Function at 0x1403b3b18
Capabilities:
Get file attributes
Query or enumerate registry value
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x850
mov rax, qword [0x1404f5550]
xor rax, rsp
mov qword [rsp + 0x840], rax
mov r12, rcx
mov qword [rsp + 0x50], rcx
mov rbp, rdx
xor ebx, ebx
lea rcx, [rsp + 0x511]
xor edx, edx
mov r8d, SerializeElements<class ATL::CStringT<wchar_t,class StrTraitMFC_DLL<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >
mov r15d, ebx
mov byte [rsp + 0x510], bl
call sub.MSVCR90.dll_memset
mov r14d, CFileDialog::GetInterfaceMap
mov rcx, r12
mov dword [rsp + 0x30], r14d
call qword [sym.imp.KERNEL32.dll_GlobalLock]
cmp rax, rbx
mov rdi, rax
jne 0x1403b3b91
lea eax, [rbx + 0x12]
jmp 0x1403b48e1
mov r8, r14
xor edx, edx
mov rcx, rbp
call sub.MSVCR90.dll_memset
mov ecx, dword [rdi + 0x104]
mov r13d, 1
sub ecx, r13d
je 0x1403b3db7
cmp ecx, r13d
je 0x1403b3bc1
lea eax, [r13 + 0xd]
jmp 0x1403b48e1
lea r12, [rsp + 0x510]
mov r14d, ebx
mov r13, rbx
sub r12, rdi
mov rsi, rdi
cmp byte [rsi], bl
je 0x1403b3bf9
movsx ecx, byte [rsi]
call sub.MSVCR90.dll_toupper
add r13, 1
add r14d, 1
add al, 7
mov byte [r12 + rsi], al
add rsi, 1
cmp r13, 0x32
jl 0x1403b3bd5
movsxd rax, r14d
lea r9, [rsp + 0x38]
xor r8d, r8d
mov byte [rsp + rax + 0x510], bl
lea rax, [rsp + 0x510]
xor edx, edx
mov qword [rsp + 0x28], rax
lea rax, [rsp + reloc.mfc90u.dll_CMapStringToOb::CreateObject]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1403b7d4c
mov r13d, 1
cmp eax, r13d
je 0x1403b3cf2
mov rax, qword [str.softwareclasses_vdsp]
lea rcx, [rsp + 0x620]
mov r9, 0xffffffff80000002
mov qword [rcx], rax
mov rax, qword [0x14048b728]
mov r8b, 0x3a
mov qword [rcx + 8], rax
mov eax, dword [0x14048b730]
mov qword [rsp + 0x38], r9
cmp byte [rdi], r8b
mov dword [rcx + 0x10], eax
movzx eax, word [0x14048b734]
mov word [rcx + 0x14], ax
jne 0x1403b3cd8
lea rax, [rdi + 4]
mov edx, ebx
mov cl, byte [rax]
cmp cl, r8b
je 0x1403b3caa
lea rsi, [rsp + 0x620]
add rax, r13
mov byte [rsi], cl
add edx, r13d
mov cl, byte [rax]
add rsi, r13
cmp cl, r8b
jne 0x1403b3c98
movsxd rax, edx
mov byte [rsp + rax + 0x620], bl
lea eax, [rdx + 5]
lea rdx, [rsp + 0x510]
movsxd rcx, eax
sub rdx, rcx
sub rdx, rdi
lea rsi, [rcx + rdi]
mov al, byte [rsi]
mov byte [rdx + rsi], al
add rsi, r13
cmp al, bl
jne 0x1403b3ccc
mov rcx, rbx
mov al, byte [rsp + rcx + 0x620]
mov byte [rsp + rcx + reloc.mfc90u.dll_CMapStringToOb::CreateObject], al
add rcx, r13
cmp al, bl
jne 0x1403b3cdb
jmp 0x1403b3cf7
mov r9, qword [rsp + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + reloc.mfc90u.dll_CMapStringToOb::CreateObject]
mov rcx, r9
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
cmp eax, ebx
je 0x1403b3d4e
call fcn.1403b80f8
cmp eax, ebx
je 0x1403b3d44
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x40]
lea rdx, [rsp + reloc.mfc90u.dll_CMapStringToOb::CreateObject]
mov r9d, 0x20119
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
je 0x1403b3d4e
mov eax, 0x2a
jmp 0x1403b48e1
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x30]
lea r9, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x510]
xor r8d, r8d
mov qword [rsp + 0x20], rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x1403b3d86
mov eax, 0x2b
jmp 0x1403b48e1
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp eax, ebx
je 0x1403b3d9f
mov eax, 0x2c
jmp 0x1403b48e1
cmp dword [rsp + 0x30], 0xc30
je 0x1403b3f1c
mov eax, 0x2d
jmp 0x1403b48e1
cmp byte [rdi + 0x508], bl
je 0x1403b3e0f
mov rsi, qword [rdi + 0x509]
xor r9d, r9d
mov r8, rdi
mov ecx, r13d
mov rdx, rsi
mov dword [rsp + 0x20], ebx
call fcn.1403b7864
mov edx, dword [rdi + 0x53d]
mov r9, rbp
mov r8, rdi
mov rcx, rsi
mov dword [rsp + 0x20], r14d
call fcn.1403b7a14
cmp eax, r14d
je 0x1403b3ee1
mov rcx, rsi
call fcn.1403b77e8
mov eax, 8
jmp 0x1403b48e1
xor edx, edx
mov rcx, rdi
call fcn.1403b7798
cmp eax, 0xffffffff
jne 0x1403b3e28
mov eax, send
jmp 0x1403b48e1
lea r8, [rdi + reloc.mfc90u.dll_ATL::CSimpleStringT_wchar_t_1_::Append]
lea rdx, [rdi + 0x515]
mov rcx, rdi
call fcn.1403b81b0
mov rcx, rdi
call sub.KERNEL32.dll_GetFileAttributesA
test al, 7
mov dword [rdi + 0x511], eax
je 0x1403b3eb8
xor edx, edx
mov rcx, rdi
call sub.KERNEL32.dll_SetFileAttributesA
cmp eax, ebx
jne 0x1403b3eb8
mov eax, 3
jmp 0x1403b48e1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x20
jne 0x1403b3ed7
test byte [rdi + 0x53d], 0x10
je 0x1403b3e9c
mov eax, 0x25
jmp 0x1403b48e1
lea rcx, [rsp + 0x58]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x58]
call qword [sym.imp.USER32.dll_DispatchMessageA]
lea rcx, [rsp + 0x58]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_PeekMessageA]
cmp eax, ebx
jne 0x1403b3e86
mov ecx, dword [rdi + 0x53d]
xor r8d, r8d
mov rdx, rdi
call fcn.1403b79a8
cmp rax, 0xffffffffffffffff
mov rsi, rax
je 0x1403b3e68
jmp 0x1403b3ddb
mov eax, 7
jmp 0x1403b48e1
cmp byte [rdi + 0x508], bl
jne 0x1403b3f21
mov rcx, rsi
call fcn.1403b77e8
cmp rax, rbx
je 0x1403b3f00
mov eax, 6
jmp 0x1403b48e1
mov edx, dword [rdi + 0x511]
test dl, 7
je 0x1403b3f21
mov rcx, rdi
call sub.KERNEL32.dll_SetFileAttributesA
cmp eax, ebx
jne 0x1403b3f21
jmp 0x1403b3e5e
mov r12, qword [rsp + 0x50]
mov rdx, rbp
lea rsi, [rbp + 0xc2f]
mov r8d, reloc.mfc90u.dll_CStatusBar::CStatusBar
mov al, byte [rsi]
mov cl, byte [rdx]
mov byte [rdx], al
mov byte [rsi], cl
sub rsi, 2
add rdx, 2
sub r8, r13
jne 0x1403b3f31
lea rcx, [rbp + 4]
mov edx, 0xc2c
movsx eax, byte [rcx]
add rcx, r13
add r15d, eax
sub rdx, r13
jne 0x1403b3f4f
cmp dword [rbp], r15d
je 0x1403b3f6b
lea eax, [rdx + 0x26]
jmp 0x1403b48e1
mov eax, dword [rdi + 0x104]
cmp eax, 3
jne 0x1403b3f96
lea rcx, [rsp + 0x110]
add rdi, 0x108
sub rcx, rdi
mov al, byte [rdi]
mov byte [rcx + rdi], al
add rdi, r13
cmp al, bl
jne 0x1403b3f88
jmp 0x1403b3fd6
cmp eax, 4
jne 0x1403b3fbb
lea rcx, [rsp + 0x110]
add rdi, 0x108
sub rcx, rdi
mov al, byte [rdi]
mov byte [rcx + rdi], al
add rdi, r13
cmp al, bl
jne 0x1403b3fad
jmp 0x1403b3fd6
lea rcx, [rdi + 0x108]
lea r8, [rsp + 0x110]
lea rdx, str.139975959bd8768d74383a8ad6e0f2f79b59a
call fcn.1403b8154
lea rcx, [rbp + 0x137]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
call fcn.1403b8154
mov r14d, 9
lea rsi, str.38810806
lea rdi, [rsp + 0x90]
mov rcx, r14
repe cmpsb byte [rsi], byte [rdi]
je 0x1403b4018
mov eax, recv
jmp 0x1403b48e1
lea rcx, [rbp + 0x3bc]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
call fcn.1403b8154
lea rsi, str.SAA_482
lea rdi, [rsp + 0x90]
mov ecx, 8
repe cmpsb byte [rsi], byte [rdi]
jne 0x1403b400e
lea rcx, [rbp + 0x41e]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
call fcn.1403b8154
lea rsi, str.YAP00667
lea rdi, [rsp + 0x90]
mov rcx, r14
repe cmpsb byte [rsi], byte [rdi]
jne 0x1403b400e
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 5]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 5]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x38]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x38]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x6b]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x6b]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x9e]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x9e]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0xd1]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0xd1]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x104]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x104]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x141]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x141]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x174]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x174]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x1a7]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x1a7]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x1da]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x1da]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x20d]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x20d]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x240]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x240]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x273]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x273]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x2a6]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x2a6]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x2d9]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x2d9]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x30c]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x30c]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x33f]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x33f]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x372]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x372]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x3a5]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x3a5]
xor r8d, r8d
call fcn.1403b6858
movsx ecx, byte [rsp + 0x110]
movsx eax, byte [rsp + 0x112]
imul ecx, eax
sub dword [rbp + 0x3a8], ecx
sub dword [rbp + 0x3ac], ecx
sub dword [rbp + 0x3b0], ecx
sub dword [rbp + 0x3b4], ecx
sub dword [rbp + 0x3b8], ecx
sub dword [rbp + 0x3c6], ecx
sub dword [rbp + 0x3ca], ecx
mov edx, dword [rbp + 0x5f8]
sub dword [rbp + reloc.mfc90u.dll_COlePropertyPage::XPropertyPage::Activate], ecx
sub dword [rbp + 0x3d2], ecx
sub dword [rbp + 0x3d6], ecx
sub dword [rbp + 0x3da], ecx
sub dword [rbp + 0x3de], ecx
add dword [rbp + 0x3e2], ecx
add dword [rbp + 0x3e6], ecx
add dword [rbp + 0x3ea], ecx
add dword [rbp + 0x3ee], ecx
add dword [rbp + 0x3f2], ecx
add dword [rbp + 0x3f6], ecx
add dword [rbp + 0x3fa], ecx
add dword [rbp + reloc.mfc90u.dll_CBlobProperty::AddRef], ecx
add dword [rbp + 0x402], ecx
sub dword [rbp + 0x406], ecx
sub dword [rbp + 0x40a], ecx
sub dword [rbp + 0x40e], ecx
add dword [rbp + reloc.mfc90u.dll_CPtrList::AddTail], ecx
add dword [rbp + 0x416], ecx
add dword [rbp + 0x41a], ecx
add dword [rbp + 0x428], ecx
add dword [rbp + 0x42c], ecx
add dword [rbp + reloc.mfc90u.dll_AfxCompareValueByRef], ecx
add dword [rbp + 0x434], ecx
add dword [rbp + reloc.mfc90u.dll_AfxCriticalNewHandler], ecx
add dword [rbp + 0x43c], ecx
add dword [rbp + 0x440], ecx
add dword [rbp + 0x444], ecx
add dword [rbp + 0x448], ecx
add dword [rbp + 0x44c], ecx
add dword [rbp + 0x450], ecx
add dword [rbp + 0x454], ecx
sub edx, ecx
cmp edx, ebx
jle 0x1403b48b1
mov al, byte [rsp + 0x112]
sub dword [rbp + 0x5f4], ecx
sub dword [rbp + 0x5fc], ecx
imul byte [rsp + 0x110]
sub byte [rbp + 0x5f0], al
sub byte [rbp + 0x5f1], al
sub byte [rbp + 0x5f2], al
sub byte [rbp + 0x5f3], al
mov dword [rbp + 0x5f8], edx
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x608]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x608]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x60e]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x60e]
xor r8d, r8d
call fcn.1403b6858
movsx edx, byte [rsp + 0x110]
movsx eax, byte [rsp + 0x112]
imul edx, eax
sub dword [rbp + 0x697], edx
sub dword [rbp + 0x69b], edx
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x69f]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x69f]
xor r8d, r8d
call fcn.1403b6858
movsx edx, byte [rsp + 0x110]
movsx eax, byte [rsp + 0x112]
imul edx, eax
sub dword [rbp + 0x6a5], edx
sub dword [rbp + 0x6a9], edx
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x61d]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x61d]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + reloc.mfc90u.dll_CPropertySheet::Construct]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + reloc.mfc90u.dll_CPropertySheet::Construct]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x6ad]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x6ad]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x6f4]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x6f4]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x726]
call fcn.1403b8154
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x726]
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x776]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x776]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x7da]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x7da]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x82a]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x82a]
xor r8d, r8d
call fcn.1403b6858
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x110]
lea rcx, [rbp + 0x87a]
call fcn.1403b8154
lea rdx, [rsp + 0x90]
lea rcx, [rbp + 0x87a]
xor r8d, r8d
call fcn.1403b6858
mov esi, dword [rbp + 0x917]
cmp esi, ebx
je 0x1403b4868
mov edx, dword [rbp + reloc.mfc90u.dll_CCmdUI::Enable]
cmp edx, ebx
je 0x1403b4868
mov edi, dword [rbp + 0x91f]
cmp edi, ebx
je 0x1403b4868
movsx eax, byte [rsp + 0x112]
movsx ecx, byte [rsp + 0x110]
imul ecx, eax
lea eax, [rsi + rcx]
mov dword [rbp + 0x917], eax
lea eax, [rdx + rcx]
mov dword [rbp + reloc.mfc90u.dll_CCmdUI::Enable], eax
lea eax, [rdi + rcx]
mov dword [rbp + 0x91f], eax
mov edx, dword [rbp + 0x923]
cmp edx, ebx
je 0x1403b48b1
mov edi, dword [rbp + 0x927]
cmp edi, ebx
je 0x1403b48b1
mov esi, dword [rbp + reloc.mfc90u.dll_COleControl::XOleInPlaceActiveObject::EnableModeless]
cmp esi, ebx
je 0x1403b48b1
movsx ecx, byte [rsp + 0x110]
movsx eax, byte [rsp + 0x112]
imul ecx, eax
sub edx, ecx
sub edi, ecx
sub esi, ecx
mov dword [rbp + 0x923], edx
mov dword [rbp + 0x927], edi
mov dword [rbp + reloc.mfc90u.dll_COleControl::XOleInPlaceActiveObject::EnableModeless], esi
call fcn.1403b31a0
mov ecx, eax
call sub.MSVCR90.dll_srand
call sub.MSVCR90.dll_rand
mov byte [rsp + rbx + 0x110], al
add rbx, r13
cmp rbx, reloc.mfc90u.dll_CDHtmlControlSink::AddRef
jl 0x1403b48bd
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, r13d
mov rcx, qword [rsp + 0x840]
xor rcx, rsp
call fcn.1403c2380
mov rbx, qword [rsp + 0x8a0]
add rsp, 0x850
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret