Function at 0x14003a230
Capabilities:
Check for time delay via gettickcount
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5a8]
sub rsp, 0x680
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14031a940]
xor rax, rsp
mov qword [rbp + 0x560], rax
mov r15, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
movdqa xmm1, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x208], xmm1
mov word [rbp + 0x1f8], r12w
mov byte [rbp + 0x1f0], r12b
lea rdx, str.srl::Monitor::GetMonitorInfoW
lea rcx, [rbp + 0x1f8]
call fcn.1400184d0
nop
call fcn.140021130
cmp dword [rax + 8], 4
jl 0x14003a2c5
lea rcx, [rbp + 0x1f0]
call fcn.140016330
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetEnumDISPLAY
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003b689
mov r14d, r12d
mov dword [rsp + 0x40], 0x100
mov esi, r12d
lea r13, [0x14031b5e0]
movsd xmm6, qword [0x1402d35d0]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x360]
mov edx, r14d
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ebx, eax
test eax, eax
jne 0x14003b615
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003a9c1
call fcn.140021130
mov rdi, rax
lea rcx, [rbp + 0x30]
call fcn.140019550
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x190]
call fcn.1400184d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov rdx, r12
mov qword [rbp + 0x140], rdx
mov r8d, 7
mov qword [rbp + 0x148], r8
mov word [rbp + 0x130], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x14003a443
cmp ebx, 0xa
jge 0x14003a443
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x130]
cmp rax, 2
jb 0x14003a412
lea rax, [rdx + 2]
mov qword [rbp + 0x140], rax
cmp r8, 8
cmovae rcx, qword [rbp + 0x130]
mov eax, dword [0x1402cca20]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x14003a42c
mov qword [rsp + 0x20], 2
lea r9, [0x1402cca20]
mov edx, 2
call fcn.140022120
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x14003a443
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
jmp 0x14003a3d2
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
call fcn.140231aac
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x238]
call fcn.140231bfc
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x170]
call fcn.1400184d0
lea rcx, [rbp + 0x250]
call fcn.140019550
nop
cmp dword [rdi + 0x14], 0
jne 0x14003a4dd
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.140013030
jmp 0x14003a4fe
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm6
lea rcx, [rbp + 0x260]
call fcn.140021b10
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x268]
call fcn.14001a150
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14003a558
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a553
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b7dc
call fcn.1400041d4
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
lea rcx, [rbp + 0x250]
call fcn.140019440
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x70]
call fcn.1402237b8
mov rbx, rax
mov edx, 0x2040
lea rcx, [rbp - 0x80]
call fcn.1402237b8
mov rcx, qword [rbp + 0x40]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x40]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 8
cmovae rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
lea rcx, [rbp + 0x40]
call fcn.140016d70
lea rdx, [0x1402cc558]
mov rcx, rax
call fcn.140016ab0
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rbp - 0x70]
call fcn.1402237e0
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rbp - 0x60]
call fcn.1402237cc
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 8
cmovae rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rdi
call fcn.140016d70
mov rbx, rax
mov edx, 5
lea rcx, [rbp - 0x50]
call fcn.1402237e0
mov rdi, rax
lea rdx, [0x1402cc558]
mov rcx, rbx
call fcn.140016ab0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp - 0x40]
call fcn.1402237b8
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rdx, qword [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
mov rcx, rbx
call fcn.140016d70
lea rbx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rbx, qword [rbp + 0x130]
lea rdx, [0x1402cca70]
mov rcx, rax
call fcn.140016ab0
mov rcx, rax
mov rdx, rbx
call fcn.140016ab0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032a0a4], eax
jg 0x14003b728
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x48]
call fcn.14001a150
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 8
jb 0x14003a7b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031b5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a7b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b7e2
call fcn.1400041d4
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [0x14031b5e0], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [0x14031b5f0], xmm1
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14003a831
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a82c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b7e8
call fcn.1400041d4
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x14003a891
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a88c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b7ee
call fcn.1400041d4
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x14003a8f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a8ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b7f4
call fcn.1400041d4
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 8
jb 0x14003a951
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a94c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b7fa
call fcn.1400041d4
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
lea rcx, [rbp + 0x30]
call fcn.140019440
call fcn.140021130
mov rdx, r13
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdx, qword [0x14031b5e0]
mov r8, qword [0x14031b5f0]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Display_Key_Name:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016ab0
mov rcx, rax
call fcn.140017c90
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x218]
call fcn.1400095cc
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x360]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b567
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b07e
call fcn.140021130
mov rdi, rax
lea rcx, [rbp + 0x30]
call fcn.140019550
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x170]
call fcn.1400184d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov rdx, r12
mov qword [rbp + 0x140], rdx
mov r8d, 7
mov qword [rbp + 0x148], r8
mov word [rbp + 0x130], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x14003ab01
nop dword [rax]
cmp ebx, 0xa
jge 0x14003ab01
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x130]
cmp rax, 2
jb 0x14003aad0
lea rax, [rdx + 2]
mov qword [rbp + 0x140], rax
cmp r8, 8
cmovae rcx, qword [rbp + 0x130]
mov eax, dword [0x1402cca20]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x14003aaea
mov qword [rsp + 0x20], 2
lea r9, [0x1402cca20]
mov edx, 2
call fcn.140022120
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x14003ab01
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
jmp 0x14003aa90
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
call fcn.140231aac
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x238]
call fcn.140231bfc
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x190]
call fcn.1400184d0
lea rcx, [rbp + 0x250]
call fcn.140019550
nop
cmp dword [rdi + 0x14], 0
jne 0x14003ab9b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0x260]
call fcn.140013030
jmp 0x14003abbc
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, xmm6
lea rcx, [rbp + 0x260]
call fcn.140021b10
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x268]
call fcn.14001a150
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14003ac16
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ac11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b800
call fcn.1400041d4
movups xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movups xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], 7
mov word [rbp + 0x1d0], r12w
lea rcx, [rbp + 0x250]
call fcn.140019440
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rbp - 0x30]
call fcn.1402237b8
mov rbx, rax
mov edx, 0x2040
lea rcx, [rbp - 0x20]
call fcn.1402237b8
mov rcx, qword [rbp + 0x40]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x40]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rdx, qword [rbp + 0x190]
mov r8, qword [rbp + 0x1a0]
lea rcx, [rbp + 0x40]
call fcn.140016d70
lea rdx, [0x1402cc558]
mov rcx, rax
call fcn.140016ab0
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rbp - 0x10]
call fcn.1402237e0
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rbp]
call fcn.1402237cc
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 8
cmovae rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rdi
call fcn.140016d70
mov rbx, rax
mov edx, 5
lea rcx, [rbp + 0x10]
call fcn.1402237e0
mov rdi, rax
lea rdx, [0x1402cc558]
mov rcx, rbx
call fcn.140016ab0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp + 0x20]
call fcn.1402237b8
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 8
cmovae rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
mov rcx, rbx
call fcn.140016d70
lea rbx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rbx, qword [rbp + 0x130]
lea rdx, [0x1402cca70]
mov rcx, rax
call fcn.140016ab0
mov rcx, rax
mov rdx, rbx
call fcn.140016ab0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032a0a4], eax
jg 0x14003b782
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x48]
call fcn.14001a150
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 8
jb 0x14003ae72
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031b5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ae6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b806
call fcn.1400041d4
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [0x14031b5e0], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [0x14031b5f0], xmm1
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], 7
mov word [rbp + 0x1b0], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x14003aeee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003aee9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b80c
call fcn.1400041d4
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 8
jb 0x14003af4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003af49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b812
call fcn.1400041d4
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], r12w
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x14003afae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003afa9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b818
call fcn.1400041d4
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x14003b00e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b009
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b81e
call fcn.1400041d4
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r12w
lea rcx, [rbp + 0x30]
call fcn.140019440
call fcn.140021130
mov rdx, r13
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdx, qword [0x14031b5e0]
mov r8, qword [0x14031b5f0]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Opened_Monitor_Key:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016ab0
mov rcx, rax
call fcn.140017c90
mov dword [rsp + 0x40], 0x200
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x360]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b4fb
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b11f
call fcn.140021130
mov rcx, rax
lea edx, [rdi + 3]
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b0ed
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Opened_First_Key:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016ab0
mov rcx, rax
call fcn.140017c90
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0x360]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b4fb
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b1b0
call fcn.140021130
mov rcx, rax
lea edx, [rdi + 3]
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b17e
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Read_First_Key:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140016ab0
mov rcx, rax
call fcn.140017c90
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Control
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test eax, eax
jne 0x14003b481
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b232
call fcn.140021130
mov rcx, rax
lea edx, [rdi + 3]
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b20f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Control_key:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
call fcn.140017c90
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.Device_Parameters
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003b42c
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b2bf
call fcn.140021130
mov rcx, rax
mov edx, 3
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b29c
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Device_Params
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
call fcn.140017c90
mov dword [rsp + 0x44], 0x101
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x250]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.EDID
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
test eax, eax
jne 0x14003b3a7
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b35c
call fcn.140021130
mov rcx, rax
lea edx, [rdi + 3]
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b32f
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Checked_EDID_for_monitor:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
mov edx, esi
call fcn.140019750
mov rcx, rax
call fcn.140017c90
lea rax, [rbp + 0x218]
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8d, dword [rsp + 0x44]
lea rdx, [rbp + 0x250]
mov rcx, r15
call fcn.140038590
inc esi
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b5c7
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b406
call fcn.140021130
mov rcx, rax
mov edx, 3
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b3d9
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Error:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
mov edx, edi
call fcn.14003c740
mov rcx, rax
call fcn.140017c90
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b5c7
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b4e0
call fcn.140021130
mov rcx, rax
mov edx, 3
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b462
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Error:
mov rcx, rax
call fcn.1400153f0
xor edx, edx
jmp 0x14003b4d0
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b4e0
call fcn.140021130
mov rcx, rax
mov edx, 3
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b4b3
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Error:
mov rcx, rax
call fcn.1400153f0
mov edx, edi
mov rcx, rax
call fcn.14003c740
mov rcx, rax
call fcn.140017c90
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b5c7
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b55a
call fcn.140021130
mov edx, 3
mov rcx, rax
call fcn.140021430
mov rbx, rax
call fcn.140021130
cmp qword [rbx + 0x18], 8
mov rdx, rbx
jb 0x14003b52d
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Error:
mov rcx, rax
call fcn.1400153f0
mov edx, edi
mov rcx, rax
call fcn.14003c740
mov rcx, rax
call fcn.140017c90
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b5c7
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b5c7
call fcn.140021130
mov rcx, rax
mov edx, 3
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b599
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Error:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
mov edx, edi
call fcn.14003c740
mov rcx, rax
call fcn.140017c90
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 8
jb 0x14003b60d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b608
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b722
call fcn.1400041d4
inc r14d
jmp 0x14003a311
cmp ebx, 0x103
je 0x14003b67c
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b67c
call fcn.140021130
mov rcx, rax
mov edx, 3
call fcn.140021430
mov rdi, rax
call fcn.140021130
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14003b64f
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Error:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
mov edx, ebx
call fcn.14003c740
mov rcx, rax
call fcn.140017c90
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003b6df
call fcn.140021130
cmp dword [rax + 8], 3
jl 0x14003b6df
call fcn.140021130
mov rcx, rax
mov edx, 3
call fcn.140021430
mov rbx, rax
call fcn.140021130
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003b6bb
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140016d70
lea rdx, str.Error:
mov rcx, rax
call fcn.1400153f0
mov rcx, rax
call fcn.140017c90
nop
lea rcx, [rbp + 0x1f0]
call fcn.140017d20
mov al, 1
mov rcx, qword [rbp + 0x560]
xor rcx, rsp
call fcn.140220e50
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14022a144
nop
lea rcx, [0x14032a0a4]
call fcn.140221194
cmp dword [0x14032a0a4], 0xffffffff
jne 0x14003a75e
xorps xmm0, xmm0
movups xmmword [0x14031b5e0], xmm0
mov qword [0x14031b5f0], r12
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x14031b5e0], r12w
lea rcx, [0x14026f080]
call fcn.1402210a8
lea rcx, [0x14032a0a4]
call fcn.140221128
jmp 0x14003a75e
lea rcx, [0x14032a0a4]
call fcn.140221194
cmp dword [0x14032a0a4], 0xffffffff
jne 0x14003ae1b
xorps xmm0, xmm0
movups xmmword [0x14031b5e0], xmm0
mov qword [0x14031b5f0], r12
mov qword [reloc.OLEAUT32.dll_VariantInit], 7
mov word [0x14031b5e0], r12w
lea rcx, [0x14026f080]
call fcn.1402210a8
lea rcx, [0x14032a0a4]
call fcn.140221128
jmp 0x14003ae1b
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
call fcn.14022a144
int3