Function at 0x140092610
Capabilities:
Create thread
Get session user name

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x728]
sub rsp, 0x828
mov qword [rbp + 0x40], 0xfffffffffffffffe
mov rbx, rcx
lea rcx, str.User32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 0x1700], rax
lea rcx, str.Shcore.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 0x1708], rax
mov dword [rbx + 0x9cc], 1
xor edx, edx
lea rcx, [rbp + 0x78]
call fcn.1400ec950
nop
xor r13d, r13d
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x78]
call fcn.1400ecac0
test eax, eax
je 0x1400926c6
mov qword [rsp + 0x20], r13
lea r9, [rbx + 0x9cc]
lea r8, [rbx + 0x9cc]
lea rdx, str.UseSetProcessDPIAware
lea rcx, [rbp + 0x80]
call fcn.1401069b0
lea rcx, [rbp + 0x80]
call fcn.140106310
mov ecx, dword [rbx + 0x9cc]
lea eax, [rcx - 1]
cmp eax, 1
ja 0x1400926f7
cmp qword [rbx + 0x1700], r13
je 0x1400926f7
call fcn.1400a7ab0
test eax, eax
jne 0x1400926f7
call fcn.1400a7a60
mov dword [rbp - 0x60], 8
mov dword [rbp - 0x5c], 0xff
lea rcx, [rbp - 0x60]
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.1400ec950
nop
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SystemCurrentControlSetServicesSynTPParameters
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400ecac0
test eax, eax
je 0x140093753
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.Initialized
lea rcx, [rbp - 0x18]
call fcn.1401069b0
cmp dword [rbp + 0x788], 0
je 0x140093753
mov rcx, rbx
call fcn.140093790
mov rcx, rbx
call fcn.140098940
mov r12d, eax
mov dword [rsp + 0x20], r13d
mov r9d, 1
lea r8, str.SoftwareSynapticsSynTPEnhZoneConfig
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0xa8]
call fcn.1400ec9c0
nop
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.IsUsingZoneFlags
lea rcx, [rbp + 0xb0]
call fcn.1401069b0
cmp dword [rbp + 0x788], 0
jne 0x14009280f
mov rcx, rbx
call fcn.1400a1620
xor r9d, r9d
lea r8d, [r9 + 1]
lea rdx, str.IsUsingZoneFlags
lea rcx, [rbp + 0xb0]
call fcn.140106e60
lea rcx, [rbp + 0xb0]
call fcn.140106310
lea r9, [0x140150658]
lea r8, [0x14016191c]
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.1401037f0
mov rdi, rax
mov qword [rbp + 0x778], rax
lea rcx, [0x1402a7fe0]
cmp rcx, rax
je 0x14009285a
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
call fcn.140008f30
nop
cmp qword [rdi + 0x18], 8
jb 0x140092869
mov rcx, qword [rdi]
call fcn.14010a7dc
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], r13
mov word [rdi], r13w
call fcn.1400d3290
lea rax, vtable.CSynList_class_CRegistryKey_.0
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [rsp + 0x6c], 1
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x68], r13d
lea rax, vtable.CMultiLevelRegistryKey.0
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x50]
call fcn.1400ed060
test eax, eax
je 0x1400936b4
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 1
mov r9d, 1
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000001
lea rcx, [rsp + 0x50]
call fcn.1400ed060
test eax, eax
je 0x1400936b4
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x58]
call fcn.1400ec9c0
nop
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.ApplyPTPEnableDisable
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov eax, r13d
cmp dword [rbp + 0x788], eax
setne al
mov dword [rbx + 0x17fc], eax
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.ReduceCPUUsageForPTPFilterDriver
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov eax, r13d
cmp dword [rbp + 0x788], eax
setne al
mov dword [rbx + 0x17f8], eax
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.DisableDeviceUntilSessionEnd
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov eax, dword [rbp + 0x788]
mov dword [rbx + 0x1810], eax
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.IgnoreFirstTPOnOffOSDAfterSessionChange
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov eax, r13d
cmp dword [rbp + 0x788], eax
setne al
mov dword [rbx + 0x9bc], eax
lea r8, [rbx + 0x9c0]
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea rdx, str.ChangeCursorIconDuringTPONOFF
lea rcx, [rbp - 0x50]
call fcn.1401069b0
cmp dword [rbx + 0x9bc], 0
je 0x140092a54
mov dword [rbx + 0x1808], r13d
lea r8, [rbx + 0x7e0]
mov qword [rsp + 0x20], r13
mov r9, r8
lea rdx, str.SwapLeftRightEdgePullZoneIfLanguageIsRTL
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.AutoRotationFlag
lea rcx, [rsp + 0x50]
call fcn.1400ed3d0
mov eax, dword [rbp + 0x788]
mov dword [rbx + 0x990], eax
lea r8, [rbx + 0x7dc]
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea rdx, str.RemoveWindowsCPLEntries
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov dword [rsp + 0x44], 0x80
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x44]
lea r8, [rbx + 0x30]
lea rdx, str.WM_TOUCHPADON_OEMOSD_String
lea rcx, [rsp + 0x50]
call fcn.1400ed4d0
mov dword [rsp + 0x48], 0x80
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x48]
lea r8, [rbx + 0xb0]
lea rdx, str.WM_TOUCHPADOFF_OEMOSD_String
lea rcx, [rsp + 0x50]
call fcn.1400ed4d0
mov dword [rsp + 0x3c], 0x80
lea r8, [rbx + 0x130]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x3c]
lea rdx, str.OEM_OSD_ProgramWindow
lea rcx, [rsp + 0x50]
call fcn.1400ed4d0
mov dword [rsp + 0x34], 0x80
lea r8, [rbx + 0x1b0]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x34]
lea rdx, str.OEM_OSD_ProgramFilePath
lea rcx, [rsp + 0x50]
call fcn.1400ed4d0
mov dword [rsp + 0x38], 0x80
lea r8, [rbx + 0x3b8]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x38]
lea rdx, str.OEM_OSD_RegKeyPath
lea rcx, [rsp + 0x50]
call fcn.1400ed4d0
mov dword [rsp + 0x40], 0x80
lea r8, [rbx + 0x5c0]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x40]
lea rdx, str.OEM_OSD_RegValueName
lea rcx, [rsp + 0x50]
call fcn.1400ed4d0
mov qword [rsp + 0x20], r13
lea r9, [rbx + 0x7c8]
lea r8, [rbx + 0x7c8]
lea rdx, str.OEM_OSD_Program_NotRunInInit
lea rcx, [rsp + 0x50]
call fcn.1400ed3d0
cmp dword [rbx + 0x7c8], 0
je 0x140092c14
mov dword [rbx + 0x180c], r13d
lea r8, [rbx + 0x7cc]
mov qword [rsp + 0x20], r13
mov r9, r8
lea rdx, str.SendMsgOffOnToOEMOSD_Feature
lea rcx, [rsp + 0x50]
call fcn.1400ed3d0
lea rcx, [rbx + 0x30]
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [rbx + 0x7d0], eax
lea rcx, [rbx + 0xb0]
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [rbx + 0x7d4], eax
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPInstall
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400ecac0
test eax, eax
je 0x140092cdc
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.SynHidMini
lea rcx, [rbp - 0x18]
call fcn.1401069b0
cmp dword [rbp + 0x788], 0
je 0x140092cdc
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynHidMiniPortInstall
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400ecac0
mov dword [rbx + 0x1800], eax
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPCpl
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400ecac0
test eax, eax
je 0x140092d62
lea r8, [rbx + 0x16a0]
mov qword [rsp + 0x20], r13
mov r9, r8
lea rdx, str.UIStyle
lea rcx, [rbp - 0x18]
call fcn.1401069b0
mov dword [rbp + 0x778], 1
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.HidePTPModeSwitch
lea rcx, [rbp - 0x18]
call fcn.1401069b0
mov eax, r13d
cmp dword [rbp + 0x788], eax
sete al
mov dword [rbx + 0x1814], eax
mov dword [rbp + 0x770], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x770]
lea r8, [rbp + 0x770]
lea rdx, str.ScrollMethod
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov eax, dword [rbp + 0x770]
mov dword [rbx + 0x16ac], eax
lea r8, [rbx + 0x16b0]
mov qword [rsp + 0x20], r13
mov r9, r8
lea rdx, str.SynapticsScrollMethodSpeedFactor
lea rcx, [rbp - 0x50]
call fcn.1401069b0
lea r8, [rbx + 0x9c8]
mov qword [rsp + 0x20], r13
mov r9, r8
lea rdx, str.AdjustPointingSpeedBaseOnDesktopRes
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov dword [rbx + 0x9c4], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbx + 0x9c4]
lea r8, [rbx + 0x9c4]
lea rdx, str.EnableWMIEventFeature
lea rcx, [rbp - 0x50]
call fcn.1401069b0
xor ecx, ecx
call fcn.1401023d0
cmp eax, 9
jl 0x140092e7b
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
lea rdx, [rbx + 0xa30]
mov rcx, qword [rbx + 0xa28]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [rbp + 0x778], r13d
lea rax, [rbp + 0x778]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rbx
lea r8, [0x1400a10c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rbx + 0xa34]
mov ecx, dword [rbx + 0xa30]
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
xor r8d, r8d
mov edx, 0x201a
lea rcx, [0x1402ad8a0]
call fcn.14009d210
lea r8, [rbx + 0x17cc]
mov qword [rsp + 0x20], r13
mov r9, r8
lea rdx, str.SynTPEnhExePriorityLevel
lea rcx, [rbp - 0x50]
call fcn.1401069b0
xor edx, edx
lea rcx, [rbp + 0x48]
call fcn.1400ec950
nop
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnhShortcutConfig
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x48]
call fcn.1400ecac0
test eax, eax
je 0x140092f0f
mov eax, dword [rbx + 0x1804]
mov dword [rbp + 0x778], eax
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.ShowForcePadDesktopShortcut
lea rcx, [rbp + 0x50]
call fcn.1401069b0
mov eax, r13d
cmp dword [rbp + 0x788], eax
setne al
mov dword [rbx + 0x1804], eax
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsOEM
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x48]
call fcn.1400ecac0
test eax, eax
je 0x140092f78
mov eax, dword [rbx + 0x1804]
mov dword [rbp + 0x778], eax
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.ShowForcePadDesktopShortcut
lea rcx, [rbp + 0x50]
call fcn.1401069b0
mov eax, r13d
cmp dword [rbp + 0x788], eax
setne al
mov dword [rbx + 0x1804], eax
mov edx, 2
mov rcx, rbx
call fcn.1400a18b0
lea rax, str.Debug
mov qword [rsp + 0x20], rax
lea r9, [0x1402a83ac]
lea r8, [0x1402a83ac]
lea rdx, str.Mask
lea rcx, [rsp + 0x50]
call fcn.1400ed3d0
mov rcx, rbx
call fcn.1400a2e50
xor ecx, ecx
call fcn.1401023d0
cmp eax, 0xa
je 0x140092fd0
xor ecx, ecx
call fcn.1401023d0
cmp eax, 9
jne 0x140092fd7
xor ecx, ecx
call fcn.140113b14
mov rax, qword [rbx]
mov edx, 2
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x16d0], rax
test rax, rax
je 0x14009369c
lea rdi, [rbx + 0x830]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
test eax, eax
je 0x14009369c
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x50]
test eax, eax
je 0x14009369c
mov dword [rbp + 0x778], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x788]
lea rdx, str.DisplayRotationAngleFromSensorInfo
lea rcx, [rbp - 0x50]
call fcn.1401069b0
mov eax, dword [rbp + 0x788]
mov dword [rbx + 0x988], eax
mov rcx, rbx
call fcn.140099290
mov rcx, rbx
call fcn.1400999b0
mov rax, qword [rdi]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rdi
call qword [rax + 0x48]
mov rax, qword [rdi]
xor r9d, r9d
mov r8, qword [rbx + 0xa28]
lea rdx, [0x140158708]
mov rcx, rdi
call qword [rax + 0x20]
test eax, eax
je 0x14009369c
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x110]
lea rcx, [rbx + 0x18b0]
call fcn.14003b0b0
test eax, eax
je 0x14009369c
mov rcx, rbx
call fcn.1400a3850
lea rcx, [rbx + 0xc78]
call fcn.140015330
test eax, eax
je 0x14009369c
mov rax, qword [rbx]
mov edx, 3
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x16d8], rax
test rax, rax
je 0x14009369c
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x16f0], rax
test rax, rax
je 0x14009369c
mov rax, qword [rbx]
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x1718], rax
test rax, rax
je 0x14009369c
mov rax, qword [rbx]
mov edx, 0xd
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbx + 0x16f8], rax
test rax, rax
je 0x14009369c
xor ecx, ecx
call fcn.1401023d0
cmp eax, 8
jne 0x1400931bd
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0x10]
call fcn.1400ec9c0
nop
mov dword [rbp + 0x778], 1
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x778]
lea rdx, str.XP64VideoOn
lea rcx, [rbp + 0x18]
call fcn.1401069b0
mov eax, r13d
cmp dword [rbp + 0x778], eax
setne al
mov dword [rbx + 0x17e0], eax
lea rcx, [rbp + 0x10]
call fcn.1400eca60
call fcn.1401009c0
mov rdx, rax
mov rcx, qword [rbx + 0x16f0]
call fcn.14001cce0
mov rdx, qword [rbx + 0x16d8]
mov rcx, qword [rbx + 0x16d0]
call fcn.140055890
test eax, eax
je 0x14009369c
mov eax, dword [rbx + 0x16a0]
sub eax, 0x237c
cmp eax, 1
ja 0x14009320c
mov rcx, rbx
call fcn.14009d410
test eax, eax
je 0x14009369c
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rbx
lea r8, [0x1400a0be0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [rbx + 0x18b0]
call fcn.14003cf40
mov edi, 1
xor ecx, ecx
call fcn.1401023d0
cmp eax, 0xd
jl 0x140093292
cmp dword [rbx + 0x1814], 0
je 0x140093292
mov dword [rbp + 0x778], r13d
lea r8, [rbp + 0x778]
mov edx, 0x221a
mov rcx, rbx
call fcn.14009d210
cmp dword [rbp + 0x778], 7
jne 0x140093292
mov dword [rbx + 0x980], 7
mov dword [rbx + 0x984], edi
mov dword [rbx + 0x9e0], r13d
mov edi, r13d
mov edx, edi
mov rcx, rbx
call fcn.14009dd70
test byte [rbx + 0x1810], 5
je 0x1400932c2
cmp dword [rbx + 0xa38], 0
je 0x1400932c2
mov edx, 1
mov r8d, edx
lea rcx, [0x1402af150]
call fcn.14003ce10
test r12d, r12d
je 0x14009337c
cmp dword [rbx + 0x1814], 0
je 0x14009337c
lea rcx, [0x1402af150]
call fcn.14003d0e0
mov rdi, rax
test rax, rax
je 0x14009337c
mov rcx, qword [rax + 0x58]
cmp dword [rax + 0x1194], 0xffffffff
jne 0x140093307
test rcx, rcx
je 0x14009331b
xor r8d, r8d
jmp 0x140093310
test rcx, rcx
je 0x14009331b
or r8d, 0xffffffff
mov rax, qword [rcx]
mov edx, 0x10002f0
call qword [rax + 0x30]
mov rcx, qword [rbx + 0x16c0]
test rcx, rcx
jne 0x14009332e
lea rcx, [rbx + 0x16c8]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x58]
mov rcx, qword [rdi + 0x58]
cmp dword [rdi + 0x1194], 0xffffffff
jne 0x14009334e
test rcx, rcx
je 0x140093361
or r8d, 0xffffffff
jmp 0x140093356
test rcx, rcx
je 0x140093361
xor r8d, r8d
mov rax, qword [rcx]
mov edx, 0x10002f0
call qword [rax + 0x30]
mov rcx, qword [rbx + 0x16c0]
test rcx, rcx
jne 0x140093374
lea rcx, [rbx + 0x16c8]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x58]
cmp dword [rbx + 0x808], 0
je 0x1400933ad
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [rbx + 0x18b0]
call fcn.14003dce0
test rax, rax
je 0x1400933ad
test byte [rbx + 0x9e8], 1
je 0x1400933ad
mov rcx, rbx
call fcn.14009e8e0
lea rcx, [0x1402af150]
call fcn.1400a5c80
test rax, rax
je 0x1400933ed
test byte [rbx + 0x9ec], 1
je 0x1400933ed
lea rcx, [0x1402af150]
call fcn.1400a5c80
mov rcx, rax
call fcn.1400a5ae0
mov dword [rbx + 0x7f8], eax
test eax, eax
je 0x1400933ed
mov rcx, rbx
call fcn.14009e980
mov rcx, rbx
call fcn.1400a2830
test eax, eax
jne 0x140093416
lea r9, [0x1400a2530]
mov edx, 0xfffe
lea r8d, [rax + 0x64]
mov rcx, qword [0x1402ae2c8]
call qword [sym.imp.USER32.dll_SetTimer]
lea rdi, [rbx + 0x1758]
mov dword [rdi], r13d
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareSynapticsSynTPEnh
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x20]
call fcn.1400ecac0
test eax, eax
je 0x1400934b2
mov qword [rsp + 0x20], r13
mov r9, rdi
mov r8, rdi
lea rdx, str.MonitorScreenSaver
lea rcx, [rbp - 0x18]
call fcn.1401069b0
test eax, eax
je 0x1400934b2
cmp dword [rdi], 0
je 0x1400934b2
xor edx, edx
lea rcx, str.SynTPEnhWndClass
call qword [sym.imp.USER32.dll_FindWindowW]
mov r14, rax
lea rdi, [rbx + 0x1760]
mov rcx, rdi
call fcn.140091ab0
mov rcx, rdi
call fcn.140091b30
call fcn.140104020
test eax, eax
je 0x1400934b2
xor r9d, r9d
mov r8, r14
xor edx, edx
lea rcx, str.SynSSHookRun.exe
call fcn.140105940
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0xd8]
call fcn.1400ec9c0
nop
mov eax, dword [rbx + 0x16b4]
mov dword [rbp + 0x780], eax
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp + 0x780]
lea rdx, str.EnableLUA
lea rcx, [rbp + 0xe0]
call fcn.1401069b0
test eax, eax
je 0x140093513
mov eax, dword [rbp + 0x780]
mov dword [rbx + 0x16b4], eax
mov dword [rsp + 0x30], 0x101
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x110]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea r9, [rbp + 0x110]
lea r8, str..pipe_s00781D6E_0417_44d2_8082_9257B2CA9E0A
mov edx, 0x200
lea rcx, [rbp + 0x320]
call fcn.14010d3c4
lea r9, [0x140150658]
lea r8, [0x14016191c]
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.1401037f0
cmp qword [rax + 0x10], 0
setne dil
cmp qword [rbp + 0x28], 8
jb 0x14009357e
mov rcx, qword [rbp + 0x10]
call fcn.14010a7dc
test dil, dil
je 0x1400935da
lea r9, [0x140150658]
lea r8, [0x14016191c]
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.1401037f0
cmp qword [rax + 0x18], 8
jb 0x1400935a6
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x320]
lea r8, str._s_s
mov edx, 0x200
lea rcx, [rbp + 0x320]
call fcn.14010d3c4
cmp qword [rbp + 0x28], 8
jb 0x1400935da
mov rcx, qword [rbp + 0x10]
call fcn.14010a7dc
mov edx, 0x3d
lea rcx, [rbp + 0x320]
call fcn.1400029d0
mov qword [rbx + 0x17e8], rax
test rax, rax
je 0x140093603
lea rdx, [rbx + 8]
mov rcx, rax
call fcn.140002780
cmp dword [rbx + 0x9c4], 0
je 0x140093634
lea rdx, [0x140150af4]
lea rcx, [rbx + 0xa20]
call fcn.1400c75f0
test eax, eax
js 0x140093634
mov rcx, qword [rbx + 0xa20]
test rcx, rcx
je 0x140093634
call fcn.1400c79c0
call fcn.14006d530
cmp dword [rax + 4], 0
je 0x14009364c
call fcn.14006d530
mov rcx, rax
call fcn.14008f040
lea rcx, [rbx + 0x18b0]
call fcn.14003b910
xor ecx, ecx
call fcn.1401023d0
cmp eax, 0xb
je 0x140093670
xor ecx, ecx
call fcn.1401023d0
cmp eax, 0xc
jne 0x14009367c
lea rcx, [rbx + 0x18b0]
call fcn.14003d220
mov edx, 1
mov rcx, rbx
call fcn.1400a05e0
mov esi, 1
lea rcx, [rbp + 0xd8]
call fcn.1400eca60
jmp 0x14009369f
mov esi, r13d
lea rcx, [rbp + 0x48]
call fcn.1400eca60
nop
lea rcx, [rbp - 0x58]
call fcn.1400eca60
jmp 0x1400936b7
mov esi, r13d
lea rax, vtable.CSynList_class_CRegistryKey_.0
mov qword [rsp + 0x50], rax
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x140093739
nop dword [rax]
test rbx, rbx
je 0x140093739
mov rcx, qword [rbx + 0x10]
mov rax, qword [rbx + 8]
test rcx, rcx
je 0x1400936e8
mov qword [rcx + 8], rax
jmp 0x1400936ed
mov qword [rsp + 0x58], rax
mov rcx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
test rcx, rcx
je 0x140093700
mov qword [rcx + 0x10], rax
jmp 0x140093705
mov qword [rsp + 0x60], rax
mov rdi, qword [rbx + 8]
cmp dword [rsp + 0x6c], 0
je 0x140093725
mov rcx, qword [rbx]
test rcx, rcx
je 0x140093725
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [rbx], r13
mov rcx, rbx
call fcn.14010a7dc
mov rbx, rdi
dec dword [rsp + 0x68]
test rdi, rdi
jne 0x1400936d0
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
lea rcx, [rbp + 0xa8]
call fcn.1400eca60
jmp 0x140093756
mov esi, r13d
lea rcx, [rbp - 0x20]
call fcn.1400eca60
nop
lea rcx, [rbp + 0x78]
call fcn.1400eca60
mov eax, esi
add rsp, 0x828
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret