Function at 0x140039d60
Capabilities:
Check for time delay via gettickcount
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5a8]
sub rsp, 0x680
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14031b940]
xor rax, rsp
mov qword [rbp + 0x560], rax
mov r15, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
movdqa xmm1, xmmword [0x1402d4800]
movdqu xmmword [rbp + 0x208], xmm1
mov word [rbp + 0x1f8], r12w
mov byte [rbp + 0x1f0], r12b
lea rdx, str.srl::Monitor::GetMonitorInfoW
lea rcx, [rbp + 0x1f8]
call fcn.1400182b0
nop
call fcn.140020e90
cmp dword [rax + 8], 4
jl 0x140039df5
lea rcx, [rbp + 0x1f0]
call fcn.140016100
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetEnumDISPLAY
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003b1b9
mov r14d, r12d
mov dword [rsp + 0x40], 0x100
mov esi, r12d
lea r13, [0x14031c620]
movsd xmm6, qword [0x1402d47b0]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x360]
mov edx, r14d
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ebx, eax
test eax, eax
jne 0x14003b145
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003a4f1
call fcn.140020e90
mov rdi, rax
lea rcx, [rbp + 0x30]
call fcn.140019350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x190]
call fcn.1400182b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov rdx, r12
mov qword [rbp + 0x140], rdx
mov r8d, 7
mov qword [rbp + 0x148], r8
mov word [rbp + 0x130], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x140039f73
cmp ebx, 0xa
jge 0x140039f73
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x130]
cmp rax, 2
jb 0x140039f42
lea rax, [rdx + 2]
mov qword [rbp + 0x140], rax
cmp r8, 7
cmova rcx, qword [rbp + 0x130]
mov eax, dword [0x1402cda80]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x140039f5c
mov qword [rsp + 0x20], 2
lea r9, [0x1402cda80]
mov edx, 2
call fcn.140021e20
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x140039f73
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
jmp 0x140039f02
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
call fcn.140231ccc
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x238]
call fcn.140231e1c
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x170]
call fcn.1400182b0
lea rcx, [rbp + 0x250]
call fcn.140019350
nop
cmp dword [rdi + 0x14], 0
jne 0x14003a00d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.140012dc0
jmp 0x14003a02e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm6
lea rcx, [rbp + 0x260]
call fcn.140021890
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x268]
call fcn.140019f80
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x14003a088
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a083
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b30c
call fcn.140003e94
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
lea rcx, [rbp + 0x250]
call fcn.140019240
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x70]
call fcn.1402233f8
mov rbx, rax
mov edx, 0x2040
lea rcx, [rbp - 0x80]
call fcn.1402233f8
mov rcx, qword [rbp + 0x40]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x40]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 7
cmova rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
lea rcx, [rbp + 0x40]
call fcn.140016b40
lea rdx, [0x1402cd5bc]
mov rcx, rax
call fcn.140016880
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rbp - 0x70]
call fcn.140223420
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rbp - 0x60]
call fcn.14022340c
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 7
cmova rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rdi
call fcn.140016b40
mov rbx, rax
mov edx, 5
lea rcx, [rbp - 0x50]
call fcn.140223420
mov rdi, rax
lea rdx, [0x1402cd5bc]
mov rcx, rbx
call fcn.140016880
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp - 0x40]
call fcn.1402233f8
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova rdx, qword [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
mov rcx, rbx
call fcn.140016b40
lea rbx, [rbp + 0x130]
cmp qword [rbp + 0x148], 7
cmova rbx, qword [rbp + 0x130]
lea rdx, [0x1402cdad0]
mov rcx, rax
call fcn.140016880
mov rcx, rax
mov rdx, rbx
call fcn.140016880
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032b0dc], eax
jg 0x14003b258
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x48]
call fcn.140019f80
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 7
jbe 0x14003a2e5
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031c620]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a2e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b312
call fcn.140003e94
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [0x14031c620], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [0x14031c630], xmm1
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x14003a361
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a35c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b318
call fcn.140003e94
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x14003a3c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a3bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b31e
call fcn.140003e94
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
mov rdx, qword [rbp + 0x148]
cmp rdx, 7
jbe 0x14003a421
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a41c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b324
call fcn.140003e94
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 7
jbe 0x14003a481
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a47c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b32a
call fcn.140003e94
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
lea rcx, [rbp + 0x30]
call fcn.140019240
call fcn.140020e90
mov rdx, r13
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
cmova rdx, qword [0x14031c620]
mov r8, qword [0x14031c630]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Display_Key_Name:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016880
mov rcx, rax
call fcn.140017a70
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x218]
call fcn.1400092fc
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x360]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b097
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003abae
call fcn.140020e90
mov rdi, rax
lea rcx, [rbp + 0x30]
call fcn.140019350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x170]
call fcn.1400182b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov rdx, r12
mov qword [rbp + 0x140], rdx
mov r8d, 7
mov qword [rbp + 0x148], r8
mov word [rbp + 0x130], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x14003a631
nop dword [rax]
cmp ebx, 0xa
jge 0x14003a631
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x130]
cmp rax, 2
jb 0x14003a600
lea rax, [rdx + 2]
mov qword [rbp + 0x140], rax
cmp r8, 7
cmova rcx, qword [rbp + 0x130]
mov eax, dword [0x1402cda80]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x14003a61a
mov qword [rsp + 0x20], 2
lea r9, [0x1402cda80]
mov edx, 2
call fcn.140021e20
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x14003a631
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
jmp 0x14003a5c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
call fcn.140231ccc
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x238]
call fcn.140231e1c
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x190]
call fcn.1400182b0
lea rcx, [rbp + 0x250]
call fcn.140019350
nop
cmp dword [rdi + 0x14], 0
jne 0x14003a6cb
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.140012dc0
jmp 0x14003a6ec
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm6
lea rcx, [rbp + 0x260]
call fcn.140021890
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x268]
call fcn.140019f80
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x14003a746
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a741
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b330
call fcn.140003e94
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r12w
lea rcx, [rbp + 0x250]
call fcn.140019240
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rbp - 0x30]
call fcn.1402233f8
mov rbx, rax
mov edx, 0x2040
lea rcx, [rbp - 0x20]
call fcn.1402233f8
mov rcx, qword [rbp + 0x40]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x40]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova rdx, qword [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
lea rcx, [rbp + 0x40]
call fcn.140016b40
lea rdx, [0x1402cd5bc]
mov rcx, rax
call fcn.140016880
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rbp - 0x10]
call fcn.140223420
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rbp]
call fcn.14022340c
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 7
cmova rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rdi
call fcn.140016b40
mov rbx, rax
mov edx, 5
lea rcx, [rbp + 0x10]
call fcn.140223420
mov rdi, rax
lea rdx, [0x1402cd5bc]
mov rcx, rbx
call fcn.140016880
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp + 0x20]
call fcn.1402233f8
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 7
cmova rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
mov rcx, rbx
call fcn.140016b40
lea rbx, [rbp + 0x130]
cmp qword [rbp + 0x148], 7
cmova rbx, qword [rbp + 0x130]
lea rdx, [0x1402cdad0]
mov rcx, rax
call fcn.140016880
mov rcx, rax
mov rdx, rbx
call fcn.140016880
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032b0dc], eax
jg 0x14003b2b2
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x48]
call fcn.140019f80
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 7
jbe 0x14003a9a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031c620]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a99d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b336
call fcn.140003e94
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [0x14031c620], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [0x14031c630], xmm1
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x14003aa1e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003aa19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b33c
call fcn.140003e94
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 7
jbe 0x14003aa7e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003aa79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b342
call fcn.140003e94
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
mov rdx, qword [rbp + 0x148]
cmp rdx, 7
jbe 0x14003aade
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003aad9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b348
call fcn.140003e94
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x14003ab3e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ab39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b34e
call fcn.140003e94
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
lea rcx, [rbp + 0x30]
call fcn.140019240
call fcn.140020e90
mov rdx, r13
cmp qword [reloc.OLEAUT32.dll_VariantInit], 7
cmova rdx, qword [0x14031c620]
mov r8, qword [0x14031c630]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Opened_Monitor_Key:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016880
mov rcx, rax
call fcn.140017a70
mov dword [rsp + 0x40], 0x200
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x360]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b02b
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003ac4f
call fcn.140020e90
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003ac1d
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Opened_First_Key:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016880
mov rcx, rax
call fcn.140017a70
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x360]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b02b
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003ace0
call fcn.140020e90
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003acae
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Read_First_Key:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016880
mov rcx, rax
call fcn.140017a70
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Control
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003afb1
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003ad62
call fcn.140020e90
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003ad3f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Control_key:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Device_Parameters
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003af5c
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003adef
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003adcc
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Device_Params
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
call fcn.140017a70
mov dword [rsp + 0x44], 0x101
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x250]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.EDID
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
test eax, eax
jne 0x14003aed7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003ae8c
call fcn.140020e90
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003ae5f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Checked_EDID_for_monitor:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
mov edx, esi
call fcn.140019580
mov rcx, rax
call fcn.140017a70
lea rax, [rbp + 0x218]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, dword [rsp + 0x44]
lea rdx, [rbp + 0x250]
mov rcx, r15
call fcn.1400380e0
inc esi
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b0f7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003af36
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003af09
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
mov edx, edi
call fcn.14003c2c0
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b0f7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b010
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003af92
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
xor edx, edx
jmp 0x14003b000
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b010
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003afe3
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov edx, edi
mov rcx, rax
call fcn.14003c2c0
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b0f7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b08a
call fcn.140020e90
mov edx, 3
mov rcx, rax
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
cmp qword [rbx + 0x18], 7
mov rdx, rbx
jbe 0x14003b05d
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov edx, edi
mov rcx, rax
call fcn.14003c2c0
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b0f7
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b0f7
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003b0c9
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
mov edx, edi
call fcn.14003c2c0
mov rcx, rax
call fcn.140017a70
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 7
jbe 0x14003b13d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b138
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b252
call fcn.140003e94
inc r14d
jmp 0x140039e41
cmp ebx, 0x103
je 0x14003b1ac
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b1ac
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rdi, rax
call fcn.140020e90
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14003b17f
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
mov edx, ebx
call fcn.14003c2c0
mov rcx, rax
call fcn.140017a70
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b20f
call fcn.140020e90
cmp dword [rax + 8], 3
jl 0x14003b20f
call fcn.140020e90
mov rcx, rax
mov edx, 3
call fcn.1400211b0
mov rbx, rax
call fcn.140020e90
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14003b1eb
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016b40
lea rdx, str.Error:
mov rcx, rax
call fcn.140014ab0
mov rcx, rax
call fcn.140017a70
nop
lea rcx, [rbp + 0x1f0]
call fcn.140017b00
mov al, 1
mov rcx, qword [rbp + 0x560]
xor rcx, rsp
call fcn.140220ab0
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14022a250
nop
lea rcx, [0x14032b0dc]
call fcn.140220de4
cmp dword [0x14032b0dc], 0xffffffff
jne 0x14003a28e
xorps xmm0, xmm0
movups xmmword [0x14031c620], xmm0
mov qword [0x14031c630], r12
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x14031c620], r12w
lea rcx, [0x14026f550]
call fcn.140220cf8
lea rcx, [0x14032b0dc]
call fcn.140220d78
jmp 0x14003a28e
lea rcx, [0x14032b0dc]
call fcn.140220de4
cmp dword [0x14032b0dc], 0xffffffff
jne 0x14003a94b
xorps xmm0, xmm0
movups xmmword [0x14031c620], xmm0
mov qword [0x14031c630], r12
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x14031c620], r12w
lea rcx, [0x14026f550]
call fcn.140220cf8
lea rcx, [0x14032b0dc]
call fcn.140220d78
jmp 0x14003a94b
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
nop
call fcn.14022a250
int3