Function at 0x14000c698
Capabilities:
Set registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push rbp
push r13
push r14
mov rbp, rsp
sub rsp, 0x60
xor r14d, r14d
lea rax, [0x140011300]
mov qword [r11 - 0x38], r14
mov rdi, r8
mov qword [rbp - 0x10], rax
mov rbx, rdx
lea rax, [rbp - 8]
mov qword [rbp - 8], r14
mov qword [r11 - 0x40], rax
lea rdx, str.VirtualDisplay
mov qword [r11 - 0x48], r14
xor r9d, r9d
mov dword [rsp + 0x28], 0xf003f
xor r8d, r8d
mov dword [r11 - 0x58], r14d
mov rsi, rcx
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCreateKeyExW]
mov r12d, 0x80070000
test eax, eax
je 0x14000c72a
mov rcx, qword [rbp + 0x18]
lea r8, str.onecoreuap_analog_sdk_simulation_servicesperceptionsimulation_virtualdisplaymanager_virtualdisplay.cpp
mov r9d, eax
mov edx, 0x1d6
call fcn.14000b2e4
mov ebx, eax
jmp 0x14000cb1a
mov rcx, qword [rbp - 8]
lea rdx, [0x1400128a8]
mov r13d, 3
mov dword [rsp + 0x28], 0x10
mov r9d, r13d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
movzx ebx, ax
or ebx, r12d
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x14000c770
mov r9d, ebx
mov edx, 0x1d8
jmp 0x14000cb05
cmp word [rdi], r14w
je 0x14000c7c9
mov rbx, qword [rbp - 8]
mov edx, 0x64
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r9d, 1
xor r8d, r8d
mov rcx, rbx
lea edx, [rax + rax]
mov dword [rsp + 0x28], edx
lea rdx, str.Name
mov qword [rsp + 0x20], rdi
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
movzx ebx, ax
or ebx, r12d
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x14000c7c9
mov r9d, ebx
mov edx, 0x1dd
jmp 0x14000cb05
mov r8d, dword [rdi + 0xc8]
lea rdx, str.Active
mov rcx, qword [rbp - 8]
and r8d, 1
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000c7f4
mov edx, 0x1e0
jmp 0x14000cb02
mov r8d, dword [rdi + 0xc8]
lea rdx, str.Transparent
mov rcx, qword [rbp - 8]
shr r8d, 1
and r8d, 1
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000c822
mov edx, 0x1e1
jmp 0x14000cb02
mov r8d, dword [rdi + 0xc8]
lea rdx, str.Stereo
mov rcx, qword [rbp - 8]
shr r8d, 2
and r8d, 1
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000c851
mov edx, 0x1e2
jmp 0x14000cb02
mov r8d, dword [rdi + 0xc8]
lea rdx, str.Persistent
mov rcx, qword [rbp - 8]
shr r8d, 3
and r8d, 1
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000c880
mov edx, 0x1e3
jmp 0x14000cb02
mov r8d, dword [rdi + 0xcc]
lea rdx, str.Width
mov rcx, qword [rbp - 8]
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000c8a7
mov edx, 0x1e4
jmp 0x14000cb02
mov r8d, dword [rdi + 0xd0]
lea rdx, str.Height
mov rcx, qword [rbp - 8]
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000c8ce
mov edx, 0x1e5
jmp 0x14000cb02
mov r8d, dword [rdi + 0xd4]
lea rdx, str.Frames
mov rcx, qword [rbp - 8]
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000c8f5
mov edx, 0x1e6
jmp 0x14000cb02
mov r8d, dword [rdi + 0xd8]
lea rdx, str.Seconds
mov rcx, qword [rbp - 8]
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000c91c
mov edx, 0x1e7
jmp 0x14000cb02
mov rcx, qword [rbp - 8]
lea rax, [rdi + 0xe8]
mov dword [rsp + 0x28], 0x30
lea rdx, str.LeftTransform
mov r9d, r13d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
movzx ebx, ax
or ebx, r12d
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x14000c963
mov r9d, ebx
mov edx, 0x1e8
jmp 0x14000cb05
mov rcx, qword [rbp - 8]
lea rax, [rdi + 0x12c]
mov dword [rsp + 0x28], 0x30
lea rdx, str.RightTransform
mov r9d, r13d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
movzx ebx, ax
or ebx, r12d
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x14000c9aa
mov r9d, ebx
mov edx, 0x1e9
jmp 0x14000cb05
mov rcx, qword [rbp - 8]
lea rax, [rdi + 0x118]
mov dword [rsp + 0x28], 0x14
lea rdx, str.LeftPinhole
mov r9d, r13d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
movzx ebx, ax
or ebx, r12d
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x14000c9f1
mov r9d, ebx
mov edx, 0x1ea
jmp 0x14000cb05
mov rcx, qword [rbp - 8]
lea rax, [rdi + 0x15c]
mov dword [rsp + 0x28], 0x14
lea rdx, str.RightPinhole
mov r9d, r13d
mov qword [rsp + 0x20], rax
xor r8d, r8d
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegSetValueExW]
movzx ebx, ax
or ebx, r12d
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x14000ca38
mov r9d, ebx
mov edx, 0x1eb
jmp 0x14000cb05
test byte [rdi + 0xc8], 8
je 0x14000cab8
mov r8d, 1
lea rdx, str.SkipInFocusCheck
mov rcx, rsi
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000ca66
mov edx, 0x1f1
jmp 0x14000cb02
cmp byte [0x1400199a0], r14b
jne 0x14000ca88
xor r8d, r8d
lea rdx, [0x1400191d0]
xor ecx, ecx
call qword [sym.imp.ntdll.dll_RtlGetDeviceFamilyInfoEnum]
mov byte [0x1400199a0], 1
cmp dword [0x1400191d0], 0xa
jne 0x14000cb17
mov rcx, qword [rbp - 8]
lea rdx, str.UseHardwareDisplay
mov r8d, 1
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000cb17
mov edx, 0x1f7
jmp 0x14000cb02
mov r8, qword [rdi + 0xe0]
lea rdx, str.AdapterHi
mov rcx, qword [rbp - 8]
shr r8, 0x20
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000cae0
mov edx, 0x1fe
jmp 0x14000cb02
mov r8d, dword [rdi + 0xe0]
lea rdx, str.AdapterLo
mov rcx, qword [rbp - 8]
call fcn.14000c550
mov ebx, eax
test eax, eax
jns 0x14000cb17
mov edx, 0x1ff
mov r9d, eax
mov rcx, qword [rbp + 0x18]
lea r8, str.onecoreuap_analog_sdk_simulation_servicesperceptionsimulation_virtualdisplaymanager_virtualdisplay.cpp
call fcn.140002bd4
jmp 0x14000cb1a
mov ebx, r14d
mov rcx, qword [rbp - 8]
lea rax, [0x140011300]
mov qword [rbp - 0x10], rax
test rcx, rcx
je 0x14000cb43
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
movzx ecx, ax
or ecx, r12d
test eax, eax
cmovle ecx, eax
test ecx, ecx
js 0x14000cb63
lea r11, [rsp + 0x60]
mov eax, ebx
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop rbp
ret
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ecx, ax
or ecx, r12d
test eax, eax
cmovle ecx, eax
call fcn.1400040d0
int3