14d, r12d
mov dword [rsp + 0x40], 0x100
mov esi, r12d
lea r13, [0x14031c620]
movsd xmm6, qword [0x1402d4800]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x360]
mov edx, r14d
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ebx, eax
test eax, eax
jne 0x14003b315
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003a6c1
call fcn.140020e90
mov rdi, rax
lea rcx, [rbp + 0x30]
call fcn.140019350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x190]
call fcn.1400182b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov rdx, r12
mov qword [rbp + 0x140], rdx
mov r8d, 7
mov qword [rbp + 0x148], r8
mov word [rbp + 0x130], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x14003a143
cmp ebx, 0xa
jge 0x14003a143
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x130]
cmp rax, 2
jb 0x14003a112
lea rax, [rdx + 2]
mov qword [rbp + 0x140], rax
cmp r8, 7
cmova rcx, qword [rbp + 0x130]
mov eax, dword [0x1402cda80]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x14003a12c
mov qword [rsp + 0x20], 2
lea r9, [0x1402cda80]
mov edx, 2
call fcn.140021e20
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x14003a143
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
jmp 0x14003a0d2
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
call fcn.1402320cc
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x238]
call fcn.14023221c
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x170]
call fcn.1400182b0
lea rcx, [rbp + 0x250]
call fcn.140019350
nop
cmp dword [rdi + 0x14], 0
jne 0x14003a1dd
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.140012dc0
jmp 0x14003a1fe
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm6
lea rcx, [rbp + 0x260]
call fcn.140021890
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x268]
call fcn.140019f80
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x14003a258
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a253
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b4dc
call fcn.140003e94
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
lea rcx, [rbp + 0x250]
call fcn.140019240
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x70]
call fcn.1402237f8
mov rbx, rax
mov edx, 0x2040
lea rcx, [rbp - 0x80]
call fcn.1402237f8
mov rcx, qword [rbp + 0x40]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x40]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 7
cmova rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
lea rcx, [rbp + 0x40]
call fcn.140016b40
lea rdx, [0x1402cd5bc]
mov rcx, rax
call fcn.140016880
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rbp - 0x70]
call fcn.140223820
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rbp - 0x60]
call fcn.14022380c
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 7
cmova rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rdi
call fcn.140016b40
mov rbx, rax
mov edx, 5
lea rcx, [rbp - 0x50]
call fcn.140223820
mov rdi, rax
lea rdx, [0x1402cd5bc]
mov rcx, rbx
call fcn.140016880
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp - 0x40]
call fcn.1402237f8
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova rdx, qword [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
mov rcx, rbx
call fcn.140016b40
lea rbx, [rbp + 0x130]
cmp qword [rbp + 0x148], 7
cmova rbx, qword [rbp + 0x130]
lea rdx, [0x1402cdad0]
mov rcx, rax
call fcn.140016880
mov rcx, rax
mov rdx, rbx
call fcn.140016880
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032b0dc], eax
jg 0x14003b428
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x48]
call fcn.140019f80
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 7
jbe 0x14003a4b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031c620]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a4b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b4e2
call fcn.140003e94
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [0x14031c620], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [0x14031c630], xmm1
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x14003a531
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a52c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b4e8
call fcn.140003e94
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x14003a591
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a58c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b4ee
call fcn.140003e94
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
mov rdx, qword [rbp + 0x148]
cmp rdx, 7
jbe 0x14003a5f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a5ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b4f4
call fcn.140003e94
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 7
jbe 0x14003a651
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a64c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b4fa
call fcn.140003e94
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
lea rcx, [rbp + 0x30]
call fcn.140019240
call fcn.140020e90
mov rdx, r13
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
cmova rdx, qword [0x14031c620]
mov r8, qword [0x14031c630]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Display_Key_Name:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016880
mov rcx, rax
call fcn.140017a70
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x218]
call fcn.1400092fc
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x360]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b267
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003ad7e
call fcn.140020e90
mov rdi, rax
lea rcx, [rbp + 0x30]
call fcn.140019350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x170]
call fcn.1400182b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov rdx, r12
mov qword [rbp + 0x140], rdx
mov r8d, 7
mov qword [rbp + 0x148], r8
mov word [rbp + 0x130], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x14003a801
nop dword [rax]
cmp ebx, 0xa
jge 0x14003a801
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x130]
cmp rax, 2
jb 0x14003a7d0
lea rax, [rdx + 2]
mov qword [rbp + 0x140], rax
cmp r8, 7
cmova rcx, qword [rbp + 0x130]
mov eax, dword [0x1402cda80]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x14003a7ea
mov qword [rsp + 0x20], 2
lea r9, [0x1402cda80]
mov edx, 2
call fcn.140021e20
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x14003a801
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
jmp 0x14003a790
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
call fcn.1402320cc
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x238]
call fcn.14023221c
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x190]
call fcn.1400182b0
lea rcx, [rbp + 0x250]
call fcn.140019350
nop
cmp dword [rdi + 0x14], 0
jne 0x14003a89b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.140012dc0
jmp 0x14003a8bc
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm6
lea rcx, [rbp + 0x260]
call fcn.140021890
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x268]
call fcn.140019f80
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x14003a916
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a911
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b500
call fcn.140003e94
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r12w
lea rcx, [rbp + 0x250]
call fcn.140019240
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rbp - 0x30]
call fcn.1402237f8
mov rbx, rax
mov edx, 0x2040
lea rcx, [rbp - 0x20]
call fcn.1402237f8
mov rcx, qword [rbp + 0x40]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x40]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova rdx, qword [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
lea rcx, [rbp + 0x40]
call fcn.140016b40
lea rdx, [0x1402cd5bc]
mov rcx, rax
call fcn.140016880
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rbp - 0x10]
call fcn.140223820
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rbp]
call fcn.14022380c
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 7
cmova rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rdi
call fcn.140016b40
mov rbx, rax
mov edx, 5
lea rcx, [rbp + 0x10]
call fcn.140223820
mov rdi, rax
lea rdx, [0x1402cd5bc]
mov rcx, rbx
call fcn.140016880
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp + 0x20]
call fcn.1402237f8
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 7
cmova rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
mov rcx, rbx
call fcn.140016b40
lea rbx, [rbp + 0x130]
cmp qword [rbp + 0x148], 7
cmova rbx, qword [rbp + 0x130]
lea rdx, [0x1402cdad0]
mov rcx, rax
call fcn.140016880
mov rcx, rax
mov rdx, rbx
call fcn.140016880
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032b0dc], eax
jg 0x14003b482
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x48]
call fcn.140019f80
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 7
jbe 0x14003ab72
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031c620]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ab6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b506
call fcn.140003e94
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [0x14031c620], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [0x14031c630], xmm1
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x14003abee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003abe9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b50c
call fcn.140003e94
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 7
jbe 0x14003ac4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ac49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b512
call fcn.140003e94
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
mov rdx, qword [rbp + 0x148]
cmp rdx, 7
jbe 0x14003acae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003aca9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b518
call fcn.140003e94
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x14003ad0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ad09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b51e
call fcn.140003e94
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
lea rcx, [rbp + 0x30]
call fcn.140019240
call fcn.140020e90
mov rdx, r13
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
cmova rdx, qword [0x14031c620]
mov r8, qword [0x14031c630]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Opened_Monitor_Key:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016880
mov rcx, rax
call fcn.140017a70
mov dword [rsp + 0x40], 0x200
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x360]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b1fb
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003ae1f
call fcn.140020e90
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003aded
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Opened_First_Key:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016880
mov rcx, rax
call fcn.140017a70
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x360]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b1fb
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003aeb0
call fcn.140020e90
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003ae7e
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Read_First_Key:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016880
mov rcx, rax
call fcn.140017a70
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Control
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b181
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003af32
call fcn.140020e90
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003af0f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Control_key:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Device_Parameters
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003b12c
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003afbf
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003af9c
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Device_Params
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
call fcn.140017a70
mov dword [rsp + 0x44], 0x101
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x250]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.EDID
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
test eax, eax
jne 0x14003b0a7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b05c
call fcn.140020e90
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003b02f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Checked_EDID_for_monitor:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
mov edx, esi
call fcn.140019580
mov rcx, rax
call fcn.140017a70
lea rax, [rbp + 0x218]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, dword [rsp + 0x44]
lea rdx, [rbp + 0x250]
mov rcx, r15
call fcn.1400382b0
inc esi
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b2c7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b106
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003b0d9
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
mov edx, edi
call fcn.14003c490
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b2c7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b1e0
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003b162
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
xor edx, edx
jmp 0x14003b1d0
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b1e0
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003b1b3
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov edx, edi
mov rcx, rax
call fcn.14003c490
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b2c7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b25a
call fcn.140020e90
mov edx, 3
mov rcx, rax
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
cmp qword [rbx + 0x18], 7
mov rdx, rbx
jbe 0x14003b22d
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov edx, edi
mov rcx, rax
call fcn.14003c490
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b2c7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b2c7
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003b299
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
mov edx, edi
call fcn.14003c490
mov rcx, rax
call fcn.140017a70
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 7
jbe 0x14003b30d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b308
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b422
call fcn.140003e94
inc r14d
jmp 0x14003a011
cmp ebx, 0x103
je 0x14003b37c
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b37c
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rdi, rax
call fcn.140020e90
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14003b34f
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
mov edx, ebx
call fcn.14003c490
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b3df
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b3df
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003b3bb
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
call fcn.140017a70
nop
lea rcx, [rbp + 0x1f0]
call fcn.140017b00
mov al, 1
mov rcx, qword [rbp + 0x560]
xor rcx, rsp
call fcn.140220eb0
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14022a650
nop
lea rcx, [0x14032b0dc]
call fcn.1402211e4
cmp dword [0x14032b0dc], 0xffffffff
jne 0x14003a45e
xorps xmm0, xmm0
movups xmmword [0x14031c620], xmm0
mov qword [0x14031c630], r12
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x14031c620], r12w
lea rcx, [0x14026f950]
call fcn.1402210f8
lea rcx, [0x14032b0dc]
call fcn.140221178
jmp 0x14003a45e
lea rcx, [0x14032b0dc]
call fcn.1402211e4
cmp dword [0x14032b0dc], 0xffffffff
jne 0x14003ab1b
xorps xmm0, xmm0
movups xmmword [0x14031c620], xmm0
mov qword [0x14031c630], r12
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x14031c620], r12w
lea rcx, [0x14026f950]
call fcn.1402210f8
lea rcx, [0x14032b0dc]
call fcn.140221178
jmp 0x14003ab1b
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
nop
call fcn.14022a650
int3