Function at 0x140099b50
Capabilities:
Check mutex on windows
Create directory
Create process on windows
Create thread
Delete file
Delete registry value
Discover group policy via gpresult
Download url
Get common file path
Get hostname
Get proxy
Move file
Persist via app paths registry key
Query or enumerate registry value
Receive data
Schedule task via at
Self delete
Set registry value
Terminate thread

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x10a40
call fcn.14010bc30
sub rsp, rax
mov qword [rsp + 0x2070], 0xfffffffffffffffe
movaps xmmword [rsp + 0x10a30], xmm6
mov rax, qword [0x1401d61d8]
xor rax, rsp
mov qword [rsp + 0x10a20], rax
movzx edi, r9b
mov r15, r8
mov qword [rsp + 0x58], rdx
mov r13, rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x390], rdx
mov qword [rsp + 0x90], r8
mov r12, qword [rsp + 0x10aa0]
mov qword [rsp + 0x398], r12
mov rsi, qword [rsp + 0x10aa8]
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x3a0], rsi
test r8, r8
je 0x140099c53
lea r14, [r8 + 0x220]
mov rdx, r14
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonUndoButton::GetIconSize]
mov r8, rax
lea rdx, [0x140144758]
lea rcx, [rsp + 0x9f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x9f0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
mov ebx, eax
lea rcx, [rsp + 0x9f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test ebx, ebx
jne 0x140099c6d
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, rsi
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor eax, eax
jmp 0x14009a2fc
xor sil, sil
lea rdx, str.found
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x140099c8e
movzx esi, dil
jmp 0x1400a8f7d
lea rdx, [0x140160680]
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x140099cb0
movzx esi, dil
xor sil, 1
jmp 0x1400a8f7d
lea rdx, str.foundandpushed
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x140099d8a
test dil, dil
jne 0x140099d6c
lea rdx, [r15 + 0x230]
lea rcx, [rsp + 0x518]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x518]
call fcn.140041590
test al, al
je 0x140099d2d
lea rdx, [rsp + 0x518]
lea rcx, [rsp + 0x14c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.14005a760
jmp 0x140099d32
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.140070a00
mov rbx, rax
lea rcx, [rsp + 0x518]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, qword [rsp + 0x68]
jmp 0x14009a2f3
xor r8d, r8d
lea rdx, str.pressed
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400a8f7d
lea rdx, str.foundanddisabled
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x140099e3e
test dil, dil
jne 0x140099e20
lea rdx, [r15 + 0x230]
lea rcx, [rsp + 0x520]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x520]
call fcn.140041590
test al, al
je 0x140099e03
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x2058]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.14005a760
jmp 0x140099e08
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.140070a00
mov rbx, rax
lea rcx, [rsp + 0x520]
jmp 0x140099d45
xor r8d, r8d
lea rdx, str.visible_unavailable
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400a8f7d
lea rdx, str.checked
lea rcx, [rsp + 0x50]
call fcn.14000ca00
xor r8d, r8d
test al, al
je 0x140099e71
lea rdx, [0x14014fe78]
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400a8f7d
lea rdx, str.checkdesc
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rcx, [rsp + 0x50]
test eax, eax
js 0x140099f54
xor r8d, r8d
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2060]
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2060]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
mov r14, qword [rsp + 0x68]
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f82
lea rdx, str.iswin10
call fcn.14000ca00
test al, al
je 0x140099f6e
call fcn.1400ec9a0
jmp 0x1400a8f7a
lea rdx, str.iswin64
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x140099f8d
call fcn.1400ec8e0
jmp 0x1400a8f7a
lea rdx, str.iswin10or81
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x140099fcb
call fcn.1400ec9a0
test al, al
jne 0x14009ad9d
call fcn.1400ecb30
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x68]
test al, al
jne 0x14009ada7
jmp 0x14009a26c
lea rdx, str.iswin81
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x140099fea
call fcn.1400ecb30
jmp 0x1400a8f7a
lea rdx, str.isJavaInstalled
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009a05b
lea rdx, str.java
lea rcx, [rsp + 0x2068]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
xor r9d, r9d
mov r8b, 1
xor edx, edx
mov rcx, rax
call fcn.1400f22a0
movzx esi, al
test al, al
jne 0x1400a8f7d
lea rdx, str.java
lea rcx, [rsp + 0xd38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
xor r9d, r9d
mov r8b, 1
lea edx, [r9 + 1]
mov rcx, rax
call fcn.1400f22a0
jmp 0x1400a8f7a
lea rdx, str.isjavainstalledjavatesting
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009a0ad
lea rdx, [0x140144758]
lea rcx, [rsp + 0xd18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xd18]
call fcn.1400e9000
cmp eax, 1
setge sil
lea rcx, [rsp + 0xd18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.isOSwindow7
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009a0fd
lea rcx, [rsp + 0xd28]
call fcn.1400f9450
nop
lea rdx, [0x140160784]
lea rcx, [rsp + 0xd28]
call fcn.14000ca00
test al, al
setne sil
lea rcx, [rsp + 0xd28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.isjavaupdateenabled
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009a11c
call fcn.1400ec300
jmp 0x1400a8f7a
lea rdx, str.readfnmsanddetectifneedsminorupdate
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009a169
lea rcx, [rsp + 0x6c8]
call fcn.1400df410
nop
lea rdx, str.minor
lea rcx, [rsp + 0x6c8]
call fcn.14000ca00
movzx esi, al
lea rcx, [rsp + 0x6c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.detectifgroupavailable
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009a188
call fcn.1400df1a0
jmp 0x1400a8f7a
xor r8d, r8d
lea rdx, str.isprinterinstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009a327
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xd40]
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xd40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0xd48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor edx, edx
mov rcx, rax
call fcn.1400ecd00
nop
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x68]
lea rdx, [r15 + reloc.mfc140u.dll_CHandleMap::CHandleMap]
lea rcx, [rsp + 0x6b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x6b0]
call fcn.140041590
test al, al
je 0x14009a2c1
lea rdx, [rsp + 0x6b0]
lea rcx, [rsp + 0xd20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, rdi
call fcn.14005a760
nop
lea rcx, [rsp + 0x6b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, rdi
call fcn.140070a00
mov rbx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rax, rbx
mov rcx, qword [rsp + 0x10a20]
xor rcx, rsp
call fcn.14010bb40
movaps xmm6, xmmword [rsp + 0x10a30]
add rsp, 0x10a40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rdx, str.isprinterdefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009a421
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xd50]
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xd50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x6d0]
call fcn.1400e82d0
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x6d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
sete sil
lea rcx, [rsp + 0x6d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.makeprinterdefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009a4f2
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xd58]
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xd58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0xd60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov dl, 1
mov rcx, rax
call fcn.1400ecd00
nop
lea rcx, [rsp + 0x288]
jmp 0x14009a25c
lea rdx, str.changePrinterAlignment
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009a50d
call fcn.1401016b0
jmp 0x1400a8f7a
xor r8d, r8d
lea rdx, str.isApplicationInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009ac27
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, str.exactmatch
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x88]
test eax, eax
js 0x14009a5e7
lea rdx, [0x1401531bc]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xd68]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xd68]
jmp 0x14009a628
lea rdx, [0x140152d08]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xd70]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xd70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.syngene_
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009a7aa
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xd78]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xd78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x1401456c0]
lea rcx, [rsp + 0x6e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.wmic_product_get_name__Find__
lea rcx, [rsp + 0x6d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x6d8]
lea rcx, [rsp + 0xd88]
call fcn.140006190
nop
lea r8, [rsp + 0x6e0]
mov rdx, rax
lea rcx, [rsp + 0xd80]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x528]
call fcn.1400f5c80
nop
lea rcx, [rsp + 0xd88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x528]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x528]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
nop
lea rcx, [rsp + 0x528]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r14b, 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, str.exactmatch
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
test eax, eax
js 0x14009a891
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xd90]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xd90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [0x140145960]
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, str.exactmatch0
lea rcx, [rsp + 0x3c0]
call fcn.14000ca00
test al, al
je 0x14009a90d
xor r14b, r14b
jmp 0x14009a90d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009a90d
lea rdx, [0x140148ed8]
lea rcx, [rsp + 0x6e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x6e8]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xd98]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xd98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xda0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r9d, r9d
movzx r8d, r14b
xor edx, edx
mov rcx, rax
call fcn.1400f22a0
movzx esi, al
test al, al
jne 0x14009a995
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xda8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r9d, r9d
movzx r8d, r14b
lea edx, [r9 + 1]
mov rcx, rax
call fcn.1400f22a0
movzx esi, al
test al, al
jne 0x14009a995
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xdb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov r9b, 1
movzx r8d, r14b
xor edx, edx
mov rcx, rax
call fcn.1400f22a0
movzx esi, al
xor r8d, r8d
lea rdx, str.version_
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009abf6
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xdb8]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xdb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xdc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x530]
call fcn.1400f6990
nop
lea rdx, str.Not_Found
lea rcx, [rsp + 0x530]
call fcn.14000ca00
test al, al
je 0x14009ab14
lea rdx, str._._Please_contact_help_desk._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0x6f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.Not_able_to_find_version_of__
lea rcx, [rsp + 0x6f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x6f0]
lea rcx, [rsp + 0xdd0]
call fcn.140006190
nop
lea r8, [rsp + 0x6f8]
mov rdx, rax
lea rcx, [rsp + 0xdc8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xdc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xdd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
jmp 0x14009abe7
lea rdx, str.version_Change
lea rcx, [rsp + 0x530]
call fcn.14000ca00
test al, al
je 0x14009abe4
lea rdx, str.__version_is_not_compatable._Please_contact_help_desk._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0x708]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401456c0]
lea rcx, [rsp + 0x700]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x700]
lea rcx, [rsp + 0xde0]
call fcn.140006190
nop
lea r8, [rsp + 0x708]
mov rdx, rax
lea rcx, [rsp + 0xdd8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xdd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xde0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x700]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x708]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
jmp 0x14009abe7
mov sil, 1
lea rcx, [rsp + 0x530]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.killExplorer
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009ae09
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xde8]
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xde8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x538]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x14014b540]
lea rcx, [rsp + 0x290]
call fcn.14000ca00
test al, al
je 0x14009ad36
lea rdx, str.taskkill__F__IM_explorer.exe__T
lea rcx, [rsp + 0xdf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xdf8]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x538]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xdf8]
jmp 0x14009ad79
lea rdx, str.start__windir_explorer.exe
lea rcx, [rsp + 0xe00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xe08]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x538]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x538]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
lea rdx, [r15 + 0x218]
lea rcx, [rsp + 0x6a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x6a8]
call fcn.140041590
test al, al
je 0x14009adfc
lea rdx, [rsp + 0x6a8]
lea rcx, [rsp + 0x2050]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, rdi
call fcn.14005a760
nop
lea rcx, [rsp + 0x6a8]
jmp 0x14009a2c9
lea rdx, str.IsmcAfeeVSE
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009b03d
xor sil, sil
lea rdx, str.C:WindowsiAssistDATversion.txt
lea rcx, [rsp + 0x458]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x458]
lea rcx, [rsp + 0xe10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
lea rdx, [rsp + 0x458]
test al, al
je 0x14009afe4
lea rcx, [rsp + 0xe18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x198]
call fcn.1400edfb0
nop
xor r8d, r8d
lea rdx, str.DAT_version
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009af3a
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
cmp eax, 0xa
jl 0x14009afd4
xor r8d, r8d
lea rdx, [0x140160ab8]
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x540]
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
movzx ebx, word [rax]
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
cmp bx, 0x39
sete sil
jmp 0x14009afd4
lea rax, [rsp + 0xe20]
mov qword [rsp + 0x70], rax
lea rdx, [0x1401486fc]
lea rcx, [rsp + 0xe20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Unable_to_find_DAT_Version
lea rcx, [rsp + 0xe28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rax, [rsp + 0xe30]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0xe30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.founded_data:
lea rcx, [rsp + 0xe38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009b02a
lea rax, [rsp + 0xe40]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0xe40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.File_Not_found
lea rcx, [rsp + 0xe48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x458]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, [0x140160b00]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009b1eb
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe50]
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0x710]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xe60]
call fcn.1400f7b40
nop
lea r8, [rsp + 0x710]
mov rdx, rax
lea rcx, [rsp + 0xe58]
call fcn.140006190
nop
lea r8, [rsp + 0x298]
mov rdx, rax
lea rcx, [rsp + 0x718]
call fcn.140006190
nop
lea rcx, [rsp + 0xe58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x710]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x718]
lea rdx, [0x140160b18]
lea rcx, [rsp + 0xe68]
call fcn.140099860
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xe68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x718]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x298]
jmp 0x14009ad97
lea rdx, str.runscriptforclientspecific
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009b3a7
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe70]
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140149428]
lea rcx, [rsp + 0x728]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3a8
lea rcx, [rsp + 0x720]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea r8, [rsp + 0x728]
lea rdx, [rsp + 0x720]
lea rcx, [rsp + 0xe78]
call fcn.140006190
nop
lea r8, [rsp + 0x2a0]
mov rdx, rax
lea rcx, [rsp + 0x730]
call fcn.140006190
nop
lea rcx, [rsp + 0xe78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x720]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x728]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x730]
lea rdx, [0x140160b18]
lea rcx, [rsp + 0xe80]
call fcn.140099860
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xe80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x730]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2a0]
jmp 0x14009ad97
lea rdx, str.ShowApplicationDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009b507
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xe88]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CDHtmlDialog::DDX_DHtml_SelectIndex]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDHtmlDialog::DDX_DHtml_SelectIndex]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140144758]
lea rcx, [rsp + 0x50]
call fcn.140041590
test al, al
je 0x14009b4a8
lea rax, [rsp + 0xe98]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xe98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
xor edx, edx
lea rcx, [rsp + 0x6730]
call fcn.1400b2650
nop
lea rdx, [0x140160b84]
lea rcx, [rsp + 0x50]
call fcn.14000ca00
movzx ecx, byte [rsp + 0x6ee8]
mov edi, 1
test al, al
cmovne ecx, edi
mov byte [rsp + 0x6ee8], cl
lea rcx, [rsp + 0x6730]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x6730]
call fcn.1400b26f0
jmp 0x1400a8f7d
lea rdx, [0x140160b88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009bb4e
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xorps xmm6, xmm6
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xea0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xea0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xea8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xea8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x3d0]
call fcn.1400f8f70
nop
lea rdx, [0x140160ba0]
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009b6ac
lea rdx, [0x140146a30]
lea rcx, [rsp + 0x740]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0x738]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x738]
lea rcx, [rsp + 0xeb0]
call fcn.140006190
nop
lea r8, [rsp + 0x740]
mov rdx, rax
lea rcx, [rsp + 0x748]
call fcn.140006190
nop
lea rcx, [rsp + 0xeb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x738]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x740]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x748]
call fcn.1400f6b00
movaps xmm6, xmm0
lea rcx, [rsp + 0x748]
jmp 0x14009b843
lea rdx, [0x140160ba8]
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009b77a
lea rdx, [0x140146a20]
lea rcx, [rsp + 0x758]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0x750]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x750]
lea rcx, [rsp + 0xeb8]
call fcn.140006190
nop
lea r8, [rsp + 0x758]
mov rdx, rax
lea rcx, [rsp + 0x760]
call fcn.140006190
nop
lea rcx, [rsp + 0xeb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x750]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x758]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x760]
call fcn.1400f6b00
movaps xmm6, xmm0
lea rcx, [rsp + 0x760]
jmp 0x14009b843
lea rdx, [0x140160bb8]
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009b849
lea rdx, [0x140146a50]
lea rcx, [rsp + 0x770]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0x768]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x768]
lea rcx, [rsp + 0xec0]
call fcn.140006190
nop
lea r8, [rsp + 0x770]
mov rdx, rax
lea rcx, [rsp + 0x778]
call fcn.140006190
nop
lea rcx, [rsp + 0xec0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x768]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x770]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x778]
call fcn.1400f6b00
movaps xmm6, xmm0
lea rcx, [rsp + 0x778]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mulss xmm6, dword [0x140165218]
cvttss2si r8d, xmm6
movss xmm0, dword [0x140165228]
lea rcx, [rsp + 0x150]
comiss xmm0, xmm6
jbe 0x14009b99c
lea rdx, [0x140152cf0]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
lea rdx, str._MB._click_on_NEXT_STEP
lea rcx, [rsp + 0x790]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str._is
lea rcx, [rsp + 0x788]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x140160be8]
lea rcx, [rsp + 0x780]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x780]
lea rcx, [rsp + 0xee0]
call fcn.140006190
nop
lea r8, [rsp + 0x788]
mov rdx, rax
lea rcx, [rsp + 0xed8]
call fcn.140006190
nop
lea r8, [rsp + 0x150]
mov rdx, rax
lea rcx, [rsp + 0xed0]
call fcn.140006190
nop
lea r8, [rsp + 0x790]
mov rdx, rax
lea rcx, [rsp + 0xec8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xec8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xed0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xed8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xee0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x780]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x788]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x790]
jmp 0x14009bb2b
mulss xmm6, dword [0x14016521c]
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
movq r8, xmm2
lea rdx, [0x1401603e0]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
xor r8d, r8d
lea rdx, [0x140156a0c]
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea r8d, [rax + 3]
lea rdx, [rsp + 0xee8]
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xee8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._GB._click_on_NEXT_STEP
lea rcx, [rsp + 0x7a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str._is
lea rcx, [rsp + 0x7a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x140160be8]
lea rcx, [rsp + 0x798]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x798]
lea rcx, [rsp + 0xf08]
call fcn.140006190
nop
lea r8, [rsp + 0x7a0]
mov rdx, rax
lea rcx, [rsp + 0xf00]
call fcn.140006190
nop
lea r8, [rsp + 0x150]
mov rdx, rax
lea rcx, [rsp + 0xef8]
call fcn.140006190
nop
lea r8, [rsp + 0x7a8]
mov rdx, rax
lea rcx, [rsp + 0xef0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xef0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xef8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x798]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x150]
jmp 0x14009a25c
xor r8d, r8d
lea rdx, str.createRestorePoint
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009bd22
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0x7b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xf20]
call fcn.1400f7b40
nop
lea r8, [rsp + 0x7b0]
mov rdx, rax
lea rcx, [rsp + 0xf18]
call fcn.140006190
nop
lea r8, [rsp + 0x2a8]
mov rdx, rax
lea rcx, [rsp + 0x7c0]
call fcn.140006190
nop
lea rcx, [rsp + 0xf18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140160c38]
lea rcx, [rsp + 0x7b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x7c0]
lea rdx, [rsp + 0x7b8]
lea rcx, [rsp + 0xf28]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xf28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x2ee0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x7c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2a8]
jmp 0x14009ad97
lea rdx, str.IsRegistryKeyExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009bf2d
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x548]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xf30]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf38]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140160ab8]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0xf40]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xf48]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x548]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0xf50]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x548]
lea rcx, [rsp + 0xf50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, [rsp + 0x550]
lea rcx, [rsp + 0xf58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400f2e80
movzx esi, al
lea rcx, [rsp + 0x548]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.AssigningIP
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009bf8d
xor edx, edx
lea rcx, [rsp + 0x36f0]
call fcn.1400121f0
nop
lea rcx, [rsp + 0x36f0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp eax, 1
jne 0x14009bf6d
movzx esi, al
jmp 0x14009bf7b
movzx esi, sil
xor r14d, r14d
cmp eax, 2
cmove esi, r14d
lea rcx, [rsp + 0x36f0]
call fcn.140012290
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.UserEnvironmentVariables
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009bfec
xor edx, edx
lea rcx, [rsp + 0x33c0]
call fcn.140048390
nop
lea rcx, [rsp + 0x33c0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
jne 0x14009bfcc
mov sil, 1
jmp 0x14009bfda
movzx esi, sil
xor r14d, r14d
cmp eax, 2
cmove esi, r14d
lea rcx, [rsp + 0x33c0]
call fcn.140048460
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.ShowRDPDialog
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009c122
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf60]
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.hidecertificatefix
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor edx, edx
test eax, eax
js 0x14009c0e3
lea rcx, [rsp + 0x2a00]
call fcn.1400c24b0
nop
mov byte [rsp + 0x2b70], 0
lea rcx, [rsp + 0x2a00]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x2a00]
jmp 0x14009c10f
lea rcx, [rsp + 0x2c60]
call fcn.1400c24b0
nop
mov byte [rsp + 0x2dd0], 1
lea rcx, [rsp + 0x2c60]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x2c60]
call fcn.1400c2510
nop
lea rcx, [rsp + 0x2b0]
jmp 0x14009a25c
lea rdx, str.hostfileDlg
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009c3c4
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf68]
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor dil, dil
xor edx, edx
lea rcx, [rsp + 0x2500]
call fcn.140075b90
nop
lea rdx, str.NoDialog
lea rcx, [rsp + 0x2b8]
call fcn.14000ca00
test al, al
je 0x14009c1fb
mov byte [rsp + 0x2680], 1
mov dil, 1
lea rdx, str.Host.txt
lea rcx, [rsp + 0x7d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.AnakageCoursesAnakageFilesSelfHealSolutions
lea rcx, [rsp + 0x7d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x390
lea rcx, [rsp + 0x7c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0xf88]
call fcn.1400fa2b0
nop
lea r8, [rsp + 0x7d0]
mov rdx, rax
lea rcx, [rsp + 0xf80]
call fcn.140006190
nop
lea r8, [rsp + 0x7c8]
mov rdx, rax
lea rcx, [rsp + 0xf78]
call fcn.140006190
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
mov r8, qword [rax + 8]
mov r8, qword [r8 + 0x90]
mov rdx, rbx
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::Detach]
call fcn.1400997c0
nop
lea r8, [rsp + 0x7d8]
mov rdx, rax
lea rcx, [rsp + 0x558]
call fcn.140006190
nop
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::Detach]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x558]
lea rcx, [rsp + 0xf90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x2500]
call fcn.1400771c0
lea rcx, [rsp + 0x558]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test dil, dil
jne 0x14009c394
lea rcx, [rsp + 0x2500]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rcx, rax
mov al, 1
test ecx, ecx
jne 0x14009c387
movzx esi, al
jmp 0x14009c394
movzx esi, al
xor r14d, r14d
cmp ecx, 2
cmove esi, r14d
lea rcx, [rsp + 0x558]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2500]
call fcn.140075c20
nop
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.SelectZipFile
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009c773
lea rcx, [rsp + 0x568]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov edi, 1
mov dword [rsp + 0x40], edi
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
mov edx, edi
lea rcx, [rsp + 0xe8b0]
call sub.mfc140u.dll_CEnumConnections::CEnumConnections
nop
lea rcx, [rsp + 0xe8b0]
call sub.mfc140u.dll_CD2DRadialGradientBrush::Detach
cmp rax, rdi
jne 0x14009c469
lea rdx, [rsp + 0xf98]
lea rcx, [rsp + 0xe8b0]
call sub.mfc140u.dll_Ordinal_6090
nop
mov rdx, rax
lea rcx, [rsp + 0x568]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x568]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xfd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
mov edx, 0x5c
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov edi, eax
sub ebx, eax
lea r8d, [rbx - 1]
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov r8d, edi
lea rdx, [rsp + 0xfa0]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str..zip
lea rcx, [rsp + 0x560]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009c722
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xfa8]
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0x7e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xfb8]
call fcn.1400f7b40
nop
lea r8, [rsp + 0x7e0]
mov rdx, rax
lea rcx, [rsp + 0xfb0]
call fcn.140006190
nop
lea r8, [rsp + 0x2c0]
mov rdx, rax
lea rcx, [rsp + 0x7f0]
call fcn.140006190
nop
lea rcx, [rsp + 0xfb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xfb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0xfc0]
mov qword [rsp + 0x70], rax
lea rdx, [0x140144b88]
lea rcx, [rsp + 0x7e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x7e8]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xfd0]
call fcn.140006190
nop
lea r8, [rsp + 0x560]
mov rdx, rax
lea rcx, [rsp + 0xfc0]
call fcn.140006190
mov rbx, rax
lea rdx, [rsp + 0x7f0]
lea rcx, [rsp + 0xfc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.1400ef3a0
nop
lea rcx, [rsp + 0xfd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x7f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009c725
xor sil, sil
lea rcx, [rsp + 0x560]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xfd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe8b0]
call sub.mfc140u.dll_CDockingPanesRow::CDockingPanesRow
nop
lea rcx, [rsp + 0x568]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.controlAudioSettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009c7e0
lea rcx, [rsp + 0x82]
call fcn.1400134f0
nop
mov dl, 1
lea rcx, [rsp + 0x82]
call fcn.140013850
mov ebx, eax
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x82]
call fcn.140013b50
cmp ebx, 1
ja 0x14009c7cb
test eax, eax
jne 0x14009c7cb
mov sil, 1
jmp 0x14009c7ce
xor sil, sil
lea rcx, [rsp + 0x82]
call fcn.140013500
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.negativeControlAudioSettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009c84f
lea rcx, [rsp + 0x80]
call fcn.1400134f0
nop
xor edx, edx
lea rcx, [rsp + 0x80]
call fcn.140013850
mov ebx, eax
mov r8b, 1
movzx edx, r8b
lea rcx, [rsp + 0x80]
call fcn.140013b50
cmp ebx, 1
ja 0x14009c83a
test eax, eax
jne 0x14009c83a
mov sil, 1
jmp 0x14009c83d
xor sil, sil
lea rcx, [rsp + 0x80]
call fcn.140013500
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.Determinedefaultprinter
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009ce16
lea rcx, [rsp + 0x570]
call fcn.1400fa2b0
nop
lea rdx, str.printer.txt
lea rcx, [rsp + 0x7f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x7f8]
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0xfe0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x570]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.wmic_printer_get_default_name_portname
lea rcx, [rsp + 0x818]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x818]
lea rcx, [rsp + 0xfe8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400f5c80
nop
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, str.TRUE
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009cacc
lea r8d, [rax - 2]
lea rdx, [rsp + 0xff0]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xff0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14014b5a8]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xff8]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xff8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov edx, 0x20
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1000]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1000]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1008]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1008]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea r8, [rsp + 0x3d8]
lea rdx, str.ping
lea rcx, [rsp + 0x1010]
call fcn.140099860
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call fcn.1400f5c80
nop
lea rdx, str.PORTPROMPT:
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
js 0x14009cb2a
lea rdx, [0x140145960]
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
xor r8d, r8d
lea rdx, str.Ping_request_could_not_find
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009cc8d
xor r8d, r8d
lea rdx, str.Request_timed_out.
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009cc8d
mov sil, 1
lea rax, [rsp + 0x1018]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
lea rcx, [rsp + 0x1018]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.Printer_ping_sucess
lea rcx, [rsp + 0x1020]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
jne 0x14009ccef
lea rdx, str.__Change_your_default_printer_if_this_is_not_correct
lea rcx, [rsp + 0x808]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.Your_printouts_will_go_to__
lea rcx, [rsp + 0x800]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x158]
lea rdx, [rsp + 0x800]
lea rcx, [rsp + 0x1030]
call fcn.140006190
nop
lea r8, [rsp + 0x808]
mov rdx, rax
lea rcx, [rsp + 0x1028]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1028]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1030]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x800]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x808]
jmp 0x14009cd8d
xor sil, sil
lea rax, [rsp + 0x1038]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
lea rcx, [rsp + 0x1038]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.Printer_ping_failed
lea rcx, [rsp + 0x1040]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
je 0x14009cd09
lea rdx, str.Please_make_any_of_the_your_configured_printers_to_Defalult_printer.
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
jmp 0x14009cd93
lea rdx, str._._It_is_not_connecting._Please_connect_to_VPN_or_LAN._If_you_still_cannot_connect_please_contact_your_IT_support
lea rcx, [rsp + 0x810]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x158]
lea rdx, [0x140160fe8]
lea rcx, [rsp + 0x1050]
call fcn.140099860
nop
lea r8, [rsp + 0x810]
mov rdx, rax
lea rcx, [rsp + 0x1048]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1048]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1050]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x810]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x218]
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x818]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x570]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.McafeeMonitor
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009cf97
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1058]
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1058]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0x820]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1068]
call fcn.1400f7b40
nop
lea r8, [rsp + 0x820]
mov rdx, rax
lea rcx, [rsp + 0x1060]
call fcn.140006190
nop
lea r8, [rsp + 0x2c8]
mov rdx, rax
lea rcx, [rsp + 0x828]
call fcn.140006190
nop
lea rcx, [rsp + 0x1060]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1068]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x820]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x828]
lea rcx, [rsp + 0x1070]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1078]
call fcn.1400f5c80
lea rcx, [rsp + 0x1078]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x828]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2c8]
jmp 0x14009ad97
lea rdx, str.RefreshSnowAgent
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009d18b
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1080]
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1080]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0x830]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1090]
call fcn.1400f7b40
nop
lea r8, [rsp + 0x830]
mov rdx, rax
lea rcx, [rsp + 0x1088]
call fcn.140006190
nop
lea r8, [rsp + 0x2d0]
mov rdx, rax
lea rcx, [rsp + 0x848]
call fcn.140006190
nop
lea rcx, [rsp + 0x1088]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1090]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x830]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x848]
lea rcx, [rsp + 0x1098]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x840]
call fcn.1400f5c80
nop
lea rax, [rsp + 0x10a0]
mov qword [rsp + 0x70], rax
lea rdx, str.RefreshSnowAgent:
lea rcx, [rsp + 0x838]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401486fc]
lea rcx, [rsp + 0x10a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea r8, [rsp + 0x840]
lea rdx, [rsp + 0x838]
lea rcx, [rsp + 0x10a8]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x838]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x840]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x848]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2d0]
jmp 0x14009ad97
lea rdx, str.RefreshSCCM
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009d333
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x10b0]
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x10c0]
call fcn.1400f7b40
nop
lea r8, str.AnakageFilesVBScripts_
mov rdx, rax
lea rcx, [rsp + 0x10b8]
call fcn.1400997c0
nop
lea r8, [rsp + 0x2d8]
mov rdx, rax
lea rcx, [rsp + 0x858]
call fcn.140006190
nop
lea rcx, [rsp + 0x10b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x10c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x858]
lea rdx, [0x140161140]
lea rcx, [rsp + 0x10c8]
call fcn.140099860
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x850]
call fcn.1400f5c80
nop
lea rax, [rsp + 0x10d0]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x850]
lea rcx, [rsp + 0x10d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.RefreshSCCM:
lea rcx, [rsp + 0x10d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x850]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x858]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2d8]
jmp 0x14009ad97
lea rdx, str.DeleteRegistryKey
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009d402
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x10e0]
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x10e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400de3e0
nop
lea rcx, [rsp + 0x2e0]
jmp 0x14009ad97
lea rdx, str.DeletecacheFiles
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d55f
lea rcx, [rsp + 0x578]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x880]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x878]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x10f8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea r8, [rsp + 0x878]
lea rdx, [rsp + 0x880]
lea rcx, [rsp + 0x578]
call fcn.1400eb4a0
lea rdx, str.AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rsp + 0x868]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0x860]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x578]
lea rdx, [rsp + 0x860]
lea rcx, [rsp + 0x10f0]
call fcn.140006190
nop
lea r8, [rsp + 0x868]
mov rdx, rax
lea rcx, [rsp + 0x870]
call fcn.140006190
nop
lea rcx, [rsp + 0x10f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x860]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x868]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x870]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400de060
nop
lea rcx, [rsp + 0x870]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x10f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x878]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x880]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x578]
jmp 0x14009a25c
xor r8d, r8d
lea rdx, str.ipPing
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d775
mov sil, 1
lea rdx, str.10.5.140.198
lea rcx, [rsp + 0x8a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.10.5.140.199
lea rcx, [rsp + 0x898]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.ping__n_2
lea rcx, [rsp + 0x888]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x8a0]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + reloc.mfc140u.dll_COleCntrFrameWndEx::EnableAutoHidePanes]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x108]
call fcn.1400f5c80
nop
lea rcx, [rsp + 0x888]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor r8d, r8d
lea rdx, str.could_not_find_host
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009d666
xor r8d, r8d
lea rdx, str.general_failure
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009d666
xor r8d, r8d
lea rdx, str.destination_host_unreachable
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d744
lea rdx, str.ping__n_2
lea rcx, [rsp + 0x890]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x898]
lea rdx, [rsp + 0x890]
lea rcx, [rsp + reloc.mfc140u.dll_CCmdTarget::EnableAutomation]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1110]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1110]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x890]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor sil, sil
xor r8d, r8d
lea rdx, str.could_not_find_host
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009d741
xor r8d, r8d
lea rdx, str.general_failure
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009d741
xor r8d, r8d
lea rdx, str.destination_host_unreachable
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d744
xor sil, sil
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x898]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.DelRegistryKeyAndSubKey
lea rcx, [rsp + 0x50]
call fcn.14000ca00
xor r8d, r8d
lea rcx, [rsp + 0x50]
test al, al
je 0x14009d848
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1118]
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1118]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x1120]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400dd3a0
nop
lea rcx, [rsp + 0x2e8]
jmp 0x14009ad97
lea rdx, str.createRestorePoint
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009da14
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1128]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0x8a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1138]
call fcn.1400f7b40
nop
lea r8, [rsp + 0x8a8]
mov rdx, rax
lea rcx, [rsp + 0x1130]
call fcn.140006190
nop
lea r8, [rsp + 0x2f0]
mov rdx, rax
lea rcx, [rsp + 0x8b8]
call fcn.140006190
nop
lea rcx, [rsp + 0x1130]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1138]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140160c38]
lea rcx, [rsp + 0x8b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x8b8]
lea rdx, [rsp + 0x8b0]
lea rcx, [rsp + 0x1140]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1140]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x2ee0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x8b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2f0]
jmp 0x14009ad97
lea rdx, str.isFirefoxinstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009dab2
lea rdx, str.C:Program_FilesMozilla_Firefox_firefox.exe
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x1148]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009da9c
lea rdx, str.C:Program_Files__x86_Mozilla_Firefox_firefox.exe
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x3e0]
lea rcx, [rsp + 0x1150]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
setne sil
jmp 0x14009da9f
mov sil, 1
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.isGooglechromeinstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009db58
lea rdx, str.C:Program_Files__x86_GoogleChromeApplicationchrome.exe
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x3e8]
lea rcx, [rsp + 0x1158]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009db42
lea rdx, str.C:Program_FilesGoogleChromeApplicationchrome.exe
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x3e8]
lea rcx, [rsp + 0x1160]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
setne sil
jmp 0x14009db45
mov sil, 1
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.isOfficeInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009dc65
xor sil, sil
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x8c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.skype
lea rcx, [rsp + 0x8c0]
call fcn.14000ca00
lea rcx, [rsp + 0x3f8]
test al, al
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsLync.EXEPath
jne 0x14009dbcb
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsOUTLOOK.EXEPath
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x3f8]
lea rcx, [rsp + 0x1168]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rdx, [rsp + 0x3f0]
mov rcx, rax
call fcn.1400eae00
test eax, eax
jne 0x14009dc34
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
movzx esi, sil
mov edi, 1
test al, al
cmove esi, edi
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.openSilently
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009dd55
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1170]
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1170]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x1178]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1180]
call fcn.1400f5c80
lea rcx, [rsp + 0x1180]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2f8]
jmp 0x14009ad97
lea rdx, str.checkDotNetIsInstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009de4c
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x8d8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x8d8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, str.reg_query__HKLMSOFTWAREMicrosoftNet_Framework_SetupNDP___s
lea rcx, [rsp + 0x8d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x1188]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x8c8]
call fcn.1400f5c80
xor r8d, r8d
lea rdx, str.Version____REG_SZ____2.0.50727.4927
lea rcx, [rsp + 0x8c8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x8c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.isMSIInstaller
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009df62
mov sil, 1
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x400]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.skype
lea rcx, [rsp + 0x8e0]
call fcn.14000ca00
lea rcx, [rsp + 0x400]
test al, al
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsLync.EXEPath
jne 0x14009deb7
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsOUTLOOK.EXEPath
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0x1190]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rdx, [rsp + 0x300]
mov rcx, rax
call fcn.1400eae00
test eax, eax
jne 0x14009df2e
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor r8d, r8d
lea rdx, str.root
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009df31
xor sil, sil
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x400]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.isWPSInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e007
lea rdx, str.C:Program_Files__x86_WPS_InteractiveWPS_Interactive.exe
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x408]
lea rcx, [rsp + 0x1198]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009dff1
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x408]
lea rcx, [rsp + 0x11a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
movzx esi, al
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.isWePresentInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e172
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x11a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x11b0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov edx, 1
lea rcx, [rsp + 0x50]
call fcn.140099660
test al, al
je 0x14009e0ea
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.C:Program_Files__x86_MirrorOpMirrorOp.exe
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x410]
lea rcx, [rsp + 0x11b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009e15c
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x410]
lea rcx, [rsp + 0x11c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
movzx esi, al
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.isFileExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e280
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x11c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x11d0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x11d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x1400a8f7a
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x11e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
jmp 0x1400a8f7a
lea rdx, str.BrowserCleanup
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e690
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x11e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x40
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
test eax, eax
jns 0x14009e335
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x11f0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140160440]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e456
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x11f8]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1200]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1200]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, str.InternetExplorer
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009e4d9
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1208]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x4d70]
call fcn.140082370
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x1210]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x4d70]
call fcn.1400b21c0
lea rcx, [rsp + 0x4d70]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x4d70]
call fcn.140082480
jmp 0x14009e667
lea rdx, str.GoogleChrome
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009e55c
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1218]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x53e0]
call fcn.140082370
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + reloc.mfc140u.dll_CRenderTarget::FillOpacityMask]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x53e0]
call fcn.1400b21c0
lea rcx, [rsp + 0x53e0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x53e0]
call fcn.140082480
jmp 0x14009e667
lea rdx, str.MozillaFirefox
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009e5df
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1228]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x5a50]
call fcn.140082370
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + reloc.mfc140u.dll_CMFCZoomKernel::Filter]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x5a50]
call fcn.1400b21c0
lea rcx, [rsp + 0x5a50]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x5a50]
call fcn.140082480
jmp 0x14009e667
lea rdx, str.Microsoft_Edge
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009e65f
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1238]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x60c0]
call fcn.140082370
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x1240]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x60c0]
call fcn.1400b21c0
lea rcx, [rsp + 0x60c0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x60c0]
call fcn.140082480
jmp 0x14009e667
mov rbx, qword [rsp + 0xd20]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test rbx, rbx
sete sil
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.MoveDataDlg
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e7c6
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1248]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1248]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1250]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1250]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x7790]
call fcn.1400b4380
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1258]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
cmp eax, 2
setg byte [rsp + 0x8838]
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x7790]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x14009e7a5
movzx esi, al
jmp 0x14009e7b4
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0x7790]
call fcn.1400b4580
jmp 0x1400a8f7d
lea rdx, str.SystemSlowRepairDlg
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e8e4
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1260]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1260]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1268]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1268]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x4430]
call fcn.1400398a0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1270]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x4430]
call fcn.1400b20e0
lea rcx, [rsp + 0x4430]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x14009e8c3
movzx esi, al
jmp 0x14009e8d2
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0x4430]
call fcn.140039970
jmp 0x1400a8f7d
lea rdx, str.move_data
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009f1e5
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1278]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1278]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1280]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1280]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdx, r14
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, str.move_data
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e9e5
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1288]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1288]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CPaneDivider::FindPaneContainer]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::FindPaneContainer]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x940]
call fcn.1400f8f70
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0x8e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x940]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x8e8]
lea rcx, [rsp + 0xc8]
call fcn.140006190
nop
lea rcx, [rsp + 0x8e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x1401617e4]
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009eb08
lea rdx, str.D:BackUp_
jmp 0x14009eb24
lea rdx, [0x1401617f4]
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x14009eb32
lea rdx, str.E:BackUp_
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x1298]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009eb6d
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [0x140160ba0]
lea rcx, [rsp + 0xd8]
call fcn.14000ca00
test al, al
je 0x14009edc5
lea rdx, [0x140146a30]
lea rcx, [rsp + 0x8f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x8f0]
lea rcx, [rsp + 0x12a0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Desktop_BackUp
lea rcx, [rsp + 0x8f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x8f8]
lea rcx, [rsp + reloc.mfc140u.dll_CUserToolsManager::FindTool]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CUserToolsManager::FindTool]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x12b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009ec9c
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x12b8]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x12b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + reloc.mfc140u.dll_CInternetFile::Flush]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400dc0a0
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400ddd80
lea rax, [rsp + 0x12c8]
mov qword [rsp + 0x70], rax
lea rdx, str._result
lea rcx, [rsp + 0x908]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.moveDesktop_ContentTo
lea rcx, [rsp + 0x900]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401486fc]
lea rcx, [rsp + 0x12c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x900]
lea rcx, [rsp + 0x12d8]
call fcn.140006190
nop
lea r8, [rsp + 0x908]
mov rdx, rax
lea rcx, [rsp + 0x12d0]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x12d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x900]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x908]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009f1ab
lea rdx, [0x140160ba8]
lea rcx, [rsp + 0xd8]
call fcn.14000ca00
test al, al
je 0x14009f01d
lea rdx, [0x140146a20]
lea rcx, [rsp + 0x910]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x910]
lea rcx, [rsp + 0x12e0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x910]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Downloads_BackUp
lea rcx, [rsp + 0x918]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x918]
lea rcx, [rsp + 0x12e8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x918]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x12f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009eef4
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x12f8]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x12f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x1300]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400dc0a0
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400ddd80
lea rax, [rsp + 0x1308]
mov qword [rsp + 0x70], rax
lea rdx, str._result
lea rcx, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.moveDownload_ContentTo
lea rcx, [rsp + 0x920]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401486fc]
lea rcx, [rsp + 0x1308]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x920]
lea rcx, [rsp + 0x1318]
call fcn.140006190
nop
lea r8, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
mov rdx, rax
lea rcx, [rsp + 0x1310]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x1318]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x920]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009f1ab
lea rdx, [0x140160bb8]
lea rcx, [rsp + 0xd8]
call fcn.14000ca00
test al, al
je 0x14009f1ab
lea rdx, [0x140146a50]
lea rcx, [rsp + 0x930]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x930]
lea rcx, [rsp + 0x1320]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1320]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x930]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Documents_backup
lea rcx, [rsp + 0x938]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x938]
lea rcx, [rsp + 0x1328]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1328]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x938]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x1330]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009f14c
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x1338]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x1338]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x1340]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400dc0a0
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400ddd80
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x940]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd8]
jmp 0x14009a25c
lea rdx, str.isDriveExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009f411
xor dil, dil
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1348]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1348]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1350]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1350]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1358]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1358]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.drive_to_find_if_exist_or_not
lea rcx, [rsp + 0x1360]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rdx, str.wmic_logicaldisk_where_drivetype3_get_deviceid
lea rcx, [rsp + 0x1368]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.1400f5c80
nop
lea rax, [rsp + 0x1370]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x1370]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.Number_of_logical_drives_in_machine
lea rcx, [rsp + 0x1378]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea r8, [0x140152fc4]
lea rdx, str.DeviceID
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1380]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x1380]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.drive_id_after_removing_deviceId_string
lea rcx, [rsp + 0x1388]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
movzx esi, dil
mov edi, 1
test eax, eax
cmovns esi, edi
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.softwareinstall
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f72a
lea rcx, [rsp + 0x588]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x250
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, [0x140152fc4]
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f4ac
mov r8d, eax
lea rdx, [rsp + 0x1390]
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x588]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1390]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009f4c2
lea rdx, [rsp + 0x418]
lea rcx, [rsp + 0x588]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x948]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x948]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000ca00
movzx ebx, al
lea rcx, [rsp + 0x948]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x14009f546
lea rax, [rsp + 0x1398]
mov qword [rsp + 0x70], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x1398]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
call fcn.1401022a0
lea rcx, [rsp + 0x580]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x958]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.iAssistStatus.ll
lea rcx, [rsp + 0x950]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x13a8]
call fcn.1400f6f80
nop
lea r8, [rsp + 0x950]
mov rdx, rax
lea rcx, [rsp + 0x13a0]
call fcn.140006190
lea r9, [rsp + 0x190]
lea r8, [rsp + 0x958]
lea rdx, [rsp + 0x580]
mov rcx, rax
call fcn.1400ff520
nop
lea rcx, [rsp + 0x13a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x950]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x580]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
mov rcx, rax
lea rdx, str.success
call fcn.14000ca00
test al, al
setne bl
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x13b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x14009f69b
cmp bl, 1
jne 0x14009f6d8
xor r8d, r8d
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f67b
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x13b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
jmp 0x14009f6a0
cmp bl, 1
jne 0x14009f6d8
cmp al, 1
jne 0x14009f6d8
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, bl
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x958]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x580]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x588]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.addAutoConfigScriptAddress
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009f91d
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x13c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x13c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x308]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14009f901
cmp qword [rsp + 0x308], 0
je 0x14009f901
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0x308]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r14d, r14d
mov dword [rsp + CWnd::accDoDefaultAction], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0x308]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x6bc], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x6bc]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x308]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x308]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
jmp 0x14009ad97
lea rdx, str.isWiFiConnected
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f987
lea rdx, str.netsh_wlan_show_interface_name_airtelhive_
lea rcx, [rsp + 0x13d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x960]
call fcn.1400f5c80
xor r8d, r8d
lea rdx, str.State_:_connected
lea rcx, [rsp + 0x960]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
sete sil
lea rcx, [rsp + 0x960]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.RegisterAppForStartup
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009fd91
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x598]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + reloc.mfc140u.dll_CPane::GetAvailableExpandSize]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CPane::GetAvailableExpandSize]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x13e0]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140160ab8]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x13e8]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x598]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x13f0]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x598]
lea rcx, [rsp + 0x980]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x980]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
lea rdx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
lea rcx, [rsp + 0x978]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x978]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rsi, rax
lea rdx, [rsp + 0xfe30]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
lea rdx, [rsp + 0xfe30]
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, [0x140184268]
lea rcx, [rsp + 0x1a0]
call fcn.1400f8f00
nop
lea rdx, [0x140149430]
lea rcx, [rsp + 0x968]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x968]
lea rcx, [rsp + 0x13f8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x968]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140153de8]
lea rcx, [rsp + 0x970]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x970]
lea rcx, [rsp + 0x1400]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1400]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x970]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x1408]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
je 0x14009fcbd
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400ddd80
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x1410]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x1410]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, [rsp + 0x428]
lea rcx, [rsp + 0x1418]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400dc0a0
mov rdx, rsi
mov rcx, rdi
call fcn.1400eeb80
nop
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x978]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x980]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x598]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x118]
jmp 0x14009ad97
xor r8d, r8d
lea rdx, str.RestartUserMachine
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009fe73
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1420]
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1420]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ecx, eax
call fcn.140100100
mov ecx, 0x15f90
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x310]
jmp 0x14009a25c
lea rdx, str.WriteDownloadURL
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a007a
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1428]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1428]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1430]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1430]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rdx, str.AnakageCoursesSoftwares
lea rcx, [rsp + 0x988]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1438]
call fcn.1400fa2b0
nop
lea r8, [rsp + 0x988]
mov rdx, rax
lea rcx, [rsp + 0x5a0]
call fcn.140006190
nop
lea rcx, [rsp + 0x1438]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x988]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.AnakageCoursesSoftwares_softwareURL.ll
lea rcx, [rsp + 0x990]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1440]
call fcn.1400fa2b0
nop
lea r8, [rsp + 0x990]
mov rdx, rax
lea rcx, [rsp + 0x998]
call fcn.140006190
nop
lea rcx, [rsp + 0x1440]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x990]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400de060
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp eax, 1
jne 0x1400a005e
lea rcx, [rsp + 0x998]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x14014b5a4]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a005e
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov rcx, rbx
call fcn.140038ae0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
nop
lea rcx, [rsp + 0x998]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5a0]
jmp 0x14009ad97
lea rdx, str.DownloadSoftware
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0ac8
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1540]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x5b8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a01a3
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1448]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov r8, rax
lea rdx, [rsp + 0x1450]
mov rcx, r13
call fcn.1400adfa0
nop
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1450]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2f2f
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1458]
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1458]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a0258
mov edx, 0x28
xor r8d, r8d
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1460]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1460]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1468]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1468]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
je 0x1400a032b
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x5b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x1470]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonGallery::GetCompactSize]
call fcn.1400f8340
nop
mov rdx, rax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonGallery::GetCompactSize]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2f
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1480]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1480]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x5b0]
call fcn.1400f6cf0
nop
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400de060
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, [rsp + 0x320]
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0xf8]
call fcn.140006190
nop
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x1488]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a043b
lea rax, [rsp + 0x1490]
mov qword [rsp + 0x78], rax
lea rdx, [0x1401486fc]
lea rcx, [rsp + 0x1490]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Start_of_utils::downloadSoftwares_deleting_old_.zip_files
lea rcx, [rsp + 0x1498]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
nop
mov ecx, 0x280
call sub.mfc140u.dll_CMFCRibbonInfo::XElementButtonLinkCtrl::XElementButtonLinkCtrl
mov qword [rsp + 0x60], rax
test rax, rax
je 0x1400a0479
xor edx, edx
mov rcx, rax
call fcn.14003e8b0
mov r13, rax
xor r14d, r14d
jmp 0x1400a047f
xor r14d, r14d
mov r13d, r14d
lea rax, [rsp + 0x14a0]
mov qword [rsp + 0x60], rax
lea rdx, [0x140144758]
lea rcx, [rsp + 0x14a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Started_the_thread_for_running_Download_Progress_Dialog
lea rcx, [rsp + 0x14a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
lea rcx, [0x1400b1f10]
call sub.mfc140u.dll_AFX_WM_ON_MOVETABCOMPLETE
mov rsi, rax
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b0
lea rcx, [rsp + 0x5a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x5a8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
jne 0x1400a075a
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0x9c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, [0x1401488c8]
lea rcx, [rsp + 0x9a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x9a0]
lea rdx, [rsp + 0x5a8]
lea rcx, [rsp + 0x14b0]
call fcn.140006190
nop
lea r8, [rsp + 0x9c8]
mov rdx, rax
lea rcx, [rsp + 0x9c0]
call fcn.140006190
nop
lea rcx, [rsp + 0x14b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x9c0]
lea rcx, [rsp + 0x14b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov r8, rax
lea rdx, [rsp + 0x9b8]
mov rcx, qword [rsp + 0x70]
call fcn.1400ade70
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x368
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, [0x140161be8]
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rdx, [0x14015322c]
lea rcx, [rsp + 0x9a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x9a8]
lea rdx, [rsp + 0x9b8]
lea rcx, [rsp + 0x14c8]
call fcn.140006190
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
lea edx, [rbx + 2]
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_CDaoRecordset::GetValidationText]
nop
lea rcx, [rsp + 0x14c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._api_download_software_name
lea rcx, [rsp + 0x9b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x9b0]
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x14d8]
call fcn.140006190
nop
lea r8, [rsp + 0x5b8]
mov rdx, rax
lea rcx, [rsp + 0x14d0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x14d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a07de
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
lea rcx, [rsp + 0x318]
test al, al
jne 0x1400a0784
lea rdx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
jmp 0x1400a07de
lea rdx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rax, [rsp + 0x14e0]
mov qword [rsp + 0x60], rax
lea rdx, [0x140144758]
lea rcx, [rsp + 0x14e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Started_the_download
lea rcx, [rsp + 0x14e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_Ordinal_6717]
mov rbx, rax
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, rbx
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileW
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [r13 + 0x278], 1
mov edx, 1
mov rcx, r13
call fcn.14003ec30
mov dword [rsp + 0x228], r14d
test rsi, rsi
je 0x1400a08c8
lea rdx, [rsp + 0x228]
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [rsp + 0x228], 0x103
jne 0x1400a08c4
xor edx, edx
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
lea rax, [rsp + 0x14f0]
mov qword [rsp + 0x60], rax
lea rdx, [0x140144758]
lea rcx, [rsp + 0x14f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Killed_the_thread
lea rcx, [rsp + 0x14f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi + 0x58], r14
lea rcx, [rsp + 0x5a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x68]
jmp 0x1400a0912
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x1520]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a0a33
xor r8d, r8d
lea rdx, str..xlsx
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a09ca
lea rdx, str.sTemp.csv
lea rcx, [rsp + 0x9d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x9d0]
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x1528]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrename]
lea rcx, [rsp + 0x1528]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
xor r8d, r8d
lea rdx, str..zip
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0a4c
lea rax, [rsp + 0x1530]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x1530]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x1538]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov rdx, rbx
mov rcx, rax
call fcn.140102660
jmp 0x1400a0a4c
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400de060
xor sil, sil
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1540]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f87
xor r8d, r8d
lea rdx, str.DownloadSoftwareProgressBar
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a0c3e
lea edx, [r8 + 0x28]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov edx, 0x29
lea rcx, [rsp + 0x200]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1548]
lea rcx, [rsp + 0x200]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x200]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1548]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x200]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor edx, edx
lea rcx, [rsp + 0x2780]
call fcn.14003e8b0
nop
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x1550]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
mov qword [rsp + 0x60], rax
mov rdx, rax
lea rcx, [rsp + 0x29f0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
lea rcx, [rsp + 0x2780]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov r8, rax
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor edx, edx
lea rcx, [rsp + 0x2780]
call fcn.14003ea80
mov r8d, eax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
lea rcx, [rsp + 0x2780]
call fcn.14003e940
nop
lea rcx, [rsp + 0x200]
jmp 0x14009a25c
lea rdx, str.CheckComputerNameAndLoggedInUserName
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0ef7
mov dword [rsp + CMFCBaseAccessibleObject::accHitTest], 0x101
lea rdx, [rsp + 0x6c0]
lea rcx, [rsp + 0xfc20]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rdx, [rsp + 0xfc20]
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rcx, [rsp + 0x328]
call fcn.1400f8f70
nop
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CHtmlView::LoadFromResource]
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
je 0x1400a0dd4
lea rdx, str.__are_different._Do_you_want_to_change_Computer_Name_same_as_User_Name_to_resolve_this_error_
lea rcx, [rsp + 0x9e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.__and_User_Name__
lea rcx, [rsp + 0x9d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x438]
lea rdx, str.Your_Computer_Name__
lea rcx, [rsp + 0x1570]
call fcn.140099860
nop
lea r8, [rsp + 0x9d8]
mov rdx, rax
lea rcx, [rsp + 0x1568]
call fcn.140006190
nop
lea r8, [rsp + 0x328]
mov rdx, rax
lea rcx, [rsp + 0x1560]
call fcn.140006190
nop
lea r8, [rsp + 0x9e0]
mov rdx, rax
lea rcx, [rsp + 0x1558]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1558]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1560]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1568]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1570]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
jmp 0x1400a0ed5
lea rdx, str.__are_same._Click_on_NEXT_STEP
lea rcx, [rsp + 0xb90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.__and_User_Name__
lea rcx, [rsp + 0x9e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x438]
lea rdx, str.Your_Computer_Name__
lea rcx, [rsp + reloc.mfc140u.dll_COleControlSite::GetEventIID]
call fcn.140099860
nop
lea r8, [rsp + 0x9e8]
mov rdx, rax
lea rcx, [rsp + 0x1588]
call fcn.140006190
nop
lea r8, [rsp + 0x328]
mov rdx, rax
lea rcx, [rsp + 0x1580]
call fcn.140006190
nop
lea r8, [rsp + 0xb90]
mov rdx, rax
lea rcx, [rsp + 0x1578]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1578]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1580]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1588]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_COleControlSite::GetEventIID]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.addSSL2ToJava
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a11b1
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1598]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1598]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x15a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x15a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140184728]
lea rcx, [rsp + 0x330]
call fcn.1400f8f00
nop
lea rdx, str.SunJavaDeploymentdeployment.properties
lea rcx, [rsp + 0x330]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator_]
lea rcx, [rsp + 0x2100]
call sub.mfc140u.dll_CEnumFormatEtc::CEnumFormatEtc
nop
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x330]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x2100]
call sub.mfc140u.dll_CResetPropExchange::ExchangePersistentProp
test eax, eax
je 0x1400a117e
lea rcx, [rsp + 0x330]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x14014b56c]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a10d7
mov r8, rax
mov edx, 0x3e8
lea rcx, [rsp + 0x10250]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
test rax, rax
je 0x1400a10d7
nop word [rax + rax]
lea rdx, [rsp + 0x10250]
lea rcx, [rsp + 0x15a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_Ordinal_1667]
nop
lea rcx, [rsp + 0x15a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140153708]
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
mov r8, rbx
mov edx, 0x3e8
lea rcx, [rsp + 0x10250]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
test rax, rax
jne 0x1400a1070
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x1400a1179
lea rcx, [rsp + 0x330]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x140153674]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a1165
lea r8, [0x14014b5a8]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + reloc.mfc140u.dll_CDaoQueryDef::GetFieldCount]
call fcn.1400997c0
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputws]
lea rcx, [rsp + reloc.mfc140u.dll_CDaoQueryDef::GetFieldCount]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov sil, 1
jmp 0x1400a1181
xor sil, sil
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2100]
call sub.mfc140u.dll_CDockSite::CDockSite
nop
lea rcx, [rsp + 0x330]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.runScriptFileDownloaded
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a14f3
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x15b8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x15b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x5c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, r14
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, str.runScriptFileDownloaded
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a1295
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x15c0]
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x15c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x5c0]
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
xor r8d, r8d
lea rdx, str.true
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, [rsp + 0x5c8]
test eax, eax
js 0x1400a137f
lea rax, [rsp + 0x15c8]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x15c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, [rsp + 0x5c0]
lea rcx, [rsp + 0x15d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140100e70
test al, al
je 0x1400a13c4
jmp 0x1400a13c1
lea rax, [rsp + 0x15d8]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x15d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.False
lea rcx, [rsp + 0x15e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140100e70
mov sil, 1
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x9f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x9f8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000ca00
movzx ebx, al
lea rcx, [rsp + 0x9f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a14c2
lea rax, [rsp + 0x15e8]
mov qword [rsp + 0x60], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x15e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
call fcn.1401022a0
test eax, eax
jne 0x1400a14c2
xor sil, sil
lea rdx, str.Taskkill__IM_IAssistHelper.exe__F
lea rcx, [rsp + 0x15f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1608]
call fcn.1400f5c80
nop
lea rdx, str.Taskkill__IM_IAssistHelper64.exe__F
lea rcx, [rsp + 0x15f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1600]
call fcn.1400f5c80
lea rcx, [rsp + 0x1600]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1608]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.RunTroubleshooter
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a19c2
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1610]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1610]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1618]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1618]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140144758]
lea rcx, [rsp + 0x50]
call fcn.140041590
test al, al
je 0x1400a15e6
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2c0
lea rcx, [rsp + 0x1620]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rcx, [rsp + 0x1620]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.test
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.Audio_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a1660
lea rdx, str.Audio_Troubleshooter
lea rcx, [rsp + reloc.mfc140u.dll_CMFCMenuBar::GetHelpCombobox]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x2ec0]
call fcn.140039f20
nop
lea rcx, [rsp + 0x2ec0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x2ec0]
call fcn.140039fd0
jmp 0x1400a1984
lea rdx, str.Maintenance_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a16aa
lea rdx, str.msdt.exe__id_MaintenanceDiagnostic
lea rcx, [rsp + 0x1630]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1638]
call fcn.1400f5c80
lea rcx, [rsp + 0x1638]
jmp 0x1400a197e
lea rdx, str.Disk_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a16f4
lea rdx, str.cleanmgr
lea rcx, [rsp + 0x1640]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1648]
call fcn.1400f5c80
lea rcx, [rsp + 0x1648]
jmp 0x1400a197e
lea rdx, str.Networking_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a1758
lea rdx, str.Networking_Troubleshooter
lea rcx, [rsp + 0x1650]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x3140]
call fcn.140039f20
nop
lea rcx, [rsp + 0x3140]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x3140]
call fcn.140039fd0
jmp 0x1400a1984
lea rdx, str.IE_Security_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a17b5
lea rdx, str.msdt.exe__id_IESecurityDiagnostic
lea rcx, [rsp + 0x1658]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1660]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1660]
jmp 0x1400a197e
lea rdx, str.Printer_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a1812
lea rdx, str.msdt.exe__id_PrinterDiagnostic
lea rcx, [rsp + 0x1668]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1670]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1670]
jmp 0x1400a197e
lea rdx, str.Power_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a186f
lea rdx, str.msdt.exe__id_PowerDiagnostic
lea rcx, [rsp + 0x1678]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1680]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1680]
jmp 0x1400a197e
lea rdx, str.Search_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a18cc
lea rdx, str.msdt.exe__id_SearchDiagnostic
lea rcx, [rsp + 0x1688]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1690]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1690]
jmp 0x1400a197e
lea rdx, str.Hardware_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a1926
lea rdx, str.msdt.exe__id_DeviceDiagnostic
lea rcx, [rsp + 0x1698]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x16a0]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16a0]
jmp 0x1400a197e
lea rdx, str.Bluetooth_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a1984
lea rdx, str.msdt.exe__id_BluetoothDiagnostic
lea rcx, [rsp + 0x16a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x16b0]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140144758]
lea rcx, [rsp + 0x170]
call fcn.140041590
test al, al
jne 0x1400a19ac
cmp qword [rsp + 0x90], 0
jne 0x1400a19ac
mov sil, 1
jmp 0x1400a19af
xor sil, sil
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.isExeAlreadyRunning
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a1a9f
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x16b8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x16c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x16c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov edx, 0xffffffff
mov rcx, rax
call fcn.1400ed000
cmp al, 1
sete sil
jmp 0x1400a8f7d
lea rdx, str.SilentSolutionExecution
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a1e8f
mov sil, 1
lea rcx, [rsp + 0xa30]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xa28]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xa20]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x16d0]
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ebx, eax
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xa18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1708]
call fcn.1400fa2b0
nop
mov r8d, 0x80
lea rdx, [rsp + 0xf420]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xf420]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xf420]
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
call qword [sym.imp.WINMM.dll_timeGetTime]
lea eax, [rbx - 0x80]
cmp eax, 0x80
ja 0x1400a1c5e
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov byte [rcx + 0x2f9], 0
lea rdx, [rsp + 0xa18]
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x4f0]
call fcn.1400fc290
test eax, eax
je 0x1400a1c3d
mov ecx, ebx
call fcn.1400f2050
jmp 0x1400a1ced
mov edx, dword [rsp + 0x4f0]
lea rcx, [rsp + 0x16d8]
call fcn.1400ed4b0
lea rcx, [rsp + 0x16d8]
jmp 0x1400a1ce7
lea rdx, str.IAssistHelper.exe
lea rcx, [rsp + 0xa00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xa00]
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x16e0]
call fcn.140006190
mov rbx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9, rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x16e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0xa08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0xa08]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000ca00
movzx ebx, al
lea rcx, [rsp + 0xa08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a1db9
lea rax, [rsp + 0x16e8]
mov qword [rsp + 0x60], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x16e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
call fcn.1401022a0
test eax, eax
jne 0x1400a1db9
xor sil, sil
lea rdx, str.Taskkill__IM_IAssistHelper.exe__F
lea rcx, [rsp + 0x16f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x16f8]
call fcn.1400f5c80
lea rcx, [rsp + 0x16f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call qword [sym.imp.WINMM.dll_timeGetTime]
lea rdx, [0x14015f4a0]
lea rcx, [rsp + 0xa10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xa10]
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x1700]
call fcn.140006190
lea r9, [rsp + 0xa20]
lea r8, [rsp + 0xa28]
lea rdx, [rsp + 0xa30]
mov rcx, rax
call fcn.1400ff520
nop
lea rcx, [rsp + 0xa10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1708]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.isbitlockerenabled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2027
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xa48]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xa40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1718]
call fcn.1400fa2b0
nop
mov r8d, 0x80
lea rdx, [rsp + 0xf620]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xf620]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xf620]
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, [rsp + 0xa40]
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14015f4a0]
lea rcx, [rsp + 0xa38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xa38]
lea rdx, [rsp + 0x5d0]
lea rcx, [rsp + 0x1710]
call fcn.140006190
lea r9, [0x1401d9528]
lea r8, [rsp + 0xa48]
lea rdx, [rsp + 0x450]
mov rcx, rax
call fcn.1400ff520
nop
lea rcx, [rsp + 0xa38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x450]
call fcn.14000ca00
test al, al
jne 0x1400a1fd5
lea rdx, [0x14015a7f8]
lea rcx, [rsp + 0x450]
call fcn.14000ca00
test al, al
jne 0x1400a1fd5
xor sil, sil
jmp 0x1400a1fd8
mov sil, 1
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1718]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.runcustomsolution
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a25e9
lea rcx, [rsp + 0x5d8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1720]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1720]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1728]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x5d8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1728]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1730]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1730]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1738]
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1738]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1740]
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1740]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.AnakageFilesSelfHealSolutions
lea rcx, [rsp + 0xa58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x390
lea rcx, [rsp + 0xa50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x1750]
call fcn.1400f7b40
nop
lea r8, [rsp + 0xa58]
mov rdx, rax
lea rcx, [rsp + 0x1748]
call fcn.140006190
nop
lea r8, [rsp + 0xa50]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call fcn.140006190
nop
lea rcx, [rsp + 0x1748]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1750]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140149428]
lea rcx, [rsp + 0xa60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
call sub.mfc140u.dll_AfxFieldText
mov r8, qword [rax + 8]
mov r8, qword [r8 + 0x90]
lea rdx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
lea rcx, [rsp + 0x1768]
call fcn.1400997c0
nop
lea r8, [rsp + 0xa60]
mov rdx, rax
lea rcx, [rsp + 0x1760]
call fcn.140006190
nop
lea r8, [rsp + 0x338]
mov rdx, rax
lea rcx, [rsp + 0x1758]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1758]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1760]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1768]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x4e8]
call fcn.1400fa2b0
nop
lea rdx, str.information.txt
lea rcx, [rsp + 0xa68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xa68]
lea rdx, [rsp + 0x4e8]
lea rcx, [rsp + reloc.mfc140u.dll_Ordinal_6000]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x4e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_Ordinal_6000]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x4e8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov edi, 1
mov dword [rsp + 0x20], edi
lea r9d, [rdi + 0x3f]
lea r8d, [rdi + 1]
lea rcx, [rsp + 0x2160]
call fcn.140013cd0
nop
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rdx, str.ScriptPath
lea rcx, [rsp + 0x2160]
call fcn.140099350
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140153708]
call fcn.140099350
mov rcx, rax
lea rdx, str.Is64Required
call fcn.140099350
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rcx, [rsp + 0x2160]
call fcn.1400ac510
lea rcx, [rsp + 0x5d8]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
mov rcx, rax
lea rdx, [0x140152d0c]
call fcn.14000ca00
lea rdx, [0x140144758]
test al, al
je 0x1400a2541
lea rax, [rsp + 0x1778]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x1778]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [0x140162260]
lea rcx, [rsp + 0x1780]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov dl, 1
jmp 0x1400a2577
lea rax, [rsp + 0x1788]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x1788]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [0x140162264]
lea rcx, [rsp + 0x1790]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140100b90
nop
lea rcx, [rsp + 0x2160]
call fcn.140013f00
nop
lea rcx, [rsp + 0x4e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5d8]
jmp 0x14009ad97
xor r8d, r8d
lea rdx, [0x140162268]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a26d0
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1798]
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1798]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x17a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov edx, 0xffffffff
mov rcx, rax
call fcn.1400ed000
test al, al
setne sil
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.RunCommand
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a27d9
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x17a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x17b0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x17b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xa70]
call fcn.1400f5c80
xor r8d, r8d
lea rdx, str.not_recognized
lea rcx, [rsp + 0xa70]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
sets sil
lea rcx, [rsp + 0xa70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.doesfilepathexists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a28ab
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x17c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x17c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x17d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
jmp 0x1400a8f7a
lea rdx, str.skypeDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2905
xor edx, edx
lea rcx, [rsp + 0x70d0]
call fcn.1400c9f30
nop
lea rcx, [rsp + 0x70d0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x1400a28e4
movzx esi, al
jmp 0x1400a28f3
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0x70d0]
call fcn.1400ca030
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.ProxyDialogForClient
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a2b75
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x17d8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x17e0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x390
lea rcx, [rsp + 0x1808]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, [0x140145960]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
je 0x1400a2a2e
lea rax, [rsp + 0x17e8]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x17e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xa78]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x17f0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x2270]
call fcn.14000e2f0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x17f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
mov qword [rsp + 0x60], rax
mov rdx, rax
lea rcx, [rsp + 0x24d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xa78]
lea rcx, [rsp + 0x1800]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
mov qword [rsp + 0x60], rax
mov rdx, rax
lea rcx, [rsp + 0x24d8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x2270]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x2270]
call fcn.14000e620
nop
lea rcx, [rsp + 0xa78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1808]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.MakeAdobeRederDefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
test eax, eax
js 0x1400a2c9d
lea rax, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts.pdfUserChoice
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
lea rdx, str.02AIRV7bRz8
lea rcx, [rsp + 0x5f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, str.AcroExch.Document.DC
lea rcx, [rsp + 0x5e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
test ebx, ebx
jne 0x1400a2c81
cmp qword [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel], 0
je 0x1400a2c81
lea rcx, [rsp + 0x5f0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x5f0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov edi, 1
mov r9d, edi
xor r8d, r8d
lea rdx, str.Hash
mov rcx, qword [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x5e8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x5e8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.Progid
mov rcx, qword [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x5e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5f0]
jmp 0x14009a25c
lea rdx, str.getdllfolderlocation
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2d96
lea rdx, str._appdataLocalMicrosoftTeamsMeetingAddinmeeting_addin_install_logs.txt
lea rcx, [rsp + 0xa80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1818]
call fcn.1400f8f70
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rsp + 0x1810]
call fcn.140099860
nop
lea r8, [rsp + 0xa80]
mov rdx, rax
lea rcx, [rsp + 0xa88]
call fcn.140006190
nop
lea rcx, [rsp + 0x1810]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1818]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xa88]
lea rcx, [rsp + 0x1820]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
lea rcx, [0x1401d9560]
test al, al
jne 0x1400a2d73
lea rdx, str.Microsoft_Teams_is_not_installed._Please_install_it_so_that_you_can_enable_its_add_in_in_Outlook._Click_on_NEXT_STEP.
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
xor sil, sil
jmp 0x1400a2d83
lea rdx, str.Microsoft_Teams_Meeting_Add_in_is_already_in_outlook._Click_on_NEXT_STEP.
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
mov sil, 1
lea rcx, [rsp + 0xa88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.forcecloseexe
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a2f27
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1828]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1828]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xaa8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
lea rcx, [rsp + 0xaa0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x1401626b4]
lea rcx, [rsp + 0xa98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.taskkill__F__IM
lea rcx, [rsp + 0xa90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xaa8]
lea rdx, [rsp + 0xa90]
lea rcx, [rsp + 0x1840]
call fcn.140006190
nop
lea r8, [rsp + 0xa98]
mov rdx, rax
lea rcx, [rsp + 0x1830]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1838]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0xaa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1838]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1840]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaa8]
jmp 0x14009ad97
lea rdx, str.isDriveLocked
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a313e
lea rcx, [rsp + 0x470]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xab8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1850]
call fcn.1400fa2b0
nop
mov r8d, 0x80
lea rdx, [rsp + 0xf820]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xf820]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xf820]
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, [rsp + 0xab8]
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14015f4a0]
lea rcx, [rsp + 0xab0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xab0]
lea rdx, [rsp + 0x5f8]
lea rcx, [rsp + 0x1848]
call fcn.140006190
lea r9, [0x1401d9528]
lea r8, [rsp + 0x468]
lea rdx, [rsp + 0x470]
mov rcx, rax
call fcn.1400ff520
nop
lea rcx, [rsp + 0xab0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x470]
call fcn.14000ca00
test al, al
je 0x1400a3091
lea rdx, [rsp + 0x468]
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, [0x140145960]
lea r8, [0x1401626f0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, dil
jmp 0x1400a30ef
lea rdx, [0x14015a7f8]
lea rcx, [rsp + 0x470]
call fcn.14000ca00
test al, al
je 0x1400a30ef
lea rdx, [rsp + 0x468]
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, str.C:WinBDERecoveryKey
lea r8, [0x1401626f0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
xor sil, sil
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1850]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xab8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x470]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.isDriveEncryptedLocked
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3302
lea rcx, [rsp + 0x610]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x608]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xac8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1860]
call fcn.1400fa2b0
nop
mov r8d, 0x80
lea rdx, [rsp + 0xfa20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xfa20]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xfa20]
lea rcx, [rsp + 0x600]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, [rsp + 0xac8]
lea rcx, [rsp + 0x600]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14015f4a0]
lea rcx, [rsp + 0xac0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xac0]
lea rdx, [rsp + 0x600]
lea rcx, [rsp + 0x1858]
call fcn.140006190
lea r9, [0x1401d9528]
lea r8, [rsp + 0x608]
lea rdx, [rsp + 0x610]
mov rcx, rax
call fcn.1400ff520
nop
lea rcx, [rsp + 0xac0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x610]
call fcn.14000ca00
test al, al
je 0x1400a32b0
lea rdx, [rsp + 0x608]
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, [0x140145960]
lea r8, [0x1401626f0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, dil
jmp 0x1400a32b3
xor sil, sil
lea rcx, [rsp + 0x600]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1860]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xac8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x608]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x610]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.pstfilecreated
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a36fd
lea rcx, [rsp + 0xaf8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1868]
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1868]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.pstFileclientspecific.vbs
lea rcx, [rsp + 0x1a8]
call fcn.14000ca00
test al, al
je 0x1400a349f
lea rdx, [0x140149428]
lea rcx, [rsp + 0xad8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3a8
lea rcx, [rsp + 0xad0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea r8, [rsp + 0xad8]
lea rdx, [rsp + 0xad0]
lea rcx, [rsp + 0x1878]
call fcn.140006190
nop
lea r8, [rsp + 0x1a8]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CMDIChildWndEx::GetPane]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMDIChildWndEx::GetPane]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1878]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xad0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xad8]
jmp 0x1400a353c
lea rdx, [0x14015a550]
lea rcx, [rsp + 0xae0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1890]
call fcn.1400f7b40
nop
lea r8, [rsp + 0xae0]
mov rdx, rax
lea rcx, [rsp + 0x1888]
call fcn.140006190
nop
lea r8, [rsp + 0x1a8]
mov rdx, rax
lea rcx, [rsp + 0x1880]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1880]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1888]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1890]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xae0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140144b88]
lea rcx, [rsp + 0xaf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.CScript
lea rcx, [rsp + 0xae8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x478]
lea rdx, [rsp + 0xae8]
lea rcx, [rsp + 0x18a8]
call fcn.140006190
nop
lea r8, [rsp + 0xaf0]
mov rdx, rax
lea rcx, [rsp + 0x18a0]
call fcn.140006190
nop
lea r8, [rsp + 0xaf8]
mov rdx, rax
lea rcx, [rsp + 0x1898]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400f5c80
nop
lea rcx, [rsp + 0x18a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x18a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xae8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
xor r8d, r8d
lea rdx, str.All_rights_reserved.
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
sub ebx, eax
lea r8d, [rbx - 0x14]
lea rdx, [rsp + reloc.mfc140u.dll_CD2DBitmap::GetPixelFormat]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CD2DBitmap::GetPixelFormat]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x18b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
movzx esi, al
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.doesfileexists
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a3b7b
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x18c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x18c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.selectfileforuse
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3b01
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1900]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rdx, str.PST_File_.pst_.pstOST_File_.ost_.ostAll_files__._.
lea rcx, [rsp + 0xb20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x620]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.MicrosoftOutlook_
lea rcx, [rsp + 0xb00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x140185558]
lea rcx, [rsp + 0x18d0]
call fcn.1400f8f00
nop
lea r8, [rsp + 0xb00]
mov rdx, rax
lea rcx, [rsp + 0xb18]
call fcn.140006190
nop
lea rcx, [rsp + 0x18d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x2138]
call sub.mfc140u.dll_CEnumArray::CEnumArray
nop
lea rcx, [rsp + 0xb20]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rcx, [rsp + 0xb18]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
mov edi, 1
mov dword [rsp + 0x40], edi
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x1000
lea r8, str.Outlook.pst
mov edx, edi
lea rcx, [rsp + 0xee40]
call sub.mfc140u.dll_CEnumConnections::CEnumConnections
nop
lea rcx, [rsp + 0xee40]
call sub.mfc140u.dll_CD2DRadialGradientBrush::Detach
cmp rax, rdi
je 0x1400a3965
lea rax, [rsp + 0x18d8]
mov qword [rsp + 0x60], rax
lea rdx, [0x1401488c8]
lea rcx, [rsp + 0x18d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, str.selectfileforuse_error_code
lea rcx, [rsp + 0x18e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rdi
mov rcx, rbx
call fcn.1401028d0
jmp 0x1400a399b
lea rdx, [rsp + 0x18e8]
lea rcx, [rsp + 0xee40]
call sub.mfc140u.dll_Ordinal_6090
nop
mov rdx, rax
lea rcx, [rsp + 0x620]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x620]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x618]
call fcn.1400fc750
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x618]
call fcn.140041590
test al, al
je 0x1400a3a87
lea rdx, [0x1401628d4]
lea rcx, [rsp + 0xb10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.Size_of_the_selected_file_is___
lea rcx, [rsp + 0xb08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x618]
lea rdx, [rsp + 0xb08]
lea rcx, [rsp + 0x18f8]
call fcn.140006190
nop
lea r8, [rsp + 0xb10]
mov rdx, rax
lea rcx, [rsp + 0x18f0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x18f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a3a9c
lea rdx, str.Not_able_to_find_the_size_of_file_please_provide_valid_input_and_click_on__NEXT_STEP_
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
nop
lea rcx, [rsp + 0x618]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xee40]
call sub.mfc140u.dll_CDockingPanesRow::CDockingPanesRow
nop
lea rcx, [rsp + 0x2138]
call sub.mfc140u.dll_CDockingManager::CDockingManager
nop
lea rcx, [rsp + 0xb18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x620]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1900]
jmp 0x14009ad97
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1908]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
movzx ebx, al
test al, al
jne 0x1400a3b73
xor r8d, r8d
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3b73
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1910]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
movzx ebx, al
movzx esi, bl
jmp 0x1400a8f7d
lea rdx, str.antivirusCheckAndDelete
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3e8b
xor sil, sil
lea rdx, [0x140144758]
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + 0xb28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0xb28]
lea rcx, [rsp + 0x1918]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x628]
call fcn.1400f5c80
nop
xor r8d, r8d
lea rdx, str.Avast_Antivirus
lea rcx, [rsp + 0x628]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3d21
lea rdx, str.C:Program_Files__x86_AVAST_SoftwareAvastAvastUI.exe
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x1920]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a3c89
lea rdx, str.del_C:_Program_Files__x86___AVAST_Software_AvastAvastUI.exe__s__q
lea rcx, [rsp + 0x1928]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1930]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1930]
jmp 0x1400a3d0a
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x1938]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a3d13
lea rdx, str.del_C:_Program_Files__AVAST_Software_AvastAvastUI.exe__s__q
lea rcx, [rsp + 0x1940]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1948]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1948]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0x628]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3e5a
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x488]
lea rcx, [rsp + 0x1950]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a3dc1
lea rdx, str.del_C:_Program_Files__x86___AVG_AntivirusAVGUI.exe__s__q
lea rcx, [rsp + 0x1958]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1960]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1960]
jmp 0x1400a3e42
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x488]
lea rcx, [rsp + 0x1968]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a3e4b
lea rdx, str.del_C:_Program_Files__AVG_AntivirusAVGUI.exe__s__q
lea rcx, [rsp + 0x1970]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1978]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1978]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x628]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.CheckWiFiSignalStrength
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a40b6
lea rdx, str.netsh_interface_show_interface_findstr_WiFi
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x490]
lea rcx, [rsp + 0x1980]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.1400f5c80
nop
xor r8d, r8d
lea rdx, str.Connected
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jle 0x1400a4091
lea rdx, str.netsh_wlan_show_interface_findstr_Signal
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x490]
lea rcx, [rsp + 0x1988]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1990]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1990]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor r8d, r8d
lea rdx, [0x140162c4c]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1998]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1998]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140160ab8]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x19a0]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
cmp eax, 0x32
jl 0x1400a4091
mov sil, 1
lea rdx, str.IPCONFIG__FLUSHDNS
lea rcx, [rsp + 0x19a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x19b0]
call fcn.1400f5c80
lea rcx, [rsp + 0x19b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a4094
xor sil, sil
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.avgcheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4212
xor sil, sil
lea rdx, [0x140144758]
lea rcx, [rsp + 0x19d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + 0xb38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0xb38]
lea rcx, [rsp + 0x19b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb30]
call fcn.1400f5c80
nop
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0xb30]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a41e1
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x19c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a4189
movzx esi, al
jmp 0x1400a41d2
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x19c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
movzx esi, sil
mov edi, 1
cmp al, dil
cmove esi, edi
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x19d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.antivirusCheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a452a
xor sil, sil
lea rdx, [0x140144758]
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + 0xb40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0xb40]
lea rcx, [rsp + 0x19d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x630]
call fcn.1400f5c80
nop
xor r8d, r8d
lea rdx, str.Avast_Antivirus
lea rcx, [rsp + 0x630]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a43c0
lea rdx, str.C:Program_Files__x86_AVAST_SoftwareAvastAvastUI.exe
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
lea rcx, [rsp + 0x19e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a4328
lea rdx, str.C:_Program_Files__x86___AVAST_Software_AvastAvastUI.exe
lea rcx, [rsp + 0x19e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x19f0]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19f0]
jmp 0x1400a43a9
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
lea rcx, [rsp + 0x19f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a43b2
lea rdx, str.C:_Program_Files__AVAST_Software_AvastAvastUI.exe
lea rcx, [rsp + 0x1a00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a08]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0x630]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a44f9
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x4a8]
lea rcx, [rsp + 0x1a10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a4460
lea rdx, str.C:_Program_Files__x86___AVG_AntivirusAVGUI.exe
lea rcx, [rsp + 0x1a18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a20]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a20]
jmp 0x1400a44e1
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4a8]
lea rcx, [rsp + 0x1a28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
cmp al, 1
jne 0x1400a44ea
lea rdx, str.C:_Program_Files__AVG_AntivirusAVGUI.exe
lea rcx, [rsp + 0x1a30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a38]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x630]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.CheckVirtualMemorySize
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4a5e
lea rcx, [rsp + 0x638]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call fcn.1400fa130
mov edi, eax
lea rax, [rsp + 0x1a40]
mov qword [rsp + 0x60], rax
lea rdx, [0x140145960]
lea rcx, [rsp + 0x1a40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
mov rbx, rax
lea rdx, str.computerLowMemory_system_RAM_SIZE
lea rcx, [rsp + 0x1a48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
shl edi, 0xa
movd xmm0, edi
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x140165220]
cvttsd2si ebx, xmm0
lea rcx, [rsp + 0x360]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov r8d, ebx
lea rdx, [0x140152cf0]
lea rcx, [rsp + 0x360]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
mov r8d, edi
lea rdx, [0x140152cf0]
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
lea rdx, [0x140144b88]
lea rcx, [rsp + 0xb48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x358]
lea rdx, str.c:pagefile.sys
lea rcx, [rsp + 0x1a58]
call fcn.140099860
nop
lea r8, [rsp + 0xb48]
mov rdx, rax
lea rcx, [rsp + 0x1a50]
call fcn.140006190
nop
lea r8, [rsp + 0x360]
mov rdx, rax
lea rcx, [rsp + 0xb78]
call fcn.140006190
nop
lea rcx, [rsp + 0x1a50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
lea rcx, [rsp + 0x638]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rdx, str.PagingFiles
lea rcx, [rsp + 0xb70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rax, [rsp + 0x1a60]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0xb70]
lea rcx, [rsp + 0x1a60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, [rsp + 0x638]
lea rcx, [rsp + 0x1a68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov r9, 0xffffffff80000002
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.1400f9800
nop
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0xb78]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
jne 0x1400a484c
lea rdx, str._MB._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0xb58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str._MB__maximum_size__
lea rcx, [rsp + 0xb50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x358]
lea rdx, str.System_virtual_memory_is_already_at_optimum_initial_size__
lea rcx, [rsp + 0x1a88]
call fcn.140099860
nop
lea r8, [rsp + 0xb50]
mov rdx, rax
lea rcx, [rsp + 0x1a80]
call fcn.140006190
nop
lea r8, [rsp + 0x360]
mov rdx, rax
lea rcx, [rsp + 0x1a78]
call fcn.140006190
nop
lea r8, [rsp + 0xb58]
mov rdx, rax
lea rcx, [rsp + 0x1a70]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
jmp 0x1400a4a00
mov edx, 0x20
xor r8d, r8d
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1a90]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x20
xor r8d, r8d
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov r8d, eax
lea rdx, [rsp + 0x1a98]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._MB._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0xb68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str._MB___maximum_size__
lea rcx, [rsp + 0xb60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x358]
lea rdx, str.System_virtual_memory_has_been_set_to_optimum_initial_size__
lea rcx, [rsp + 0x1ab8]
call fcn.140099860
nop
lea r8, [rsp + 0xb60]
mov rdx, rax
lea rcx, [rsp + 0x1ab0]
call fcn.140006190
nop
lea r8, [rsp + 0x360]
mov rdx, rax
lea rcx, [rsp + 0x1aa8]
call fcn.140006190
nop
lea r8, [rsp + 0xb68]
mov rdx, rax
lea rcx, [rsp + 0x1aa0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1aa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1aa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ab0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ab8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x360]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x638]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.IsLaptop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4adf
lea rdx, str.hostname
lea rcx, [rsp + reloc.mfc140u.dll_Ordinal_6848]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x640]
call fcn.1400f5c80
nop
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor r8d, r8d
lea rdx, str.syglap
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.IsAdminRequiredForSolution
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4e55
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ac8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ac8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1ad0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ad0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.InstallService.bat
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a4d0b
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x4f4]
call fcn.1400fc290
lea rdx, [0x14015a550]
lea rcx, [rsp + 0xb80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1ae0]
call fcn.1400f7b40
nop
lea r8, [rsp + 0xb80]
mov rdx, rax
lea rcx, [rsp + 0x1ad8]
call fcn.140006190
nop
lea r8, [rsp + 0x368]
mov rdx, rax
lea rcx, [rsp + 0xd30]
call fcn.140006190
nop
lea rcx, [rsp + 0x1ad8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ae0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.cmd.exe__k
lea rcx, [rsp + 0xb88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xd30]
lea rdx, [rsp + 0xb88]
lea rcx, [rsp + 0x1ae8]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1ae8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x4f4]
call fcn.1400fc290
test eax, eax
je 0x1400a4ce2
lea rcx, [rsp + 0xd30]
jmp 0x1400a4e41
lea rdx, str.DeleteService.bat
lea rcx, [rsp + 0x50]
call fcn.14000ca00
test al, al
je 0x1400a4e48
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0xb98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1af8]
call fcn.1400f7b40
nop
lea r8, [rsp + 0xb98]
mov rdx, rax
lea rcx, [rsp + 0x1af0]
call fcn.140006190
nop
lea r8, [rsp + 0x368]
mov rdx, rax
lea rcx, [rsp + 0xba8]
call fcn.140006190
nop
lea rcx, [rsp + 0x1af0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1af8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.cmd.exe__k
lea rcx, [rsp + 0xba0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xba8]
lea rdx, [rsp + 0xba0]
lea rcx, [rsp + 0x1b00]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1b00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xba0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xba8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x368]
jmp 0x14009ad97
xor r8d, r8d
lea rdx, str.RunBatchFileInAdminMode
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a4fcb
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1b08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1b10]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0xbb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1b20]
call fcn.1400f7b40
nop
lea r8, [rsp + 0xbb0]
mov rdx, rax
lea rcx, [rsp + 0x1b18]
call fcn.140006190
nop
lea r8, [rsp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0xbb8]
call fcn.140006190
nop
lea rcx, [rsp + 0x1b18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xbb8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xbb8]
jmp 0x14009ad97
lea rdx, str.renameSipProfileDeleteFiles
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a50e9
lea rax, [rsp + 0x1b28]
mov qword [rsp + 0x60], rax
lea rdx, [0x140144758]
lea rcx, [rsp + 0x1b28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x1b30]
mov rcx, r15
call fcn.1400ab160
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x4b0]
call fcn.1400eb900
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x4b0]
call fcn.140041590
test al, al
je 0x1400a5060
lea rdx, [rsp + 0x4b0]
lea rcx, [rsp + 0x1b38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400ff940
lea rdx, [r15 + 0x208]
lea rcx, [rsp + 0x648]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x648]
call fcn.140041590
test al, al
je 0x1400a50cd
lea r8, [rsp + 0x648]
lea rdx, [rsp + 0x4b0]
lea rcx, [rsp + 0x1b40]
call fcn.140006190
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400ddd80
nop
lea rcx, [rsp + 0x1b40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x648]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4b0]
jmp 0x14009ad97
xor r8d, r8d
lea rdx, str.lyncVersionDetection
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a5247
xor sil, sil
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1b48]
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x4b8]
call fcn.1400f8fe0
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a51ca
lea rdx, str.lync2016
jmp 0x1400a5212
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a51ef
lea rdx, str.lync2013
jmp 0x1400a5212
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5225
lea rdx, str.lync2010
lea rcx, [rsp + 0x1b0]
call fcn.14000ca00
test al, al
setne sil
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, [0x1401631d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a56ac
lea rcx, [rsp + 0xbd8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xbd0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea r8, [rsp + 0x4d0]
lea rdx, [rsp + 0xbd0]
lea rcx, [rsp + 0xbd8]
call fcn.1400eb4a0
call fcn.1400e8f10
mov rdx, rax
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
mov dword [rsp + 0x4f8], 0x208
lea r8, [rsp + 0x4f8]
lea rdx, [rsp + 0x10040]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
lea rdx, [rsp + 0x10040]
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x378]
call fcn.14000ca00
test al, al
je 0x1400a5335
lea rdx, str.WORK_GROUP
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [0x1401457e8]
lea rcx, [rsp + 0xbc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401457e8]
lea rcx, [rsp + 0xbc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x4d0]
lea rdx, str.Your_Host_Name___Ip_Address___Domain_Name_respectively_is
lea rcx, [rsp + 0x1b70]
call fcn.140099860
nop
lea r8, [rsp + 0xbc0]
mov rdx, rax
lea rcx, [rsp + 0x1b68]
call fcn.140006190
nop
lea r8, [rsp + 0x4c8]
mov rdx, rax
lea rcx, [rsp + 0x1b60]
call fcn.140006190
nop
lea r8, [rsp + 0xbc8]
mov rdx, rax
lea rcx, [rsp + 0x1b58]
call fcn.140006190
nop
lea r8, [rsp + 0x378]
mov rdx, rax
lea rcx, [rsp + 0x1b50]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.WMIC_BIOS_GET_SERIALNUMBER
lea rcx, [rsp + 0x1b78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4c0]
call fcn.1400f5c80
nop
xor r8d, r8d
lea rdx, [0x14014b5a8]
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152fc4]
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1b80]
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x4d0]
lea rdx, str.Your_Hostname___Ip_Address___Domain_Name_respectively_is
lea rcx, [rsp + 0x1bb8]
call fcn.140099860
nop
lea r8, [0x1401632d8]
mov rdx, rax
lea rcx, [rsp + 0x1bb0]
call fcn.1400997c0
nop
lea r8, [rsp + 0x4c8]
mov rdx, rax
lea rcx, [rsp + 0x1ba8]
call fcn.140006190
nop
lea r8, [0x1401632d8]
mov rdx, rax
lea rcx, [rsp + 0x1ba0]
call fcn.1400997c0
nop
lea r8, [rsp + 0x378]
mov rdx, rax
lea rcx, [rsp + 0x1b98]
call fcn.140006190
nop
lea r8, str._and_Serial_Number_is
mov rdx, rax
lea rcx, [rsp + 0x1b90]
call fcn.1400997c0
nop
lea r8, [rsp + 0x370]
mov rdx, rax
lea rcx, [rsp + 0x1b88]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ba0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ba8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1bb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1bb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbd8]
jmp 0x14009a25c
xor r8d, r8d
lea rdx, str.officeVersionDetection
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a590e
xor sil, sil
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1bc0]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1bc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1f0]
call fcn.1400fa4c0
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a57a3
lea rdx, str.2016
lea rcx, [rsp + 0x138]
call fcn.14000ca00
test al, al
setne sil
jmp 0x1400a584a
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a57db
lea rdx, str.2013
lea rcx, [rsp + 0x138]
call fcn.14000ca00
test al, al
setne sil
jmp 0x1400a584a
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5813
lea rdx, str.2010
lea rcx, [rsp + 0x138]
call fcn.14000ca00
test al, al
setne sil
jmp 0x1400a584a
xor r8d, r8d
lea rdx, str.12.0
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a584a
lea rdx, str.2007
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rax, [rsp + 0x1bc8]
mov qword [rsp + 0x60], rax
lea rdx, str._:_Detected_version
lea rcx, [rsp + 0xbe0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xbe0]
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x1bd8]
call fcn.140006190
nop
lea r8, [rsp + 0x1f0]
mov rdx, rax
lea rcx, [rsp + 0x1bc8]
call fcn.140006190
mov rbx, rax
lea rdx, str.officeVersionDetection_condition:
lea rcx, [rsp + 0x1bd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x1bd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.verifyFromPrinterList
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a59d1
xor bl, bl
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2b8
lea rcx, [rsp + 0x650]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, str.wmic_printer_get_name
lea rcx, [rsp + 0x1be0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xbe8]
call fcn.1400f5c80
nop
mov edx, 0x22
lea rcx, [rsp + 0x650]
call qword [sym.imp.mfc140u.dll_COleSafeArray::PutElement]
lea rcx, [rsp + 0x650]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0xbe8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
movzx esi, bl
mov edi, 1
test eax, eax
cmovns esi, edi
lea rcx, [rsp + 0xbe8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x650]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.matchreg
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a5d07
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1be8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1be8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1bf0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1bf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140160ab8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1bf8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1bf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1c00]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140160ab8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1c08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1c10]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x140144758]
lea rcx, [rsp + 0x238]
call fcn.14000ca00
test al, al
jne 0x1400a5c06
call fcn.1400ec8e0
test al, al
lea rdx, [rsp + 0x238]
je 0x1400a5c0e
lea rdx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
lea rcx, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
lea rcx, [rsp + 0x1c18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rdx, [rsp + 0x230]
mov rcx, rax
call fcn.1400eae00
test eax, eax
jne 0x1400a5cc7
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
test eax, eax
je 0x1400a5cc7
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x1c20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rdx, [rsp + 0x230]
mov rcx, rax
call fcn.1400eae00
test eax, eax
jne 0x1400a5cc7
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.RunScriptForMozilla
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6013
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsProxyServer
lea rcx, [rsp + 0xc00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0xc00]
lea rcx, [rsp + 0x1c28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rdx, [rsp + 0x1e0]
mov rcx, rax
call fcn.1400eae00
lea r8, [0x140145960]
lea rdx, str.:4145
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1c30]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x1c30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.Proxy_address_read_from_registry_to_be_set_in_Mozilla_Proxy
lea rcx, [rsp + 0x1c38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x240]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CMFCPropertySheet::GetRuntimeClass]
lea rcx, [rsp + 0x240]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x240]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCPropertySheet::GetRuntimeClass]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015a550]
lea rcx, [rsp + 0xbf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1c50]
call fcn.1400f7b40
nop
lea r8, [rsp + 0xbf8]
mov rdx, rax
lea rcx, [rsp + 0x1c48]
call fcn.140006190
nop
lea r8, [rsp + 0x240]
mov rdx, rax
lea rcx, [rsp + 0x658]
call fcn.140006190
nop
lea rcx, [rsp + 0x1c48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea r8d, [rdx + 0x58]
lea rcx, [rsp + 0x20a8]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x2090], 0x70
mov dword [rsp + 0x2094], 0x40
xor r14d, r14d
mov qword [rsp + 0x2098], r14
mov qword [rsp + 0x20a0], r14
lea rcx, [rsp + 0x658]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov qword [rsp + 0x20a8], rax
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov qword [rsp + 0x20b0], rax
mov qword [rsp + 0x20b8], r14
mov dword [rsp + 0x20c0], r14d
mov qword [rsp + 0x20c8], r14
lea rcx, [rsp + 0x2090]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov edx, 0xffffffff
mov rcx, qword [rsp + reloc.mfc140u.dll_CDockablePaneAdapter::LoadState]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rax, [rsp + 0x1c58]
mov qword [rsp + 0x60], rax
lea rdx, [0x140144758]
lea rcx, [rsp + 0x1c58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x658]
lea rcx, [rsp + 0x1c60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov r8, rbx
mov dl, 1
mov rcx, rax
call fcn.1400ef3a0
nop
lea rcx, [rsp + 0x658]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x240]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1e0]
jmp 0x14009ad97
xor r8d, r8d
lea rdx, str.symantecUpdatePolicy
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a639f
mov sil, 1
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1c68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1c70]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.HKEY_LOCAL_MACHINESOFTWARESymantecSymantec_Endpoint_ProtectionCurrentVersionpublic_opstateLatestVirusDefsDate
lea rcx, [rsp + 0xc10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x1c78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rdx, [rsp + 0xa0]
mov rcx, rax
call fcn.1400eae00
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1c80]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x1c80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.last_updated_date_read_from_registry
lea rcx, [rsp + 0x1c88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rax, [rsp + 0x1c90]
mov qword [rsp + 0x60], rax
lea rdx, str.Symantec_is_up_to_date.Current_Virus_Definition_is
lea rcx, [rsp + 0xc08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0xc08]
lea rcx, [rsp + 0x1c90]
call fcn.140006190
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe20
nop
lea rcx, [rsp + 0xc08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2d
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1c98]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov r14d, eax
lea rcx, [rsp + 0x1c98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r8d, ebx
lea rdx, [rsp + 0x1ca0]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ca0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2d
xor r8d, r8d
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ca8]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov edi, eax
lea rcx, [rsp + 0x1ca8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r8d, ebx
lea rdx, [rsp + 0x1cb0]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1cb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ebx, eax
lea rcx, [rsp + 0x1cb8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rsp + 0x1cb8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov r8d, dword [rax + 0xc]
mov edx, dword [rax + 0x10]
inc edx
mov ecx, dword [rax + 0x14]
add ecx, 0x76c
cmp ebx, ecx
jne 0x1400a637d
sub edx, edi
cmp edx, 1
jg 0x1400a637d
sub r8d, r14d
movzx esi, sil
xor r14d, r14d
cmp r8d, 7
cmovg esi, r14d
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, [0x140163638]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6a5c
xor sil, sil
mov byte [rsp + 0x81], sil
lea rdx, str.AnakageFilesVBScriptsSymantecManualUpdate.bat
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1cc0]
call fcn.1400f7b40
nop
lea r8, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
mov rdx, rax
lea rcx, [rsp + 0xc50]
call fcn.140006190
nop
lea rcx, [rsp + 0x1cc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1cc8]
mov qword [rsp + 0x60], rax
lea rdx, [0x140144758]
lea rcx, [rsp + 0x1cc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0xc50]
lea rcx, [rsp + 0x1cd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140101190
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x1cd8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rsp + 0x1cd8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov r9, rax
lea r8, [0x140153660]
mov edx, 0x50
lea rcx, [rsp + 0xf3d0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
lea rdx, [rsp + 0xf3d0]
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str..Log
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_LOCAL_MACHINESOFTWARESymantecSymantec_Endpoint_ProtectionCurrentVersionPRODUCTVERSION
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x1ce0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rdx, [rsp + 0x1d8]
mov rcx, rax
call fcn.1400eae00
lea rdx, str..105
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1ce8]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0x1ce8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.Symantec_Version_from_registry
lea rcx, [rsp + 0x1cf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rdx, [0x1401456c0]
lea rcx, [rsp + 0xc30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.DataLogsAV_
lea rcx, [rsp + 0xc28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str._C:ProgramDataSymantecSymantec_Endpoint_Protection_
lea rcx, [rsp + 0xc20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x1d8]
lea rdx, [rsp + 0xc20]
lea rcx, [rsp + 0x1d08]
call fcn.140006190
nop
lea r8, [rsp + 0xc28]
mov rdx, rax
lea rcx, [rsp + 0x1d00]
call fcn.140006190
nop
lea r8, [rsp + 0x388]
mov rdx, rax
lea rcx, [rsp + 0x1cf8]
call fcn.140006190
nop
lea r8, [rsp + 0xc30]
mov rdx, rax
lea rcx, [rsp + 0x668]
call fcn.140006190
nop
lea rcx, [rsp + 0x1cf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1d10]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x668]
lea rcx, [rsp + 0x1d10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.Symantec_log_file_name
lea rcx, [rsp + 0x1d18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rdx, [0x140145960]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, str.more
lea rcx, [rsp + 0xc38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x668]
lea rdx, [rsp + 0xc38]
lea rcx, [rsp + 0x1d20]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1d28]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1d30]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x1d30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.Symantec_log_content
lea rcx, [rsp + 0x1d38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rdx, str.Risks:_0
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r14d, r14d
nop dword [rax]
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov edi, eax
cmp eax, 0xffffffff
jne 0x1400a69cb
test r14d, r14d
jle 0x1400a694e
mov sil, 1
mov byte [rsp + 0x81], sil
xor r8d, r8d
lea rdx, str.Files
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1d40]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1d48]
mov qword [rsp + 0x60], rax
lea rdx, str._files_etc...
lea rcx, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.Symantec_scan_completed__Risks:_0_and
lea rcx, [rsp + 0xc40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0xc40]
lea rcx, [rsp + 0x1d50]
call fcn.140006190
nop
lea r8, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
mov rdx, rax
lea rcx, [rsp + 0x1d48]
call fcn.140006190
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe20
nop
lea rcx, [rsp + 0x1d50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x668]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
jmp 0x1400a8f7d
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
sub ebx, edi
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub ebx, eax
mov r8d, ebx
lea rdx, [rsp + 0x1d58]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
inc r14d
jmp 0x1400a6800
xor r8d, r8d
lea rdx, str.showProxyDialog
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a6b9a
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1d80]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1d88]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140144758]
lea rcx, [rsp + 0x50]
call fcn.140041590
test al, al
je 0x1400a6b65
lea rax, [rsp + 0x1d90]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1d90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
xor edx, edx
lea rcx, [rsp + 0x3a40]
call fcn.140033490
nop
lea rcx, [rsp + 0x3a40]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x3a40]
call fcn.140033580
jmp 0x1400a8f7d
lea rdx, str.checkforDomain
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6cee
lea rdx, str.systeminfo_find__Domain_
lea rcx, [rsp + 0x1d98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x248]
call fcn.1400f5c80
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x390
lea rcx, [rsp + 0xc58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, str.sony
lea rcx, [rsp + 0xc58]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, [rsp + 0x248]
test eax, eax
js 0x1400a6c69
lea rax, [rsp + 0x1da0]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x1da0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.check_for_user_domain_in_sony
lea rcx, [rsp + 0x1da8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rdx, str.ap.sony.com
jmp 0x1400a6cb5
lea rax, [rsp + 0x1db0]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x1db0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.check_for_user_domain_in_syngene
lea rcx, [rsp + 0x1db8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rdx, str.BIOCON.COM
xor r8d, r8d
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0xc58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.Groupdatecheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a6fd2
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1dc0]
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1dc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1df8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x680]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140153a08]
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6f92
lea rdx, str.gpresult__Scope_User__v_findstr__Last_time_Group_Policy_was_applied_
lea rcx, [rsp + 0x680]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rdx, [rsp + 0x680]
lea rcx, [rsp + 0x1dc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1dd0]
call fcn.1400f5c80
nop
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1dd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1dd8]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x1dd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.Check_for_group_policy_updation
lea rcx, [rsp + 0x1de0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
xor r8d, r8d
lea rdx, str.Last_time_Group_Policy_was_applied:
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
mov r8d, eax
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, str.Group_Policy_was_applied_from:
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1de8]
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1de8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea r8, str.._Do_you_want_to_force_update_it_
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x1df0]
call fcn.1400997c0
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1df0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x680]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1df8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.switchoffproxy
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a7580
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e00]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1e08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edi, 1
mov dword [rsp + 0x188], edi
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
xor r8d, r8d
lea rdx, str.ongc
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a71a5
test ebx, ebx
jne 0x1400a71a5
cmp qword [rsp + 0xb0], 0
je 0x1400a71a5
lea rdx, str.10.205.48.228:8080
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
mov dword [rsp + 0x4fc], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x4fc]
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 3]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140163b80]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a730d
test ebx, ebx
jne 0x1400a730d
cmp qword [rsp + 0xb0], 0
je 0x1400a730d
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e10]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.:8080
lea rcx, [rsp + 0xc60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xc60]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x3b0]
call fcn.140006190
nop
lea rcx, [rsp + 0xc60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov dword [rsp + 0x500], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x500]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140163b90]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7431
test ebx, ebx
jne 0x1400a74b3
cmp qword [rsp + 0xb0], 0
je 0x1400a74b3
lea rdx, str.Proxy.HDBFS.com:9444
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov dword [rsp + 0x504], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x504]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r14d, r14d
mov dword [rsp + 0x188], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x188]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a74b3
xor r14d, r14d
mov dword [rsp + 0x508], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x508]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x188]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
lea rdx, str.DisableFirefoxProxy
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a756d
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3a8
lea rcx, [rsp + 0xc78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, str.disableProxyInMozilla.bat
lea rcx, [rsp + 0xc68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xc68]
lea rdx, [rsp + 0xc78]
lea rcx, [rsp + 0xc70]
call fcn.140006190
nop
lea rcx, [rsp + 0xc68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xc70]
lea rcx, [rsp + 0x1e18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400df730
nop
lea rcx, [rsp + 0xc70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14009a262
lea rdx, str.checkpopstatus
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a77c8
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e20]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1e28]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, str.Internet_Explorer
call fcn.1400996b0
test al, al
je 0x1400a76db
lea rdx, [0x140145960]
lea rcx, [rsp + 0x688]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, [0x140163c00]
lea rcx, [rsp + 0xc80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
nop
lea rdx, [rsp + 0xc80]
lea rcx, [rsp + 0x1e30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
lea rdx, [rsp + 0x688]
mov rcx, rax
call fcn.1400e8280
mov dx, 1
lea rcx, [rsp + 0x688]
call fcn.140099660
test al, al
sete sil
lea rcx, [rsp + 0xc80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x688]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, [rsp + 0x50]
lea rcx, str.chrome
call fcn.1400996b0
test al, al
je 0x14009a262
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREPoliciesGoogleChrome
lea rcx, [rsp + 0x1e40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
lea rax, [rsp + 0x1e38]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREPoliciesGoogleChrome
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor r14d, r14d
mov dword [rsp + 0x22c], r14d
mov dword [rsp + 0x510], 4
mov dword [rsp + 0x50c], 0x3ff
lea rax, [rsp + 0x50c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x22c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x510]
xor r8d, r8d
lea rdx, str.DefaultPopupsSetting
mov rcx, qword [rsp + 0x1e38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400a77b2
cmp dword [rsp + 0x22c], 1
jne 0x1400a77b2
mov sil, 1
lea rcx, [rsp + 0x1e40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor sil, sil
lea rcx, [rsp + 0x1e40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.telnetDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7851
lea rax, [rsp + 0x1e48]
mov qword [rsp + 0x60], rax
lea rdx, [0x140144758]
lea rcx, [rsp + 0x1e48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [0x140163d9c]
lea rcx, [rsp + 0x1e50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rbx
mov dl, 1
mov rcx, rax
call fcn.140100b90
xor edx, edx
lea rcx, [rsp + 0x3d90]
call fcn.1400ce850
nop
lea rcx, [rsp + 0x3d90]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x3d90]
call fcn.1400ce8f0
jmp 0x14009a262
xor r8d, r8d
lea rdx, [0x140163da0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a797a
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e58]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1e60]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1e68]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1e68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
xor edx, edx
lea rcx, [rsp + 0x40e0]
call fcn.140005ff0
nop
lea rcx, [rsp + 0x40e0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x40e0]
call fcn.1400060d0
jmp 0x1400a8f7d
lea rdx, str.showPrinterdialogbox
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a7f4d
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e70]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1e78]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7aa7
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1e80]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140144758]
lea rcx, [rsp + 0x50]
call fcn.140041590
test al, al
je 0x1400a7af1
lea rax, [rsp + 0x1e88]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1e88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
xor r8d, r8d
lea rdx, str.servercsvfile
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7b72
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e90]
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0xa3c0]
call fcn.1400b9650
nop
lea rdx, [0x140163e18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
movzx ecx, byte [rsp + 0xe3d8]
mov edi, 1
test eax, eax
cmove ecx, edi
mov byte [rsp + 0xe3d8], cl
xor r8d, r8d
lea rdx, str.servercsvfile
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7c37
lea rax, [rsp + 0x1e98]
mov qword [rsp + 0x60], rax
lea rdx, str..csv
lea rcx, [rsp + 0xc88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xc88]
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x1e98]
call fcn.140006190
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
nop
lea rcx, [rsp + 0xc88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov word [rsp + 0xe3d8], 0x101
lea rcx, [rsp + 0xa3c0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x390
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, str.BInternal
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7e81
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2b8
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov edx, 0x5c
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ea0]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ea0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ea8]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ea8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.__printer_here_
lea rcx, [rsp + 0xca0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.__is_listed_here_or_you_get_any_error_message._Can_you_see__
lea rcx, [rsp + 0xc98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.Please_wait_till__
lea rcx, [rsp + 0xc90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0xc90]
lea rcx, [rsp + 0x1ec8]
call fcn.140006190
nop
lea r8, [rsp + 0xc98]
mov rdx, rax
lea rcx, [rsp + 0x1ec0]
call fcn.140006190
nop
lea r8, [rsp + 0xf0]
mov rdx, rax
lea rcx, [rsp + 0x1eb8]
call fcn.140006190
nop
lea r8, [rsp + 0xca0]
mov rdx, rax
lea rcx, [rsp + 0x1eb0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401d9560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1eb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1eb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ec0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ec8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xca0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.sTemp.csv
lea rcx, [rsp + 0xca8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1ed8]
call fcn.1400f6cf0
nop
lea r8, [rsp + 0xca8]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CDC::HIMETRICtoDP]
call fcn.140006190
mov rcx, rax
call fcn.1400f5220
movzx ebx, al
lea rcx, [rsp + 0x1ed8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xca8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a7f17
lea rcx, [rsp + 0x1ee0]
call fcn.1400f6cf0
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400de060
nop
lea rcx, [rsp + 0x1ee0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test edi, edi
sete sil
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa3c0]
call fcn.1400b98d0
nop
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
lea rdx, str.IsWizardPrinter
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7fb2
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov rdx, qword [rcx + 0x2d8]
add rdx, 0x90
lea rcx, [rsp + 0xcb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rdx, [0x140163eb0]
lea rcx, [rsp + 0xcb8]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rcx, [rsp + 0xcb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.printerdetrmination
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a80c9
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov rdx, qword [rcx + 0x2d8]
add rdx, 0x38
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x258]
call fcn.1400f7b40
nop
xor r8d, r8d
lea rdx, str.Canon_imageRUNNER_IR_3225
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8025
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Canon_imageRUNNER_IR_3225.pdf
jmp 0x1400a806b
xor r8d, r8d
lea rdx, str.Cannon_Imagerunner_2525
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a804a
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Cannon_Imagerunner_2525.pdf
jmp 0x1400a806b
mov edx, 1
xor r8d, r8d
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
test eax, eax
je 0x1400a8079
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Leaser_jet_Pro_MFP_M128fn.pdf
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
mov dword [rsp + 0x28], 5
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4e0]
jmp 0x14009ad97
xor r8d, r8d
lea rdx, str.ShowPrinterDialogBoxforsony
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a8207
lea rdx, [0x140152fc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ee8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ee8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CMDIFrameWndEx::HtmlHelpW]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMDIFrameWndEx::HtmlHelpW]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140144758]
lea rcx, [rsp + 0x50]
call fcn.140041590
test al, al
je 0x1400a81d2
lea rax, [rsp + 0x1ef8]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1ef8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400abe60
xor edx, edx
lea rcx, [rsp + 0x4920]
call fcn.1400859a0
nop
lea rcx, [rsp + 0x4920]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x4920]
call fcn.140085a70
jmp 0x1400a8f7d
lea rdx, str.isCitrixInstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a82ac
lea rdx, str.C:Program_Files__x86_CitrixICA_ClientSelfServicePluginSelfService.exe
lea rcx, [rsp + 0x4d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x4d8]
lea rcx, [rsp + 0x1f00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
jne 0x1400a8296
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4d8]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4d8]
lea rcx, [rsp + 0x1f08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
test al, al
setne sil
jmp 0x1400a8299
mov sil, 1
lea rcx, [rsp + 0x4d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.deleteofficecachefolder
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8703
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xd10]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xd08]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xd00]
call fcn.1400fa4c0
nop
lea r8, [rsp + 0xd08]
lea rdx, [rsp + 0xd10]
lea rcx, [rsp + 0x1c8]
call fcn.1400eb4a0
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x1f10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x1f58]
call fcn.1400f6d10
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + 0xd00]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8426
lea rdx, str.AppDataLocalMicrosoftOffice16.0OfficeFileCache
lea rcx, [rsp + 0xcc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0xcc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x1c8]
lea rdx, [rsp + 0xcc0]
lea rcx, [rsp + 0x1f20]
call fcn.140006190
nop
lea r8, [rsp + 0xcc8]
mov rdx, rax
lea rcx, [rsp + 0x1f18]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1f20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcc8]
jmp 0x1400a868e
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a84f5
lea rdx, str.AppDataLocalMicrosoftOffice15.0OfficeFileCache
lea rcx, [rsp + 0xcd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0xcd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x1c8]
lea rdx, [rsp + 0xcd0]
lea rcx, [rsp + 0x1f30]
call fcn.140006190
nop
lea r8, [rsp + 0xcd8]
mov rdx, rax
lea rcx, [rsp + 0x1f28]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1f30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcd8]
jmp 0x1400a868e
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a85c4
lea rdx, str.AppDataLocalMicrosoftOffice14.0OfficeFileCache
lea rcx, [rsp + 0xce8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0xce0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x1c8]
lea rdx, [rsp + 0xce0]
lea rcx, [rsp + 0x1f40]
call fcn.140006190
nop
lea r8, [rsp + 0xce8]
mov rdx, rax
lea rcx, [rsp + 0x1f38]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1f40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xce0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xce8]
jmp 0x1400a868e
xor r8d, r8d
lea rdx, str.12.0
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8694
lea rdx, str.AppDataLocalMicrosoftOffice12.0OfficeFileCache
lea rcx, [rsp + 0xcf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401463f8]
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x1c8]
lea rdx, [rsp + 0xcf0]
lea rcx, [rsp + 0x1f50]
call fcn.140006190
nop
lea r8, [rsp + 0xcf8]
mov rdx, rax
lea rcx, [rsp + 0x1f48]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1f50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400de060
nop
lea rcx, [rsp + 0x1f58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c8]
jmp 0x14009ad97
xor r8d, r8d
lea rdx, str.IsCiscoJabberInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a87ae
lea rdx, str.C:Program_Files__x86_Cisco_SystemsCisco_JabberCiscoJabber.exe
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0x3c8]
lea rcx, [rsp + 0x1f60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
movzx ebx, al
test al, al
jne 0x1400a8798
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x3c8]
lea rcx, [rsp + 0x1f68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rcx, rax
call fcn.1400f5220
movzx ebx, al
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
movzx esi, bl
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.advancedcleanup
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8be7
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140152fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1f70]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1f78]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdx, r14
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
xor r8d, r8d
lea rdx, str.advancedcleanup
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a898f
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1f80]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1f88]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
xor r8d, r8d
lea rdx, [0x140164388]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8acb
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1f90]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x1401531bc]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1f98]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140152d08]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1fa0]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1fa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x8840]
call fcn.140007f70
nop
lea rdx, str.ShowMessage
lea rcx, [rsp + 0xb8]
call fcn.14000ca00
test al, al
je 0x1400a8b22
lea rax, [rsp + 0x1fa8]
mov qword [rsp + 0x60], rax
lea rdx, str.MsgParameter
lea rcx, [rsp + 0x1fa8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
mov rbx, rax
lea rcx, [rsp + 0x1fb0]
jmp 0x1400a8b4f
lea rax, [rsp + 0x1fb8]
mov qword [rsp + 0x60], rax
lea rdx, [0x140145960]
lea rcx, [rsp + 0x1fb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
mov rbx, rax
lea rcx, [rsp + 0x1fc0]
lea rdx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x8840]
call fcn.1400b1f90
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0x1fc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
lea rcx, [rsp + 0x8840]
call fcn.1400b2170
lea rcx, [rsp + 0x8840]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test rax, rax
sete sil
lea rcx, [rsp + 0x8840]
call fcn.1400083b0
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a8f7d
xor r8d, r8d
lea rdx, str.changeIESettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8e1b
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x260]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor edx, edx
lea ecx, [rdx + 1]
call fcn.1400deda0
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsSecureProtocols
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x1fd0]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x1fd8]
mov qword [rsp + 0x78], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x1fd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, str.2688
lea rcx, [rsp + 0x1fd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x1fe0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400d8ee0
mov edi, eax
test eax, eax
je 0x1400a8d15
lea rdx, str.Failed_to_update_the_registry_SecureProtocols
lea rcx, [rsp + 0x260]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x1fe8]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x1fe8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x1ff0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftInternet_ExplorerNew_WindowsPopupMgr
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x1ff8]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x2000]
mov qword [rsp + 0x78], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x1ff8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, [0x14014b540]
lea rcx, [rsp + 0x2000]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x2008]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400d8ee0
mov edi, eax
test eax, eax
je 0x1400a8dff
lea rdx, str._Failed_to_update_the_registry_PopupMgr
lea rcx, [rsp + 0x260]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rax, [rsp + 0x2010]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x2010]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x2018]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x260]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x268]
jmp 0x14009ad97
xor r8d, r8d
lea rdx, str.changeTLSSetting
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8f5c
lea rcx, [rsp + 0x6a0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x698]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsSecureProtocols
lea rcx, [rsp + 0x6a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x2020]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x2028]
mov qword [rsp + 0x78], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x2020]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, str.2688
lea rcx, [rsp + 0x2028]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x6a0]
lea rcx, [rsp + 0x2030]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400d8ee0
mov edi, eax
test eax, eax
je 0x1400a8f40
lea rdx, str.Failed_to_update_the_registry_SecureProtocols
lea rcx, [rsp + 0x698]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x2038]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x698]
lea rcx, [rsp + 0x2038]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x2040]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.1401028d0
nop
lea rcx, [rsp + 0x698]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6a0]
jmp 0x14009ad97
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2048]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
mov rdx, rax
mov rcx, r13
call fcn.1400ac550
movzx esi, al
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
test sil, sil
je 0x14009a26c
jmp 0x14009ada7