Function at 0x6144a9
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x8e8
mov eax, 0x6e93e5
call fcn.00648b50
mov eax, ecx
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp + 0xc]
lea ebx, [eax + 0xc]
mov edi, dword [ebp + 0x18]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x78c], ecx
mov ecx, dword [ebp + 0x10]
push str.NewTreeVideo::Device::ChecknVidiaApi
mov dword [ebp - 0x7ac], ecx
lea ecx, [ebp - 0x804]
push ebx
mov dword [ebp - 0x7f0], edi
call fcn.005a14e8
and dword [ebp - 4], 0
push str._VideoDevice__ChecknVidiaApi
push 0x2bc
call fcn.00519db0
mov ecx, eax
call fcn.0051d539
mov ecx, dword [ebx]
push 0x520
call fcn.005adba9
call fcn.0044d480
test eax, eax
jne 0x615132
mov ecx, dword [ebx]
call fcn.005adb40
and dword [ebp - 0x780], 0
lea eax, [ebp - 0x780]
push eax
lea edx, [ebp - 0x214]
mov ecx, esi
call fcn.0061396a
pop ecx
test al, al
je 0x615132
call fcn.00515e26
push eax
lea ecx, [ebp - 0x798]
call fcn.00515c3a
xor eax, eax
inc eax
mov byte [ebp - 4], al
mov ecx, dword [ebx]
push 0x531
mov dword [ebp - 0x7b4], eax
call fcn.005adba9
mov esi, dword [ebp - 0x780]
lea eax, [ebp - 0x114]
push eax
push dword [ebp + esi*4 - 0x214]
call fcn.0044c000
pop ecx
pop ecx
mov ecx, dword [ebx]
call fcn.005adb40
mov ecx, dword [ebp - 0x7ac]
lea eax, [ebp - 0x114]
push eax
call fcn.00519e64
mov ecx, dword [ebx]
push 0x53c
call fcn.005adba9
lea eax, [ebp - 0xd4]
push eax
push dword [ebp + esi*4 - 0x214]
call fcn.0044c3d0
pop ecx
pop ecx
mov ecx, dword [ebx]
mov esi, eax
call fcn.005adb40
test esi, esi
jne 0x6145f3
mov ecx, dword [ebp - 0x79c]
lea eax, [ebp - 0xd4]
push eax
add ecx, 0x90
call fcn.00519e64
mov ecx, dword [ebx]
push 0x546
call fcn.005adba9
mov ecx, dword [ebp - 0x780]
lea eax, [ebp - 0x7fc]
push eax
push dword [ebp + ecx*4 - 0x214]
call fcn.0044c190
pop ecx
pop ecx
mov ecx, dword [ebx]
mov esi, eax
call fcn.005adb40
test esi, esi
jne 0x614b39
call fcn.00515e26
push eax
lea ecx, [ebp - 0x784]
call fcn.00515c3a
push 0x597
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 2
call fcn.006c22f9
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x7fc]
mov dword [edi + 0x1e8], eax
mov byte [edi + 0x1e4], 1
sub eax, 1
je 0x614a8a
sub eax, 1
je 0x614840
sub eax, 1
je 0x6146f9
sub eax, 1
jne 0x614b1c
mov esi, str.FPCI
mov ecx, esi
call fcn.0051545a
push eax
push esi
lea ecx, [ebp - 0x784]
call fcn.00515b15
push esi
lea ecx, [ebp - 0x7e4]
call fcn.00515719
xor eax, eax
mov dword [ebp - 0x7dc], eax
mov dword [ebp - 0x7bc], eax
push eax
push eax
lea eax, [ebp - 0x7e4]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.00530696
mov ecx, dword [ebp - 0x78c]
push eax
lea eax, [ebp - 0x794]
mov byte [ebp - 4], 8
push eax
call fcn.005ad24e
mov byte [ebp - 4], 9
jmp 0x614af7
mov esi, str.PCI_Express
mov ecx, esi
call fcn.0051545a
push eax
push esi
lea ecx, [ebp - 0x784]
call fcn.00515b15
mov ecx, esi
call fcn.0051545a
push eax
push esi
lea ecx, [ebp - 0x798]
call fcn.00515b15
mov ecx, dword [ebx]
push 0x581
call fcn.005adba9
lea eax, [ebp - 0x7a8]
push eax
mov eax, dword [ebp - 0x780]
push dword [ebp + eax*4 - 0x214]
call fcn.0044c610
pop ecx
pop ecx
mov ecx, dword [ebx]
mov esi, eax
call fcn.005adb40
test esi, esi
jne 0x6147ed
mov eax, dword [ebp - 0x7a8]
mov dword [edi + 0x21c], eax
mov byte [edi + 0x218], 1
call fcn.00515e26
push eax
lea ecx, [ebp - 0x7a0]
call fcn.00515c3a
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x7a0]
push dword [ebp - 0x7a8]
push 0x76f280
push eax
call fcn.0051647b
add esp, 0xc
lea eax, [ebp - 0x7a0]
mov edx, 0x74b614
lea ecx, [ebp - 0x790]
push eax
call fcn.00534752
pop ecx
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x798]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.00517d9c
mov ecx, dword [ebp - 0x790]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x7a0]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea eax, [ebp - 0x798]
push eax
lea ecx, [ebp - 0x7e4]
call fcn.006c22ac
push 0
push 0
lea eax, [ebp - 0x7e4]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.00530696
mov ecx, dword [ebp - 0x78c]
push eax
lea eax, [ebp - 0x794]
mov byte [ebp - 4], 0x18
push eax
call fcn.005ad24e
mov byte [ebp - 4], 0x19
jmp 0x614af7
mov esi, 0x76f288
mov ecx, esi
call fcn.0051545a
push eax
push esi
lea ecx, [ebp - 0x784]
call fcn.00515b15
push esi
lea ecx, [ebp - 0x7e4]
call fcn.00515719
xor eax, eax
mov dword [ebp - 0x7dc], eax
mov dword [ebp - 0x7bc], eax
push eax
push eax
lea eax, [ebp - 0x7e4]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.00530696
mov ecx, dword [ebp - 0x78c]
push eax
lea eax, [ebp - 0x794]
mov byte [ebp - 4], 0xb
push eax
call fcn.005ad24e
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x790]
test ecx, ecx
je 0x6148bc
call fcn.0051578b
lea ecx, [ebp - 0x3bc]
call fcn.00530663
lea ecx, [ebp - 0x7e4]
mov byte [ebp - 4], 3
call fcn.006c2344
mov ecx, dword [ebx]
push 0x561
call fcn.005adba9
lea eax, [ebp - 0x790]
push eax
mov eax, dword [ebp - 0x780]
push dword [ebp + eax*4 - 0x214]
call fcn.0044c490
pop ecx
pop ecx
mov ecx, dword [ebx]
mov esi, eax
call fcn.005adb40
test esi, esi
jne 0x6149a6
mov edx, dword [ebp - 0x790]
lea ecx, [ebp - 0x864]
mov dword [edi + 0x214], edx
mov byte [edi + 0x210], 1
call fcn.005c2240
mov esi, eax
push 0x598
lea ecx, [ebp - 0x834]
mov byte [ebp - 4], 0xd
call fcn.006c22f9
push 0
push 0
push esi
push eax
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], 0xe
call fcn.00530696
mov ecx, dword [ebp - 0x78c]
push eax
lea eax, [ebp - 0x7a4]
mov byte [ebp - 4], 0xf
push eax
call fcn.005ad24e
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x7a0]
test ecx, ecx
je 0x614981
call fcn.0051578b
lea ecx, [ebp - 0x3bc]
call fcn.00530663
lea ecx, [ebp - 0x834]
call fcn.006c2344
lea ecx, [ebp - 0x864]
mov byte [ebp - 4], 3
call fcn.006c2344
mov ecx, dword [ebx]
push 0x56d
call fcn.005adba9
lea eax, [ebp - 0x7a8]
push eax
mov eax, dword [ebp - 0x780]
push dword [ebp + eax*4 - 0x214]
call fcn.0044c550
pop ecx
pop ecx
mov ecx, dword [ebx]
mov esi, eax
call fcn.005adb40
test esi, esi
jne 0x614b1c
mov eax, dword [ebp - 0x7a8]
push eax
mov dword [edi + 0x1e0], eax
lea eax, [ebp - 0x798]
push 0x76f290
push eax
mov byte [edi + 0x1dc], 1
call fcn.0051647b
add esp, 0xc
lea eax, [ebp - 0x798]
lea ecx, [ebp - 0x7e4]
push eax
call fcn.006c22ac
push 0x599
lea ecx, [ebp - 0x834]
mov byte [ebp - 4], 0x11
call fcn.006c22f9
push esi
push esi
lea ecx, [ebp - 0x7e4]
mov byte [ebp - 4], 0x12
push ecx
push eax
lea ecx, [ebp - 0x3bc]
call fcn.00530696
mov ecx, dword [ebp - 0x78c]
push eax
lea eax, [ebp - 0x7a4]
mov byte [ebp - 4], 0x13
push eax
call fcn.005ad24e
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x7a0]
test ecx, ecx
je 0x614a6f
call fcn.0051578b
lea ecx, [ebp - 0x3bc]
call fcn.00530663
lea ecx, [ebp - 0x834]
call fcn.006c2344
jmp 0x614b11
mov esi, 0x764d84
mov ecx, esi
call fcn.0051545a
push eax
push esi
lea ecx, [ebp - 0x784]
call fcn.00515b15
push esi
lea ecx, [ebp - 0x7e4]
call fcn.00515719
xor eax, eax
mov dword [ebp - 0x7dc], eax
mov dword [ebp - 0x7bc], eax
push eax
push eax
lea eax, [ebp - 0x7e4]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.00530696
mov ecx, dword [ebp - 0x78c]
push eax
lea eax, [ebp - 0x794]
mov byte [ebp - 4], 5
push eax
call fcn.005ad24e
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x790]
test ecx, ecx
je 0x614b06
call fcn.0051578b
lea ecx, [ebp - 0x3bc]
call fcn.00530663
lea ecx, [ebp - 0x7e4]
call fcn.006c2344
lea ecx, [ebp - 0x344]
call fcn.006c2344
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x784]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
mov ecx, dword [ebx]
push 0x59b
call fcn.005adba9
lea eax, [ebp - 0x7f8]
push eax
mov eax, dword [ebp - 0x780]
push dword [ebp + eax*4 - 0x214]
call fcn.0044c6d0
pop ecx
pop ecx
mov ecx, dword [ebx]
mov esi, eax
call fcn.005adb40
mov ecx, dword [ebx]
push 0x59f
call fcn.005adba9
lea eax, [ebp - 0x7f4]
push eax
mov eax, dword [ebp - 0x780]
push dword [ebp + eax*4 - 0x214]
call fcn.0044c790
pop ecx
pop ecx
mov ecx, dword [ebx]
mov dword [ebp - 0x790], eax
call fcn.005adb40
test esi, esi
mov esi, dword [ebp - 0x79c]
jne 0x614bd6
cmp dword [ebp - 0x790], 0
jne 0x614bd6
mov eax, dword [ebp - 0x7f8]
and dword [esi + 0x7c], 0
shl eax, 0xa
mov dword [esi + 0x78], eax
mov eax, dword [ebp - 0x7f4]
shl eax, 0xa
and dword [esi + 0x84], 0
mov dword [esi + 0x80], eax
mov eax, dword [ebp - 0x780]
push dword [ebp + eax*4 - 0x214]
call fcn.00613824
pop ecx
lea ecx, [esi + 0x28]
mov byte [edi + 0x220], 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x78d990]
mov eax, dword [ebp - 0x780]
push dword [ebp + eax*4 - 0x214]
movsd qword [edi + 0x228], xmm0
push fcn.00613824
call fcn.00617485
push 0x591
lea ecx, [ebp - 0x834]
call fcn.006c22f9
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x780]
push ecx
push dword [ebp - 0x7ac]
mov ecx, esi
push 1
push eax
push dword [ebp - 0x78c]
lea eax, [ebp - 0x794]
push eax
call fcn.00615c11
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x790]
test ecx, ecx
je 0x614c71
call fcn.0051578b
lea ecx, [ebp - 0x834]
mov byte [ebp - 4], 1
call fcn.006c2344
xor al, al
mov dword [ebp - 0x77c], 0x348
push 0x344
mov byte [ebp - 0x785], al
lea eax, [ebp - 0x778]
push 0
push eax
call fcn.0066f220
mov ecx, dword [ebx]
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x7a0], eax
push 0x5b9
call fcn.005adba9
lea eax, [ebp - 0x7b0]
push eax
push 0
call fcn.0044d250
pop ecx
pop ecx
test eax, eax
jne 0x615066
mov ecx, dword [ebx]
inc dword [ebp - 0x7a0]
push 0x5c1
mov dword [ebp - 0x784], 0x40
call fcn.005adba9
lea eax, [ebp - 0x784]
push eax
lea eax, [ebp - 0x314]
push eax
push dword [ebp - 0x7b0]
call fcn.0044bf30
mov ecx, dword [ebx]
add esp, 0xc
call fcn.005adb40
cmp dword [ebp - 0x784], 2
jae 0x614d2a
mov word [edi + 0x230], 1
jmp 0x615043
mov ecx, dword [ebx]
push 0x5d1
mov byte [ebp - 0x785], 1
call fcn.005adba9
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x7b0]
call fcn.0044d310
pop ecx
pop ecx
mov ecx, dword [ebx]
call fcn.005adb40
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x790]
call fcn.00519ebc
push 0
lea ecx, [ebp - 0x77c]
push ecx
push 0
push dword [eax]
call dword [sym.imp.USER32.dll_EnumDisplayDevicesW]
mov ecx, dword [ebp - 0x790]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
call fcn.00515e26
push eax
lea ecx, [ebp - 0x780]
call fcn.00515c3a
xor esi, esi
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x784], esi
jbe 0x614e3f
mov ecx, dword [ebx]
push 0x5db
call fcn.005adba9
lea eax, [ebp - 0x54]
push eax
push dword [ebp + esi*4 - 0x314]
call fcn.0044c000
pop ecx
pop ecx
mov ecx, dword [ebx]
call fcn.005adb40
test esi, esi
je 0x614df2
mov ecx, 0x76f2f8
call fcn.0051545a
push eax
push 0x76f2f8
lea ecx, [ebp - 0x780]
call fcn.00517d9c
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x780]
call fcn.00544733
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0x32c]
call fcn.00590e28
push eax
lea ecx, [edi + 0x234]
mov byte [ebp - 4], 0x1d
call fcn.005a86c4
push 0
push 1
lea ecx, [ebp - 0x32c]
mov byte [ebp - 4], 0x1c
call fcn.00529114
inc esi
cmp esi, dword [ebp - 0x784]
jb 0x614dae
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0x7e4]
call fcn.00515719
and dword [ebp - 0x7dc], 0
and dword [ebp - 0x7bc], 0
lea eax, [ebp - 0x780]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x834]
call fcn.006c22ac
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x7ac]
push 0
push dword [ebp - 0x784]
call fcn.005a076d
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x864]
mov byte [ebp - 4], 0x20
call fcn.006c22ac
push ecx
push 0x59b
lea ecx, [ebp - 0x8c4]
mov byte [ebp - 4], 0x21
call fcn.006c22f9
push eax
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x22
call fcn.006c2dad
mov edi, eax
lea eax, [ebp - 0x864]
mov byte [ebp - 4], 0x23
lea esi, [edi + 0x30]
push eax
mov ecx, esi
call fcn.0056ed5e
lea eax, [ebp - 0x834]
mov ecx, esi
push eax
call fcn.0056ed5e
lea eax, [ebp - 0x7e4]
mov ecx, esi
push eax
call fcn.0056ed5e
sub esp, 0x40
mov ecx, esp
push edi
call fcn.005414cd
lea ecx, [ebp - 0x334]
call fcn.005448fe
lea eax, [ebp - 0x334]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x894]
call fcn.006c220e
mov esi, eax
push 0x59a
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x25
call fcn.006c22f9
push 0
push 0
push esi
push eax
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0x26
call fcn.00530696
mov byte [ebp - 4], 0x27
push eax
mov ecx, dword [ebp - 0x78c]
lea eax, [ebp - 0x7ec]
push eax
call fcn.005ad24e
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x7e8]
test ecx, ecx
je 0x614f77
call fcn.0051578b
lea ecx, [ebp - 0x434]
call fcn.00530663
lea ecx, [ebp - 0x8f4]
call fcn.006c2344
lea ecx, [ebp - 0x894]
call fcn.006c2344
lea ecx, [ebp - 0x334]
mov byte [ebp - 4], 0x29
call fcn.0051f634
lea ecx, [ebp - 0x384]
call fcn.006c2dd3
lea ecx, [ebp - 0x8c4]
call fcn.006c2344
lea ecx, [ebp - 0x864]
call fcn.006c2344
mov ecx, dword [ebp - 0x7ac]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea ecx, [ebp - 0x834]
call fcn.006c2344
lea ecx, [ebp - 0x7e4]
mov byte [ebp - 4], 0x1c
call fcn.006c2344
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0x32c]
call fcn.00538a60
mov edi, dword [ebp - 0x7f0]
mov byte [ebp - 4], 0x2a
lea ecx, [edi + 0x58]
cmp ecx, eax
je 0x61501d
push 0xffffffffffffffff
push 0
push eax
call fcn.0052900d
xor eax, eax
lea ecx, [ebp - 0x32c]
inc eax
push 0
push eax
mov byte [edi + 0x54], al
call fcn.00529114
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x780]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
lea eax, [ebp - 0x7b0]
push eax
mov eax, dword [ebp - 0x7a0]
push eax
call fcn.0044d250
pop ecx
pop ecx
test eax, eax
je 0x614cd4
mov esi, dword [ebp - 0x79c]
mov ecx, dword [ebx]
call fcn.005adb40
mov al, byte [ebp - 0x785]
test al, al
je 0x61507e
or dword [esi + 0x94], 1
mov byte [edi + 0x231], al
mov byte [edi + 0x230], 1
test al, al
jne 0x615122
cmp byte [ebp + 0x14], al
je 0x615122
push 0x596
lea ecx, [ebp - 0x894]
call fcn.006c22f9
mov esi, eax
push 0x59a
lea ecx, [ebp - 0x8c4]
mov byte [ebp - 4], 0x2b
call fcn.006c22f9
push 0
push 0
push esi
push eax
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0x2c
call fcn.00530696
mov ecx, dword [ebp - 0x78c]
push eax
lea eax, [ebp - 0x7ec]
mov byte [ebp - 4], 0x2d
push eax
call fcn.005ad24e
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x7e8]
test ecx, ecx
je 0x615101
call fcn.0051578b
lea ecx, [ebp - 0x434]
call fcn.00530663
lea ecx, [ebp - 0x8c4]
call fcn.006c2344
lea ecx, [ebp - 0x894]
call fcn.006c2344
mov ecx, dword [ebp - 0x798]
lea ecx, [ecx - 0x10]
call fcn.00515ed6
jmp 0x615139
mov byte [ebp - 0x7b4], 0
lea ecx, [ebp - 0x804]
call fcn.005a1446
mov al, byte [ebp - 0x7b4]
call fcn.00648afa
ret 0x14