Function at 0x180009300
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x620
mov qword [rsp + 0xf0], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1800b3020]
xor rax, rsp
mov qword [rsp + 0x5e8], rax
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x48], r8
mov r12, rdx
mov r15, rcx
mov qword [rsp + 0xc8], rcx
xor esi, esi
xor r8d, r8d
lea rdx, [0x180086340]
mov rcx, r12
call qword [sym.imp.mfc100u.dll_CArchive::EnsureSchemaMapExists]
mov r14d, esi
mov ecx, 1
cmp eax, 0xffffffff
cmovne r14d, ecx
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov dword [rsp + 0x70], 0x11
mov dword [rsp + 0x90], esi
mov dword [rsp + 0x94], 0xa
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], rsi
movss xmm6, dword [0x18008c6c8]
movss dword [rsp + 0x74], xmm6
movss xmm7, dword [0x18008c6c4]
movss dword [rsp + 0x78], xmm7
movss xmm8, dword [0x18008c6c0]
movss dword [rsp + 0x7c], xmm8
xor ecx, ecx
movss xmm1, dword [0x18008bf2c]
movss xmm0, dword [0x18008b510]
comiss xmm1, xmm0
jbe 0x180009411
subss xmm1, xmm0
comiss xmm1, xmm0
jae 0x180009411
movabs rax, 0x8000000000000000
mov rcx, rax
jmp 0x18000941b
movabs rax, 0x8000000000000000
cvttss2si r13, xmm1
add r13, rcx
mov qword [rsp + 0x80], r13
xor ecx, ecx
movss xmm1, dword [0x18008bf28]
comiss xmm1, xmm0
jbe 0x180009446
subss xmm1, xmm0
comiss xmm1, xmm0
jae 0x180009446
mov rcx, rax
cvttss2si rdi, xmm1
add rdi, rcx
mov rax, rdi
cmp rdi, 0x11
cmovb rax, rsi
mov qword [rsp + 0x88], rax
mov qword [rsp + 0xb0], rsi
test r14d, r14d
je 0x180009476
call qword [sym.imp.libxl.dll_xlCreateXMLBookCW]
jmp 0x18000947c
call qword [sym.imp.libxl.dll_xlCreateBookCW]
mov qword [rsp + 0xa8], rax
mov rbx, rax
test rax, rax
je 0x1800094a3
lea r8, [0x1800862d0]
lea rdx, str.jaeho_lee
mov rcx, rax
call qword [sym.imp.libxl.dll_xlBookSetKeyW]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, r12
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc100u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
nop
lea r8, [0x18008679c]
lea rdx, [0x1800874a0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc100u.dll_CRecentFileList::ReadList]
test rbx, rbx
je 0x1800094e8
mov rdx, qword [r12]
mov rcx, rbx
call qword [sym.imp.libxl.dll_xlBookSaveW]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
test rbx, rbx
je 0x18000950c
mov rcx, rbx
call qword [sym.imp.libxl.dll_xlBookReleaseW]
mov rbx, rsi
mov qword [rsp + 0xa8], rbx
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
test rbx, rbx
je 0x18000952e
mov rcx, rbx
call qword [sym.imp.libxl.dll_xlBookReleaseW]
mov qword [rsp + 0xa8], rsi
lea rcx, [rsp + 0x60]
call fcn.180002dd0
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov dword [rsp + 0x70], 0x11
mov dword [rsp + 0x90], esi
mov dword [rsp + 0x94], 0xa
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], rsi
movss dword [rsp + 0x74], xmm6
movss dword [rsp + 0x78], xmm7
movss dword [rsp + 0x7c], xmm8
mov qword [rsp + 0x80], r13
cmp rdi, 0x11
cmovb rdi, rsi
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0xb0], rsi
test r14d, r14d
je 0x1800095ac
call qword [sym.imp.libxl.dll_xlCreateXMLBookCW]
jmp 0x1800095b2
call qword [sym.imp.libxl.dll_xlCreateBookCW]
mov qword [rsp + 0xa8], rax
test rax, rax
je 0x1800095d6
lea r8, [0x1800862d0]
lea rdx, str.jaeho_lee
mov rcx, rax
call qword [sym.imp.libxl.dll_xlBookSetKeyW]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r15 + 0xf0]
mov rbx, qword [rbx]
cmp rbx, qword [r15 + 0xf0]
je 0x1800095ff
mov rcx, qword [rbx + 0x10]
call sym.HgPreviewU.dll_public:_void___cdecl_CHgPreViewGridCtrl::PreviewMerge_void____ptr64
jmp 0x1800095e8
cmp dword [rsp + 0x670], 0
je 0x1800096ef
xor edx, edx
lea rcx, [rsp + 0x100]
call sym.HgPreviewU.dll_public:_void___cdecl_CHgProgressBarCtrl::constructor_class_CWnd____ptr64____ptr64
nop
xor r8d, r8d
mov edx, 0x1b5e
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc100u.dll_CMFCColorBar::ContextToSize]
xor edx, edx
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc100u.dll_CAutoHideDockSite::CanAcceptPane]
mov edx, 5
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc100u.dll_CMFCRibbonButtonsGroup::SetParentCategory]
lea rdx, [0x1800874a8]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc100u.dll_COleServerItem::XOleObject::SetMoniker]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x100]
lea r8, [r15 + 0xf0]
mov rdx, r12
lea rcx, [rsp + 0x60]
call sym.HgPreviewU.dll__SaveAs_HgPreviewXLControl__QEAAXAEBV__CStringT__WV__StrTraitMFC_DLL__WV__ChTraitsCRT__W_ATL_____ATL__AEBV__lis
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdi, qword [rsp + 0xa8]
test rdi, rdi
je 0x1800096d1
mov rcx, rdi
call qword [sym.imp.libxl.dll_xlBookReleaseW]
mov rdi, rsi
mov qword [rsp + 0xa8], rsi
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc100u.dll_DDX_Scroll]
nop
lea rcx, [rsp + 0x100]
call sym.HgPreviewU.dll_public_virtual:_void___cdecl_CHgProgressBarCtrl::destructor_void____ptr64
jmp 0x180009750
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [r15 + 0xf0]
mov rdx, r12
lea rcx, [rsp + 0x60]
call sym.HgPreviewU.dll__SaveAs_HgPreviewXLControl__QEAAXAEBV__CStringT__WV__StrTraitMFC_DLL__WV__ChTraitsCRT__W_ATL_____ATL__AEBV__lis
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdi, qword [rsp + 0xa8]
test rdi, rdi
je 0x180009750
mov rcx, rdi
call qword [sym.imp.libxl.dll_xlBookReleaseW]
mov rdi, rsi
mov qword [rsp + 0xa8], rsi
mov rax, qword [rsp + 0x48]
cmp dword [rax], 0
je 0x1800097fa
lea r8, str.EXCEL_output_completion.__r_nWould_you_like_to_open_the_output_Excel_file__
lea rdx, str.Eng_ABim
lea rcx, [rsp + 0x48]
call fcn.1800226a0
nop
xor r8d, r8d
lea edx, [r8 + 4]
mov rcx, qword [rax]
call qword [sym.imp.mfc100u.dll_AfxInitExtensionModule]
cmp eax, 6
sete bl
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
test bl, bl
je 0x1800097fa
lea rdx, [0x1800866ac]
lea rcx, [rsp + 0x40]
call qword [0x18007ff50]
nop
mov r8, qword [r12]
lea rdx, str.__s_
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc100u.dll_CMFCRibbonRecentFilesList::FillList]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
mov r9, qword [rsp + 0x40]
lea r8, str.Excel.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
jmp 0x180009806
test rdi, rdi
je 0x180009833
mov rcx, rdi
call qword [sym.imp.libxl.dll_xlBookReleaseW]
jmp 0x18000982b
mov qword [rsp + 0xa8], rsi
lea rcx, [rsp + 0x60]
call fcn.180002dd0
mov rcx, qword [rsp + 0x5e8]
xor rcx, rsp
call fcn.180021350
lea r11, [rsp + 0x620]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret