Function at 0x140091be0
Capabilities:
Create thread
Get session user name

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x720]
sub rsp, 0x820
mov qword [rbp + 0x40], 0xfffffffffffffffe
mov rbx, rcx
lea rcx, str.User32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 0x16a8], rax
mov rcx, rbx
call fcn.14009f790
mov dword [rbp + 0x760], 1
xor edx, edx
lea rcx, [rbp + 0x78]
call fcn.1400ddab0
nop
xor r15d, r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x78]
call fcn.1400ddc20
test eax, eax
je 0x140091c88
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x760]
lea r8, [rbp + 0x760]
lea rdx, str.UseSetProcessDPIAware
lea rcx, [rbp + 0x80]
call fcn.1400f5bd0
lea rcx, [rbp + 0x80]
call fcn.1400f5530
cmp dword [rbp + 0x760], 1
jne 0x140091cb9
cmp qword [rbx + 0x16a8], r15
je 0x140091cb9
mov ecx, 1
call fcn.1400a4400
test eax, eax
jne 0x140091cb9
call fcn.1400a43b0
mov dword [rbp - 0x60], 8
mov dword [rbp - 0x5c], 0xff
lea rcx, [rbp - 0x60]
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov rcx, rbx
call fcn.140096400
mov rcx, rbx
call fcn.140092ae0
mov dword [rsp + 0x20], r15d
mov r9d, 1
lea r8, str.SoftwareSynapticsSynTPEnhZoneConfig
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0xa8]
call fcn.1400ddb20
nop
mov dword [rbp + 0x770], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rsp + 0x30]
lea rdx, str.IsUsingZoneFlags
lea rcx, [rbp + 0xb0]
call fcn.1400f5bd0
cmp dword [rsp + 0x30], 0
jne 0x140091d5b
mov rcx, rbx
call fcn.14009e870
xor r9d, r9d
lea r8d, [r9 + 1]
lea rdx, str.IsUsingZoneFlags
lea rcx, [rbp + 0xb0]
call fcn.1400f6080
lea rcx, [rbp + 0xb0]
call fcn.1400f5530
lea r9, [0x140140710]
lea r8, [0x140150e78]
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.1400f2890
mov rdi, rax
mov qword [rbp + 0x770], rax
lea rcx, [0x14028ff30]
cmp rcx, rax
je 0x140091da6
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
call fcn.14000b870
nop
cmp qword [rdi + 0x18], 8
jb 0x140091db5
mov rcx, qword [rdi]
call fcn.1400fa318
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], r15
mov word [rdi], r15w
call fcn.1400c40a0
lea r12, vtable.CSynList_class_CRegistryKey_.0
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [rsp + 0x6c], 1
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x68], r15d
lea rax, vtable.CMultiLevelRegistryKey.0
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x50]
call fcn.1400de1c0
test eax, eax
je 0x140092a18
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 1
mov r9d, 1
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000001
lea rcx, [rsp + 0x50]
call fcn.1400de1c0
test eax, eax
je 0x140092a18
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x50]
call fcn.1400ddb20
nop
mov dword [rbp + 0x770], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rsp + 0x30]
lea rdx, str.ApplyPTPEnableDisable
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
mov eax, r15d
cmp dword [rsp + 0x30], eax
setne al
mov dword [rbx + 0x1790], eax
mov dword [rbp + 0x770], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rsp + 0x30]
lea rdx, str.IgnoreFirstTPOnOffOSDAfterSessionChange
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
mov eax, r15d
cmp dword [rsp + 0x30], eax
setne al
mov dword [rbx + 0x99c], eax
lea r8, [rbx + 0x9a0]
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, str.ChangeCursorIconDuringTPONOFF
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
cmp dword [rbx + 0x99c], 0
je 0x140091f26
mov dword [rbx + 0x179c], r15d
lea r8, [rbx + 0x7cc]
mov qword [rsp + 0x20], r15
mov r9, r8
lea rdx, str.SwapLeftRightEdgePullZoneIfLanguageIsRTL
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
mov dword [rbp + 0x770], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rsp + 0x30]
lea rdx, str.AutoRotationFlag
lea rcx, [rsp + 0x50]
call fcn.1400de530
mov eax, dword [rsp + 0x30]
mov dword [rbx + 0x974], eax
mov dword [rsp + 0x44], 0x80
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x44]
lea r8, [rbx + 0x20]
lea rdx, str.WM_TOUCHPADON_OEMOSD_String
lea rcx, [rsp + 0x50]
call fcn.1400de630
mov dword [rsp + 0x4c], 0x80
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x4c]
lea r8, [rbx + 0xa0]
lea rdx, str.WM_TOUCHPADOFF_OEMOSD_String
lea rcx, [rsp + 0x50]
call fcn.1400de630
mov dword [rsp + 0x40], 0x80
lea r8, [rbx + 0x120]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x40]
lea rdx, str.OEM_OSD_ProgramWindow
lea rcx, [rsp + 0x50]
call fcn.1400de630
mov dword [rsp + 0x48], 0x80
lea r8, [rbx + 0x1a0]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x48]
lea rdx, str.OEM_OSD_ProgramFilePath
lea rcx, [rsp + 0x50]
call fcn.1400de630
mov dword [rsp + 0x3c], 0x80
lea r8, [rbx + 0x3a8]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x3c]
lea rdx, str.OEM_OSD_RegKeyPath
lea rcx, [rsp + 0x50]
call fcn.1400de630
mov dword [rsp + 0x34], 0x80
lea r8, [rbx + 0x5b0]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x34]
lea rdx, str.OEM_OSD_RegValueName
lea rcx, [rsp + 0x50]
call fcn.1400de630
mov qword [rsp + 0x20], r15
lea r9, [rbx + 0x7b8]
lea r8, [rbx + 0x7b8]
lea rdx, str.OEM_OSD_Program_NotRunInInit
lea rcx, [rsp + 0x50]
call fcn.1400de530
cmp dword [rbx + 0x7b8], 0
je 0x1400920c3
mov dword [rbx + 0x17a0], r15d
lea r8, [rbx + 0x7bc]
mov qword [rsp + 0x20], r15
mov r9, r8
lea rdx, str.SendMsgOffOnToOEMOSD_Feature
lea rcx, [rsp + 0x50]
call fcn.1400de530
lea rcx, [rbx + 0x20]
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [rbx + 0x7c0], eax
lea rcx, [rbx + 0xa0]
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [rbx + 0x7c4], eax
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.1400ddab0
nop
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPInstall
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x10]
call fcn.1400ddc20
test eax, eax
je 0x140092193
mov dword [rbp + 0x770], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rsp + 0x30]
lea rdx, str.SynHidMini
lea rcx, [rbp + 0x18]
call fcn.1400f5bd0
cmp dword [rsp + 0x30], 0
je 0x140092193
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynHidMiniPortInstall
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x10]
call fcn.1400ddc20
mov dword [rbx + 0x1794], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPCpl
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x10]
call fcn.1400ddc20
test eax, eax
je 0x1400921da
lea r8, [rbx + 0x1640]
mov qword [rsp + 0x20], r15
mov r9, r8
lea rdx, str.UIStyle
lea rcx, [rbp + 0x18]
call fcn.1400f5bd0
mov dword [rbp + 0x768], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x768]
lea r8, [rbp + 0x768]
lea rdx, str.ScrollMethod
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
mov eax, dword [rbp + 0x768]
mov dword [rbx + 0x164c], eax
lea r8, [rbx + 0x1650]
mov qword [rsp + 0x20], r15
mov r9, r8
lea rdx, str.SynapticsVScrollMethodSpeedFactor
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
lea r8, [rbx + 0x1654]
mov qword [rsp + 0x20], r15
mov r9, r8
lea rdx, str.SynapticsHScrollMethodSpeedFactor
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
lea r8, [rbx + 0x9a4]
mov qword [rsp + 0x20], r15
mov r9, r8
lea rdx, str.AdjustPointingSpeedBaseOnDesktopRes
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
xor ecx, ecx
call fcn.1400f1590
cmp eax, 9
jl 0x14009231f
lea rcx, str.DwmApi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 0x16b0], rax
test rax, rax
jne 0x1400922a0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
jmp 0x1400922cc
lea rdx, str.DwmIsCompositionEnabled
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x10], rax
lea rdx, str.DwmGetWindowAttribute
mov rcx, qword [rbx + 0x16b0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x18], rax
lea rdx, [rbx + 0xa00]
mov rcx, qword [rbx + 0x9f8]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [rbp + 0x770], r15d
lea rax, [rbp + 0x770]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x14009e310]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rbx + 0xa04]
mov ecx, dword [rbx + 0xa00]
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
lea r8, [rbx + 0x176c]
mov qword [rsp + 0x20], r15
mov r9, r8
lea rdx, str.SynTPEnhExePriorityLevel
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
xor edx, edx
lea rcx, [rbp + 0x48]
call fcn.1400ddab0
nop
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnhShortcutConfig
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x48]
call fcn.1400ddc20
test eax, eax
je 0x1400923af
mov eax, dword [rbx + 0x1798]
mov dword [rbp + 0x770], eax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rsp + 0x30]
lea rdx, str.ShowForcePadDesktopShortcut
lea rcx, [rbp + 0x50]
call fcn.1400f5bd0
mov eax, r15d
cmp dword [rsp + 0x30], eax
setne al
mov dword [rbx + 0x1798], eax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsOEM
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x48]
call fcn.1400ddc20
test eax, eax
je 0x140092414
mov eax, dword [rbx + 0x1798]
mov dword [rbp + 0x770], eax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rsp + 0x30]
lea rdx, str.ShowForcePadDesktopShortcut
lea rcx, [rbp + 0x50]
call fcn.1400f5bd0
mov eax, r15d
cmp dword [rsp + 0x30], eax
setne al
mov dword [rbx + 0x1798], eax
mov edx, 2
mov rcx, rbx
call fcn.14009eb00
lea rax, str.Debug
mov qword [rsp + 0x20], rax
lea r9, [0x14029031c]
lea r8, [0x14029031c]
lea rdx, str.Mask
lea rcx, [rsp + 0x50]
call fcn.1400de530
mov rcx, rbx
call fcn.1400a0020
xor ecx, ecx
call fcn.1400f1590
cmp eax, 0xa
je 0x14009246c
xor ecx, ecx
call fcn.1400f1590
cmp eax, 9
jne 0x140092473
xor ecx, ecx
call fcn.140102efc
mov rax, qword [rbx]
mov edx, 2
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x1678], rax
test rax, rax
je 0x1400929f6
lea rdi, [rbx + 0x810]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
test eax, eax
je 0x1400929f6
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x50]
test eax, eax
je 0x1400929f6
mov dword [rbp + 0x770], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rsp + 0x30]
lea rdx, str.DisplayRotationAngleFromSensorInfo
lea rcx, [rbp - 0x48]
call fcn.1400f5bd0
mov eax, dword [rsp + 0x30]
mov dword [rbx + 0x96c], eax
mov rcx, rbx
call fcn.140096b70
mov rcx, rbx
call fcn.140096fc0
mov rax, qword [rdi]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rdi
call qword [rax + 0x48]
mov rax, qword [rdi]
xor r9d, r9d
mov r8, qword [rbx + 0x9f8]
lea rdx, str.SynTP
mov rcx, rdi
call qword [rax + 0x20]
test eax, eax
je 0x1400929f6
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x110]
lea rcx, [rbx + 0x1838]
call fcn.140032f20
test eax, eax
je 0x1400929f6
mov rcx, rbx
call fcn.1400a0250
lea rcx, [rbx + 0xc40]
call fcn.14000c150
test eax, eax
je 0x1400929f6
mov rax, qword [rbx]
mov edx, 3
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x1680], rax
test rax, rax
je 0x1400929f6
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x1698], rax
test rax, rax
je 0x1400929f6
mov rax, qword [rbx]
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x16b8], rax
test rax, rax
je 0x1400929f6
mov rax, qword [rbx]
mov edx, 0xd
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x16a0], rax
test rax, rax
je 0x1400929f6
xor ecx, ecx
call fcn.1400f1590
cmp eax, 8
jne 0x140092655
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x20]
call fcn.1400ddb20
nop
mov dword [rbp + 0x770], 1
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x770]
lea r8, [rbp + 0x770]
lea rdx, str.XP64VideoOn
lea rcx, [rbp - 0x18]
call fcn.1400f5bd0
mov eax, r15d
cmp dword [rbp + 0x770], eax
setne al
mov dword [rbx + 0x1780], eax
lea rcx, [rbp - 0x20]
call fcn.1400ddbc0
call fcn.1400f02e0
mov rdx, rax
mov rcx, qword [rbx + 0x1698]
call fcn.140014d30
mov rdx, qword [rbx + 0x1680]
mov rcx, qword [rbx + 0x1678]
call fcn.14004c5f0
test eax, eax
je 0x1400929f6
mov eax, dword [rbx + 0x1640]
sub eax, 0x237c
cmp eax, 1
ja 0x1400926a4
mov rcx, rbx
call fcn.14009a910
test eax, eax
je 0x1400929f6
lea rax, [rbp - 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x14009de30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [rbx + 0x1838]
call fcn.140034de0
mov edx, 1
mov rcx, rbx
call fcn.14009b080
cmp dword [rbx + 0x7f0], 0
je 0x140092710
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [rbx + 0x1838]
call fcn.140035770
test rax, rax
je 0x140092710
test byte [rbx + 0x9c0], 1
je 0x140092710
mov rcx, rbx
call fcn.14009bc20
lea rcx, [0x140296e88]
call fcn.1400a2620
test rax, rax
je 0x140092750
test byte [rbx + 0x9c4], 1
je 0x140092750
lea rcx, [0x140296e88]
call fcn.1400a2620
mov rcx, rax
call fcn.1400a2480
mov dword [rbx + 0x7e0], eax
test eax, eax
je 0x140092750
mov rcx, rbx
call fcn.14009bcc0
mov rcx, rbx
call fcn.14009fb30
test eax, eax
jne 0x140092779
lea r9, [0x14009f830]
mov edx, 0xfffe
lea r8d, [rax + 0x64]
mov rcx, qword [0x140296048]
call qword [sym.imp.USER32.dll_SetTimer]
lea rdi, [rbx + 0x16f8]
mov dword [rdi], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x10]
call fcn.1400ddc20
test eax, eax
je 0x140092815
mov qword [rsp + 0x20], r15
mov r9, rdi
mov r8, rdi
lea rdx, str.MonitorScreenSaver
lea rcx, [rbp + 0x18]
call fcn.1400f5bd0
test eax, eax
je 0x140092815
cmp dword [rdi], 0
je 0x140092815
xor edx, edx
lea rcx, str.SynTPEnhWndClass
call qword [sym.imp.USER32.dll_FindWindowW]
mov r14, rax
lea rdi, [rbx + 0x1700]
mov rcx, rdi
call fcn.1400910a0
mov rcx, rdi
call fcn.140091120
call fcn.1400f2f50
test eax, eax
je 0x140092815
xor r9d, r9d
mov r8, r14
xor edx, edx
lea rcx, str.SynSSHookRun.exe
call fcn.1400f4880
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0xd8]
call fcn.1400ddb20
nop
mov eax, dword [rbx + 0x1658]
mov dword [rbp + 0x778], eax
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rbp + 0x778]
lea rdx, str.EnableLUA
lea rcx, [rbp + 0xe0]
call fcn.1400f5bd0
test eax, eax
je 0x140092876
mov eax, dword [rbp + 0x778]
mov dword [rbx + 0x1658], eax
mov dword [rsp + 0x38], 0x101
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea r9, [rbp + 0x110]
lea r8, str..pipe_s00781D6E_0417_44d2_8082_9257B2CA9E0A
mov edx, 0x200
lea rcx, [rbp + 0x320]
call fcn.1400fc120
lea r9, [0x140140710]
lea r8, [0x140150e78]
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.1400f2890
cmp qword [rax + 0x10], 0
setne dil
cmp qword [rbp - 8], 8
jb 0x1400928e1
mov rcx, qword [rbp - 0x20]
call fcn.1400fa318
test dil, dil
je 0x14009293d
lea r9, [0x140140710]
lea r8, [0x140150e78]
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.1400f2890
cmp qword [rax + 0x18], 8
jb 0x140092909
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x320]
lea r8, str._s_s
mov edx, 0x200
lea rcx, [rbp + 0x320]
call fcn.1400fc120
cmp qword [rbp - 8], 8
jb 0x14009293d
mov rcx, qword [rbp - 0x20]
call fcn.1400fa318
mov edx, 0x3d
lea rcx, [rbp + 0x320]
call fcn.1400029c0
mov qword [rbx + 0x1788], rax
test rax, rax
je 0x140092966
lea rdx, [rbx + 8]
mov rcx, rax
call fcn.140002770
lea rdx, [0x14013f6e0]
lea rcx, [rbx + 0x9f0]
call fcn.1400b8e70
test eax, eax
js 0x14009298e
mov rcx, qword [rbx + 0x9f0]
test rcx, rcx
je 0x14009298e
call fcn.1400b9210
call fcn.1400638b0
cmp dword [rax + 4], 0
je 0x1400929a6
call fcn.1400638b0
mov rcx, rax
call fcn.14008dd30
lea rcx, [rbx + 0x1838]
call fcn.140033750
xor ecx, ecx
call fcn.1400f1590
cmp eax, 0xb
je 0x1400929ca
xor ecx, ecx
call fcn.1400f1590
cmp eax, 0xc
jne 0x1400929d6
lea rcx, [rbx + 0x1838]
call fcn.140034f80
mov edx, 1
mov rcx, rbx
call fcn.14009d8a0
mov esi, 1
lea rcx, [rbp + 0xd8]
call fcn.1400ddbc0
jmp 0x1400929f9
mov esi, r15d
lea rcx, [rbp + 0x48]
call fcn.1400ddbc0
nop
lea rcx, [rbp + 0x10]
call fcn.1400ddbc0
nop
lea rcx, [rbp - 0x50]
call fcn.1400ddbc0
jmp 0x140092a1b
mov esi, r15d
mov qword [rsp + 0x50], r12
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x140092a99
nop word [rax + rax]
test rbx, rbx
je 0x140092a99
mov rcx, qword [rbx + 0x10]
mov rax, qword [rbx + 8]
test rcx, rcx
je 0x140092a48
mov qword [rcx + 8], rax
jmp 0x140092a4d
mov qword [rsp + 0x58], rax
mov rcx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
test rcx, rcx
je 0x140092a60
mov qword [rcx + 0x10], rax
jmp 0x140092a65
mov qword [rsp + 0x60], rax
mov rdi, qword [rbx + 8]
cmp dword [rsp + 0x6c], 0
je 0x140092a85
mov rcx, qword [rbx]
test rcx, rcx
je 0x140092a85
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [rbx], r15
mov rcx, rbx
call fcn.1400fa318
mov rbx, rdi
dec dword [rsp + 0x68]
test rdi, rdi
jne 0x140092a30
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
lea rcx, [rbp + 0xa8]
call fcn.1400ddbc0
nop
lea rcx, [rbp + 0x78]
call fcn.1400ddbc0
mov eax, esi
add rsp, 0x820
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret