Function at 0x401000
Capabilities:
Check os version
Query or enumerate registry key
Query or enumerate registry value
Set console window title
Terminate process
Write file on windows

Disassembly:
push 1
push 0x402106
call dword [sym.imp.kernel32.dll_SetConsoleCtrlHandler]
push str.VESA_Commander_1.6
call dword [sym.imp.kernel32.dll_SetConsoleTitleA]
mov dword [0x40ea82], 0
push 0xfffffffffffffff5
call dword [sym.imp.kernel32.dll_GetStdHandle]
cmp eax, 0xffffffff
je 0x401414
or eax, eax
je 0x401414
mov dword [0x40b4a7], eax
push 0x40ea86
push dword [0x40b4a7]
call dword [sym.imp.kernel32.dll_GetConsoleScreenBufferInfo]
mov dword [0x40ea9c], 0x94
push 0x40ea9c
call dword [sym.imp.kernel32.dll_GetVersionExA]
cmp dword [0x40eaa0], 6
jae 0x4010bd
push 0xc
push dword [0x40b4a7]
call dword [sym.imp.kernel32.dll_SetConsoleTextAttribute]
push str.Requires_Windows_Vista_or_higher_r_n
call dword [sym.imp.kernel32.dll_lstrlenA]
push eax
push str.Requires_Windows_Vista_or_higher_r_n
push dword [0x40b4a7]
call dword [sym.imp.kernel32.dll__lwrite]
movzx eax, word [0x40ea8e]
push eax
push dword [0x40b4a7]
call dword [sym.imp.kernel32.dll_SetConsoleTextAttribute]
mov dword [0x40ea82], 0
jmp 0x401414
push 0x40ed2c
push 0x4036c3
call fcn.00402481
push 0x42c1ec
push 0x409ee5
call fcn.00402481
push 0x42d18c
push 0x40a617
call fcn.00402481
push 0
push 0x40eb30
call fcn.004021bd
cmp dword [0x40eb30], 1
ja 0x401128
push str.VESA_Commander_1.6.0.0__07.12.2024__r_nCreated_by_ManHunter___PCL_r_nwww.manhunter.ru_r_n_r_nSimple_tool_for_testing_MCCS_VCP_codes._r_n_r_nUsage:_r_n__vesacom__command___monitor___code___value__r_n_r_nCommand:_r_n__list___display_installed_monitors_r_n__set___sets_the_current_value_of_the_VCP_code_r_n__setw___sets_the_current_value_of_the_VCP_code_and_wait_for_result_r_n__wset___waits_for_ready_and_sets_the_current_value_of_the_VCP_code_r_n__fset___force_sets_the_current_value_of_the_VCP_code__NOT_recommended___r_n__get___requests_the_current_and_maximal_value_of_the_specified_VCP_code_r_n__wget___waits_for_ready_and_requests_the_specified_VCP_code_r_n__all___display_all_available_VCP_codes_r_n__cap___display_monitors_data_and_capabilities_string_r_n
call dword [sym.imp.kernel32.dll_lstrlenA]
push 0
push 0x40b4a3
push eax
push str.VESA_Commander_1.6.0.0__07.12.2024__r_nCreated_by_ManHunter___PCL_r_nwww.manhunter.ru_r_n_r_nSimple_tool_for_testing_MCCS_VCP_codes._r_n_r_nUsage:_r_n__vesacom__command___monitor___code___value__r_n_r_nCommand:_r_n__list___display_installed_monitors_r_n__set___sets_the_current_value_of_the_VCP_code_r_n__setw___sets_the_current_value_of_the_VCP_code_and_wait_for_result_r_n__wset___waits_for_ready_and_sets_the_current_value_of_the_VCP_code_r_n__fset___force_sets_the_current_value_of_the_VCP_code__NOT_recommended___r_n__get___requests_the_current_and_maximal_value_of_the_specified_VCP_code_r_n__wget___waits_for_ready_and_requests_the_specified_VCP_code_r_n__all___display_all_available_VCP_codes_r_n__cap___display_monitors_data_and_capabilities_string_r_n
push dword [0x40b4a7]
call dword [sym.imp.kernel32.dll_WriteFile]
jmp 0x401414
mov dword [0x40b4ab], 0
push 0x100
push 0x40e976
call dword [sym.imp.kernel32.dll_RtlZeroMemory]
mov esi, dword [0x40eb34]
lodsd eax, dword [esi]
lodsd eax, dword [esi]
cmp dword [eax], 0x7473696c
jne 0x401161
mov dword [0x40e965], 1
jmp 0x401403
cmp dword [eax], 0x746567
jne 0x4011b2
cmp dword [0x40eb30], 4
jb 0x4010ff
lodsd eax, dword [esi]
push eax
push eax
push 0x40e976
call dword [sym.imp.kernel32.dll_lstrcpyA]
pop eax
push eax
call fcn.00402188
mov dword [0x40e96d], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
mov dword [0x40e969], eax
cmp eax, 0xff
ja 0x4010ff
mov dword [0x40e965], 2
jmp 0x401403
cmp dword [eax], 0x74656777
jne 0x401207
cmp dword [0x40eb30], 4
jb 0x4010ff
lodsd eax, dword [esi]
push eax
push eax
push 0x40e976
call dword [sym.imp.kernel32.dll_lstrcpyA]
pop eax
push eax
call fcn.00402188
mov dword [0x40e96d], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
mov dword [0x40e969], eax
cmp eax, 0xff
ja 0x4010ff
mov dword [0x40e965], 8
jmp 0x401403
cmp dword [eax], 0x6c6c61
jne 0x401245
cmp dword [0x40eb30], 3
jb 0x4010ff
lodsd eax, dword [esi]
push eax
push eax
push 0x40e976
call dword [sym.imp.kernel32.dll_lstrcpyA]
pop eax
push eax
call fcn.00402188
mov dword [0x40e96d], eax
mov dword [0x40e965], 4
jmp 0x401403
cmp dword [eax], 0x706163
jne 0x401283
cmp dword [0x40eb30], 3
jb 0x4010ff
lodsd eax, dword [esi]
push eax
push eax
push 0x40e976
call dword [sym.imp.kernel32.dll_lstrcpyA]
pop eax
push eax
call fcn.00402188
mov dword [0x40e96d], eax
mov dword [0x40e965], 5
jmp 0x401403
cmp dword [eax], 0x77746573
jne 0x4012e4
cmp dword [0x40eb30], 5
jb 0x4010ff
lodsd eax, dword [esi]
push eax
push eax
push 0x40e976
call dword [sym.imp.kernel32.dll_lstrcpyA]
pop eax
push eax
call fcn.00402188
mov dword [0x40e96d], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
cmp eax, 0xff
ja 0x4010ff
mov dword [0x40e969], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
mov dword [0x40e971], eax
mov dword [0x40e965], 6
jmp 0x401403
cmp dword [eax], 0x74657377
jne 0x401345
cmp dword [0x40eb30], 5
jb 0x4010ff
lodsd eax, dword [esi]
push eax
push eax
push 0x40e976
call dword [sym.imp.kernel32.dll_lstrcpyA]
pop eax
push eax
call fcn.00402188
mov dword [0x40e96d], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
cmp eax, 0xff
ja 0x4010ff
mov dword [0x40e969], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
mov dword [0x40e971], eax
mov dword [0x40e965], 7
jmp 0x401403
cmp dword [eax], 0x74657366
jne 0x4013a3
cmp dword [0x40eb30], 5
jb 0x4010ff
lodsd eax, dword [esi]
push eax
push eax
push 0x40e976
call dword [sym.imp.kernel32.dll_lstrcpyA]
pop eax
push eax
call fcn.00402188
mov dword [0x40e96d], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
cmp eax, 0xff
ja 0x4010ff
mov dword [0x40e969], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
mov dword [0x40e971], eax
mov dword [0x40e965], 9
jmp 0x401403
cmp dword [eax], 0x746573
jne 0x4010ff
cmp dword [0x40eb30], 5
jb 0x4010ff
lodsd eax, dword [esi]
push eax
push eax
push 0x40e976
call dword [sym.imp.kernel32.dll_lstrcpyA]
pop eax
push eax
call fcn.00402188
mov dword [0x40e96d], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
cmp eax, 0xff
ja 0x4010ff
mov dword [0x40e969], eax
lodsd eax, dword [esi]
push eax
call fcn.0040214c
mov dword [0x40e971], eax
mov dword [0x40e965], 3
push 0
push 0x401420
push 0
push 0
call dword [sym.imp.user32.dll_EnumDisplayMonitors]
push dword [0x40ea82]
call dword [sym.imp.kernel32.dll_ExitProcess]