Function at 0x100008848
Capabilities:
Create thread
Resume thread

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x270
mov qword [rsp + 0x1f8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x100090120]
xor rax, rsp
mov qword [rsp + 0x260], rax
mov rsi, rcx
mov r14, qword [rsp + 0x2c0]
xor ebx, ebx
mov dword [r14], ebx
mov r15, qword [rcx + 8]
mov ecx, 0x1c8
call fcn.100001710
mov qword [rsp + 0xd0], rax
cmp rax, rbx
je 0x10001e5d0
mov rcx, rax
call fcn.10000bbcc
jmp 0x1000088be
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.100001eb4
nop
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov rcx, qword [rsi + 0x48]
or r12, 0xffffffffffffffff
lea r13d, [r12 + 2]
cmp rcx, rdi
je 0x10000891e
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
jne 0x100008912
mov rcx, qword [rsi + 0x50]
cmp rcx, rbx
jne 0x10001e5d8
mov qword [rsi + 0x50], rbx
mov rcx, qword [rsi + 0x48]
call sub.msvcrt.dll_free
mov qword [rsi + 0x48], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x50], rbp
mov qword [rsi + 0x48], rdi
mov rax, qword [rsp + 0x150]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e5e7
mov ecx, 0x240
call fcn.100001710
mov qword [rsp + 0x70], rax
cmp rax, rbx
je 0x10001e618
mov rcx, rax
call fcn.10000be6c
jmp 0x100008958
mov rdx, rax
lea rcx, [rsp + 0x120]
call fcn.100001eb4
nop
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov rcx, qword [rsi + 0x58]
cmp rcx, rdi
je 0x1000089af
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
jne 0x1000089a3
mov rcx, qword [rsi + 0x60]
cmp rcx, rbx
jne 0x10001e620
mov qword [rsi + 0x60], rbx
mov rcx, qword [rsi + 0x58]
call sub.msvcrt.dll_free
mov qword [rsi + 0x58], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x60], rbp
mov qword [rsi + 0x58], rdi
mov rax, qword [rsp + 0x120]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e62f
mov ecx, 0x50
call fcn.100001710
mov rdi, rax
mov qword [rsp + 0x70], rax
cmp rax, rbx
je 0x10001e660
lea rax, vtable.CViewManager.0
mov qword [rdi], rax
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], rbx
mov qword [rdi + 0x20], rbx
lea rcx, [rdi + 0x28]
xor edx, edx
call fcn.1000016ac
nop
lea rcx, [rdi + 0x38]
xor edx, edx
call fcn.100001eb4
mov dword [rdi + 0x4c], 3
mov dword [rdi + 0x48], ebx
mov byte [rdi + 8], bl
jmp 0x100008a1e
mov rdx, rdi
lea rcx, [rsp + 0x140]
call fcn.1000016ac
nop
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov rcx, qword [rsi + 0x88]
cmp rcx, rdi
je 0x100008a8a
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
jne 0x100008a78
mov rcx, qword [rsi + 0x90]
cmp rcx, rbx
jne 0x10001e668
mov qword [rsi + 0x90], rbx
mov rcx, qword [rsi + 0x88]
call sub.msvcrt.dll_free
mov qword [rsi + 0x88], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x90], rbp
mov qword [rsi + 0x88], rdi
mov rax, qword [rsp + 0x140]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e676
mov ecx, 0x280
call fcn.100001710
mov qword [rsp + 0x70], rax
cmp rax, rbx
je 0x10001e6a6
mov rcx, rax
call fcn.10000cc94
jmp 0x100008ac4
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.1000016ac
nop
mov rdx, rax
lea rcx, [rsi + 0x98]
call fcn.1000014e8
nop
mov rax, qword [rsp + 0x100]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e6ae
lea rax, [rsp + 0x88]
mov qword [rsp + 0x70], rax
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x90], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsi + 0xa0]
cmp rcx, rbx
je 0x10001ea07
add rcx, 0x58
lea rdx, [rsp + 0x88]
call fcn.1000014e8
nop
mov rax, qword [rsp + 0x88]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e6de
mov ecx, 0x130
call fcn.100001710
mov qword [rsp + 0x60], rax
cmp rax, rbx
je 0x10001e70e
mov rcx, rax
call fcn.10000b938
jmp 0x100008b9c
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.100001eb4
nop
mov rdi, qword [rax]
mov r12, qword [rax + 8]
mov rcx, qword [rsi + 0x68]
cmp rcx, rdi
je 0x100008bed
lock add dword [rcx], 0xffffffff
jne 0x100008be1
mov rcx, qword [rsi + 0x70]
cmp rcx, rbx
jne 0x10001e716
mov qword [rsi + 0x70], rbx
mov rcx, qword [rsi + 0x68]
call sub.msvcrt.dll_free
mov qword [rsi + 0x68], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x70], r12
mov qword [rsi + 0x68], rdi
mov rax, qword [rsp + 0x160]
lock add dword [rax], 0xffffffff
je 0x10001e725
cmp byte [rsi + 0xd9], bl
jne 0x100008c99
mov ecx, 0x168
call fcn.100001710
mov qword [rsp + 0x60], rax
cmp rax, rbx
je 0x10001e756
mov rcx, rax
call fcn.10000b670
jmp 0x100008c2d
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.100001eb4
nop
mov rdi, qword [rax]
mov r12, qword [rax + 8]
mov rcx, qword [rsi + 0x78]
cmp rcx, rdi
je 0x100008c87
lock add dword [rcx], 0xffffffff
jne 0x100008c78
mov rcx, qword [rsi + 0x80]
cmp rcx, rbx
jne 0x10001e75e
mov qword [rsi + 0x80], rbx
mov rcx, qword [rsi + 0x78]
call sub.msvcrt.dll_free
mov qword [rsi + 0x78], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x80], r12
mov qword [rsi + 0x78], rdi
mov rax, qword [rsp + 0x110]
lock add dword [rax], 0xffffffff
je 0x10001e76d
mov dword [rsp + 0x78], ebx
xor eax, eax
mov dword [rsp + 0x7c], eax
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x84], eax
mov r12d, 0x11d
lea rdx, [rsp + 0x78]
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_GetClientRect]
cmp eax, ebx
je 0x100008cd7
mov r12d, dword [rsp + 0x80]
sub r12d, dword [rsp + 0x78]
mov dword [rsp + 0x130], ebx
mov dword [rsp + 0x134], ebx
mov dword [rsp + 0x138], r12d
mov dword [rsp + 0x13c], ebx
mov r13, qword [rsi + 0x50]
cmp r13, rbx
je 0x10001e9eb
call fcn.10000d058
cmp qword [rax + 0x50], rbx
jne 0x100008d15
call fcn.10000d058
mov qword [rax + 0x50], rbx
call fcn.10000d058
mov rcx, rax
lea rdx, [r13 + 0x40]
call fcn.100009b28
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x42010000
lea r9, str.NavigationTile
lea r8, [rsp + 0x130]
mov rdx, r15
mov rcx, r13
call fcn.1000094b8
cmp byte [rsi + 0xd9], bl
jne 0x10001e79e
mov dword [rsp + 0xf0], ebx
xor eax, eax
mov dword [rsp + 0xf4], eax
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfc], eax
mov r13, qword [rsi + 0x60]
cmp r13, rbx
je 0x10001e9cf
call fcn.10000d100
cmp qword [rax + 0x50], rbx
jne 0x100008da6
call fcn.10000d100
mov qword [rax + 0x50], rbx
call fcn.10000d100
mov rcx, rax
lea rdx, [r13 + 0x40]
call fcn.100009b28
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x42010000
lea r9, str.SearchTile
lea r8, [rsp + 0xf0]
mov rdx, r15
mov rcx, r13
call fcn.1000094b8
lea r9, [rsi + 0x130]
xor r8d, r8d
lea edx, [r8 + 0x6b]
mov rcx, qword [0x1000921e0]
call qword [sym.imp.COMCTL32.dll_Ordinal_380]
mov r11, qword [0x100090140]
mov r9, qword [rsi + 0x130]
xor r8d, r8d
mov r13d, 0x80
mov edx, r13d
mov rcx, qword [r11 + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [rsi + 0x138]
lea edx, [r13 - 0x15]
lea r8d, [r13 - 0x7f]
mov rcx, qword [0x1000921e0]
call qword [sym.imp.COMCTL32.dll_Ordinal_380]
mov r11, qword [0x100090140]
mov r9, qword [rsi + 0x138]
lea r8d, [r13 - 0x7f]
mov edx, r13d
mov rcx, qword [r11 + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x170]
call fcn.1000018c0
nop
mov rdi, qword [rax]
cmp rdi, rbx
je 0x100008ea0
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x50], rax
cmp rax, rbx
je 0x10001e7e2
lea rcx, [rsp + 0x170]
call fcn.1000012b0
lea rcx, [rsp + 0x1a0]
call fcn.100002410
mov rdi, qword [rax]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.10000ae58
cmp eax, ebx
setl dil
lea rcx, [rsp + 0x1a0]
call fcn.1000012b0
cmp dil, bl
jne 0x10001e7f2
lea rcx, [rsp + 0xd0]
call fcn.10000af50
mov rdi, qword [rax]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.10000ae58
cmp eax, ebx
setl dil
lea rcx, [rsp + 0xd0]
call fcn.1000012b0
cmp dil, bl
jne 0x10001e814
lea rax, [rsp + 0x190]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x70], rax
mov rax, qword [rsi + 0x90]
mov qword [rsp + 0x198], rax
mov rax, qword [rsi + 0x88]
mov r13d, 1
lock add dword [rax], r13d
mov rax, qword [rsi + 0x88]
mov qword [rsp + 0x190], rax
mov rdi, qword [rsp + 0x50]
cmp rdi, rbx
je 0x10001e836
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, eax
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov qword [rsp + 0xd8], rax
cmp rdi, rbx
je 0x100008fb8
cmp rax, rbx
je 0x10001e83e
mov rcx, qword [rsi + 0xa0]
cmp rcx, rbx
je 0x10001e9b3
lea r8, [rsp + 0x190]
lea rdx, [rsp + 0xd8]
call fcn.10000a2cc
cmp al, bl
je 0x10001e84e
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x60], rax
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1a8], rax
mov rcx, qword [rsi + 0x90]
cmp rcx, rbx
je 0x10001e997
lea rdx, [rsp + 0x1a8]
call fcn.100015d54
cmp eax, ebx
je 0x10001e86a
mov dword [rsp + 0x60], ebx
mov eax, dword [rsp + 0xfc]
mov dword [rsp + 0x64], eax
mov dword [rsp + 0x68], r12d
mov ecx, dword [rsp + 0x84]
lea eax, [rcx - 0x1e]
mov dword [rsp + 0x6c], eax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0xe0], xmm0
mov dword [rsp + 0xe4], eax
mov dword [rsp + 0xec], ecx
mov r12, qword [rsi + 0x70]
cmp r12, rbx
je 0x10001e97b
call fcn.100012aa4
cmp qword [rax + 0x50], rbx
jne 0x10000909f
call fcn.100012aa4
mov qword [rax + 0x50], rbx
call fcn.100012aa4
mov rcx, rax
lea rdx, [r12 + 0x40]
call fcn.100009b28
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov r14d, 0x46010000
mov dword [rsp + 0x20], r14d
lea r9, str.EscalationTile
lea r8, [rsp + 0xe0]
mov rdx, r15
mov rcx, r12
call fcn.1000094b8
cmp qword [rsi + 0x80], rbx
je 0x10000918d
movaps xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x180], xmm0
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x184], eax
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x18c], eax
mov r12, qword [rsi + 0x80]
cmp r12, rbx
je 0x10001e888
call fcn.100012a00
cmp qword [rax + 0x50], rbx
jne 0x100009147
call fcn.100012a00
mov qword [rax + 0x50], rbx
call fcn.100012a00
mov rcx, rax
lea rdx, [r12 + 0x40]
call fcn.100009b28
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r14d
lea r9, str.ConnectionTile
lea r8, [rsp + 0x180]
mov rdx, r15
mov rcx, r12
call fcn.1000094b8
jmp 0x10000918d
mov rcx, qword [rsi + 0x50]
cmp rcx, rbx
je 0x10001e95f
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x1d8]
call qword [rax + 0x20]
cmp qword [rsi + 0x60], rbx
je 0x10000921d
mov rcx, qword [rsi + 0x60]
cmp rcx, rbx
je 0x10001e8a9
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x1c8]
call qword [rax + 0x20]
jmp 0x10000921d
mov rcx, qword [rsi + 0x70]
cmp rcx, rbx
je 0x10001e943
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x1e8]
call qword [rax + 0x20]
cmp qword [rsi + 0x80], rbx
je 0x1000092b3
mov rcx, qword [rsi + 0x80]
cmp rcx, rbx
je 0x10001e8ca
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x1b8]
call qword [rax + 0x20]
jmp 0x1000092b3
mov rcx, rsi
call fcn.1000101ac
lea r9, str.HelpPaneQuitEvent
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsi + 0xe8], rax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 4
mov r9, rsi
lea r8, [0x100002950]
mov edx, 0x1000
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsi + 0xe0], rax
cmp rax, rbx
je 0x10000930f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp byte [rsi + 0x148], bl
jne 0x10001e8eb
mov rcx, qword [rsi + 0x90]
cmp rcx, rbx
je 0x10001e927
mov edx, r13d
call fcn.100003380
mov dword [rsp + 0x200], ebx
xor edx, edx
lea r8d, [rdx + 0x58]
lea rcx, [rsp + 0x204]
call sub.msvcrt.dll_memset
xor r9d, r9d
lea r8, [rsp + 0x200]
lea edx, [r9 + 0x5c]
lea ecx, [rdx - 0x3d]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
lea rcx, [rsp + 0x200]
call qword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov qword [rsi + 0x140], rax
mov r9, r13
mov r8, rax
mov edx, 0x30
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsi + 0xc8], rax
mov r9d, dword [rsi + 0xbc]
sub r9d, dword [rsi + 0xb4]
xor edx, edx
mov r8d, 0x412
lea rdi, [0x10006b1f0]
mov rcx, rdi
call fcn.100012420
mov r9d, dword [rsi + 0xb8]
sub r9d, dword [rsi + 0xb0]
xor edx, edx
mov r8d, 0x415
mov rcx, rdi
call fcn.100012420
mov r9d, dword [rsi + 0xb0]
xor edx, edx
mov r8d, 0x413
mov rcx, rdi
call fcn.100012420
mov r9d, dword [rsi + 0xb4]
xor edx, edx
mov r8d, 0x414
mov rcx, rdi
call fcn.100012420
lea rdx, [rsp + 0x58]
lea rcx, [rsi + 0xa8]
call fcn.100009c48
movzx r9d, al
xor edx, edx
mov r8d, 0x40f
mov rcx, rdi
call fcn.100012420
lea rcx, [rsi + 0xa8]
call fcn.1000161c0
movzx r9d, al
xor edx, edx
mov r8d, 0x40e
mov rcx, rdi
call fcn.100012420
mov r9d, r13d
xor edx, edx
mov r8d, 0x411
lea rcx, [0x10006b200]
call fcn.100012420
nop
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor eax, eax
jmp 0x100009480
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.100001100
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rax, rbx
jmp 0x1000088be
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x100008901
mov rcx, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
cmp rcx, rbx
je 0x10001e5fd
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + reloc.COMCTL32.dll_Ordinal_344], rbx
mov rcx, qword [rsp + 0x150]
call sub.msvcrt.dll_free
nop
jmp 0x100008936
mov rax, rbx
jmp 0x100008958
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x100008992
mov rcx, qword [rsp + 0x128]
cmp rcx, rbx
je 0x10001e645
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x128], rbx
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
jmp 0x1000089c7
mov rdi, rbx
jmp 0x100008a1e
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
jmp 0x100008a5e
mov rcx, qword [rsp + 0x148]
cmp rcx, rbx
je 0x10001e68b
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
mov qword [rsp + 0x148], rbx
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
jmp 0x100008aa2
mov rax, rbx
jmp 0x100008ac4
mov rcx, qword [rsp + 0x108]
cmp rcx, rbx
je 0x10001e6c3
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
mov qword [rsp + 0x108], rbx
mov rcx, qword [rsp + 0x100]
call sub.msvcrt.dll_free
nop
jmp 0x100008afd
mov rcx, qword [rsp + 0x90]
cmp rcx, rbx
je 0x10001e6f3
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
mov qword [rsp + 0x90], rbx
mov rcx, qword [rsp + 0x88]
call sub.msvcrt.dll_free
nop
jmp 0x100008b7a
mov rax, rbx
jmp 0x100008b9c
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x100008bd0
mov rcx, qword [rsp + 0x168]
cmp rcx, rbx
je 0x10001e73b
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x168], rbx
mov rcx, qword [rsp + 0x160]
call sub.msvcrt.dll_free
nop
jmp 0x100008bff
mov rax, rbx
jmp 0x100008c2d
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x100008c64
mov rcx, qword [rsp + 0x118]
cmp rcx, rbx
je 0x10001e783
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x118], rbx
mov rcx, qword [rsp + 0x110]
call sub.msvcrt.dll_free
nop
jmp 0x100008c99
mov rcx, qword [rsi + 0x50]
cmp rcx, rbx
je 0x10001e7c1
xor r8d, r8d
mov edx, 0x801c
mov rcx, qword [rcx + 0x1a0]
call qword [sym.imp.USER32.dll_DeleteMenu]
jmp 0x100008d67
mov dword [rsp + 0xa8], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xa8]
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, 0x8007000e
call fcn.1000242ec
nop
jmp 0x100023e85
mov dword [r14], 1
mov byte [rsi + 0x120], 1
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or rax, 0xffffffffffffffff
jmp 0x100009480
mov dword [r14], 1
mov byte [rsi + 0x120], 1
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or rax, 0xffffffffffffffff
jmp 0x100009480
mov rax, rbx
jmp 0x100008fa2
mov ecx, 0x8007000e
call fcn.1000242ec
nop
jmp 0x100023e86
mov dword [r14], r13d
mov byte [rsi + 0x120], r13b
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or rax, 0xffffffffffffffff
jmp 0x100009480
mov dword [r14], r13d
mov byte [rsi + 0x120], r13b
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or rax, 0xffffffffffffffff
jmp 0x100009480
mov dword [rsp + 0xac], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xac]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xb4], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xb4]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xbc], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xbc]
call sub.msvcrt.dll__CxxThrowException
int3
mov rcx, qword [rsi + 0x90]
cmp rcx, rbx
je 0x10001e906
mov edx, 3
call fcn.100003380
jmp 0x100009333
mov dword [rsp + 0xc4], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xc4]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xcc], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xcc]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xa0], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xa0]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xb8], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0x98], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0x98]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0xc8], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xc8]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0xb0], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xb0]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0xc0], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xc0]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0x9c], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0x9c]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0xa4], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xa4]
call sub.msvcrt.dll__CxxThrowException
nop
jmp 0x100009480
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
xor ebx, ebx
sub ecx, 4
mov rdi, rdx
mov edx, ebx
mov dword [r8], ebx
je 0x100023ee5
cmp ecx, 1
je 0x100023edd
lea eax, [rbx + 0x57]
jmp 0x100023f25
mov rsi, rbx
mov bpl, bl
jmp 0x100023f15
mov rcx, r9
call qword [sym.imp.ADVAPI32.dll_GetTraceLoggerHandle]
mov rcx, rax
mov rsi, rax
call qword [sym.imp.ADVAPI32.dll_GetTraceEnableLevel]
mov rcx, rsi
mov bpl, al
call qword [sym.imp.ADVAPI32.dll_GetTraceEnableFlags]
or ecx, 0xffffffff
cmp eax, ebx
mov edx, 1
cmove eax, ecx
mov ebx, eax
mov qword [rdi + 8], rsi
mov byte [rdi + 0x28], bpl
mov dword [rdi + 0x20], ebx
mov dword [rdi + 0x24], edx
xor eax, eax
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret