Function at 0x140005390
Capabilities:
Get file attributes
Set file attributes

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6bc0]
mov eax, 0x6cc0
call fcn.14000c9b0
sub rsp, rax
mov qword [rbp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x6cf8], rbx
mov qword [rsp + 0x6d00], rsi
mov qword [rsp + 0x6d08], rdi
mov rax, qword [0x140018020]
xor rax, rsp
mov qword [rbp + 0x6bb0], rax
mov r13, rcx
mov qword [rbp + 0x38], rcx
xor eax, eax
mov dword [rsp + 0x60], eax
mov byte [rbp - 0x60], al
mov byte [rsp + 0x52], 1
mov byte [rbp - 0x78], al
mov byte [rsp + 0x51], 1
xor sil, sil
mov byte [rsp + 0x50], al
mov dword [rsp + 0x64], eax
mov r15d, eax
mov r12d, eax
mov r14d, eax
mov qword [rbp + 8], rax
mov qword [rbp - 0x50], rax
lea rcx, [rbp - 0x70]
call qword [0x14000fd10]
nop
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
mov rcx, qword [r13 + 0x668]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
lea ebx, [r14 + 1]
test eax, eax
jle 0x140005562
mov rcx, r13
call qword [sym.imp.mfc100u.dll_CDocObjectServer::XOleDocumentView::ApplyViewState]
lea rcx, [r13 + 0x628]
lea r8, [rbp - 0x70]
mov edx, edi
call qword [sym.imp.mfc100u.dll_CMFCRibbonButton::GetGroupButtonExtraWidth]
cmp edi, ebx
jne 0x140005485
lea rdx, [0x1400108ce]
lea rcx, [rbp + 0x30]
call qword [0x14000f748]
nop
mov edi, ebx
mov dword [rsp + 0x60], ebx
jmp 0x14000549d
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x28]
call qword [0x14000fcf0]
nop
mov edi, 2
mov dword [rsp + 0x60], edi
lea rdx, [rbp - 0x50]
mov rcx, qword [rax]
call fcn.140007e80
test al, al
sete bl
test dil, 2
je 0x1400054c6
and edi, 0xfffffffd
mov dword [rsp + 0x60], edi
lea rcx, [rbp + 0x28]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
test dil, 1
je 0x1400054d6
lea rcx, [rbp + 0x30]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
test bl, bl
je 0x140005559
lea rcx, [rbp]
call qword [0x14000fd10]
nop
mov edx, 0x7f
lea rcx, [rbp]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
lea rcx, [rbp - 0x20]
call qword [0x14000fd10]
nop
mov edx, 0x7a
lea rcx, [rbp - 0x20]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
mov r9d, 0x30
mov r8, qword [rbp - 0x20]
mov rdx, qword [rbp]
mov rcx, r13
call qword [sym.imp.mfc100u.dll_CMouseManager::LoadState]
mov rcx, r13
call qword [sym.imp.mfc100u.dll_CMFCRibbonCmdUI::Enable]
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14000553e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rbp - 0x20]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
lea rcx, [rbp]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
jmp 0x14000654b
mov rcx, r13
call qword [sym.imp.mfc100u.dll_CMFCRibbonCmdUI::Enable]
mov rbx, qword [rbp - 0x70]
mov ecx, 0x18
call qword [sym.imp.mfc100u.dll_CTagManager::CTagManager]
mov rdi, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x1400055ae
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x1400055b0
test rbx, rbx
je 0x1400055b0
mov ecx, 0x8007000e
call fcn.14000c840
int3
xor edi, edi
test rdi, rdi
jne 0x1400055c0
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rbp + 0x18], rax
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
dec eax
jne 0x140005602
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400055ea
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400055f9
call qword [sym.imp.mfc100u.dll_delete__]
mov rcx, rdi
call qword [sym.imp.mfc100u.dll_CThreadLocalObject::CThreadLocalObject]
mov r9d, 2
or r8, 0xffffffffffffffff
mov edx, 0x100c
mov rcx, qword [r13 + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp eax, 0xffffffff
jne 0x14000564e
mov edx, dword [r13 + 0xaac]
mov edi, edx
lea rcx, [r13 + 0x700]
mov r9d, 2
mov r8d, r9d
call qword [sym.imp.mfc100u.dll_CDockablePane::SetAutoHideMode]
cmp edi, 0xffffffff
je 0x14000647c
lea rcx, [r13 + 0x700]
mov edx, edi
call qword [sym.imp.mfc100u.dll_COleDataObject::GetFileData]
mov rsi, rax
mov rbx, qword [rax]
mov ecx, 0x18
call qword [sym.imp.mfc100u.dll_CTagManager::CTagManager]
mov rdi, rax
mov qword [rsp + 0x70], rax
xor r12d, r12d
test rax, rax
je 0x1400056aa
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x1400056ad
test rbx, rbx
je 0x1400056ad
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rdi, r12
test rdi, rdi
jne 0x1400056bd
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 0x20], rax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
dec ecx
jne 0x1400056fc
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400056e4
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400056f3
call qword [sym.imp.mfc100u.dll_delete__]
mov rcx, rdi
call qword [sym.imp.mfc100u.dll_CThreadLocalObject::CThreadLocalObject]
mov rbx, qword [rsi + 8]
mov ecx, 0x18
call qword [sym.imp.mfc100u.dll_CTagManager::CTagManager]
mov rdi, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140005747
mov qword [rax + 8], r12
mov r12d, 1
mov dword [rax + 0x10], r12d
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x140005750
test rbx, rbx
je 0x140005750
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rdi, r12
mov r12d, 1
test rdi, rdi
jne 0x140005760
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 0x10], rax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
dec ecx
jne 0x14000579f
mov rcx, qword [rdi]
test rcx, rcx
je 0x140005787
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140005796
call qword [sym.imp.mfc100u.dll_delete__]
mov rcx, rdi
call qword [sym.imp.mfc100u.dll_CThreadLocalObject::CThreadLocalObject]
mov rbx, qword [rsi + 0x18]
mov ecx, 0x18
call qword [sym.imp.mfc100u.dll_CTagManager::CTagManager]
mov rdi, rax
mov qword [rsp + 0x70], rax
xor esi, esi
test rax, rax
je 0x1400057e6
mov qword [rax + 8], rsi
mov dword [rax + 0x10], r12d
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x1400057e9
test rbx, rbx
je 0x1400057e9
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rdi, rsi
test rdi, rdi
jne 0x1400057f9
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r14, rax
mov qword [rsp + 0x68], rax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
dec ecx
jne 0x14000583c
mov rcx, qword [rdi]
test rcx, rcx
je 0x140005824
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140005833
call qword [sym.imp.mfc100u.dll_delete__]
mov rcx, rdi
call qword [sym.imp.mfc100u.dll_CThreadLocalObject::CThreadLocalObject]
lea rcx, [r13 + 0x2c8]
lea rdx, [r13 + 0xaa0]
call qword [sym.imp.mfc100u.dll_CMFCBaseToolBar::GetThisMessageMap]
lea rcx, [rbp - 8]
call qword [0x14000fd10]
nop
mov edx, 0x6f
lea rcx, [rbp - 8]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
mov rdx, qword [rbp - 8]
lea rcx, [r13 + 0xaa0]
call qword [sym.imp.mfc100u.dll_CMemFile::Close]
test eax, eax
je 0x14000591d
mov rbx, qword [r13 + 0xaa0]
mov ecx, 0x18
call qword [sym.imp.mfc100u.dll_CTagManager::CTagManager]
mov rdi, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x1400058cb
mov qword [rax + 8], rsi
mov dword [rax + 0x10], r12d
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x1400058ce
test rbx, rbx
je 0x1400058ce
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rdi, rsi
test rdi, rdi
jne 0x1400058de
mov ecx, 0x8007000e
call fcn.14000c840
int3
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp + 8], rax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
dec ecx
jne 0x14000591d
mov rcx, qword [rdi]
test rcx, rcx
je 0x140005905
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140005914
call qword [sym.imp.mfc100u.dll_delete__]
mov rcx, rdi
call qword [sym.imp.mfc100u.dll_CThreadLocalObject::CThreadLocalObject]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [r13 + 0x8f0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
mov qword [rsp + 0x70], rax
mov edx, eax
lea rcx, [rbp + 0xb0]
call fcn.14000b090
nop
mov r15d, esi
test edi, edi
jle 0x140006427
nop word [rax + rax]
cmp byte [rbp + 0x378], 0
jne 0x140006422
mov edx, r15d
lea rcx, [r13 + 0x8b0]
call qword [sym.imp.mfc100u.dll_COleDataObject::GetFileData]
mov r14, rax
mov qword [rsp + 0x58], rax
mov r8, qword [rax]
mov rdx, qword [rax + 8]
lea rcx, [rbp + 0x380]
call fcn.1400022b0
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x78]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400059f9
call qword [sym.imp.mfc100u.dll_AfxFailMaxChars]
mov rcx, qword [rax + 8]
mov rax, qword [rcx]
call qword [rax + 0xc8]
test eax, eax
je 0x1400059ef
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x78]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x1400059b7
jmp 0x1400059f9
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x140005a1b
mov edi, esi
nop dword [rax + rax]
call qword [sym.imp.mfc100u.dll_AfxFailMaxChars]
mov rcx, qword [rax + 8]
mov rax, qword [rcx]
mov edx, edi
call qword [rax + 0xd0]
inc edi
test eax, eax
jne 0x140005a00
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.mfc100u.dll_COleServerItem::XOleObject::SetMoniker]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x405
mov rcx, qword [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp word [rbp + 0x380], 0
jne 0x140005a5a
mov word [rbp + reloc.mfc100u.dll_CMFCStatusBar::HitTest], si
jmp 0x140005ac0
lea rdx, [rbp + 0x3bb0]
lea rcx, [rbp + 0x380]
call fcn.1400024e0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x3bb0]
repne scasw ax, word [rdi]
not rcx
lea rdx, [rbp + rcx*2 + 0x37e]
cmp word [rdx], 0x5c
jne 0x140005a9a
nop
add rdx, 2
cmp word [rdx], 0x5c
je 0x140005a90
lea rcx, [rbp + reloc.mfc100u.dll_CMFCStatusBar::HitTest]
sub rcx, rdx
nop word [rax + rax]
movzx eax, word [rdx]
mov word [rcx + rdx], ax
add rdx, 2
test ax, ax
jne 0x140005ab0
mov edx, 0x2e
lea rcx, [rbp + reloc.mfc100u.dll_CMFCStatusBar::HitTest]
call qword [sym.imp.MSVCR100.dll_wcsrchr]
mov rdi, rax
test rax, rax
je 0x140005b34
add rdi, 2
mov rdx, rdi
lea rax, [rbp + 0x2bb0]
sub rax, rdi
nop dword [rax + rax]
movzx ecx, word [rdx]
mov word [rax + rdx], cx
add rdx, 2
test cx, cx
jne 0x140005af0
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
not rcx
dec rcx
test ecx, ecx
je 0x140005b34
lea rdx, [0x1400108d0]
lea rcx, [rbp + 0x2bb0]
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
sete al
test al, al
jne 0x140005d18
cmp word [rbp + 0x380], 0
jne 0x140005b47
mov word [rbp + 0xbb0], si
jmp 0x140005bb0
lea rdx, [rbp + 0x5bb0]
lea rcx, [rbp + 0x380]
call fcn.1400024e0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x5bb0]
repne scasw ax, word [rdi]
not rcx
lea rdx, [rbp + rcx*2 + 0x37e]
cmp word [rdx], 0x5c
jne 0x140005b8a
nop dword [rax + rax]
add rdx, 2
cmp word [rdx], 0x5c
je 0x140005b80
lea rcx, [rbp + 0xbb0]
sub rcx, rdx
nop word [rax + rax]
movzx eax, word [rdx]
mov word [rcx + rdx], ax
add rdx, 2
test ax, ax
jne 0x140005ba0
mov edx, 0x2e
lea rcx, [rbp + 0xbb0]
call qword [sym.imp.MSVCR100.dll_wcsrchr]
mov rdi, rax
test rax, rax
je 0x140005c24
add rdi, 2
mov rdx, rdi
lea rax, [rbp + 0x4bb0]
sub rax, rdi
nop dword [rax + rax]
movzx ecx, word [rdx]
mov word [rax + rdx], cx
add rdx, 2
test cx, cx
jne 0x140005be0
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
not rcx
dec rcx
test ecx, ecx
je 0x140005c24
lea rdx, [0x1400108d8]
lea rcx, [rbp + 0x4bb0]
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
sete al
test al, al
jne 0x140005d18
cmp word [rbp + 0x380], 0
jne 0x140005c37
mov word [rbp + 0x13b0], si
jmp 0x140005ca0
lea rdx, [rbp + 0x33b0]
lea rcx, [rbp + 0x380]
call fcn.1400024e0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x33b0]
repne scasw ax, word [rdi]
not rcx
lea rdx, [rbp + rcx*2 + 0x37e]
cmp word [rdx], 0x5c
jne 0x140005c7a
nop dword [rax + rax]
add rdx, 2
cmp word [rdx], 0x5c
je 0x140005c70
lea rcx, [rbp + 0x13b0]
sub rcx, rdx
nop word [rax + rax]
movzx eax, word [rdx]
mov word [rcx + rdx], ax
add rdx, 2
test ax, ax
jne 0x140005c90
mov edx, 0x2e
lea rcx, [rbp + 0x13b0]
call qword [sym.imp.MSVCR100.dll_wcsrchr]
mov rdi, rax
test rax, rax
je 0x140005da7
add rdi, 2
mov rdx, rdi
lea rax, [rbp + 0x43b0]
sub rax, rdi
nop
movzx ecx, word [rdx]
mov word [rax + rdx], cx
add rdx, 2
test cx, cx
jne 0x140005cd0
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
not rcx
dec rcx
test ecx, ecx
je 0x140005da7
lea rdx, [0x1400108e0]
lea rcx, [rbp + 0x43b0]
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
sete al
test al, al
je 0x140005da7
lea rcx, [rbp + 0x380]
call fcn.14000a3a0
test eax, eax
jne 0x140005da7
lea rax, str.PathAndFilename
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x380]
mov qword [rbp + 0x48], rax
lea rcx, [rbp - 0x68]
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::constructor_void____ptr64]
nop
mov dword [rsp + 0x20], r12d
lea r9, [rbp + 0x40]
lea r8, str.DigitalSignatures.UnsupportedDrawingFormat
lea rdx, str._AcTaskDialogs_component_TaskDialogs.xaml
lea rcx, [rbp - 0x68]
call qword [sym.imp.AdApplicationFrame.dll_public:_int___cdecl_AdTaskDialog::LoadFromFile_wchar_t_const____ptr64__wchar_t_const____ptr64__struct_TASKDIALOG_KEYVALUE_const____ptr64__int____ptr64]
test eax, eax
je 0x140005d98
lea rdx, [0x140005360]
lea rcx, [rbp - 0x68]
call qword [sym.imp.AdApplicationFrame.dll_public:_int___cdecl_AdTaskDialog::SetCallback_bool____cdecl___class_AdActiveTaskDialog____ptr64__struct_AdTaskDialogEventArgs_const____ptr64__long_long___int64______ptr64]
mov rdx, qword [r13 + 0x40]
lea rcx, [rbp - 0x68]
call qword [sym.imp.AdApplicationFrame.dll_public:_int___cdecl_AdTaskDialog::ShowDialog_struct_HWND______ptr64____ptr64]
cmp eax, 0x3e9
jne 0x1400063fa
lea rcx, [rbp - 0x68]
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::destructor_void____ptr64]
jmp 0x1400063eb
xor r12b, r12b
cmp word [rbp + 0x380], 0
jne 0x140005db9
or eax, 0xffffffff
jmp 0x140005dc6
lea rcx, [rbp + 0x380]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 1
je 0x140005f25
mov r12d, dword [rbp - 0x60]
test r12b, r12b
je 0x140005e29
lea rcx, [rbp - 0x30]
call qword [0x14000fd10]
nop
mov edx, 0x80
lea rcx, [rbp - 0x30]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
mov r9, qword [rbp - 0x30]
mov r8d, 3
mov edx, r15d
lea rcx, [r13 + 0x8b0]
call qword [sym.imp.mfc100u.dll_CDockingManager::SetAutohideZOrder]
lea rcx, [r14 + 0x18]
lea rdx, [rbp - 0x30]
call qword [sym.imp.mfc100u.dll_CView::CView]
nop
lea rcx, [rbp - 0x30]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
jmp 0x1400063e5
cmp byte [rsp + 0x52], 0
je 0x140005f22
lea rax, str.FullPathToFileName
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x380]
mov qword [rbp + 0x58], rax
lea rax, str.FileName
mov qword [rbp + 0x60], rax
mov rax, qword [r14]
mov qword [rbp + 0x68], rax
lea rcx, [rbp - 0x58]
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::constructor_void____ptr64]
nop
mov dword [rsp + 0x20], 2
lea r9, [rbp + 0x50]
lea r8, str.AcSignApply.DigitalSignatureReadOnlyFile
lea rdx, str._AcTaskDialogs_component_TaskDialogs.xaml
lea rcx, [rbp - 0x58]
call qword [sym.imp.AdApplicationFrame.dll_public:_int___cdecl_AdTaskDialog::LoadFromFile_wchar_t_const____ptr64__wchar_t_const____ptr64__struct_TASKDIALOG_KEYVALUE_const____ptr64__int____ptr64]
test eax, eax
je 0x140005f0d
mov rdi, rsi
call qword [sym.imp.mfc100u.dll_AfxFormatStrings]
test rax, rax
je 0x140005eb2
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xf8]
test rax, rax
je 0x140005eb2
mov rdi, qword [rax + 0x40]
mov rdx, rdi
lea rcx, [rbp - 0x58]
call qword [sym.imp.AdApplicationFrame.dll_public:_int___cdecl_AdTaskDialog::ShowDialog_struct_HWND______ptr64____ptr64]
movsxd rcx, eax
cmp rcx, 0xffffffffffffffff
je 0x140005f08
cmp rcx, 0x3e9
je 0x140005f0d
cmp rcx, 0x3ea
je 0x140005f01
movzx r12d, r12b
cmp rcx, 0x3ec
mov eax, 1
cmove r12d, eax
mov dword [rbp - 0x60], r12d
lea rcx, [rbp - 0x58]
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::destructor_void____ptr64]
jmp 0x1400063e5
mov byte [rsp + 0x52], 0
jmp 0x140005f0d
mov byte [rsp + 0x50], 1
lea rcx, [rbp - 0x58]
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::destructor_void____ptr64]
cmp byte [rsp + 0x50], 0
jne 0x140006422
mov r12b, 1
mov rax, qword [0x140018c10]
cmp dword [rax - 0x10], 0
je 0x140006077
lea rcx, [0x140018c10]
xor r13d, r13d
lea r14, [0x140018c10]
nop word [rax + rax]
mov rbx, qword [rcx]
cmp word [rbp + 0x380], r13w
jne 0x140005f67
mov word [rbp + 0x23b0], r13w
jmp 0x140005fd0
lea rdx, [rbp + 0x53b0]
lea rcx, [rbp + 0x380]
call fcn.1400024e0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x53b0]
repne scasw ax, word [rdi]
not rcx
lea rdx, [rbp + rcx*2 + 0x37e]
cmp word [rdx], 0x5c
jne 0x140005faa
nop dword [rax + rax]
add rdx, 2
cmp word [rdx], 0x5c
je 0x140005fa0
lea rcx, [rbp + 0x23b0]
sub rcx, rdx
nop word [rax + rax]
movzx eax, word [rdx]
mov word [rcx + rdx], ax
add rdx, 2
test ax, ax
jne 0x140005fc0
mov edx, 0x2e
lea rcx, [rbp + 0x23b0]
call qword [sym.imp.MSVCR100.dll_wcsrchr]
mov rdi, rax
test rax, rax
je 0x140006053
add rdi, 2
mov rdx, rdi
lea rax, [rbp + 0x63b0]
sub rax, rdi
nop dword [rax + rax]
movzx ecx, word [rdx]
mov word [rax + rdx], cx
add rdx, 2
test cx, cx
jne 0x140006000
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
not rcx
dec rcx
test ecx, ecx
je 0x140006053
cmp word [rbx], 0x2e
jne 0x14000603a
nop dword [rax]
add rbx, 2
cmp word [rbx], 0x2e
je 0x140006030
mov rdx, rbx
lea rcx, [rbp + 0x63b0]
call qword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
sete al
test al, al
jne 0x14000606e
inc rsi
lea rcx, [rsi + rsi*2]
shl rcx, 4
add rcx, r14
mov rax, qword [rcx]
cmp dword [rax - 0x10], r13d
jne 0x140005f50
mov r13, qword [rbp + 0x38]
mov r14, qword [rsp + 0x58]
lea rsi, [rsi + rsi*2]
shl rsi, 4
lea rax, [0x140018c10]
mov r8, qword [rsi + rax + 0x10]
lea rdx, [rbp + 0x380]
mov rcx, r13
call fcn.140008a30
test al, al
je 0x1400061c4
mov ebx, dword [rbp - 0x78]
test bl, bl
jne 0x1400063e3
cmp byte [rsp + 0x51], bl
je 0x1400061c4
lea rax, str.FullPathToFileName
mov qword [rbp + 0xb80], rax
lea rax, [rbp + 0x380]
mov qword [rbp + 0xb88], rax
lea rax, str.FileName
mov qword [rbp + 0xb90], rax
mov rax, qword [r14]
mov qword [rbp + 0xb98], rax
lea rax, str.NameOfSigned
mov qword [rbp + 0xba0], rax
mov rax, qword [r13 + 0xa70]
mov qword [rbp + 0xba8], rax
lea rcx, [rbp - 0x80]
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::constructor_void____ptr64]
nop
mov dword [rsp + 0x20], 3
lea r9, [rbp + 0xb80]
lea r8, str.AcSignApply.DigitalSignaturePreviouslySignedFile
lea rdx, str._AcTaskDialogs_component_TaskDialogs.xaml
lea rcx, [rbp - 0x80]
call qword [sym.imp.AdApplicationFrame.dll_public:_int___cdecl_AdTaskDialog::LoadFromFile_wchar_t_const____ptr64__wchar_t_const____ptr64__struct_TASKDIALOG_KEYVALUE_const____ptr64__int____ptr64]
test eax, eax
je 0x1400061ba
xor eax, eax
mov edi, eax
call qword [sym.imp.mfc100u.dll_AfxFormatStrings]
test rax, rax
je 0x140006161
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xf8]
test rax, rax
je 0x140006161
mov rdi, qword [rax + 0x40]
mov rdx, rdi
lea rcx, [rbp - 0x80]
call qword [sym.imp.AdApplicationFrame.dll_public:_int___cdecl_AdTaskDialog::ShowDialog_struct_HWND______ptr64____ptr64]
movsxd rcx, eax
cmp rcx, 0xffffffffffffffff
je 0x140006400
cmp rcx, 0x3e9
je 0x1400061ba
cmp rcx, 0x3ea
je 0x1400061b5
movzx ebx, bl
cmp rcx, 0x3ec
mov r12d, 1
cmove ebx, r12d
mov dword [rbp - 0x78], ebx
lea rcx, [rbp - 0x80]
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::destructor_void____ptr64]
xor esi, esi
jmp 0x1400063eb
mov byte [rsp + 0x51], 0
lea rcx, [rbp - 0x80]
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::destructor_void____ptr64]
test r12b, r12b
je 0x1400061db
mov edx, 0x80
lea rcx, [rbp + 0x380]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov ecx, 0x18
call qword [sym.imp.mfc100u.dll_CTagManager::CTagManager]
mov rdi, rax
mov qword [rsp + 0x58], rax
mov r12d, 1
test rax, rax
je 0x14000621e
xor eax, eax
mov qword [rdi + 8], rax
mov dword [rdi + 0x10], r12d
lea rcx, [rbp + 0x380]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x140006406
jmp 0x140006221
mov rdi, rax
test rdi, rdi
je 0x140006411
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
dec ecx
jne 0x140006268
mov rcx, qword [rdi]
test rcx, rcx
je 0x140006250
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000625f
call qword [sym.imp.mfc100u.dll_delete__]
mov rcx, rdi
call qword [sym.imp.mfc100u.dll_CThreadLocalObject::CThreadLocalObject]
lea rax, [0x140018c10]
mov rcx, qword [rsi + rax + 0x10]
mov rdi, qword [rcx]
xor esi, esi
mov qword [rsp + 0x40], rsi
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x18]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x10]
mov r8, qword [rbp + 0x20]
mov rdx, rbx
call qword [rdi + 0x20]
test eax, eax
jns 0x140006378
lea rcx, [rsp + 0x78]
call qword [0x14000fd10]
nop
mov edx, 0x83
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
lea rcx, [rbp - 0x48]
call qword [0x14000fd10]
nop
lea r8, [rbp + 0x380]
mov rdx, qword [rsp + 0x78]
lea rcx, [rbp - 0x48]
call qword [sym.imp.mfc100u.dll_CMFCRibbonRecentFilesList::FillList]
lea rcx, [rbp - 0x18]
call qword [0x14000fd10]
nop
lea edx, [rsi + 0x7a]
lea rcx, [rbp - 0x18]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
lea r9d, [rsi + 0x30]
mov r8, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x48]
mov rcx, r13
call qword [sym.imp.mfc100u.dll_CMouseManager::LoadState]
mov edx, 0x8e
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
mov r9, qword [rsp + 0x78]
lea r8d, [rsi + 3]
mov edx, r15d
lea rcx, [r13 + 0x8b0]
call qword [sym.imp.mfc100u.dll_CDockingManager::SetAutohideZOrder]
lea rcx, [r14 + 0x18]
lea rdx, [rbp - 0x48]
call qword [sym.imp.mfc100u.dll_CView::CView]
nop
lea rcx, [rbp - 0x18]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
lea rcx, [rbp - 0x48]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
lea rcx, [rsp + 0x78]
jmp 0x1400063d2
lea rcx, [rbp - 0x38]
call qword [0x14000fd10]
nop
mov edx, 0x78
lea rcx, [rbp - 0x38]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
mov r9, qword [rbp - 0x38]
mov r8d, 3
mov edx, r15d
lea rcx, [r13 + 0x8b0]
call qword [sym.imp.mfc100u.dll_CDockingManager::SetAutohideZOrder]
lea rcx, [r14 + 0x18]
lea rdx, [rbp - 0x38]
call qword [sym.imp.mfc100u.dll_CView::CView]
mov edx, r12d
lea rcx, [rbp + 0x380]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
inc dword [rsp + 0x64]
lea rcx, [rbp - 0x38]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1400063eb
xor esi, esi
mov r12d, 1
inc r15d
cmp r15d, dword [rsp + 0x70]
jge 0x140006422
jmp 0x140005960
lea rcx, [rbp - 0x68]
jmp 0x14000641c
lea rcx, [rbp - 0x80]
jmp 0x14000641c
mov ecx, 0x8007000e
call fcn.14000c840
nop
mov ecx, 0x8007000e
call fcn.14000c840
int3
call qword [sym.imp.AdApplicationFrame.dll_public:_void___cdecl_AdTaskDialog::destructor_void____ptr64]
mov r14, qword [rsp + 0x68]
movzx esi, byte [rbp + 0x378]
lea rax, vtable.CWaitDialog.0
mov qword [rbp + 0xb0], rax
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.mfc100u.dll_COlePasteSpecialDialog::COlePasteSpecialDialog]
nop
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.mfc100u.dll_CRichEditCtrl::CRichEditCtrl]
nop
lea rcx, [rbp + 0xb0]
call qword [sym.imp.mfc100u.dll_CContextMenuManager::CContextMenuManager]
nop
lea rcx, [rbp - 8]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
mov r12, qword [rbp + 0x10]
mov r15, qword [rbp + 0x20]
mov rbx, qword [rbp + 0x18]
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14000648b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbp + 8]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
lea rcx, [rbp - 0x28]
call qword [0x14000fd10]
nop
lea rcx, [rbp - 0x10]
call qword [0x14000fd10]
nop
mov edx, 0x77
lea rcx, [rbp - 0x10]
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
mov r8d, dword [rsp + 0x64]
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x28]
call qword [sym.imp.mfc100u.dll_CMFCRibbonRecentFilesList::FillList]
lea rcx, [rbp - 0x40]
call qword [0x14000fd10]
nop
lea rcx, [rbp - 0x40]
test sil, sil
mov edx, 0x8b
jne 0x14000650f
mov edx, 0x8a
call qword [sym.imp.mfc100u.dll_CDaoRecordset::IsBOF]
xor r9d, r9d
mov r8, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x28]
mov rcx, r13
call qword [sym.imp.mfc100u.dll_CMouseManager::LoadState]
nop
lea rcx, [rbp - 0x40]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
lea rcx, [rbp - 0x10]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
lea rcx, [rbp - 0x28]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
nop
lea rcx, [rbp - 0x70]
call qword [sym.imp.mfc100u.dll_CWinApp::CWinApp]
mov rcx, qword [rbp + 0x6bb0]
xor rcx, rsp
call fcn.14000c160
lea r11, [rsp + 0x6cc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret