Function at 0x1000087ec
Capabilities:
Create thread
Resume thread

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x270
mov qword [rsp + 0x1f8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x100090120]
xor rax, rsp
mov qword [rsp + 0x260], rax
mov rsi, rcx
mov r14, qword [rsp + 0x2c0]
xor ebx, ebx
mov dword [r14], ebx
mov r15, qword [rcx + 8]
mov ecx, 0x1c8
call fcn.100001710
mov qword [rsp + 0xd0], rax
cmp rax, rbx
je 0x10001e5e0
mov rcx, rax
call fcn.10000bb74
jmp 0x100008862
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.100001eb4
nop
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov rcx, qword [rsi + 0x48]
or r12, 0xffffffffffffffff
lea r13d, [r12 + 2]
cmp rcx, rdi
je 0x1000088c2
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
jne 0x1000088b6
mov rcx, qword [rsi + 0x50]
cmp rcx, rbx
jne 0x10001e5e8
mov qword [rsi + 0x50], rbx
mov rcx, qword [rsi + 0x48]
call sub.msvcrt.dll_free
mov qword [rsi + 0x48], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x50], rbp
mov qword [rsi + 0x48], rdi
mov rax, qword [rsp + 0x150]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e5f7
mov ecx, 0x240
call fcn.100001710
mov qword [rsp + 0x70], rax
cmp rax, rbx
je 0x10001e628
mov rcx, rax
call fcn.10000be14
jmp 0x1000088fc
mov rdx, rax
lea rcx, [rsp + 0x120]
call fcn.100001eb4
nop
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov rcx, qword [rsi + 0x58]
cmp rcx, rdi
je 0x100008953
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
jne 0x100008947
mov rcx, qword [rsi + 0x60]
cmp rcx, rbx
jne 0x10001e630
mov qword [rsi + 0x60], rbx
mov rcx, qword [rsi + 0x58]
call sub.msvcrt.dll_free
mov qword [rsi + 0x58], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x60], rbp
mov qword [rsi + 0x58], rdi
mov rax, qword [rsp + 0x120]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e63f
mov ecx, 0x50
call fcn.100001710
mov rdi, rax
mov qword [rsp + 0x70], rax
cmp rax, rbx
je 0x10001e670
lea rax, vtable.CViewManager.0
mov qword [rdi], rax
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], rbx
mov qword [rdi + 0x20], rbx
lea rcx, [rdi + 0x28]
xor edx, edx
call fcn.1000016a0
nop
lea rcx, [rdi + 0x38]
xor edx, edx
call fcn.100001eb4
mov dword [rdi + 0x4c], 3
mov dword [rdi + 0x48], ebx
mov byte [rdi + 8], bl
jmp 0x1000089c2
mov rdx, rdi
lea rcx, [rsp + 0x140]
call fcn.1000016a0
nop
mov rdi, qword [rax]
mov rbp, qword [rax + 8]
mov rcx, qword [rsi + 0x88]
cmp rcx, rdi
je 0x100008a2e
mov eax, r12d
lock xadd dword [rcx], eax
add eax, r12d
jne 0x100008a1c
mov rcx, qword [rsi + 0x90]
cmp rcx, rbx
jne 0x10001e678
mov qword [rsi + 0x90], rbx
mov rcx, qword [rsi + 0x88]
call sub.msvcrt.dll_free
mov qword [rsi + 0x88], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x90], rbp
mov qword [rsi + 0x88], rdi
mov rax, qword [rsp + 0x140]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e686
mov ecx, 0x280
call fcn.100001710
mov qword [rsp + 0x70], rax
cmp rax, rbx
je 0x10001e6b6
mov rcx, rax
call fcn.10000cc44
jmp 0x100008a68
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.1000016a0
nop
mov rdx, rax
lea rcx, [rsi + 0x98]
call fcn.1000014d8
nop
mov rax, qword [rsp + 0x100]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e6be
lea rax, [rsp + 0x88]
mov qword [rsp + 0x70], rax
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x90], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsi + 0xa0]
cmp rcx, rbx
je 0x10001ea17
add rcx, 0x58
lea rdx, [rsp + 0x88]
call fcn.1000014d8
nop
mov rax, qword [rsp + 0x88]
mov ecx, r12d
lock xadd dword [rax], ecx
add ecx, r12d
je 0x10001e6ee
mov ecx, 0x130
call fcn.100001710
mov qword [rsp + 0x60], rax
cmp rax, rbx
je 0x10001e71e
mov rcx, rax
call fcn.10000b8dc
jmp 0x100008b40
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.100001eb4
nop
mov rdi, qword [rax]
mov r12, qword [rax + 8]
mov rcx, qword [rsi + 0x68]
cmp rcx, rdi
je 0x100008b91
lock add dword [rcx], 0xffffffff
jne 0x100008b85
mov rcx, qword [rsi + 0x70]
cmp rcx, rbx
jne 0x10001e726
mov qword [rsi + 0x70], rbx
mov rcx, qword [rsi + 0x68]
call sub.msvcrt.dll_free
mov qword [rsi + 0x68], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x70], r12
mov qword [rsi + 0x68], rdi
mov rax, qword [rsp + 0x160]
lock add dword [rax], 0xffffffff
je 0x10001e735
cmp byte [rsi + 0xd9], bl
jne 0x100008c3d
mov ecx, 0x168
call fcn.100001710
mov qword [rsp + 0x60], rax
cmp rax, rbx
je 0x10001e766
mov rcx, rax
call fcn.10000b614
jmp 0x100008bd1
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.100001eb4
nop
mov rdi, qword [rax]
mov r12, qword [rax + 8]
mov rcx, qword [rsi + 0x78]
cmp rcx, rdi
je 0x100008c2b
lock add dword [rcx], 0xffffffff
jne 0x100008c1c
mov rcx, qword [rsi + 0x80]
cmp rcx, rbx
jne 0x10001e76e
mov qword [rsi + 0x80], rbx
mov rcx, qword [rsi + 0x78]
call sub.msvcrt.dll_free
mov qword [rsi + 0x78], rbx
lock add dword [rdi], r13d
mov qword [rsi + 0x80], r12
mov qword [rsi + 0x78], rdi
mov rax, qword [rsp + 0x110]
lock add dword [rax], 0xffffffff
je 0x10001e77d
mov dword [rsp + 0x78], ebx
xor eax, eax
mov dword [rsp + 0x7c], eax
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x84], eax
mov r12d, 0x11d
lea rdx, [rsp + 0x78]
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_GetClientRect]
cmp eax, ebx
je 0x100008c7b
mov r12d, dword [rsp + 0x80]
sub r12d, dword [rsp + 0x78]
mov dword [rsp + 0x130], ebx
mov dword [rsp + 0x134], ebx
mov dword [rsp + 0x138], r12d
mov dword [rsp + 0x13c], ebx
mov r13, qword [rsi + 0x50]
cmp r13, rbx
je 0x10001e9fb
call fcn.10000d010
cmp qword [rax + 0x50], rbx
jne 0x100008cb9
call fcn.10000d010
mov qword [rax + 0x50], rbx
call fcn.10000d010
mov rcx, rax
lea rdx, [r13 + 0x40]
call fcn.100009ad8
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x42010000
lea r9, str.NavigationTile
lea r8, [rsp + 0x130]
mov rdx, r15
mov rcx, r13
call fcn.100009460
cmp byte [rsi + 0xd9], bl
jne 0x10001e7ae
mov dword [rsp + 0xf0], ebx
xor eax, eax
mov dword [rsp + 0xf4], eax
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfc], eax
mov r13, qword [rsi + 0x60]
cmp r13, rbx
je 0x10001e9df
call fcn.10000d0b4
cmp qword [rax + 0x50], rbx
jne 0x100008d4a
call fcn.10000d0b4
mov qword [rax + 0x50], rbx
call fcn.10000d0b4
mov rcx, rax
lea rdx, [r13 + 0x40]
call fcn.100009ad8
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x42010000
lea r9, str.SearchTile
lea r8, [rsp + 0xf0]
mov rdx, r15
mov rcx, r13
call fcn.100009460
lea r9, [rsi + 0x130]
xor r8d, r8d
lea edx, [r8 + 0x6b]
mov rcx, qword [0x1000921e0]
call qword [sym.imp.COMCTL32.dll_Ordinal_380]
mov r11, qword [0x100090140]
mov r9, qword [rsi + 0x130]
xor r8d, r8d
mov r13d, 0x80
mov edx, r13d
mov rcx, qword [r11 + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [rsi + 0x138]
lea edx, [r13 - 0x15]
lea r8d, [r13 - 0x7f]
mov rcx, qword [0x1000921e0]
call qword [sym.imp.COMCTL32.dll_Ordinal_380]
mov r11, qword [0x100090140]
mov r9, qword [rsi + 0x138]
lea r8d, [r13 - 0x7f]
mov edx, r13d
mov rcx, qword [r11 + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsp + 0x50], rbx
lea rcx, [rsp + 0x170]
call fcn.1000018bc
nop
mov rdi, qword [rax]
cmp rdi, rbx
je 0x100008e44
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x50], rax
cmp rax, rbx
je 0x10001e7f2
lea rcx, [rsp + 0x170]
call fcn.1000012a0
lea rcx, [rsp + 0x1a0]
call fcn.100002414
mov rdi, qword [rax]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.10000adf0
cmp eax, ebx
setl dil
lea rcx, [rsp + 0x1a0]
call fcn.1000012a0
cmp dil, bl
jne 0x10001e802
lea rcx, [rsp + 0xd0]
call fcn.10000aef0
mov rdi, qword [rax]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.10000adf0
cmp eax, ebx
setl dil
lea rcx, [rsp + 0xd0]
call fcn.1000012a0
cmp dil, bl
jne 0x10001e824
lea rax, [rsp + 0x190]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x70], rax
mov rax, qword [rsi + 0x90]
mov qword [rsp + 0x198], rax
mov rax, qword [rsi + 0x88]
mov r13d, 1
lock add dword [rax], r13d
mov rax, qword [rsi + 0x88]
mov qword [rsp + 0x190], rax
mov rdi, qword [rsp + 0x50]
cmp rdi, rbx
je 0x10001e846
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, eax
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov qword [rsp + 0xd8], rax
cmp rdi, rbx
je 0x100008f5c
cmp rax, rbx
je 0x10001e84e
mov rcx, qword [rsi + 0xa0]
cmp rcx, rbx
je 0x10001e9c3
lea r8, [rsp + 0x190]
lea rdx, [rsp + 0xd8]
call fcn.10000a27c
cmp al, bl
je 0x10001e85e
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x60], rax
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1a8], rax
mov rcx, qword [rsi + 0x90]
cmp rcx, rbx
je 0x10001e9a7
lea rdx, [rsp + 0x1a8]
call fcn.100015d74
cmp eax, ebx
je 0x10001e87a
mov dword [rsp + 0x60], ebx
mov eax, dword [rsp + 0xfc]
mov dword [rsp + 0x64], eax
mov dword [rsp + 0x68], r12d
mov ecx, dword [rsp + 0x84]
lea eax, [rcx - 0x1e]
mov dword [rsp + 0x6c], eax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0xe0], xmm0
mov dword [rsp + 0xe4], eax
mov dword [rsp + 0xec], ecx
mov r12, qword [rsi + 0x70]
cmp r12, rbx
je 0x10001e98b
call fcn.100012ab0
cmp qword [rax + 0x50], rbx
jne 0x100009043
call fcn.100012ab0
mov qword [rax + 0x50], rbx
call fcn.100012ab0
mov rcx, rax
lea rdx, [r12 + 0x40]
call fcn.100009ad8
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov r14d, 0x46010000
mov dword [rsp + 0x20], r14d
lea r9, str.EscalationTile
lea r8, [rsp + 0xe0]
mov rdx, r15
mov rcx, r12
call fcn.100009460
cmp qword [rsi + 0x80], rbx
je 0x100009131
movaps xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x180], xmm0
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x184], eax
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x18c], eax
mov r12, qword [rsi + 0x80]
cmp r12, rbx
je 0x10001e898
call fcn.100012a00
cmp qword [rax + 0x50], rbx
jne 0x1000090eb
call fcn.100012a00
mov qword [rax + 0x50], rbx
call fcn.100012a00
mov rcx, rax
lea rdx, [r12 + 0x40]
call fcn.100009ad8
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x38], ax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r14d
lea r9, str.ConnectionTile
lea r8, [rsp + 0x180]
mov rdx, r15
mov rcx, r12
call fcn.100009460
jmp 0x100009131
mov rcx, qword [rsi + 0x50]
cmp rcx, rbx
je 0x10001e96f
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x1d8]
call qword [rax + 0x20]
cmp qword [rsi + 0x60], rbx
je 0x1000091c1
mov rcx, qword [rsi + 0x60]
cmp rcx, rbx
je 0x10001e8b9
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x1c8]
call qword [rax + 0x20]
jmp 0x1000091c1
mov rcx, qword [rsi + 0x70]
cmp rcx, rbx
je 0x10001e953
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x1e8]
call qword [rax + 0x20]
cmp qword [rsi + 0x80], rbx
je 0x100009257
mov rcx, qword [rsi + 0x80]
cmp rcx, rbx
je 0x10001e8da
mov rax, qword [rsi + 0xa0]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsi + 0x98]
lock add dword [rax], r13d
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rcx]
lea rdx, [rsp + 0x1b8]
call qword [rax + 0x20]
jmp 0x100009257
mov rcx, rsi
call fcn.10001015c
lea r9, str.HelpPaneQuitEvent
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsi + 0xe8], rax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 4
mov r9, rsi
lea r8, [0x100002940]
mov edx, 0x1000
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsi + 0xe0], rax
cmp rax, rbx
je 0x1000092b3
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp byte [rsi + 0x148], bl
jne 0x10001e8fb
mov rcx, qword [rsi + 0x90]
cmp rcx, rbx
je 0x10001e937
mov edx, r13d
call fcn.100003370
mov dword [rsp + 0x200], ebx
xor edx, edx
lea r8d, [rdx + 0x58]
lea rcx, [rsp + 0x204]
call sub.msvcrt.dll_memset
xor r9d, r9d
lea r8, [rsp + 0x200]
lea edx, [r9 + 0x5c]
lea ecx, [rdx - 0x3d]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
lea rcx, [rsp + 0x200]
call qword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov qword [rsi + 0x140], rax
mov r9, r13
mov r8, rax
mov edx, 0x30
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsi + 0xc8], rax
mov r9d, dword [rsi + 0xbc]
sub r9d, dword [rsi + 0xb4]
xor edx, edx
mov r8d, 0x412
lea rdi, [0x10006b1f0]
mov rcx, rdi
call fcn.100012410
mov r9d, dword [rsi + 0xb8]
sub r9d, dword [rsi + 0xb0]
xor edx, edx
mov r8d, 0x415
mov rcx, rdi
call fcn.100012410
mov r9d, dword [rsi + 0xb0]
xor edx, edx
mov r8d, 0x413
mov rcx, rdi
call fcn.100012410
mov r9d, dword [rsi + 0xb4]
xor edx, edx
mov r8d, 0x414
mov rcx, rdi
call fcn.100012410
lea rdx, [rsp + 0x58]
lea rcx, [rsi + 0xa8]
call fcn.100009bf8
movzx r9d, al
xor edx, edx
mov r8d, 0x40f
mov rcx, rdi
call fcn.100012410
lea rcx, [rsi + 0xa8]
call fcn.1000161e0
movzx r9d, al
xor edx, edx
mov r8d, 0x40e
mov rcx, rdi
call fcn.100012410
mov r9d, r13d
xor edx, edx
mov r8d, 0x411
lea rcx, [0x10006b200]
call fcn.100012410
nop
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor eax, eax
jmp 0x100009424
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.100001100
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rax, rbx
jmp 0x100008862
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + 8]
nop
jmp 0x1000088a5
mov rcx, qword [rsp + 0x158]
cmp rcx, rbx
je 0x10001e60d
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + 8]
mov qword [rsp + 0x158], rbx
mov rcx, qword [rsp + 0x150]
call sub.msvcrt.dll_free
nop
jmp 0x1000088da
mov rax, rbx
jmp 0x1000088fc
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + 8]
nop
jmp 0x100008936
mov rcx, qword [rsp + 0x128]
cmp rcx, rbx
je 0x10001e655
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + 8]
mov qword [rsp + 0x128], rbx
mov rcx, qword [rsp + 0x120]
call sub.msvcrt.dll_free
nop
jmp 0x10000896b
mov rdi, rbx
jmp 0x1000089c2
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
nop
jmp 0x100008a02
mov rcx, qword [rsp + 0x148]
cmp rcx, rbx
je 0x10001e69b
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
mov qword [rsp + 0x148], rbx
mov rcx, qword [rsp + 0x140]
call sub.msvcrt.dll_free
nop
jmp 0x100008a46
mov rax, rbx
jmp 0x100008a68
mov rcx, qword [rsp + 0x108]
cmp rcx, rbx
je 0x10001e6d3
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
mov qword [rsp + 0x108], rbx
mov rcx, qword [rsp + 0x100]
call sub.msvcrt.dll_free
nop
jmp 0x100008aa1
mov rcx, qword [rsp + 0x90]
cmp rcx, rbx
je 0x10001e703
mov rax, qword [rcx]
mov edx, r13d
call qword [rax]
mov qword [rsp + 0x90], rbx
mov rcx, qword [rsp + 0x88]
call sub.msvcrt.dll_free
nop
jmp 0x100008b1e
mov rax, rbx
jmp 0x100008b40
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + 8]
nop
jmp 0x100008b74
mov rcx, qword [rsp + 0x168]
cmp rcx, rbx
je 0x10001e74b
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + 8]
mov qword [rsp + 0x168], rbx
mov rcx, qword [rsp + 0x160]
call sub.msvcrt.dll_free
nop
jmp 0x100008ba3
mov rax, rbx
jmp 0x100008bd1
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + 8]
nop
jmp 0x100008c08
mov rcx, qword [rsp + 0x118]
cmp rcx, rbx
je 0x10001e793
mov rax, qword [rcx]
mov edx, r13d
call qword [rax + 8]
mov qword [rsp + 0x118], rbx
mov rcx, qword [rsp + 0x110]
call sub.msvcrt.dll_free
nop
jmp 0x100008c3d
mov rcx, qword [rsi + 0x50]
cmp rcx, rbx
je 0x10001e7d1
xor r8d, r8d
mov edx, 0x801c
mov rcx, qword [rcx + 0x1a0]
call qword [sym.imp.USER32.dll_DeleteMenu]
jmp 0x100008d0b
mov dword [rsp + 0xa8], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xa8]
call sub.msvcrt.dll__CxxThrowException
int3
mov ecx, 0x8007000e
call fcn.1000242f0
nop
jmp 0x100023e95
mov dword [r14], 1
mov byte [rsi + 0x120], 1
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or rax, 0xffffffffffffffff
jmp 0x100009424
mov dword [r14], 1
mov byte [rsi + 0x120], 1
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or rax, 0xffffffffffffffff
jmp 0x100009424
mov rax, rbx
jmp 0x100008f46
mov ecx, 0x8007000e
call fcn.1000242f0
nop
jmp 0x100023e96
mov dword [r14], r13d
mov byte [rsi + 0x120], r13b
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or rax, 0xffffffffffffffff
jmp 0x100009424
mov dword [r14], r13d
mov byte [rsi + 0x120], r13b
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
or rax, 0xffffffffffffffff
jmp 0x100009424
mov dword [rsp + 0xac], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xac]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xb4], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xb4]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xbc], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xbc]
call sub.msvcrt.dll__CxxThrowException
int3
mov rcx, qword [rsi + 0x90]
cmp rcx, rbx
je 0x10001e916
mov edx, 3
call fcn.100003370
jmp 0x1000092d7
mov dword [rsp + 0xc4], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xc4]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xcc], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xcc]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xa0], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xa0]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0xb8], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0x98], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0x98]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0xc8], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xc8]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0xb0], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xb0]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0xc0], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xc0]
call sub.msvcrt.dll__CxxThrowException
int3
mov dword [rsp + 0x9c], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0x9c]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0xa4], ebx
lea rdx, [0x1000788f0]
lea rcx, [rsp + 0xa4]
call sub.msvcrt.dll__CxxThrowException
nop
jmp 0x100009424
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
xor ebx, ebx
sub ecx, 4
mov rdi, rdx
mov edx, ebx
mov dword [r8], ebx
je 0x100023ef5
cmp ecx, 1
je 0x100023eed
lea eax, [rbx + 0x57]
jmp 0x100023f35
mov rsi, rbx
mov bpl, bl
jmp 0x100023f25
mov rcx, r9
call qword [sym.imp.ADVAPI32.dll_GetTraceLoggerHandle]
mov rcx, rax
mov rsi, rax
call qword [sym.imp.ADVAPI32.dll_GetTraceEnableLevel]
mov rcx, rsi
mov bpl, al
call qword [sym.imp.ADVAPI32.dll_GetTraceEnableFlags]
or ecx, 0xffffffff
cmp eax, ebx
mov edx, 1
cmove eax, ecx
mov ebx, eax
mov qword [rdi + 8], rsi
mov byte [rdi + 0x28], bpl
mov dword [rdi + 0x20], ebx
mov dword [rdi + 0x24], edx
xor eax, eax
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret