Function at 0x1400524c0
Capabilities:
Enumerate gui resources
Lock the desktop

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov r15, qword [0x1402de0d0]
xor edi, edi
movsxd r12, r8d
movsxd rbx, edx
mov r14, rcx
mov esi, edi
test r15, r15
je 0x140052538
cmp qword [r15], rsi
jne 0x14005251f
lea rdx, str.g:CheckpointsTPDrvheadgit1LibSynList.h
lea rcx, str.m_pItem
mov r8d, 0x60
call fcn.14000cb10
mov rcx, qword [r15]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test eax, eax
jne 0x140052555
mov r15, qword [r15 + 8]
test r15, r15
jne 0x140052501
xor eax, eax
mov rbx, qword [rsp + 0x2e0]
add rsp, 0x2a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r15, qword [r15]
test r15, r15
je 0x140052538
mov r13d, dword [rbp + 0x200]
mov r8d, 1
test r13d, r13d
je 0x140052924
test byte [0x1402d741c], 4
je 0x1400525e2
lea rax, [r15 + 0x8a8]
mov rcx, qword [rax]
test rcx, rcx
jne 0x140052591
mov dword [rsp + 0x50], edi
jmp 0x1400525b0
mov rax, qword [rcx]
lea r8, [rsp + 0x48]
mov edx, 0x10000302
call qword [rax + 0x18]
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x50], eax
lea rax, [r15 + 0x8a8]
mov rcx, rax
call fcn.14000ac20
mov r9d, dword [rsp + 0x50]
lea r8, str.Acquire_device:_pktID_d__IsBtn_d_n
movzx eax, al
lea rcx, str.CPluginAction::Event
mov edx, 3
mov dword [rsp + 0x20], eax
call fcn.14011a490
mov r8d, 1
mov ecx, dword [rbp + 0x1f8]
mov edx, edi
mov dword [rsp + 0x50], edx
cmp ecx, 0x1b
jne 0x14005260a
mov eax, dword [0x1402dded0]
add eax, 0xffffdc84
cmp eax, 1
ja 0x140052625
mov dword [rsp + 0x50], r8d
jmp 0x140052625
cmp ecx, 0x49
jne 0x140052625
mov eax, dword [0x1402dded0]
add eax, 0xffffdc84
cmp eax, 1
cmovbe edx, r8d
mov dword [rsp + 0x50], edx
lea rax, [r14 + 0xc8]
mov r9d, ecx
mov r8d, r12d
mov rcx, rax
mov edx, ebx
mov qword [rbp - 0x80], rax
call fcn.14005fdb0
mov qword [rsp + 0x40], rax
lea rcx, [rax + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x48], 1
cmp dword [rax + 0x18], esi
jne 0x1400526aa
test byte [0x1402d741c], 4
je 0x140052682
lea r8, str.m_iAcquireCount__0_Suppress
lea rcx, str.CPluginAction::CActionTracker::AcquireDevice
mov edx, 3
call fcn.14011a490
mov r8d, dword [rsp + 0x50]
xor r9d, r9d
mov rcx, r15
lea edx, [r9 + 1]
call fcn.14002d820
mov dword [r15 + 0xc44], 1
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x40]
inc dword [rax + 0x18]
lea rcx, [rax + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [rsp + 0x48], esi
jne 0x1400526d0
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rbp - 0x80]
call fcn.14005feb0
jmp 0x140052538
cmp dword [r14 + 0x90], esi
je 0x140052785
test byte [r15 + 0x864], 1
je 0x140052785
lea r9, str.Sound
mov r8d, r12d
mov edx, ebx
mov rcx, r14
mov dword [rsp + 0x20], edi
call fcn.1400549d0
lea rcx, [r14 + 0x68]
lea r9, str.Sound
mov r8d, r12d
mov edx, ebx
call fcn.14003d7a0
test eax, eax
je 0x140052733
cmp eax, dword [r14 + 0x6c]
jae 0x140052733
mov ecx, eax
mov rax, qword [r14 + 0x70]
shl rcx, 5
mov rax, qword [rcx + rax + 8]
jmp 0x140052736
mov rax, rdi
test byte [0x1402d741c], 4
mov qword [rsp + 0x48], rax
je 0x14005275f
lea r8, str._nSound_Config_String_is__s__n
lea rcx, str.CPluginAction::Event
mov r9, rax
mov edx, 3
call fcn.14011a590
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140052785
cmp word [rcx], si
je 0x140052785
cmp dword [rbp + 0x1f8], 0xb
je 0x140052785
xor edx, edx
mov r8d, 0x22001
call qword [sym.imp.WINMM.dll_PlaySoundW]
cmp dword [r15 + 0x7c8], esi
je 0x140052849
lea r9, str.LEDPattern
mov r8d, r12d
mov edx, ebx
mov rcx, r14
mov dword [rsp + 0x20], edi
call fcn.1400549d0
lea rcx, [r14 + 0x68]
lea r9, str.LEDPattern
mov r8d, r12d
mov edx, ebx
call fcn.14003d7a0
test eax, eax
je 0x140052849
cmp eax, dword [r14 + 0x6c]
jae 0x140052849
mov ecx, eax
mov rax, qword [r14 + 0x70]
shl rcx, 5
mov r9, qword [rcx + rax + 8]
mov qword [rsp + 0x48], r9
test r9, r9
je 0x140052849
cmp word [r9], si
je 0x140052849
mov ecx, dword [r15 + 0x7c8]
dec ecx
jne 0x140052849
lea r8, [rsp + 0x50]
lea rdx, [0x140178d68]
mov rcx, r9
mov dword [rsp + 0x50], edi
call fcn.140126508
mov edx, dword [rsp + 0x50]
test edx, edx
je 0x140052849
test byte [0x1402d741c], 4
je 0x140052841
mov r9, qword [rsp + 0x48]
lea r8, str.LEDPattern_String_is:__s__n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a590
mov edx, dword [rsp + 0x50]
mov rcx, r15
call fcn.14002f560
cmp dword [r14 + 0x90], esi
je 0x14005285c
test byte [r15 + 0x864], 1
jne 0x140052865
cmp dword [r15 + 0x7c8], esi
je 0x14005289a
movsxd rcx, dword [rbp + 0x1f8]
cmp ecx, 0x39
ja 0x1400528a0
movabs rdx, 0x200000010010020
bt rdx, rcx
jae 0x1400528a0
call fcn.140055f80
mov r8d, r12d
mov edx, ebx
mov rcx, r14
mov r9, rax
mov dword [rsp + 0x20], edi
call fcn.1400549d0
mov ecx, dword [rbp + 0x1f8]
cmp ecx, 0x62
ja case.0x1400528c5.4
lea rdx, [0x140000000]
movsxd rax, ecx
movzx eax, byte [rdx + rax + 0x53f68]
mov ecx, dword [rdx + rax*4 + 0x53f60]
add rcx, rdx
jmp rcx
test byte [0x1402d741c], 8
je 0x14005290c
lea rcx, [r15 + 0x8a8]
call fcn.14000ac20
lea rcx, [r15 + 0x8a8]
movzx edi, al
call fcn.14000b6b0
lea r8, str.Unacquire_device:_pktID_d__IsBtn_d_n
lea rcx, str.CPluginAction::Event
mov edx, 4
mov r9d, eax
mov dword [rsp + 0x20], edi
call fcn.14011a490
xor edi, edi
mov rcx, qword [rsp + 0x40]
mov r9d, 1
xor r8d, r8d
mov rdx, r15
call fcn.14005eef0
jmp case.0x1400528c5.4
mov r9d, dword [rbp + 0x1f8]
lea rax, [r14 + 0xc8]
mov r8d, r12d
mov rcx, rax
mov edx, ebx
mov qword [rbp - 0x80], rax
call fcn.140061e00
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140052538
mov dword [rsp + 0x50], edi
test r12b, 0x10
je 0x1400529a4
cmp qword [r15 + 0x788], rsi
je 0x1400529a4
mov rcx, qword [0x1402dd258]
call qword [sym.imp.USER32.dll_GetDC]
mov ecx, r12d
mov r8d, r13d
sar ecx, 0xc
mov rdx, rax
mov rbx, rax
movzx r9d, cl
mov rcx, r15
mov qword [rsp + 0x20], rdi
dec r9d
call fcn.140029d50
mov rcx, qword [0x1402dd258]
mov rdx, rbx
call qword [sym.imp.USER32.dll_ReleaseDC]
movsxd rbx, dword [rbp + 0x1f8]
cmp ebx, 0x62
ja case.0x1400529cd.4
lea rdx, [0x140000000]
movzx eax, byte [rdx + rbx + 0x540a8]
mov ecx, dword [rdx + rax*4 + 0x53fcc]
add rcx, rdx
jmp rcx
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005a7f0
mov esi, eax
jmp 0x140053f4c
mov r12d, 1
mov esi, r12d
jmp 0x140052d2d
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005a8f0
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov edx, dword [rbp + 0x1e8]
mov rcx, r14
call fcn.14005b8f0
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov edx, dword [rbp + 0x1e8]
mov rcx, r14
call fcn.14005b9c0
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov edx, ebx
mov rcx, r14
call fcn.14005add0
mov esi, eax
jmp 0x140053f4c
test r13d, r13d
je 0x140052b32
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne 0x140052b32
mov ebx, dword [rbp + 0x1e8]
lea r9d, [rax + 5]
mov r8d, r12d
mov rcx, r14
mov edx, ebx
mov dword [rsp + 0x20], edi
call fcn.14005c5a0
mov esi, eax
test eax, eax
jne 0x140052b37
cmp dword [r15 + 0x848], eax
je 0x140052b37
mov rcx, qword [0x1402dd258]
shl ebx, 0x10
mov r8, r12
movsxd r9, ebx
mov edx, 0x9002
or r9, 5
call qword [sym.imp.USER32.dll_PostMessageW]
test r13d, r13d
mov eax, edi
sete al
jmp 0x140053176
mov esi, 1
test r13d, r13d
mov eax, edi
sete al
jmp 0x140053176
test r13d, r13d
je case.0x1400529cd.11
test byte [0x1402d741c], 4
mov rbx, qword [r15 + 0xce0]
je 0x140052b85
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400d26a0
lea r8, str.epaToggleExtZone:_will_update_CBDualModeZone__UserCfg_x__n
lea rcx, str.CPluginAction::Event
mov r9d, eax
mov edx, 3
call fcn.14011a490
mov rdx, rbx
mov rcx, r15
call fcn.14002b760
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400d2300
test al, al
jns case.0x1400529cd.11
test byte [0x1402d741c], 4
mov rbx, qword [r15 + 0xc50]
je 0x140052bd9
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1400d26a0
lea r8, str.epaToggleExtZone:_will_update_CBSliderZone__UserCfg_x__n
lea rcx, str.CPluginAction::Event
mov r9d, eax
mov edx, 3
call fcn.14011a490
mov rdx, rbx
mov rcx, r15
call fcn.14002b760
mov r12d, 1
mov esi, r12d
jmp 0x140053f52
mov r12d, 1
test r13d, r13d
je 0x1400529ff
mov edx, r12d
mov rcx, r15
call fcn.14002e590
mov esi, eax
jmp 0x140053f52
mov edx, r13d
mov rcx, r15
call fcn.14002e590
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
mov edx, dword [rbp + 0x1e8]
lea r8d, [rax + 4]
mov r9d, r13d
mov rcx, r14
call fcn.14005b470
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
mov edx, dword [rbp + 0x1e8]
lea r8d, [rax + 8]
mov r9d, r13d
mov rcx, r14
call fcn.14005b470
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
mov r12d, 1
test eax, eax
jne 0x140052bea
mov edx, dword [rbp + 0x1e8]
mov r9d, r13d
mov r8d, r12d
mov rcx, r14
call fcn.14005b470
mov esi, eax
jmp 0x140053f52
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
mov edx, dword [rbp + 0x1e8]
lea r8d, [rax + 2]
mov r9d, r13d
mov rcx, r14
call fcn.14005b470
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x140052d17
mov r12d, 1
mov esi, r12d
jmp 0x140053f52
mov edx, dword [rbp + 0x1e8]
mov rcx, r14
call fcn.14005d090
mov esi, eax
mov r12d, 1
mov r13, qword [rsp + 0x40]
mov ebx, dword [r15 + 0xc4c]
test ebx, ebx
je 0x140052d57
lea rcx, [r15 + 0x8a8]
call fcn.14000b670
cmp eax, ebx
mov eax, 0
setge al
test eax, eax
jne 0x140052dab
test byte [0x1402d741c], 8
je 0x140052d9a
lea rcx, [r15 + 0x8a8]
call fcn.14000ac20
lea rcx, [r15 + 0x8a8]
movzx edi, al
call fcn.14000b6b0
lea r8, str.Unacquire_device:_pktID_d__IsBtn_d_Release_n
lea rcx, str.CPluginAction::Event
mov edx, 4
mov r9d, eax
mov dword [rsp + 0x20], edi
call fcn.14011a490
mov r9d, r12d
xor r8d, r8d
mov rdx, r15
mov rcx, r13
call fcn.14005eef0
mov rcx, qword [rbp - 0x80]
mov rdx, r13
call fcn.14005feb0
mov eax, esi
jmp 0x14005253a
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005c940
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005c9b0
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne 0x140052b32
test r13d, r13d
je 0x140052b32
mov edx, dword [rbp + 0x1e8]
lea r9d, [rax + 0x10]
mov r8d, r12d
mov rcx, r14
mov dword [rsp + 0x20], edi
call fcn.14005c5a0
test r13d, r13d
mov esi, eax
mov eax, edi
sete al
jmp 0x140053176
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005df70
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005dfe0
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005bc20
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005bd50
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005bec0
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005bff0
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov rcx, r14
call fcn.14005c0c0
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
mov edx, dword [rbp + 0x1e8]
mov r8d, r13d
mov rcx, r14
call fcn.14005e170
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
mov edx, dword [rbp + 0x1e8]
mov r8d, r13d
mov rcx, r14
call fcn.14005e910
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x1400529f9
mov edx, dword [rbp + 0x1e8]
mov r9d, 1
mov r8d, r12d
mov rcx, r14
call fcn.14005ea80
mov esi, eax
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
call fcn.140114a30
lea rdx, [rbp - 0x70]
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, str.Photos_PhotoCanvas
lea rcx, [rbp - 0x70]
mov r8d, 0x12
call fcn.1401228e4
test eax, eax
jne 0x140053015
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a440
test eax, eax
je 0x140053015
mov rcx, r14
test r13d, r13d
je 0x1400530c8
mov edx, 1
call fcn.14005edb0
mov edx, dword [rbp + 0x1e8]
mov r9d, 1
mov r8d, r12d
mov rcx, r14
call fcn.14005ea80
jmp 0x140053f4c
xor edx, edx
call fcn.14005edb0
mov eax, 1
jmp 0x14005253a
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
mov edx, dword [rbp + 0x1e8]
mov r9d, r12d
mov r8d, ebx
mov rcx, r14
mov dword [rsp + 0x20], r13d
call fcn.14005d160
mov esi, eax
jmp 0x140053f4c
mov edx, edi
test r13d, r13d
sete dl
mov dword [rsp + 0x50], edx
test r13d, r13d
je 0x14005314a
mov edx, 0x10
mov rcx, r15
call fcn.1400326e0
mov dword [rsp + 0x30], r12d
xor r9d, r9d
mov dword [rsp + 0x28], eax
mov r8d, ebx
xor edx, edx
mov rcx, r15
mov dword [rsp + 0x20], edi
call fcn.1400327c0
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne 0x140053172
mov edx, dword [rbp + 0x1e8]
mov r9d, r13d
mov r8d, r12d
mov rcx, r14
call fcn.14005d300
mov esi, eax
mov eax, dword [rsp + 0x50]
test eax, eax
je 0x140053f4c
lea rcx, [r15 + 0x50]
call fcn.14000ae00
test al, al
jne 0x140053f4c
xor edx, edx
mov rcx, r15
call fcn.14001a0c0
jmp 0x140053f4c
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne 0x140053f4c
call qword [sym.imp.USER32.dll_LockWorkStation]
jmp 0x140053f4c
test r13d, r13d
je 0x1400529f9
mov edx, dword [rbp + 0x1e8]
mov r8d, r12d
mov rcx, r14
call fcn.14005d8a0
mov esi, eax
jmp 0x140053f4c
mov r12d, 1
test r13d, r13d
je 0x1400531f9
mov esi, r12d
jmp 0x140053206
mov edx, r12d
mov rcx, r15
call fcn.14001a0c0
mov esi, eax
mov dword [r15 + 0x850], r12d
test r13d, r13d
je 0x140052d2d
lea rcx, [r15 + 0x118]
cmp word [rcx], 0
je 0x140053f52
mov r8, qword [0x1402dd258]
xor r9d, r9d
xor edx, edx
call fcn.140118d10
jmp 0x140053f52
test r13d, r13d
je 0x140053250
mov r12d, 1
mov esi, r12d
jmp 0x140053f52
xor edx, edx
mov rcx, r15
call fcn.14001a0c0
jmp 0x140052d25
test r13d, r13d
je 0x140053272
mov r12d, 1
mov esi, r12d
jmp 0x140053f52
cmp dword [r15 + 0x848], esi
mov edx, edi
mov rcx, r15
sete dl
call fcn.14001a0c0
jmp 0x140052d25
mov edx, r13d
mov rcx, r15
call fcn.14001a0c0
mov esi, eax
jmp 0x140053f4c
mov edx, dword [rbp + 0x1e8]
mov r8d, r13d
mov rcx, r14
call fcn.14005dcb0
mov esi, eax
jmp 0x140053f4c
test r13d, r13d
je 0x14005331c
mov ebx, dword [rbp + 0x1e8]
mov rax, qword [0x1402dd068]
lea rcx, [0x1402dd068]
mov edx, ebx
mov r8d, r12d
call qword [rax + 0xd0]
lea rcx, [0x1402dd068]
mov edx, eax
mov rax, qword [0x1402dd068]
call qword [rax + 0x68]
mov r8, r15
mov edx, r12d
mov rcx, r14
mov rdi, rax
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
mov r9, rdi
mov r8d, r12d
mov edx, ebx
mov rcx, r14
call fcn.14005dd70
mov esi, eax
jmp 0x140053f4c
mov r13, qword [rsp + 0x40]
cmp ebx, 0x45
jne 0x140053391
lea r9d, [rbx - 0x44]
xor r8d, r8d
mov rdx, r15
mov rcx, r13
call fcn.14005eef0
mov ebx, dword [rbp + 0x1e8]
mov rax, qword [0x1402dd068]
lea rcx, [0x1402dd068]
mov edx, ebx
mov r8d, r12d
call qword [rax + 0xd0]
lea rcx, [0x1402dd068]
mov edx, eax
mov rax, qword [0x1402dd068]
call qword [rax + 0x68]
mov r8, r15
mov edx, r12d
mov rcx, r14
mov rdi, rax
call fcn.14005a040
test eax, eax
jne 0x14005339c
mov r9, rdi
mov r8d, r12d
mov edx, ebx
mov rcx, r14
call fcn.14005dd70
mov esi, eax
mov r12d, 1
jmp 0x140052d32
mov r12d, 1
mov esi, r12d
jmp 0x140052d32
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
mov r12d, 1
test eax, eax
jne 0x140052bea
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rbp + 0x1e8]
mov rcx, r14
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], r12d
call fcn.14005db30
mov esi, eax
jmp 0x140053f52
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
mov r12d, 1
test eax, eax
jne 0x140052bea
mov r9d, r12d
jmp 0x1400533d2
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
mov r12d, 1
test eax, eax
jne 0x140052bea
xor r9d, r9d
mov r8d, r12d
jmp 0x1400533d5
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
mov r12d, 1
test eax, eax
jne 0x140052bea
mov r9d, r12d
mov r8d, r12d
jmp 0x1400533d5
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
mov r12d, 1
test eax, eax
jne 0x140052bea
xor r9d, r9d
lea r8d, [r12 + 1]
jmp 0x1400533d5
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
mov r12d, 1
test eax, eax
jne 0x140052bea
mov r9d, r12d
lea r8d, [r12 + 1]
jmp 0x1400533d5
test r13d, r13d
je 0x1400529f9
mov ecx, 0x32
call fcn.140055f80
mov dword [rsp + 0x20], edi
mov edi, dword [rbp + 0x1e8]
mov edx, edi
mov r9, rax
mov r8d, r12d
mov rcx, r14
mov rbx, rax
call fcn.1400549d0
lea rcx, [r14 + 0x68]
mov r9, rbx
mov r8d, r12d
mov edx, edi
call fcn.14003d7a0
test eax, eax
je 0x140053f4c
cmp eax, dword [r14 + 0x6c]
jae 0x140053f4c
mov ecx, eax
mov rax, qword [r14 + 0x70]
shl rcx, 5
mov rbx, qword [rcx + rax + 8]
test rbx, rbx
je 0x140053f4c
cmp word [rbx], si
je 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne 0x14005357f
mov r9, rbx
mov r8d, r12d
mov edx, edi
mov rcx, r14
call fcn.14005dd70
mov r12d, 1
mov esi, eax
jmp 0x140053588
mov r12d, 1
mov esi, r12d
test byte [0x1402d741c], 4
je 0x140053f52
lea r8, str.SendWindowMessage_String_is:__s__n
lea rcx, str.CPluginAction::Event
mov r9, rbx
mov edx, 3
call fcn.14011a590
jmp 0x140053f52
test r13d, r13d
je 0x140052d27
mov rax, qword [0x1402dc840]
lea rcx, [0x1402dc840]
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test rax, rax
je 0x140053f4c
cmp qword [rax + 0x10], rsi
je 0x140053f4c
cmp qword [rax + 0x18], rsi
je 0x140053f4c
cmp dword [r15 + 0xb78], 0xf
mov rcx, r15
je 0x14005360d
mov edx, 0xf
call fcn.14002e420
jmp 0x140053f4c
xor edx, edx
call fcn.14002e420
jmp 0x140053f4c
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
test r13d, r13d
je 0x140053653
mov edx, dword [rbp + 0x1e8]
lea r9d, [rax + 1]
mov r8d, r12d
mov rcx, r14
call fcn.14005ea80
mov r12d, 1
mov esi, eax
jmp 0x14005365c
mov r12d, 1
mov esi, r12d
test byte [r15 + 0x84c], 2
je 0x140053f52
cmp dword [r15 + 0x848], 0
je 0x140053f52
test r13d, r13d
je 0x140052d2d
mov rcx, qword [r15 + 0x58]
test rcx, rcx
jne 0x14005368e
lea rcx, [r15 + 0x70]
mov rax, qword [rcx]
mov r8d, r12d
mov edx, 0x1000320
call qword [rax + 0x30]
jmp 0x140053f52
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
mov r12d, 1
test eax, eax
jne 0x140052bea
mov eax, r12d
lea rdx, [0x14025eb78]
lea rcx, [0x140113fc0]
mov qword [rsp + 0x48], r12
mov qword [0x14025eb78], rax
call qword [sym.imp.USER32.dll_EnumWindows]
test byte [0x1402d741c], 4
je 0x140053711
mov r9d, dword [0x14025eb7c]
lea r8, str.Open_App_Count:__d_n
lea edx, [r12 + 2]
lea rcx, str.CPluginAction::Event
call fcn.14011a490
mov dword [rsp + 0x48], edi
cmp dword [r14 + 0xbc], esi
je 0x140053748
test byte [0x1402d741c], 4
je 0x140053f52
lea r8, str.Win10:3_FingerFickUp_in__Win__Tab__recently_sent:_Do_nothing_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
jmp 0x140053f52
mov rax, qword [r14 + 0xc0]
cmp dword [rax - 8], r12d
jle 0x140053764
mov edx, dword [rax - 0x10]
lea rcx, [r14 + 0xc0]
call fcn.14000edc0
mov rdx, qword [r14 + 0xc0]
lea rcx, [rsp + 0x48]
call fcn.1401180f0
test al, al
je 0x14005381b
cmp dword [rsp + 0x48], esi
je 0x1400537a2
test byte [r14 + 0x9c], r12b
je 0x1400537a2
test byte [0x1402d741c], 4
je 0x140053f52
lea r8, str.Win10:3_FingerFickUp_in__Win__Tab__window:_Do_nothing_n
jmp 0x140053732
test byte [0x1402d741c], 4
je 0x1400537c3
lea r8, str.Win10:_3FingerFlickUp_in__Ctrl__Alt__Tab__window:_Send_Enter_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov r9d, 0x28
mov edx, r12d
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x64], rsi
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x60], 0xd
call fcn.1400aa500
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov r9d, 0x28
mov edx, r12d
mov dword [rsp + 0x64], 2
call fcn.1400aa500
jmp 0x140053f52
cmp dword [0x14025eb78], esi
je 0x140053868
cmp dword [0x14025eb7c], esi
jbe 0x140053868
cmp dword [0x1402dc6b0], esi
jne 0x140053868
test byte [0x1402d741c], 4
je 0x140053854
lea r8, str.Win10:3_FingerFickUp:_restore_window_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
mov rcx, r14
call fcn.14005c390
mov dword [0x1402dc6b0], r12d
jmp 0x140053f52
test byte [0x1402d741c], 4
mov dword [0x1402dc6b0], edi
je 0x14005388f
lea r8, str.Win10:3_FingerFickUp:_Launch_Task_Switcher_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov r9d, 0x28
mov edx, r12d
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x64], rsi
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x60], 0x5b
call fcn.1400aa500
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov r9d, 0x28
mov edx, r12d
mov qword [rsp + 0x60], 9
call fcn.1400aa500
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov r9d, 0x28
mov edx, r12d
mov dword [rsp + 0x60], 9
mov dword [rsp + 0x64], 2
call fcn.1400aa500
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov r9d, 0x28
mov edx, r12d
mov dword [rsp + 0x60], 0x5b
mov dword [rsp + 0x64], 2
call fcn.1400aa500
mov dword [r14 + 0xbc], r12d
mov rcx, qword [0x1402dd258]
lea r9, [0x14005eec0]
mov r8d, 0x1f4
mov rdx, r14
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
jne 0x140053f52
test byte [0x1402d741c], r12b
je 0x140053983
lea r8, str.Create_Timer_Fail_n
lea rcx, str.CPluginAction::Event
mov edx, r12d
call fcn.14011a490
mov dword [r14 + 0xbc], edi
jmp 0x140053f52
test r13d, r13d
je 0x140052d27
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne case.0x1400529cd.11
mov rax, qword [r14 + 0xc0]
mov dword [rsp + 0x48], edi
cmp dword [rax - 8], 1
jle 0x1400539ce
mov edx, dword [rax - 0x10]
lea rcx, [r14 + 0xc0]
call fcn.14000edc0
mov rdx, qword [r14 + 0xc0]
lea rcx, [rsp + 0x48]
call fcn.1401180f0
test al, al
je 0x140053b14
cmp dword [rsp + 0x48], esi
je 0x140053a91
test byte [r14 + 0x9c], 2
je 0x140053a91
test byte [0x1402d741c], 4
je 0x140053a20
lea r8, str.Win10:3_FingerFickDown_in__Win__Tab__window:_Turn_off_Task_Switcher_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
mov r12d, 1
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
lea r9d, [r12 + 0x27]
mov edx, r12d
mov qword [rsp + 0x64], rsi
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x60], 0x1b
call fcn.1400aa500
lea r9d, [r12 + 0x27]
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov edx, r12d
mov dword [rsp + 0x60], 0x1b
mov dword [rsp + 0x64], 2
call fcn.1400aa500
mov dword [r14 + 0xbc], edi
mov dword [0x1402dc6b0], edi
jmp 0x140053f52
test byte [0x1402d741c], 4
je 0x140053ab2
lea r8, str.Win10:_3FingerFlickDown_in__Ctrl__Alt__Tab__window:_Send_Enter_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
mov r12d, 1
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
lea r9d, [r12 + 0x27]
mov edx, r12d
mov qword [rsp + 0x64], rsi
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x60], 0xd
call fcn.1400aa500
lea r9d, [r12 + 0x27]
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov edx, r12d
mov dword [rsp + 0x64], 2
call fcn.1400aa500
mov dword [0x1402dc6b0], edi
jmp 0x140053f52
mov r12d, 1
lea rdx, [0x14025eb78]
lea rcx, [0x140113fc0]
mov eax, r12d
mov qword [rsp + 0x50], r12
mov qword [0x14025eb78], rax
call qword [sym.imp.USER32.dll_EnumWindows]
cmp dword [0x14025eb78], esi
je 0x140053b71
test byte [0x1402d741c], 4
je 0x140053b9a
lea r8, str.Win10:3_FingerFickDown:_Do_nothing_n
lea edx, [r12 + 2]
lea rcx, str.CPluginAction::Event
call fcn.14011a490
mov dword [0x1402dc6b0], edi
jmp 0x140053f52
test byte [0x1402d741c], 4
je 0x140053b92
lea r8, str.Win10:3_FingerFickDown:_Minimize_all_window_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
mov rcx, r14
call fcn.14005c390
mov dword [0x1402dc6b0], edi
jmp 0x140053f52
test r13d, r13d
je 0x1400529f9
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne 0x140053f4c
mov rax, qword [r14 + 0xc0]
mov dword [rsp + 0x48], edi
cmp dword [rax - 8], 1
jle 0x140053be4
mov edx, dword [rax - 0x10]
lea rcx, [r14 + 0xc0]
call fcn.14000edc0
mov rdx, qword [r14 + 0xc0]
lea rcx, [rsp + 0x48]
call fcn.1401180f0
test al, al
je 0x140053c33
cmp dword [rsp + 0x48], esi
je 0x140053c33
test byte [r14 + 0x9c], 4
je 0x140053c33
test byte [0x1402d741c], 4
je 0x140053f4c
lea r8, str.Win10:_3_FingerFlickLeft_in__Win__D__window:_Do_nothing_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
jmp 0x140053f4c
test byte [0x1402d741c], 4
je 0x140053c54
lea r8, str.Win10:_3_FingerFlickLeft:_Switch_App_to_left_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
mov r12d, 1
xor r9d, r9d
mov rcx, r14
mov r8d, r12d
mov edx, r12d
call fcn.14005c190
jmp 0x140053f52
test r13d, r13d
je 0x1400529f9
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne 0x140053f4c
mov rax, qword [r14 + 0xc0]
mov dword [rsp + 0x48], edi
cmp dword [rax - 8], 1
jle 0x140053caf
mov edx, dword [rax - 0x10]
lea rcx, [r14 + 0xc0]
call fcn.14000edc0
mov rdx, qword [r14 + 0xc0]
lea rcx, [rsp + 0x48]
call fcn.1401180f0
test al, al
je 0x140053ced
cmp dword [rsp + 0x48], esi
je 0x140053ced
test byte [r14 + 0x9c], 8
je 0x140053ced
test byte [0x1402d741c], 4
je 0x140053f4c
lea r8, str.Win10:_3_FingerFlickRight_in__Win__D__window:_Do_nothing_n
jmp 0x140053c1d
test byte [0x1402d741c], 4
je 0x140053d0e
lea r8, str.Win10:_3_FingerFlickRight:_Switch_App_to_Right_n
lea rcx, str.CPluginAction::Event
mov edx, 3
call fcn.14011a490
mov r9d, 0x28
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
lea edx, [r9 - 0x27]
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x64], rsi
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x60], 0x11
call fcn.1400aa500
mov r9d, 0x28
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
lea edx, [r9 - 0x27]
mov qword [rsp + 0x60], 0xa4
call fcn.1400aa500
mov r9d, 0x28
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
lea edx, [r9 - 0x27]
mov qword [rsp + 0x60], 9
call fcn.1400aa500
mov r9d, 0x28
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
lea edx, [r9 - 0x27]
mov dword [rsp + 0x60], 9
mov dword [rsp + 0x64], 2
call fcn.1400aa500
mov r9d, 0x28
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
lea edx, [r9 - 0x27]
mov dword [rsp + 0x60], 0xa4
mov dword [rsp + 0x64], 2
call fcn.1400aa500
mov r12d, 1
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov r9d, 0x28
mov edx, r12d
mov dword [rsp + 0x60], 0x11
mov dword [rsp + 0x64], 2
call fcn.1400aa500
jmp 0x140053f52
test r13d, r13d
je 0x1400529f9
mov r8, r15
mov edx, r12d
mov rcx, r14
call fcn.14005a040
test eax, eax
jne 0x140053f4c
mov dword [rsp + 0x50], edi
mov ebx, edi
nop dword [rax + rax]
mov rax, qword [r14 + 0xc0]
cmp dword [rax - 8], 1
jle 0x140053e5c
mov edx, dword [rax - 0x10]
lea rcx, [r14 + 0xc0]
call fcn.14000edc0
mov rdx, qword [r14 + 0xc0]
lea rcx, [rsp + 0x50]
call fcn.1401180f0
movzx r12d, al
test al, al
jne 0x140053e87
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0xa
jl 0x140053e40
test byte [0x1402d741c], 4
je 0x140053eb3
mov eax, dword [rsp + 0x50]
lea r8, str.TaskSwitcher:__d__HasDesktopButton:__d_n
lea rcx, str.CPluginAction::Event
mov r9d, r12d
mov edx, 3
mov dword [rsp + 0x20], eax
call fcn.14011a490
test r12d, r12d
mov r12d, 1
je 0x140053f52
cmp dword [rsp + 0x50], esi
jne 0x140053f52
lea r9d, [r12 + 0x27]
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov edx, r12d
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x64], rsi
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x60], 0xd
call fcn.1400aa500
lea r9d, [r12 + 0x27]
lea r8, [rsp + 0x58]
lea rcx, [0x1402dc840]
mov edx, r12d
mov dword [rsp + 0x64], 2
call fcn.1400aa500
test byte [0x1402d741c], 4
je 0x140053f52
lea r8, str.Send_Return_to_finish_Task_Switcher_n
jmp 0x140053732
lea r8, str.Invalid_plugin_type__d_received_n
lea rcx, str.CPluginAction::Event
mov r9d, ebx
xor edx, edx
call fcn.14011a490
mov esi, edi
mov r12d, 1
test r13d, r13d
jne 0x140052db7
jmp 0x140052d2d