Function at 0x14003a1a0
Capabilities:
Check for time delay via gettickcount
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5a8]
sub rsp, 0x680
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14031a940]
xor rax, rsp
mov qword [rbp + 0x560], rax
mov r15, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
movdqa xmm1, xmmword [0x1402d3560]
movdqu xmmword [rbp + 0x208], xmm1
mov word [rbp + 0x1f8], r12w
mov byte [rbp + 0x1f0], r12b
lea rdx, str.srl::Monitor::GetMonitorInfoW
lea rcx, [rbp + 0x1f8]
call fcn.140018440
nop
call fcn.1400210a0
cmp dword [rax + 8], 4
jl 0x14003a235
lea rcx, [rbp + 0x1f0]
call fcn.1400162a0
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetEnumDISPLAY
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003b5f9
mov r14d, r12d
mov dword [rsp + 0x40], 0x100
mov esi, r12d
lea r13, [0x14031b5e0]
movsd xmm6, qword [0x1402d3510]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x360]
mov edx, r14d
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ebx, eax
test eax, eax
jne 0x14003b585
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003a931
call fcn.1400210a0
mov rdi, rax
lea rcx, [rbp + 0x30]
call fcn.1400194c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x190]
call fcn.140018440
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov rdx, r12
mov qword [rbp + 0x140], rdx
mov r8d, 7
mov qword [rbp + 0x148], r8
mov word [rbp + 0x130], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x14003a3b3
cmp ebx, 0xa
jge 0x14003a3b3
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x130]
cmp rax, 2
jb 0x14003a382
lea rax, [rdx + 2]
mov qword [rbp + 0x140], rax
cmp r8, 8
cmovae rcx, qword [rbp + 0x130]
mov eax, dword [0x1402cca20]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x14003a39c
mov qword [rsp + 0x20], 2
lea r9, [0x1402cca20]
mov edx, 2
call fcn.140022090
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x14003a3b3
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
jmp 0x14003a342
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
call fcn.14023116c
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x238]
call fcn.1402312bc
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x170]
call fcn.140018440
lea rcx, [rbp + 0x250]
call fcn.1400194c0
nop
cmp dword [rdi + 0x14], 0
jne 0x14003a44d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.140012fa0
jmp 0x14003a46e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm6
lea rcx, [rbp + 0x260]
call fcn.140021a80
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x268]
call fcn.14001a0c0
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14003a4c8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a4c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b74c
call fcn.140004144
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
lea rcx, [rbp + 0x250]
call fcn.1400193b0
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x70]
call fcn.140222e78
mov rbx, rax
mov edx, 0x2040
lea rcx, [rbp - 0x80]
call fcn.140222e78
mov rcx, qword [rbp + 0x40]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x40]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 8
cmovae rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
lea rcx, [rbp + 0x40]
call fcn.140016ce0
lea rdx, [0x1402cc558]
mov rcx, rax
call fcn.140016a20
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rbp - 0x70]
call fcn.140222ea0
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rbp - 0x60]
call fcn.140222e8c
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 8
cmovae rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rdi
call fcn.140016ce0
mov rbx, rax
mov edx, 5
lea rcx, [rbp - 0x50]
call fcn.140222ea0
mov rdi, rax
lea rdx, [0x1402cc558]
mov rcx, rbx
call fcn.140016a20
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp - 0x40]
call fcn.140222e78
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rdx, qword [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
mov rcx, rbx
call fcn.140016ce0
lea rbx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rbx, qword [rbp + 0x130]
lea rdx, [0x1402cca70]
mov rcx, rax
call fcn.140016a20
mov rcx, rax
mov rdx, rbx
call fcn.140016a20
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032a09c], eax
jg 0x14003b698
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x48]
call fcn.14001a0c0
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 8
jb 0x14003a725
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031b5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a720
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b752
call fcn.140004144
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [0x14031b5e0], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [0x14031b5f0], xmm1
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14003a7a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a79c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b758
call fcn.140004144
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x14003a801
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a7fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b75e
call fcn.140004144
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x14003a861
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a85c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b764
call fcn.140004144
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 8
jb 0x14003a8c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a8bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b76a
call fcn.140004144
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
lea rcx, [rbp + 0x30]
call fcn.1400193b0
call fcn.1400210a0
mov rdx, r13
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdx, qword [0x14031b5e0]
mov r8, qword [0x14031b5f0]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Display_Key_Name:
mov rcx, rax
call fcn.140015360
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016a20
mov rcx, rax
call fcn.140017c00
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x218]
call fcn.14000953c
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x360]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b4d7
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003afee
call fcn.1400210a0
mov rdi, rax
lea rcx, [rbp + 0x30]
call fcn.1400194c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x170]
call fcn.140018440
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov rdx, r12
mov qword [rbp + 0x140], rdx
mov r8d, 7
mov qword [rbp + 0x148], r8
mov word [rbp + 0x130], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x14003aa71
nop dword [rax]
cmp ebx, 0xa
jge 0x14003aa71
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x130]
cmp rax, 2
jb 0x14003aa40
lea rax, [rdx + 2]
mov qword [rbp + 0x140], rax
cmp r8, 8
cmovae rcx, qword [rbp + 0x130]
mov eax, dword [0x1402cca20]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x14003aa5a
mov qword [rsp + 0x20], 2
lea r9, [0x1402cca20]
mov edx, 2
call fcn.140022090
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x14003aa71
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
jmp 0x14003aa00
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
call fcn.14023116c
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x238]
call fcn.1402312bc
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x190]
call fcn.140018440
lea rcx, [rbp + 0x250]
call fcn.1400194c0
nop
cmp dword [rdi + 0x14], 0
jne 0x14003ab0b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.140012fa0
jmp 0x14003ab2c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm6
lea rcx, [rbp + 0x260]
call fcn.140021a80
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x268]
call fcn.14001a0c0
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14003ab86
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ab81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b770
call fcn.140004144
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r12w
lea rcx, [rbp + 0x250]
call fcn.1400193b0
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rbp - 0x30]
call fcn.140222e78
mov rbx, rax
mov edx, 0x2040
lea rcx, [rbp - 0x20]
call fcn.140222e78
mov rcx, qword [rbp + 0x40]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x40]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rdx, qword [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
lea rcx, [rbp + 0x40]
call fcn.140016ce0
lea rdx, [0x1402cc558]
mov rcx, rax
call fcn.140016a20
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rbp - 0x10]
call fcn.140222ea0
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rbp]
call fcn.140222e8c
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 8
cmovae rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rdi
call fcn.140016ce0
mov rbx, rax
mov edx, 5
lea rcx, [rbp + 0x10]
call fcn.140222ea0
mov rdi, rax
lea rdx, [0x1402cc558]
mov rcx, rbx
call fcn.140016a20
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp + 0x20]
call fcn.140222e78
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 8
cmovae rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
mov rcx, rbx
call fcn.140016ce0
lea rbx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rbx, qword [rbp + 0x130]
lea rdx, [0x1402cca70]
mov rcx, rax
call fcn.140016a20
mov rcx, rax
mov rdx, rbx
call fcn.140016a20
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032a09c], eax
jg 0x14003b6f2
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x48]
call fcn.14001a0c0
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 8
jb 0x14003ade2
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031b5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003addd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b776
call fcn.140004144
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [0x14031b5e0], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [0x14031b5f0], xmm1
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14003ae5e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ae59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b77c
call fcn.140004144
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 8
jb 0x14003aebe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003aeb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b782
call fcn.140004144
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x14003af1e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003af19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b788
call fcn.140004144
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x14003af7e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003af79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b78e
call fcn.140004144
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
lea rcx, [rbp + 0x30]
call fcn.1400193b0
call fcn.1400210a0
mov rdx, r13
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdx, qword [0x14031b5e0]
mov r8, qword [0x14031b5f0]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Opened_Monitor_Key:
mov rcx, rax
call fcn.140015360
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016a20
mov rcx, rax
call fcn.140017c00
mov dword [rsp + 0x40], 0x200
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x360]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b46b
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b08f
call fcn.1400210a0
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b05d
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Opened_First_Key:
mov rcx, rax
call fcn.140015360
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016a20
mov rcx, rax
call fcn.140017c00
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x360]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b46b
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b120
call fcn.1400210a0
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b0ee
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Read_First_Key:
mov rcx, rax
call fcn.140015360
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016a20
mov rcx, rax
call fcn.140017c00
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Control
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b3f1
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b1a2
call fcn.1400210a0
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b17f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Control_key:
mov rcx, rax
call fcn.140015360
mov rcx, rax
call fcn.140017c00
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Device_Parameters
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003b39c
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b22f
call fcn.1400210a0
mov rcx, rax
mov edx, 3
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b20c
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Device_Params
mov rcx, rax
call fcn.140015360
mov rcx, rax
call fcn.140017c00
mov dword [rsp + 0x44], 0x101
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x250]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.EDID
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
test eax, eax
jne 0x14003b317
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b2cc
call fcn.1400210a0
mov rcx, rax
lea edx, [rdi + 3]
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b29f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Checked_EDID_for_monitor:
mov rcx, rax
call fcn.140015360
mov rcx, rax
mov edx, esi
call fcn.1400196c0
mov rcx, rax
call fcn.140017c00
lea rax, [rbp + 0x218]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, dword [rsp + 0x44]
lea rdx, [rbp + 0x250]
mov rcx, r15
call fcn.140038500
inc esi
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b537
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b376
call fcn.1400210a0
mov rcx, rax
mov edx, 3
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b349
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Error:
mov rcx, rax
call fcn.140015360
mov rcx, rax
mov edx, edi
call fcn.14003c6b0
mov rcx, rax
call fcn.140017c00
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b537
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b450
call fcn.1400210a0
mov rcx, rax
mov edx, 3
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b3d2
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Error:
mov rcx, rax
call fcn.140015360
xor edx, edx
jmp 0x14003b440
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b450
call fcn.1400210a0
mov rcx, rax
mov edx, 3
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b423
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Error:
mov rcx, rax
call fcn.140015360
mov edx, edi
mov rcx, rax
call fcn.14003c6b0
mov rcx, rax
call fcn.140017c00
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b537
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b4ca
call fcn.1400210a0
mov edx, 3
mov rcx, rax
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
cmp qword [rbx + 0x18], 8
mov rdx, rbx
jb 0x14003b49d
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Error:
mov rcx, rax
call fcn.140015360
mov edx, edi
mov rcx, rax
call fcn.14003c6b0
mov rcx, rax
call fcn.140017c00
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b537
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b537
call fcn.1400210a0
mov rcx, rax
mov edx, 3
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b509
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Error:
mov rcx, rax
call fcn.140015360
mov rcx, rax
mov edx, edi
call fcn.14003c6b0
mov rcx, rax
call fcn.140017c00
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 8
jb 0x14003b57d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b578
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b692
call fcn.140004144
inc r14d
jmp 0x14003a281
cmp ebx, 0x103
je 0x14003b5ec
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b5ec
call fcn.1400210a0
mov rcx, rax
mov edx, 3
call fcn.1400213a0
mov rdi, rax
call fcn.1400210a0
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14003b5bf
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Error:
mov rcx, rax
call fcn.140015360
mov rcx, rax
mov edx, ebx
call fcn.14003c6b0
mov rcx, rax
call fcn.140017c00
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b64f
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x14003b64f
call fcn.1400210a0
mov rcx, rax
mov edx, 3
call fcn.1400213a0
mov rbx, rax
call fcn.1400210a0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b62b
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.Error:
mov rcx, rax
call fcn.140015360
mov rcx, rax
call fcn.140017c00
nop
lea rcx, [rbp + 0x1f0]
call fcn.140017c90
mov al, 1
mov rcx, qword [rbp + 0x560]
xor rcx, rsp
call fcn.140220510
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140229804
nop
lea rcx, [0x14032a09c]
call fcn.140220854
cmp dword [0x14032a09c], 0xffffffff
jne 0x14003a6ce
xorps xmm0, xmm0
movups xmmword [0x14031b5e0], xmm0
mov qword [0x14031b5f0], r12
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x14031b5e0], r12w
lea rcx, [0x14026e6e0]
call fcn.140220768
lea rcx, [0x14032a09c]
call fcn.1402207e8
jmp 0x14003a6ce
lea rcx, [0x14032a09c]
call fcn.140220854
cmp dword [0x14032a09c], 0xffffffff
jne 0x14003ad8b
xorps xmm0, xmm0
movups xmmword [0x14031b5e0], xmm0
mov qword [0x14031b5f0], r12
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x14031b5e0], r12w
lea rcx, [0x14026e6e0]
call fcn.140220768
lea rcx, [0x14032a09c]
call fcn.1402207e8
jmp 0x14003ad8b
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
nop
call fcn.140229804
int3