Function at 0x14007feb0
Capabilities:
Delete registry key

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov qword [rbp + 0x50], 0xfffffffffffffffe
mov r15, rcx
xor ebx, ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPInstall
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x58]
call fcn.1400c9490
nop
mov dword [rbp + 0x138], ebx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x138]
lea r8, [rbp + 0x130]
lea rdx, str.DeleteUserSettingsOnUpgrade
lea rcx, [rbp + 0x60]
call fcn.1400dfc90
cmp dword [rbp + 0x130], ebx
je 0x140080347
mov word [rsp + 0x78], bx
xor eax, eax
mov qword [rsp + 0x7a], rax
mov qword [rbp - 0x7e], rax
mov qword [rbp - 0x76], rax
mov qword [rbp - 0x6e], rax
mov qword [rbp - 0x66], rax
mov qword [rbp - 0x5e], rax
mov dword [rbp + 0x128], 0x32
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x128]
lea r8, [rsp + 0x78]
lea rdx, str.DriverVersion
lea rcx, [rbp + 0x60]
call fcn.1400dfda0
mov word [rbp - 0x20], bx
xor eax, eax
mov qword [rbp - 0x1e], rax
mov qword [rbp - 0x16], rax
mov qword [rbp - 0xe], rax
mov qword [rbp - 6], rax
mov qword [rbp + 2], rax
mov qword [rbp + 0xa], rax
mov dword [rbp + 0x128], 0x32
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPInstall
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0xb8]
call fcn.1400c9490
nop
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x128]
lea r8, [rbp - 0x20]
lea rdx, str.DriverVersion
lea rcx, [rbp + 0xc0]
call fcn.1400dfda0
call fcn.140004e00
mov rcx, rax
mov eax, ebx
test rcx, rcx
setne al
test eax, eax
jne 0x140080008
mov ecx, 0x80004005
call fcn.140004c30
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, [0x1401226e8]
test rdx, 0xffffffffffff0000
jne 0x14008004a
movzx edi, dx
xor edx, edx
mov ecx, edi
call fcn.14000bbc0
test rax, rax
je 0x140080058
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14000c050
jmp 0x140080058
xor r8d, r8d
lea rcx, [rsp + 0x30]
call fcn.14000c250
nop
lea rax, [rsp + 0x78]
lea r8, [rbp - 0x20]
sub r8, rax
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140080078
add rax, 2
test ecx, ecx
jne 0x140080064
or rdi, 0xffffffffffffffff
test edx, edx
jne 0x14008018c
mov word [rsp + 0x40], bx
xor eax, eax
mov qword [rsp + 0x42], rax
mov qword [rsp + 0x4a], rax
mov qword [rsp + 0x52], rax
mov qword [rsp + 0x5a], rax
mov qword [rsp + 0x62], rax
mov qword [rsp + 0x6a], rax
mov word [rbp + 0x18], bx
mov qword [rbp + 0x1a], rax
mov qword [rbp + 0x22], rax
mov qword [rbp + 0x2a], rax
mov qword [rbp + 0x32], rax
mov qword [rbp + 0x3a], rax
mov qword [rbp + 0x42], rax
mov dword [rbp + 0x128], 0x32
mov dword [rsp + 0x38], 0x32
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x128]
lea r8, [rsp + 0x40]
lea rdx, str.InfRevision
lea rcx, [rbp + 0x60]
call fcn.1400dfda0
test eax, eax
jne 0x14008012f
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x38]
lea r8, [rbp + 0x18]
lea rdx, str.InfRevision
lea rcx, [rbp + 0xc0]
call fcn.1400dfda0
test eax, eax
je 0x14008031f
lea rcx, [rsp + 0x40]
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140080140
mov r8d, eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.14000c250
lea rax, [rsp + 0x40]
lea r8, [rbp + 0x18]
sub r8, rax
nop dword [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140080184
add rax, 2
test ecx, ecx
jne 0x140080170
test edx, edx
je 0x14008031f
test byte [rbp + 0x130], 0x20
je 0x1400801a2
mov edx, 1
mov rcx, r15
call fcn.14008b150
mov esi, 1
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.1400c9420
nop
test byte [rbp + 0x130], sil
je 0x1400802ab
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, str.SoftwareSynaptics
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x50]
call fcn.1400c9590
test eax, eax
je 0x1400802ab
lea rdx, str.SoftwareSynapticsTmp
mov rcx, 0xffffffff80000001
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea rdx, str.SoftwareSynapticsTmp
mov rcx, r15
call fcn.140080370
lea rcx, [rbp - 0x48]
call fcn.1400df9d0
xor edx, edx
lea rcx, [rbp + 0x88]
call fcn.1400c9420
nop
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, str.SoftwareSynapticsTmp
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0x88]
call fcn.1400c9590
test eax, eax
je 0x14008029f
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, esi
lea r8, str.SoftwareSynaptics
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x50]
call fcn.1400c9590
test eax, eax
je 0x140080292
xor r9d, r9d
mov r8, qword [rbp - 0x38]
xor edx, edx
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.SHLWAPI.dll_SHCopyKeyW]
mov esi, ebx
test eax, eax
sete sil
lea rcx, [rbp + 0x90]
call fcn.1400df9d0
nop
lea rcx, [rbp + 0x88]
call fcn.1400c9530
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, 1
lea r8, str.SoftwareSynapticsSynTPInstall
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x50]
call fcn.1400c9590
test eax, eax
je 0x140080313
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [rsp + 0x78]
lea rdx, str.DriverVersion
lea rcx, [rbp - 0x48]
call fcn.1400e01a0
mov r8, qword [rsp + 0x30]
cmp dword [r8 - 0x10], 0
je 0x140080313
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea rdx, str.InfRevision
lea rcx, [rbp - 0x48]
call fcn.1400e01a0
mov ebx, esi
lea rcx, [rbp - 0x50]
call fcn.1400c9530
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14008033a
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
lea rcx, [rbp + 0xb8]
call fcn.1400c9530
nop
lea rcx, [rbp + 0x58]
call fcn.1400c9530
mov eax, ebx
add rsp, 0x1f0
pop r15
pop rdi
pop rsi
pop rbx
pop rbp
ret