Function at 0x14004ad20
Capabilities:
Check os version
Encode data using xor
Execute anti-debugging instructions
Get common file path
Link many functions at runtime
Parse pe header
Query or enumerate registry value
Resolve function by parsing pe exports
Resume thread
Set current directory

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, reloc.MFC42u.dll_CDocObjectServer::XPrint::QueryInterface
call fcn.140094540
sub rsp, rax
mov qword [rsp + 0x2b8], 0xfffffffffffffffe
mov qword [rsp + CControlBar::RecalcDelayShow], rbx
mov qword [rsp + 0x1560], rsi
mov rax, qword [0x1400fd258]
xor rax, rsp
mov qword [rsp + COleServerDoc::XOleObject::QueryInterface], rax
mov rbx, rcx
mov qword [rsp + 0x1030], rcx
xor eax, eax
mov edi, eax
mov dword [rsp + reloc.MFC42u.dll_CDialogTemplate::CDialogTemplate], eax
lea rsi, [section..data]
mov r9, rsi
mov r8, rsi
lea rdx, [0x140059880]
lea rcx, [0x1400b22d8]
call fcn.14005998c
mov eax, dword [0x1400fecc0]
mov r14d, 1
test r14b, al
je 0x14004adc1
lea rdx, [0x1400b2200]
mov rcx, rsi
call fcn.140016f80
mov eax, dword [0x1400fecc0]
test al, 4
je 0x14004add4
lea rdx, [0x1400b21c0]
mov rcx, rsi
call fcn.140016f80
xor r9d, r9d
xor r8d, r8d
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapSetInformation]
nop dword [rax + rax]
lea r12, [rbx + 0x190]
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.MFC42u.dll_CMapWordToPtr::RemoveKey]
nop dword [rax + rax]
xor edx, edx
lea rcx, str.WordPadClass
call qword [sym.imp.USER32.dll_FindWindowW]
nop dword [rax + rax]
test rax, rax
je 0x14004ae35
mov rdx, qword [rbx + 0x1a8]
mov rcx, rbx
call fcn.140057668
test eax, eax
jne 0x14004b0e9
lea rdx, str.MicrosoftWindowsCurrentVersionApplets
mov rcx, rbx
call qword [sym.imp.MFC42u.dll_CHtmlView::CHtmlView]
nop dword [rax + rax]
mov rcx, qword [rbx + 0x118]
test rcx, rcx
je 0x14004ae63
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
lea r15, str.Wordpad
mov rcx, r15
call qword [sym.imp.msvcrt.dll__wcsdup]
nop dword [rax + rax]
mov qword [rbx + 0x118], rax
xor r8d, r8d
lea edx, [r8 + 3]
lea rcx, [0x1400fd8d0]
call qword [sym.imp.ntdll.dll_WinSqmStartSession]
nop dword [rax + rax]
mov rcx, rbx
call fcn.1400578a4
xor eax, eax
lea r13d, [rax + 2]
mov qword [rsp + 0x2c0], r13
cmp dword [rbx + 0x19c], eax
jne 0x14004aef4
mov eax, dword [rbx + 0xe0]
cmp eax, r14d
je 0x14004aed9
mov esi, eax
cmp eax, r13d
jle 0x14004aefe
cmp eax, 5
jle 0x14004aed9
cmp eax, 7
jle 0x14004aefe
cmp eax, 0xa
jg 0x14004aefe
mov esi, eax
xor eax, eax
cmp dword [rbx + reloc.MFC42u.dll_CString::CString], eax
je 0x14004aefe
mov dword [rbx + 0xe0], 3
lea esi, [rax + 3]
jmp 0x14004aefe
mov dword [rbx + 0xe0], r14d
mov esi, r14d
mov rcx, rbx
call fcn.140057be0
mov rcx, qword [rbx + 0x110]
test rcx, rcx
je 0x14004af1e
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
lea rcx, str.WORDPAD.HLP
call qword [sym.imp.msvcrt.dll__wcsdup]
nop dword [rax + rax]
mov qword [rbx + 0x110], rax
xor eax, eax
mov r14d, eax
mov dword [rsp + 0x14c], eax
mov dword [rsp + 0x150], 4
mov qword [rsp + 0x2c8], rax
mov dword [rsp + 0x154], eax
lea rax, [rsp + 0x2c8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionWordpadCOMChecks
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
nop dword [rax + rax]
test eax, eax
jne 0x14004b004
lea rax, [rsp + 0x150]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x14c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x154]
xor r8d, r8d
lea rdx, str.ComCheckOn
mov rcx, qword [rsp + 0x2c8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jne 0x14004aff0
cmp dword [rsp + 0x154], 4
jne 0x14004aff0
mov eax, 1
cmp dword [rsp + 0x14c], eax
cmove r14d, eax
mov rcx, qword [rsp + 0x2c8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop dword [rax + rax]
mov dword [0x1400ff658], r14d
xor ecx, ecx
call qword [sym.imp.ole32.dll_OleInitialize]
nop dword [rax + rax]
test eax, eax
je 0x14004b04b
or r8d, 0xffffffff
xor edx, edx
lea ecx, [rdx + 0x64]
call qword [sym.imp.MFC42u.dll_Ordinal_1498]
nop dword [rax + rax]
test byte [0x1400fecc0], r13b
je 0x14004b0e9
lea rdx, [0x1400b2180]
jmp 0x14004b0dd
mov eax, 1
mov dword [rbx + 0x364], eax
xor eax, eax
cmp dword [0x1400ff658], eax
je 0x14004b097
lea r8, [rsp + 0x2d0]
lea rdx, [0x1400ce350]
lea rcx, [0x1400f95a8]
call fcn.14004a660
test eax, eax
js 0x14004b0e9
mov rcx, qword [rsp + 0x2d0]
call qword [sym.imp.ole32.dll_CoRegisterActivationFilter]
nop dword [rax + rax]
test eax, eax
js 0x14004b0e9
mov rcx, rbx
call fcn.140057844
lea rcx, str.MSFTEDIT.DLL
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
nop dword [rax + rax]
test rax, rax
jne 0x14004b118
or r8d, 0xffffffff
lea edx, [rax + 0x30]
lea ecx, [rax + 0x6c]
call qword [sym.imp.MFC42u.dll_Ordinal_1498]
nop dword [rax + rax]
test byte [0x1400fecc0], r13b
je 0x14004b0e9
lea rdx, [0x1400b21e0]
lea rcx, [section..data]
call fcn.140016f80
xor eax, eax
mov rcx, qword [rsp + 0x1510]
xor rcx, rsp
call fcn.1400929d0
lea r11, [rsp + reloc.MFC42u.dll_CDocObjectServer::XPrint::QueryInterface]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, str._CTF_ENABLE_PROCESS_ATOM_
call qword [sym.imp.KERNEL32.dll_AddAtomW]
nop dword [rax + rax]
mov word [rbx + 0x360], ax
lea rcx, str._CTF_PROCESS_ATOM_
call qword [sym.imp.KERNEL32.dll_AddAtomW]
nop dword [rax + rax]
mov word [rbx + 0x362], ax
mov edx, 9
mov rcx, rbx
call qword [sym.imp.MFC42u.dll_CPropertyPage::OnCtlColor]
nop dword [rax + rax]
xor eax, eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rax + 5]
lea rcx, [0x1400ff550]
call qword [sym.imp.MFC42u.dll_CThreadData::CThreadData]
nop dword [rax + rax]
lea rcx, [rbx + 0x2b0]
mov r13d, 1
mov r9d, r13d
lea r8, [0x1400ff550]
lea rdx, [0x1400ce360]
call qword [sym.imp.MFC42u.dll_ConstructElements]
nop dword [rax + rax]
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 4
xor r9d, r9d
lea r8d, [r13 - 0x10]
mov rdx, rbx
lea rcx, [0x140058ad0]
call qword [sym.imp.MFC42u.dll_Ordinal_1404]
nop dword [rax + rax]
mov qword [rbx + 0x358], rax
xor r14d, r14d
test rax, rax
je 0x14004b203
mov dword [rax + 0x50], r14d
mov rcx, qword [rbx + 0x358]
mov rcx, qword [rcx + 0x58]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
nop dword [rax + rax]
mov rcx, rbx
call fcn.14004acb4
test eax, eax
js 0x14004b0e9
xor eax, eax
cmp dword [rbx + 0x19c], eax
jne 0x140057608
cmp dword [rbx + 0x1a0], eax
jne 0x140057608
mov dword [rbx + reloc.MFC42u.dll_CTabCtrl::CTabCtrl], r13d
lea rcx, [rbx + 0x1f0]
mov edx, 0xf03e
call qword [sym.imp.MFC42u.dll_CPropertySheet::OnCtlColor]
nop dword [rax + rax]
mov rcx, rbx
call fcn.1400582a0
xor eax, eax
mov byte [rbx + 0x34c], al
mov dword [rbx + reloc.MFC42u.dll_CTabCtrl::CTabCtrl], eax
or r13, 0xffffffffffffffff
mov dword [rbx + 0xe0], r13d
cmp qword [rbx + 0x40], rax
je 0x14004b0e9
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0xf8]
call qword [str._E_t_]
mov rcx, rax
call qword [sym.imp.MFC42u.dll_COleControl::XDataObject::GetCanonicalFormatEtc]
nop dword [rax + rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x70], rax
lea ecx, [r13 + 0x51]
call qword [sym.imp.MFC42u.dll_CMonthCalCtrl::SetDayState]
nop dword [rax + rax]
mov r14, rax
mov qword [rsp + 0x90], rax
xor eax, eax
test r14, r14
je 0x14004b2fd
lea rdx, str._restart
lea rcx, [rsp + 0xbe0]
call fcn.1400158b4
nop
lea eax, [r13 + 2]
mov edi, eax
mov dword [rsp + reloc.MFC42u.dll_CDialogTemplate::CDialogTemplate], eax
mov r8d, eax
lea rdx, [rsp + 0xbe0]
mov rcx, r14
call fcn.14007d8cc
nop
mov qword [rbx + 0x368], rax
mov eax, 1
test al, dil
je 0x14004b32b
and edi, 0xfffffffe
mov dword [rsp + reloc.MFC42u.dll_CDialogTemplate::CDialogTemplate], edi
xor r8d, r8d
mov dl, al
lea rcx, [rsp + 0xbe0]
call fcn.14000c9c4
nop
call qword [sym.imp.MFC42u.dll_Ordinal_1463]
nop dword [rax + rax]
xor ecx, ecx
cmp qword [rax + 0x20], rcx
cmovne r15, qword [rax + 0x20]
mov ecx, 0x50
call qword [sym.imp.MFC42u.dll_CMonthCalCtrl::SetDayState]
nop dword [rax + rax]
mov r14, rax
mov qword [rsp + 0x90], rax
xor eax, eax
test r14, r14
je 0x14004b3a6
mov rdx, r15
lea rcx, [rsp + 0xbb8]
call fcn.1400158b4
nop
or edi, 2
mov dword [rsp + reloc.MFC42u.dll_CDialogTemplate::CDialogTemplate], edi
mov dword [rsp + 0x20], 0x12c
mov r9d, 5
lea r8, [rsp + 0xbb8]
mov rdx, qword [rbx + 0x368]
mov rcx, r14
call fcn.14007c3e4
nop
mov qword [rbx + 0x370], rax
test dil, 2
je 0x14004b3cd
xor r8d, r8d
lea r14d, [r8 + 1]
mov dl, r14b
lea rcx, [rsp + 0xbb8]
call fcn.14000c9c4
nop
jmp 0x14004b3d3
mov r14d, 1
mov ecx, SafeArrayCopy
call qword [sym.imp.MFC42u.dll_CMonthCalCtrl::SetDayState]
nop dword [rax + rax]
mov rcx, rax
mov qword [rsp + 0x90], rax
xor eax, eax
test rcx, rcx
je 0x14004b415
lea rax, vtable.RecoveryCallback.0
mov qword [rcx], rax
lea rax, vtable.CWordPadRecoveryCallback.0
mov qword [rcx], rax
mov rax, qword [rsp + 0x70]
mov qword [rcx + 0x10], rax
jmp 0x14004b418
mov rcx, rax
mov qword [rbx + 0x378], rcx
mov rax, qword [rbx + 0x370]
mov qword [rax + 0x10], rcx
mov rax, qword [rax + 8]
mov qword [rcx + 8], rax
mov rdx, qword [rbx + 0xd8]
lea rcx, [rsp + 0xb90]
call fcn.1400158b4
nop
lea rdx, [rsp + 0xb90]
mov rcx, qword [rbx + 0x368]
call fcn.14007d934
mov edi, eax
xor r8d, r8d
mov dl, r14b
lea rcx, [rsp + 0xb90]
call fcn.14000c9c4
nop
test edi, edi
je 0x14004b495
mov rcx, qword [rbx + 0x370]
call fcn.14007c54c
mov rcx, qword [rbx + 0x370]
call fcn.14007cc7c
mov dword [rbx + 0xe0], esi
jmp 0x14004b508
lea rcx, [rsp + 0x570]
call qword [sym.imp.MFC42u.dll_CButton::CButton]
nop dword [rax + rax]
nop
mov rax, qword [rbx + 0x1a8]
xor ecx, ecx
cmp dword [rax - 8], ecx
je 0x14004b4be
mov dword [rbx + 0xe0], esi
xor eax, eax
cmp dword [rbx + 0x1a4], eax
je 0x14004b4fb
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.MFC42u.dll_COleServerDoc::XPersistStorage::Save]
nop dword [rax + rax]
test eax, eax
jne 0x14004b4fb
xor eax, eax
mov dword [rsp + 0x158], eax
call qword [sym.imp.MFC42u.dll_CMemFile::Alloc]
nop dword [rax + rax]
nop
xor eax, eax
jmp 0x14004b0eb
call qword [sym.imp.MFC42u.dll_CMemFile::Alloc]
nop dword [rax + rax]
nop
mov edx, r14d
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.MFC42u.dll_CDragListBox::DrawInsert]
nop dword [rax + rax]
xor r9d, r9d
lea r8d, [r9 + 5]
lea rdx, [rsp + 0x10f0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
nop dword [rax + rax]
test eax, eax
je 0x14004b550
lea rcx, [rsp + 0x10f0]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
nop dword [rax + rax]
test byte [0x1400fecc0], 4
je 0x14004b56c
lea rdx, [0x1400b2418]
lea rcx, [section..data]
call fcn.140016f80
mov rcx, qword [rbx + 0x370]
call fcn.14007c50c
mov rcx, qword [rbx + 0x370]
lea rdx, [rsp + 0xc08]
mov rcx, qword [rcx + 8]
call fcn.1400811c4
nop
xor r8d, r8d
lea rdx, [rsp + 0xc08]
mov rcx, qword [rbx + 0x368]
call fcn.14007dd80
mov rcx, qword [rbx + 0x368]
call fcn.14007dc6c
xor eax, eax
mov qword [rsp + 0x2d8], rax
mov dword [rsp + 0x160], eax
mov dword [rsp + 0x164], eax
mov qword [rsp + 0x2e0], rax
mov dword [rsp + 0x168], eax
xor eax, eax
lock cmpxchg dword [0x1400ff710], r14d
jne 0x14004b5db
mov eax, dword [0x1400ff70c]
test eax, eax
jne 0x14004bcaa
xor eax, eax
mov dword [rsp + 0xf0], eax
mov esi, eax
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x2f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
xor edx, edx
mov r8d, CObject::operatordelete
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov r15, rax
xor eax, eax
or r14d, 0xffffffff
test r15, r15
je 0x14004bbe7
mov cl, al
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x60], r14d
mov ebx, eax
mov dword [rsp + 0x16c], eax
mov r11d, eax
mov dword [rsp + 0x170], eax
lea r12, [r15 + 7]
lea rax, [0x1400d3c02]
mov qword [rsp + 0x2a8], rax
mov rdx, rax
mov eax, 0x67
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x70], rax
movzx r10d, byte [rdx - 2]
shl r10d, 8
movzx eax, byte [rdx - 1]
or r10d, eax
shl r10d, 8
movzx eax, byte [rdx]
or r10d, eax
shl r10d, 8
movzx eax, byte [rdx + 1]
or r10d, eax
movzx r9d, byte [rdx + 2]
shl r9d, 8
movzx eax, byte [rdx + 3]
or r9d, eax
shl r9d, 8
movzx eax, byte [rdx + 4]
or r9d, eax
shl r9d, 8
movzx eax, byte [rdx + 5]
or r9d, eax
xor r11d, r10d
xor ebx, r9d
add rdx, 8
mov qword [rsp + 0x90], rdx
xor ebx, r11d
xor ebx, 0xac987321
lea eax, [rbx + 0x54969fa2]
rol eax, 5
mov edx, ebx
rol edx, 0xa
imul eax, eax, 0x137f
add edx, eax
xor r11d, edx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
mov edx, r11d
rol edx, 2
imul eax, eax, 0xab69
sub eax, edx
xor ebx, eax
mov eax, ebx
shr eax, 0xd
imul edx, ebx, 0x605e
sub edx, eax
sub edx, 0x756c8a2
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
mov edx, r11d
rol edx, 2
imul eax, eax, 0x7f1
sub eax, edx
xor ebx, eax
mov edx, ebx
xor edx, 0xab69605e
mov eax, 0x7f1137f
sub eax, edx
xor r11d, eax
mov edi, r11d
ror edi, 6
mov eax, r11d
xor eax, 0x137f
imul edx, eax, 0xab69
xor edi, edx
xor ebx, edi
lea eax, [rbx + 0x7f1137f]
ror eax, 0xf
mov edx, ebx
rol edx, 2
imul eax, eax, 0x605e
add edx, eax
xor r11d, edx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
mov edx, r11d
rol edx, 8
imul eax, eax, 0x7f1
sub eax, edx
xor ebx, eax
mov eax, ebx
xor eax, 0xab69605e
ror eax, 0xc
mov edx, ebx
ror edx, 0xa
imul eax, eax, 0x137f
xor edx, eax
xor r11d, edx
mov eax, r11d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor edx, eax
xor ebx, edx
mov eax, ebx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea r8d, [r11 - 0x7f1]
xor r8d, ebx
xor r8d, 0xab69605e
mov eax, r8d
xor eax, 0x7f1
rol eax, 2
mov edx, r8d
shr edx, 2
imul eax, eax, 0x137f
add edx, eax
xor r11d, edx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
mov edx, r11d
rol edx, 7
imul eax, eax, 0xab69
add edx, eax
xor r8d, edx
mov edi, r8d
ror edi, 9
mov eax, r8d
xor eax, 0x137f
imul edx, eax, 0x605e
add edi, edx
xor r11d, edi
mov eax, r11d
xor eax, 0xab69
rol eax, 5
mov edx, r11d
rol edx, 7
imul eax, eax, 0x7f1
add edx, eax
xor r8d, edx
mov edi, r8d
xor edi, r11d
xor edi, 0xac987321
mov eax, edi
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r8d, edx
lea eax, [r8 - 0x7f1137f]
ror eax, 1
mov edx, r8d
ror edx, 6
imul eax, eax, 0x605e
sub eax, edx
xor edi, eax
lea eax, [rdi - 0x54969fa2]
rol eax, 3
mov edx, edi
rol edx, 0xe
imul eax, eax, 0x7f1
add edx, eax
xor r8d, edx
lea eax, [r8 - 0x54969fa2]
rol eax, 0xf
mov edx, r8d
ror edx, 0xe
imul eax, eax, 0x137f
sub eax, edx
xor edi, eax
mov eax, edi
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, edi
shr eax, 3
xor edx, eax
xor r8d, edx
mov eax, r8d
xor eax, 0x7f1137f
rol eax, 4
mov edx, r8d
rol edx, 2
imul eax, eax, 0x605e
xor edx, eax
xor edx, dword [rsp + 0x80]
xor edi, edx
mov dword [rsp + 0x170], edi
xor r8d, dword [rsp + 0x60]
mov dword [rsp + 0x16c], r8d
mov byte [r12 - 4], dil
ror dword [rsp + 0x170], 8
mov al, byte [rsp + 0x16c]
mov byte [r12], al
ror dword [rsp + 0x16c], 8
mov al, byte [rsp + 0x170]
mov byte [r12 - 5], al
ror dword [rsp + 0x170], 8
mov al, byte [rsp + 0x16c]
mov byte [r12 - 1], al
ror dword [rsp + 0x16c], 8
mov al, byte [rsp + 0x170]
mov byte [r12 - 6], al
ror dword [rsp + 0x170], 8
mov al, byte [rsp + 0x16c]
mov byte [r12 - 2], al
ror dword [rsp + 0x16c], 8
mov al, byte [rsp + 0x170]
mov byte [r12 - 7], al
mov al, byte [rsp + 0x16c]
mov byte [r12 - 3], al
mov r11d, dword [rsp + 0x170]
ror r11d, 8
mov dword [rsp + 0x170], r11d
mov ebx, dword [rsp + 0x16c]
ror ebx, 8
mov dword [rsp + 0x16c], ebx
mov dword [rsp + 0x80], r10d
mov dword [rsp + 0x60], r9d
lea r12, [r12 + 8]
mov edi, 1
sub qword [rsp + 0x70], rdi
mov rdx, qword [rsp + 0x90]
jne 0x14004b68f
xor eax, eax
mov ebx, CObject::operatordelete
xor cl, byte [rax + r15]
add rax, rdi
cmp rax, rbx
jb 0x14004ba11
movzx eax, cl
cmp rax, qword [0x1400d3f38]
je 0x14004ba30
mov edi, 0xc004d501
jmp 0x14004ba47
mov qword [rsp + 0x2e8], r15
xor eax, eax
mov r15d, eax
mov qword [rsp + 0x2f0], rbx
mov edi, eax
test r15, r15
je 0x14004ba6c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test edi, edi
js 0x14004bc02
mov rdi, qword [rsp + 0x2e8]
mov rax, qword [rsp + 0x2f0]
xor ecx, ecx
mov byte [rax + rdi - 1], cl
lea r15d, [rcx + 0x60]
mov r8d, r15d
xor edx, edx
lea rbx, [0x1400fee40]
mov rcx, rbx
call sub.msvcrt.dll_memset
xor eax, eax
cmp byte [rdi], al
je 0x14004bc16
mov r12d, eax
mov r15d, 0xc000007b
mov rdx, rdi
mov rax, r13
xor ecx, ecx
inc rax
cmp word [rdi + rax*2], cx
jne 0x14004babd
lea rdi, [rdi + rax*2]
mov eax, r12d
lea rcx, [rax + rax*2]
lea rbx, [rbx + rcx*8]
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
xor r8d, r8d
test eax, eax
je 0x14004bc02
mov esi, r8d
mov rax, qword [rbx]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x14004bb06
mov esi, r15d
jmp 0x14004bb50
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x14004bb01
add rcx, qword [rbx]
cmp rcx, qword [rbx]
jb 0x14004bb01
cmp dword [rcx], 0x4550
jne 0x14004bb01
movzx eax, word [rcx + 0x18]
mov edx, AFX_MODULE_STATE::AFX_MODULE_STATE
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14004bb3f
mov esi, 0xc000000d
jmp 0x14004bb50
mov rax, qword [rcx + 0x88]
mov qword [rbx + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [rbx + 8], eax
mov eax, dword [rdi + 2]
mov dword [rsp + 0x60], eax
add rdi, 6
mov r15d, r8d
mov ecx, 1
test eax, eax
je 0x14004bbd2
mov rdx, rdi
mov rax, r13
inc rax
cmp byte [rdi + rax], r8b
jne 0x14004bb6d
inc rax
add rdi, rax
test esi, esi
js 0x14004bbb2
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
mov rdx, rax
xor eax, eax
test rdx, rdx
je 0x14004bc09
mov eax, dword [rsp + 0xf0]
lea r8, [0x1400f80a0]
mov qword [r8 + rax*8], rdx
mov ecx, 1
jmp 0x14004bbb9
mov eax, dword [rsp + 0xf0]
add eax, ecx
mov dword [rsp + 0xf0], eax
add r15d, ecx
cmp r15d, dword [rsp + 0x60]
mov r8d, 0
jb 0x14004bb67
add r12d, ecx
xor eax, eax
lea rbx, [0x1400fee40]
cmp byte [rdi], al
je 0x14004bc10
jmp 0x14004baaf
lea rax, [0x1400d3c02]
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x120], 0x67
xor eax, eax
mov esi, 0xc000007a
lea rbx, [0x1400fee40]
mov r15d, 0x60
lea r12, [0x1400f80a0]
cmp qword [rsp + 0x2e8], rax
je 0x14004bc4e
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x2e8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
test esi, esi
jns 0x14004bca2
mov rdi, rbx
mov ebx, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14004bc70
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
xor eax, eax
add rdi, 0x18
sub rbx, 1
jne 0x14004bc5a
mov r8, r15
xor edx, edx
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
mov r8d, CGopherConnection::CGopherConnection
lea rdx, [0x1400a92a0]
mov rcx, r12
call sub.msvcrt.dll_memcpy
jmp 0x14004bcd1
mov eax, dword [0x1400ff70c]
jmp 0x14004bcc9
or r14d, 0xffffffff
lea rcx, [0x1400d3c02]
mov qword [rsp + 0x2a8], rcx
mov qword [rsp + 0x120], 0x67
inc eax
mov dword [0x1400ff70c], eax
xor edi, edi
mov eax, edi
xchg dword [0x1400ff710], eax
mov qword [rsp + 0x2f8], rdi
mov qword [rsp + 0x300], rdi
mov esi, edi
mov ebx, edi
mov rax, qword gs:[0x60]
cmp dword [rax + 0x2c0], edi
je 0x14004c00e
mov rax, qword [0x1400f81b0]
call qword [str._E_t_]
mov r15, rax
xor eax, eax
test r15, r15
jne 0x14004bd47
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14004c015
mov ebx, 0x80004005
jmp 0x14004c015
mov qword [rsp + 0x308], rax
mov r9d, eax
lea rax, [rsp + 0x174]
mov qword [rsp + 0x20], rax
mov r8, rdi
mov edx, 2
mov rcx, r15
mov rax, qword [0x1400f81d0]
call qword [str._E_t_]
xor edi, edi
test eax, eax
jne 0x14004be19
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
jne 0x14004bdff
cmp qword [rsp + 0x308], rdi
jne 0x14004bdf4
mov edi, dword [rsp + 0x174]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
lea rcx, [rsp + 0x308]
call fcn.140090a0c
test rdi, rdi
je 0x14004bded
mov qword [rsp + 0x308], rdi
mov r9d, dword [rsp + 0x174]
jmp 0x14004bd52
mov ebx, 0x8007000e
jmp 0x14004be29
mov r12d, 0x80004005
mov ebx, r12d
jmp 0x14004be37
mov r12d, 0x80004005
test eax, eax
je 0x14004bdfa
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x14004be37
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0x2f8], rax
mov r12d, 0x80004005
mov qword [rsp + 0x308], rdi
lea rcx, [rsp + 0x308]
call fcn.140090a0c
test ebx, ebx
js 0x14004c015
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop dword [rax + rax]
mov ecx, eax
mov rax, qword [0x1400f81c8]
call qword [str._E_t_]
mov r15, rax
test rax, rax
jne 0x14004be99
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14004c015
mov ebx, r12d
jmp 0x14004c015
mov ebx, edi
mov r9d, edi
mov qword [rsp + 0x488], rdi
lea rax, [rsp + 0x178]
mov qword [rsp + 0x20], rax
mov r8, rdi
mov edx, 2
mov rcx, r15
mov rax, qword [0x1400f81d0]
call qword [str._E_t_]
xor edi, edi
test eax, eax
jne 0x14004bf59
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
jne 0x14004bf45
cmp qword [rsp + 0x488], rdi
jne 0x14004bf40
mov edi, dword [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
lea rcx, [rsp + 0x488]
call fcn.140090a0c
test rdi, rdi
je 0x14004bf39
mov r9d, dword [rsp + 0x178]
jmp 0x14004be9e
mov ebx, 0x8007000e
jmp 0x14004bf69
mov ebx, r12d
jmp 0x14004bf71
test eax, eax
je 0x14004bf40
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x14004bf71
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x488], rdi
lea rcx, [rsp + 0x488]
call fcn.140090a0c
test ebx, ebx
js 0x14004c015
mov rcx, qword [rsp + 0x2f8]
test rcx, rcx
je 0x14004c00e
lea rdx, str.WinSta0
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14004c00e
mov rcx, qword [rsp + 0x300]
test rcx, rcx
je 0x14004c00e
lea rdx, str.Default
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14004c00e
xor eax, eax
mov dword [rsp + 0x134], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop dword [rax + rax]
mov rcx, rax
mov r9d, 4
lea r8, [rsp + 0x134]
lea edx, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_GetProcessMitigationPolicy]
nop dword [rax + rax]
test eax, eax
je 0x14004be6f
test byte [rsp + 0x134], 0xf
mov eax, 1
cmove esi, eax
mov dword [rsp + 0x168], esi
lea rcx, [rsp + 0x300]
call fcn.140090a0c
lea rcx, [rsp + 0x2f8]
call fcn.140090a0c
mov eax, dword [rsp + 0x168]
test ebx, ebx
cmovs eax, edi
mov dword [rsp + 0x168], eax
mov dword [rsp + 0x164], edi
mov edx, 4
lea ecx, [rdx + 0x3c]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
nop dword [rax + rax]
mov rdi, rax
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x2e0]
call fcn.1400909dc
xor r11d, r11d
test rdi, rdi
jne 0x14004c154
mov qword [rsp + 0x2e0], r11
mov r15d, 0x8007000e
lea r14d, [r15 + 0x6c]
mov ebx, dword [rsp + 0x134]
mov r13d, 1
xor eax, eax
lock cmpxchg dword [0x1400ff710], r13d
jne 0x14004c09d
mov eax, dword [0x1400ff70c]
test eax, eax
jle 0x14004c118
sub eax, r13d
mov dword [0x1400ff70c], eax
jne 0x14004c118
lea r12, [0x1400fee40]
mov rdi, r12
mov esi, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14004c0e5
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
xor r11d, r11d
add rdi, 0x18
sub rsi, r13
jne 0x14004c0ce
xor edx, edx
lea r8d, [rsi + 0x60]
mov rcx, r12
call sub.msvcrt.dll_memset
mov r8d, CGopherConnection::CGopherConnection
lea rdx, [0x1400a92a0]
lea rcx, [0x1400f80a0]
call sub.msvcrt.dll_memcpy
xor r11d, r11d
mov eax, r11d
xchg dword [0x1400ff710], eax
lea rcx, [rsp + 0x2e0]
call fcn.1400909dc
xor esi, esi
test r15d, r15d
jns 0x140057549
cmp r15d, 0xd0000034
jne 0x140057508
mov r15d, 0xc004f012
mov edi, r15d
jmp 0x140057561
mov qword [rsp + 0x2e0], rdi
mov qword [rsp + 0x90], r11
mov qword [rsp + 0xd0], r11
xor eax, eax
mov qword [rsp + Ordinal_1361], rax
mov qword [rsp + Ordinal_1375], rax
mov dword [rsp + 0x17c], r11d
mov qword [rsp + Ordinal_1410], rax
mov qword [rsp + Ordinal_1422], rax
mov dword [rsp + 0x180], r11d
lea rax, [0x1400fda20]
mov qword [rsp + 0x480], rax
mov edi, 0xa0
mov qword [rsp + 0x478], rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov ebx, 8
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov qword [rsp + 0xb0], rax
xor r11d, r11d
test rax, rax
jne 0x14004c201
mov r15d, 0xc0000017
lea r12d, [r15 + 0x7e]
jmp 0x14004c7ec
mov r8, qword [rsp + 0x478]
mov rdx, qword [rsp + 0x480]
mov rcx, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x90], rdi
mov esi, dword [rsp + 0x478]
mov dword [rsp + 0x60], esi
lea rax, [0x1400fd960]
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x378], rbx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov qword [rsp + 0x140], rax
xor r11d, r11d
test rax, rax
je 0x14004c1f2
mov r8, qword [rsp + 0x378]
mov rdx, qword [rsp + 0x380]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0xd0], rdi
mov r8, qword [rsp + 0x378]
mov qword [rsp + 0xf8], r8
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rsp + 0x368], rax
mov edx, ebx
mov dword [rsp + 0x184], ebx
add esi, 4
mov eax, r14d
cmp esi, 4
cmovae eax, esi
sbb ecx, ecx
mov r12d, 0xc0000095
and ecx, r12d
mov dword [rsp + 0x80], ecx
mov r15d, ecx
mov ecx, ebx
cmp esi, 4
jb 0x14004c7e9
mov edx, eax
mov dword [rsp + 0x184], eax
mov ecx, eax
lea eax, [rax + 8]
mov edi, r14d
cmp eax, ebx
cmovae edi, eax
sbb r15d, r15d
and r15d, r12d
mov r9d, 0x10000000
add r15d, r9d
cmp eax, ebx
jb 0x14004f716
lea ecx, [r8 + 4]
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
mov dword [rsp + 0x8c], r15d
cmp ecx, 4
cmovae edx, eax
mov dword [rsp + 0x184], edx
jb 0x14004c7e9
lea eax, [rdx + rdi]
mov ecx, r14d
cmp eax, edi
cmovae ecx, eax
sbb r15d, r15d
and r15d, r12d
add r15d, r9d
cmp eax, edi
jb 0x14004f716
mov dword [rsp + 0x184], SafeArrayGetDim
lea eax, [rcx + 0xc]
mov edi, r14d
cmp eax, ecx
cmovae edi, eax
sbb r15d, r15d
and r15d, r12d
add r15d, r9d
cmp eax, ecx
jb 0x14004f6eb
lea r8, [rsp + 0x360]
mov edx, 0x7fffffff
lea rcx, str.Security_SPP_GenuineLocalStatus
call fcn.140090a88
xor r11d, r11d
test eax, eax
jns 0x14004c3c1
mov qword [rsp + 0x360], r11
mov r15d, 0xc000003e
jmp 0x14004c7ec
mov rax, qword [rsp + 0x360]
inc rax
mov qword [rsp + 0x360], rax
lea ecx, [rax*2 + 4]
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
mov edx, dword [rsp + 0x184]
cmp ecx, 4
cmovae edx, eax
mov dword [rsp + 0x184], edx
jb 0x14004c7ec
lea eax, [rdx + rdi]
mov edx, r14d
cmp eax, edi
cmovae edx, eax
sbb r15d, r15d
and r15d, r12d
mov r9d, 0x10000000
add r15d, r9d
cmp eax, edi
jb 0x14004f6ee
mov dword [rsp + 0x184], ebx
lea eax, [rdx + 8]
mov ecx, r14d
cmp eax, edx
cmovae ecx, eax
sbb r15d, r15d
and r15d, r12d
add r15d, r9d
cmp eax, edx
jb 0x14004f6ee
mov dword [rsp + 0x184], ebx
lea eax, [rcx + 8]
mov edx, r14d
cmp eax, ecx
cmovae edx, eax
sbb r15d, r15d
and r15d, r12d
add r15d, r9d
cmp eax, ecx
jb 0x14004f6ee
mov dword [rsp + 0x554], edx
mov edi, edx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
xor r11d, r11d
test rax, rax
jne 0x14004c4ab
mov r15d, 0xc0000017
jmp 0x14004c7ec
mov qword [rsp + Ordinal_1375], rdx
mov edi, r11d
mov dword [rsp + Ordinal_1361], r11d
mov dword [rsp + 0x188], r11d
add rax, 4
mov r8, r13
cmp rax, rdx
cmovae r8, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004c51d
mov ecx, dword [rsp + 0x554]
add rcx, rdx
lea rax, [rdx + 8]
cmp rax, rcx
jbe 0x14004c4fd
mov r15d, 0xc0000023
jmp 0x14004c7ec
mov dword [rdx], 4
mov eax, dword [rsp + 0x188]
mov dword [r8], eax
mov edi, dword [rsp + 0x550]
inc edi
mov dword [rsp + Ordinal_1361], edi
test r15d, r15d
js 0x14004c7ec
mov edx, dword [rsp + 0x60]
test edx, edx
je 0x14004c686
cmp qword [rsp + 0x558], r11
jne 0x14004c5a0
mov eax, r14d
cmp esi, 4
cmovae eax, esi
mov r15d, dword [rsp + 0x80]
mov edx, dword [rsp + 0x190]
cmovae edx, eax
mov dword [rsp + 0x190], edx
jb 0x14004c681
mov ecx, dword [rsp + 0x554]
lea eax, [rcx + rdx]
mov r8d, r14d
cmp eax, ecx
cmovae r8d, eax
mov dword [rsp + 0x554], r8d
sbb r15d, r15d
and r15d, r12d
mov esi, 1
cmp eax, ecx
jb 0x14004c699
add edi, esi
mov dword [rsp + Ordinal_1361], edi
jmp 0x14004c6a2
mov r8, qword [rsp + 0x558]
mov r10d, r11d
mov esi, 1
test edi, edi
je 0x14004c61c
mov r9d, dword [rsp + 0x190]
mov r11, r8
mov ecx, dword [r8]
add ecx, 4
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
cmp ecx, 4
cmovae r9d, eax
mov dword [rsp + 0x190], r9d
jb 0x14004c681
mov edx, r9d
mov rcx, r8
add rdx, r8
mov rax, r13
cmp rdx, r8
cmovae rax, rdx
mov r8, rax
cmp rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rdx, rcx
jb 0x14004c681
add r10d, esi
cmp r10d, edi
jb 0x14004c5bc
mov edx, dword [rsp + 0x60]
xor r11d, r11d
lea rax, [r8 + 4]
mov r9, r13
cmp rax, r8
cmovae r9, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, r8
jb 0x14004c681
mov edi, edx
mov ecx, dword [rsp + 0x554]
add rcx, qword [rsp + 0x558]
lea rax, [r8 + 4]
add rax, rdi
cmp rax, rcx
ja 0x14004c4f2
mov dword [r8], edx
mov r8d, edi
mov rdx, qword [rsp + 0xb0]
mov rcx, r9
call sub.msvcrt.dll_memcpy
mov edi, dword [rsp + 0x550]
add edi, esi
mov dword [rsp + Ordinal_1361], edi
xor r11d, r11d
jmp 0x14004c691
xor r11d, r11d
jmp 0x14004c68c
mov r15d, 0xc000000d
mov esi, 1
mov r8d, dword [rsp + 0x554]
test r15d, r15d
js 0x14004c7ec
mov rdx, qword [rsp + 0xf8]
test edx, edx
je 0x14004ca2f
cmp qword [rsp + 0x558], r11
jne 0x14004c72b
mov eax, r14d
lea ecx, [rdx + 4]
cmp ecx, 4
cmovae eax, ecx
mov r15d, dword [rsp + 0x8c]
mov edx, dword [rsp + 0x194]
cmovae edx, eax
mov dword [rsp + 0x194], edx
jb 0x14004c9cb
mov ecx, r8d
lea eax, [r8 + rdx]
mov r8d, r14d
cmp eax, ecx
cmovae r8d, eax
mov dword [rsp + 0x554], r8d
sbb r15d, r15d
and r15d, r12d
cmp eax, ecx
jb 0x14004c9cb
add edi, esi
mov dword [rsp + Ordinal_1361], edi
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0x358], rax
jmp 0x14004c9f3
mov r9, qword [rsp + 0x558]
test edi, edi
je 0x14004c7a9
mov r10d, dword [rsp + 0x194]
mov rsi, r9
mov ecx, dword [r9]
add ecx, 4
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
cmp ecx, 4
cmovae r10d, eax
mov dword [rsp + 0x194], r10d
jb 0x14004c9c8
mov edx, r10d
mov rcx, r9
add rdx, r9
mov rax, r13
cmp rdx, r9
cmovae rax, rdx
mov r9, rax
cmp rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rdx, rcx
jb 0x14004c9c8
mov esi, 1
add r11d, esi
cmp r11d, edi
jb 0x14004c73f
mov rdx, qword [rsp + 0xf8]
lea rax, [r9 + 4]
mov r10, r13
cmp rax, r9
cmovae r10, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, r9
jb 0x14004c9c8
mov edi, edx
mov ecx, r8d
add rcx, qword [rsp + 0x558]
lea rax, [r9 + 4]
add rax, rdi
cmp rax, rcx
jbe 0x14004c99a
mov r15d, 0xc0000023
xor r11d, r11d
movabs rsi, 0xc81ecb17b1b54a58
mov qword [rsp + 0x140], 0x38
movabs rbx, 0x7f1137fab69605e
mov r14d, 0x8007007a
and qword [rsp + 0x550], 0
mov rdi, qword [rsp + 0x558]
test rdi, rdi
je 0x14004c853
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + Ordinal_1375], r11
and qword [rsp + 0x580], 0
mov rdi, qword [rsp + 0x588]
test rdi, rdi
je 0x14004c894
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + Ordinal_1422], r11
mov rdi, qword [rsp + 0x90]
test rdi, rdi
je 0x14004c8c4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rdi, qword [rsp + 0xd0]
test rdi, rdi
je 0x14004c8f4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r15d, r15d
js 0x14004c090
mov eax, dword [rsp + 0x168]
test eax, eax
je 0x1400574d0
mov qword [rsp + 0x3f0], r11
mov dword [0x1400fee34], eax
mov edi, 0x104
mov r8d, edi
lea rdx, [rsp + reloc.MFC42u.dll_CPicturePropPage::OnPaint]
lea rcx, [0x140000000]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
nop dword [rax + rax]
xor r14d, r14d
test eax, eax
je 0x14005488b
cmp eax, edi
jne 0x14004c961
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
je 0x14005488b
xor edx, edx
xor ecx, ecx
mov r8d, reloc.MFC42u.dll_COleDropTarget::XDropTarget::AddRef
mov rax, qword [0x1400f8198]
call qword [str._E_t_]
mov qword [rsp + 0xb8], rax
test rax, rax
jne 0x14004f75a
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
jmp 0x14005488b
mov dword [r9], edx
mov r8, rdi
mov rdx, qword [rsp + 0x140]
mov rcx, r10
call sub.msvcrt.dll_memcpy
mov edi, dword [rsp + 0x550]
add edi, esi
mov dword [rsp + Ordinal_1361], edi
mov r8d, dword [rsp + 0x554]
xor r11d, r11d
test r15d, r15d
js 0x14004c7ec
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0x358], rax
cmp qword [rsp + 0x558], r11
jne 0x14004ca37
mov esi, 1
mov dword [rsp + reloc.MFC42u.dll_CMiniFrameWnd::CMiniFrameWnd], SafeArrayGetDim
lea ecx, [r8 + 0xc]
mov eax, r14d
cmp ecx, r8d
cmovae eax, ecx
mov dword [rsp + 0x554], eax
sbb r15d, r15d
and r15d, r12d
cmp ecx, r8d
jb 0x14004cafb
add edi, esi
mov dword [rsp + Ordinal_1361], edi
jmp 0x14004cb09
mov r15d, 0xc000000d
jmp 0x14004c9cb
mov r9, qword [rsp + 0x558]
test edi, edi
je 0x14004caab
mov r10d, dword [rsp + reloc.MFC42u.dll_CMiniFrameWnd::CMiniFrameWnd]
mov rsi, r9
mov ecx, dword [r9]
add ecx, 4
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
cmp ecx, 4
cmovae r10d, eax
mov dword [rsp + reloc.MFC42u.dll_CMiniFrameWnd::CMiniFrameWnd], r10d
jb 0x14004caf8
mov edx, r10d
mov rcx, r9
add rdx, r9
mov rax, r13
cmp rdx, r9
cmovae rax, rdx
mov r9, rax
cmp rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rdx, rcx
jb 0x14004caf8
mov esi, 1
add r11d, esi
cmp r11d, edi
jb 0x14004ca4b
jmp 0x14004cab0
mov esi, 1
lea rax, [r9 + 4]
mov rdx, r13
cmp rax, r9
cmovae rdx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, r9
jb 0x14004caf8
mov ecx, r8d
add rcx, qword [rsp + 0x558]
lea rax, [r9 + 0xc]
cmp rax, rcx
ja 0x14004c7e3
mov dword [r9], ebx
movsd xmm0, qword [rsp + 0x358]
movsd qword [rdx], xmm0
add dword [rsp + 0x550], esi
xor r11d, r11d
test r15d, r15d
js 0x14004c7ec
mov esi, 1
lea r8, [rsp + 0x318]
mov edx, 0x7fffffff
lea rcx, str.Security_SPP_GenuineLocalStatus
call fcn.140090a88
xor r11d, r11d
test eax, eax
jns 0x14004cb36
mov qword [rsp + 0x318], r11
jmp 0x14004c3b6
mov rcx, qword [rsp + 0x318]
lea rax, [rcx + 1]
mov rdx, r13
cmp rax, rcx
cmovae rdx, rax
mov qword [rsp + 0x318], rdx
sbb r15d, r15d
and r15d, r12d
cmp rax, rcx
jb 0x14004ccba
lea r9d, [rdx + rdx]
test r9d, r9d
je 0x14004ccb1
cmp qword [rsp + 0x558], r11
jne 0x14004cbdd
lea ecx, [r9 + 4]
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
mov edi, dword [rsp + 0x19c]
cmp ecx, 4
cmovae edi, eax
mov dword [rsp + 0x19c], edi
jb 0x14004ccb7
mov edx, dword [rsp + 0x554]
lea ecx, [rdx + rdi]
mov eax, r14d
cmp ecx, edx
cmovae eax, ecx
mov dword [rsp + 0x554], eax
sbb r15d, r15d
and r15d, r12d
cmp ecx, edx
jb 0x14004ccb7
add dword [rsp + 0x550], esi
mov r15d, r11d
jmp 0x14004ccb7
mov rdi, qword [rsp + 0x558]
mov r10d, r11d
cmp dword [rsp + 0x550], r11d
jbe 0x14004cc57
mov r8d, dword [rsp + 0x19c]
mov r11, rdi
mov ecx, dword [rdi]
add ecx, 4
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
cmp ecx, 4
cmovae r8d, eax
mov dword [rsp + 0x19c], r8d
jb 0x14004ccb7
mov edx, r8d
mov rcx, rdi
add rdx, rdi
mov rax, r13
cmp rdx, rdi
cmovae rax, rdx
mov rdi, rax
cmp rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rdx, rcx
jb 0x14004ccb7
add r10d, esi
cmp r10d, dword [rsp + 0x550]
jb 0x14004cbfa
lea rax, [rdi + 4]
mov r10, r13
cmp rax, rdi
cmovae r10, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdi
jb 0x14004ccb7
mov r8d, r9d
mov ecx, dword [rsp + 0x554]
add rcx, qword [rsp + 0x558]
lea rax, [r9 + 4]
add rax, rdi
cmp rax, rcx
jbe 0x14004cc96
mov r15d, 0xc0000023
jmp 0x14004ccb7
mov dword [rdi], r9d
lea rdx, str.Security_SPP_GenuineLocalStatus
mov rcx, r10
call sub.msvcrt.dll_memcpy
add dword [rsp + 0x550], esi
jmp 0x14004ccb7
mov r15d, 0xc000000d
xor r11d, r11d
test r15d, r15d
js 0x14004c7ec
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x1a0], eax
cmp qword [rsp + 0x558], r11
jne 0x14004cd20
mov dword [rsp + 0x1a8], ebx
mov edx, dword [rsp + 0x554]
lea ecx, [rdx + 8]
mov eax, r14d
cmp ecx, edx
cmovae eax, ecx
mov dword [rsp + 0x554], eax
sbb r15d, r15d
and r15d, r12d
cmp ecx, edx
jb 0x14004cde1
add dword [rsp + 0x550], esi
mov dword [rsp + 0x1b0], 4
jmp 0x14004cdff
mov rdi, qword [rsp + 0x558]
mov r9d, r11d
cmp dword [rsp + 0x550], r11d
jbe 0x14004cd96
mov r8d, dword [rsp + 0x1a8]
mov r10, rdi
mov ecx, dword [rdi]
add ecx, 4
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
cmp ecx, 4
cmovae r8d, eax
mov dword [rsp + 0x1a8], r8d
jb 0x14004cde1
mov edx, r8d
mov rcx, rdi
add rdx, rdi
mov rax, r13
cmp rdx, rdi
cmovae rax, rdx
mov rdi, rax
cmp rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rdx, rcx
jb 0x14004cde1
add r9d, esi
cmp r9d, dword [rsp + 0x550]
jb 0x14004cd3d
lea rax, [rdi + 4]
mov rdx, r13
cmp rax, rdi
cmovae rdx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdi
jb 0x14004cde1
mov ecx, dword [rsp + 0x554]
add rcx, qword [rsp + 0x558]
lea rax, [rdi + 8]
cmp rax, rcx
ja 0x14004c4f2
mov dword [rdi], 4
mov eax, dword [rsp + 0x1a0]
mov dword [rdx], eax
add dword [rsp + 0x550], esi
test r15d, r15d
js 0x14004c7ec
mov dword [rsp + 0x1b0], 4
cmp qword [rsp + 0x558], r11
jne 0x14004ce39
mov dword [rsp + 0x1b8], ebx
mov edx, dword [rsp + 0x554]
lea ecx, [rdx + 8]
mov eax, r14d
cmp ecx, edx
cmovae eax, ecx
mov dword [rsp + 0x554], eax
sbb r15d, r15d
and r15d, r12d
cmp ecx, edx
jb 0x14004cefa
add dword [rsp + 0x550], esi
jmp 0x14004cf03
mov rdi, qword [rsp + 0x558]
mov r9d, r11d
cmp dword [rsp + 0x550], r11d
jbe 0x14004ceaf
mov r8d, dword [rsp + 0x1b8]
mov r10, rdi
mov ecx, dword [rdi]
add ecx, 4
mov eax, r14d
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
cmp ecx, 4
cmovae r8d, eax
mov dword [rsp + 0x1b8], r8d
jb 0x14004cefa
mov edx, r8d
mov rcx, rdi
add rdx, rdi
mov rax, r13
cmp rdx, rdi
cmovae rax, rdx
mov rdi, rax
cmp rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rdx, rcx
jb 0x14004cefa
add r9d, esi
cmp r9d, dword [rsp + 0x550]
jb 0x14004ce56
lea rax, [rdi + 4]
mov rdx, r13
cmp rax, rdi
cmovae rdx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdi
jb 0x14004cefa
mov ecx, dword [rsp + 0x554]
add rcx, qword [rsp + 0x558]
lea rax, [rdi + 8]
cmp rax, rcx
ja 0x14004c4f2
mov dword [rdi], 4
mov eax, dword [rsp + 0x1b0]
mov dword [rdx], eax
add dword [rsp + 0x550], esi
test r15d, r15d
js 0x14004c7ec
mov dword [rsp + 0x1bc], ebx
mov r8, r11
mov qword [rsp + 0xb0], r11
mov esi, r11d
mov qword [rsp + 0x310], r11
mov qword [rsp + 0xf8], r11
mov dword [rsp + 0x60], r11d
mov qword [rsp + 0xc0], r11
mov dword [rsp + 0x1c0], r11d
mov qword [rsp + 0xa0], r11
mov qword [rsp + 0x78], r11
mov dword [rsp + 0x1c4], r11d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rsp + 0x320], rax
mov eax, dword [rsp + 0x554]
add eax, ebx
mov ecx, r14d
cmp eax, ebx
cmovae ecx, eax
mov dword [rsp + 0x1c8], ecx
sbb r15d, r15d
and r15d, r12d
cmp eax, ebx
jb 0x14004d09c
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x14004cf9e
mov r15d, r12d
jmp 0x14004d09c
mov dword [rsp + 0x1c8], eax
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
xor r11d, r11d
test rax, rax
jne 0x14004cfdd
mov r15d, 0xc0000017
jmp 0x14004d094
mov eax, dword [rsp + 0x550]
mov dword [rdi], eax
lea rax, [rdi + 4]
mov rdx, r13
cmp rax, rdi
cmovae rdx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdi
jb 0x14004d064
mov eax, dword [rsp + 0x554]
mov dword [rdx], eax
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004d064
mov edx, dword [rsp + 0x1c8]
mov rax, qword [rsp + 0x320]
mov qword [rdx + rdi - 8], rax
mov r8d, dword [rsp + 0x554]
mov rdx, qword [rsp + 0x558]
call sub.msvcrt.dll_memcpy
mov r8, rdi
mov qword [rsp + 0xb0], rdi
xor r11d, r11d
mov edi, r11d
mov esi, dword [rsp + 0x1c8]
jmp 0x14004d06c
mov r8, qword [rsp + 0xb0]
test rdi, rdi
je 0x14004d09c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r8, qword [rsp + 0xb0]
or r15d, 0x10000000
jl 0x14004ef84
mov qword [rsp + 0x328], r11
mov qword [rsp + 0x330], r11
mov qword [rsp + 0x2b0], r11
mov qword [rsp + 0x340], r11
mov qword [rsp + 0x348], r11
mov qword [rsp + 0x350], r11
mov rdi, r11
mov qword [rsp + 0x68], r11
test r8, r8
jne 0x14004d107
movabs rsi, 0xc81ecb17b1b54a58
mov r15d, 0xc000000d
mov qword [rsp + 0x140], 0x38
jmp 0x14004db1f
mov r15d, esi
test esi, esi
je 0x14004da10
lea rsi, [r15 + 8]
mov qword [rsp + 0x118], rsi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rsp + 0xa8], rax
xor r11d, r11d
test rax, rax
je 0x14004da10
mov dl, r11b
mov ecx, r11d
mov rdi, qword [rsp + 0xb0]
test r15, r15
je 0x14004d174
lea r8d, [r11 + 1]
xor dl, byte [rcx + rdi]
add rcx, r8
cmp rcx, r15
jb 0x14004d169
movabs rsi, 0xc81ecb17b1b54a58
mov qword [rsp + 0xa78], rsi
mov r11, rax
xor r8d, r8d
mov r10d, r8d
mov dword [rsp + 0x1cc], r8d
mov r9d, r14d
mov dword [rsp + 0x1d0], r14d
mov dword [rsp + 0x80], r8d
mov dword [rsp + 0x8c], r8d
mov rax, r15
and eax, 7
je 0x14004d2ec
mov r14d, r8d
mov dword [rsp + 0x80], r8d
mov dword [rsp + 0x8c], r8d
mov r9d, r8d
test eax, eax
je 0x14004d23a
lea ecx, [r8 + 0x38]
mov qword [rsp + 0x140], rcx
mov r8d, ecx
lea rcx, [rdi + 1]
mov qword [rsp + 0xc8], rcx
movzx edi, byte [rdi]
cmp r9d, 4
jge 0x14004d20f
lea ecx, [r8 - 0x20]
shl edi, cl
or r10d, edi
mov dword [rsp + 0x8c], r10d
jmp 0x14004d21f
mov ecx, r8d
shl edi, cl
or r14d, edi
mov dword [rsp + 0x80], r14d
inc r9d
sub r8d, ebx
mov rcx, qword [rsp + 0xc8]
mov rdi, rcx
cmp r9d, eax
jl 0x14004d1e7
xor r8d, r8d
jmp 0x14004d246
mov qword [rsp + 0x140], 0x38
xor r10d, 0xb17a307a
mov dword [rsp + 0x1cc], r10d
mov r9d, r14d
xor r9d, 0x42f6b18d
mov dword [rsp + 0x1d0], r9d
mov ecx, r8d
test eax, eax
je 0x14004d2a6
lea r14, [r11 + 1]
cmp ecx, 4
jge 0x14004d280
rol r10d, 8
mov r8d, r10d
jmp 0x14004d287
rol r9d, 8
mov r8d, r9d
mov byte [r11], r8b
inc ecx
mov r11, r14
cmp ecx, eax
jl 0x14004d26e
mov r10d, dword [rsp + 0x1cc]
mov r9d, dword [rsp + 0x1d0]
xor r8d, r8d
cmp eax, 4
jbe 0x14004d2c2
mov ecx, ebx
sub ecx, eax
shl ecx, 3
shr r9d, cl
shl r9d, cl
mov dword [rsp + 0x1d0], r9d
jmp 0x14004d2f8
mov r9d, r8d
mov dword [rsp + 0x1d0], r8d
cmp eax, 4
jae 0x14004d2f8
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov dword [rsp + 0x1cc], r10d
jmp 0x14004d2f8
mov qword [rsp + 0x140], 0x38
mov rax, r15
shr rax, 3
mov qword [rsp + 0x100], rax
test rax, rax
je 0x14004d747
mov r14d, dword [rsp + 0xa7c]
mov eax, r14d
shr eax, 0x10
mov dword [rsp + 0x98], eax
movzx eax, si
mov dword [rsp + 0xf0], eax
movzx eax, si
mov dword [rsp + 0x88], eax
movzx eax, word [rsp + 0xa7a]
mov dword [rsp + 0xd8], eax
movzx eax, r14w
mov dword [rsp + 0x84], eax
mov eax, r14d
xor eax, esi
mov dword [rsp + 0xc8], eax
add r11, 7
mov qword [rsp + 0xb8], r11
lea rcx, [rdi + 2]
mov r11, qword [rsp + 0x100]
movzx r8d, byte [rcx - 2]
shl r8d, 8
movzx eax, byte [rcx - 1]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 1]
or r8d, eax
movzx edi, byte [rcx + 2]
shl edi, 8
movzx eax, byte [rcx + 3]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 4]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 5]
or edi, eax
xor r9d, edi
add rcx, rbx
mov qword [rsp + 0x100], rcx
mov eax, r9d
sub eax, dword [rsp + 0x88]
xor eax, r14d
xor eax, r8d
xor r10d, eax
mov ecx, r14d
xor ecx, r10d
ror ecx, 0xf
mov eax, r10d
ror eax, 7
imul ecx, dword [rsp + 0xd8]
add eax, ecx
xor r9d, eax
lea ecx, [r9 + rsi]
ror ecx, 9
mov eax, r9d
ror eax, 0xa
imul ecx, dword [rsp + 0x84]
sub ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, dword [rsp + 0x84]
rol ecx, 4
mov eax, r10d
rol eax, 5
imul ecx, dword [rsp + 0x98]
add eax, ecx
xor r9d, eax
mov ecx, r9d
xor ecx, esi
mov eax, r14d
sub eax, ecx
xor r10d, eax
mov ecx, r10d
sub ecx, dword [rsp + 0xf0]
movzx eax, word [rsp + 0xa7a]
imul ecx, eax
mov eax, r10d
shr eax, 6
sub ecx, eax
xor r9d, ecx
mov eax, r9d
ror eax, 0xf
xor eax, dword [rsp + 0x84]
imul eax, dword [rsp + 0xf0]
xor r10d, eax
mov eax, r10d
not eax
ror eax, 3
add eax, dword [rsp + 0x98]
imul eax, dword [rsp + 0x84]
xor r9d, eax
mov eax, r9d
sub eax, r14d
sub eax, dword [rsp + 0x88]
xor r10d, eax
mov ecx, r10d
ror ecx, 0xa
mov eax, r10d
xor eax, dword [rsp + 0x98]
imul eax, dword [rsp + 0xd8]
xor ecx, eax
xor r9d, ecx
mov ecx, r9d
xor ecx, dword [rsp + 0xf0]
rol ecx, 6
mov eax, r9d
ror eax, 3
imul ecx, dword [rsp + 0x84]
xor eax, ecx
xor r10d, eax
mov eax, r10d
ror eax, 0xf
sub eax, dword [rsp + 0x98]
imul eax, dword [rsp + 0xf0]
xor r9d, eax
mov ecx, r9d
xor ecx, dword [rsp + 0x98]
imul ecx, dword [rsp + 0x88]
mov eax, r9d
shr eax, 1
xor ecx, eax
xor r10d, ecx
mov ecx, r9d
sub ecx, dword [rsp + 0x84]
rol ecx, 3
imul ecx, dword [rsp + 0x88]
mov eax, r9d
shr eax, 0xf
xor ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, dword [rsp + 0x84]
movzx eax, word [rsp + 0xa7a]
imul ecx, eax
mov eax, r10d
shr eax, 0xd
sub ecx, eax
xor r9d, ecx
mov ecx, esi
sub ecx, r9d
ror ecx, 9
mov eax, r9d
ror eax, 0xb
imul ecx, dword [rsp + 0x84]
xor eax, ecx
xor r10d, eax
mov eax, r10d
sub eax, dword [rsp + 0x98]
sub eax, esi
xor r9d, eax
mov ecx, r9d
ror ecx, 7
mov eax, r9d
xor eax, dword [rsp + 0xd8]
imul eax, dword [rsp + 0x88]
sub eax, ecx
xor r10d, eax
mov ecx, r10d
xor ecx, dword [rsp + 0x98]
rol ecx, 4
mov eax, r10d
ror eax, 0x10
imul ecx, dword [rsp + 0xd8]
sub ecx, eax
xor r9d, ecx
mov ecx, esi
sub ecx, r9d
ror ecx, 0xa
mov eax, r9d
ror eax, 4
imul ecx, dword [rsp + 0x84]
add eax, ecx
xor r10d, eax
mov ecx, r10d
sub ecx, esi
ror ecx, 4
mov eax, r10d
ror eax, 9
imul ecx, dword [rsp + 0x98]
xor eax, ecx
xor r9d, eax
mov ecx, r14d
xor ecx, r9d
rol ecx, 8
mov eax, r9d
rol eax, 2
imul ecx, dword [rsp + 0x88]
sub ecx, eax
xor r10d, ecx
mov ecx, r14d
sub ecx, r10d
ror ecx, 0xb
mov eax, r10d
ror eax, 0xc
imul ecx, dword [rsp + 0xd8]
sub ecx, eax
xor r9d, ecx
mov ecx, r9d
movzx eax, word [rsp + 0xa7a]
xor ecx, eax
imul ecx, dword [rsp + 0x84]
mov eax, r9d
shr eax, 8
xor ecx, eax
xor r10d, ecx
xor r9d, dword [rsp + 0xc8]
xor r9d, r10d
xor r10d, dword [rsp + 0x8c]
mov dword [rsp + 0x1cc], r10d
xor r9d, dword [rsp + 0x80]
mov dword [rsp + 0x1d0], r9d
mov rcx, qword [rsp + 0xb8]
mov byte [rcx - 4], r10b
ror dword [rsp + 0x1cc], 8
mov al, byte [rsp + 0x1d0]
mov byte [rcx], al
ror dword [rsp + 0x1d0], 8
mov al, byte [rsp + 0x1cc]
mov byte [rcx - 5], al
ror dword [rsp + 0x1cc], 8
mov al, byte [rsp + 0x1d0]
mov byte [rcx - 1], al
ror dword [rsp + 0x1d0], 8
mov al, byte [rsp + 0x1cc]
mov byte [rcx - 6], al
ror dword [rsp + 0x1cc], 8
mov al, byte [rsp + 0x1d0]
mov byte [rcx - 2], al
ror dword [rsp + 0x1d0], 8
mov al, byte [rsp + 0x1cc]
mov byte [rcx - 7], al
mov al, byte [rsp + 0x1d0]
mov byte [rcx - 3], al
mov r10d, dword [rsp + 0x1cc]
ror r10d, 8
mov dword [rsp + 0x1cc], r10d
mov r9d, dword [rsp + 0x1d0]
ror r9d, 8
mov dword [rsp + 0x1d0], r9d
mov dword [rsp + 0x8c], r8d
mov dword [rsp + 0x80], edi
add rcx, rbx
mov qword [rsp + 0xb8], rcx
sub r11, 1
mov rcx, qword [rsp + 0x100]
jne 0x14004d377
movzx eax, dl
mov r14, qword [rsp + 0xa8]
mov qword [r14 + r15], rax
mov qword [rsp + 0x348], r14
mov r15, qword [rsp + 0x118]
mov qword [rsp + 0x350], r15
lea rax, [0x1400fda10]
mov qword [rsp + 0x328], rax
mov qword [rsp + 0x330], rbx
lea rax, [0x1400fd970]
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x340], SHCreateDirectory
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, 0x30
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
xor r11d, r11d
test rax, rax
jne 0x14004d7de
mov r15d, 0xc0000017
mov r14, qword [rsp + 0x68]
jmp 0x14004d9f7
mov dword [rax], r15d
mov r15d, r15d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, r15d
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14004d81c
mov r15d, 0xc0000017
mov r14, qword [rsp + 0x68]
jmp 0x14004d915
mov qword [rdi + 8], rax
mov r8, r15
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r14d, SHCreateDirectory
mov dword [rdi + 0x10], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, r14d
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
xor r11d, r11d
test rax, rax
je 0x14004d80c
mov qword [rdi + 0x18], rax
lea rax, [0x1400fd970]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm0
movups xmm1, xmmword [rax + 0x80]
movups xmmword [rcx + 0x80], xmm1
movups xmm0, xmmword [rax + 0x90]
movups xmmword [rcx + 0x90], xmm0
mov dword [rdi + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14004d80c
mov qword [rdi + 0x28], rax
mov r15d, r11d
movsd xmm0, qword [0x1400fda10]
movsd qword [rax], xmm0
mov r14, rdi
mov qword [rsp + 0x68], rdi
mov edi, r11d
test rdi, rdi
je 0x14004d9f7
mov rax, qword [rdi + 8]
mov qword [rsp + 0xb8], rax
test rax, rax
je 0x14004d95b
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rdi + 8], r11
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0xb8], rax
test rax, rax
je 0x14004d998
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rdi + 0x18], r11
mov rax, qword [rdi + 0x28]
mov qword [rsp + 0xb8], rax
test rax, rax
je 0x14004d9d4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xb8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r15d, r15d
js 0x14004da09
mov qword [rsp + 0x310], r14
mov rdi, r11
jmp 0x14004da2c
mov rdi, qword [rsp + 0x68]
jmp 0x14004da2c
movabs rsi, 0xc81ecb17b1b54a58
mov r15d, 0xc0000001
mov qword [rsp + 0x140], 0x38
mov r14, qword [rsp + 0x348]
test r14, r14
je 0x14004da64
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x348], r11
test rdi, rdi
je 0x14004db1f
mov r14, qword [rdi + 8]
test r14, r14
je 0x14004da9d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rdi + 8], r11
mov r14, qword [rdi + 0x18]
test r14, r14
je 0x14004dacd
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rdi + 0x18], r11
mov r14, qword [rdi + 0x28]
test r14, r14
je 0x14004dafc
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
or r15d, 0x10000000
jl 0x14004ef9a
mov r14, qword [rsp + 0x310]
mov r9d, dword [r14 + 0x20]
mov r8d, dword [r14 + 0x10]
mov eax, dword [r14]
add eax, 4
or edi, 0xffffffff
mov ecx, edi
cmp eax, 4
cmovae ecx, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, 4
jb 0x14004dbbe
lea eax, [rcx + 4]
mov edx, edi
cmp eax, ecx
cmovae edx, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, ecx
jb 0x14004dbbe
lea eax, [rdx + r8]
mov ecx, edi
cmp eax, edx
cmovae ecx, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, edx
jb 0x14004dbbe
lea eax, [rcx + 4]
mov edx, edi
cmp eax, ecx
cmovae edx, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, ecx
jb 0x14004dbbe
lea ecx, [rdx + r9]
mov eax, edi
cmp ecx, edx
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
mov r8d, dword [rsp + 0x1d4]
cmp ecx, edx
cmovae r8d, eax
mov dword [rsp + 0x1d4], r8d
jmp 0x14004dbc6
mov r8d, dword [rsp + 0x1d4]
test r15d, r15d
js 0x14004dc02
mov edi, r8d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
xor r11d, r11d
test rax, rax
jne 0x14004dc6f
mov r15d, 0xc0000017
or edi, 0xffffffff
or r15d, 0x10000000
jl 0x14004ef9a
mov qword [rsp + reloc.MFC42u.dll_COleSafeArray::operator], r11
mov r9d, r11d
mov dword [rsp + 0x1d8], r11d
mov qword [rsp + 0x390], r11
mov r10d, r11d
mov dword [rsp + 0x1dc], r11d
mov dword [rsp + 0x1e0], 0x3c
mov dword [rsp + 0x1e4], 0x48
mov dword [rsp + reloc.MFC42u.dll_CProperty::CProperty], 0x48
cmp qword [rsp + 0x558], r11
jne 0x14004ddcc
mov r15d, 0xc000000d
jmp 0x14004df8d
mov eax, dword [r14]
mov dword [rdi], eax
lea rax, [rdi + 4]
mov rcx, r13
cmp rax, rdi
cmovae rcx, rax
mov qword [rsp + 0xb8], rcx
sbb r15d, r15d
and r15d, r12d
cmp rax, rdi
jb 0x14004dd98
mov r8d, dword [r14]
mov rdx, qword [r14 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14]
mov rdx, qword [rsp + 0xb8]
add rcx, rdx
mov r8, r13
cmp rcx, rdx
cmovae r8, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, rdx
jb 0x14004dd95
mov eax, dword [r14 + 0x10]
mov dword [r8], eax
lea rax, [r8 + 4]
mov rcx, r13
cmp rax, r8
cmovae rcx, rax
mov qword [rsp + 0xb8], rcx
sbb r15d, r15d
and r15d, r12d
cmp rax, r8
jb 0x14004dd95
mov r8d, dword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14 + 0x10]
mov r8, qword [rsp + 0xb8]
add rcx, r8
mov rdx, r13
cmp rcx, r8
cmovae rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, r8
jb 0x14004dd95
mov eax, dword [r14 + 0x20]
mov dword [rdx], eax
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
mov qword [rsp + 0xb8], rcx
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004dd95
mov r8d, dword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14 + 0x20]
mov rdx, qword [rsp + 0xb8]
add rcx, rdx
cmp rcx, rdx
sbb r15d, r15d
and r15d, r12d
xor r11d, r11d
cmp rcx, rdx
jb 0x14004dd98
mov qword [rsp + 0xf8], rdi
mov edi, r11d
mov eax, dword [rsp + 0x1d4]
mov dword [rsp + 0x60], eax
jmp 0x14004dd98
xor r11d, r11d
test rdi, rdi
je 0x14004dbff
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
or edi, 0xffffffff
xor r11d, r11d
jmp 0x14004dc02
mov r14d, 1
cmp dword [rsp + 0x550], r14d
jbe 0x14004dc64
mov rdx, qword [rsp + 0x558]
lea rax, [rdx + 4]
mov r8, r13
cmp rax, rdx
cmovae r8, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004de61
mov ecx, dword [rdx]
add rcx, r8
mov rdx, r13
cmp rcx, r8
cmovae rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, r8
jb 0x14004de61
add r11d, r14d
cmp r11d, r14d
jb 0x14004dde8
mov r8d, dword [rdx]
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
sbb r15d, r15d
and r15d, r12d
xor r11d, r11d
cmp rax, rdx
jb 0x14004de64
mov r9d, r8d
mov dword [rsp + 0x1d8], r8d
mov eax, r11d
test r8d, r8d
cmovne rax, rcx
mov qword [rsp + reloc.MFC42u.dll_COleSafeArray::operator], rax
jmp 0x14004de64
xor r11d, r11d
test r15d, r15d
js 0x14004ef9a
mov r14d, 2
cmp dword [rsp + 0x550], r14d
jbe 0x14004dc64
mov rdx, qword [rsp + 0x558]
lea rax, [rdx + 4]
mov r8, r13
cmp rax, rdx
cmovae r8, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004df02
mov ecx, dword [rdx]
add rcx, r8
mov rdx, r13
cmp rcx, r8
cmovae rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, r8
jb 0x14004df02
inc r11d
cmp r11d, r14d
jb 0x14004de89
mov r8d, dword [rdx]
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
sbb r15d, r15d
and r15d, r12d
xor r11d, r11d
cmp rax, rdx
jb 0x14004df05
mov r10d, r8d
mov dword [rsp + 0x1dc], r8d
mov eax, r11d
test r8d, r8d
cmovne rax, rcx
mov qword [rsp + 0x390], rax
jmp 0x14004df05
xor r11d, r11d
test r15d, r15d
js 0x14004ef9a
lea eax, [r9 + 0x50]
mov ecx, edi
cmp eax, 0x50
cmovae ecx, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, 0x50
jb 0x14004df63
lea eax, [rcx + 4]
mov r8d, edi
cmp eax, ecx
cmovae r8d, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, ecx
jb 0x14004df63
lea ecx, [r8 + r10]
mov eax, edi
cmp ecx, r8d
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
mov edx, dword [rsp + 0x1ec]
cmp ecx, r8d
cmovae edx, eax
mov dword [rsp + 0x1ec], edx
jmp 0x14004df6a
mov edx, dword [rsp + 0x1ec]
test r15d, r15d
js 0x14004ef9a
cmp edx, 0x400000
jbe 0x14004df86
mov r15d, 0x8000ffff
jmp 0x14004ef9a
mov dword [rsp + 0x1c0], edx
test r15d, r15d
js 0x14004ef9a
mov edi, dword [rsp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
xor r11d, r11d
test rax, rax
jne 0x14004dfd3
mov r15d, 0xd0000017
jmp 0x14004ef9a
mov qword [rsp + 0xc0], rdi
mov rax, qword [rsp + 0xf8]
test rax, rax
jne 0x14004dff3
mov r15d, 0x80070057
jmp 0x14004ef9a
mov qword [rsp + Ordinal_1483], rax
mov eax, dword [rsp + 0x60]
mov dword [rsp + Ordinal_1499], eax
mov qword [rsp + Ordinal_1489], rdi
mov eax, dword [rsp + 0x1c0]
mov dword [rsp + 0x5dc], eax
mov dword [rsp + 0x5e0], r11d
lea r8, [rsp + 0x398]
lea rdx, [0x1400b1ee8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14004e07c
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
xor r11d, r11d
test eax, eax
cmovle r15d, eax
mov edx, dword [rsp + 0x1c0]
test r15d, r15d
js 0x14004e0d8
mov r15d, 0x80004005
jmp 0x14004e0d8
lea rdx, str.NtQuerySystemInformation
mov rcx, qword [rsp + 0x398]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14004e048
xor r9d, r9d
lea r8d, [r9 + 0x20]
lea rdx, [rsp + 0x5c8]
lea ecx, [r8 + 0x66]
call qword [str._E_t_]
mov r15d, eax
or r15d, 0x10000000
mov edx, dword [rsp + 0x1c0]
cmovge edx, dword [rsp + 0x5dc]
mov dword [rsp + 0x1c0], edx
xor r11d, r11d
cmp r15d, 0xd0000023
jne 0x14004e0ec
mov r15d, 0x8007007a
jmp 0x14004ef9a
test r15d, r15d
js 0x14004ef9a
mov qword [rsp + 0xb8], r11
cmp edx, 4
jae 0x14004e10a
mov r15d, 0xc000003e
jmp 0x14004e13f
mov r11d, dword [rdi]
mov dword [rsp + 0xc8], r11d
lea rax, [rdi + 4]
mov r14, r13
cmp rax, rdi
cmovae r14, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdi
jb 0x14004e13c
lea eax, [rdx - 4]
cmp eax, r11d
jae 0x14004e17b
mov r15d, 0xc000003e
xor r11d, r11d
mov rax, qword [rsp + 0xa0]
or r15d, 0x10000000
jl 0x14004ef9a
mov rdi, r11
mov qword [rsp + 0x3a0], r11
mov qword [rsp + 0x3a8], r11
test rax, rax
jne 0x14004e614
mov r15d, 0xd000000d
jmp 0x14004ef9a
lea rcx, [r14 + r11]
mov r9, r13
cmp rcx, r14
cmovae r9, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, r14
jb 0x14004e13c
lea eax, [r11 + 4]
or edi, 0xffffffff
mov ecx, edi
cmp eax, 4
cmovae ecx, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, 4
jb 0x14004e13c
mov eax, edx
sub eax, ecx
cmp eax, 4
jb 0x14004e136
mov r10d, dword [r9]
mov dword [rsp + 0x84], r10d
lea rax, [r9 + 4]
mov r8, r13
cmp rax, r9
cmovae r8, rax
mov qword [rsp + 0x100], r8
sbb r15d, r15d
and r15d, r12d
cmp rax, r9
jb 0x14004e13c
lea eax, [rcx + 4]
mov r9d, edi
cmp eax, ecx
cmovae r9d, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, ecx
jb 0x14004e13c
mov eax, edx
sub eax, r9d
cmp eax, r10d
jb 0x14004e136
lea rcx, [r8 + r10]
mov r10, r13
cmp rcx, r8
cmovae r10, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, r8
jb 0x14004e13c
mov eax, dword [rsp + 0x84]
add eax, r9d
mov r8d, edi
cmp eax, r9d
cmovae r8d, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, r9d
jb 0x14004e13c
mov eax, edx
sub eax, r8d
cmp eax, 4
jb 0x14004e136
mov r9d, dword [r10]
mov dword [rsp + 0xd8], r9d
lea rax, [r10 + 4]
mov rcx, r13
cmp rax, r10
cmovae rcx, rax
mov qword [rsp + 0xa8], rcx
sbb r15d, r15d
and r15d, r12d
cmp rax, r10
jb 0x14004e13c
lea eax, [r8 + 4]
mov ecx, edi
cmp eax, r8d
cmovae ecx, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, r8d
jb 0x14004e13c
mov eax, edx
sub eax, ecx
cmp eax, r9d
jb 0x14004e136
lea eax, [rcx + r9]
cmp eax, ecx
cmovae edi, eax
sbb r15d, r15d
and r15d, r12d
cmp eax, ecx
jb 0x14004e13c
cmp edx, edi
jne 0x14004e136
mov r15d, dword [rsp + 0x84]
lea ecx, [r15 + r11]
add ecx, r9d
add rcx, 0xc
mov eax, edx
cmp rcx, rax
jne 0x14004e136
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, 0x30
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
xor r11d, r11d
test rax, rax
jne 0x14004e32f
mov r15d, 0xc0000017
jmp 0x14004e526
test r14, r14
je 0x14004e399
mov eax, dword [rsp + 0xc8]
mov dword [rdi], eax
mov qword [rsp + 0x118], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x118]
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14004e37d
mov r15d, 0xc0000017
jmp 0x14004e46b
mov qword [rdi + 8], rax
mov r8, qword [rsp + 0x118]
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14004e3a0
mov dword [rax], r11d
mov qword [rax + 8], r11
mov r14, qword [rsp + 0x100]
test r14, r14
je 0x14004e3f0
mov dword [rdi + 0x10], r15d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r15
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14004e372
mov qword [rdi + 0x18], rax
mov r8, r15
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14004e3f8
mov dword [rdi + 0x10], r11d
mov qword [rdi + 0x18], r11
mov r14, qword [rsp + 0xa8]
test r14, r14
je 0x14004e455
mov eax, dword [rsp + 0xd8]
mov dword [rdi + 0x20], eax
mov r15d, eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, r15d
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14004e372
mov qword [rdi + 0x28], rax
mov r8d, r15d
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14004e45d
mov dword [rdi + 0x20], r11d
mov qword [rdi + 0x28], r11
mov qword [rsp + 0xb8], rdi
mov rdi, r11
mov r15d, r11d
test rdi, rdi
je 0x14004e526
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x14004e4a4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rdi + 8], r11
mov rbx, qword [rdi + 0x18]
test rbx, rbx
je 0x14004e4d4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rdi + 0x18], r11
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x14004e503
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rdi, r11
test r15d, r15d
mov rax, qword [rsp + 0xb8]
cmovs rdi, rax
cmovs rax, r11
mov qword [rsp + 0xa0], rax
test rdi, rdi
je 0x14004e13f
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x14004e57d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rdi + 8], r11
mov rbx, qword [rdi + 0x18]
test rbx, rbx
je 0x14004e5ad
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rdi + 0x18], r11
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x14004e5dc
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xa0], rax
xor r11d, r11d
jmp 0x14004e147
mov r14, qword [rax + 8]
mov qword [rsp + 0xb8], r14
test r14, r14
je 0x14004e170
cmp dword [rax], r11d
je 0x14004e170
mov r15d, dword [rax]
mov dword [rsp + 0xc8], r11d
test r15, r15
je 0x14004ecf2
add r15, 0xfffffffffffffff8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov r8, rax
mov qword [rsp + 0x100], rax
xor r11d, r11d
movabs rbx, 0x7f1137fab69605e
test rax, rax
je 0x14004ece8
mov dl, r11b
mov qword [rsp + CDC::Escape], rbx
mov rax, r14
mov r9, r8
mov rdi, r15
and edi, 7
mov dword [rsp + 0x1f0], r11d
mov r14d, r11d
mov dword [rsp + 0xd8], r11d
je 0x14004e7e3
or dword [rsp + 0x1f4], 0xffffffff
mov dword [rsp + 0x84], r11d
xor ecx, ecx
mov r10d, ecx
test edi, edi
je 0x14004e72a
lea r9d, [r11 + 0x38]
lea rcx, [rax + 1]
mov qword [rsp + 0xa8], rcx
movzx eax, byte [rax]
cmp r10d, 4
jge 0x14004e700
lea ecx, [r9 - 0x20]
shl eax, cl
or r11d, eax
mov dword [rsp + 0xd8], r11d
jmp 0x14004e710
mov ecx, r9d
shl eax, cl
or r14d, eax
mov dword [rsp + 0x84], r14d
inc r10d
sub r9d, 8
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp r10d, edi
jl 0x14004e6d8
mov r9, r8
xor r11d, 0x92f65a5
mov dword [rsp + 0x1f0], r11d
xor r14d, 0x699a899c
mov dword [rsp + 0x1f4], r14d
xor r10d, r10d
mov ecx, r10d
test edi, edi
je 0x14004e79a
lea r10, [r9 + 1]
mov qword [rsp + 0xa8], r10
cmp ecx, 4
jge 0x14004e76c
rol r11d, 8
mov r10d, r11d
jmp 0x14004e773
rol r14d, 8
mov r10d, r14d
mov byte [r9], r10b
inc ecx
mov r10, qword [rsp + 0xa8]
mov r9, r10
cmp ecx, edi
jl 0x14004e752
mov r11d, dword [rsp + 0x1f0]
mov r14d, dword [rsp + 0x1f4]
xor r10d, r10d
cmp edi, 4
jbe 0x14004e7b9
mov ecx, 8
sub ecx, edi
shl ecx, 3
shr r14d, cl
shl r14d, cl
mov dword [rsp + 0x1f4], r14d
jmp 0x14004e7f3
mov r14d, r10d
mov dword [rsp + 0x1f4], r10d
cmp edi, 4
jae 0x14004e7f3
mov ecx, 4
sub ecx, edi
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov dword [rsp + 0x1f0], r11d
jmp 0x14004e7f3
or dword [rsp + 0x84], 0xffffffff
mov dword [rsp + 0x1f4], r11d
mov rcx, r15
shr rcx, 3
mov qword [rsp + 0xa8], rcx
test rcx, rcx
je 0x14004ec24
mov r8d, dword [rsp + reloc.MFC42u.dll_CDC::Escape]
mov ecx, r8d
shr ecx, 0x10
mov dword [rsp + 0x88], ecx
movzx edi, r8w
mov dword [rsp + 0x60], edi
mov ecx, r8d
xor ecx, ebx
mov dword [rsp + 0x80], ecx
movzx ecx, bx
mov dword [rsp + 0x8c], ecx
movzx ecx, word [rsp + 0xa72]
mov dword [rsp + 0x98], ecx
add r9, 7
mov qword [rsp + 0x118], r9
lea rcx, [rax + 2]
movzx r10d, byte [rcx - 2]
shl r10d, 8
movzx eax, byte [rcx - 1]
or r10d, eax
shl r10d, 8
movzx eax, byte [rcx]
or r10d, eax
shl r10d, 8
movzx eax, byte [rcx + 1]
or r10d, eax
movzx r9d, byte [rcx + 2]
shl r9d, 8
movzx eax, byte [rcx + 3]
or r9d, eax
shl r9d, 8
movzx eax, byte [rcx + 4]
or r9d, eax
shl r9d, 8
movzx eax, byte [rcx + 5]
or r9d, eax
xor r11d, r10d
xor r14d, r9d
add rcx, 8
mov qword [rsp + 0x68], rcx
xor r14d, r11d
xor r14d, r8d
xor r14d, ebx
mov ecx, r14d
sub ecx, ebx
rol ecx, 5
mov eax, r14d
rol eax, 0xa
imul ecx, edi
add eax, ecx
xor r11d, eax
lea ecx, [r8 + r11]
ror ecx, 9
mov eax, r11d
rol eax, 2
imul ecx, dword [rsp + 0x98]
sub ecx, eax
xor r14d, ecx
mov ecx, r14d
sub ecx, edi
imul ecx, dword [rsp + 0x8c]
mov eax, r14d
shr eax, 0xd
sub ecx, eax
xor r11d, ecx
mov edi, r11d
movzx eax, word [rsp + 0xa72]
xor edi, eax
rol edi, 6
mov ecx, r11d
rol ecx, 2
mov eax, dword [rsp + 0x88]
imul eax, edi
sub eax, ecx
xor r14d, eax
mov ecx, r14d
xor ecx, ebx
mov eax, r8d
sub eax, ecx
xor r11d, eax
mov ecx, r11d
ror ecx, 6
mov eax, r11d
xor eax, dword [rsp + 0x60]
movzx edi, word [rsp + 0xa72]
imul eax, edi
xor ecx, eax
xor r14d, ecx
lea ecx, [r8 + r14]
ror ecx, 0xf
mov eax, r14d
rol eax, 2
imul ecx, dword [rsp + 0x8c]
add eax, ecx
xor r11d, eax
mov edi, r11d
sub edi, ebx
ror edi, 0xe
mov ecx, r11d
rol ecx, 8
mov eax, dword [rsp + 0x88]
imul eax, edi
sub eax, ecx
xor r14d, eax
mov ecx, r14d
xor ecx, ebx
ror ecx, 0xc
mov eax, r14d
ror eax, 0xa
imul ecx, dword [rsp + 0x60]
xor eax, ecx
xor r11d, eax
mov edi, dword [rsp + 0x88]
mov ecx, edi
xor ecx, r11d
movzx eax, word [rsp + 0xa72]
imul ecx, eax
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor r14d, ecx
mov eax, r14d
not eax
ror eax, 5
add eax, dword [rsp + 0x8c]
imul eax, edi
xor r11d, eax
mov r8d, r11d
sub r8d, edi
xor r8d, r14d
xor r8d, ebx
mov ecx, edi
xor ecx, r8d
rol ecx, 2
imul ecx, dword [rsp + 0x60]
mov eax, r8d
shr eax, 2
add ecx, eax
xor r11d, ecx
mov ecx, r11d
mov r14d, dword [rsp + reloc.MFC42u.dll_CDC::Escape]
sub ecx, r14d
ror ecx, 6
mov eax, r11d
rol eax, 7
imul ecx, dword [rsp + 0x98]
add eax, ecx
xor r8d, eax
mov ecx, r8d
ror ecx, 9
mov eax, r8d
xor eax, dword [rsp + 0x60]
imul eax, dword [rsp + 0x8c]
add ecx, eax
xor r11d, ecx
mov edi, r11d
movzx eax, word [rsp + 0xa72]
xor edi, eax
rol edi, 5
mov ecx, r11d
rol ecx, 7
mov eax, dword [rsp + 0x88]
imul eax, edi
add ecx, eax
xor r8d, ecx
mov eax, dword [rsp + 0x80]
xor eax, r8d
xor r11d, eax
mov eax, r11d
ror eax, 3
movzx ecx, word [rsp + 0xa72]
sub eax, ecx
imul eax, dword [rsp + 0x60]
xor r8d, eax
mov ecx, r8d
sub ecx, r14d
ror ecx, 1
mov eax, r8d
ror eax, 6
imul ecx, dword [rsp + 0x8c]
sub ecx, eax
xor r11d, ecx
lea ecx, [r11 + rbx]
rol ecx, 3
mov edi, r11d
rol edi, 0xe
mov eax, dword [rsp + 0x88]
imul eax, ecx
add edi, eax
xor r8d, edi
lea ecx, [r8 + rbx]
rol ecx, 0xf
mov eax, r8d
ror eax, 0xe
mov edi, dword [rsp + 0x60]
imul ecx, edi
sub ecx, eax
xor r11d, ecx
mov ecx, dword [rsp + 0x8c]
xor ecx, r11d
movzx eax, word [rsp + 0xa72]
imul ecx, eax
mov eax, r11d
shr eax, 3
xor ecx, eax
xor r8d, ecx
mov ecx, r14d
xor ecx, r8d
rol ecx, 4
mov eax, r8d
rol eax, 2
imul ecx, dword [rsp + 0x8c]
xor eax, ecx
xor eax, dword [rsp + 0xd8]
xor r11d, eax
mov dword [rsp + 0x1f0], r11d
xor r8d, dword [rsp + 0x84]
mov dword [rsp + 0x1f4], r8d
mov rcx, qword [rsp + 0x118]
mov byte [rcx - 4], r11b
ror dword [rsp + 0x1f0], 8
mov al, byte [rsp + 0x1f4]
mov byte [rcx], al
ror dword [rsp + 0x1f4], 8
mov al, byte [rsp + 0x1f0]
mov byte [rcx - 5], al
ror dword [rsp + 0x1f0], 8
mov al, byte [rsp + 0x1f4]
mov byte [rcx - 1], al
ror dword [rsp + 0x1f4], 8
mov al, byte [rsp + 0x1f0]
mov byte [rcx - 6], al
ror dword [rsp + 0x1f0], 8
mov al, byte [rsp + 0x1f4]
mov byte [rcx - 2], al
ror dword [rsp + 0x1f4], 8
mov al, byte [rsp + 0x1f0]
mov byte [rcx - 7], al
mov al, byte [rsp + 0x1f4]
mov byte [rcx - 3], al
mov r11d, dword [rsp + 0x1f0]
ror r11d, 8
mov dword [rsp + 0x1f0], r11d
mov r14d, dword [rsp + 0x1f4]
ror r14d, 8
mov dword [rsp + 0x1f4], r14d
mov dword [rsp + 0xd8], r10d
mov dword [rsp + 0x84], r9d
add rcx, 8
mov qword [rsp + 0x118], rcx
mov r9d, 1
sub qword [rsp + 0xa8], r9
mov r8d, dword [rsp + reloc.MFC42u.dll_CDC::Escape]
mov rcx, qword [rsp + 0x68]
jne 0x14004e85d
mov r8, qword [rsp + 0x100]
jmp 0x14004ec2a
mov r9d, 1
xor r11d, r11d
mov eax, r11d
test r15, r15
je 0x14004ec41
xor dl, byte [rax + r8]
add rax, r9
cmp rax, r15
jb 0x14004ec35
movzx eax, dl
mov rcx, qword [rsp + 0xb8]
cmp rax, qword [r15 + rcx]
je 0x14004ec62
mov r14d, 0xc004d501
mov rdi, qword [rsp + 0x3a0]
jmp 0x14004ec88
mov rdi, r8
mov qword [rsp + 0x3a0], r8
mov r8, r11
mov qword [rsp + 0x100], r11
mov qword [rsp + 0x3a8], r15
mov r14d, dword [rsp + 0xc8]
test r8, r8
je 0x14004ecbd
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x100]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rsp + 0x3a0]
xor r11d, r11d
test r14d, r14d
js 0x14004ecfc
mov qword [rsp + 0x78], rdi
mov rdi, r11
mov qword [rsp + 0x3a0], r11
mov ecx, dword [rsp + 0x3a8]
mov dword [rsp + 0x1c4], ecx
mov r15d, 0x10000000
jmp 0x14004ed09
mov rdi, qword [rsp + 0x3a0]
jmp 0x14004ecfc
movabs rbx, 0x7f1137fab69605e
mov r15d, 0xd0000001
mov ecx, dword [rsp + 0x1c4]
test rdi, rdi
je 0x14004ed40
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x3a0], r11
mov ecx, dword [rsp + 0x1c4]
test r15d, r15d
js 0x14004efa4
cmp ecx, 4
jb 0x14004ef77
mov r8, qword [rsp + 0x78]
mov eax, dword [r8]
mov dword [rsp + 0xc8], eax
lea rax, [r8 + 4]
mov rdx, r13
cmp rax, r8
cmovae rdx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, r8
jb 0x14004ef7d
lea eax, [rcx - 4]
cmp eax, 4
jb 0x14004ef77
mov r14d, dword [rdx]
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004ef7d
lea eax, [rcx - 8]
cmp eax, r14d
jb 0x14004ef77
lea eax, [r14 + 8]
cmp eax, 8
sbb r15d, r15d
and r15d, r12d
cmp eax, 8
jb 0x14004ef7d
mov r10d, r14d
lea r9, [r14 + rdi]
lea rax, [rcx + r8]
cmp rax, r9
jb 0x14004ef77
sub rcx, r14
sub rcx, rdi
add rcx, r8
cmp rcx, 8
jae 0x14004ef77
mov rax, r11
mov qword [rsp + 0xb8], rax
mov r15d, r11d
mov dword [rsp + 0x84], r11d
test rdi, rdi
je 0x14004eed6
mov rdx, rdi
mov r8, r13
cmp r9, rdi
cmovae r8, r9
sbb r15d, r15d
and r15d, r12d
cmp r9, rdi
jb 0x14004ef5f
cmp rdi, r8
jae 0x14004eed1
mov r9d, dword [rsp + 0x1f8]
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004ef5f
cmp rcx, r8
ja 0x14004ef15
mov ecx, dword [rdx]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r15d, r15d
and r15d, r12d
cmp ecx, 4
cmovae r9d, eax
mov dword [rsp + 0x1f8], r9d
jb 0x14004ef5f
mov ecx, r9d
add rcx, rdx
mov rax, r13
cmp rcx, rdx
cmovae rax, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, rdx
jb 0x14004ef5f
cmp rax, r8
ja 0x14004ef15
mov rdx, rax
inc r11d
mov dword [rsp + 0x84], r11d
cmp rax, r8
jb 0x14004ee3f
mov rax, qword [rsp + 0xb8]
cmp rdx, r8
jne 0x14004ef15
test r14d, r14d
je 0x14004ef26
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
mov edx, 8
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rsp + 0xb8], rax
xor ecx, ecx
test rax, rax
jne 0x14004ef20
mov r15d, 0xc0000017
jmp 0x14004ef5f
mov r15d, 0xc000000d
xor r11d, r11d
jmp 0x14004ef7d
mov r15d, ecx
mov r10, r14
test rdi, rdi
je 0x14004ef41
mov r8, r10
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0xb8]
mov qword [rsp + Ordinal_1422], rax
mov dword [rsp + 0x584], r14d
mov eax, dword [rsp + 0x84]
mov dword [rsp + Ordinal_1410], eax
xor r11d, r11d
test r15d, r15d
js 0x14004ef7d
mov eax, dword [rsp + 0xc8]
cmp eax, dword [rsp + 0x580]
je 0x14004ef7d
mov r15d, 0xc000003e
bts r15d, 0x1c
jmp 0x14004efa4
movabs rsi, 0xc81ecb17b1b54a58
mov qword [rsp + 0x140], 0x38
movabs rbx, 0x7f1137fab69605e
mov rdi, qword [rsp + 0xb0]
test rdi, rdi
je 0x14004efd4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rsp + 0x310]
test r14, r14
je 0x14004f09f
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14004f015
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14004f045
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14004f074
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x310], r11
mov rdi, qword [rsp + 0xf8]
test rdi, rdi
je 0x14004f0cf
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rdi, qword [rsp + 0xc0]
test rdi, rdi
je 0x14004f0ff
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rsp + 0xa0]
test r14, r14
je 0x14004f1c2
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14004f140
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14004f170
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14004f19f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x14004f1ef
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r15d, r15d
js 0x14004c80c
mov r9d, 1
cmp dword [rsp + 0x580], r9d
jae 0x14004f213
mov r15d, 0xc004d501
jmp 0x14004c80c
cmp qword [rsp + 0x588], r11
jne 0x14004f225
mov r15d, 0xc000000d
jmp 0x14004f29d
cmp dword [rsp + 0x580], r11d
jbe 0x14004f21d
mov rdi, qword [rsp + 0x588]
mov ecx, dword [rdi]
lea rax, [rdi + 4]
mov rdx, r13
cmp rax, rdi
cmovae rdx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdi
jb 0x14004f26c
mov dword [rsp + 0x1fc], ecx
mov rax, r11
test ecx, ecx
cmovne rax, rdx
mov qword [rsp + 0x3b8], rax
jmp 0x14004f27b
mov ecx, dword [rsp + 0x1fc]
mov rax, qword [rsp + 0x3b8]
test r15d, r15d
js 0x14004c80c
cmp ecx, 4
je 0x14004f294
mov r15d, 0xc0000023
jmp 0x14004c80c
mov eax, dword [rax]
mov dword [rsp + 0x180], eax
test r15d, r15d
js 0x14004c80c
mov r15d, dword [rsp + 0x180]
cmp r15d, 0xd0000023
mov r14d, 0x8007007a
cmove r15d, r14d
mov dword [rsp + 0x180], r15d
cmp r15d, r14d
je 0x14004f2d5
test r15d, r15d
js 0x14004c812
cmp dword [rsp + 0x580], 6
je 0x14004f2ea
mov r15d, 0xc004d501
jmp 0x14004c812
cmp qword [rsp + 0x588], r11
jne 0x14004f2ff
mov r15d, 0xc000000d
jmp 0x14004f3ad
mov rdx, qword [rsp + 0x588]
mov r8d, r11d
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f37a
mov ecx, dword [rdx]
add rcx, rdi
mov rdx, r13
cmp rcx, rdi
cmovae rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, rdi
jb 0x14004f37a
add r8d, r9d
cmp r8d, r9d
jb 0x14004f30a
mov ecx, dword [rdx]
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f37a
mov dword [rsp + 0x200], ecx
mov rax, r11
test ecx, ecx
cmovne rax, rdi
mov qword [rsp + 0x338], rax
jmp 0x14004f389
mov ecx, dword [rsp + 0x200]
mov rax, qword [rsp + 0x338]
test r15d, r15d
js 0x14004c812
cmp ecx, 8
je 0x14004f3a2
mov r15d, 0xc0000023
jmp 0x14004c812
mov rax, qword [rax]
mov qword [rsp + 0x3c8], rax
test r15d, r15d
js 0x14004c812
cmp qword [rsp + 0x588], r11
jne 0x14004f3cb
mov r15d, 0xc000000d
jmp 0x14004f471
mov rdx, qword [rsp + 0x588]
mov r8d, r11d
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f447
mov ecx, dword [rdx]
add rcx, rdi
mov rdx, r13
cmp rcx, rdi
cmovae rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, rdi
jb 0x14004f447
add r8d, r9d
cmp r8d, 2
jb 0x14004f3d6
mov ecx, dword [rdx]
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f447
mov dword [rsp + 0x204], ecx
mov rax, r11
test ecx, ecx
cmovne rax, rdi
mov qword [rsp + 0x3d0], rax
jmp 0x14004f456
mov ecx, dword [rsp + 0x204]
mov rax, qword [rsp + 0x3d0]
test r15d, r15d
js 0x14004c812
cmp ecx, 4
jne 0x14004f397
mov eax, dword [rax]
mov dword [rsp + 0x208], eax
test r15d, r15d
js 0x14004c812
cmp qword [rsp + 0x588], r11
jne 0x14004f48f
mov r15d, 0xc000000d
jmp 0x14004c812
mov rdx, qword [rsp + 0x588]
mov r8d, r11d
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f50e
mov ecx, dword [rdx]
add rcx, rdi
mov rdx, r13
cmp rcx, rdi
cmovae rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, rdi
jb 0x14004f50e
add r8d, r9d
cmp r8d, 3
jb 0x14004f49a
mov r8d, dword [rdx]
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f50e
mov dword [rsp + reloc.MFC42u.dll_CSocketFile::CSocketFile], r8d
mov r9, r11
test r8d, r8d
cmovne r9, rcx
mov qword [rsp + reloc.MFC42u.dll_CEnumConnPoints::AddConnPoint], r9
jmp 0x14004f51e
mov r8d, dword [rsp + reloc.MFC42u.dll_CSocketFile::CSocketFile]
mov r9, qword [rsp + reloc.MFC42u.dll_CEnumConnPoints::AddConnPoint]
test r15d, r15d
js 0x14004c812
mov rdx, qword [rsp + 0x588]
mov r10d, r11d
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f5a3
mov ecx, dword [rdx]
add rcx, rdi
mov rdx, r13
cmp rcx, rdi
cmovae rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, rdi
jb 0x14004f5a3
inc r10d
cmp r10d, 4
jb 0x14004f532
mov ecx, dword [rdx]
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f5a3
mov dword [rsp + reloc.MFC42u.dll_CStatic::CStatic], ecx
mov rax, r11
test ecx, ecx
cmovne rax, rdi
mov qword [rsp + reloc.MFC42u.dll_COlePasteSpecialDialog::AddFormat], rax
jmp 0x14004f5b2
mov ecx, dword [rsp + reloc.MFC42u.dll_CStatic::CStatic]
mov rax, qword [rsp + reloc.MFC42u.dll_COlePasteSpecialDialog::AddFormat]
test r15d, r15d
js 0x14004f5cd
cmp ecx, 4
jne 0x14004f397
mov r10d, dword [rax]
mov dword [rsp + 0x214], r10d
jmp 0x14004f5d5
mov r10d, dword [rsp + 0x214]
test r15d, r15d
js 0x14004c812
mov rdx, qword [rsp + 0x588]
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f65a
mov ecx, dword [rdx]
add rcx, rdi
mov rdx, r13
cmp rcx, rdi
cmovae rdx, rcx
sbb r15d, r15d
and r15d, r12d
cmp rcx, rdi
jb 0x14004f65a
inc r11d
cmp r11d, 5
jb 0x14004f5e6
mov ecx, dword [rdx]
lea rax, [rdx + 4]
mov rdi, r13
cmp rax, rdx
cmovae rdi, rax
sbb r15d, r15d
and r15d, r12d
cmp rax, rdx
jb 0x14004f65a
mov dword [rsp + 0x218], ecx
xor r11d, r11d
mov eax, r11d
test ecx, ecx
cmovne rax, rdi
mov qword [rsp + 0x3e8], rax
jmp 0x14004f66c
mov ecx, dword [rsp + 0x218]
mov rax, qword [rsp + 0x3e8]
xor r11d, r11d
test r15d, r15d
js 0x14004f685
cmp ecx, 4
jne 0x14004f397
mov ecx, dword [rax]
mov dword [rsp + 0x17c], ecx
jmp 0x14004f68c
mov ecx, dword [rsp + 0x17c]
test r15d, r15d
js 0x14004c812
mov rax, qword [rsp + 0x3c8]
cmp qword [rsp + 0x368], rax
jne 0x14004f2df
mov dword [rsp + 0x164], r10d
mov dword [rsp + 0x168], ecx
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x160], eax
cmp r10d, 4
jbe 0x14004f6d6
mov r15d, r14d
jmp 0x14004c812
cmp r8d, 4
ja 0x14004f6ce
mov rdx, r9
mov rcx, qword [rsp + 0x70]
call sub.msvcrt.dll_memcpy
jmp 0x14004f73c
xor r11d, r11d
movabs rsi, 0xc81ecb17b1b54a58
mov qword [rsp + 0x140], 0x38
movabs rbx, 0x7f1137fab69605e
mov r14d, 0x8007007a
jmp 0x14004f73f
movabs rsi, 0xc81ecb17b1b54a58
mov qword [rsp + 0x140], 0x38
movabs rbx, 0x7f1137fab69605e
mov r14d, 0x8007007a
xor r11d, r11d
test r15d, r15d
js 0x14004c812
mov eax, dword [rsp + 0x180]
test eax, eax
cmovne r15d, eax
jmp 0x14004c812
mov rax, qword [0x1400f8138]
call qword [str._E_t_]
mov qword [0x1400ff700], rax
mov edi, dword [0x1400fee34]
xor edx, edx
lea r8d, [rdx + 0x70]
lea rcx, [rsp + 0xa00]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0xa90], rax
mov qword [rsp + 0xa98], rax
mov eax, 1
mov dword [rsp + reloc.MFC42u.dll_CString::CString], eax
mov qword [rsp + 0x100], r14
mov qword [rsp + 0xa8], r14
xor edx, edx
lea r8d, [rax + 0x2b]
lea rcx, [rsp + 0xc30]
call sub.msvcrt.dll_memset
mov qword [rsp + 0x118], r14
mov edx, 1
xor eax, eax
lock cmpxchg dword [0x1400ff710], edx
jne 0x14004f7d5
mov eax, dword [0x1400ff70c]
test eax, eax
jne 0x14004ff27
mov dword [rsp + 0xc8], r14d
mov dword [rsp + 0x84], r14d
mov dword [rsp + 0xd8], r14d
mov qword [rsp + 0x3f8], r14
mov qword [rsp + COleControlSite::XEventSink::AddRef], r14
mov dword [rsp + 0x88], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
xor edx, edx
mov r8d, CObject::operatordelete
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
xor r10d, r10d
test rax, rax
je 0x14004fe71
mov cl, r10b
mov dword [rsp + 0x60], r10d
or dword [rsp + 0x80], 0xffffffff
mov r8d, r10d
mov dword [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl], r10d
mov r9d, r10d
mov dword [rsp + 0x110], r10d
add rax, 7
mov qword [rsp + 0x68], rax
lea rdx, [0x1400d3c02]
mov qword [rsp + 0x78], 0x67
movzx r11d, byte [rdx - 2]
shl r11d, 8
movzx eax, byte [rdx - 1]
or r11d, eax
shl r11d, 8
movzx eax, byte [rdx]
or r11d, eax
shl r11d, 8
movzx eax, byte [rdx + 1]
or r11d, eax
movzx r10d, byte [rdx + 2]
shl r10d, 8
movzx eax, byte [rdx + 3]
or r10d, eax
shl r10d, 8
movzx eax, byte [rdx + 4]
or r10d, eax
shl r10d, 8
movzx eax, byte [rdx + 5]
or r10d, eax
xor r9d, r11d
xor r8d, r10d
add rdx, 8
mov qword [rsp + 0xa0], rdx
xor r8d, r9d
xor r8d, 0xac987321
lea eax, [r8 + 0x54969fa2]
rol eax, 5
mov edx, r8d
rol edx, 0xa
imul eax, eax, 0x137f
add edx, eax
xor r9d, edx
lea eax, [r9 + 0x7f1137f]
ror eax, 9
mov edx, r9d
rol edx, 2
imul eax, eax, 0xab69
sub eax, edx
xor r8d, eax
imul edx, r8d, 0x605e
mov eax, r8d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r9d, edx
mov eax, r9d
xor eax, 0xab69
rol eax, 6
mov edx, r9d
rol edx, 2
imul eax, eax, 0x7f1
sub eax, edx
xor r8d, eax
mov dword [rsp + 0x110], r8d
mov edx, r8d
xor edx, 0xab69605e
mov eax, 0x7f1137f
sub eax, edx
xor r9d, eax
mov r8d, r9d
ror r8d, 6
mov eax, r9d
xor eax, 0x137f
imul edx, eax, 0xab69
xor r8d, edx
xor dword [rsp + 0x110], r8d
mov r8d, dword [rsp + 0x110]
lea eax, [r8 + 0x7f1137f]
ror eax, 0xf
mov edx, r8d
rol edx, 2
imul eax, eax, 0x605e
add edx, eax
xor r9d, edx
lea eax, [r9 + 0x54969fa2]
ror eax, 0xe
mov edx, r9d
rol edx, 8
imul eax, eax, 0x7f1
sub eax, edx
xor r8d, eax
mov eax, r8d
xor eax, 0xab69605e
ror eax, 0xc
mov edx, r8d
ror edx, 0xa
imul eax, eax, 0x137f
xor edx, eax
xor r9d, edx
mov eax, r9d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r9d
shr eax, 0xa
xor edx, eax
xor edx, r8d
mov eax, edx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r9d, eax
mov dword [rsp + 0x110], r9d
add r9d, 0xfffff80f
xor r9d, edx
xor r9d, 0xab69605e
mov eax, r9d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r9d
shr eax, 2
add edx, eax
mov r8d, dword [rsp + 0x110]
xor r8d, edx
mov dword [rsp + 0x110], r8d
lea eax, [r8 - 0x7f1137f]
ror eax, 6
mov edx, r8d
rol edx, 7
imul eax, eax, 0xab69
add edx, eax
xor r9d, edx
mov r8d, r9d
ror r8d, 9
mov eax, r9d
xor eax, 0x137f
imul edx, eax, 0x605e
add r8d, edx
xor dword [rsp + 0x110], r8d
mov r8d, dword [rsp + 0x110]
mov eax, r8d
xor eax, 0xab69
rol eax, 5
mov edx, r8d
rol edx, 7
imul eax, eax, 0x7f1
add edx, eax
xor r9d, edx
xor r8d, r9d
xor r8d, 0xac987321
mov eax, r8d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r9d, edx
lea eax, [r9 - 0x7f1137f]
ror eax, 1
mov edx, r9d
ror edx, 6
imul eax, eax, 0x605e
sub eax, edx
xor r8d, eax
lea eax, [r8 - 0x54969fa2]
rol eax, 3
mov edx, r8d
rol edx, 0xe
imul eax, eax, 0x7f1
add edx, eax
xor r9d, edx
lea eax, [r9 - 0x54969fa2]
rol eax, 0xf
mov edx, r9d
ror edx, 0xe
imul eax, eax, 0x137f
sub eax, edx
xor r8d, eax
mov eax, r8d
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, r8d
shr eax, 3
xor edx, eax
xor r9d, edx
mov eax, r9d
xor eax, 0x7f1137f
rol eax, 4
mov edx, r9d
rol edx, 2
imul eax, eax, 0x605e
xor edx, eax
xor edx, dword [rsp + 0x60]
xor r8d, edx
mov dword [rsp + 0x110], r8d
xor r9d, dword [rsp + 0x80]
mov dword [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl], r9d
mov rdx, qword [rsp + 0x68]
mov byte [rdx - 4], r8b
ror dword [rsp + 0x110], 8
mov al, byte [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl]
mov byte [rdx], al
ror dword [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl], 8
mov al, byte [rsp + 0x110]
mov byte [rdx - 5], al
ror dword [rsp + 0x110], 8
mov al, byte [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl]
mov byte [rdx - 1], al
ror dword [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl], 8
mov al, byte [rsp + 0x110]
mov byte [rdx - 6], al
ror dword [rsp + 0x110], 8
mov al, byte [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl]
mov byte [rdx - 2], al
ror dword [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl], 8
mov al, byte [rsp + 0x110]
mov byte [rdx - 7], al
mov al, byte [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl]
mov byte [rdx - 3], al
mov r9d, dword [rsp + 0x110]
ror r9d, 8
mov dword [rsp + 0x110], r9d
mov r8d, dword [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl]
ror r8d, 8
mov dword [rsp + reloc.MFC42u.dll_CTabCtrl::CTabCtrl], r8d
mov dword [rsp + 0x60], r11d
mov dword [rsp + 0x80], r10d
add rdx, 8
mov qword [rsp + 0x68], rdx
mov r11d, 1
sub qword [rsp + 0x78], r11
mov rdx, qword [rsp + 0xa0]
jne 0x14004f890
xor r10d, r10d
mov eax, r10d
mov edx, CObject::operatordelete
xor cl, byte [rax + r14]
add rax, r11
cmp rax, rdx
jb 0x14004fc68
movzx eax, cl
cmp rax, qword [0x1400d3f38]
je 0x14004fc8d
mov dword [rsp + 0x88], 0xc004d501
jmp 0x14004fca0
mov qword [rsp + 0x3f8], r14
mov r14, r10
mov qword [rsp + COleControlSite::XEventSink::AddRef], rdx
test r14, r14
je 0x14004fcc8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r10d, r10d
cmp dword [rsp + 0x88], r10d
jl 0x14004fe71
mov r14, qword [rsp + 0x3f8]
mov rax, qword [rsp + 0x400]
mov byte [rax + r14 - 1], r10b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
xor r10d, r10d
cmp byte [r14], r10b
je 0x14004fe67
mov rdx, r14
mov rax, r13
inc rax
cmp word [r14 + rax*2], r10w
jne 0x14004fd0f
lea r14, [r14 + rax*2]
mov eax, dword [rsp + 0xd8]
lea rcx, [rax + rax*2]
lea rax, [0x1400fee40]
lea r8, [rax + rcx*8]
mov qword [rsp + 0x68], r8
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
xor r10d, r10d
test eax, eax
je 0x14004fe71
mov ecx, r10d
mov dword [rsp + 0x84], ecx
mov r8, qword [rsp + 0x68]
mov rax, qword [r8]
mov edx, 0x5a4d
cmp word [rax], dx
je 0x14004fd7b
mov ecx, 0xc000007b
mov dword [rsp + 0x84], ecx
jmp 0x14004fdca
movsxd rdx, dword [rax + 0x3c]
cmp edx, 0x10000000
jae 0x14004fd6d
add rdx, qword [r8]
cmp rdx, qword [r8]
jb 0x14004fd6d
cmp dword [rdx], 0x4550
jne 0x14004fd6d
movzx eax, word [rdx + 0x18]
mov r9d, AFX_MODULE_STATE::AFX_MODULE_STATE
sub ax, r9w
mov r9d, 0xfeff
test r9w, ax
je 0x14004fdb8
mov ecx, 0xc000000d
jmp 0x14004fd72
mov rax, qword [rdx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rdx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r14 + 2]
mov dword [rsp + 0x88], eax
add r14, 6
mov edx, r10d
mov dword [rsp + 0x60], edx
test eax, eax
je 0x14004fe56
mov r9, r14
mov rax, r13
inc rax
cmp byte [r14 + rax], r10b
jne 0x14004fdea
inc r14
add r14, rax
test ecx, ecx
js 0x14004fe39
mov rdx, r9
mov rcx, qword [r8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
xor r10d, r10d
test rax, rax
je 0x14004fe67
mov ecx, dword [rsp + 0xc8]
lea rdx, [0x1400f80a0]
mov qword [rdx + rcx*8], rax
mov ecx, dword [rsp + 0x84]
mov r8, qword [rsp + 0x68]
mov edx, dword [rsp + 0x60]
mov eax, 1
add dword [rsp + 0xc8], eax
add edx, eax
mov dword [rsp + 0x60], edx
cmp edx, dword [rsp + 0x88]
jb 0x14004fde4
jmp 0x14004fe5b
mov eax, 1
add dword [rsp + 0xd8], eax
jmp 0x14004fd00
mov r14d, dword [rsp + 0x84]
jmp 0x14004fe77
mov r14d, 0xc000007a
cmp qword [rsp + 0x3f8], r10
je 0x14004fea9
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x3f8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r10d, r10d
test r14d, r14d
jns 0x14004ff1c
lea r14, [0x1400fee40]
mov eax, 4
mov qword [rsp + 0x68], rax
mov rcx, qword [r14]
test rcx, rcx
je 0x14004fedb
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rsp + 0x68]
xor r10d, r10d
add r14, 0x18
sub rax, 1
mov qword [rsp + 0x68], rax
jne 0x14004febf
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
mov r8d, CGopherConnection::CGopherConnection
lea rdx, [0x1400a92a0]
lea rcx, [0x1400f80a0]
call sub.msvcrt.dll_memcpy
mov edx, 1
jmp 0x14004ff2f
mov eax, dword [0x1400ff70c]
mov edx, 1
add eax, edx
mov dword [0x1400ff70c], eax
xor r10d, r10d
mov eax, r10d
xchg dword [0x1400ff710], eax
xor ecx, ecx
mov dword [rsp + 0x1030], ecx
mov word [rsp + 0x1034], cx
mov dword [rsp + 0xc8], r10d
mov dword [rsp + 0x84], r10d
mov qword [rsp + CDocObjectServer::XOleCommandTarget::AddRef], r10
xor eax, eax
mov qword [rsp + Ordinal_1463], rax
mov qword [rsp + Ordinal_1471], rax
mov qword [rsp + reloc.MFC42u.dll_Ordinal_1472], rax
mov qword [rsp + 0xaa0], rax
mov qword [rsp + 0xaa8], rax
xor eax, eax
lock cmpxchg dword [0x1400ff710], edx
jne 0x14004ff8e
mov eax, dword [0x1400ff70c]
test eax, eax
jne 0x1400506d7
mov dword [rsp + 0xd8], r10d
mov dword [rsp + 0x88], r10d
mov dword [rsp + 0x60], r10d
mov qword [rsp + reloc.MFC42u.dll_CDocObjectServer::XOleDocument::AddRef], r10
mov qword [rsp + COlePropertiesDialog::XOleUIObjInfo::AddRef], r10
mov dword [rsp + 0x80], r10d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
xor edx, edx
mov r8d, CObject::operatordelete
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rsp + 0x68], rax
xor r10d, r10d
test rax, rax
je 0x140050626
mov cl, r10b
mov dword [rsp + 0x8c], r10d
or dword [rsp + 0x98], 0xffffffff
mov edx, r10d
mov dword [rsp + 0x224], edx
mov r9d, r10d
mov dword [rsp + 0x130], r10d
add rax, 7
mov qword [rsp + 0x78], rax
lea r8, [0x1400d3c02]
mov qword [rsp + 0xa0], 0x67
movzx r14d, byte [r8 - 2]
shl r14d, 8
movzx eax, byte [r8 - 1]
or r14d, eax
shl r14d, 8
movzx eax, byte [r8]
or r14d, eax
shl r14d, 8
movzx eax, byte [r8 + 1]
or r14d, eax
movzx r11d, byte [r8 + 2]
shl r11d, 8
movzx eax, byte [r8 + 3]
or r11d, eax
shl r11d, 8
movzx eax, byte [r8 + 4]
or r11d, eax
shl r11d, 8
movzx eax, byte [r8 + 5]
or r11d, eax
xor r9d, r14d
add r8, 8
mov qword [rsp + 0xc0], r8
mov r10d, r9d
xor r10d, r11d
xor r10d, edx
xor r10d, 0xac987321
lea eax, [r10 + 0x54969fa2]
rol eax, 5
mov edx, r10d
rol edx, 0xa
imul eax, eax, 0x137f
add edx, eax
xor r9d, edx
lea eax, [r9 + 0x7f1137f]
ror eax, 9
mov edx, r9d
rol edx, 2
imul eax, eax, 0xab69
sub eax, edx
xor r10d, eax
mov eax, r10d
shr eax, 0xd
imul edx, r10d, 0x605e
sub edx, eax
sub edx, 0x756c8a2
xor r9d, edx
mov eax, r9d
xor eax, 0xab69
rol eax, 6
mov edx, r9d
rol edx, 2
imul eax, eax, 0x7f1
sub eax, edx
xor r10d, eax
mov edx, r10d
xor edx, 0xab69605e
mov eax, 0x7f1137f
sub eax, edx
xor r9d, eax
mov r8d, r9d
ror r8d, 6
mov eax, r9d
xor eax, 0x137f
imul edx, eax, 0xab69
xor r8d, edx
xor r10d, r8d
lea eax, [r10 + 0x7f1137f]
ror eax, 0xf
mov edx, r10d
rol edx, 2
imul eax, eax, 0x605e
add edx, eax
xor r9d, edx
lea eax, [r9 + 0x54969fa2]
ror eax, 0xe
mov edx, r9d
rol edx, 8
imul eax, eax, 0x7f1
sub eax, edx
xor r10d, eax
mov eax, r10d
mov r8d, 0xab69605e
xor eax, r8d
ror eax, 0xc
mov edx, r10d
ror edx, 0xa
imul eax, eax, 0x137f
xor edx, eax
xor r9d, edx
mov eax, r9d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r9d
shr eax, 0xa
xor edx, eax
xor r10d, edx
mov eax, r10d
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r9d, eax
mov dword [rsp + 0x130], r9d
add r9d, 0xfffff80f
xor r9d, r10d
xor r9d, r8d
mov eax, r9d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r9d
shr eax, 2
add edx, eax
mov r10d, dword [rsp + 0x130]
xor r10d, edx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov edx, r10d
rol edx, 7
imul eax, eax, 0xab69
add edx, eax
xor r9d, edx
mov r8d, r9d
ror r8d, 9
mov eax, r9d
xor eax, 0x137f
imul edx, eax, 0x605e
add r8d, edx
xor r10d, r8d
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov edx, r10d
rol edx, 7
imul eax, eax, 0x7f1
add edx, eax
xor r9d, edx
mov r8d, r9d
xor r8d, r10d
xor r8d, 0xac987321
mov eax, r8d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r9d, edx
lea eax, [r9 - 0x7f1137f]
ror eax, 1
mov edx, r9d
ror edx, 6
imul eax, eax, 0x605e
sub eax, edx
xor r8d, eax
lea eax, [r8 - 0x54969fa2]
rol eax, 3
mov edx, r8d
rol edx, 0xe
imul eax, eax, 0x7f1
add edx, eax
xor r9d, edx
lea eax, [r9 - 0x54969fa2]
rol eax, 0xf
mov edx, r9d
ror edx, 0xe
imul eax, eax, 0x137f
sub eax, edx
xor r8d, eax
mov eax, r8d
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, r8d
shr eax, 3
xor edx, eax
xor r9d, edx
mov eax, r9d
xor eax, 0x7f1137f
rol eax, 4
mov edx, r9d
rol edx, 2
imul eax, eax, 0x605e
xor edx, eax
xor edx, dword [rsp + 0x8c]
xor r8d, edx
mov dword [rsp + 0x130], r8d
xor r9d, dword [rsp + 0x98]
mov dword [rsp + 0x224], r9d
mov r10, qword [rsp + 0x78]
mov byte [r10 - 4], r8b
ror dword [rsp + 0x130], 8
mov al, byte [rsp + 0x224]
mov byte [r10], al
ror dword [rsp + 0x224], 8
mov al, byte [rsp + 0x130]
mov byte [r10 - 5], al
ror dword [rsp + 0x130], 8
mov al, byte [rsp + 0x224]
mov byte [r10 - 1], al
ror dword [rsp + 0x224], 8
mov al, byte [rsp + 0x130]
mov byte [r10 - 6], al
ror dword [rsp + 0x130], 8
mov al, byte [rsp + 0x224]
mov byte [r10 - 2], al
ror dword [rsp + 0x224], 8
mov al, byte [rsp + 0x130]
mov byte [r10 - 7], al
mov al, byte [rsp + 0x224]
mov byte [r10 - 3], al
mov r9d, dword [rsp + 0x130]
ror r9d, 8
mov dword [rsp + 0x130], r9d
mov edx, dword [rsp + 0x224]
ror edx, 8
mov dword [rsp + 0x224], edx
mov dword [rsp + 0x8c], r14d
mov dword [rsp + 0x98], r11d
add r10, 8
mov qword [rsp + 0x78], r10
mov r11d, 1
sub qword [rsp + 0xa0], r11
mov r8, qword [rsp + 0xc0]
jne 0x14005004d
xor r10d, r10d
mov eax, r10d
mov r14, qword [rsp + 0x68]
mov edx, CObject::operatordelete
xor cl, byte [rax + r14]
add rax, r11
cmp rax, rdx
jb 0x14005041a
movzx eax, cl
cmp rax, qword [0x1400d3f38]
je 0x14005043f
mov dword [rsp + 0x80], 0xc004d501
jmp 0x140050452
mov qword [rsp + reloc.MFC42u.dll_CDocObjectServer::XOleDocument::AddRef], r14
mov r14, r10
mov qword [rsp + COlePropertiesDialog::XOleUIObjInfo::AddRef], rdx
test r14, r14
je 0x14005047a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r10d, r10d
cmp dword [rsp + 0x80], r10d
jl 0x140050626
mov r14, qword [rsp + reloc.MFC42u.dll_CDocObjectServer::XOleDocument::AddRef]
mov rax, qword [rsp + 0x418]
mov byte [rax + r14 - 1], r10b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
xor r10d, r10d
cmp byte [r14], r10b
je 0x14005061c
mov rdx, r14
mov rax, r13
inc rax
cmp word [r14 + rax*2], r10w
jne 0x1400504c1
lea r14, [r14 + rax*2]
mov eax, dword [rsp + 0x60]
lea rcx, [rax + rax*2]
lea rax, [0x1400fee40]
lea r8, [rax + rcx*8]
mov qword [rsp + 0x68], r8
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
xor r10d, r10d
test eax, eax
je 0x140050626
mov ecx, r10d
mov dword [rsp + 0x88], ecx
mov r8, qword [rsp + 0x68]
mov rax, qword [r8]
mov edx, 0x5a4d
cmp word [rax], dx
je 0x14005052a
mov ecx, 0xc000007b
mov dword [rsp + 0x88], ecx
jmp 0x140050579
movsxd rdx, dword [rax + 0x3c]
cmp edx, 0x10000000
jae 0x14005051c
add rdx, qword [r8]
cmp rdx, qword [r8]
jb 0x14005051c
cmp dword [rdx], 0x4550
jne 0x14005051c
movzx eax, word [rdx + 0x18]
mov r9d, AFX_MODULE_STATE::AFX_MODULE_STATE
sub ax, r9w
mov r9d, 0xfeff
test r9w, ax
je 0x140050567
mov ecx, 0xc000000d
jmp 0x140050521
mov rax, qword [rdx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rdx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r14 + 2]
mov dword [rsp + 0x80], eax
add r14, 6
mov edx, r10d
mov dword [rsp + 0x8c], edx
test eax, eax
je 0x14005060e
mov r9, r14
mov rax, r13
inc rax
cmp byte [r14 + rax], r10b
jne 0x14005059c
inc r14
add r14, rax
test ecx, ecx
js 0x1400505ee
mov rdx, r9
mov rcx, qword [r8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
xor r10d, r10d
test rax, rax
je 0x14005061c
mov ecx, dword [rsp + 0xd8]
lea rdx, [0x1400f80a0]
mov qword [rdx + rcx*8], rax
mov ecx, dword [rsp + 0x88]
mov r8, qword [rsp + 0x68]
mov edx, dword [rsp + 0x8c]
mov eax, 1
add dword [rsp + 0xd8], eax
add edx, eax
mov dword [rsp + 0x8c], edx
cmp edx, dword [rsp + 0x80]
jb 0x140050596
jmp 0x140050613
mov eax, 1
add dword [rsp + 0x60], eax
jmp 0x1400504b2
mov r14d, dword [rsp + 0x88]
jmp 0x14005062c
mov r14d, 0xc000007a
cmp qword [rsp + reloc.MFC42u.dll_CDocObjectServer::XOleDocument::AddRef], r10
je 0x14005065e
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + reloc.MFC42u.dll_CDocObjectServer::XOleDocument::AddRef]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r10d, r10d
test r14d, r14d
jns 0x1400506cc
lea r14, [0x1400fee40]
mov eax, 4
mov qword [rsp + 0x68], rax
mov rcx, qword [r14]
test rcx, rcx
je 0x140050690
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rsp + 0x68]
xor r10d, r10d
add r14, 0x18
sub rax, 1
mov qword [rsp + 0x68], rax
jne 0x140050674
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
mov r8d, CGopherConnection::CGopherConnection
lea rdx, [0x1400a92a0]
lea rcx, [0x1400f80a0]
call sub.msvcrt.dll_memcpy
jmp 0x1400506df
mov eax, dword [0x1400ff70c]
mov edx, 1
add eax, edx
mov dword [0x1400ff70c], eax
xor eax, eax
xchg dword [0x1400ff710], eax
xor edx, edx
lea r8d, [rdx + 0x70]
lea rcx, [rsp + 0xa00]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0xa90], rax
mov eax, edi
mov ecx, SafeArrayGetDim
and eax, ecx
mov dword [rsp + 0xd8], eax
mov eax, edi
shr eax, 4
and ax, cx
mov word [rsp + 0x1030], ax
mov eax, edi
shr eax, 8
and ax, cx
mov word [rsp + 0x1032], ax
shr edi, 0xc
and di, cx
mov word [rsp + 0x1034], di
xor edx, edx
xor ecx, ecx
mov r8d, reloc.MFC42u.dll_COleDropTarget::XDropTarget::AddRef
mov rax, qword [0x1400f8198]
call qword [str._E_t_]
mov qword [rsp + 0x68], rax
xor ecx, ecx
test rax, rax
jne 0x1400507a3
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
xor edx, edx
test eax, eax
cmovle r14d, eax
mov dword [rsp + 0xc8], 0xffffff
test r14d, r14d
js 0x1400515df
mov r14d, 0x80004005
jmp 0x1400515df
mov qword [rsp + COleControl::XPointerInactive::AddRef], rcx
mov qword [rsp + COlePropertyPage::XPropNotifySink::AddRef], rcx
mov qword [rsp + CToolBar::AddReplaceBitmap], rcx
mov qword [rsp + CObList::AddTail], rcx
mov qword [rsp + 0x440], rcx
mov qword [rsp + 0x448], rcx
mov r14d, ecx
mov dword [rsp + 0x228], ecx
lea r9, [rsp + 0x228]
xor r8d, r8d
lea rdx, [rsp + 0x22c]
lea ecx, [r8 + 8]
mov rax, qword [0x1400f8140]
call qword [str._E_t_]
test eax, eax
jne 0x140050836
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x1400509c0
mov r14d, 0x80004005
jmp 0x1400509c0
mov edi, dword [rsp + 0x228]
add rdi, rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
lea rcx, [rsp + 0x440]
call fcn.140090a0c
xor eax, eax
test rdi, rdi
jne 0x14005088a
mov qword [rsp + 0x440], rax
mov r14d, 0x8007000e
jmp 0x1400509c0
mov qword [rsp + 0x440], rdi
mov edi, dword [rsp + 0x22c]
inc edi
shl rdi, 2
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
lea rcx, [rsp + 0x448]
call fcn.140090a0c
xor eax, eax
test rdi, rdi
jne 0x1400508e0
mov qword [rsp + 0x448], rax
jmp 0x14005087f
mov qword [rsp + 0x448], rdi
lea r9, [rsp + 0x228]
mov r8, qword [rsp + 0x440]
lea rdx, [rsp + 0x22c]
mov ecx, 8
mov rax, qword [0x1400f8140]
call qword [str._E_t_]
xor edx, edx
test eax, eax
je 0x140050805
mov rdi, qword [rsp + 0x440]
mov rcx, qword [rsp + 0x448]
mov qword [rsp + 0x78], rcx
mov dword [rsp + 0x88], edx
cmp dword [rsp + 0x22c], edx
jbe 0x140050992
xor edx, edx
mov rcx, rdi
mov rax, qword [0x1400f8150]
call qword [str._E_t_]
mov rcx, qword [rsp + 0x78]
mov dword [rcx], eax
mov rax, r13
xor edx, edx
inc rax
cmp word [rdi + rax*2], dx
jne 0x14005095f
lea rdi, [rdi + rax*2]
add rdi, 2
add rcx, 4
mov qword [rsp + 0x78], rcx
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp eax, dword [rsp + 0x22c]
jb 0x140050941
mov dword [rcx], reloc.MFC42u.dll_COleControl::XOleCache::AddRef
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x448], rdx
mov qword [rsp + COleControl::XPointerInactive::AddRef], rax
mov eax, dword [rsp + 0x22c]
inc eax
mov dword [rsp + 0x88], eax
lea rcx, [rsp + 0x448]
call fcn.140090a0c
lea rcx, [rsp + 0x440]
call fcn.140090a0c
xor r11d, r11d
test r14d, r14d
js 0x14005126d
mov dword [rsp + 0x60], r11d
xor r14d, r14d
mov r9d, r14d
lea r10, [0x1400d3ad0]
cmp dword [rsp + 0x88], r14d
jbe 0x140050a45
mov r8d, r14d
mov rax, qword [rsp + 0x420]
mov edx, r14d
mov rdi, r10
mov ecx, dword [rdi]
cmp dword [r8 + rax], ecx
je 0x140050a3e
mov ecx, 1
add edx, ecx
add rdi, 4
cmp edx, 0x26
jb 0x140050a13
add r9d, ecx
add r8, 4
cmp r9d, dword [rsp + 0x88]
jae 0x140050a45
jmp 0x140050a0d
mov r11d, edx
mov dword [rsp + 0x60], edx
mov edi, r11d
mov dword [rsp + 0x88], r14d
xor r9d, r9d
lea r8d, [r9 + 0x55]
lea rdx, [rsp + 0x1040]
mov ecx, dword [r10 + rdi*4]
mov rax, qword [0x1400f8148]
call qword [str._E_t_]
test eax, eax
je 0x140050ac1
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea r8, [rsp + 0xb20]
lea edx, [r9 + 0x48]
lea rcx, [rsp + 0x1040]
mov rax, qword [0x1400f8130]
call qword [str._E_t_]
mov r9d, 1
test eax, eax
jle 0x140050ac7
mov r14d, dword [rsp + 0xb2c]
shr r14d, 0x1b
and r14d, r9d
mov dword [rsp + 0x88], r14d
xor r14d, r14d
jmp 0x140050ac7
mov r9d, 1
lea rcx, str.Segoe_UI_Light
lea rdx, [rsp + 0xf90]
mov r8d, 0x13
mov qword [rdx], rcx
mov rax, r13
inc rax
cmp word [rcx + rax*2], r14w
jne 0x140050ae2
lea rcx, [rcx + rax*2]
add rcx, 2
add rdx, 8
sub r8, r9
jne 0x140050adc
lea rcx, [rdi + rdi*2]
lea rdx, [0x140000000]
movzx eax, byte [rdx + rcx + 0xd3b70]
mov rax, qword [rsp + rax*8 + 0xf90]
mov qword [rsp + 0x78], rax
mov qword [rsp + Ordinal_1463], rax
movzx eax, byte [rdx + rcx + 0xd3b71]
mov rax, qword [rsp + rax*8 + 0xf90]
mov qword [rsp + 0xa0], rax
mov qword [rsp + Ordinal_1471], rax
movzx eax, byte [rdx + rcx + 0xd3b72]
mov rdi, qword [rsp + rax*8 + 0xf90]
mov qword [rsp + 0xc0], rdi
mov qword [rsp + reloc.MFC42u.dll_Ordinal_1472], rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
xor edx, edx
mov r8d, 0x1c90
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov r10, rax
mov qword [rsp + 0x70], rax
xor r11d, r11d
test rax, rax
jne 0x140050ba3
mov r14d, 0x8007000e
jmp 0x14005129a
mov dword [rsp + 0x80], r11d
or dword [rsp + 0x8c], 0xffffffff
mov edi, r11d
mov dword [rsp + 0x230], r11d
mov dword [rsp + 0xe0], r11d
add rax, 7
mov qword [rsp + 0x90], rax
lea rcx, [0x1400d1e32]
mov qword [rsp + 0xd0], 0x392
movzx r9d, byte [rcx - 2]
shl r9d, 8
movzx eax, byte [rcx - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rcx]
or r9d, eax
shl r9d, 8
movzx eax, byte [rcx + 1]
or r9d, eax
movzx r8d, byte [rcx + 2]
shl r8d, 8
movzx eax, byte [rcx + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 5]
or r8d, eax
xor r11d, r9d
xor edi, r8d
add rcx, 8
mov qword [rsp + 0xb0], rcx
xor edi, r11d
xor edi, 0xac987321
lea eax, [rdi + 0x54969fa2]
rol eax, 5
mov ecx, edi
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor edi, eax
imul ecx, edi, 0x605e
mov eax, edi
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r11d, ecx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r11d, eax
mov edx, r11d
ror edx, 6
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
mov ecx, r11d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov eax, edi
mov edx, 0xab69605e
xor eax, edx
ror eax, 0xc
mov ecx, edi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor ecx, edi
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea edi, [r11 - 0x7f1]
xor edi, ecx
xor edi, edx
mov eax, edi
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, edi
shr eax, 2
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor edi, ecx
mov edx, edi
ror edx, 9
mov eax, edi
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 5
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor edi, ecx
mov edx, edi
xor edx, r11d
xor edx, 0xac987321
mov eax, edx
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor edi, ecx
lea eax, [rdi - 0x7f1137f]
ror eax, 1
mov ecx, edi
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor edx, eax
lea eax, [rdx - 0x54969fa2]
rol eax, 3
mov ecx, edx
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor edi, ecx
lea eax, [rdi - 0x54969fa2]
rol eax, 0xf
mov ecx, edi
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor edx, eax
mov eax, edx
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, edx
shr eax, 3
xor ecx, eax
xor edi, ecx
mov eax, edi
xor eax, 0x7f1137f
rol eax, 4
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, dword [rsp + 0x80]
xor edx, ecx
mov dword [rsp + 0xe0], edx
xor edi, dword [rsp + 0x8c]
mov dword [rsp + 0x230], edi
mov rcx, qword [rsp + 0x90]
mov byte [rcx - 4], dl
ror dword [rsp + 0xe0], 8
mov al, byte [rsp + 0x230]
mov byte [rcx], al
ror dword [rsp + 0x230], 8
mov al, byte [rsp + 0xe0]
mov byte [rcx - 5], al
ror dword [rsp + 0xe0], 8
mov al, byte [rsp + 0x230]
mov byte [rcx - 1], al
ror dword [rsp + 0x230], 8
mov al, byte [rsp + 0xe0]
mov byte [rcx - 6], al
ror dword [rsp + 0xe0], 8
mov al, byte [rsp + 0x230]
mov byte [rcx - 2], al
ror dword [rsp + 0x230], 8
mov al, byte [rsp + 0xe0]
mov byte [rcx - 7], al
mov al, byte [rsp + 0x230]
mov byte [rcx - 3], al
mov r11d, dword [rsp + 0xe0]
ror r11d, 8
mov dword [rsp + 0xe0], r11d
mov edi, dword [rsp + 0x230]
ror edi, 8
mov dword [rsp + 0x230], edi
mov dword [rsp + 0x80], r9d
mov dword [rsp + 0x8c], r8d
add rcx, 8
mov qword [rsp + 0x90], rcx
sub qword [rsp + 0xd0], 1
mov rcx, qword [rsp + 0xb0]
jne 0x140050be5
xor r11d, r11d
mov eax, r11d
xorps xmm1, xmm1
mov ecx, 0x1c90
movdqu xmm0, xmmword [rax + r10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x10
cmp rax, rcx
jb 0x140050f5c
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
movzx eax, al
cmp rax, qword [0x1400d3ac0]
je 0x140050fbb
mov r14d, 0xc004d501
jmp 0x140050fd3
mov qword [rsp + COlePropertyPage::XPropNotifySink::AddRef], r10
mov r10, r11
mov qword [rsp + 0x70], r11
mov qword [rsp + CToolBar::AddReplaceBitmap], rcx
test r10, r10
je 0x140050ffd
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r14d, r14d
js 0x14005129a
mov rdx, qword [rsp + 0x428]
lea rdi, [rsp + 0xf20]
mov r8d, 6
mov r9d, dword [rsp + 0x60]
mov ecx, r11d
cmp r9d, ecx
jne 0x14005102c
mov qword [rdi], rdx
mov rax, r13
inc rax
cmp byte [rdx + rax], r11b
jne 0x14005102f
inc rax
add rdx, rax
mov eax, 1
add ecx, eax
cmp ecx, 0x26
jb 0x140051024
add rdi, 8
sub r8, rax
jne 0x140051021
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 0x18]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
lea rcx, [rsp + 0x438]
call fcn.140090a0c
xor r11d, r11d
lea r9d, [r11 + 1]
test rdi, rdi
jne 0x1400510a3
mov qword [rsp + CObList::AddTail], r11
mov r14d, 0x8007000e
jmp 0x1400512a0
mov qword [rsp + CObList::AddTail], rdi
xor eax, eax
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov edx, r11d
mov dword [rsp + 0x60], edx
mov rdi, r11
mov qword [rsp + 0x70], r11
lea rcx, [rsp + 0x1030]
mov qword [rsp + 0x90], rcx
mov eax, r11d
movzx r8d, word [rcx]
lea rcx, [0x1400d3be8]
cmp r8w, word [rcx]
je 0x1400510fc
add eax, r9d
add rcx, 2
cmp eax, 6
jb 0x1400510e5
jmp 0x1400511eb
mov rcx, qword [rsp + rax*8 + 0xf20]
mov qword [rsp + 0xd0], rcx
mov rax, r13
inc rax
cmp byte [rcx + rax], r11b
jne 0x14005110f
add r9d, eax
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], r11
mov r8, rcx
xor edx, edx
mov ecx, 0xfde9
mov rax, qword [0x1400f8160]
call qword [str._E_t_]
mov dword [rsp + 0x80], eax
test eax, eax
je 0x140051240
movsxd rdi, eax
add rdi, rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x438]
mov rdi, qword [rsp + 0x70]
mov qword [rcx + rdi], rax
mov rcx, qword [rsp + 0x438]
xor r11d, r11d
cmp qword [rcx + rdi], r11
je 0x140050b98
mov rax, r13
mov r8, qword [rsp + 0xd0]
inc rax
cmp byte [r8 + rax], r11b
jne 0x1400511a2
mov r9d, 1
add r9d, eax
mov edx, dword [rsp + 0x80]
mov dword [rsp + 0x28], edx
mov rdx, qword [rcx + rdi]
mov qword [rsp + 0x20], rdx
xor edx, edx
mov ecx, 0xfde9
mov rax, qword [0x1400f8160]
call qword [str._E_t_]
xor r11d, r11d
test eax, eax
je 0x140051240
mov edx, dword [rsp + 0x60]
lea r9d, [r11 + 1]
add edx, r9d
mov dword [rsp + 0x60], edx
mov rcx, qword [rsp + 0x90]
add rcx, 2
mov qword [rsp + 0x90], rcx
add rdi, 8
mov qword [rsp + 0x70], rdi
cmp edx, 3
jb 0x1400510d7
mov rax, qword [rsp + 0x438]
mov qword [rsp + CObList::AddTail], r11
mov qword [rsp + CDocObjectServer::XOleCommandTarget::AddRef], rax
mov eax, dword [rsp + 0x88]
mov dword [rsp + CDragListBox::DrawInsert], eax
jmp 0x1400512a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
xor r11d, r11d
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x14005129a
mov r14d, 0x80004005
jmp 0x14005129a
mov rax, qword [rsp + reloc.MFC42u.dll_Ordinal_1472]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x5b8]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x5b0]
mov qword [rsp + 0x78], rax
mov r9d, 1
cmp qword [rsp + 0x438], r11
je 0x140051350
mov rdx, r11
mov qword [rsp + 0x70], rdx
mov eax, 3
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x438]
cmp qword [rcx + rdx], r11
je 0x140051336
test rcx, rcx
jne 0x1400512d9
mov rcx, r11
mov rdi, qword [rcx + rdx]
mov rcx, r13
inc rcx
cmp word [rdi + rcx*2], r11w
jne 0x1400512e0
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x438]
mov rdi, qword [rax + rdx]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rdx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x90]
xor r11d, r11d
lea r9d, [r11 + 1]
add rdx, 8
mov qword [rsp + 0x70], rdx
sub rax, r9
mov qword [rsp + 0x90], rax
jne 0x1400512c3
mov rdi, qword [rsp + 0x428]
test rdi, rdi
je 0x140051369
xor eax, eax
mov rcx, qword [rsp + 0x430]
rep stosb byte [rdi], al
lea rcx, [rsp + 0x438]
call fcn.140090a0c
lea rcx, [rsp + 0x428]
call fcn.140090a0c
lea rcx, [rsp + 0x420]
call fcn.140090a0c
xor r9d, r9d
test r14d, r14d
js 0x1400515be
mov rax, qword [rsp + 0x408]
mov rcx, qword [rax]
mov qword [rsp + 0xa08], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0xa10], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + COleControl::XDataObject::DUnadvise], rcx
xor eax, eax
mov qword [rsp + Ordinal_1425], rax
mov qword [rsp + Ordinal_1436], rax
mov edi, r9d
mov r14d, r9d
mov dword [rsp + Ordinal_1425], 0x10
lea r8, [rsp + 0x590]
xor edx, edx
lea ecx, [rax + 0x42]
mov rax, qword [0x1400f8208]
call qword [str._E_t_]
test eax, eax
jne 0x140051432
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x14005143c
mov r14d, 0x80004005
jmp 0x14005143c
mov edi, dword [rsp + reloc.MFC42u.dll_Ordinal_1428]
and edi, 1
mov dword [rsp + CDragListBox::DrawInsert], edi
test r14d, r14d
js 0x1400515be
mov r14d, dword [rsp + 0xd8]
mov ecx, r14d
sub ecx, 1
je 0x140051493
sub ecx, 1
mov dword [rsp + 0x88], 0x2a
je 0x140051486
cmp ecx, 1
jne 0x1400514bc
mov eax, 0xe1
mov dword [rsp + 0xc8], eax
mov dword [rsp + 0x84], eax
jmp 0x1400514bc
mov dword [rsp + 0xc8], SafeArrayGetDim
jmp 0x1400514b1
mov r14d, 0x2a
mov dword [rsp + 0x88], r14d
mov dword [rsp + 0xc8], r14d
mov r14d, dword [rsp + 0xd8]
mov dword [rsp + 0x84], SafeArrayGetDim
mov edi, 0x60
mov dword [rsp + 0x60], edi
xor edx, edx
lea r8d, [rdi + 0x7c]
lea rcx, [rsp + 0xe40]
call sub.msvcrt.dll_memset
lea eax, [rdi + 0x7c]
mov word [rsp + 0xe84], ax
lea r8, [rsp + 0xe40]
or edx, 0xffffffff
xor ecx, ecx
mov rax, qword [0x1400f8180]
call qword [str._E_t_]
xor ecx, ecx
test eax, eax
je 0x14005153b
movzx edi, word [rsp + 0xee6]
mov qword [rsp + 0xaa0], rcx
mov eax, dword [rsp + 0xeec]
mov dword [rsp + 0xaa8], eax
mov eax, dword [rsp + 0xef0]
mov dword [rsp + 0xaac], eax
lea eax, [rcx + 0x60]
cmp edi, eax
cmovb edi, eax
mov dword [rsp + 0x60], edi
mov eax, 1
cmp r14d, eax
mov rax, qword [rsp + 0xc0]
cmove rax, qword [rsp + 0x78]
mov qword [rsp + 0xc0], rax
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rsp + 0xd20]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, reloc.MFC42u.dll_COleDropTarget::XDropTarget::AddRef
mov rax, qword [0x1400f8198]
call qword [str._E_t_]
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x1400517bb
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x1400515be
mov r14d, 0x80004005
mov dword [rsp + 0xc8], 0xffffff
mov rdx, qword [rsp + 0x68]
xor ecx, ecx
mov rax, qword [0x1400f8200]
call qword [str._E_t_]
xor edx, edx
mov ecx, 1
xor eax, eax
lock cmpxchg dword [0x1400ff710], ecx
jne 0x1400515e4
mov eax, dword [0x1400ff70c]
test eax, eax
jle 0x14005166c
sub eax, ecx
mov dword [0x1400ff70c], eax
jne 0x14005166c
lea rdi, [0x1400fee40]
mov eax, 4
mov qword [rsp + 0x68], rax
mov rcx, qword [rdi]
test rcx, rcx
je 0x140051630
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rsp + 0x68]
xor edx, edx
add rdi, 0x18
sub rax, 1
mov qword [rsp + 0x68], rax
jne 0x140051615
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
mov r8d, CGopherConnection::CGopherConnection
lea rdx, [0x1400a92a0]
lea rcx, [0x1400f80a0]
call sub.msvcrt.dll_memcpy
xor edx, edx
mov eax, edx
xchg dword [0x1400ff710], eax
lea rcx, [rsp + 0x408]
call fcn.140090a0c
test r14d, r14d
js 0x140053e17
mov rdi, qword [rsp + 0xa90]
mov qword [rsp + 0x450], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x7d0]
call sub.msvcrt.dll_memset
mov edx, 7
lea r14d, [rdx - 6]
mov rcx, qword [rsp + 0xb8]
mov rax, qword [0x1400f80f0]
call qword [str._E_t_]
xor ecx, ecx
test rax, rax
je 0x14005171c
lea r8, [rsp + 0x7d0]
lea edx, [rcx + 0x68]
mov rcx, rax
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
xor ecx, ecx
test eax, eax
je 0x14005171c
lea eax, [rcx + 0x20]
cmp word [rsp + 0x7e2], ax
jne 0x14005171c
cmp qword [rsp + reloc.MFC42u.dll_CSocket::ConnectHelper], rcx
je 0x14005171c
cmp dword [rsp + 0x7d4], ecx
jle 0x14005171c
cmp dword [rsp + 0x7d8], ecx
jg 0x14005171f
mov r14d, ecx
mov dword [rsp + reloc.MFC42u.dll_CString::CString], r14d
test r14d, r14d
mov r14d, 1
jne 0x140051740
cmp dword [rsp + 0xd8], r14d
jne 0x14005216c
mov r8d, dword [rsp + 0x454]
mov edx, edi
lea rcx, [rsp + 0xa3c]
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov r8d, dword [rsp + 0x454]
mov edx, edi
lea rcx, [rsp + 0xa4c]
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov edi, dword [rsp + 0xd8]
cmp edi, r14d
jne 0x140052173
mov eax, dword [rsp + 0xa04]
neg eax
sbb ecx, ecx
not ecx
and ecx, 0xb26720
mov rax, qword [0x1400f80c8]
call qword [str._E_t_]
mov qword [rsp + 0x118], rax
jmp 0x140052173
mov r8d, 0x48
mov edx, edi
mov ecx, dword [rsp + 0xc8]
mov rax, qword [0x1400f8158]
call qword [str._E_t_]
neg eax
mov dword [rsp + CFontPropPage::GetMessageMap], eax
mov dword [rsp + CSplitterWnd::GetMessageMap], 0x190
mov byte [rsp + reloc.MFC42u.dll_CSplitterWnd::GetMessageMap], 5
mov r8, qword [rsp + 0xc0]
mov edx, 0x20
lea rcx, [rsp + 0xd3c]
call fcn.1400098b8
lea rcx, [rsp + 0xd20]
mov rax, qword [0x1400f80c0]
call qword [str._E_t_]
test rax, rax
jne 0x140051851
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x140051859
mov r14d, 0x80004005
jmp 0x140051859
mov qword [rsp + reloc.MFC42u.dll_COleServerItem::XDataObject::DUnadvise], rax
mov rdx, qword [rsp + 0x78]
xor ecx, ecx
mov rax, qword [0x1400f8200]
call qword [str._E_t_]
test r14d, r14d
js 0x1400515be
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rsp + 0xd80]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, reloc.MFC42u.dll_COleDropTarget::XDropTarget::AddRef
mov rax, qword [0x1400f8198]
call qword [str._E_t_]
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x1400518ce
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
xor r9d, r9d
jmp 0x1400515ad
mov r8d, 0x48
mov edx, edi
mov ecx, dword [rsp + 0x84]
mov rax, qword [0x1400f8158]
call qword [str._E_t_]
neg eax
mov dword [rsp + 0xd80], eax
mov dword [rsp + CRichEditCtrl::GetParaFormat], 0x190
mov byte [rsp + CDaoQueryDef::GetParameterInfo], 5
mov r8, qword [rsp + 0xc0]
mov edx, 0x20
lea rcx, [rsp + reloc.MFC42u.dll_CDaoQueryDef::GetParameterInfo]
call fcn.1400098b8
lea rcx, [rsp + 0xd80]
mov rax, qword [0x1400f80c0]
call qword [str._E_t_]
test rax, rax
jne 0x140051964
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x14005196c
mov r14d, 0x80004005
jmp 0x14005196c
mov qword [rsp + 0xa28], rax
mov rdx, qword [rsp + 0x78]
xor ecx, ecx
mov rax, qword [0x1400f8200]
call qword [str._E_t_]
xor r9d, r9d
test r14d, r14d
js 0x1400515be
mov ecx, r9d
mov edi, r9d
mov r8d, dword [rsp + 0xd8]
mov edx, r8d
sub edx, 1
je 0x1400519ac
sub edx, 1
je 0x1400519ef
cmp edx, 1
jne 0x1400519ba
mov ecx, dword [rsp + 0xaa8]
mov edi, dword [rsp + 0xaac]
mov dword [rsp + 0xa98], ecx
mov dword [rsp + 0xa9c], edi
mov edx, 1
cmp r8d, edx
je 0x140051a2e
lea eax, [r8 - 2]
cmp eax, edx
ja 0x140051a02
mov edx, r9d
mov dword [rsp + 0x88], r9d
mov dword [rsp + 0x80], r9d
jmp 0x140051a3e
mov eax, dword [rsp + 0xaa8]
cdq
and edx, 3
lea ecx, [rdx + rax]
sar ecx, 2
jmp 0x1400519ba
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x88], eax
mov eax, dword [rsp + 0xe0]
mov edx, dword [rsp + 0xe0]
jmp 0x140051a41
mov edx, 0x96
mov dword [rsp + 0x80], 0x20
mov eax, r9d
mov dword [rsp + 0xc8], edx
mov dword [rsp + 0x84], eax
sub ecx, edx
sub ecx, eax
mov dword [rsp + 0x8c], ecx
mov dword [rsp + reloc.MFC42u.dll_CCmdTarget::EndWaitCursor], ecx
mov dword [rsp + CPropertySheet::EnableStackedTabs], ecx
mov rdi, qword [rsp + 0xa08]
mov r14d, r9d
mov rdx, qword [rsp + reloc.MFC42u.dll_COleServerItem::XDataObject::DUnadvise]
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], CDaoRecordset::GetFieldValue
lea r9, [rsp + 0xa3c]
mov r8d, r13d
mov rdx, rdi
mov rdi, qword [rsp + 0x68]
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
xor r9d, r9d
test eax, eax
mov eax, 0x80004005
cmove r14d, eax
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140051af2
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
xor r9d, r9d
test r14d, r14d
js 0x1400515be
mov rdi, qword [rsp + 0xa10]
mov r14d, r9d
mov rdx, qword [rsp + 0xa28]
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], CDaoRecordset::GetFieldValue
lea r9, [rsp + 0xa4c]
mov r8d, r13d
mov rdx, rdi
mov rdi, qword [rsp + 0x68]
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
xor r9d, r9d
test eax, eax
mov eax, 0x80004005
cmove r14d, eax
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140051b85
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
xor r9d, r9d
test r14d, r14d
js 0x1400515be
mov eax, dword [rsp + 0xd8]
add eax, 0xfffffffe
mov ecx, 1
cmp eax, ecx
mov eax, dword [rsp + 0xa44]
ja 0x140051bb6
mov edi, dword [rsp + reloc.MFC42u.dll_CCmdTarget::EndWaitCursor]
cmp eax, edi
cmovg edi, eax
jmp 0x140051bbd
mov edi, dword [rsp + 0x8c]
mov r8d, dword [rsp + 0x88]
lea rcx, [rsp + 0xa3c]
cmp dword [rsp + 0xa00], r9d
je 0x140051c01
mov r14d, dword [rsp + 0x84]
mov edx, r14d
sub edx, eax
add edx, edi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
sub r14d, dword [rsp + reloc.MFC42u.dll_CCmdTarget::EndWaitCursor]
lea edx, [rdi + r14]
jmp 0x140051c1c
mov edx, dword [rsp + 0xc8]
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov edx, dword [rsp + 0xc8]
mov r8d, dword [rsp + 0xa48]
add r8d, dword [rsp + 0x80]
lea rcx, [rsp + 0xa4c]
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov ecx, dword [rsp + 0xd8]
lea eax, [rcx - 2]
mov edx, 1
cmp eax, edx
jbe 0x140051f4e
cmp ecx, edx
jne 0x140051f6e
mov eax, 0xffffff
mov dword [rsp + 0xc8], eax
mov dword [rsp + 0xa38], eax
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rsp + 0xde0]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, reloc.MFC42u.dll_COleDropTarget::XDropTarget::AddRef
mov rax, qword [0x1400f8198]
call qword [str._E_t_]
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x140051cdf
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
xor ecx, ecx
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x1400515c9
mov r14d, 0x80004005
jmp 0x1400515c9
mov r8d, 0x48
mov edx, dword [rsp + 0x60]
lea ecx, [r8 - 0x3d]
mov rax, qword [0x1400f8158]
call qword [str._E_t_]
neg eax
mov dword [rsp + CDaoQueryDef::GetReturnsRecords], eax
mov dword [rsp + 0xdf0], 0x190
mov byte [rsp + 0xdfa], 5
mov r8, qword [rsp + 0xa0]
mov edx, 0x20
lea rcx, [rsp + 0xdfc]
call fcn.1400098b8
lea rcx, [rsp + 0xde0]
mov rax, qword [0x1400f80c0]
call qword [str._E_t_]
test rax, rax
jne 0x140051d74
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x140051d7c
mov r14d, 0x80004005
jmp 0x140051d7c
mov qword [rsp + CWinApp::Enable3dControls], rax
mov rdx, qword [rsp + 0x78]
xor ecx, ecx
mov rax, qword [0x1400f8200]
call qword [str._E_t_]
xor ecx, ecx
test r14d, r14d
js 0x1400515c9
mov dword [rsp + COleControl::XDataObject::EnumFormatEtc], edi
mov rdi, qword [rsp + 0xa18]
mov r14d, ecx
mov rdx, qword [rsp + 0xa30]
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], AfxDeleteObject
lea r9, [rsp + 0xa5c]
mov r8d, r13d
mov rdx, rdi
mov rdi, qword [rsp + 0x68]
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
test eax, eax
mov eax, 0x80004005
cmove r14d, eax
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140051e26
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
test r14d, r14d
js 0x1400515c9
mov eax, dword [rsp + 0xa64]
add eax, 0x18
mov ecx, 0x5a
cmp eax, ecx
cmovl eax, ecx
mov dword [rsp + COleControl::XDataObject::EnumFormatEtc], eax
mov dword [rsp + COleServerDoc::XOleObject::EnumVerbs], 0x20
lea r14d, [rcx + 6]
mov r8d, r14d
mov edi, dword [rsp + 0x60]
mov edx, edi
mov ecx, dword [rsp + 0xa5c]
mov rax, qword [0x1400f8158]
call qword [str._E_t_]
mov dword [rsp + COleServerDoc::XDataObject::EnumDAdvise], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rsp + 0xa60]
mov rax, qword [0x1400f8158]
call qword [str._E_t_]
mov dword [rsp + COleControl::XDataObject::EnumFormatEtc], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rsp + 0xa64]
mov rax, qword [0x1400f8158]
call qword [str._E_t_]
mov dword [rsp + COleControl::XDataObject::EnumFormatEtc], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rsp + 0xa68]
mov rax, qword [0x1400f8158]
call qword [str._E_t_]
mov dword [rsp + COleServerDoc::XOleObject::EnumVerbs], eax
xor eax, eax
mov r8d, dword [rsp + 0xa58]
lea rcx, [rsp + 0xa5c]
add r8d, 0x24
cmp dword [rsp + 0xa00], eax
mov rax, qword [fcn.14000ce20]
je 0x140051f28
mov edx, dword [rsp + 0xa3c]
cmp edx, dword [rsp + 0xa4c]
cmovge edx, dword [rsp + 0xa4c]
call qword [str._E_t_]
mov ecx, dword [rsp + 0xd8]
jmp 0x140051f79
mov edx, dword [rsp + 0xa44]
cmp edx, dword [rsp + reloc.MFC42u.dll_CCmdTarget::EndWaitCursor]
cmovle edx, dword [rsp + reloc.MFC42u.dll_CCmdTarget::EndWaitCursor]
sub edx, dword [rsp + 0xa64]
add edx, dword [rsp + 0xa5c]
jmp 0x140051f19
mov dword [rsp + 0xa98], edi
mov eax, dword [rsp + 0xa58]
mov dword [rsp + 0xa9c], eax
mov dword [rsp + 0xa38], 0xffa8a8a8
mov dword [rsp + 0xc8], 0xffffff
mov eax, dword [rsp + 0xa00]
mov dword [rsp + 0x84], eax
mov r14d, dword [rsp + 0xa9c]
mov edi, dword [rsp + 0xa98]
sub ecx, 1
je 0x14005215d
sub ecx, 1
je 0x140052085
cmp ecx, 1
jne 0x14005207b
xor edx, edx
lea r8d, [rcx + 0x27]
lea rcx, [rsp + 0xb40]
call sub.msvcrt.dll_memset
mov edx, 1
xor ecx, ecx
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov dword [rsp + 0xb40], 0x28
lea rdx, [rsp + 0xb40]
mov rcx, rax
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
xor ecx, ecx
test eax, eax
je 0x14005207b
lea rdx, [rsp + reloc.MFC42u.dll_CBlobProperty::GetBlob]
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
lea rdx, [rsp + 0xb5c]
xor ecx, ecx
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov eax, dword [rsp + 0xb5c]
sub eax, edi
imul ecx, eax, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov rcx, qword [rsp + 0xb5c]
shr rcx, 0x20
sub ecx, r14d
imul ecx, ecx, 0x32
mov dword [rsp + 0xa90], edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rsp + 0xa94], edx
xor eax, eax
mov r14d, eax
jmp 0x1400515c9
xor edx, edx
lea r8d, [rdx + 0x28]
lea rcx, [rsp + reloc.MFC42u.dll_COleClientItem::GetCachedExtent]
call sub.msvcrt.dll_memset
mov edx, 1
xor ecx, ecx
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov dword [rsp + reloc.MFC42u.dll_COleClientItem::GetCachedExtent], 0x28
lea rdx, [rsp + reloc.MFC42u.dll_COleClientItem::GetCachedExtent]
mov rcx, rax
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
xor ecx, ecx
test eax, eax
je 0x14005207b
lea rdx, [rsp + 0xb7c]
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
lea rdx, [rsp + 0xb84]
xor ecx, ecx
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
xor eax, eax
cmp dword [rsp + 0x84], eax
mov eax, dword [rsp + 0xb84]
je 0x140052130
lea ecx, [rax + rax*4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
add edx, dword [rsp + 0xb7c]
jmp 0x140052146
sub eax, edi
imul ecx, eax, 0x5f
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rsp + 0xb84]
shr rax, 0x20
sub eax, r14d
imul ecx, eax, 0x5f
jmp 0x14005205c
xor eax, eax
mov qword [rsp + 0xa90], rax
jmp 0x14005207d
mov edi, dword [rsp + 0xd8]
mov edx, r14d
mov r14, qword [rsp + 0xb8]
mov rcx, r14
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov dword [rsp + 0x84], eax
mov eax, 0x810
mov ecx, 0x20812
xor edx, edx
cmp dword [rsp + 0xa00], edx
cmovne eax, ecx
mov dword [rsp + 0x88], eax
cmp dword [rsp + reloc.MFC42u.dll_CString::CString], edx
je 0x140052dc9
mov eax, dword [rsp + 0xa04]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + reloc.MFC42u.dll_COleServerItem::XDataObject::DUnadvise]
mov qword [rsp + 0x68], rax
mov rdi, qword [rsp + 0xa08]
mov qword [rsp + 0x78], rdi
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x760]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x6f0]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x8c], eax
xor edx, edx
lea r8d, [rax + 0x2c]
lea rcx, [rsp + 0xc60]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0xab0], rax
mov qword [rsp + CDaoWorkspace::FillWorkspaceInfo], rax
test rdi, rdi
je 0x14005226e
lea edx, [rax + 7]
mov rcx, r14
mov rax, qword [0x1400f80f0]
call qword [str._E_t_]
test rax, rax
jne 0x140052276
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
xor r14d, r14d
jmp 0x1400531c7
lea r8, [rsp + 0x760]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
test eax, eax
je 0x1400522c3
mov rax, qword [rsp + 0x778]
mov qword [rsp + 0xa0], rax
mov eax, dword [rsp + 0x764]
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x768]
mov dword [rsp + 0x8c], eax
mov rcx, r14
mov rax, qword [0x1400f80b0]
call qword [str._E_t_]
mov qword [rsp + 0xc0], rax
xor r14d, r14d
test rax, rax
je 0x140052e2e
mov r14d, dword [rsp + 0xa48]
sub r14d, dword [rsp + 0xa40]
mov edi, dword [rsp + 0xa44]
sub edi, dword [rsp + 0xa3c]
xor eax, eax
mov qword [rsp + 0x458], rax
mov dword [rsp + 0x98], eax
xor edx, edx
lea r8d, [rax + 0x2c]
lea rcx, [rsp + 0xc60]
call sub.msvcrt.dll_memset
mov dword [rsp + CGopherFileFind::GetFilePath], 0x28
mov dword [rsp + CGopherFileFind::GetFilePath], edi
neg r14d
mov dword [rsp + CGopherFileFind::GetFilePath], r14d
mov dword [rsp + reloc.MFC42u.dll_CFileFind::GetFileTitle], 0x200001
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x458]
xor r8d, r8d
lea rdx, [rsp + 0xc60]
mov rdi, qword [rsp + 0xc0]
mov rcx, rdi
mov rax, qword [0x1400f80b8]
call qword [str._E_t_]
mov r14, rax
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x1400523cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov dword [rsp + 0x98], ecx
test ecx, ecx
js 0x140052791
mov dword [rsp + 0x98], 0x80004005
jmp 0x140052791
lea r8, [rsp + 0x6f0]
mov edx, 0x68
mov rcx, r14
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
xor edx, edx
mov ecx, edx
test eax, eax
cmovne rcx, qword [rsp + 0x708]
mov qword [rsp + 0x90], rcx
mov eax, dword [rsp + 0xa44]
sub eax, dword [rsp + 0xa3c]
mov dword [rsp + CDaoWorkspace::FillWorkspaceInfo], eax
mov eax, dword [rsp + 0xa48]
sub eax, dword [rsp + 0xa40]
mov dword [rsp + CPtrList::Find], eax
mov rdx, r14
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov edx, 1
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov rdx, qword [rsp + 0x68]
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov qword [rsp + 0x68], rax
xor ecx, ecx
mov rax, qword [0x1400f8110]
call qword [str._E_t_]
mov r8, rax
lea rdx, [rsp + 0xab0]
mov rcx, rdi
mov rax, qword [0x1400f8188]
call qword [str._E_t_]
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0xab0]
mov r8d, r13d
mov rdx, qword [rsp + 0x78]
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
lea ecx, [r14 + 1]
cmp dword [rsp + 0xd8], ecx
jne 0x1400524ff
cmp dword [rsp + 0x60], r14d
je 0x1400524f5
lea ecx, [r14 + 8]
mov rax, qword [0x1400f81b8]
call qword [str._E_t_]
mov dword [rsp + 0x60], eax
jmp 0x140052507
mov dword [rsp + 0x60], 0xffffff
jmp 0x140052507
mov dword [rsp + 0x60], 0xffa8a8a8
mov eax, dword [rsp + 0xa3c]
mov r8d, eax
neg r8d
test eax, eax
cmovns r8d, r14d
mov r9d, r14d
cmovns r9d, eax
mov eax, dword [rsp + 0xa40]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, r14d
mov r10d, r14d
cmovns r10d, eax
mov eax, dword [rsp + 0xab8]
sub eax, r8d
movsxd r14, dword [rsp + 0x80]
mov r11d, r14d
sub r11d, r9d
cmp eax, r11d
cmovl r11d, eax
mov eax, dword [rsp + 0xabc]
sub eax, ecx
mov edx, dword [rsp + 0x8c]
sub edx, r10d
cmp eax, edx
cmovl edx, eax
test r11d, r11d
jle 0x14005275f
test edx, edx
jle 0x14005275f
mov eax, dword [rsp + 0xab8]
imul eax, ecx
movsxd rcx, eax
movsxd rax, r8d
add rcx, rax
mov rax, qword [rsp + 0x90]
lea rdi, [rax + rcx*4]
mov qword [rsp + 0x78], rdi
mov eax, r14d
imul eax, r10d
movsxd rcx, eax
movsxd rax, r9d
add rcx, rax
mov rax, qword [rsp + 0xa0]
lea rax, [rax + rcx*4]
mov qword [rsp + 0xa0], rax
movsxd rcx, dword [rsp + 0xab8]
shl rcx, 2
mov qword [rsp + 0x90], rcx
mov r8, r14
shl r8, 2
mov qword [rsp + 0xd0], r8
mov qword [rsp + 0xb0], rdx
mov r14d, 0x80808081
xor r9d, r9d
lea r10d, [r9 + 1]
test r11d, r11d
jle 0x140052733
lea r9, [rdi + 2]
mov r10, rax
sub r10, rdi
mov edi, r11d
mov qword [rsp + 0xf8], rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x1400526f1
movzx edi, byte [r10 + r9]
movzx r8d, dl
movzx ecx, byte [rsp + 0x60]
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
movzx ecx, byte [rsp + 0x61]
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
movzx ecx, byte [rsp + 0x62]
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
mov rdi, qword [rsp + 0xf8]
add r9, 4
sub rdi, 1
mov qword [rsp + 0xf8], rdi
jne 0x14005261f
mov rdi, qword [rsp + 0x78]
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xb0]
xor r9d, r9d
lea r10d, [r9 + 1]
add rdi, rcx
mov qword [rsp + 0x78], rdi
add rax, r8
mov qword [rsp + 0xa0], rax
sub rdx, r10
mov qword [rsp + 0xb0], rdx
jne 0x140052601
mov rdi, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x70]
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
mov rax, qword [rsp + 0x68]
xor r14d, r14d
test rax, rax
je 0x140052791
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov rcx, rdi
mov rax, qword [0x1400f80d0]
call qword [str._E_t_]
cmp dword [rsp + 0x98], r14d
jl 0x1400531c7
mov eax, dword [rsp + 0xa04]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xa28]
mov qword [rsp + 0x68], rax
mov rdi, qword [rsp + 0xa10]
mov qword [rsp + 0x78], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x610]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + reloc.MFC42u.dll_CMonikerFile::Detach]
call sub.msvcrt.dll_memset
mov qword [rsp + 0xa0], r14
mov dword [rsp + 0x80], r14d
mov dword [rsp + 0x8c], r14d
xor edx, edx
lea r8d, [rdx + 0x2c]
lea rcx, [rsp + 0xc90]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + reloc.MFC42u.dll_CDaoRecordset::Find], rax
mov qword [rsp + CObList::FindIndex], rax
test rdi, rdi
je 0x1400531c7
lea edx, [rax + 7]
mov r14, qword [rsp + 0xb8]
mov rcx, r14
mov rax, qword [0x1400f80f0]
call qword [str._E_t_]
test rax, rax
je 0x140052262
lea r8, [rsp + 0x610]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
test eax, eax
je 0x1400528b1
mov rax, qword [rsp + 0x628]
mov qword [rsp + 0xa0], rax
mov eax, dword [rsp + 0x614]
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x618]
mov dword [rsp + 0x8c], eax
mov rcx, r14
mov rax, qword [0x1400f80b0]
call qword [str._E_t_]
mov qword [rsp + 0xc0], rax
xor r14d, r14d
test rax, rax
je 0x140052e2e
mov r14d, dword [rsp + 0xa58]
sub r14d, dword [rsp + 0xa50]
mov edi, dword [rsp + reloc.MFC42u.dll_CCmdTarget::EndWaitCursor]
sub edi, dword [rsp + 0xa4c]
xor eax, eax
mov qword [rsp + AfxDeleteObject], rax
mov dword [rsp + 0x98], eax
xor edx, edx
lea r8d, [rax + 0x2c]
lea rcx, [rsp + 0xc90]
call sub.msvcrt.dll_memset
mov dword [rsp + COleDateTime::GetHour], 0x28
mov dword [rsp + COleDateTime::GetHour], edi
neg r14d
mov dword [rsp + COleDataObject::GetIDataObject], r14d
mov dword [rsp + COleDataObject::GetIDataObject], 0x200001
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x460]
xor r8d, r8d
lea rdx, [rsp + 0xc90]
mov r14, qword [rsp + 0xc0]
mov rcx, r14
mov rax, qword [0x1400f80b8]
call qword [str._E_t_]
mov rdi, rax
mov qword [rsp + 0xc0], rax
test rax, rax
jne 0x1400529be
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov dword [rsp + 0x98], ecx
test ecx, ecx
js 0x140052da3
mov dword [rsp + 0x98], 0x80004005
jmp 0x140052da3
lea r8, [rsp + reloc.MFC42u.dll_CMonikerFile::Detach]
mov edx, 0x68
mov rcx, rdi
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
xor edx, edx
mov ecx, edx
test eax, eax
cmovne rcx, qword [rsp + 0x9a8]
mov qword [rsp + 0x70], rcx
mov eax, dword [rsp + reloc.MFC42u.dll_CCmdTarget::EndWaitCursor]
sub eax, dword [rsp + 0xa4c]
mov dword [rsp + CGopherFileFind::FindFile], eax
mov eax, dword [rsp + 0xa58]
sub eax, dword [rsp + 0xa50]
mov dword [rsp + reloc.MFC42u.dll_CGopherFileFind::FindFile], eax
mov rdx, rdi
mov rcx, r14
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov edx, 1
mov rcx, r14
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov rdx, qword [rsp + 0x68]
mov rcx, r14
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov qword [rsp + 0x68], rax
xor ecx, ecx
mov rax, qword [0x1400f8110]
call qword [str._E_t_]
mov r8, rax
lea rdx, [rsp + reloc.MFC42u.dll_CDaoRecordset::Find]
mov rcx, r14
mov rax, qword [0x1400f8188]
call qword [str._E_t_]
xor edi, edi
mov qword [rsp + 0x28], rdi
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x20], eax
lea r9, [rsp + reloc.MFC42u.dll_CDaoRecordset::Find]
mov r8d, r13d
mov rdx, qword [rsp + 0x78]
mov rcx, r14
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
lea eax, [rdi + 1]
cmp dword [rsp + 0xd8], eax
jne 0x140052af2
cmp dword [rsp + 0x60], edi
je 0x140052aeb
lea ecx, [rdi + 8]
mov rax, qword [0x1400f81b8]
call qword [str._E_t_]
mov edx, eax
mov dword [rsp + 0xc8], eax
mov dword [rsp + 0xd8], eax
jmp 0x140052b05
mov edx, 0xffffff
jmp 0x140052afe
mov edx, 0xffa8a8a8
mov dword [rsp + 0xc8], edx
mov dword [rsp + 0xd8], edx
mov eax, dword [rsp + 0xa4c]
mov r9d, eax
neg r9d
test eax, eax
cmovns r9d, edi
mov r10d, edi
cmovns r10d, eax
mov eax, dword [rsp + 0xa50]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, edi
mov r11d, edi
cmovns r11d, eax
mov eax, dword [rsp + 0xac8]
sub eax, r9d
mov r8d, dword [rsp + 0x80]
sub r8d, r10d
cmp eax, r8d
cmovl r8d, eax
mov dword [rsp + 0x88], r8d
mov eax, dword [rsp + reloc.MFC42u.dll_CGopherFileFind::FindFile]
sub eax, ecx
mov edi, dword [rsp + 0x8c]
sub edi, r11d
cmp eax, edi
cmovl edi, eax
test r8d, r8d
jle 0x140052d71
test edi, edi
jle 0x140052d71
mov eax, dword [rsp + 0xac8]
imul eax, ecx
movsxd rcx, eax
movsxd rax, r9d
add rcx, rax
mov rax, qword [rsp + 0x70]
lea r9, [rax + rcx*4]
mov qword [rsp + 0x78], r9
mov eax, dword [rsp + 0x80]
imul eax, r11d
movsxd rcx, eax
movsxd rax, r10d
add rcx, rax
mov rax, qword [rsp + 0xa0]
lea rax, [rax + rcx*4]
mov qword [rsp + 0xa0], rax
movsxd rcx, dword [rsp + 0xac8]
shl rcx, 2
mov qword [rsp + 0x70], rcx
movsxd r10, dword [rsp + 0x80]
shl r10, 2
mov qword [rsp + 0x90], r10
mov qword [rsp + 0xd0], rdi
xor r11d, r11d
test r8d, r8d
jle 0x140052d45
lea r10, [r9 + 2]
mov r11, rax
sub r11, r9
mov edi, r8d
mov qword [rsp + 0xb0], rdi
movzx ecx, byte [r10 - 1]
movzx eax, byte [r10 - 2]
lea r8d, [rax + rcx*2]
movzx eax, byte [r10]
add r8d, eax
shr r8d, 2
not r8b
test r8b, r8b
je 0x140052cfb
movzx edi, byte [r11 + r10]
movzx r8d, r8b
movzx ecx, dl
sub ecx, edi
imul ecx, r8d
mov r9d, 0x80808081
mov eax, r9d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r10], dl
movzx edi, byte [r11 + r10 - 1]
movzx ecx, byte [rsp + 0xd9]
sub ecx, edi
imul ecx, r8d
mov eax, r9d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r10 - 1], dl
movzx edi, byte [r11 + r10 - 2]
movzx ecx, byte [rsp + 0xda]
sub ecx, edi
imul ecx, r8d
mov eax, r9d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r10 - 2], dl
movzx edi, byte [r11 + r10 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, r9d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r10 + 1], dl
mov rdi, qword [rsp + 0xb0]
add r10, 4
sub rdi, 1
mov qword [rsp + 0xb0], rdi
mov edx, dword [rsp + 0xc8]
jne 0x140052c1a
mov r8d, dword [rsp + 0x88]
mov r9, qword [rsp + 0x78]
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x70]
mov r10, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xd0]
xor r11d, r11d
add r9, rcx
mov qword [rsp + 0x78], r9
add rax, r10
mov qword [rsp + 0xa0], rax
sub rdi, 1
mov qword [rsp + 0xd0], rdi
mov edx, dword [rsp + 0xc8]
jne 0x140052bfc
mov rcx, qword [rsp + 0xc0]
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x140052da3
mov rdx, rax
mov rcx, r14
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov rcx, r14
mov rax, qword [0x1400f80d0]
call qword [str._E_t_]
xor r14d, r14d
cmp dword [rsp + 0x98], r14d
jl 0x1400531c7
jmp 0x140053df6
mov ecx, 1
cmp dword [rsp + 0xa04], edx
jne 0x140052ddd
cmp edi, ecx
mov al, reloc.OLEAUT32.dll_VarDecFromR4
jne 0x140052ddf
mov al, 0xff
mov word [rsp + 0x60], dx
mov byte [rsp + 0x62], al
mov byte [rsp + 0x63], cl
xor eax, eax
mov qword [rsp + 0xb10], rax
mov qword [rsp + CPtrList::FreeNode], rax
mov qword [rsp + 0xb00], rax
mov qword [rsp + CMapPtrToPtr::FreeAssoc], rax
mov rcx, r14
mov rax, qword [0x1400f80b0]
call qword [str._E_t_]
mov qword [rsp + 0x100], rax
xor r14d, r14d
test rax, rax
jne 0x140052e3f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
jmp 0x1400531c7
mov eax, 1
cmp edi, eax
jne 0x140052f39
mov ecx, dword [rsp + reloc.MFC42u.dll_CCmdTarget::EndWaitCursor]
mov eax, ecx
mov r10d, dword [rsp + 0xa4c]
sub eax, r10d
mov edi, dword [rsp + 0xa44]
mov r14d, edi
mov r11d, dword [rsp + 0xa3c]
sub r14d, r11d
cmp eax, r14d
cmovg r14d, eax
mov dword [rsp + 0x80], r14d
mov edx, dword [rsp + 0xa58]
mov eax, edx
sub eax, dword [rsp + 0xa40]
mov dword [rsp + 0x8c], eax
xor eax, eax
mov r8d, eax
mov r9d, eax
cmp dword [rsp + 0xa00], eax
je 0x140052ece
mov r8d, r11d
sub r8d, edi
add r8d, r14d
mov dword [rsp + 0xb10], r8d
mov r9d, r10d
sub r9d, ecx
add r9d, r14d
mov dword [rsp + 0xb00], r9d
sub edi, r11d
add edi, r8d
mov dword [rsp + CPtrList::FreeNode], edi
mov eax, dword [rsp + 0xa48]
sub eax, dword [rsp + 0xa40]
mov dword [rsp + 0x98], eax
mov dword [rsp + CPtrList::FreeNode], eax
sub ecx, r10d
add ecx, r9d
mov dword [rsp + 0xf0], ecx
mov dword [rsp + CMapPtrToPtr::FreeAssoc], ecx
mov eax, dword [rsp + 0xa50]
sub eax, dword [rsp + 0xa40]
mov dword [rsp + 0xb04], eax
sub edx, dword [rsp + 0xa50]
add edx, eax
mov dword [rsp + 0xb0], edx
mov dword [rsp + CMapStringToOb::FreeAssoc], edx
jmp 0x140052fb1
mov r14d, dword [rsp + 0xa98]
mov dword [rsp + 0x80], r14d
mov eax, dword [rsp + 0xa9c]
mov dword [rsp + 0x8c], eax
movups xmm0, xmmword [rsp + 0xa3c]
movdqu xmmword [rsp + 0xb10], xmm0
movups xmm1, xmmword [rsp + 0xa4c]
movdqu xmmword [rsp + 0xb00], xmm1
mov eax, dword [rsp + 0xb1c]
mov dword [rsp + 0x98], eax
mov edi, dword [rsp + 0xb18]
mov eax, dword [rsp + 0xb0c]
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0xb08]
mov dword [rsp + 0xf0], eax
mov eax, dword [rsp + 0xb04]
mov dword [rsp + 0xf8], eax
xor eax, eax
mov qword [rsp + 0x468], rax
xor edx, edx
lea r8d, [rax + 0x2c]
lea rcx, [rsp + 0xc30]
call sub.msvcrt.dll_memset
mov dword [rsp + 0xc30], 0x28
mov dword [rsp + 0xc34], r14d
mov eax, dword [rsp + 0x8c]
neg eax
mov dword [rsp + 0xc38], eax
mov dword [rsp + CCmdTarget::GetExtraConnectionPoints], 0x200001
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x468]
xor r8d, r8d
lea rdx, [rsp + 0xc30]
mov rcx, qword [rsp + 0x100]
mov rax, qword [0x1400f80b8]
call qword [str._E_t_]
mov qword [rsp + 0xa8], rax
test rax, rax
jne 0x140053057
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
xor r14d, r14d
jmp 0x1400531aa
mov rdx, rax
mov rcx, qword [rsp + 0x100]
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov eax, 1
cmp dword [rsp + 0xd8], eax
jne 0x1400530d1
mov r8, qword [rsp + 0x118]
xor ecx, ecx
test r8, r8
je 0x1400530d1
xor eax, eax
mov qword [rsp + CTime::Format], rax
mov qword [rsp + COleDataSource::FlushClipboard], rcx
mov dword [rsp + CTime::Format], r14d
mov eax, dword [rsp + 0x8c]
mov dword [rsp + reloc.MFC42u.dll_CTime::Format], eax
lea rdx, [rsp + 0xaf0]
mov rcx, qword [rsp + 0x100]
mov rax, qword [0x1400f8188]
call qword [str._E_t_]
mov eax, dword [rsp + 0xa04]
mov dword [rsp + 0xd0], eax
mov rax, qword [rsp + reloc.MFC42u.dll_COleServerItem::XDataObject::DUnadvise]
mov qword [rsp + 0x68], rax
mov r14, qword [rsp + 0xa08]
mov qword [rsp + 0x78], r14
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x920]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x8b0]
call sub.msvcrt.dll_memset
xor ecx, ecx
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0x90], ecx
mov dword [rsp + 0x70], ecx
xor edx, edx
lea r8d, [rcx + 0x2c]
lea rcx, [rsp + 0xcc0]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0xae0], rax
mov qword [rsp + 0xae8], rax
test r14, r14
je 0x14005318a
lea edx, [rax + 7]
mov r14, qword [rsp + 0x100]
mov rcx, r14
mov rax, qword [0x1400f80f0]
call qword [str._E_t_]
test rax, rax
jne 0x1400531ed
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
xor r14d, r14d
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x1400531aa
mov rcx, rax
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
mov rax, qword [rsp + 0x100]
test rax, rax
je 0x1400531c7
mov rcx, rax
mov rax, qword [0x1400f80d0]
call qword [str._E_t_]
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x140053e1a
mov rcx, rax
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
jmp 0x140053e1a
lea r8, [rsp + 0x920]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
test eax, eax
je 0x140053237
mov rax, qword [rsp + 0x938]
mov qword [rsp + 0xa0], rax
mov eax, dword [rsp + 0x924]
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x928]
mov dword [rsp + 0x70], eax
mov rcx, r14
mov rax, qword [0x1400f80b0]
call qword [str._E_t_]
mov qword [rsp + 0xc0], rax
xor r14d, r14d
test rax, rax
jne 0x140053268
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
jmp 0x14005318d
mov r14d, dword [rsp + 0x98]
sub r14d, dword [rsp + 0xb14]
sub edi, dword [rsp + 0xb10]
xor eax, eax
mov qword [rsp + 0x470], rax
mov dword [rsp + 0x98], eax
xor edx, edx
lea r8d, [rax + 0x2c]
lea rcx, [rsp + 0xcc0]
call sub.msvcrt.dll_memset
mov dword [rsp + COleControlSite::GetInterfaceMap], 0x28
mov dword [rsp + COleFrameHook::GetInterfaceMap], edi
mov eax, r14d
neg eax
mov dword [rsp + 0xcc8], eax
mov dword [rsp + COleServerDoc::GetItemClipRect], 0x200001
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x470]
xor r8d, r8d
lea rdx, [rsp + 0xcc0]
mov rcx, qword [rsp + 0xc0]
mov rax, qword [0x1400f80b8]
call qword [str._E_t_]
mov qword [rsp + 0xe8], rax
test rax, rax
jne 0x14005334b
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov dword [rsp + 0x98], ecx
mov r14d, 0x80808081
test ecx, ecx
js 0x14005370f
mov dword [rsp + 0x98], 0x80004005
jmp 0x14005370f
lea r8, [rsp + 0x8b0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
xor edx, edx
mov ecx, edx
test eax, eax
cmovne rcx, qword [rsp + 0x8c8]
mov qword [rsp + 0x108], rcx
mov dword [rsp + 0xae8], edi
mov dword [rsp + COleDataSource::FlushClipboard], r14d
mov rdx, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xc0]
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov edx, 1
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov rdx, qword [rsp + 0x68]
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov qword [rsp + 0x68], rax
xor ecx, ecx
mov rax, qword [0x1400f8110]
call qword [str._E_t_]
mov r8, rax
lea rdx, [rsp + 0xae0]
mov rcx, rdi
mov rax, qword [0x1400f8188]
call qword [str._E_t_]
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0xae0]
mov r8d, r13d
mov rdx, qword [rsp + 0x78]
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
lea eax, [r14 + 1]
cmp dword [rsp + 0xd8], eax
jne 0x140053477
cmp dword [rsp + 0xd0], r14d
je 0x14005346a
lea ecx, [rax + 7]
mov rax, qword [0x1400f81b8]
call qword [str._E_t_]
mov dword [rsp + 0xd0], eax
jmp 0x140053482
mov dword [rsp + 0xd0], 0xffffff
jmp 0x140053482
mov dword [rsp + 0xd0], 0xffa8a8a8
mov eax, dword [rsp + 0xb10]
mov r9d, eax
neg r9d
test eax, eax
cmovns r9d, r14d
mov r10d, r14d
cmovns r10d, eax
mov eax, dword [rsp + 0xb14]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, r14d
mov r8d, r14d
cmovns r8d, eax
mov eax, dword [rsp + 0xae8]
sub eax, r9d
movsxd r14, dword [rsp + 0x90]
mov r11d, r14d
sub r11d, r10d
cmp eax, r11d
cmovl r11d, eax
mov eax, dword [rsp + 0xaec]
sub eax, ecx
mov edx, dword [rsp + 0x70]
sub edx, r8d
cmp eax, edx
cmovl edx, eax
test r11d, r11d
jle 0x1400536d7
test edx, edx
jle 0x1400536d7
imul ecx, dword [rsp + 0xae8]
movsxd rcx, ecx
movsxd rax, r9d
add rcx, rax
mov rax, qword [rsp + 0x108]
lea rdi, [rax + rcx*4]
mov qword [rsp + 0x108], rdi
imul r8d, r14d
movsxd rcx, r8d
movsxd rax, r10d
add rcx, rax
mov rax, qword [rsp + 0xa0]
lea rax, [rax + rcx*4]
mov qword [rsp + 0x78], rax
movsxd rcx, dword [rsp + 0xae8]
shl rcx, 2
mov qword [rsp + 0xa0], rcx
mov r8, r14
shl r8, 2
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x90], rdx
mov r14d, 0x80808081
xor r9d, r9d
lea r10d, [r9 + 1]
test r11d, r11d
jle 0x1400536a9
lea r9, [rdi + 2]
mov r10, rax
sub r10, rdi
mov edi, r11d
mov qword [rsp + 0x128], rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14005366a
movzx edi, byte [r10 + r9]
movzx r8d, dl
movzx ecx, byte [rsp + 0xd0]
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
movzx ecx, byte [rsp + 0xd1]
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
movzx ecx, byte [rsp + 0xd2]
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
mov rdi, qword [rsp + 0x128]
add r9, 4
sub rdi, 1
mov qword [rsp + 0x128], rdi
jne 0x14005358f
mov rdi, qword [rsp + 0x108]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x90]
xor r9d, r9d
lea r10d, [r9 + 1]
add rdi, rcx
mov qword [rsp + 0x108], rdi
add rax, r8
mov qword [rsp + 0x78], rax
sub rdx, r10
mov qword [rsp + 0x90], rdx
jne 0x140053571
mov rdi, qword [rsp + 0xc0]
jmp 0x1400536dd
mov r14d, 0x80808081
mov rcx, qword [rsp + 0xe8]
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14005370f
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov rcx, qword [rsp + 0xc0]
mov rax, qword [0x1400f80d0]
call qword [str._E_t_]
xor eax, eax
cmp dword [rsp + 0x98], eax
jl 0x14005318a
mov eax, dword [rsp + 0xa04]
mov dword [rsp + 0x70], eax
mov rax, qword [rsp + 0xa28]
mov qword [rsp + 0x128], rax
mov rdi, qword [rsp + 0xa10]
mov qword [rsp + 0x108], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x840]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x680]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0x90], eax
mov dword [rsp + 0xd0], eax
xor edx, edx
lea r8d, [rax + 0x2c]
lea rcx, [rsp + 0xcf0]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + CGopherFileFind::FindNextFileW], rax
mov qword [rsp + CRichEditView::FindTextSimple], rax
test rdi, rdi
je 0x14005318a
lea edx, [rax + 7]
mov rdi, qword [rsp + 0x100]
mov rcx, rdi
mov rax, qword [0x1400f80f0]
call qword [str._E_t_]
test rax, rax
je 0x14005317e
lea r8, [rsp + 0x840]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
test eax, eax
je 0x14005383b
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0xe8], rax
mov eax, dword [rsp + 0x844]
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x848]
mov dword [rsp + 0xd0], eax
mov rcx, rdi
mov rax, qword [0x1400f80b0]
call qword [str._E_t_]
mov qword [rsp + 0x68], rax
xor ecx, ecx
test rax, rax
je 0x14005317e
mov eax, dword [rsp + 0xf8]
sub dword [rsp + 0xb0], eax
mov edi, dword [rsp + 0xf0]
sub edi, dword [rsp + 0xb00]
mov qword [rsp + 0x490], rcx
mov dword [rsp + 0x98], ecx
xor edx, edx
lea r8d, [rcx + 0x2c]
lea rcx, [rsp + 0xcf0]
call sub.msvcrt.dll_memset
mov dword [rsp + 0xcf0], 0x28
mov dword [rsp + 0xcf4], edi
mov eax, dword [rsp + 0xb0]
neg eax
mov dword [rsp + 0xcf8], eax
mov dword [rsp + 0xcfc], 0x200001
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x490]
xor r8d, r8d
lea rdx, [rsp + 0xcf0]
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x1400f80b8]
call qword [str._E_t_]
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x14005393c
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
xor r14d, r14d
test eax, eax
cmovle ecx, eax
mov dword [rsp + 0x98], ecx
test ecx, ecx
js 0x140053d19
mov dword [rsp + 0x98], 0x80004005
jmp 0x140053d19
lea r8, [rsp + 0x680]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x1400f8108]
call qword [str._E_t_]
xor edx, edx
mov ecx, edx
test eax, eax
cmovne rcx, qword [rsp + 0x698]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + CRichEditView::FindTextSimple], edi
mov eax, dword [rsp + 0xb0]
mov dword [rsp + CRichEditView::FindTextSimple], eax
mov rdx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x68]
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov edx, 1
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov rdx, qword [rsp + 0x128]
mov rcx, rdi
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov qword [rsp + 0x128], rax
xor ecx, ecx
mov rax, qword [0x1400f8110]
call qword [str._E_t_]
mov r8, rax
lea rdx, [rsp + 0xad0]
mov rcx, rdi
mov rax, qword [0x1400f8188]
call qword [str._E_t_]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0xad0]
mov r8d, r13d
mov rdx, qword [rsp + 0x108]
mov rcx, rdi
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov eax, 1
xor edi, edi
cmp dword [rsp + 0xd8], eax
jne 0x140053a6f
cmp dword [rsp + 0x70], edi
je 0x140053a68
lea ecx, [rax + 7]
mov rax, qword [0x1400f81b8]
call qword [str._E_t_]
mov edx, eax
mov dword [rsp + 0xc8], eax
mov dword [rsp + 0x70], eax
jmp 0x140053a7f
mov edx, 0xffffff
jmp 0x140053a7b
mov edx, 0xffa8a8a8
mov dword [rsp + 0xc8], edx
mov dword [rsp + 0x70], edx
mov eax, dword [rsp + 0xb00]
mov r9d, eax
neg r9d
test eax, eax
cmovns r9d, edi
mov r10d, edi
cmovns r10d, eax
mov eax, dword [rsp + 0xf8]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, edi
mov r8d, edi
cmovns r8d, eax
mov eax, dword [rsp + 0xad8]
sub eax, r9d
mov r11d, dword [rsp + 0x90]
sub r11d, r10d
cmp eax, r11d
cmovl r11d, eax
mov eax, dword [rsp + 0xadc]
sub eax, ecx
mov edi, dword [rsp + 0xd0]
sub edi, r8d
cmp eax, edi
cmovl edi, eax
test r11d, r11d
jle 0x140053ce2
test edi, edi
jle 0x140053ce2
imul ecx, dword [rsp + 0xad8]
movsxd rcx, ecx
movsxd rax, r9d
add rcx, rax
mov rax, qword [rsp + 0xa0]
lea r9, [rax + rcx*4]
mov qword [rsp + 0x108], r9
imul r8d, dword [rsp + 0x90]
movsxd rcx, r8d
movsxd rax, r10d
add rcx, rax
mov rax, qword [rsp + 0xe8]
lea rax, [rax + rcx*4]
mov qword [rsp + 0xe8], rax
movsxd rcx, dword [rsp + 0xad8]
shl rcx, 2
mov qword [rsp + 0xa0], rcx
movsxd r8, dword [rsp + 0x90]
shl r8, 2
mov qword [rsp + 0xc0], r8
mov qword [rsp + 0x90], rdi
xor r10d, r10d
test r11d, r11d
jle 0x140053cb3
add r9, 2
mov r10, rax
sub r10, qword [rsp + 0x108]
mov edi, r11d
mov qword [rsp + 0xd0], rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea r8d, [rax + rcx*2]
movzx eax, byte [r9]
add r8d, eax
shr r8d, 2
not r8b
test r8b, r8b
je 0x140053c6b
movzx edi, byte [r10 + r9]
movzx r8d, r8b
movzx ecx, dl
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
movzx ecx, byte [rsp + 0x71]
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
movzx ecx, byte [rsp + 0x72]
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, r14d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
mov rdi, qword [rsp + 0xd0]
add r9, 4
sub rdi, 1
mov qword [rsp + 0xd0], rdi
mov edx, dword [rsp + 0xc8]
jne 0x140053b96
mov r9, qword [rsp + 0x108]
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0xa0]
mov r8, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0x90]
xor r10d, r10d
add r9, rcx
mov qword [rsp + 0x108], r9
add rax, r8
mov qword [rsp + 0xe8], rax
sub rdi, 1
mov qword [rsp + 0x90], rdi
mov edx, dword [rsp + 0xc8]
jne 0x140053b73
mov rcx, qword [rsp + 0x78]
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
mov rax, qword [rsp + 0x128]
xor r14d, r14d
test rax, rax
je 0x140053d19
mov rdx, rax
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x1400f8118]
call qword [str._E_t_]
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x1400f80d0]
call qword [str._E_t_]
cmp dword [rsp + 0x98], r14d
jl 0x14005318d
mov eax, 1
mov r9d, dword [rsp + 0x80]
cmp dword [rsp + 0xd8], eax
jne 0x140053d9f
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x20], eax
mov r8d, dword [rsp + 0xa40]
mov edx, dword [rsp + 0xa3c]
mov rcx, qword [rsp + 0xb8]
mov rax, qword [0x1400f80a0]
call qword [str._E_t_]
jmp 0x140053df6
mov ecx, dword [rsp + 0x60]
mov dword [rsp + 0x50], ecx
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
mov r8d, dword [rsp + 0xa94]
mov edx, dword [rsp + 0xa90]
mov rcx, qword [rsp + 0xb8]
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
mov edx, dword [rsp + 0x84]
mov rcx, qword [rsp + 0xb8]
mov rax, qword [fcn.14000ce20]
call qword [str._E_t_]
jmp 0x14005318d
xor r14d, r14d
mov rax, qword [rsp + 0xa08]
test rax, rax
je 0x140053e78
mov rcx, r13
inc rcx
cmp word [rax + rcx*2], r14w
jne 0x140053e2a
lea rcx, [rcx*2 + 2]
mov rdi, qword [rsp + 0xa08]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rsp + 0xa08]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsp + 0xa08], r14
mov rax, qword [rsp + 0xa10]
test rax, rax
je 0x140053ed6
mov rcx, r13
inc rcx
cmp word [rax + rcx*2], r14w
jne 0x140053e88
lea rcx, [rcx*2 + 2]
mov rdi, qword [rsp + 0xa10]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rsp + 0xa10]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsp + 0xa10], r14
mov rdi, qword [rsp + 0xa18]
test rdi, rdi
je 0x140053f2c
mov rcx, r13
inc rcx
cmp word [rdi + rcx*2], r14w
jne 0x140053ee6
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rsp + 0xa18]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsp + COleControl::XDataObject::DUnadvise], r14
mov rcx, qword [rsp + reloc.MFC42u.dll_COleServerItem::XDataObject::DUnadvise]
test rcx, rcx
je 0x140053f4e
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
mov qword [rsp + reloc.MFC42u.dll_COleServerItem::XDataObject::DUnadvise], r14
mov rcx, qword [rsp + 0xa28]
test rcx, rcx
je 0x140053f70
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
mov qword [rsp + 0xa28], r14
mov rcx, qword [rsp + 0xa30]
test rcx, rcx
je 0x140053f92
mov rax, qword [0x1400f80d8]
call qword [str._E_t_]
mov qword [rsp + CWinApp::Enable3dControls], r14
mov edi, 1
xor eax, eax
lock cmpxchg dword [0x1400ff710], edi
jne 0x140053f97
mov eax, dword [0x1400ff70c]
test eax, eax
jle 0x140054013
sub eax, edi
mov dword [0x1400ff70c], eax
jne 0x140054013
lea rdi, [0x1400fee40]
xor eax, eax
lea r14d, [rax + 4]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140053fda
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
xor eax, eax
add rdi, 0x18
sub r14, 1
jne 0x140053fc4
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
mov r8d, CGopherConnection::CGopherConnection
lea rdx, [0x1400a92a0]
lea rcx, [0x1400f80a0]
call sub.msvcrt.dll_memcpy
lea edi, [r14 + 1]
mov eax, r14d
xchg dword [0x1400ff710], eax
mov eax, dword [0x1400fee34]
mov dword [rsp + 0x70], eax
mov rax, qword [0x1400f8138]
call qword [str._E_t_]
sub eax, dword [0x1400ff700]
mov qword [rsp + 0x128], rax
mov dword [rsp + reloc.MFC42u.dll_CDaoWorkspace::InitDatabasesCollection], r14d
xor edx, edx
lea r8d, [rdx + 0x38]
lea rcx, [rsp + reloc.MFC42u.dll_COleServerDoc::XOleObject::InitFromData]
call sub.msvcrt.dll_memset
xor eax, eax
lock cmpxchg dword [0x1400ff710], edi
jne 0x14005405c
mov eax, dword [0x1400ff70c]
xor r9d, r9d
test eax, eax
jne 0x140054774
mov dword [rsp + 0x90], r9d
mov r14d, r9d
mov dword [rsp + 0xd0], r9d
mov qword [rsp + 0x498], r9
mov qword [rsp + 0x4a0], r9
mov dword [rsp + 0xb0], r9d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
xor edx, edx
mov r8d, CObject::operatordelete
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rsp + 0x108], rax
xor r9d, r9d
test rax, rax
je 0x1400546c7
mov cl, r9b
mov dword [rsp + 0xf8], r9d
or dword [rsp + 0xc8], 0xffffffff
mov edx, r9d
mov dword [rsp + 0x234], edx
mov r8d, r9d
mov dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView], r9d
add rax, 7
mov qword [rsp + 0xe8], rax
mov rdi, qword [rsp + 0x2a8]
movzx r11d, byte [rdi - 2]
shl r11d, 8
movzx eax, byte [rdi - 1]
or r11d, eax
shl r11d, 8
movzx eax, byte [rdi]
or r11d, eax
shl r11d, 8
movzx eax, byte [rdi + 1]
or r11d, eax
movzx r10d, byte [rdi + 2]
shl r10d, 8
movzx eax, byte [rdi + 3]
or r10d, eax
shl r10d, 8
movzx eax, byte [rdi + 4]
or r10d, eax
shl r10d, 8
movzx eax, byte [rdi + 5]
or r10d, eax
xor r8d, r11d
add rdi, 8
mov qword [rsp + 0x2a8], rdi
mov r9d, r10d
xor r9d, edx
xor r9d, r8d
xor r9d, 0xac987321
lea eax, [r9 + 0x54969fa2]
rol eax, 5
mov edx, r9d
rol edx, 0xa
imul eax, eax, 0x137f
add edx, eax
xor r8d, edx
lea eax, [r8 + 0x7f1137f]
ror eax, 9
mov edx, r8d
rol edx, 2
imul eax, eax, 0xab69
sub eax, edx
xor r9d, eax
mov eax, r9d
shr eax, 0xd
imul edx, r9d, 0x605e
sub edx, eax
sub edx, 0x756c8a2
xor r8d, edx
mov eax, r8d
xor eax, 0xab69
rol eax, 6
mov edx, r8d
rol edx, 2
imul eax, eax, 0x7f1
sub eax, edx
xor r9d, eax
mov edx, r9d
xor edx, 0xab69605e
mov eax, 0x7f1137f
sub eax, edx
xor r8d, eax
mov edi, r8d
ror edi, 6
mov eax, r8d
xor eax, 0x137f
imul edx, eax, 0xab69
xor edi, edx
xor r9d, edi
lea eax, [r9 + 0x7f1137f]
ror eax, 0xf
mov edx, r9d
rol edx, 2
imul eax, eax, 0x605e
add edx, eax
xor r8d, edx
lea eax, [r8 + 0x54969fa2]
ror eax, 0xe
mov edx, r8d
rol edx, 8
imul eax, eax, 0x7f1
sub eax, edx
xor r9d, eax
mov eax, r9d
mov edi, 0xab69605e
xor eax, edi
ror eax, 0xc
mov edx, r9d
ror edx, 0xa
imul eax, eax, 0x137f
xor edx, eax
xor r8d, edx
mov eax, r8d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r8d
shr eax, 0xa
xor edx, eax
xor r9d, edx
mov eax, r9d
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r8d, eax
mov dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView], r8d
add r8d, 0xfffff80f
xor r8d, r9d
xor r8d, edi
mov eax, r8d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r8d
shr eax, 2
add edx, eax
mov r9d, dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView]
xor r9d, edx
lea eax, [r9 - 0x7f1137f]
ror eax, 6
mov edx, r9d
rol edx, 7
imul eax, eax, 0xab69
add edx, eax
xor r8d, edx
mov edi, r8d
ror edi, 9
mov eax, r8d
xor eax, 0x137f
imul edx, eax, 0x605e
add edi, edx
xor r9d, edi
mov eax, r9d
xor eax, 0xab69
rol eax, 5
mov edx, r9d
rol edx, 7
imul eax, eax, 0x7f1
add edx, eax
xor r8d, edx
mov edi, r8d
xor edi, r9d
xor edi, 0xac987321
mov eax, edi
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r8d, edx
lea eax, [r8 - 0x7f1137f]
ror eax, 1
mov edx, r8d
ror edx, 6
imul eax, eax, 0x605e
sub eax, edx
xor edi, eax
lea eax, [rdi - 0x54969fa2]
rol eax, 3
mov edx, edi
rol edx, 0xe
imul eax, eax, 0x7f1
add edx, eax
xor r8d, edx
lea eax, [r8 - 0x54969fa2]
rol eax, 0xf
mov edx, r8d
ror edx, 0xe
imul eax, eax, 0x137f
sub eax, edx
xor edi, eax
mov eax, edi
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, edi
shr eax, 3
xor edx, eax
xor r8d, edx
mov eax, r8d
xor eax, 0x7f1137f
rol eax, 4
mov edx, r8d
rol edx, 2
imul eax, eax, 0x605e
xor edx, eax
xor edx, dword [rsp + 0xf8]
xor edi, edx
mov dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView], edi
xor r8d, dword [rsp + 0xc8]
mov dword [rsp + 0x234], r8d
mov r9, qword [rsp + 0xe8]
mov byte [r9 - 4], dil
ror dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView], 8
mov al, byte [rsp + 0x234]
mov byte [r9], al
ror dword [rsp + 0x234], 8
mov al, byte [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView]
mov byte [r9 - 5], al
ror dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView], 8
mov al, byte [rsp + 0x234]
mov byte [r9 - 1], al
ror dword [rsp + 0x234], 8
mov al, byte [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView]
mov byte [r9 - 6], al
ror dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView], 8
mov al, byte [rsp + 0x234]
mov byte [r9 - 2], al
ror dword [rsp + 0x234], 8
mov al, byte [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView]
mov byte [r9 - 7], al
mov al, byte [rsp + 0x234]
mov byte [r9 - 3], al
mov r8d, dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView]
ror r8d, 8
mov dword [rsp + reloc.MFC42u.dll_CDaoRecordView::CDaoRecordView], r8d
mov edx, dword [rsp + 0x234]
ror edx, 8
mov dword [rsp + 0x234], edx
mov dword [rsp + 0xf8], r11d
mov dword [rsp + 0xc8], r10d
add r9, 8
mov qword [rsp + 0xe8], r9
mov r10d, 1
sub qword [rsp + 0x120], r10
jne 0x14005410f
xor r9d, r9d
mov eax, r9d
mov rdi, qword [rsp + 0x108]
mov edx, CObject::operatordelete
xor cl, byte [rax + rdi]
add rax, r10
cmp rax, rdx
jb 0x1400544cf
movzx eax, cl
cmp rax, qword [0x1400d3f38]
je 0x1400544f3
mov dword [rsp + 0xb0], 0xc004d501
jmp 0x140054506
mov qword [rsp + 0x498], rdi
mov rdi, r9
mov qword [rsp + 0x4a0], rdx
test rdi, rdi
je 0x14005452e
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r9d, r9d
cmp dword [rsp + 0xb0], r9d
jl 0x1400546c7
mov rdi, qword [rsp + 0x498]
mov rax, qword [rsp + 0x4a0]
mov byte [rax + rdi - 1], r9b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
xor r9d, r9d
jmp 0x1400546bc
mov rdx, rdi
mov rax, r13
inc rax
cmp word [rdi + rax*2], r9w
jne 0x140054571
lea rdi, [rdi + rax*2]
mov eax, dword [rsp + 0xd0]
lea rcx, [rax + rax*2]
lea rax, [0x1400fee40]
lea r8, [rax + rcx*8]
mov qword [rsp + 0x108], r8
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
xor r9d, r9d
test eax, eax
je 0x1400546c7
mov r14d, r9d
mov r8, qword [rsp + 0x108]
mov rax, qword [r8]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x1400545d6
mov r14d, 0xc000007b
jmp 0x140054622
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x1400545ce
add rcx, qword [r8]
cmp rcx, qword [r8]
jb 0x1400545ce
cmp dword [rcx], 0x4550
jne 0x1400545ce
movzx eax, word [rcx + 0x18]
mov edx, AFX_MODULE_STATE::AFX_MODULE_STATE
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x140054610
mov r14d, 0xc000000d
jmp 0x140054622
mov rax, qword [rcx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [rdi + 2]
mov dword [rsp + 0xb0], eax
add rdi, 6
mov ecx, r9d
mov dword [rsp + 0xf8], ecx
test eax, eax
je 0x1400546b0
mov rdx, rdi
mov rax, r13
inc rax
cmp byte [rdi + rax], r9b
jne 0x140054644
inc rdi
add rdi, rax
test r14d, r14d
js 0x140054690
mov rcx, qword [r8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
xor r9d, r9d
test rax, rax
je 0x1400546cd
mov ecx, dword [rsp + 0x90]
lea rdx, [0x1400f80a0]
mov qword [rdx + rcx*8], rax
mov r8, qword [rsp + 0x108]
mov ecx, dword [rsp + 0xf8]
mov eax, 1
add dword [rsp + 0x90], eax
add ecx, eax
mov dword [rsp + 0xf8], ecx
cmp ecx, dword [rsp + 0xb0]
jb 0x14005463e
jmp 0x1400546b5
mov eax, 1
add dword [rsp + 0xd0], eax
cmp byte [rdi], r9b
jne 0x14005456b
jmp 0x1400546cd
mov r14d, 0xc000007a
cmp qword [rsp + 0x498], r9
je 0x1400546ff
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x498]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r9d, r9d
test r14d, r14d
jns 0x140054769
lea rdi, [0x1400fee40]
mov eax, 1
lea r14d, [rax + 3]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005472f
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
xor r9d, r9d
lea eax, [r9 + 1]
add rdi, 0x18
sub r14, rax
jne 0x140054714
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
mov r8d, CGopherConnection::CGopherConnection
lea rdx, [0x1400a92a0]
lea rcx, [0x1400f80a0]
call sub.msvcrt.dll_memcpy
lea edi, [r14 + 1]
jmp 0x14005477c
mov eax, dword [0x1400ff70c]
mov edi, 1
add eax, edi
mov dword [0x1400ff70c], eax
xor eax, eax
xchg dword [0x1400ff710], eax
mov rcx, qword [rsp + 0x128]
mov dword [rsp + reloc.MFC42u.dll_COleServerDoc::XOleObject::InitFromData], ecx
mov dword [rsp + reloc.MFC42u.dll_CDaoWorkspace::InitDatabasesCollection], edi
mov dword [rsp + 0xf68], 0x9966f291
mov dword [rsp + reloc.MFC42u.dll_CMapWordToPtr::InitHashTable], edi
mov dword [rsp + COleControl::InitStockPropMask], edi
mov dword [rsp + 0xf70], edi
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0xf88], eax
mov dword [rsp + 0xf80], edi
lea r9, [rsp + reloc.MFC42u.dll_CDaoWorkspace::InitDatabasesCollection]
mov r14d, 4
mov r8d, r14d
mov edx, 0x2021
xor ecx, ecx
mov rax, qword [0x1400f8170]
call qword [str._E_t_]
xor eax, eax
lock cmpxchg dword [0x1400ff710], edi
jne 0x1400547f1
mov eax, dword [0x1400ff70c]
xor edx, edx
test eax, eax
jle 0x14005486c
sub eax, edi
mov dword [0x1400ff70c], eax
jne 0x14005486c
lea rdi, [0x1400fee40]
lea eax, [rdx + 1]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140054836
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
xor edx, edx
lea eax, [rdx + 1]
add rdi, 0x18
sub r14, rax
jne 0x14005481d
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x1400fee40]
call sub.msvcrt.dll_memset
mov r8d, CGopherConnection::CGopherConnection
lea rdx, [0x1400a92a0]
lea rcx, [0x1400f80a0]
call sub.msvcrt.dll_memcpy
xor edx, edx
mov eax, edx
xchg dword [0x1400ff710], eax
mov rdx, qword [rsp + 0xb8]
xor ecx, ecx
mov rax, qword [0x1400f8200]
call qword [str._E_t_]
lea rcx, [rsp + 0x3f0]
call fcn.140090a58
xor r11d, r11d
cmp dword [rsp + 0x168], r11d
je 0x1400574d0
mov qword [rsp + 0x128], r11
mov qword [rsp + 0x108], r11
xor eax, eax
mov qword [rsp + Ordinal_1442], rax
mov qword [rsp + reloc.MFC42u.dll_Ordinal_1448], rax
mov qword [rsp + 0x560], rax
mov qword [rsp + Ordinal_1387], rax
mov dword [rsp + 0x238], r11d
lea rax, [0x1400fda20]
mov qword [rsp + 0x4a8], rax
mov edi, 0xa0
mov qword [rsp + 0x4b0], rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov r14d, 8
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov qword [rsp + 0xe8], rax
xor r11d, r11d
test rax, rax
je 0x1400573ee
mov r8, qword [rsp + 0x4b0]
mov rdx, qword [rsp + 0x4a8]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x128], rdi
mov eax, dword [rsp + 0x4b0]
mov dword [rsp + 0x70], eax
lea rax, [0x1400fd960]
mov qword [rsp + 0x4b8], rax
mov qword [rsp + 0x4c0], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, r14d
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov qword [rsp + 0xb8], rax
xor r11d, r11d
test rax, rax
je 0x1400573ee
mov r8, qword [rsp + 0x4c0]
mov rdx, qword [rsp + 0x4b8]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x108], rdi
mov r9, qword [rsp + 0x4c0]
mov qword [rsp + 0x100], r9
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rsp + 0x4c8], rax
mov edi, r14d
mov dword [rsp + 0x23c], r14d
mov eax, dword [rsp + 0x70]
add eax, 4
or ecx, 0xffffffff
mov edx, ecx
cmp eax, 4
cmovae edx, eax
mov r8d, r14d
jb 0x1400573eb
mov edi, edx
mov dword [rsp + 0x23c], edx
mov r8d, edx
lea eax, [rdx + 8]
mov r8d, ecx
cmp eax, r14d
cmovae r8d, eax
jb 0x1400573eb
lea edx, [r9 + 4]
mov eax, ecx
cmp edx, 4
cmovae eax, edx
cmovae edi, eax
mov dword [rsp + 0x23c], edi
jb 0x1400573eb
lea eax, [rdi + r8]
mov edx, ecx
cmp eax, r8d
cmovae edx, eax
jb 0x1400573eb
mov dword [rsp + 0x23c], SafeArrayGetDim
lea eax, [rdx + 0xc]
cmp eax, edx
cmovae ecx, eax
jb 0x1400573eb
mov dword [rsp + Ordinal_1447], ecx
mov edi, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
xor r11d, r11d
test rax, rax
je 0x1400573ee
mov qword [rsp + reloc.MFC42u.dll_Ordinal_1448], rax
mov r8d, r11d
mov dword [rsp + Ordinal_1442], r11d
mov dword [rsp + 0x240], 4
lea rcx, [rax + 4]
mov rdi, r13
cmp rcx, rax
cmovae rdi, rcx
sbb r9d, r9d
and r9d, r12d
cmp rcx, rax
jb 0x140054b2c
mov ecx, dword [rsp + 0x5a4]
add rcx, rax
add rax, r14
cmp rax, rcx
ja 0x1400573ee
mov dword [rdx], 4
mov eax, dword [rsp + 0x240]
mov dword [rdi], eax
mov r8d, dword [rsp + 0x5a0]
inc r8d
mov dword [rsp + Ordinal_1442], r8d
test r9d, r9d
js 0x1400573ee
mov r10d, dword [rsp + 0x70]
test r10d, r10d
je 0x140054c81
cmp qword [rsp + reloc.MFC42u.dll_Ordinal_1448], r11
jne 0x140054bae
or eax, 0xffffffff
lea ecx, [r10 + 4]
cmp ecx, 4
cmovae eax, ecx
mov edx, dword [rsp + 0x248]
cmovae edx, eax
mov dword [rsp + 0x248], edx
jb 0x1400573ee
mov ecx, dword [rsp + 0x5a4]
lea eax, [rcx + rdx]
or edi, 0xffffffff
cmp eax, ecx
cmovae edi, eax
mov dword [rsp + Ordinal_1447], edi
sbb r9d, r9d
and r9d, r12d
cmp eax, ecx
jb 0x140054c8e
mov r9d, 1
add r8d, r9d
mov dword [rsp + Ordinal_1442], r8d
jmp 0x140054c9d
mov rdi, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
test r8d, r8d
je 0x140054c14
mov r10d, dword [rsp + 0x248]
mov ecx, dword [rdi]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
cmovae r10d, eax
mov dword [rsp + 0x248], r10d
jb 0x1400573eb
mov edx, r10d
mov rcx, rdi
add rdx, rdi
mov rax, r13
cmp rdx, rdi
cmovae rax, rdx
mov rdi, rax
cmp rdx, rcx
sbb r9d, r9d
and r9d, r12d
cmp rdx, rcx
jb 0x140054c7c
inc r11d
cmp r11d, r8d
jb 0x140054bc3
mov r10d, dword [rsp + 0x70]
lea rax, [rdi + 4]
mov rcx, r13
cmp rax, rdi
cmovae rcx, rax
sbb r9d, r9d
and r9d, r12d
mov dword [rsp + 0x70], r9d
cmp rax, rdi
jb 0x140054c7c
mov r8d, r10d
mov edx, dword [rsp + 0x5a4]
add rdx, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
lea rax, [rdi + 4]
add rax, r8
cmp rax, rdx
ja 0x1400573eb
mov dword [rdi], r10d
mov rdx, qword [rsp + 0xe8]
call sub.msvcrt.dll_memcpy
mov r8d, dword [rsp + 0x5a0]
inc r8d
mov dword [rsp + Ordinal_1442], r8d
mov r9d, dword [rsp + 0x70]
xor r11d, r11d
jmp 0x140054c87
mov r9d, 0xc000000d
mov edi, dword [rsp + 0x5a4]
test r9d, r9d
js 0x1400573ee
mov r9d, 1
mov r11, qword [rsp + 0x100]
xor eax, eax
test r11d, r11d
je 0x140054e0e
cmp qword [rsp + reloc.MFC42u.dll_Ordinal_1448], rax
jne 0x140054d23
or eax, 0xffffffff
lea ecx, [r11 + 4]
cmp ecx, 4
cmovae eax, ecx
mov edx, dword [rsp + 0x24c]
cmovae edx, eax
mov dword [rsp + 0x24c], edx
jb 0x1400573eb
mov ecx, edi
lea eax, [rdi + rdx]
or edi, 0xffffffff
cmp eax, ecx
cmovae edi, eax
mov dword [rsp + Ordinal_1447], edi
sbb r10d, r10d
and r10d, r12d
cmp eax, ecx
jb 0x140054e1c
add r8d, r9d
mov dword [rsp + Ordinal_1442], r8d
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0x4d0], rax
xor r11d, r11d
jmp 0x140054e42
mov r9, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
mov dword [rsp + 0x70], eax
test r8d, r8d
je 0x140054d9c
mov r11d, dword [rsp + 0x24c]
mov ecx, dword [r9]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
cmovae r11d, eax
mov dword [rsp + 0x24c], r11d
jb 0x1400573eb
mov edx, r11d
mov rcx, r9
add rdx, r9
mov rax, r13
cmp rdx, r9
cmovae rax, rdx
mov r9, rax
cmp rdx, rcx
sbb r10d, r10d
and r10d, r12d
cmp rdx, rcx
jb 0x140054e16
mov edx, dword [rsp + 0x70]
inc edx
mov dword [rsp + 0x70], edx
cmp edx, r8d
jb 0x140054d3c
mov r11, qword [rsp + 0x100]
lea rax, [r9 + 4]
mov rcx, r13
cmp rax, r9
cmovae rcx, rax
sbb r10d, r10d
and r10d, r12d
mov dword [rsp + 0x70], r10d
cmp rax, r9
jb 0x140054e16
mov r8d, r11d
mov edx, edi
add rdx, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
lea rax, [r8 + 4]
add rax, r9
cmp rax, rdx
ja 0x1400573eb
mov dword [r9], r11d
mov rdx, qword [rsp + 0xb8]
call sub.msvcrt.dll_memcpy
mov r8d, dword [rsp + 0x5a0]
mov r9d, 1
add r8d, r9d
mov dword [rsp + Ordinal_1442], r8d
mov edi, dword [rsp + 0x5a4]
mov r10d, dword [rsp + 0x70]
jmp 0x140054e1c
mov r10d, 0xc000000d
jmp 0x140054e1c
mov r9d, 1
xor r11d, r11d
test r10d, r10d
js 0x1400573ee
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0x4d0], rax
cmp qword [rsp + reloc.MFC42u.dll_Ordinal_1448], r11
jne 0x140054e7f
mov dword [rsp + 0x250], SafeArrayGetDim
mov ecx, edi
lea eax, [rdi + 0xc]
or edi, 0xffffffff
cmp eax, ecx
cmovae edi, eax
mov dword [rsp + Ordinal_1447], edi
sbb r10d, r10d
and r10d, r12d
cmp eax, ecx
jb 0x140054f4f
add r8d, r9d
mov dword [rsp + Ordinal_1442], r8d
jmp 0x140054f58
mov r9, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
mov dword [rsp + 0x70], r11d
test r8d, r8d
je 0x140054ef0
mov r11d, dword [rsp + 0x250]
mov ecx, dword [r9]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
cmovae r11d, eax
mov dword [rsp + 0x250], r11d
jb 0x1400573eb
mov edx, r11d
mov rcx, r9
add rdx, r9
mov rax, r13
cmp rdx, r9
cmovae rax, rdx
mov r9, rax
cmp rdx, rcx
sbb r10d, r10d
and r10d, r12d
cmp rdx, rcx
jb 0x140054f4c
mov edx, dword [rsp + 0x70]
inc edx
mov dword [rsp + 0x70], edx
cmp edx, r8d
jb 0x140054e99
xor r11d, r11d
lea rax, [r9 + 4]
mov rdx, r13
cmp rax, r9
cmovae rdx, rax
sbb r10d, r10d
and r10d, r12d
cmp rax, r9
jb 0x140054f4f
mov ecx, edi
add rcx, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
lea rax, [r9 + 0xc]
cmp rax, rcx
ja 0x1400573ee
mov dword [r9], r14d
movsd xmm0, qword [rsp + 0x4d0]
movsd qword [rdx], xmm0
mov r8d, dword [rsp + 0x5a0]
inc r8d
mov dword [rsp + Ordinal_1442], r8d
mov edi, dword [rsp + 0x5a4]
jmp 0x140054f4f
xor r11d, r11d
test r10d, r10d
js 0x1400573ee
mov dword [rsp + 0x254], SafeArrayGetDim
mov r10, r11
mov qword [rsp + 0xe8], r11
mov r9d, r11d
mov dword [rsp + 0x70], r11d
mov qword [rsp + 0x4d8], r11
mov qword [rsp + 0xb8], r11
mov dword [rsp + 0x90], r11d
mov qword [rsp + 0x100], r11
mov dword [rsp + 0x258], r11d
mov qword [rsp + 0xa8], r11
mov qword [rsp + 0x118], r11
mov dword [rsp + 0x25c], r11d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rsp + 0x4e0], rax
lea eax, [rdi + 8]
or ecx, 0xffffffff
cmp eax, r14d
cmovae ecx, eax
mov dword [rsp + 0x260], ecx
sbb edi, edi
and edi, r12d
cmp eax, r14d
jb 0x140055125
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x140054ffd
mov edi, r12d
jmp 0x140055125
mov dword [rsp + 0x260], eax
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
mov qword [rsp + 0x68], rax
xor r11d, r11d
test rax, rax
jne 0x140055041
mov edi, 0xc0000017
jmp 0x140055110
mov eax, dword [rsp + 0x5a0]
mov dword [rcx], eax
lea rax, [rcx + 4]
mov rdx, r13
cmp rax, rcx
cmovae rdx, rax
sbb edi, edi
and edi, r12d
cmp rax, rcx
jb 0x1400550d9
mov eax, dword [rsp + 0x5a4]
mov dword [rdx], eax
lea rax, [rdx + 4]
mov r9, r13
cmp rax, rdx
cmovae r9, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x1400550d9
mov edx, dword [rsp + 0x260]
mov rax, qword [rsp + 0x4e0]
mov qword [rdx + rcx - 8], rax
mov r8d, dword [rsp + 0x5a4]
mov rdx, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
mov rcx, r9
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0x68]
mov r10, rcx
mov qword [rsp + 0xe8], rcx
xor r11d, r11d
mov ecx, r11d
mov qword [rsp + 0x68], rcx
mov r9d, dword [rsp + 0x260]
mov dword [rsp + 0x70], r9d
jmp 0x1400550e6
mov r10, qword [rsp + 0xe8]
mov r9d, dword [rsp + 0x70]
test rcx, rcx
je 0x14005511d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r10, qword [rsp + 0xe8]
mov r9d, dword [rsp + 0x70]
mov r8d, dword [rsp + 0x5a0]
or edi, 0x10000000
jl 0x140057057
mov qword [rsp + 0x4e8], r11
mov qword [rsp + reloc.MFC42u.dll_AfxThrowUserException], r11
mov qword [rsp + 0x4f8], r11
mov qword [rsp + Ordinal_1284], r11
mov qword [rsp + 0x508], r11
mov qword [rsp + Ordinal_1297], r11
mov qword [rsp + 0x68], r11
test r10, r10
jne 0x140055175
mov edi, 0xc000000d
jmp 0x140055baf
mov edi, r9d
mov qword [rsp + 0x78], rdi
test r9d, r9d
je 0x140055a86
lea rax, [rdi + 8]
mov qword [rsp + 0xa0], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
lea r8, [rdi + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rsp + 0xc0], rax
xor r11d, r11d
test rax, rax
je 0x140055a7e
mov dl, r11b
mov ecx, r11d
mov r9, qword [rsp + 0xe8]
test rdi, rdi
je 0x1400551ea
lea r8d, [r11 + 1]
xor dl, byte [rcx + r9]
add rcx, r8
cmp rcx, rdi
jb 0x1400551de
mov qword [rsp + 0xa88], rsi
mov r10, rax
mov edi, r11d
mov dword [rsp + 0x264], r11d
or r11d, 0xffffffff
mov dword [rsp + 0x268], r11d
xor eax, eax
mov dword [rsp + 0x70], eax
mov dword [rsp + 0xd0], eax
mov r8, qword [rsp + 0x78]
mov rax, r8
and eax, 7
je 0x14005535c
mov dword [rsp + 0x70], edi
mov dword [rsp + 0xd0], edi
mov ecx, edi
mov dword [rsp + 0xb0], ecx
test eax, eax
je 0x140055297
mov r11d, 0x38
lea rdi, [r9 + 1]
mov qword [rsp + 0x120], rdi
movzx edi, byte [r9]
cmp ecx, 4
jge 0x14005526c
lea ecx, [r11 - 0x20]
shl edi, cl
or dword [rsp + 0xd0], edi
jmp 0x140055275
mov ecx, r11d
shl edi, cl
or dword [rsp + 0x70], edi
mov ecx, dword [rsp + 0xb0]
inc ecx
mov dword [rsp + 0xb0], ecx
sub r11d, r14d
mov rdi, qword [rsp + 0x120]
mov r9, rdi
cmp ecx, eax
jl 0x140055248
mov edi, dword [rsp + 0xd0]
xor edi, 0xb17a307a
mov dword [rsp + 0x264], edi
mov r11d, dword [rsp + 0x70]
xor r11d, 0x42f6b18d
mov dword [rsp + 0x268], r11d
xor ecx, ecx
test eax, eax
je 0x14005531b
lea r8, [r10 + 1]
mov qword [rsp + 0x120], r8
cmp ecx, 4
jge 0x1400552e2
rol edi, 8
mov dword [rsp + 0xb0], edi
jmp 0x1400552ee
rol r11d, 8
mov dword [rsp + 0xb0], r11d
mov r8d, dword [rsp + 0xb0]
mov byte [r10], r8b
inc ecx
mov r10, qword [rsp + 0x120]
cmp ecx, eax
mov r8, qword [rsp + 0x78]
jl 0x1400552c5
mov edi, dword [rsp + 0x264]
mov r11d, dword [rsp + 0x268]
cmp eax, 4
jbe 0x140055338
mov ecx, r14d
sub ecx, eax
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov dword [rsp + 0x268], r11d
jmp 0x14005535c
xor r11d, r11d
mov dword [rsp + 0x268], r11d
cmp eax, 4
jae 0x14005535c
lea ecx, [r11 + 4]
sub ecx, eax
shl ecx, 3
shr edi, cl
shl edi, cl
mov dword [rsp + 0x264], edi
mov rax, r8
shr rax, 3
mov qword [rsp + 0x120], rax
test rax, rax
je 0x1400557c6
mov ecx, dword [rsp + 0xa8c]
mov eax, ecx
shr eax, 0x10
mov dword [rsp + 0xb0], eax
movzx eax, si
mov dword [rsp + 0xf8], eax
movzx eax, si
mov dword [rsp + 0xc8], eax
movzx eax, cx
mov dword [rsp + 0x84], eax
lea rax, [r10 + 7]
mov qword [rsp + 0x2a8], rax
lea r8, [r9 + 2]
movzx r10d, byte [r8 - 2]
shl r10d, 8
movzx eax, byte [r8 - 1]
or r10d, eax
shl r10d, 8
movzx eax, byte [r8]
or r10d, eax
shl r10d, 8
movzx eax, byte [r8 + 1]
or r10d, eax
movzx r9d, byte [r8 + 2]
shl r9d, 8
movzx eax, byte [r8 + 3]
or r9d, eax
shl r9d, 8
movzx eax, byte [r8 + 4]
or r9d, eax
shl r9d, 8
movzx eax, byte [r8 + 5]
or r9d, eax
xor r11d, r9d
add r8, r14
mov qword [rsp + 0xd8], r8
mov r8d, r11d
sub r8d, dword [rsp + 0xc8]
xor r8d, r10d
xor r8d, edi
xor r8d, ecx
mov edi, r8d
xor edi, ecx
ror edi, 0xf
mov ecx, r8d
ror ecx, 7
movzx eax, word [rsp + 0xa8a]
imul eax, edi
add ecx, eax
xor r11d, ecx
lea edi, [r11 + rsi]
ror edi, 9
mov ecx, r11d
ror ecx, 0xa
mov eax, dword [rsp + 0x84]
imul eax, edi
sub eax, ecx
xor r8d, eax
mov ecx, dword [rsp + 0x84]
xor ecx, r8d
rol ecx, 4
mov eax, r8d
rol eax, 5
mov edi, dword [rsp + 0xb0]
imul ecx, edi
add eax, ecx
xor r11d, eax
mov ecx, r11d
xor ecx, esi
mov eax, dword [rsp + 0xa8c]
sub eax, ecx
xor r8d, eax
mov ecx, r8d
sub ecx, dword [rsp + 0xf8]
movzx eax, word [rsp + 0xa8a]
imul ecx, eax
mov eax, r8d
shr eax, 6
sub ecx, eax
xor r11d, ecx
mov eax, r11d
ror eax, 0xf
xor eax, dword [rsp + 0x84]
imul eax, dword [rsp + 0xf8]
xor r8d, eax
mov eax, r8d
not eax
ror eax, 3
add eax, edi
imul eax, dword [rsp + 0x84]
xor r11d, eax
mov eax, r11d
sub eax, dword [rsp + 0xc8]
sub eax, dword [rsp + 0xa8c]
xor r8d, eax
mov ecx, r8d
ror ecx, 0xa
mov eax, r8d
xor eax, edi
movzx edi, word [rsp + 0xa8a]
imul eax, edi
xor ecx, eax
xor r11d, ecx
mov edi, dword [rsp + 0xf8]
xor edi, r11d
rol edi, 6
mov ecx, r11d
ror ecx, 3
mov eax, dword [rsp + 0x84]
imul eax, edi
xor ecx, eax
xor r8d, ecx
mov eax, r8d
ror eax, 0xf
sub eax, dword [rsp + 0xb0]
imul eax, dword [rsp + 0xf8]
xor r11d, eax
mov ecx, r11d
xor ecx, dword [rsp + 0xb0]
imul ecx, dword [rsp + 0xc8]
mov eax, r11d
shr eax, 1
xor ecx, eax
xor r8d, ecx
mov eax, r11d
sub eax, dword [rsp + 0x84]
rol eax, 3
mov ecx, dword [rsp + 0xc8]
imul ecx, eax
mov eax, r11d
shr eax, 0xf
xor ecx, eax
xor r8d, ecx
mov ecx, r8d
sub ecx, dword [rsp + 0x84]
movzx eax, word [rsp + 0xa8a]
imul ecx, eax
mov eax, r8d
shr eax, 0xd
sub ecx, eax
xor r11d, ecx
mov edi, esi
sub edi, r11d
ror edi, 9
mov ecx, r11d
ror ecx, 0xb
mov eax, dword [rsp + 0x84]
imul eax, edi
xor ecx, eax
xor r8d, ecx
mov eax, r8d
sub eax, esi
sub eax, dword [rsp + 0xb0]
xor r11d, eax
mov ecx, r11d
ror ecx, 7
movzx eax, word [rsp + 0xa8a]
xor eax, r11d
imul eax, dword [rsp + 0xc8]
sub eax, ecx
xor r8d, eax
mov edi, r8d
xor edi, dword [rsp + 0xb0]
rol edi, 4
mov ecx, r8d
ror ecx, 0x10
movzx eax, word [rsp + 0xa8a]
imul eax, edi
sub eax, ecx
xor r11d, eax
mov edi, esi
sub edi, r11d
ror edi, 0xa
mov ecx, r11d
ror ecx, 4
mov eax, dword [rsp + 0x84]
imul eax, edi
add ecx, eax
xor r8d, ecx
mov ecx, r8d
sub ecx, esi
ror ecx, 4
mov eax, r8d
ror eax, 9
imul ecx, dword [rsp + 0xb0]
xor eax, ecx
xor r11d, eax
mov edi, r11d
xor edi, dword [rsp + 0xa8c]
rol edi, 8
mov ecx, r11d
rol ecx, 2
mov eax, dword [rsp + 0xc8]
imul eax, edi
sub eax, ecx
xor r8d, eax
mov edi, dword [rsp + 0xa8c]
sub edi, r8d
ror edi, 0xb
mov ecx, r8d
ror ecx, 0xc
movzx eax, word [rsp + 0xa8a]
imul eax, edi
sub eax, ecx
xor r11d, eax
movzx ecx, word [rsp + 0xa8a]
xor ecx, r11d
imul ecx, dword [rsp + 0x84]
mov eax, r11d
shr eax, 8
xor ecx, eax
xor r8d, ecx
mov eax, r8d
xor eax, r11d
mov ecx, dword [rsp + 0xa8c]
xor eax, ecx
xor eax, esi
xor r8d, dword [rsp + 0xd0]
mov dword [rsp + 0x264], r8d
xor eax, dword [rsp + 0x70]
mov dword [rsp + 0x268], eax
mov rax, qword [rsp + 0x2a8]
mov byte [rax - 4], r8b
ror dword [rsp + 0x264], 8
mov al, byte [rsp + 0x268]
mov r8, qword [rsp + 0x2a8]
mov byte [r8], al
ror dword [rsp + 0x268], 8
mov al, byte [rsp + 0x264]
mov byte [r8 - 5], al
ror dword [rsp + 0x264], 8
mov al, byte [rsp + 0x268]
mov byte [r8 - 1], al
ror dword [rsp + 0x268], 8
mov al, byte [rsp + 0x264]
mov byte [r8 - 6], al
ror dword [rsp + 0x264], 8
mov al, byte [rsp + 0x268]
mov byte [r8 - 2], al
ror dword [rsp + 0x268], 8
mov al, byte [rsp + 0x264]
mov byte [r8 - 7], al
mov al, byte [rsp + 0x268]
mov byte [r8 - 3], al
mov edi, dword [rsp + 0x264]
ror edi, 8
mov dword [rsp + 0x264], edi
mov r11d, dword [rsp + 0x268]
ror r11d, 8
mov dword [rsp + 0x268], r11d
mov dword [rsp + 0xd0], r10d
mov dword [rsp + 0x70], r9d
add r8, r14
mov qword [rsp + 0x2a8], r8
sub qword [rsp + 0x120], 1
mov r8, qword [rsp + 0xd8]
jne 0x1400553b5
mov r8, qword [rsp + 0x78]
movzx eax, dl
mov rdi, qword [rsp + 0xc0]
mov qword [rdi + r8], rax
mov qword [rsp + 0x508], rdi
lea rax, [r8 + 8]
mov qword [rsp + Ordinal_1297], rax
lea rax, [0x1400fda10]
mov qword [rsp + 0x4e8], rax
mov qword [rsp + reloc.MFC42u.dll_AfxThrowUserException], r14
lea rax, [0x1400fd970]
mov qword [rsp + 0x4f8], rax
mov qword [rsp + Ordinal_1284], 0xa0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, 0x30
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
xor r11d, r11d
test rax, rax
jne 0x140055854
mov edi, 0xc0000017
jmp 0x140055a60
mov rax, qword [rsp + 0xa0]
mov dword [rsi], eax
mov eax, eax
mov qword [rsp + 0x78], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x78]
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14005589a
mov edi, 0xc0000017
jmp 0x140055990
mov qword [rsi + 8], rax
mov r8, qword [rsp + 0x78]
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov edi, 0xa0
mov dword [rsi + 0x10], edi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x140055890
mov qword [rsi + 0x18], rax
lea rcx, [0x1400fd970]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rax + 0x90], xmm1
mov dword [rsi + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x140055890
mov qword [rsi + 0x28], rax
mov edi, r11d
movsd xmm0, qword [0x1400fda10]
movsd qword [rax], xmm0
mov qword [rsp + 0x68], rsi
mov esi, r11d
test rsi, rsi
je 0x140055a60
mov rax, qword [rsi + 8]
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1400559d0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x78]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140055a07
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x78]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140055a3d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x78]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r8d, dword [rsp + 0x5a0]
test edi, edi
js 0x140055a8b
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x4d8], rax
mov rsi, r11
jmp 0x140055a90
mov r8d, dword [rsp + 0x5a0]
mov edi, 0xc0000001
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140055ad7
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x508], r11
mov r8d, dword [rsp + 0x5a0]
test rsi, rsi
je 0x140055baf
mov rax, qword [rsi + 8]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140055b17
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140055b4e
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140055b84
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov r8d, dword [rsp + 0x5a0]
xor r11d, r11d
or edi, 0x10000000
jl 0x140057057
mov rsi, qword [rsp + 0x4d8]
mov r11d, dword [rsi + 0x20]
mov r10d, dword [rsi + 0x10]
mov eax, dword [rsi]
add eax, 4
or r9d, 0xffffffff
mov ecx, r9d
cmp eax, 4
cmovae ecx, eax
sbb edi, edi
and edi, r12d
cmp eax, 4
jb 0x140055c4d
lea eax, [rcx + 4]
mov edx, r9d
cmp eax, ecx
cmovae edx, eax
sbb edi, edi
and edi, r12d
cmp eax, ecx
jb 0x140055c4d
lea eax, [rdx + r10]
mov ecx, r9d
cmp eax, edx
cmovae ecx, eax
sbb edi, edi
and edi, r12d
cmp eax, edx
jb 0x140055c4d
lea eax, [rcx + 4]
mov edx, r9d
cmp eax, ecx
cmovae edx, eax
sbb edi, edi
and edi, r12d
cmp eax, ecx
jb 0x140055c4d
lea ecx, [rdx + r11]
mov eax, r9d
cmp ecx, edx
cmovae eax, ecx
sbb edi, edi
and edi, r12d
mov r10d, dword [rsp + reloc.MFC42u.dll_CControlBar::CControlBar]
cmp ecx, edx
cmovae r10d, eax
mov dword [rsp + reloc.MFC42u.dll_CControlBar::CControlBar], r10d
jmp 0x140055c55
mov r10d, dword [rsp + reloc.MFC42u.dll_CControlBar::CControlBar]
xor eax, eax
test edi, edi
js 0x140055def
mov edi, r10d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov qword [rsp + 0x68], rax
xor eax, eax
test rdi, rdi
jne 0x140055ca0
mov edi, 0xc0000017
or r9d, 0xffffffff
jmp 0x140055de7
mov eax, dword [rsi]
mov dword [rdi], eax
lea rax, [rdi + 4]
mov rcx, r13
cmp rax, rdi
cmovae rcx, rax
mov qword [rsp + 0x78], rcx
sbb edi, edi
and edi, r12d
cmp rax, qword [rsp + 0x68]
jb 0x140055db5
mov r8d, dword [rsi]
mov rdx, qword [rsi + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [rsi]
mov rdx, qword [rsp + 0x78]
add rcx, rdx
mov r8, r13
cmp rcx, rdx
cmovae r8, rcx
sbb edi, edi
and edi, r12d
cmp rcx, rdx
jb 0x140055db5
mov eax, dword [rsi + 0x10]
mov dword [r8], eax
lea rax, [r8 + 4]
mov rcx, r13
cmp rax, r8
cmovae rcx, rax
mov qword [rsp + 0x78], rcx
sbb edi, edi
and edi, r12d
cmp rax, r8
jb 0x140055db5
mov r8d, dword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [rsi + 0x10]
mov r8, qword [rsp + 0x78]
add rcx, r8
mov rdx, r13
cmp rcx, r8
cmovae rdx, rcx
sbb edi, edi
and edi, r12d
cmp rcx, r8
jb 0x140055db5
mov eax, dword [rsi + 0x20]
mov dword [rdx], eax
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
mov qword [rsp + 0x78], rcx
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x140055db5
mov r8d, dword [rsi + 0x20]
mov rdx, qword [rsi + 0x28]
call sub.msvcrt.dll_memcpy
mov ecx, dword [rsi + 0x20]
mov rdx, qword [rsp + 0x78]
add rcx, rdx
cmp rcx, rdx
sbb edi, edi
and edi, r12d
mov rax, qword [rsp + 0x68]
cmp rcx, rdx
jb 0x140055dba
mov qword [rsp + 0xb8], rax
xor ecx, ecx
mov eax, ecx
mov qword [rsp + 0x68], rcx
mov ecx, dword [rsp + reloc.MFC42u.dll_CControlBar::CControlBar]
mov dword [rsp + 0x90], ecx
jmp 0x140055dba
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x140055de1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
or r9d, 0xffffffff
xor eax, eax
mov r8d, dword [rsp + 0x5a0]
or edi, 0x10000000
jl 0x140057054
mov qword [rsp + 0x518], rax
mov r11d, eax
mov dword [rsp + reloc.MFC42u.dll_CDaoException::CDaoException], eax
mov qword [rsp + Ordinal_1316], rax
mov esi, eax
mov dword [rsp + reloc.SHLWAPI.dll_Ordinal_628], eax
mov dword [rsp + 0x278], 0x1c
mov dword [rsp + 0x27c], 0x28
mov dword [rsp + 0x280], 0x28
cmp qword [rsp + reloc.MFC42u.dll_Ordinal_1448], rax
jne 0x140055e9a
mov edi, 0xc000000d
xor r11d, r11d
test edi, edi
js 0x140057057
mov edi, dword [rsp + 0x258]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
xor r11d, r11d
test rax, rax
jne 0x14005604b
mov edi, 0xd0000017
jmp 0x140057057
mov ecx, 1
cmp r8d, ecx
jbe 0x140055e49
mov rdx, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
mov dword [rsp + 0x70], eax
lea rax, [rdx + 4]
mov r10, r13
cmp rax, rdx
cmovae r10, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x140055f2d
mov ecx, dword [rdx]
add rcx, r10
mov rdx, r13
cmp rcx, r10
cmovae rdx, rcx
sbb edi, edi
and edi, r12d
cmp rcx, r10
jb 0x140055f2d
mov ecx, dword [rsp + 0x70]
mov eax, 1
add ecx, eax
mov dword [rsp + 0x70], ecx
cmp ecx, eax
jb 0x140055eb0
mov r10d, dword [rdx]
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x140055f2d
mov r11d, r10d
mov dword [rsp + reloc.MFC42u.dll_CDaoException::CDaoException], r10d
xor edx, edx
mov eax, edx
test r10d, r10d
cmovne rax, rcx
mov qword [rsp + 0x518], rax
xor eax, eax
test edi, edi
js 0x140055e4e
cmp r8d, 2
jbe 0x140055e49
mov rdx, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
mov r10d, eax
lea rax, [rdx + 4]
mov r8, r13
cmp rax, rdx
cmovae r8, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x140055fbf
mov ecx, dword [rdx]
add rcx, r8
mov rdx, r13
cmp rcx, r8
cmovae rdx, rcx
sbb edi, edi
and edi, r12d
cmp rcx, r8
jb 0x140055fbf
inc r10d
cmp r10d, 2
jb 0x140055f4c
mov r8d, dword [rdx]
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x140055fbf
mov esi, r8d
mov dword [rsp + reloc.SHLWAPI.dll_Ordinal_628], r8d
xor edx, edx
mov eax, edx
test r8d, r8d
cmovne rax, rcx
mov qword [rsp + Ordinal_1316], rax
test edi, edi
js 0x140055e4e
lea eax, [r11 + 0x30]
mov ecx, r9d
cmp eax, 0x30
cmovae ecx, eax
sbb edi, edi
and edi, r12d
cmp eax, 0x30
jb 0x14005601b
lea eax, [rcx + 4]
mov r8d, r9d
cmp eax, ecx
cmovae r8d, eax
sbb edi, edi
and edi, r12d
cmp eax, ecx
jb 0x14005601b
lea ecx, [r8 + rsi]
mov eax, r9d
cmp ecx, r8d
cmovae eax, ecx
sbb edi, edi
and edi, r12d
mov edx, dword [rsp + 0x284]
cmp ecx, r8d
cmovae edx, eax
mov dword [rsp + 0x284], edx
jmp 0x140056022
mov edx, dword [rsp + 0x284]
xor r11d, r11d
test edi, edi
js 0x140057057
cmp edx, 0x400000
jbe 0x14005603f
mov edi, 0x8000ffff
jmp 0x140057057
mov dword [rsp + 0x258], edx
jmp 0x140055e51
mov qword [rsp + 0x100], rsi
mov rax, qword [rsp + 0xb8]
test rax, rax
jne 0x14005606a
mov edi, 0x80070057
jmp 0x140057057
mov qword [rsp + Ordinal_1519], rax
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x5f8], eax
mov qword [rsp + 0x5f0], rsi
mov eax, dword [rsp + 0x258]
mov dword [rsp + Ordinal_1536], eax
mov dword [rsp + reloc.MFC42u.dll_Ordinal_1536], r11d
lea r8, [rsp + 0x528]
lea rdx, [0x1400b1ee8]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x1400560ee
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
js 0x1400560e5
mov edi, 0x80004005
mov edx, dword [rsp + 0x258]
jmp 0x140056145
lea rdx, str.NtQuerySystemInformation
mov rcx, qword [rsp + 0x528]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x1400560c2
xor r9d, r9d
lea r8d, [r9 + 0x20]
lea rdx, [rsp + 0x5e8]
lea ecx, [r8 + 0x66]
call qword [str._E_t_]
mov edi, eax
or edi, 0x10000000
mov edx, dword [rsp + 0x258]
cmovge edx, dword [rsp + 0x5fc]
mov dword [rsp + 0x258], edx
xor r11d, r11d
cmp edi, 0xd0000023
jne 0x14005615a
mov edi, 0x8007007a
jmp 0x140057057
test edi, edi
js 0x140057057
mov qword [rsp + 0x68], r11
cmp edx, 4
jae 0x140056176
mov edi, 0xc000003e
jmp 0x140056279
mov r9d, dword [rsi]
mov dword [rsp + 0x70], r9d
lea rax, [rsi + 4]
mov r8, r13
cmp rax, rsi
cmovae r8, rax
mov qword [rsp + 0x78], r8
sbb edi, edi
and edi, r12d
cmp rax, rsi
jb 0x140056279
lea eax, [rdx - 4]
cmp eax, r9d
jb 0x14005616c
lea rcx, [r8 + r9]
mov r10, r13
cmp rcx, r8
cmovae r10, rcx
sbb edi, edi
and edi, r12d
cmp rcx, r8
jb 0x140056279
lea eax, [r9 + 4]
or r8d, 0xffffffff
mov ecx, r8d
cmp eax, 4
cmovae ecx, eax
sbb edi, edi
and edi, r12d
cmp eax, 4
jb 0x140056279
mov eax, edx
sub eax, ecx
cmp eax, 4
jb 0x14005616c
mov esi, dword [r10]
mov dword [rsp + 0x90], esi
lea rax, [r10 + 4]
mov r9, r13
cmp rax, r10
cmovae r9, rax
mov qword [rsp + 0xa0], r9
sbb edi, edi
and edi, r12d
cmp rax, r10
jb 0x140056279
lea eax, [rcx + 4]
mov r10d, r8d
cmp eax, ecx
cmovae r10d, eax
sbb edi, edi
and edi, r12d
cmp eax, ecx
jb 0x140056279
mov eax, edx
sub eax, r10d
cmp eax, esi
jb 0x14005616c
lea rcx, [r9 + rsi]
mov r11, r13
cmp rcx, r9
cmovae r11, rcx
sbb edi, edi
and edi, r12d
cmp rcx, r9
jb 0x140056276
lea eax, [r10 + rsi]
mov r9d, r8d
cmp eax, r10d
cmovae r9d, eax
sbb edi, edi
and edi, r12d
cmp eax, r10d
jb 0x140056276
mov eax, edx
sub eax, r9d
cmp eax, 4
jae 0x1400562b3
mov edi, 0xc000003e
xor r11d, r11d
mov rax, qword [rsp + 0xa8]
or edi, 0x10000000
jl 0x140057057
mov rsi, r11
mov qword [rsp + 0x530], r11
mov qword [rsp + 0x538], r11
test rax, rax
jne 0x1400566b8
mov edi, 0xd000000d
jmp 0x140057057
mov r10d, dword [r11]
mov dword [rsp + 0xd0], r10d
lea rax, [r11 + 4]
mov rcx, r13
cmp rax, r11
cmovae rcx, rax
mov qword [rsp + 0xc0], rcx
sbb edi, edi
and edi, r12d
cmp rax, r11
jb 0x140056276
lea eax, [r9 + 4]
mov ecx, r8d
cmp eax, r9d
cmovae ecx, eax
sbb edi, edi
and edi, r12d
cmp eax, r9d
jb 0x140056276
mov eax, edx
sub eax, ecx
cmp eax, r10d
jb 0x140056271
lea eax, [rcx + r10]
cmp eax, ecx
cmovae r8d, eax
sbb edi, edi
and edi, r12d
cmp eax, ecx
jb 0x140056276
cmp edx, r8d
jne 0x140056271
mov ecx, dword [rsp + 0x70]
add ecx, esi
add ecx, r10d
add rcx, 0xc
mov eax, edx
cmp rcx, rax
jne 0x140056271
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, 0x30
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
xor r11d, r11d
test rax, rax
jne 0x140056373
mov edi, 0xc0000017
jmp 0x1400565b9
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x1400563df
mov eax, dword [rsp + 0x70]
mov dword [rsi], eax
mov qword [rsp + 0xa8], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xa8]
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x1400563c3
mov edi, 0xc0000017
jmp 0x1400564d7
mov qword [rsi + 8], rax
mov r8, qword [rsp + 0xa8]
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x1400563e6
mov dword [rax], r11d
mov qword [rax + 8], r11
mov rdi, qword [rsp + 0xa0]
test rdi, rdi
je 0x14005644f
mov eax, dword [rsp + 0x90]
mov dword [rsi + 0x10], eax
mov qword [rsp + 0xa8], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xa8]
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x1400563b9
mov qword [rsi + 0x18], rax
mov r8, qword [rsp + 0xa8]
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x140056457
mov dword [rsi + 0x10], r11d
mov qword [rsi + 0x18], r11
mov rdi, qword [rsp + 0xc0]
test rdi, rdi
je 0x1400564c4
mov eax, dword [rsp + 0xd0]
mov dword [rsi + 0x20], eax
mov qword [rsp + 0xa8], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xa8]
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x1400563b9
mov qword [rsi + 0x28], rax
mov r8, qword [rsp + 0xa8]
mov rdx, rdi
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x1400564cc
mov dword [rsi + 0x20], r11d
mov qword [rsi + 0x28], r11
mov qword [rsp + 0x68], rsi
mov rsi, r11
mov edi, r11d
test rsi, rsi
je 0x1400565b9
mov rax, qword [rsi + 8]
mov qword [rsp + 0xa8], rax
test rax, rax
je 0x14005651d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xa8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0xa8], rax
test rax, rax
je 0x14005655a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xa8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0xa8], rax
test rax, rax
je 0x140056596
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xa8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, r11
test edi, edi
mov rax, qword [rsp + 0x68]
cmovs rsi, rax
cmovs rax, r11
mov qword [rsp + 0xa8], rax
test rsi, rsi
je 0x140056281
mov rax, qword [rsi + 8]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140056613
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov rax, qword [rsi + 0x18]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14005664a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140056680
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0x68]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], rax
xor r11d, r11d
jmp 0x140056281
mov rdi, qword [rax + 8]
mov qword [rsp + 0x68], rdi
test rdi, rdi
je 0x1400562a9
cmp dword [rax], r11d
je 0x1400562a9
mov eax, dword [rax]
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x70], r11d
test rax, rax
je 0x140056ded
lea rsi, [rax - 8]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov r9, rax
mov qword [rsp + 0xa0], rax
xor r11d, r11d
test rax, rax
je 0x140056de5
mov dl, r11b
mov qword [rsp + 0xa80], rbx
mov rax, rdi
mov r10, r9
mov r8, rsi
and r8d, 7
mov dword [rsp + 0x288], r11d
je 0x14005689d
or dword [rsp + 0x28c], 0xffffffff
mov dword [rsp + 0x90], r11d
xor edi, edi
mov ecx, edi
mov dword [rsp + 0xd0], ecx
test r8d, r8d
je 0x1400567ce
lea rcx, [rax + 1]
mov qword [rsp + 0xc0], rcx
movzx eax, byte [rax]
cmp edi, 4
jge 0x14005679c
mov rcx, qword [rsp + 0x140]
add ecx, 0xffffffe0
shl eax, cl
mov ecx, dword [rsp + 0xd0]
or ecx, eax
mov dword [rsp + 0xd0], ecx
jmp 0x1400567b7
mov ecx, dword [rsp + 0x140]
shl eax, cl
or r11d, eax
mov dword [rsp + 0x90], r11d
mov ecx, dword [rsp + 0xd0]
inc edi
sub dword [rsp + 0x140], r14d
mov rax, qword [rsp + 0xc0]
cmp edi, r8d
jl 0x140056769
mov r11d, ecx
xor r11d, 0x92f65a5
mov dword [rsp + 0x288], r11d
mov edi, dword [rsp + 0x90]
xor edi, 0x699a899c
mov dword [rsp + 0x28c], edi
xor ecx, ecx
test r8d, r8d
je 0x140056855
lea r9, [r10 + 1]
mov qword [rsp + 0xc0], r9
cmp ecx, 4
jge 0x14005681a
rol r11d, 8
mov dword [rsp + 0xb0], r11d
jmp 0x140056824
rol edi, 8
mov dword [rsp + 0xb0], edi
mov r9d, dword [rsp + 0xb0]
mov byte [r10], r9b
inc ecx
mov r10, qword [rsp + 0xc0]
cmp ecx, r8d
mov r9, qword [rsp + 0xa0]
jl 0x1400567fb
mov r11d, dword [rsp + 0x288]
mov edi, dword [rsp + 0x28c]
cmp r8d, 4
jbe 0x140056871
mov ecx, r14d
sub ecx, r8d
shl ecx, 3
shr edi, cl
shl edi, cl
mov dword [rsp + 0x28c], edi
jmp 0x1400568b8
xor ecx, ecx
mov edi, ecx
mov dword [rsp + 0x28c], ecx
cmp r8d, 4
jae 0x1400568b8
mov ecx, 4
sub ecx, r8d
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov dword [rsp + 0x288], r11d
jmp 0x1400568b8
mov dword [rsp + 0xd0], r11d
or dword [rsp + 0x90], 0xffffffff
mov edi, r11d
mov dword [rsp + 0x28c], r11d
mov rcx, rsi
shr rcx, 3
mov qword [rsp + 0xc0], rcx
test rcx, rcx
je 0x140056d1f
mov ecx, dword [rsp + 0xa84]
mov r8d, ecx
shr r8d, 0x10
mov dword [rsp + 0xb0], r8d
movzx r8d, cx
mov dword [rsp + 0xf8], r8d
mov r8d, ecx
xor r8d, ebx
mov dword [rsp + 0xc8], r8d
movzx r8d, bx
mov dword [rsp + 0x84], r8d
movzx r8d, word [rsp + 0xa82]
mov dword [rsp + 0xd8], r8d
add r10, 7
mov qword [rsp + 0x140], r10
lea r8, [rax + 2]
movzx r10d, byte [r8 - 2]
shl r10d, 8
movzx eax, byte [r8 - 1]
or r10d, eax
shl r10d, 8
movzx eax, byte [r8]
or r10d, eax
shl r10d, 8
movzx eax, byte [r8 + 1]
or r10d, eax
movzx r9d, byte [r8 + 2]
shl r9d, 8
movzx eax, byte [r8 + 3]
or r9d, eax
shl r9d, 8
movzx eax, byte [r8 + 4]
or r9d, eax
shl r9d, 8
movzx eax, byte [r8 + 5]
or r9d, eax
xor r11d, r10d
xor edi, r9d
add r8, r14
mov qword [rsp + 0x120], r8
mov r8d, ecx
xor r8d, ebx
xor r8d, edi
xor r8d, r11d
mov ecx, r8d
sub ecx, ebx
rol ecx, 5
mov eax, r8d
rol eax, 0xa
imul ecx, dword [rsp + 0xf8]
add eax, ecx
xor r11d, eax
mov edi, dword [rsp + 0xa84]
lea ecx, [r11 + rdi]
ror ecx, 9
mov eax, r11d
rol eax, 2
imul ecx, dword [rsp + 0xd8]
sub ecx, eax
xor r8d, ecx
mov ecx, r8d
sub ecx, dword [rsp + 0xf8]
imul ecx, dword [rsp + 0x84]
mov eax, r8d
shr eax, 0xd
sub ecx, eax
xor r11d, ecx
mov ecx, r11d
movzx eax, word [rsp + 0xa82]
xor ecx, eax
rol ecx, 6
mov eax, r11d
rol eax, 2
imul ecx, dword [rsp + 0xb0]
sub ecx, eax
xor r8d, ecx
mov ecx, r8d
xor ecx, ebx
mov eax, edi
sub eax, ecx
xor r11d, eax
mov ecx, r11d
ror ecx, 6
mov eax, r11d
xor eax, dword [rsp + 0xf8]
imul eax, dword [rsp + 0xd8]
xor ecx, eax
xor r8d, ecx
lea ecx, [r8 + rdi]
ror ecx, 0xf
mov eax, r8d
rol eax, 2
imul ecx, dword [rsp + 0x84]
add eax, ecx
xor r11d, eax
mov ecx, r11d
sub ecx, ebx
ror ecx, 0xe
mov eax, r11d
rol eax, 8
imul ecx, dword [rsp + 0xb0]
sub ecx, eax
xor r8d, ecx
mov edi, r8d
xor edi, ebx
ror edi, 0xc
mov ecx, r8d
ror ecx, 0xa
mov eax, dword [rsp + 0xf8]
imul eax, edi
xor ecx, eax
xor r11d, ecx
mov ecx, r11d
mov edi, dword [rsp + 0xb0]
xor ecx, edi
movzx eax, word [rsp + 0xa82]
imul ecx, eax
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor r8d, ecx
mov eax, r8d
not eax
ror eax, 5
add eax, dword [rsp + 0x84]
imul eax, edi
xor r11d, eax
mov eax, r11d
sub eax, edi
xor eax, ebx
xor r8d, eax
mov eax, r8d
xor eax, edi
rol eax, 2
mov ecx, dword [rsp + 0xf8]
imul ecx, eax
mov eax, r8d
shr eax, 2
add ecx, eax
xor r11d, ecx
mov edi, r11d
sub edi, dword [rsp + 0xa84]
ror edi, 6
mov ecx, r11d
rol ecx, 7
movzx eax, word [rsp + 0xa82]
imul eax, edi
add ecx, eax
xor r8d, ecx
mov ecx, r8d
ror ecx, 9
mov eax, dword [rsp + 0xf8]
xor eax, r8d
imul eax, dword [rsp + 0x84]
add ecx, eax
xor r11d, ecx
movzx ecx, word [rsp + 0xa82]
xor ecx, r11d
rol ecx, 5
mov eax, r11d
rol eax, 7
imul ecx, dword [rsp + 0xb0]
add eax, ecx
xor r8d, eax
mov eax, dword [rsp + 0xc8]
xor eax, r8d
xor r11d, eax
mov eax, r11d
ror eax, 3
movzx ecx, word [rsp + 0xa82]
sub eax, ecx
imul eax, dword [rsp + 0xf8]
xor r8d, eax
mov edi, r8d
sub edi, dword [rsp + 0xa84]
ror edi, 1
mov ecx, r8d
ror ecx, 6
mov eax, dword [rsp + 0x84]
imul eax, edi
sub eax, ecx
xor r11d, eax
lea ecx, [rbx + r11]
rol ecx, 3
mov eax, r11d
rol eax, 0xe
imul ecx, dword [rsp + 0xb0]
add eax, ecx
xor r8d, eax
lea edi, [rbx + r8]
rol edi, 0xf
mov ecx, r8d
ror ecx, 0xe
mov eax, dword [rsp + 0xf8]
imul eax, edi
sub eax, ecx
xor r11d, eax
mov ecx, dword [rsp + 0x84]
xor ecx, r11d
movzx eax, word [rsp + 0xa82]
imul ecx, eax
mov eax, r11d
shr eax, 3
xor ecx, eax
xor r8d, ecx
mov ecx, dword [rsp + 0xa84]
xor ecx, r8d
rol ecx, 4
mov edi, r8d
rol edi, 2
mov eax, dword [rsp + 0x84]
imul eax, ecx
xor edi, eax
xor edi, dword [rsp + 0xd0]
xor r11d, edi
mov dword [rsp + 0x288], r11d
xor r8d, dword [rsp + 0x90]
mov dword [rsp + 0x28c], r8d
mov rcx, qword [rsp + 0x140]
mov byte [rcx - 4], r11b
ror dword [rsp + 0x288], 8
mov al, byte [rsp + 0x28c]
mov byte [rcx], al
ror dword [rsp + 0x28c], 8
mov al, byte [rsp + 0x288]
mov byte [rcx - 5], al
ror dword [rsp + 0x288], 8
mov al, byte [rsp + 0x28c]
mov byte [rcx - 1], al
ror dword [rsp + 0x28c], 8
mov al, byte [rsp + 0x288]
mov byte [rcx - 6], al
ror dword [rsp + 0x288], 8
mov al, byte [rsp + 0x28c]
mov byte [rcx - 2], al
ror dword [rsp + 0x28c], 8
mov al, byte [rsp + 0x288]
mov byte [rcx - 7], al
mov al, byte [rsp + 0x28c]
mov byte [rcx - 3], al
mov r11d, dword [rsp + 0x288]
ror r11d, 8
mov dword [rsp + 0x288], r11d
mov edi, dword [rsp + 0x28c]
ror edi, 8
mov dword [rsp + 0x28c], edi
mov dword [rsp + 0xd0], r10d
mov dword [rsp + 0x90], r9d
add rcx, r14
mov qword [rsp + 0x140], rcx
mov r10d, 1
sub qword [rsp + 0xc0], r10
mov ecx, dword [rsp + 0xa84]
mov r8, qword [rsp + 0x120]
jne 0x14005692d
mov r9, qword [rsp + 0xa0]
jmp 0x140056d25
mov r10d, 1
xor r11d, r11d
mov eax, r11d
test rsi, rsi
je 0x140056d3c
xor dl, byte [rax + r9]
add rax, r10
cmp rax, rsi
jb 0x140056d30
movzx eax, dl
mov rcx, qword [rsp + 0x68]
cmp rax, qword [rsi + rcx]
je 0x140056d59
mov edi, 0xc004d501
mov rsi, qword [rsp + 0x530]
jmp 0x140056d84
mov rsi, r9
mov qword [rsp + 0x530], r9
mov r9, r11
mov qword [rsp + 0xa0], r11
mov rax, qword [rsp + 0x78]
add rax, 0xfffffffffffffff8
mov qword [rsp + 0x538], rax
mov edi, dword [rsp + 0x70]
test r9, r9
je 0x140056db9
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rsp + 0xa0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rsi, qword [rsp + 0x530]
xor r11d, r11d
test edi, edi
js 0x140056ded
mov qword [rsp + 0x118], rsi
mov rsi, r11
mov qword [rsp + 0x530], r11
mov ecx, dword [rsp + 0x538]
mov dword [rsp + 0x25c], ecx
mov edi, 0x10000000
jmp 0x140056df9
mov rsi, qword [rsp + 0x530]
mov edi, 0xd0000001
mov ecx, dword [rsp + 0x25c]
test rsi, rsi
je 0x140056e30
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x530], r11
mov ecx, dword [rsp + 0x25c]
test edi, edi
js 0x140057057
cmp ecx, 4
jb 0x140057049
mov r8, qword [rsp + 0x118]
mov eax, dword [r8]
mov dword [rsp + 0x70], eax
lea rax, [r8 + 4]
mov rdx, r13
cmp rax, r8
cmovae rdx, rax
sbb edi, edi
and edi, r12d
cmp rax, r8
jb 0x14005704e
lea eax, [rcx - 4]
cmp eax, 4
jb 0x140057049
mov esi, dword [rdx]
lea rax, [rdx + 4]
mov rbx, r13
cmp rax, rdx
cmovae rbx, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x14005704e
lea eax, [rcx - 8]
cmp eax, esi
jb 0x140057049
lea eax, [rsi + 8]
cmp eax, r14d
sbb edi, edi
and edi, r12d
cmp eax, r14d
jb 0x14005704e
mov r10d, esi
lea r9, [rbx + rsi]
mov edx, ecx
lea rax, [r8 + rdx]
cmp rax, r9
jb 0x140057049
mov rax, r8
sub rax, rbx
sub rax, rsi
add rax, rdx
cmp rax, r14
jae 0x140057049
mov rax, r11
mov qword [rsp + 0x68], rax
mov edi, r11d
mov dword [rsp + 0x90], r11d
test rbx, rbx
je 0x140056fb9
mov rdx, rbx
mov r8, r13
cmp r9, rbx
cmovae r8, r9
sbb edi, edi
and edi, r12d
cmp r9, rbx
jb 0x140057035
cmp rbx, r8
jae 0x140056fb4
mov r9d, dword [rsp + 0x2a4]
lea rax, [rdx + 4]
mov rcx, r13
cmp rax, rdx
cmovae rcx, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x140057035
cmp rcx, r8
ja 0x140056ff1
mov ecx, dword [rdx]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb edi, edi
and edi, r12d
cmp ecx, 4
cmovae r9d, eax
mov dword [rsp + 0x2a4], r9d
jb 0x140057035
mov ecx, r9d
add rcx, rdx
mov rax, r13
cmp rcx, rdx
cmovae rax, rcx
sbb edi, edi
and edi, r12d
cmp rcx, rdx
jb 0x140057035
cmp rax, r8
ja 0x140056ff1
mov rdx, rax
inc r11d
mov dword [rsp + 0x90], r11d
cmp rax, r8
jb 0x140056f28
mov rax, qword [rsp + 0x68]
cmp rdx, r8
jne 0x140056ff1
test esi, esi
je 0x140057000
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rsp + 0x68], rax
xor ecx, ecx
test rax, rax
jne 0x140056ffb
mov edi, 0xc0000017
jmp 0x140057035
mov edi, 0xc000000d
xor r11d, r11d
jmp 0x14005704e
mov edi, ecx
mov r10, rsi
test rbx, rbx
je 0x140057018
mov r8, r10
mov rdx, rbx
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x68]
mov qword [rsp + Ordinal_1387], rax
mov dword [rsp + 0x564], esi
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x560], eax
xor r11d, r11d
test edi, edi
js 0x14005704e
mov eax, dword [rsp + 0x70]
cmp eax, dword [rsp + 0x560]
je 0x14005704e
mov edi, 0xc000003e
bts edi, 0x1c
jmp 0x140057057
xor r11d, r11d
mov rbx, qword [rsp + 0xe8]
test rbx, rbx
je 0x140057087
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rsp + 0x4d8]
test rsi, rsi
je 0x140057152
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x1400570c8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x1400570f8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x140057127
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x4d8], r11
mov rbx, qword [rsp + 0xb8]
test rbx, rbx
je 0x140057182
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rbx, qword [rsp + 0x100]
test rbx, rbx
je 0x1400571b2
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rbx, qword [rsp + 0xa8]
test rbx, rbx
je 0x140057275
mov rsi, qword [rbx + 8]
test rsi, rsi
je 0x1400571f3
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbx + 8], r11
mov rsi, qword [rbx + 0x18]
test rsi, rsi
je 0x140057223
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbx + 0x18], r11
mov rsi, qword [rbx + 0x28]
test rsi, rsi
je 0x140057252
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rbx, qword [rsp + 0x118]
test rbx, rbx
je 0x1400572a5
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test edi, edi
js 0x1400573ee
mov eax, dword [rsp + 0x560]
mov r10d, 1
cmp eax, r10d
jb 0x1400573ee
mov rdi, qword [rsp + 0x568]
test rdi, rdi
je 0x1400573ee
test eax, eax
je 0x1400573ee
mov ecx, dword [rdi]
lea rax, [rdi + 4]
mov rdx, r13
cmp rax, rdi
cmovae rdx, rax
sbb r8d, r8d
and r8d, r12d
cmp rax, rdi
jb 0x140057311
mov dword [rsp + 0x290], ecx
mov rax, r11
test ecx, ecx
cmovne rax, rdx
mov qword [rsp + reloc.MFC42u.dll_Ordinal_1344], rax
jmp 0x140057320
mov ecx, dword [rsp + 0x290]
mov rax, qword [rsp + reloc.MFC42u.dll_Ordinal_1344]
test r8d, r8d
js 0x1400573ee
cmp ecx, 4
jne 0x1400573ee
mov eax, dword [rax]
mov dword [rsp + 0x238], eax
test eax, eax
js 0x1400573ee
cmp dword [rsp + 0x560], r10d
jbe 0x1400573ee
mov rdx, qword [rsp + 0x568]
mov r9d, r11d
lea rax, [rdx + 4]
mov r8, r13
cmp rax, rdx
cmovae r8, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x1400573c6
mov ecx, dword [rdx]
add rcx, r8
mov rdx, r13
cmp rcx, r8
cmovae rdx, rcx
sbb edi, edi
and edi, r12d
cmp rcx, r8
jb 0x1400573c6
add r9d, r10d
cmp r9d, r10d
jb 0x14005735c
mov ecx, dword [rdx]
lea rax, [rdx + 4]
cmp rax, rdx
cmovae r13, rax
sbb edi, edi
and edi, r12d
cmp rax, rdx
jb 0x1400573c6
mov dword [rsp + reloc.MFC42u.dll_CEnumFormatEtc::CEnumFormatEtc], ecx
mov rax, r11
test ecx, ecx
cmovne rax, r13
mov qword [rsp + 0x548], rax
jmp 0x1400573d5
mov ecx, dword [rsp + reloc.MFC42u.dll_CEnumFormatEtc::CEnumFormatEtc]
mov rax, qword [rsp + 0x548]
test edi, edi
js 0x1400573ee
cmp ecx, r14d
jne 0x1400573ee
mov rax, qword [rax]
mov qword [rsp + 0x370], rax
jmp 0x1400573ee
xor r11d, r11d
and qword [rsp + 0x5a0], 0
mov rdi, qword [rsp + reloc.MFC42u.dll_Ordinal_1448]
test rdi, rdi
je 0x14005742f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + reloc.MFC42u.dll_Ordinal_1448], r11
and qword [rsp + 0x560], 0
mov rdi, qword [rsp + 0x568]
test rdi, rdi
je 0x140057470
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + Ordinal_1387], r11
mov rdi, qword [rsp + 0x128]
test rdi, rdi
je 0x1400574a0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rdi, qword [rsp + 0x108]
test rdi, rdi
je 0x1400574d0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov eax, dword [rsp + 0x164]
mov dword [rsp + 0x298], eax
mov ebx, dword [rsp + 0x160]
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x2e0], r11
mov qword [rsp + 0x2d8], rax
mov r14d, 0x8007007a
jmp 0x14004c097
cmp r15d, 0xd00000e5
je 0x14005752e
cmp r15d, 0xc004d501
je 0x14005752e
cmp r15d, 0xd000003e
jne 0x140057534
mov r15d, 0xc004f028
jmp 0x14004c14c
mov r15d, 0xc004f027
test r15d, r15d
jns 0x140057549
cmp r15d, r14d
jne 0x14004c14c
mov edi, 0xc004f01e
jmp 0x140057561
cmp ebx, 4
jne 0x140057542
mov rax, qword [rsp + 0x2d8]
mov ecx, dword [rax]
mov dword [rsp + 0x29c], ecx
mov edi, esi
lea rcx, [rsp + 0x2d8]
call fcn.1400909dc
cmp edi, 0xc004f027
je 0x1400575c3
cmp edi, 0xc004d301
je 0x1400575c3
lea eax, [rdi + 0x3ffb2aff]
cmp eax, r13d
jbe 0x1400575c3
mov ecx, r13d
mov qword [rsp + 0x2c0], rcx
test edi, edi
jns 0x1400575a9
cmp edi, 0xc004f012
je 0x1400575d1
mov ecx, edi
call fcn.1400909bc
jmp 0x1400575c5
mov eax, dword [rsp + 0x29c]
sub eax, ecx
je 0x1400575bf
cmp eax, ecx
jne 0x1400575d1
mov ecx, 3
jmp 0x1400575d1
mov ecx, esi
jmp 0x1400575d1
mov edi, esi
test edi, edi
js 0x1400575d8
mov rcx, qword [rsp + 0x2c0]
mov dword [rsp + 0x2a0], ecx
xor r8d, r8d
mov dl, r13b
lea rcx, [rsp + 0xc08]
call fcn.14000c9c4
nop
mov eax, 1
jmp 0x14004b0eb
test byte [0x1400fecc0], r13b
je 0x140057624
lea rdx, [0x1400b2408]
lea rcx, [section..data]
call fcn.140016f80
call qword [sym.imp.MFC42u.dll_CPreviewDC::SetBkColor]
nop dword [rax + rax]
xor ecx, ecx
call qword [sym.imp.MFC42u.dll_Ordinal_1519]
nop dword [rax + rax]
test byte [0x1400fecc0], 4
je 0x14005765a
lea rdx, [0x1400b2418]
lea rcx, [section..data]
call fcn.140016f80
mov eax, r13d
jmp 0x14004b0eb