Function at 0x1400069bd
Capabilities:
Query or enumerate registry value

Disassembly:
cmp r8d, 0x8001
jne 0x140007158
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x430]
sub rsp, 0x530
mov rax, qword [0x140046088]
xor rax, rsp
mov qword [rbp + 0x410], rax
mov rdi, qword [0x140048ba0]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x30], rax
lea r8, [0x14003e4d0]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x558], r12
xor r12d, r12d
mov qword [rsp + 0x28], rax
mov rbx, r9
mov dword [rsp + 0x50], r12d
lea rdx, str.SOFTWAREOEMQuick_Access
mov dword [rsp + 0x48], 4
mov rcx, 0xffffffff80000002
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 0x10]
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
je 0x140006a6d
xor r9d, r9d
lea r8, [0x14003e4d0]
lea rdx, str.SOFTWAREOEMQuick_Access
call fcn.1400073c0
test eax, eax
jne 0x140006a6d
mov r8d, dword [rsp + 0x48]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.14000e280
cmp dword [rsp + 0x58], r12d
je 0x140007137
mov qword [rsp + 0x550], rsi
lea rcx, [rbp + 0x180]
mov qword [rsp + 0x560], r14
xor edx, edx
mov r8d, 0x208
mov qword [rsp + 0x568], r15
mov r14, r12
call fcn.14000f120
mov r15d, ebx
lea rsi, [rdi + 0x208]
shr r15d, 0x10
lea r8, str._kAgtCmdOSD__type:_d__state:_d__DPI:_s
movzx ebx, bx
lea rcx, [rbp + 0x390]
mov r9d, r15d
mov qword [rsp + 0x28], rsi
mov edx, 0x40
mov dword [rsp + 0x20], ebx
call fcn.140005a20
mov rcx, qword [0x140048b90]
test rcx, rcx
je 0x140006afd
lea r9, [rbp + 0x390]
xor edx, edx
lea r8, str.OSDDialog::ProcessMessage
call fcn.1400057d0
mov rcx, qword [rdi + 0x408]
mov edx, 0x100
call qword [sym.imp.USER32.dll_KillTimer]
xor edx, edx
lea rcx, [rsp + 0x70]
mov r8d, 0x208
call fcn.14000f120
cmp r15d, 0xf
ja case.0x140006b3d.13
lea rdx, [0x140000000]
mov ecx, dword [rdx + r15*4 + 0x715c]
add rcx, rdx
jmp rcx
lea rax, str.CapsLock_On.png
lea rcx, str.CapsLock_Off.png
jmp 0x140006eda
lea rax, str.NumLock_On.png
lea rcx, str.NumLock_Off.png
jmp 0x140006eda
lea rax, str.ScrollLock_On.png
lea rcx, str.ScrollLock_Off.png
jmp 0x140006eda
lea rax, str.Touchpad_On.png
lea rcx, str.Touchpad_Off.png
jmp 0x140006eda
cmp dword [rdi + 0x428], 1
lea rax, str.Touchpad_Win_On.png
mov r8, qword [rdi]
lea rcx, str.Touchpad_win_Off.png
mov r9, rsi
jne 0x140006bf4
cmp ebx, 1
lea rdx, str._sImages_s_s_s
cmove rcx, rax
lea rax, [rdi + 8]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.1400011f0
mov edx, r12d
lea r8, [rbp + 0x180]
cmp ebx, 1
mov r9d, 0x104
setne dl
xor ecx, ecx
add edx, 0x82
call qword [sym.imp.USER32.dll_LoadStringW]
jmp 0x140006c11
cmp ebx, 1
lea rdx, str._sImages_s_s
cmove rcx, rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x70]
call fcn.1400011f0
mov dword [rdi + 0x414], 0x100
mov dword [rdi + 0x418], 0x80
jmp case.0x140006b3d.13
lea rax, str.KbLock_On.png
lea rcx, str.KbLock_Off.png
jmp 0x140006eda
lea rax, str.PanelLock_On.png
lea rcx, str.PanelLock_Off.png
jmp 0x140006eda
test ebx, ebx
jne 0x140006c64
lea r14, str.Orientation_0.png
lea rdx, [0x14003e7dc]
jmp 0x140006ca7
cmp ebx, 0x5a
jne 0x140006c79
lea r14, [0x14003e7e0]
lea rdx, [0x14003e808]
jmp 0x140006ca7
cmp ebx, 0xb4
jne 0x140006c91
lea r14, str.Orientation_180.png
lea rdx, [0x14003e838]
jmp 0x140006ca7
cmp ebx, 0x10e
jne 0x140006cb3
lea r14, str.Orientation_270.png
lea rdx, [0x14003e868]
lea rcx, [rbp + 0x180]
call fcn.1400011f0
cmp dword [rdi + 0x428], 1
lea rcx, [rsp + 0x70]
mov r8, qword [rdi]
mov r9, rsi
jne 0x140006ce6
lea rax, [rdi + 8]
mov qword [rsp + 0x28], r14
lea rdx, str._sImages_s_s_s
mov qword [rsp + 0x20], rax
call fcn.1400011f0
jmp case.0x140006b3d.13
mov qword [rsp + 0x20], r14
jmp 0x140006f46
cmp dword [rdi + 0x428], 1
lea rcx, str.Flip.png
mov r8, qword [rdi]
mov r9, rsi
jne 0x140006f3c
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 8]
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea rdx, str._sImages_s_s_s
call fcn.1400011f0
jmp case.0x140006b3d.13
cmp ebx, 1
jne 0x140006d3f
lea r14, str.Mode_Laptop.png
jmp 0x140006cb3
cmp ebx, 0x40
je 0x140006d85
cmp ebx, 8
je 0x140006d85
cmp ebx, 0x20
jne 0x140006d5a
lea r14, str.Mode_Ezel.png
jmp 0x140006cb3
lea eax, [rbx - 2]
test eax, 0xfffffffd
je 0x140006d79
cmp ebx, 0x10
jne 0x140006cb3
lea r14, str.Mode_Tent.png
jmp 0x140006cb3
lea r14, str.Mode_Pad.png
jmp 0x140006cb3
lea r14, str.Mode_Display.png
jmp 0x140006cb3
cmp dword [rdi + 0x428], 1
mov r9, rsi
mov r8, qword [rdi]
jne 0x140006dfa
lea rax, str.img_osd_mic_on.png
cmp ebx, 1
lea rcx, str.img_osd_mic_off.png
cmove rcx, rax
lea rdx, str._sImages_s_s_s
mov qword [rsp + 0x28], rcx
lea rax, [rdi + 8]
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.1400011f0
mov edx, r12d
lea r8, [rbp + 0x180]
cmp ebx, 1
mov r9d, 0x104
setne dl
xor ecx, ecx
add edx, 0x82
call qword [sym.imp.USER32.dll_LoadStringW]
jmp 0x140006e25
lea rcx, str.mic_on.png
lea rax, str.mic_off.png
cmp ebx, 1
cmove rax, rcx
mov qword [rsp + 0x20], rax
lea rdx, str._sImages_s_s
lea rcx, [rsp + 0x70]
call fcn.1400011f0
mov rcx, qword [0x140048b90]
test rcx, rcx
je case.0x140006b3d.13
lea r9, [rsp + 0x70]
xor edx, edx
lea r8, str.OSDDialog::ProcessMessage
call fcn.1400057d0
jmp case.0x140006b3d.13
mov r8, qword [rdi]
lea rcx, str.FnLock_On.png
lea rax, str.FnLock_Off.png
mov r9, rsi
jmp 0x140006e08
test ebx, ebx
je 0x140006e9c
sub ebx, 2
je 0x140006e85
cmp ebx, 1
jne 0x140006ea3
mov r8, qword [rdi]
lea r14, str.system_performance.png
mov qword [rsp + 0x20], r14
mov r9, rsi
jmp 0x140006e14
mov r8, qword [rdi]
lea r14, str.system_silent.png
mov qword [rsp + 0x20], r14
mov r9, rsi
jmp 0x140006e14
lea r14, str.system_normal.png
mov r8, qword [rdi]
mov r9, rsi
mov qword [rsp + 0x20], r14
jmp 0x140006e14
mov r8, qword [rdi]
lea rcx, str.Privacy_Screen_On.png
lea rax, str.Privacy_Screen_Off.png
mov r9, rsi
jmp 0x140006e08
lea rax, str.win_on.png
lea rcx, str.win_off.png
cmp dword [rdi + 0x428], 1
mov r9, rsi
mov r8, qword [rdi]
jne 0x140006f35
cmp ebx, 1
lea rdx, str._sImages_s_s_s
cmove rcx, rax
lea rax, [rdi + 8]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.1400011f0
mov edx, r12d
lea r8, [rbp + 0x180]
cmp ebx, 1
mov r9d, 0x104
setne dl
xor ecx, ecx
add edx, 0x82
call qword [sym.imp.USER32.dll_LoadStringW]
jmp case.0x140006b3d.13
cmp ebx, 1
cmove rcx, rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x70]
lea rdx, str._sImages_s_s
call fcn.1400011f0
mov rcx, qword [0x140048b90]
test rcx, rcx
je 0x140006f73
lea r9, [rbp + 0x180]
xor edx, edx
lea r8, str.OSDDialog::ProcessMessage
call fcn.1400057d0
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [rdi + 0x414]
mov ecx, 0x18
mov qword [rsp + 0x40], rbx
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rsi, rax
test rax, rax
je 0x140006fd1
xor eax, eax
lea rdx, [rsi + 8]
mov qword [rsi + 8], rax
lea rcx, [rsp + 0x70]
mov qword [rsi + 0x10], rax
lea rax, vtable.Gdiplus::Image.0
mov qword [rsi], rax
mov qword [rdx], r12
call qword [sym.imp.gdiplus.dll_GdipLoadImageFromFile]
mov dword [rsi + 0x10], eax
jmp 0x140006fd4
mov rsi, r12
mov rcx, qword [rsi + 8]
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x48], r12d
call qword [sym.imp.gdiplus.dll_GdipGetImageWidth]
test eax, eax
je 0x140006fef
mov dword [rsi + 0x10], eax
mov rcx, qword [rsi + 8]
lea rdx, [rsp + 0x50]
mov r15d, dword [rsp + 0x48]
mov dword [rsp + 0x50], r12d
call qword [sym.imp.gdiplus.dll_GdipGetImageHeight]
test eax, eax
je 0x14000700f
mov dword [rsi + 0x10], eax
cmp r15d, dword [rsp + 0x50]
mov r15, qword [rsp + 0x568]
mov r14d, dword [rsp + 0x44]
je 0x140007077
mov rcx, rsi
movaps xmmword [rsp + 0x520], xmm6
call fcn.1400066c0
mov eax, eax
xorps xmm6, xmm6
mov rcx, rsi
cvtsi2sd xmm6, rax
call fcn.140006710
mov eax, eax
xorps xmm0, xmm0
movd xmm1, r14d
cvtsi2sd xmm0, rax
cvtdq2pd xmm1, xmm1
divsd xmm6, xmm0
mulsd xmm6, xmm1
cvttsd2si ecx, xmm6
movaps xmm6, xmmword [rsp + 0x520]
mov dword [rsp + 0x40], ecx
mov rbx, qword [rsp + 0x40]
jmp 0x14000707b
mov ecx, dword [rsp + 0x40]
mov r9d, dword [rsp + 0x6c]
mov eax, 0x51eb851f
imul r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + r14]
cmp eax, r9d
jle 0x1400070a0
sub r9d, r14d
jmp 0x1400070a3
mov r9d, edx
mov eax, dword [rsp + 0x68]
cdq
mov dword [rsp + 0x30], 5
sub eax, edx
mov dword [rsp + 0x28], r14d
sar eax, 1
mov r8d, eax
mov dword [rsp + 0x20], ecx
mov eax, ecx
mov rcx, qword [rdi + 0x408]
cdq
sub eax, edx
or rdx, 0xffffffffffffffff
sar eax, 1
sub r8d, eax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r8, rbx
mov rdx, rsi
mov rcx, rdi
call fcn.1400071b0
mov rcx, qword [rdi + 0x408]
mov edx, 1
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rdi + 0x408]
lea r9, [0x140007390]
mov edx, 0x100
mov r8d, 0x3e8
call qword [sym.imp.USER32.dll_SetTimer]
mov rax, qword [rsi]
mov edx, 1
mov rcx, rsi
call qword [rax]
mov r14, qword [rsp + 0x560]
mov rsi, qword [rsp + 0x550]
mov r12, qword [rsp + 0x558]
mov rcx, qword [rbp + 0x410]
xor rcx, rsp
call fcn.14000ba00
add rsp, 0x530
pop rdi
pop rbx
pop rbp
ret