Function at 0x140062c00
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov edi, edx
mov rbx, rcx
cmp edx, 0x906
jg 0x140062c30
je 0x140062c3f
lea eax, [rdx - 0x3e9]
cmp eax, 6
ja 0x140062c50
mov ecx, 0x77
bt ecx, eax
jb 0x140062c3f
jmp 0x140062c50
mov ecx, edx
sub ecx, 0xa28
je 0x140062c3f
cmp ecx, 6
jne 0x140062c50
cmp dword [rbx + 0x4c], 2
jne 0x140062c50
lea rcx, [rbx + 0x68]
mov dl, 1
call fcn.14005e2a0
cmp edi, 0xa32
jg 0x140062cc1
je case.0x140062cff.2902
sub edi, 0x3e9
je 0x140062caf
sub edi, 1
je 0x140062c9d
sub edi, 1
je 0x140062c8b
cmp edi, 1
jne case.0x140062cff.2707
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_248
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.1400631e0
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140063150
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140063090
cmp edi, 0xbba
jg case.0x140062cff.2707
je 0x140062e95
lea eax, [rdi - 0xa8c]
cmp eax, 0xd5
ja case.0x140062cff.2707
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x62edc]
mov ecx, dword [rdx + rax*4 + 0x62eac]
add rcx, rdx
jmp rcx
mov rcx, rbx
call fcn.140064670
mov rcx, qword [rbx + 0x188]
test rcx, rcx
je 0x140062d52
call fcn.140052670
mov rcx, qword [rbx + 0x188]
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x3f8]
mov rcx, qword [rbx + 0x188]
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x310]
mov rcx, qword [rbx + 0x188]
xor edx, edx
call fcn.140103ff0
mov rdx, qword [0x140278e80]
mov ecx, 7
mov r8, qword [0x1402791e8]
add rdx, 0x2b0
call fcn.140030d50
mov edx, 5
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140017d80
mov edx, edi
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_152
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_72
mov r8, qword [rbx + 0x10]
xor edx, edx
sub r8, qword [rbx + 8]
sar r8, 3
test r8, r8
je case.0x140062cff.2707
mov rax, qword [rbx + 8]
nop dword [rax]
mov rcx, qword [rax]
test rcx, rcx
je 0x140062de4
cmp dword [rcx + 0xa0], 0x44e
je 0x140062dfb
inc rdx
add rax, 8
cmp rdx, r8
jne 0x140062dd0
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov qword [rcx + 0x110], 1
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140031c20
xor edx, edx
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140063940
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_200
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_208
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_216
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_232
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_224
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp method.CWorkAccount.virtual_240
lea rcx, [rbx + 0x120]
call fcn.14005feb0
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov eax, 2
cmp edx, 0xac0
jne 0x1400632d4
mov rax, qword [rcx + 0x188]
test rax, rax
je 0x1400632cf
cmp byte [0x140279e59], 0
je 0x1400632cf
mov eax, dword [rax + 0x1310]
mov edx, eax
jmp fcn.14005ec30
mov eax, 1
mov edx, eax
jmp fcn.14005ec30
push rbx
sub rsp, 0x20
mov rbx, rcx
call fcn.1400181e0
cmp dword [rbx + 0x4c], 2
jne 0x140063872
lea rcx, [rbx + 0x68]
add rsp, 0x20
pop rbx
jmp fcn.14005e890
add rsp, 0x20
pop rbx
ret
push rbx
sub rsp, 0x180
mov rax, qword [0x14026f088]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov rbx, rcx
mov byte [rcx + 0x190], 0
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8d, 0x128
call fcn.14018f1e0
mov r8, qword [0x1402791e8]
lea rcx, [rsp + 0x40]
mov r9d, 0x90
mov r8, qword [r8 + 8]
call fcn.14002c880
mov r8, qword [rsp + 0x80]
lea rax, vtable.CWallPaperDlg.0
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x130], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x140], xmm1
movdqa xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], 0
test r8, r8
je 0x140063c77
mov rax, qword [0x14027ac88]
lea rcx, [rsp + 0x40]
movzx edx, word [rsp + 0x88]
lea r9, [0x1400fe430]
test rax, rax
mov qword [rsp + 0x20], 0
cmovne rcx, rax
mov qword [0x14027ac88], rcx
mov rcx, qword [0x140278ec0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [rsp + 0x90]
lea rax, vtable.CRTDialog.0
mov byte [rbx + 0x190], 1
mov qword [rsp + 0x40], rax
test rcx, rcx
je 0x140063ca1
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rdx, qword [rsp + 0xe0]
lea rax, vtable.RT::CSkinWnd.0
mov qword [rsp + 0x40], rax
test rdx, rdx
je 0x140063ce6
mov r8, qword [rsp + 0xf0]
sub r8, rdx
sar r8, 3
call fcn.140025f10
xorps xmm0, xmm0
mov qword [rsp + 0xf0], 0
movdqa xmmword [rsp + 0xe0], xmm0
mov r8, qword [rsp + 0x68]
lea rax, vtable.RT::CMapWnd.0
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x30]
mov r9, r8
lea rcx, [rsp + 0x68]
mov r8, qword [r8]
call fcn.1400fddd0
mov rcx, qword [rsp + 0x68]
call fcn.140185a8c
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.140185a60
add rsp, 0x180
pop rbx
ret
push rbx
sub rsp, 0x250
mov rax, qword [0x14026f088]
xor rax, rsp
mov qword [rsp + 0x240], rax
mov rbx, rcx
mov byte [rcx + 0x190], 0
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8d, 0x210
call fcn.14018f1e0
mov rdx, qword [0x1402791e8]
lea rcx, [rsp + 0x30]
mov rdx, qword [rdx + 8]
call fcn.14000d300
mov r8, qword [rsp + 0x70]
test r8, r8
je 0x140063dc2
mov rax, qword [0x14027ac88]
lea rcx, [rsp + 0x30]
movzx edx, word [rsp + 0x78]
lea r9, [0x1400fe430]
test rax, rax
mov qword [rsp + 0x20], 0
cmovne rcx, rax
mov qword [0x14027ac88], rcx
mov rcx, qword [0x140278ec0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
lea rcx, [rsp + 0x30]
mov byte [rbx + 0x190], 1
call fcn.14000d4d0
mov rcx, qword [rsp + 0x240]
xor rcx, rsp
call fcn.140185a60
add rsp, 0x250
pop rbx
ret
push rbx
sub rsp, 0x170
mov rax, qword [0x14026f088]
xor rax, rsp
mov qword [rsp + 0x160], rax
mov rbx, rcx
mov byte [rcx + 0x190], 0
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8d, 0x118
call fcn.14018f1e0
mov r8, qword [0x1402791e8]
lea rcx, [rsp + 0x40]
mov r9d, 0x90
mov r8, qword [r8 + 8]
call fcn.14002c880
mov r8, qword [rsp + 0x80]
lea rax, vtable.CSoundDlg.0
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x130], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x140], xmm1
mov qword [rsp + 0x150], 0
test r8, r8
je 0x140063ebe
mov rax, qword [0x14027ac88]
lea rcx, [rsp + 0x40]
movzx edx, word [rsp + 0x88]
lea r9, [0x1400fe430]
test rax, rax
mov qword [rsp + 0x20], 0
cmovne rcx, rax
mov qword [0x14027ac88], rcx
mov rcx, qword [0x140278ec0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [rsp + 0x90]
lea rax, vtable.CRTDialog.0
mov byte [rbx + 0x190], 1
mov qword [rsp + 0x40], rax
test rcx, rcx
je 0x140063ee8
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rdx, qword [rsp + 0xe0]
lea rax, vtable.RT::CSkinWnd.0
mov qword [rsp + 0x40], rax
test rdx, rdx
je 0x140063f2d
mov r8, qword [rsp + 0xf0]
sub r8, rdx
sar r8, 3
call fcn.140025f10
xorps xmm0, xmm0
mov qword [rsp + 0xf0], 0
movdqa xmmword [rsp + 0xe0], xmm0
mov r8, qword [rsp + 0x68]
lea rax, vtable.RT::CMapWnd.0
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x30]
mov r9, r8
lea rcx, [rsp + 0x68]
mov r8, qword [r8]
call fcn.1400fddd0
mov rcx, qword [rsp + 0x68]
call fcn.140185a8c
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.140185a60
add rsp, 0x170
pop rbx
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [0x14026f088]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov rbx, rcx
mov byte [rcx + 0x190], 0
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8d, 0x120
call fcn.14018f1e0
mov r8, qword [0x1402791e8]
lea rcx, [rsp + 0x40]
mov r9d, 0x90
mov r8, qword [r8 + 8]
call fcn.14002c880
mov r8, qword [rbp - 0x80]
lea rax, vtable.CShortcutDlg.0
xor edi, edi
mov qword [rsp + 0x40], rax
mov dword [rbp + 0x58], edi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x40], xmm1
mov qword [rbp + 0x50], 0xffffffffffffffff
mov byte [rbp + 0x5c], dil
test r8, r8
je 0x140064049
mov rax, qword [0x14027ac88]
lea rcx, [rsp + 0x40]
movzx edx, word [rbp - 0x78]
lea r9, [0x1400fe430]
test rax, rax
mov qword [rsp + 0x20], rdi
cmovne rcx, rax
mov qword [0x14027ac88], rcx
mov rcx, qword [0x140278ec0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [rbp - 0x70]
lea rax, vtable.CRTDialog.0
mov byte [rbx + 0x190], 1
mov qword [rsp + 0x40], rax
test rcx, rcx
je 0x14006406f
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rdx, qword [rbp - 0x20]
lea rax, vtable.RT::CSkinWnd.0
mov qword [rsp + 0x40], rax
test rdx, rdx
je 0x1400640a0
mov r8, qword [rbp - 0x10]
sub r8, rdx
sar r8, 3
call fcn.140025f10
xorps xmm0, xmm0
mov qword [rbp - 0x10], rdi
movdqa xmmword [rbp - 0x20], xmm0
mov r8, qword [rsp + 0x68]
lea rax, vtable.RT::CMapWnd.0
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x30]
mov r9, r8
lea rcx, [rsp + 0x68]
mov r8, qword [r8]
call fcn.1400fddd0
mov rcx, qword [rsp + 0x68]
call fcn.140185a8c
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.140185a60
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x14026f088]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rbx, rcx
mov byte [rcx + 0x190], 0
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8d, 0x128
call fcn.14018f1e0
mov r8, qword [0x1402791e8]
lea rcx, [rsp + 0x40]
mov r9d, 0x90
mov r8, qword [r8 + 8]
call fcn.14002c880
mov r8, qword [rbp - 0x80]
lea rsi, vtable.CThemeDlg.0
xor edi, edi
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x48], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x50], xmm0
lea r14, vtable.RT::CNameIDList.0
mov qword [rbp + 0x40], r14
movdqa xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x60], dil
test r8, r8
je 0x1400641cd
mov rax, qword [0x14027ac88]
lea rcx, [rsp + 0x40]
movzx edx, word [rbp - 0x78]
lea r9, [0x1400fe430]
test rax, rax
mov qword [rsp + 0x20], rdi
cmovne rcx, rax
mov qword [0x14027ac88], rcx
mov rcx, qword [0x140278ec0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
lea rcx, [rbp + 0x40]
mov byte [rbx + 0x190], 1
mov qword [rsp + 0x40], rsi
mov qword [rbp + 0x40], r14
call fcn.14007c780
mov rdx, qword [rbp + 0x48]
test rdx, rdx
je 0x14006420b
mov r8, qword [rbp + 0x58]
sub r8, rdx
sar r8, 3
call fcn.140025f10
xorps xmm0, xmm0
mov qword [rbp + 0x48], rdi
movdqa xmmword [rbp + 0x50], xmm0
mov rcx, qword [rbp - 0x70]
lea rax, vtable.CRTDialog.0
mov qword [rsp + 0x40], rax
test rcx, rcx
je 0x14006422a
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rdx, qword [rbp - 0x20]
lea rax, vtable.RT::CSkinWnd.0
mov qword [rsp + 0x40], rax
test rdx, rdx
je 0x14006425b
mov r8, qword [rbp - 0x10]
sub r8, rdx
sar r8, 3
call fcn.140025f10
xorps xmm0, xmm0
mov qword [rbp - 0x10], rdi
movdqa xmmword [rbp - 0x20], xmm0
mov r8, qword [rsp + 0x68]
lea rax, vtable.RT::CMapWnd.0
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x30]
mov r9, r8
lea rcx, [rsp + 0x68]
mov r8, qword [r8]
call fcn.1400fddd0
mov rcx, qword [rsp + 0x68]
call fcn.140185a8c
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140185a60
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
push rbx
sub rsp, 0x140
mov rax, qword [0x14026f088]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov rbx, rcx
mov byte [rcx + 0x190], 0
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8d, 0xf0
call fcn.14018f1e0
mov r8, qword [0x1402791e8]
lea rcx, [rsp + 0x40]
mov r9d, 0x90
mov r8, qword [r8 + 8]
call fcn.14002c880
mov r8, qword [rsp + 0x80]
lea rax, vtable.CAboutDlg.0
mov qword [rsp + 0x40], rax
test r8, r8
je 0x14006435a
mov rax, qword [0x14027ac88]
lea rcx, [rsp + 0x40]
movzx edx, word [rsp + 0x88]
lea r9, [0x1400fe430]
test rax, rax
mov qword [rsp + 0x20], 0
cmovne rcx, rax
mov qword [0x14027ac88], rcx
mov rcx, qword [0x140278ec0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [rsp + 0x90]
lea rax, vtable.CRTDialog.0
mov byte [rbx + 0x190], 1
mov qword [rsp + 0x40], rax
test rcx, rcx
je 0x140064384
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rdx, qword [rsp + 0xe0]
lea rax, vtable.RT::CSkinWnd.0
mov qword [rsp + 0x40], rax
test rdx, rdx
je 0x1400643c9
mov r8, qword [rsp + 0xf0]
sub r8, rdx
sar r8, 3
call fcn.140025f10
xorps xmm0, xmm0
mov qword [rsp + 0xf0], 0
movdqa xmmword [rsp + 0xe0], xmm0
mov r8, qword [rsp + 0x68]
lea rax, vtable.RT::CMapWnd.0
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x30]
mov r9, r8
lea rcx, [rsp + 0x68]
mov r8, qword [r8]
call fcn.1400fddd0
mov rcx, qword [rsp + 0x68]
call fcn.140185a8c
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.140185a60
add rsp, 0x140
pop rbx
ret
push rbx
sub rsp, 0x20
cmp dword [rcx + 0x4c], 5
jne 0x140064458
mov ecx, dword [0x140279e60]
test ecx, ecx
je 0x14006444c
sub ecx, 1
je 0x140064445
cmp ecx, 1
jne 0x140064445
lea eax, [rcx + 1]
jmp 0x140064451
mov eax, 1
jmp 0x140064451
call fcn.1400caae0
mov edx, eax
call fcn.14005ec30
mov rbx, qword [0x1402791e8]
xor edx, edx
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rbx + 8]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_PostMessageW]