Function at 0x1400627e0
Capabilities:
Delete file

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
mov qword [rbp - 0x11], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1401d61d8]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rbx, rcx
xor r12d, r12d
mov dword [rbp - 0x49], r12d
call sub.mfc140u.dll_CMFCColorButton::OnFillBackground
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
call fcn.140055f90
test al, al
je 0x140062849
xor edx, edx
mov rcx, rbx
call sub.mfc140u.dll_COleControlSite::SetPropertyV
xor edx, edx
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_GetSystemMenu]
mov rcx, rax
call sub.mfc140u.dll_CList_CMFCPropertyGridProperty
mov rdi, rax
test rax, rax
je 0x1400628ca
lea rcx, [rbp - 0x49]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov edx, 0x65
lea rcx, [rbp - 0x49]
call qword [sym.imp.mfc140u.dll_CRuntimeClass::IsDerivedFrom]
lea rcx, [rbp - 0x49]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
jne 0x1400628c0
xor r9d, r9d
xor r8d, r8d
mov edx, 0x800
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_AppendMenuW]
lea rcx, [rbp - 0x49]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor edx, edx
lea r8d, [rdx + 0x10]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_AppendMenuW]
nop
lea rcx, [rbp - 0x49]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call sub.mfc140u.dll_AfxFullPath
test rax, rax
je 0x1400628e5
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xf8]
mov rdi, rax
jmp 0x1400628f0
mov rdi, r12
nop dword [rax + rax]
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test rdi, rdi
je 0x140062940
lea rdx, [rbp - 9]
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [rbp - 9]
mov rcx, rdi
call sub.mfc140u.dll_CPaneDivider::CheckVisibility
lea rdx, [rbp + 7]
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r9, qword [rbx + 0x28c48]
mov edx, 0x80
lea r8d, [rdx - 0x7f]
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, qword [rbx + 0x28c48]
xor r8d, r8d
mov edx, 0x80
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
call fcn.1400ec940
cmp al, 1
jne 0x140062984
mov rcx, rbx
call fcn.14006e460
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x90
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rbx + 0x27b30], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, 0xad
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rbx + 0x27b38], rax
mov edx, 0x3fa
mov rcx, rbx
call sub.mfc140u.dll_CMFCRibbonGallery::GetCompactSize
mov r9, qword [rbx + 0x27b38]
xor r8d, r8d
mov edx, 0xf7
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, SysAllocStringByteLen
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rbx + 0x27b40], rax
mov edx, 0x3fc
mov rcx, rbx
call sub.mfc140u.dll_CMFCRibbonGallery::GetCompactSize
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, SysAllocStringByteLen
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rbx + 0x27b48], rax
mov edx, 0x3f1
mov rcx, rbx
call sub.mfc140u.dll_CMFCRibbonGallery::GetCompactSize
lea r14, [rbx + 0x28c00]
lea r15, [0x140144240]
mov qword [rsp + 0x68], r15
mov dword [rsp + 0x60], 0x20
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x12]
call qword [sym.imp.GDI32.dll_CreateFontW]
mov rdx, rax
mov rcx, r14
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
lea rax, [rbp - 0x59]
mov qword [rbp - 0x49], rax
lea rax, [rbp - 0x51]
mov qword [rbp - 0x39], rax
lea rdx, [0x1401486fc]
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rsi, rax
lea rdx, str.at_5
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov r9d, 0xffffffff
mov r8, rsi
mov rdx, rdi
mov rcx, qword [rax + 8]
call fcn.140058bf0
mov edx, 5
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
call sub.mfc140u.dll_CMFCRibbonComboBox::FindItem
mov rdi, rax
test rax, rax
je 0x140062b93
nop dword [rax]
test rdi, rdi
je 0x140062b74
test r14, r14
mov r8, r12
je 0x140062b61
mov r8, qword [r14 + 8]
mov edx, gethostbyname
lea r9d, [rdx - 0x2f]
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 2
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, rax
call sub.mfc140u.dll_CMFCRibbonComboBox::FindItem
mov rdi, rax
test rax, rax
jne 0x140062b50
lea rax, [rbp - 0x59]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x51]
mov qword [rbp - 0x49], rax
lea rdx, [0x1401486fc]
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rsi, rax
lea rdx, str.at_5.1
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov r9d, 0xffffffff
mov r8, rsi
mov rdx, rdi
mov rcx, qword [rax + 8]
call fcn.140058bf0
lea rax, [rbp - 0x59]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x51]
mov qword [rbp - 0x49], rax
lea rdx, [0x1401486fc]
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rsi, rax
lea rdx, str.at_5.2
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov r9d, 0xffffffff
mov r8, rsi
mov rdx, rdi
mov rcx, qword [rax + 8]
call fcn.140058bf0
mov edx, 0x3fa
mov rcx, rbx
call sub.mfc140u.dll_CMFCRibbonGallery::GetCompactSize
mov rdi, rax
mov edx, 0x3f3
mov rcx, rbx
call sub.mfc140u.dll_CMFCRibbonGallery::GetCompactSize
xor edx, edx
mov rcx, rdi
call sub.mfc140u.dll_COleControlSite::SetPropertyV
lea rax, [rbp - 0x59]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x51]
mov qword [rbp - 0x49], rax
lea rdx, [0x1401486fc]
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rsi, rax
lea rdx, str.at_5.3
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov r9d, 0xffffffff
mov r8, rsi
mov rdx, rdi
mov rcx, qword [rax + 8]
call fcn.140058bf0
mov edx, 0x3ff
mov rcx, rbx
call sub.mfc140u.dll_CMFCRibbonGallery::GetCompactSize
mov edx, reloc.mfc140u.dll_CMFCRibbonInfo::XImage::XImage
mov rcx, rbx
call sub.mfc140u.dll_CMFCRibbonGallery::GetCompactSize
mov rsi, rax
lea rdi, [rbx + 0x28c10]
mov qword [rsp + 0x68], r15
mov dword [rsp + 0x60], 0x20
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x11]
call qword [sym.imp.GDI32.dll_CreateFontW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov r8, r12
je 0x140062d37
mov r8, qword [rdi + 8]
mov edx, gethostbyname
lea r9d, [rdx - 0x2f]
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 5
mov rcx, rsi
call sub.mfc140u.dll_COleControlSite::SetPropertyV
lea rax, [rbp - 0x59]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x51]
mov qword [rbp - 0x49], rax
lea rdx, [0x1401486fc]
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rsi, rax
lea rdx, str.at_5.4
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov r9d, 0xffffffff
mov r8, rsi
mov rdx, rdi
mov rcx, qword [rax + 8]
call fcn.140058bf0
lea rax, [rbp - 0x59]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x51]
mov qword [rbp - 0x49], rax
lea rdx, [0x1401486fc]
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rsi, rax
lea rdx, str.at_6
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov r9d, 0xffffffff
mov r8, rsi
mov rdx, rdi
mov rcx, qword [rax + 8]
call fcn.140058bf0
lea rcx, [rbp - 0x41]
call fcn.1400fa2b0
nop
lea rdx, [0x140156710]
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.mfc140u.dll_CMFCRibbonUndoButton::GetIconSize]
mov rdx, rax
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_Ordinal_285]
mov r15, rax
mov dword [rbp - 0x49], 1
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov r14d, eax
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rsi, rax
lea rcx, [rbp - 0x41]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov edi, eax
lea rcx, [rbp - 0x41]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov dword [rsp + 0x20], r14d
mov r9, rsi
mov r8d, edi
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_CMFCTasksPane::CollapseAllGroups]
mov rdx, r15
lea rcx, [rbp - 0x41]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rbp - 0x41]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
lea rsi, [rbx + 0x9f8]
mov dword [rsp + 0x28], 0xe
mov dword [rsp + 0x20], r12d
mov edx, 0x10
lea r9d, [rdx + 0x10]
mov r8d, edx
mov rcx, rsi
call sub.mfc140u.dll_CMFCFilterChunkValueImpl::CopyFrom
lea rdi, [rbx + 0xa08]
mov edx, 2
mov ecx, 0xb9
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xb9
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140062f1b
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa18]
mov edx, 2
mov ecx, 0xc3
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xc3
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140062f66
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa28]
mov edx, 2
mov ecx, 0xbf
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xbf
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140062fb1
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa38]
mov edx, 2
mov ecx, reloc.OLEAUT32.dll_CreateErrorInfo
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, reloc.OLEAUT32.dll_CreateErrorInfo
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140062ffc
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa48]
mov edx, 2
mov ecx, reloc.OLEAUT32.dll_VarDecRound
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, reloc.OLEAUT32.dll_VarDecRound
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140063047
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa58]
mov edx, 2
mov ecx, 0xcd
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xcd
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140063092
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa68]
mov edx, 2
mov ecx, 0xce
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xce
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x1400630dd
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa78]
mov edx, 2
mov ecx, 0xe0
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xe0
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140063128
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa88]
mov edx, 2
mov ecx, 0xdf
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xdf
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140063173
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xa98]
mov edx, 2
mov ecx, 0xe2
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xe2
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x1400631be
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xaa8]
mov edx, 2
mov ecx, 0xe3
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xe3
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140063209
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xab8]
mov edx, 2
mov ecx, 0xed
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xed
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x140063254
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xac8]
mov edx, 2
mov ecx, 0xf6
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xf6
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x14006329f
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
lea rdi, [rbx + 0xad8]
mov edx, 2
mov ecx, 0xf7
call sub.mfc140u.dll_AfxCriticalNewHandler
mov rcx, rax
mov edx, 0xf7
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov rdx, rax
mov rcx, rdi
call sub.mfc140u.dll_CRecordset::AppendFilterAndSortSQL
test rdi, rdi
mov rdx, r12
je 0x1400632ea
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov rcx, qword [rbx + 0xa00]
call qword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
test rsi, rsi
mov r9, r12
je 0x140063306
mov r9, qword [rsi + 8]
xor r8d, r8d
mov edx, 0x1109
mov rcx, qword [rbx + 0x29e58]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
call sub.mfc140u.dll_Ordinal_4724
call qword [sym.imp.WINMM.dll_timeGetTime]
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x250
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__13]
nop
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc140u.dll_CMFCRibbonUndoButton::GetIconSize]
mov r8, rax
lea rdx, [0x140144758]
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
mov esi, eax
test eax, eax
sete dil
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov byte [rbx + 0x28c36], dil
test esi, esi
jne 0x1400633a1
mov dl, 1
mov rcx, rbx
call fcn.14006f100
lea rcx, [rbp - 0x31]
call fcn.1400fa2b0
nop
lea rdx, str.user_
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc140u.dll_CMFCRibbonUndoButton::GetIconSize]
mov rdx, rax
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_Ordinal_285]
mov r15, rax
mov dword [rbp - 0x49], 6
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov r14d, eax
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rsi, rax
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov edi, eax
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov dword [rsp + 0x20], r14d
mov r9, rsi
mov r8d, edi
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_CMFCTasksPane::CollapseAllGroups]
mov rdx, r15
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x17], xmm0
lea rdx, [rbp + 0x17]
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_GetClientRect]
call qword [sym.imp.WINMM.dll_timeGetTime]
mov qword [rbx + 0x260c0], r12
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftOffice14.0OutlookSecurityOutlookSecureTempFolder
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rbx + 0x25ff8]
call fcn.140079450
lea rdx, [0x140152ff0]
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
cmp byte [rbx + 0x28c36], 0
jne 0x1400634e3
lea rax, [rbp - 0x59]
mov qword [rbp - 0x39], rax
lea rdx, str.SelfHealSolutions
lea rcx, [rbp - 0x59]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, str.AnakageFiles
lea rcx, [rbp - 0x51]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rdi
mov rdx, rax
mov rcx, rbx
call fcn.14006c270
jmp 0x1400634f4
lea rdx, str.Accenture_Workstation_Security_Compliance
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov rcx, rbx
call sub.mfc140u.dll_CMFCToolBar::SetOrigButtons
call qword [sym.imp.WINMM.dll_timeGetTime]
xor edx, edx
mov rcx, rbx
call fcn.14006daf0
nop
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov eax, 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14010bb40
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret