Function at 0x1401f5580
Capabilities:
Create directory

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov qword [rbp - 0x19], 0xfffffffffffffffe
mov qword [rsp + 0x100], rbx
xor r15d, r15d
mov esi, r15d
mov dword [rbp + 0x67], r15d
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rdi, rax
mov rdx, qword [0x1403534f8]
mov ecx, dword [rdx + 0xa8]
mov dword [0x14037d1d8], ecx
mov ecx, dword [rdx + 0xa0]
mov dword [0x14037d1d8], ecx
mov r8b, shutdown
mov edx, dword [rdx + 0xa8]
lea rcx, [0x14037d1d8]
call fcn.140190440
mov rdx, qword [0x1403534f8]
mov r8b, 0x50
mov edx, dword [rdx + 0xa8]
lea rcx, [0x14037d1d8]
call fcn.140190440
mov rax, qword [0x1403534f8]
mov r8b, 0x64
mov edx, dword [rax + 0xa4]
lea rcx, [0x14037d1d8]
call fcn.140190440
mov rcx, qword [0x1403534f8]
mov eax, dword [rcx + 0xbc]
mov dword [0x14037d208], eax
mov eax, dword [rcx + 0xb4]
mov dword [0x14037d208], eax
mov r8b, shutdown
mov edx, dword [rcx + 0xbc]
lea rcx, [0x14037d208]
call fcn.140190440
mov rax, qword [0x1403534f8]
mov r8b, 0x50
mov edx, dword [rax + 0xbc]
lea rcx, [0x14037d208]
call fcn.140190440
mov rax, qword [0x1403534f8]
mov r8b, 0x64
mov edx, dword [rax + 0xb8]
lea rcx, [0x14037d208]
call fcn.140190440
mov rcx, qword [0x1403534f8]
mov eax, dword [rcx + 0x54]
mov dword [0x14037d240], eax
mov eax, dword [rcx + 0x4c]
mov dword [0x14037d240], eax
mov r8b, shutdown
mov edx, dword [rcx + 0x54]
lea rcx, [0x14037d240]
call fcn.140190440
mov rax, qword [0x1403534f8]
mov r8b, 0x50
mov edx, dword [rax + 0x54]
lea rcx, [0x14037d240]
call fcn.140190440
mov rax, qword [0x1403534f8]
mov r8b, 0x64
mov edx, dword [rax + 0x50]
lea rcx, [0x14037d240]
call fcn.140190440
mov rax, qword [0x1403534f8]
mov ecx, dword [rax + 0x94]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x14037ca88], rax
mov rax, qword [0x1403534f8]
mov ecx, dword [rax + 0x70]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x14037ca90], rax
mov rax, qword [0x1403534f8]
mov ecx, dword [rax + 0x74]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x14037ca98], rax
mov rax, qword [0x1403534f8]
mov r8d, dword [rax + 0x78]
lea edx, [r15 + 1]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreatePen]
mov qword [0x14037caa0], rax
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDC]
mov rbx, rax
lea edx, [r15 + 0x5a]
mov rcx, rax
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
lea ecx, [r15 + 9]
lea r8d, [r15 + 0x48]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
lea r14, str.Arial
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x58], 5
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x14037cac0], rax
lea edx, [r15 + 0x5a]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
lea ecx, [r15 + 0xc]
lea r8d, [r15 + 0x48]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x58], 5
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x2bc
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x14037cac8], rax
lea edx, [r15 + 0x5a]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
lea ecx, [r15 + 8]
lea r8d, [r15 + 0x48]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x58], 5
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x14037cad0], rax
lea edx, [r15 + 0x5a]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
lea ecx, [r15 + 9]
lea r8d, [r15 + 0x48]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x58], 5
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x14037cad8], rax
lea edx, [r15 + 0x5a]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
lea ecx, [r15 + 0xa]
lea r8d, [r15 + 0x48]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x2bc
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x14037caa8], rax
lea edx, [r15 + 0x5a]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
lea ecx, [r15 + 9]
lea r8d, [r15 + 0x48]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x14037cab0], rax
lea edx, [r15 + 0x5a]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
lea ecx, [r15 + 0xa]
lea r8d, [r15 + 0x48]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x2bc
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontA]
mov qword [0x14037cab8], rax
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov dword [0x14037d3cc], r15d
mov qword [0x14037d358], 0xffffffff80000002
mov rcx, qword [0x14037d368]
test rcx, rcx
je 0x1401f5a94
call fcn.140247060
mov qword [0x14037d368], r15
mov dword [0x14037d370], 0x39
mov ecx, 0x3a
call fcn.140247068
mov qword [0x14037d368], rax
test rax, rax
je 0x1401f5acd
mov r8d, dword [0x14037d370]
inc r8d
lea rdx, str.SoftwareSUPERAntiSpyware.comSUPERAntiSpywareInUseFiles
mov rcx, rax
call fcn.1402496a0
mov rcx, qword [0x14037d380]
test rcx, rcx
je 0x1401f5ae5
call fcn.140247060
mov qword [0x14037d380], r15
mov dword [0x14037d388], 0x3c
mov ecx, 0x3d
call fcn.140247068
mov qword [0x14037d380], rax
test rax, rax
je 0x1401f5b1e
mov r8d, dword [0x14037d388]
inc r8d
lea rdx, str.SoftwareSUPERAntiSpyware.comSUPERAntiSpywareInUseRegistry
mov rcx, rax
call fcn.1402496a0
mov rcx, qword [0x14037d398]
test rcx, rcx
je 0x1401f5b36
call fcn.140247060
mov qword [0x14037d398], r15
mov dword [0x14037d3a0], 0x38
mov ecx, 0x39
call fcn.140247068
mov qword [0x14037d398], rax
test rax, rax
je 0x1401f5b6f
mov r8d, dword [0x14037d3a0]
inc r8d
lea rdx, str.SYSTEMCurrentControlSetServicesSASDIFSVFilesToDelete
mov rcx, rax
call fcn.1402496a0
mov rcx, qword [0x14037d3b0]
test rcx, rcx
je 0x1401f5b87
call fcn.140247060
mov qword [0x14037d3b0], r15
mov dword [0x14037d3b8], 0x3b
mov ecx, 0x3c
call fcn.140247068
mov qword [0x14037d3b0], rax
test rax, rax
je 0x1401f5bc0
mov r8d, dword [0x14037d3b8]
inc r8d
lea rdx, str.SoftwareSUPERAntiSpyware.comSUPERAntiSpywareInUseFolders
mov rcx, rax
call fcn.1402496a0
mov qword [0x14037d3c8], 1
mov rax, qword [0x14037adb0]
mov qword [0x14037d3c0], rax
call fcn.140006b40
lea rdx, [0x14034ec34]
lea rdi, [0x14037cc30]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea rdx, str.Quarantine
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rdx, str.quarantine.db
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.14018ef40
mov qword [rbp + 0x67], rax
test rax, rax
je 0x1401f5c4a
mov rcx, qword [0x14037adb0]
lea rdx, vtable.CQuarantineNotifier.0
mov qword [rax], rdx
mov qword [rax + 8], rcx
jmp 0x1401f5c4d
mov rax, r15
mov qword [0x14037cc18], rax
mov ecx, 0xa8
call fcn.14018ef40
mov rbx, rax
mov qword [rbp + 0x6f], rax
lea r14, vtable.CSABString.0
test rax, rax
je 0x1401f5cd2
mov qword [rbp - 1], r14
mov qword [rbp + 7], r15
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdi + rcx], 0
jne 0x1401f5c80
mov dword [rbp + 0xf], ecx
inc ecx
call fcn.140247068
mov qword [rbp + 7], rax
test rax, rax
je 0x1401f5cae
mov r8d, dword [rbp + 0xf]
inc r8d
mov rdx, rdi
mov rcx, rax
call fcn.1402496a0
mov dword [rbp + 0x13], 1
mov esi, 1
mov dword [rbp + 0x67], esi
mov r8, qword [0x14037cc18]
lea rdx, [rbp - 1]
mov rcx, rbx
call fcn.14006b540
jmp 0x1401f5cd5
mov rax, r15
mov qword [0x14037cc20], rax
test sil, 1
je 0x1401f5cfa
mov qword [rbp - 1], r14
add dword [rbp + 0x13], 0xffffffff
jne 0x1401f5cfa
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x1401f5cfa
call fcn.140247060
mov r9d, r15d
mov eax, 0x20000000
cmp dword [0x140350790], r15d
cmovne r9d, eax
or r9d, 0xcf0000
mov dword [rsp + 0x60], r15d
mov qword [rsp + 0x58], r15
mov rax, qword [0x14034e658]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 0x244
mov dword [rsp + 0x30], 0x2bc
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
lea r8, [0x140296e88]
xor edx, edx
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9d60
mov rbx, rax
mov qword [0x14037cae0], rax
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f5dc2
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
test rax, rax
je 0x1401f5dc2
cmp dword [rax + 0x70], 0
jne 0x1401f5dc2
mov dword [rax + 0x74], r15d
mov dword [rax + 0x78], 0x24
mov dword [rax + 0x7c], 0x8c
mov dword [rax + 0x80], 0x20
mov dword [rax + 0x84], 2
mov dword [rax + 0x88], 9
mov rbx, qword [0x14037cae0]
mov rcx, rbx
cmp dword [0x140350790], 0
je 0x1401f5dfa
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f5e4e
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
test rax, rax
je 0x1401f5e4e
mov dword [rax + 0x5c], 1
jmp 0x1401f5e4e
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f5e24
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
test rax, rax
je 0x1401f5e24
lea rcx, [0x1401fd0f0]
mov qword [rax + 0xa8], rcx
mov rbx, qword [0x14037cae0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f5e4e
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
test rax, rax
je 0x1401f5e4e
mov dword [rax + 0x58], r15d
xor eax, eax
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], rax
xor r9d, r9d
lea r8, [rbp - 0x11]
xor edx, edx
lea ecx, [rax + 0x30]
call qword [sym.imp.USER32.dll_SystemParametersInfoA]
mov eax, dword [rbp - 5]
sub eax, dword [rbp - 0xd]
cmp eax, 0x244
jl 0x1401f6007
mov dword [0x14033c778], 0x52
mov rbx, qword [0x14037cae0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f5ee9
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
mov rbx, rax
test rax, rax
je 0x1401f5ee9
cmp dword [rax + 0x60], 0x52
je 0x1401f5ee9
mov dword [rax + 0x60], 0x52
cmp dword [rax + 0x64], 0
je 0x1401f5ee9
lea rcx, [rax + 0x8c]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_SetRect]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rbx
call fcn.140198980
mov rdi, qword [0x14034e658]
mov rbx, qword [0x14037cae0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f5fa9
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
mov rbx, rax
test rax, rax
je 0x1401f5fa9
mov rcx, qword [rax + 0x68]
test rcx, rcx
je 0x1401f5f30
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [rsp + 0x20], r15
lea r9, [0x1401f26d0]
mov r8, qword [rbx + 0x18]
mov edx, 0x81e
mov rcx, rdi
call qword [sym.imp.USER32.dll_CreateDialogParamA]
mov qword [rbx + 0x68], rax
mov edx, 0xfffffff0
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0x3fffffff
bts eax, 0x1e
mov r8d, eax
mov edx, 0xfffffff0
mov rcx, qword [rbx + 0x68]
call qword [sym.imp.USER32.dll_SetWindowLongA]
cmp dword [rbx + 0x64], 0
je 0x1401f5fa9
lea rcx, [rbx + 0x8c]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_SetRect]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rbx
call fcn.140198980
mov rbx, qword [0x14037cae0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f6007
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
mov rbx, rax
test rax, rax
je 0x1401f6007
cmp dword [rax + 0x64], 1
je 0x1401f6007
mov dword [rax + 0x64], 1
lea rcx, [rax + 0x8c]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_SetRect]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rbx
call fcn.140198980
mov rbx, qword [0x14037cae0]
mov rdi, qword [0x14034e658]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f6079
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
mov rbx, rax
test rax, rax
je 0x1401f6079
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 0x400
lea r9, [0x1401f3110]
mov r8d, 0x22
mov rdx, rdi
mov rcx, rax
call fcn.140190b50
test rax, rax
je 0x1401f6079
cmp dword [rbx + 8], 0xffffffff
jne 0x1401f6079
mov edx, 0x400
mov rcx, rbx
call fcn.1401b66d0
cmp dword [0x1403508e8], 0
je 0x1401f6089
mov eax, 0x403
jmp 0x1401f60b5
cmp dword [0x14034e690], 0
jne 0x1401f6099
mov eax, 0x400
jmp 0x1401f60b5
cmp dword [0x14034e8d4], 0
jne 0x1401f60b0
cmp byte [0x14034e8d8], 0
mov eax, 0x401
je 0x1401f60b5
mov eax, 0x402
mov dword [0x14037d1f4], eax
mov rbx, qword [0x14037cae0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f610a
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
test rax, rax
je 0x1401f610a
mov edx, 0x400
mov rcx, rax
call fcn.140191b00
test rax, rax
je 0x1401f610a
cmp dword [rax + 0x50], 0xc
je 0x1401f610a
mov dword [rax + 0x50], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
xor edx, edx
mov rcx, rax
call fcn.140198b50
mov r9d, 0x24
mov r8d, 0x400
mov rdx, qword [0x14037cae0]
lea rcx, vtable.CMultiDialog.0
call fcn.1401fa210
mov rsi, qword [0x14034e658]
mov rbx, qword [0x14037cae0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1401f61e9
mov edx, SafeArrayGetDim
mov rcx, rbx
call fcn.1400dda20
mov rbx, rax
test rax, rax
je 0x1401f61e9
mov edx, 0x400
mov rcx, rax
call fcn.140191b00
mov rdi, rax
test rax, rax
je 0x1401f61e9
mov qword [rsp + 0x20], r15
lea r9, [0x1401fe430]
mov r8, qword [rax + 8]
mov edx, 0x80f
mov rcx, rsi
call qword [sym.imp.USER32.dll_CreateDialogParamA]
mov qword [rdi + 0x58], rax
mov edx, 0xfffffff0
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0x3fffffff
bts eax, 0x1e
mov r8d, eax
mov edx, 0xfffffff0
mov rcx, qword [rdi + 0x58]
call qword [sym.imp.USER32.dll_SetWindowLongA]
lea rcx, [rbx + 0x8c]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_SetRect]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rbx
call fcn.140198980
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x418
mov dword [rsp + 0x20], 0x87b
lea r9, [0x1401cae40]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x427
mov dword [rsp + 0x20], 0x87d
lea r9, [0x1401cc7c0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x407
mov dword [rsp + 0x20], reloc.SHELL32.dll_PathResolve
lea r9, [0x140216fc0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x416
mov dword [rsp + 0x20], reloc.WSOCK32.dll_gethostbyname
lea r9, [0x1402182f0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x40f
mov dword [rsp + 0x20], 0x3c
lea r9, [0x140230160]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
cmp dword [0x14034e690], 0
jne 0x1401f6366
lea rdx, [0x1402c4c80]
lea rcx, [0x140351044]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x1401f6366
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x417
mov dword [rsp + 0x20], 0x913
lea r9, [0x1401bb220]
jmp 0x1401f638a
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x417
mov dword [rsp + 0x20], 0x823
lea r9, [0x1401bc6f0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x403
mov dword [rsp + 0x20], 0x80c
lea r9, [0x1402154e0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x414
mov dword [rsp + 0x20], 0x82b
lea r9, [0x14022ca00]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x415
mov dword [rsp + 0x20], 0x82c
lea r9, [0x14022db80]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x413
mov dword [rsp + 0x20], PathResolve
lea r9, [0x14022b150]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x412
mov dword [rsp + 0x20], 0x81f
lea r9, [0x140237840]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x405
mov dword [rsp + 0x20], 0x827
lea r9, [0x1401b3c90]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x406
mov dword [rsp + 0x20], 0x829
lea r9, [0x1401b6ee0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x40d
mov dword [rsp + 0x20], 0x822
lea r9, [0x14021c400]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x410
mov dword [rsp + 0x20], 0x80b
lea r9, [0x14022ed30]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x411
mov dword [rsp + 0x20], 0x914
lea r9, [0x140219240]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x408
mov dword [rsp + 0x20], 0x3e
lea r9, [0x140233890]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x401
mov dword [rsp + 0x20], 0x24
lea r9, [0x140205220]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x402
mov dword [rsp + 0x20], 0x27
lea r9, [0x1401ff680]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x404
mov dword [rsp + 0x20], 0x25
lea r9, [0x140210ef0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x409
mov dword [rsp + 0x20], 0x3a
lea r9, [0x140227d40]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x40a
mov dword [rsp + 0x20], 0x37
lea r9, [0x14021f3e0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x40b
mov dword [rsp + 0x20], 0x35
lea r9, [0x14021a6e0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x40c
mov dword [rsp + 0x20], 0x916
lea r9, [0x1401e49e0]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [rsp + 0x38], 0x817
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x40e
mov dword [rsp + 0x20], 0x38
lea r9, [0x1401e2b80]
mov r8, qword [0x14037cae0]
mov rdx, qword [0x14034e658]
lea rcx, vtable.CMultiDialog.0
call fcn.1401e9300
mov dword [0x14037d040], 1
mov qword [rbp + 0x17], r14
mov qword [rbp + 0x1f], r15
mov dword [rbp + 0x27], r15d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0x1f], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp + 0x2b], 1
cmp dword [0x140350790], ecx
jne 0x1401f688e
lea rdx, [rbp + 0x17]
lea rcx, str.task
call fcn.1400df720
test eax, eax
je 0x1401f68b0
mov edx, 6
mov rcx, qword [0x14037cae0]
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov rcx, qword [0x14037cae0]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
mov qword [rbp + 0x17], r14
add dword [rbp + 0x2b], 0xffffffff
jne 0x1401f68c8
mov rcx, qword [rbp + 0x1f]
test rcx, rcx
je 0x1401f68c8
call fcn.140247060
mov rbx, qword [rsp + 0x100]
add rsp, 0xc0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret