Function at 0x14009a200
Capabilities:
Check mutex on windows
Create directory
Create process on windows
Create thread
Delete file
Delete registry value
Discover group policy via gpresult
Download url
Get common file path
Get hostname
Get proxy
Move file
Persist via app paths registry key
Query or enumerate registry value
Receive data
Schedule task via at
Self delete
Set registry value
Terminate thread

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x10c00
call fcn.14010f350
sub rsp, rax
mov qword [rsp + 0x2230], 0xfffffffffffffffe
movaps xmmword [rsp + 0x10bf0], xmm6
mov rax, qword [0x1401dd1d8]
xor rax, rsp
mov qword [rsp + 0x10be8], rax
movzx edi, r9b
mov r15, r8
mov r13, rdx
mov qword [rsp + Ordinal_1501], rdx
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x1d8], rdx
mov qword [rsp + reloc.mfc140u.dll_CHandleMap::CHandleMap], r8
mov r12, qword [rsp + 0x10c60]
mov qword [rsp + 0x208], r12
mov rsi, qword [rsp + 0x10c68]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x200], rsi
lea rax, [rsp + 0x2218]
mov qword [rsp + 0x68], rax
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x2218]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.At_the_start_of_CheckConditionAndAdvance
lea rcx, [rsp + 0x2220]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
test r15, r15
je 0x14009a355
lea r14, [r15 + 0x220]
mov rdx, r14
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonUndoButton::GetIconSize]
mov r8, rax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0xa48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__2]
nop
lea rcx, [rsp + 0xa48]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
mov ebx, eax
lea rcx, [rsp + 0xa48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test ebx, ebx
jne 0x14009a36f
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, rsi
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor eax, eax
jmp 0x14009aa4f
lea rax, [rsp + 0x2228]
mov qword [rsp + 0x68], rax
lea rdx, str.CheckConditionAndAdvance_condition:
lea rcx, [rsp + 0xda0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x2228]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0xda0]
lea rcx, [rsp + 0xdb0]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0xda0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
lea rdx, str.found
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a406
movzx esi, dil
jmp 0x1400a9f29
lea rdx, [0x140165518]
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a428
movzx esi, dil
xor sil, 1
jmp 0x1400a9f29
lea rdx, str.foundandpushed
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a4f6
test dil, dil
jne 0x14009a4d8
lea rdx, [r15 + 0x230]
lea rcx, [rsp + 0x608]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x608]
call fcn.140041a90
test al, al
je 0x14009a49e
lea rdx, [rsp + 0x608]
lea rcx, [rsp + 0xdb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, r13
call fcn.14005ad10
mov rcx, r13
call fcn.140070fb0
mov rbx, rax
lea rcx, [rsp + 0x608]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, qword [rsp + 0x60]
jmp 0x14009aa46
xor r8d, r8d
lea rdx, str.pressed
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400a9f29
lea rdx, str.foundanddisabled
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a59e
test dil, dil
jne 0x14009a580
lea rdx, [r15 + 0x230]
lea rcx, [rsp + 0x538]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x538]
call fcn.140041a90
test al, al
je 0x14009a568
lea rdx, [rsp + 0x538]
lea rcx, [rsp + 0xdc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, r13
call fcn.14005ad10
mov rcx, r13
call fcn.140070fb0
mov rbx, rax
lea rcx, [rsp + 0x538]
jmp 0x14009a4b1
xor r8d, r8d
lea rdx, str.visible_unavailable
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400a9f29
lea rdx, str.checked
lea rcx, [rsp + 0x50]
call fcn.14000cf00
xor r8d, r8d
test al, al
je 0x14009a5d1
lea rdx, [0x140154fd8]
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
jmp 0x1400a9f29
lea rdx, str.checkdesc
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009a6b1
xor r8d, r8d
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xdc8]
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xdc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x298]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.iswin10
call fcn.14000cf00
test al, al
je 0x14009a6cb
call fcn.1400ef470
jmp 0x1400a9f26
lea rdx, str.iswin64
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a6ea
call fcn.1400ef3b0
jmp 0x1400a9f26
lea rdx, str.iswin10or81
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a723
call fcn.1400ef470
test al, al
jne 0x14009b492
call fcn.1400ef600
mov r14, qword [rsp + 0x60]
test al, al
jne 0x14009b497
jmp 0x14009a9bf
lea rdx, str.iswin81
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a742
call fcn.1400ef600
jmp 0x1400a9f26
lea rdx, str.isJavaInstalled
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a7b3
lea rdx, str.java
lea rcx, [rsp + 0xdd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
xor r9d, r9d
mov r8b, 1
xor edx, edx
mov rcx, rax
call fcn.1400f4d70
movzx esi, al
test al, al
jne 0x1400a9f29
lea rdx, str.java
lea rcx, [rsp + 0xdd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
xor r9d, r9d
mov r8b, 1
lea edx, [r9 + 1]
mov rcx, rax
call fcn.1400f4d70
jmp 0x1400a9f26
lea rdx, str.isjavainstalledjavatesting
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a805
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x6e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x6e8]
call fcn.1400ebad0
cmp eax, 1
setge sil
lea rcx, [rsp + 0x6e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.isOSwindow7
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a855
lea rcx, [rsp + 0x6f0]
call fcn.1400fbf20
nop
lea rdx, [0x14016561c]
lea rcx, [rsp + 0x6f0]
call fcn.14000cf00
test al, al
setne sil
lea rcx, [rsp + 0x6f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.isjavaupdateenabled
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a874
call fcn.1400eedd0
jmp 0x1400a9f26
lea rdx, str.readfnmsanddetectifneedsminorupdate
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a8c1
lea rcx, [rsp + 0x6f8]
call fcn.1400e1e80
nop
lea rdx, str.minor
lea rcx, [rsp + 0x6f8]
call fcn.14000cf00
movzx esi, al
lea rcx, [rsp + 0x6f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.detectifgroupavailable
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009a8e0
call fcn.1400e1c10
jmp 0x1400a9f26
xor r8d, r8d
lea rdx, str.isprinterinstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009aa7a
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xde0]
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xde0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0xde8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor edx, edx
mov rcx, rax
call fcn.1400ef7d0
nop
lea rcx, [rsp + 0x2a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r14, qword [rsp + 0x60]
lea rdx, [r15 + reloc.mfc140u.dll_CHandleMap::CHandleMap]
lea rcx, [rsp + 0x6d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x6d0]
call fcn.140041a90
test al, al
je 0x14009aa14
lea rdx, [rsp + 0x6d0]
lea rcx, [rsp + 0xd98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, r13
call fcn.14005ad10
nop
lea rcx, [rsp + 0x6d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, r13
call fcn.140070fb0
mov rbx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r12
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rax, rbx
mov rcx, qword [rsp + 0x10be8]
xor rcx, rsp
call fcn.14010f260
movaps xmm6, xmmword [rsp + 0x10bf0]
add rsp, 0x10c00
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rdx, str.isprinterdefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009ab74
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xdf0]
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xdf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x700]
call fcn.1400eada0
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x700]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
sete sil
lea rcx, [rsp + 0x700]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.makeprinterdefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009ac45
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xdf8]
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xdf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0xe00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov dl, 1
mov rcx, rax
call fcn.1400ef7d0
nop
lea rcx, [rsp + 0x2b0]
jmp 0x14009a9b4
lea rdx, str.changePrinterAlignment
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009ac60
call fcn.140104c70
jmp 0x1400a9f26
xor r8d, r8d
lea rdx, str.isApplicationInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009b31c
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.exactmatch
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x78]
test eax, eax
js 0x14009ad28
lea rdx, [0x14015831c]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe08]
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe08]
jmp 0x14009ad63
lea rdx, [0x140157e68]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe10]
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.syngene_
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009aed0
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xe18]
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14014a740]
lea rcx, [rsp + 0x710]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.wmic_product_get_name__Find__
lea rcx, [rsp + 0x708]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x708]
lea rcx, [rsp + 0xe28]
call fcn.140006190
nop
lea r8, [rsp + 0x710]
mov rdx, rax
lea rcx, [rsp + 0xe20]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x540]
call fcn.1400f8750
nop
lea rcx, [rsp + 0xe28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x708]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x710]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
nop
lea rcx, [rsp + 0x540]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r14b, 1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, str.exactmatch
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
test eax, eax
js 0x14009afb3
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xe30]
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [0x14014a9e0]
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, str.exactmatch0
lea rcx, [rsp + 0x3f8]
call fcn.14000cf00
test al, al
je 0x14009b026
xor r14b, r14b
jmp 0x14009b026
lea rdx, [0x140158128]
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009b026
lea rdx, [0x14014e038]
lea rcx, [rsp + 0x718]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x718]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xe38]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x718]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xe40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
movzx r8d, r14b
xor edx, edx
mov rcx, rax
call fcn.1400f4d70
movzx esi, al
test al, al
jne 0x14009b0a5
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xe48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
movzx r8d, r14b
lea edx, [r9 + 1]
mov rcx, rax
call fcn.1400f4d70
movzx esi, al
test al, al
jne 0x14009b0a5
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xe50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r9b, 1
movzx r8d, r14b
xor edx, edx
mov rcx, rax
call fcn.1400f4d70
movzx esi, al
xor r8d, r8d
lea rdx, str.version_
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009b2ee
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xe58]
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xe60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x548]
call fcn.1400f9460
nop
lea rdx, str.Not_Found
lea rcx, [rsp + 0x548]
call fcn.14000cf00
test al, al
je 0x14009b20f
lea rdx, str._._Please_contact_help_desk._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0x728]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Not_able_to_find_version_of__
lea rcx, [rsp + 0x720]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x720]
lea rcx, [rsp + 0xe70]
call fcn.140006190
nop
lea r8, [rsp + 0x728]
mov rdx, rax
lea rcx, [rsp + 0xe68]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x720]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x728]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
jmp 0x14009b2df
lea rdx, str.version_Change
lea rcx, [rsp + 0x548]
call fcn.14000cf00
test al, al
je 0x14009b2dc
lea rdx, str.__version_is_not_compatable._Please_contact_help_desk._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0x738]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014a740]
lea rcx, [rsp + 0x730]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x730]
lea rcx, [rsp + 0xe80]
call fcn.140006190
nop
lea r8, [rsp + 0x738]
mov rdx, rax
lea rcx, [rsp + 0xe78]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x730]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x738]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
jmp 0x14009b2df
mov sil, 1
lea rcx, [rsp + 0x548]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.killExplorer
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009b4f9
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xe88]
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x1401506a0]
lea rcx, [rsp + 0x2b8]
call fcn.14000cf00
test al, al
je 0x14009b42b
lea rdx, str.taskkill__F__IM_explorer.exe__T
lea rcx, [rsp + reloc.mfc140u.dll_CDHtmlDialog::DDX_DHtml_SelectIndex]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xe98]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xe98]
jmp 0x14009b46e
lea rdx, str.start__windir_explorer.exe
lea rcx, [rsp + 0xea0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xea8]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xea8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x550]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r14, qword [rsp + 0x60]
lea rdx, [r15 + 0x218]
lea rcx, [rsp + 0x6c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x6c8]
call fcn.140041a90
test al, al
je 0x14009b4ec
lea rdx, [rsp + 0x6c8]
lea rcx, [rsp + 0x2210]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, r13
call fcn.14005ad10
nop
lea rcx, [rsp + 0x6c8]
jmp 0x14009aa1c
lea rdx, str.IsmcAfeeVSE
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009b72d
xor sil, sil
lea rdx, str.C:WindowsiAssistDATversion.txt
lea rcx, [rsp + 0x400]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0xeb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
lea rdx, [rsp + 0x400]
test al, al
je 0x14009b6d4
lea rcx, [rsp + 0xeb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.1400f0a80
nop
xor r8d, r8d
lea rdx, str.DAT_version
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009b62a
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
cmp eax, 0xa
jl 0x14009b6c4
xor r8d, r8d
lea rdx, [0x140165958]
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x558]
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rcx, [rsp + 0x558]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x558]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
movzx ebx, word [rax]
lea rcx, [rsp + 0x558]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
cmp bx, 0x39
sete sil
jmp 0x14009b6c4
lea rax, [rsp + 0xec0]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0xec0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.Unable_to_find_DAT_Version
lea rcx, [rsp + 0xec8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rax, [rsp + 0xed0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0xed0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.founded_data:
lea rcx, [rsp + 0xed8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009b71a
lea rax, [rsp + 0xee0]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0xee0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.File_Not_found
lea rcx, [rsp + 0xee8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x400]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, [0x1401659a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009b8db
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xef0]
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xef0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0x740]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xf00]
call fcn.1400fa610
nop
lea r8, [rsp + 0x740]
mov rdx, rax
lea rcx, [rsp + 0xef8]
call fcn.140006190
nop
lea r8, [rsp + 0x2c0]
mov rdx, rax
lea rcx, [rsp + 0x748]
call fcn.140006190
nop
lea rcx, [rsp + 0xef8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x740]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x748]
lea rdx, [0x1401659b8]
lea rcx, [rsp + 0xf08]
call fcn.140099f10
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xf08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x748]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2c0]
jmp 0x14009b48c
lea rdx, str.runscriptforclientspecific
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009ba97
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf10]
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014e588]
lea rcx, [rsp + 0x758]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0x750]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0x758]
lea rdx, [rsp + 0x750]
lea rcx, [rsp + 0xf18]
call fcn.140006190
nop
lea r8, [rsp + 0x2c8]
mov rdx, rax
lea rcx, [rsp + 0x760]
call fcn.140006190
nop
lea rcx, [rsp + 0xf18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x750]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x758]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x760]
lea rdx, [0x1401659b8]
lea rcx, [rsp + 0xf20]
call fcn.140099f10
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xf20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x760]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2c8]
jmp 0x14009b48c
lea rdx, str.ShowApplicationDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009bbf7
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xf28]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf30]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x50]
call fcn.140041a90
test al, al
je 0x14009bb98
lea rax, [rsp + 0xf38]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xf38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
xor edx, edx
lea rcx, [rsp + 0x68f0]
call fcn.1400b40d0
nop
lea rdx, [0x140165a24]
lea rcx, [rsp + 0x50]
call fcn.14000cf00
movzx ecx, byte [rsp + 0x70a8]
mov edi, 1
test al, al
cmovne ecx, edi
mov byte [rsp + 0x70a8], cl
lea rcx, [rsp + 0x68f0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x68f0]
call fcn.1400b4170
jmp 0x1400a9f29
lea rdx, [0x140165a28]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009c23e
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xorps xmm6, xmm6
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xf40]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xf48]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x408]
call fcn.1400fba40
nop
lea rdx, [0x140165a40]
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009bd9c
lea rdx, [0x14014bb70]
lea rcx, [rsp + 0x770]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0x768]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x768]
lea rcx, [rsp + 0xf50]
call fcn.140006190
nop
lea r8, [rsp + 0x770]
mov rdx, rax
lea rcx, [rsp + 0x778]
call fcn.140006190
nop
lea rcx, [rsp + 0xf50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x768]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x770]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x778]
call fcn.1400f95d0
movaps xmm6, xmm0
lea rcx, [rsp + 0x778]
jmp 0x14009bf33
lea rdx, [0x140165a48]
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009be6a
lea rdx, [0x14014bb60]
lea rcx, [rsp + 0x788]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0x780]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x780]
lea rcx, [rsp + 0xf58]
call fcn.140006190
nop
lea r8, [rsp + 0x788]
mov rdx, rax
lea rcx, [rsp + 0x790]
call fcn.140006190
nop
lea rcx, [rsp + 0xf58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x780]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x788]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x790]
call fcn.1400f95d0
movaps xmm6, xmm0
lea rcx, [rsp + 0x790]
jmp 0x14009bf33
lea rdx, [0x140165a58]
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009bf39
lea rdx, [0x14014bb90]
lea rcx, [rsp + 0x7a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0x798]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x798]
lea rcx, [rsp + 0xf60]
call fcn.140006190
nop
lea r8, [rsp + 0x7a0]
mov rdx, rax
lea rcx, [rsp + 0x7a8]
call fcn.140006190
nop
lea rcx, [rsp + 0xf60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x798]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x7a8]
call fcn.1400f95d0
movaps xmm6, xmm0
lea rcx, [rsp + 0x7a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mulss xmm6, dword [0x14016a758]
cvttss2si r8d, xmm6
movss xmm0, dword [0x14016a768]
lea rcx, [rsp + 0x170]
comiss xmm0, xmm6
jbe 0x14009c08c
lea rdx, [0x140157e50]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
lea rdx, str._MB._click_on_NEXT_STEP
lea rcx, [rsp + 0x7c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._is
lea rcx, [rsp + 0x7b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140165a88]
lea rcx, [rsp + 0x7b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x7b0]
lea rcx, [rsp + 0xf80]
call fcn.140006190
nop
lea r8, [rsp + 0x7b8]
mov rdx, rax
lea rcx, [rsp + 0xf78]
call fcn.140006190
nop
lea r8, [rsp + 0x170]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::Detach]
call fcn.140006190
nop
lea r8, [rsp + 0x7c0]
mov rdx, rax
lea rcx, [rsp + 0xf68]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::Detach]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7c0]
jmp 0x14009c21b
mulss xmm6, dword [0x14016a75c]
xorps xmm2, xmm2
cvtss2sd xmm2, xmm6
movq r8, xmm2
lea rdx, [0x140165218]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
xor r8d, r8d
lea rdx, [0x14015bb8c]
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea r8d, [rax + 3]
lea rdx, [rsp + 0xf88]
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._GB._click_on_NEXT_STEP
lea rcx, [rsp + 0x7d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._is
lea rcx, [rsp + 0x7d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x140165a88]
lea rcx, [rsp + 0x7c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x7c8]
lea rcx, [rsp + 0xfa8]
call fcn.140006190
nop
lea r8, [rsp + 0x7d0]
mov rdx, rax
lea rcx, [rsp + 0xfa0]
call fcn.140006190
nop
lea r8, [rsp + 0x170]
mov rdx, rax
lea rcx, [rsp + 0xf98]
call fcn.140006190
nop
lea r8, [rsp + 0x7d8]
mov rdx, rax
lea rcx, [rsp + 0xf90]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xf90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xfa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xfa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x408]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x170]
jmp 0x14009a9b4
xor r8d, r8d
lea rdx, str.createRestorePoint
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009c412
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xfb0]
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0x7e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xfc0]
call fcn.1400fa610
nop
lea r8, [rsp + 0x7e0]
mov rdx, rax
lea rcx, [rsp + 0xfb8]
call fcn.140006190
nop
lea r8, [rsp + 0x2d0]
mov rdx, rax
lea rcx, [rsp + 0x7f0]
call fcn.140006190
nop
lea rcx, [rsp + 0xfb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xfc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140165ad8]
lea rcx, [rsp + 0x7e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x7f0]
lea rdx, [rsp + 0x7e8]
lea rcx, [rsp + 0xfc8]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xfc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x2ee0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x7f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2d0]
jmp 0x14009b48c
lea rdx, str.IsRegistryKeyExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009c61d
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x568]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x560]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xfd0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xfd8]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140165958]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0xfe0]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x568]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xfe8]
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x560]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0xfe8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0xff0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0xff0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x568]
lea rcx, [rsp + 0xff8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400f5950
movzx esi, al
lea rcx, [rsp + 0x560]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x568]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x130]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.AssigningIP
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009c67d
xor edx, edx
lea rcx, [rsp + 0x38b0]
call fcn.1400126f0
nop
lea rcx, [rsp + 0x38b0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp eax, 1
jne 0x14009c65d
movzx esi, al
jmp 0x14009c66b
movzx esi, sil
xor r14d, r14d
cmp eax, 2
cmove esi, r14d
lea rcx, [rsp + 0x38b0]
call fcn.140012790
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.UserEnvironmentVariables
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009c6dc
xor edx, edx
lea rcx, [rsp + 0x3580]
call fcn.140048890
nop
lea rcx, [rsp + 0x3580]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
jne 0x14009c6bc
mov sil, 1
jmp 0x14009c6ca
movzx esi, sil
xor r14d, r14d
cmp eax, 2
cmove esi, r14d
lea rcx, [rsp + 0x3580]
call fcn.140048960
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.ShowRDPDialog
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009c812
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1000]
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1000]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.hidecertificatefix
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor edx, edx
test eax, eax
js 0x14009c7d3
lea rcx, [rsp + 0x2bc0]
call fcn.1400c3fb0
nop
mov byte [rsp + 0x2d30], 0
lea rcx, [rsp + 0x2bc0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x2bc0]
jmp 0x14009c7ff
lea rcx, [rsp + 0x2e20]
call fcn.1400c3fb0
nop
mov byte [rsp + 0x2f90], 1
lea rcx, [rsp + 0x2e20]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x2e20]
call fcn.1400c4010
nop
lea rcx, [rsp + 0x2d8]
jmp 0x14009a9b4
lea rdx, str.hostfileDlg
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009cab4
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1008]
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1008]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor dil, dil
xor edx, edx
lea rcx, [rsp + 0x26c0]
call fcn.140076140
nop
lea rdx, str.NoDialog
lea rcx, [rsp + 0x2e0]
call fcn.14000cf00
test al, al
je 0x14009c8eb
mov byte [rsp + 0x2840], 1
mov dil, 1
lea rdx, str.Host.txt
lea rcx, [rsp + 0x808]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.AnakageCoursesAnakageFilesSelfHealSolutions
lea rcx, [rsp + 0x800]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3a0
lea rcx, [rsp + 0x7f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1028]
call fcn.1400fd5c0
nop
lea r8, [rsp + 0x800]
mov rdx, rax
lea rcx, [rsp + 0x1020]
call fcn.140006190
nop
lea r8, [rsp + 0x7f8]
mov rdx, rax
lea rcx, [rsp + 0x1018]
call fcn.140006190
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
mov r8, qword [rax + 8]
mov r8, qword [r8 + 0x90]
mov rdx, rbx
lea rcx, [rsp + 0x1010]
call fcn.140079660
nop
lea r8, [rsp + 0x808]
mov rdx, rax
lea rcx, [rsp + 0x570]
call fcn.140006190
nop
lea rcx, [rsp + 0x1010]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1018]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1020]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1028]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x7f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x800]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x808]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x1030]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x26c0]
call fcn.140077770
lea rcx, [rsp + 0x570]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test dil, dil
jne 0x14009ca84
lea rcx, [rsp + 0x26c0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rcx, rax
mov al, 1
test ecx, ecx
jne 0x14009ca77
movzx esi, al
jmp 0x14009ca84
movzx esi, al
xor r14d, r14d
cmp ecx, 2
cmove esi, r14d
lea rcx, [rsp + 0x570]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x26c0]
call fcn.1400761d0
nop
lea rcx, [rsp + 0x2e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.SelectZipFile
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009ce63
lea rcx, [rsp + 0x580]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov edi, 1
mov dword [rsp + 0x40], edi
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
mov edx, edi
lea rcx, [rsp + 0xea70]
call sub.mfc140u.dll_CEnumConnections::CEnumConnections
nop
lea rcx, [rsp + 0xea70]
call sub.mfc140u.dll_CD2DRadialGradientBrush::Detach
cmp rax, rdi
jne 0x14009cb59
lea rdx, [rsp + 0x1038]
lea rcx, [rsp + 0xea70]
call sub.mfc140u.dll_Ordinal_6090
nop
mov rdx, rax
lea rcx, [rsp + 0x580]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1038]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x580]
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x1078]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
mov edx, 0x5c
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov edi, eax
sub ebx, eax
lea r8d, [rbx - 1]
lea rdx, [rsp + 0x578]
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov r8d, edi
lea rdx, [rsp + 0x1040]
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1040]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str..zip
lea rcx, [rsp + 0x578]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009ce12
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1048]
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1048]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0x810]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1058]
call fcn.1400fa610
nop
lea r8, [rsp + 0x810]
mov rdx, rax
lea rcx, [rsp + 0x1050]
call fcn.140006190
nop
lea r8, [rsp + 0x2e8]
mov rdx, rax
lea rcx, [rsp + 0x820]
call fcn.140006190
nop
lea rcx, [rsp + 0x1050]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1058]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x810]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1060]
mov qword [rsp + 0x58], rax
lea rdx, [0x140149c08]
lea rcx, [rsp + 0x818]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x818]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x1070]
call fcn.140006190
nop
lea r8, [rsp + 0x578]
mov rdx, rax
lea rcx, [rsp + 0x1060]
call fcn.140006190
mov rbx, rax
lea rdx, [rsp + 0x820]
lea rcx, [rsp + 0x1068]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.1400f1e70
nop
lea rcx, [rsp + 0x1070]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x818]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x820]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009ce15
xor sil, sil
lea rcx, [rsp + 0x578]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1078]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xea70]
call sub.mfc140u.dll_CDockingPanesRow::CDockingPanesRow
nop
lea rcx, [rsp + 0x580]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.controlAudioSettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009cec4
lea rcx, [rsp + 0x71]
call fcn.1400139f0
nop
mov dl, 1
lea rcx, [rsp + 0x71]
call fcn.140013d50
mov ebx, eax
xor r8d, r8d
mov dl, 1
lea rcx, [rsp + 0x71]
call fcn.140014050
cmp ebx, 1
ja 0x14009ceb2
test eax, eax
jne 0x14009ceb2
mov sil, 1
jmp 0x14009ceb5
xor sil, sil
lea rcx, [rsp + 0x71]
call fcn.140013a00
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.negativeControlAudioSettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009cf27
lea rcx, [rsp + 0x72]
call fcn.1400139f0
nop
xor edx, edx
lea rcx, [rsp + 0x72]
call fcn.140013d50
mov ebx, eax
mov r8b, 1
movzx edx, r8b
lea rcx, [rsp + 0x72]
call fcn.140014050
cmp ebx, 1
ja 0x14009cf15
test eax, eax
jne 0x14009cf15
mov sil, 1
jmp 0x14009cf18
xor sil, sil
lea rcx, [rsp + 0x72]
call fcn.140013a00
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.Determinedefaultprinter
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d4ee
lea rcx, [rsp + 0x588]
call fcn.1400fd5c0
nop
lea rdx, str.printer.txt
lea rcx, [rsp + 0x828]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x828]
lea rdx, [rsp + 0x588]
lea rcx, [rsp + 0x1080]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x588]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1080]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x828]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.wmic_printer_get_default_name_portname
lea rcx, [rsp + 0x848]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x848]
lea rcx, [rsp + 0x1088]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.1400f8750
nop
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, str.TRUE
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009d1a4
lea r8d, [rax - 2]
lea rdx, [rsp + 0x1090]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1090]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140150708]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1098]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1098]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov edx, 0x20
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x10a0]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x10a8]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea r8, [rsp + 0x3a8]
lea rdx, str.ping
lea rcx, [rsp + 0x10b0]
call fcn.140099f10
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x218]
call fcn.1400f8750
nop
lea rdx, str.PORTPROMPT:
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
js 0x14009d202
lea rdx, [0x14014a9e0]
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
xor r8d, r8d
lea rdx, str.Ping_request_could_not_find
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009d365
xor r8d, r8d
lea rdx, str.Request_timed_out.
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009d365
mov sil, 1
lea rax, [rsp + 0x10b8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x10b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Printer_ping_sucess
lea rcx, [rsp + 0x10c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
jne 0x14009d3c7
lea rdx, str.__Change_your_default_printer_if_this_is_not_correct
lea rcx, [rsp + 0x838]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Your_printouts_will_go_to__
lea rcx, [rsp + 0x830]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x168]
lea rdx, [rsp + 0x830]
lea rcx, [rsp + 0x10d0]
call fcn.140006190
nop
lea r8, [rsp + 0x838]
mov rdx, rax
lea rcx, [rsp + 0x10c8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x10d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x830]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x838]
jmp 0x14009d465
xor sil, sil
lea rax, [rsp + 0x10d8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x10d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Printer_ping_failed
lea rcx, [rsp + 0x10e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
je 0x14009d3e1
lea rdx, str.Please_make_any_of_the_your_configured_printers_to_Defalult_printer.
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
jmp 0x14009d46b
lea rdx, str._._It_is_not_connecting._Please_connect_to_VPN_or_LAN._If_you_still_cannot_connect_please_contact_your_IT_support
lea rcx, [rsp + 0x840]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x168]
lea rdx, [0x140165e88]
lea rcx, [rsp + 0x10f0]
call fcn.140099f10
nop
lea r8, [rsp + 0x840]
mov rdx, rax
lea rcx, [rsp + 0x10e8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x10f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x840]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x220]
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x218]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x220]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x168]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x848]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x588]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.McafeeMonitor
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009d66f
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x10f8]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x10f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0x850]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CCmdTarget::EnableAutomation]
call fcn.1400fa610
nop
lea r8, [rsp + 0x850]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_COleCntrFrameWndEx::EnableAutoHidePanes]
call fcn.140006190
nop
lea r8, [rsp + 0x2f0]
mov rdx, rax
lea rcx, [rsp + 0x858]
call fcn.140006190
nop
lea rcx, [rsp + reloc.mfc140u.dll_COleCntrFrameWndEx::EnableAutoHidePanes]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CCmdTarget::EnableAutomation]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x850]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x858]
lea rcx, [rsp + 0x1110]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1118]
call fcn.1400f8750
lea rcx, [rsp + 0x1118]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x858]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2f0]
jmp 0x14009b48c
lea rdx, str.RefreshSnowAgent
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009d863
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1120]
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1120]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0x860]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1130]
call fcn.1400fa610
nop
lea r8, [rsp + 0x860]
mov rdx, rax
lea rcx, [rsp + 0x1128]
call fcn.140006190
nop
lea r8, [rsp + 0x2f8]
mov rdx, rax
lea rcx, [rsp + 0x878]
call fcn.140006190
nop
lea rcx, [rsp + 0x1128]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1130]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x860]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x878]
lea rcx, [rsp + 0x1138]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x870]
call fcn.1400f8750
nop
lea rax, [rsp + 0x1140]
mov qword [rsp + 0x58], rax
lea rdx, str.RefreshSnowAgent:
lea rcx, [rsp + 0x868]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1140]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x870]
lea rdx, [rsp + 0x868]
lea rcx, [rsp + 0x1148]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x868]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x870]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x878]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2f8]
jmp 0x14009b48c
lea rdx, str.RefreshSCCM
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009da0b
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1150]
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x300]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1150]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1160]
call fcn.1400fa610
nop
lea r8, str.AnakageFilesVBScripts_
mov rdx, rax
lea rcx, [rsp + 0x1158]
call fcn.140079660
nop
lea r8, [rsp + 0x300]
mov rdx, rax
lea rcx, [rsp + 0x888]
call fcn.140006190
nop
lea rcx, [rsp + 0x1158]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1160]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x888]
lea rdx, [0x140165fe0]
lea rcx, [rsp + 0x1168]
call fcn.140099f10
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x880]
call fcn.1400f8750
nop
lea rax, [rsp + 0x1170]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x880]
lea rcx, [rsp + 0x1170]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.RefreshSCCM:
lea rcx, [rsp + 0x1178]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x880]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x888]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x300]
jmp 0x14009b48c
lea rdx, str.DeleteRegistryKey
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009dada
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x308]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1180]
lea rcx, [rsp + 0x308]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x308]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1180]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0x1188]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400e0e50
nop
lea rcx, [rsp + 0x308]
jmp 0x14009b48c
lea rdx, str.DeletecacheFiles
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009dc37
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x8b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x8a8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1198]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea r8, [rsp + 0x8a8]
lea rdx, [rsp + 0x8b0]
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
call fcn.1400edf70
lea rdx, str.AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rsp + 0x898]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0x890]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
lea rdx, [rsp + 0x890]
lea rcx, [rsp + 0x1190]
call fcn.140006190
nop
lea r8, [rsp + 0x898]
mov rdx, rax
lea rcx, [rsp + 0x8a0]
call fcn.140006190
nop
lea rcx, [rsp + 0x1190]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x890]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x898]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x8a0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e0ad0
nop
lea rcx, [rsp + 0x8a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1198]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CRichEditCtrl::CRichEditCtrl]
jmp 0x14009a9b4
xor r8d, r8d
lea rdx, str.ipPing
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009de4d
mov sil, 1
lea rdx, str.10.5.140.198
lea rcx, [rsp + 0x8d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.10.5.140.199
lea rcx, [rsp + 0x8c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.ping__n_2
lea rcx, [rsp + 0x8b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x8d0]
lea rdx, [rsp + 0x8b8]
lea rcx, [rsp + 0x11a0]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.1400f8750
nop
lea rcx, [rsp + 0x8b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor r8d, r8d
lea rdx, str.could_not_find_host
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009dd3e
xor r8d, r8d
lea rdx, str.general_failure
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009dd3e
xor r8d, r8d
lea rdx, str.destination_host_unreachable
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009de1c
lea rdx, str.ping__n_2
lea rcx, [rsp + 0x8c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x8c8]
lea rdx, [rsp + 0x8c0]
lea rcx, [rsp + 0x11a8]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x11b0]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor sil, sil
xor r8d, r8d
lea rdx, str.could_not_find_host
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009de19
xor r8d, r8d
lea rdx, str.general_failure
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x14009de19
xor r8d, r8d
lea rdx, str.destination_host_unreachable
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009de1c
xor sil, sil
lea rcx, [rsp + 0xd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.DelRegistryKeyAndSubKey
lea rcx, [rsp + 0x50]
call fcn.14000cf00
xor r8d, r8d
lea rcx, [rsp + 0x50]
test al, al
je 0x14009df20
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x11b8]
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x310]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x11c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400df910
nop
lea rcx, [rsp + 0x310]
jmp 0x14009b48c
lea rdx, str.createRestorePoint
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e0ec
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x11c8]
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x318]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x11c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0x8d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x11d8]
call fcn.1400fa610
nop
lea r8, [rsp + 0x8d8]
mov rdx, rax
lea rcx, [rsp + 0x11d0]
call fcn.140006190
nop
lea r8, [rsp + 0x318]
mov rdx, rax
lea rcx, [rsp + 0x8e8]
call fcn.140006190
nop
lea rcx, [rsp + 0x11d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x11d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140165ad8]
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x8e8]
lea rdx, [rsp + 0x8e0]
lea rcx, [rsp + 0x11e0]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x11e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x2ee0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x8e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x318]
jmp 0x14009b48c
lea rdx, str.isFirefoxinstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e18a
lea rdx, str.C:Program_FilesMozilla_Firefox_firefox.exe
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x418]
lea rcx, [rsp + 0x11e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009e174
lea rdx, str.C:Program_Files__x86_Mozilla_Firefox_firefox.exe
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x418]
lea rcx, [rsp + 0x11f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
setne sil
jmp 0x14009e177
mov sil, 1
lea rcx, [rsp + 0x418]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.isGooglechromeinstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e230
lea rdx, str.C:Program_Files__x86_GoogleChromeApplicationchrome.exe
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
lea rcx, [rsp + 0x11f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009e21a
lea rdx, str.C:Program_FilesGoogleChromeApplicationchrome.exe
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
lea rcx, [rsp + 0x1200]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
setne sil
jmp 0x14009e21d
mov sil, 1
lea rcx, [rsp + reloc.mfc140u.dll_CAnimationBaseObject::CAnimationBaseObject]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.isOfficeInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e33d
xor sil, sil
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x8f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.skype
lea rcx, [rsp + 0x8f0]
call fcn.14000cf00
lea rcx, [rsp + 0x430]
test al, al
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsLync.EXEPath
jne 0x14009e2a3
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsOUTLOOK.EXEPath
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x1208]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x428]
mov rcx, rax
call fcn.1400ed8d0
test eax, eax
jne 0x14009e30c
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
movzx esi, sil
mov edi, 1
test al, al
cmove esi, edi
lea rcx, [rsp + 0x428]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x430]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x8f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.openSilently
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e42d
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1210]
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x320]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1210]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x1218]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CRenderTarget::FillOpacityMask]
call fcn.1400f8750
lea rcx, [rsp + reloc.mfc140u.dll_CRenderTarget::FillOpacityMask]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x320]
jmp 0x14009b48c
lea rdx, str.checkDotNetIsInstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e524
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x908]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x908]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, str.reg_query__HKLMSOFTWAREMicrosoftNet_Framework_SetupNDP___s
lea rcx, [rsp + 0x900]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x900]
lea rcx, [rsp + 0x1228]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x8f8]
call fcn.1400f8750
xor r8d, r8d
lea rdx, str.Version____REG_SZ____2.0.50727.4927
lea rcx, [rsp + 0x8f8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x8f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x900]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x908]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.isMSIInstaller
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e63a
mov sil, 1
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x910]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.skype
lea rcx, [rsp + 0x910]
call fcn.14000cf00
lea rcx, [rsp + 0x438]
test al, al
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsLync.EXEPath
jne 0x14009e58f
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsOUTLOOK.EXEPath
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x438]
lea rcx, [rsp + reloc.mfc140u.dll_CMFCZoomKernel::Filter]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x328]
mov rcx, rax
call fcn.1400ed8d0
test eax, eax
jne 0x14009e606
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor r8d, r8d
lea rdx, str.root
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e609
xor sil, sil
lea rcx, [rsp + 0x328]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x438]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x910]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.isWPSInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009e6df
lea rdx, str.C:Program_Files__x86_WPS_InteractiveWPS_Interactive.exe
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
lea rcx, [rsp + 0x1238]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009e6c9
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
lea rcx, [rsp + 0x1240]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
movzx esi, al
lea rcx, [rsp + reloc.mfc140u.dll_CD2DRadialGradientBrush::CD2DRadialGradientBrush]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.isWePresentInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e84a
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1248]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1248]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1250]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1250]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov edx, 1
lea rcx, [rsp + 0x50]
call fcn.140099db0
test al, al
je 0x14009e7c2
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.C:Program_Files__x86_MirrorOpMirrorOp.exe
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x1258]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009e834
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x1260]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
movzx esi, al
lea rcx, [rsp + 0x448]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.isFileExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009e958
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1268]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1268]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1270]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1270]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1278]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x1400a9f26
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1280]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
jmp 0x1400a9f26
lea rdx, str.BrowserCleanup
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009ed65
lea rcx, [rsp + 0x228]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1288]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1288]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x40
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
test eax, eax
jns 0x14009ea0d
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CPaneDivider::FindPaneContainer]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::FindPaneContainer]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140165278]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009eb2e
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1298]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1298]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x12a0]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x228]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, str.InternetExplorer
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009ebb1
lea rdx, [rsp + 0x50]
lea rcx, [rsp + reloc.mfc140u.dll_CUserToolsManager::FindTool]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x4f30]
call fcn.140082df0
nop
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x12b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x4f30]
call fcn.1400b3c40
lea rcx, [rsp + 0x4f30]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x4f30]
call fcn.140082f00
jmp 0x14009ed3c
lea rdx, str.GoogleChrome
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009ec34
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x12b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x55a0]
call fcn.140082df0
nop
lea rdx, [rsp + 0x228]
lea rcx, [rsp + reloc.mfc140u.dll_CInternetFile::Flush]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x55a0]
call fcn.1400b3c40
lea rcx, [rsp + 0x55a0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x55a0]
call fcn.140082f00
jmp 0x14009ed3c
lea rdx, str.MozillaFirefox
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009ecb7
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x12c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x5c10]
call fcn.140082df0
nop
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x12d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x5c10]
call fcn.1400b3c40
lea rcx, [rsp + 0x5c10]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x5c10]
call fcn.140082f00
jmp 0x14009ed3c
lea rdx, str.Microsoft_Edge
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009ed37
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x12d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x6280]
call fcn.140082df0
nop
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x12e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x6280]
call fcn.1400b3c40
lea rcx, [rsp + 0x6280]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rbx, rax
lea rcx, [rsp + 0x6280]
call fcn.140082f00
jmp 0x14009ed3c
mov rbx, qword [rsp + 0x58]
lea rcx, [rsp + 0xd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x228]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test rbx, rbx
sete sil
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.MoveDataDlg
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009ee9b
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x12e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x12f0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x12f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x7950]
call fcn.1400b5e00
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x12f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
cmp eax, 2
setg byte [rsp + 0x89f8]
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x7950]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x14009ee7a
movzx esi, al
jmp 0x14009ee89
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0x7950]
call fcn.1400b6000
jmp 0x1400a9f29
lea rdx, str.SystemSlowRepairDlg
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009efb9
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1300]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1300]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1308]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1308]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x45f0]
call fcn.140039da0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1310]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x45f0]
call fcn.1400b3b60
lea rcx, [rsp + 0x45f0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x14009ef98
movzx esi, al
jmp 0x14009efa7
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0x45f0]
call fcn.140039e70
jmp 0x1400a9f29
lea rdx, str.move_data
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009f8ba
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1318]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1318]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1320]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1320]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdx, r14
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.move_data
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009f0ba
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1328]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1328]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1330]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1330]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x970]
call fcn.1400fba40
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0x918]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x970]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0x918]
lea rcx, [rsp + 0xa8]
call fcn.140006190
nop
lea rcx, [rsp + 0x918]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x140166684]
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009f1dd
lea rdx, str.D:BackUp_
jmp 0x14009f1f9
lea rdx, [0x140166694]
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x14009f207
lea rdx, str.E:BackUp_
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x1338]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009f242
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [0x140165a40]
lea rcx, [rsp + 0xc0]
call fcn.14000cf00
test al, al
je 0x14009f49a
lea rdx, [0x14014bb70]
lea rcx, [rsp + 0x920]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x920]
lea rcx, [rsp + 0x1340]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1340]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x920]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Desktop_BackUp
lea rcx, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
lea rcx, [rsp + 0x1348]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1348]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_AfxRegDeleteKey]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x1350]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009f371
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x1358]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x1358]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x1360]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400de0d0
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e07f0
lea rax, [rsp + 0x1368]
mov qword [rsp + 0x58], rax
lea rdx, str._result
lea rcx, [rsp + 0x938]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.moveDesktop_ContentTo
lea rcx, [rsp + 0x930]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1368]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x930]
lea rcx, [rsp + 0x1378]
call fcn.140006190
nop
lea r8, [rsp + 0x938]
mov rdx, rax
lea rcx, [rsp + 0x1370]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x1378]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x930]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x938]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009f880
lea rdx, [0x140165a48]
lea rcx, [rsp + 0xc0]
call fcn.14000cf00
test al, al
je 0x14009f6f2
lea rdx, [0x14014bb60]
lea rcx, [rsp + 0x940]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x940]
lea rcx, [rsp + 0x1380]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1380]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x940]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Downloads_BackUp
lea rcx, [rsp + 0x948]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x948]
lea rcx, [rsp + 0x1388]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1388]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x948]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x1390]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009f5c9
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x1398]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x1398]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x13a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400de0d0
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e07f0
lea rax, [rsp + 0x13a8]
mov qword [rsp + 0x58], rax
lea rdx, str._result
lea rcx, [rsp + 0x958]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.moveDownload_ContentTo
lea rcx, [rsp + 0x950]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x13a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x950]
lea rcx, [rsp + 0x13b8]
call fcn.140006190
nop
lea r8, [rsp + 0x958]
mov rdx, rax
lea rcx, [rsp + 0x13b0]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x13b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x950]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x958]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009f880
lea rdx, [0x140165a58]
lea rcx, [rsp + 0xc0]
call fcn.14000cf00
test al, al
je 0x14009f880
lea rdx, [0x14014bb90]
lea rcx, [rsp + 0x960]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x960]
lea rcx, [rsp + 0x13c0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x960]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.Documents_backup
lea rcx, [rsp + 0x968]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x968]
lea rcx, [rsp + 0x13c8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x968]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x13d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009f821
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + reloc.mfc140u.dll_CPane::GetAvailableExpandSize]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + reloc.mfc140u.dll_CPane::GetAvailableExpandSize]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x13e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400de0d0
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e07f0
nop
lea rcx, [rsp + 0x80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x970]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc0]
jmp 0x14009a9b4
lea rdx, str.isDriveExists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009fae6
xor dil, dil
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x13e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x13f0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x13f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x13f8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x13f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.drive_to_find_if_exist_or_not
lea rcx, [rsp + 0x1400]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rdx, str.wmic_logicaldisk_where_drivetype3_get_deviceid
lea rcx, [rsp + 0x1408]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x230]
call fcn.1400f8750
nop
lea rax, [rsp + 0x1410]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x1410]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Number_of_logical_drives_in_machine
lea rcx, [rsp + 0x1418]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea r8, [0x140158124]
lea rdx, str.DeviceID
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1420]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x1420]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.drive_id_after_removing_deviceId_string
lea rcx, [rsp + 0x1428]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
movzx esi, dil
mov edi, 1
test eax, eax
cmovns esi, edi
lea rcx, [rsp + 0x230]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.softwareinstall
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009fe0b
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x250
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x140158124]
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009fb81
mov r8d, eax
lea rdx, [rsp + 0x1430]
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1430]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x14009fb97
lea rdx, [rsp + 0x450]
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x978]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x978]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000cf00
movzx ebx, al
lea rcx, [rsp + 0x978]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x14009fc1b
lea rax, [rsp + 0x1438]
mov qword [rsp + 0x58], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x1438]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
call fcn.140105860
lea rcx, [rsp + 0x598]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x988]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.iAssistStatus.ll
lea rcx, [rsp + 0x980]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1448]
call fcn.1400f9a50
nop
lea r8, [rsp + 0x980]
mov rdx, rax
lea rcx, [rsp + 0x1440]
call fcn.140006190
lea rcx, [0x1401e05d8]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x1b0]
lea r8, [rsp + 0x988]
lea rdx, [rsp + 0x598]
mov rcx, rax
call fcn.140102ae0
nop
lea rcx, [rsp + 0x1448]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x980]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x598]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
mov rcx, rax
lea rdx, str.success
call fcn.14000cf00
test al, al
setne bl
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x1450]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x14009fd7c
cmp bl, 1
jne 0x14009fdb9
xor r8d, r8d
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x14009fd5c
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x1458]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
jmp 0x14009fd81
cmp bl, 1
jne 0x14009fdb9
cmp al, 1
jne 0x14009fdb9
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, bl
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x988]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x598]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x450]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.addAutoConfigScriptAddress
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x14009fffe
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1460]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1460]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1468]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1468]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x458]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x458]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x330]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14009ffe2
cmp qword [rsp + 0x330], 0
je 0x14009ffe2
lea rcx, [rsp + 0x458]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x458]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r14d, r14d
mov dword [rsp + 0x52c], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x52c]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [rsp + 0x508], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x508]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x458]
jmp 0x14009b48c
lea rdx, str.isWiFiConnected
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0068
lea rdx, str.netsh_wlan_show_interface_name_airtelhive_
lea rcx, [rsp + 0x1470]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x990]
call fcn.1400f8750
xor r8d, r8d
lea rdx, str.State_:_connected
lea rcx, [rsp + 0x990]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
sete sil
lea rcx, [rsp + 0x990]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.RegisterAppForStartup
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a0472
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x5a8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + reloc.mfc140u.dll_CMFCRibbonGallery::GetCompactSize]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonGallery::GetCompactSize]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1480]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1480]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140165958]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1488]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1488]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1490]
lea rcx, [rsp + 0x138]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x5a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1490]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x9b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x9b0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
lea rdx, [rsp + 0x5a8]
lea rcx, [rsp + 0x9a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x9a8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rsi, rax
lea rdx, [rsp + 0xfff0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
lea rdx, [rsp + 0xfff0]
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [0x140189eb8]
lea rcx, [rsp + 0x180]
call fcn.1400fb9d0
nop
lea rdx, [0x14014e590]
lea rcx, [rsp + 0x998]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x998]
lea rcx, [rsp + 0x1498]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1498]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x998]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140158f68]
lea rcx, [rsp + 0x9a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea r8, [rsp + 0x9a0]
lea rcx, [rsp + 0x14a0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x14a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
je 0x1400a039e
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e07f0
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rsp + 0x14b0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x14b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
lea rcx, [rsp + 0x14b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400de0d0
mov rdx, rsi
mov rcx, rdi
call fcn.1400f1650
nop
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDockingManager::CDockingManager]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x138]
jmp 0x14009b48c
xor r8d, r8d
lea rdx, str.RestartUserMachine
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a0554
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x14c0]
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x338]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ecx, eax
call fcn.1401036c0
mov ecx, 0x15f90
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x338]
jmp 0x14009a9b4
lea rdx, str.WriteDownloadURL
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a075b
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x14c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x14d0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rdx, str.AnakageCoursesSoftwares
lea rcx, [rsp + 0x9b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x14d8]
call fcn.1400fd5c0
nop
lea r8, [rsp + 0x9b8]
mov rdx, rax
lea rcx, [rsp + 0x5b8]
call fcn.140006190
nop
lea rcx, [rsp + 0x14d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.AnakageCoursesSoftwares_softwareURL.ll
lea rcx, [rsp + 0x9c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x14e0]
call fcn.1400fd5c0
nop
lea r8, [rsp + 0x9c0]
mov rdx, rax
lea rcx, [rsp + 0x9c8]
call fcn.140006190
nop
lea rcx, [rsp + 0x14e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x5b8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e0ad0
lea rcx, [rsp + 0x5b8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp eax, 1
jne 0x1400a073f
lea rcx, [rsp + 0x9c8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x140150704]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a073f
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov rcx, rbx
call fcn.140038fe0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
nop
lea rcx, [rsp + 0x9c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5b8]
jmp 0x14009b48c
lea rdx, str.DownloadSoftware
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a11c2
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x15d8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a088c
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x14e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
lea rdx, [rsp + 0x14f0]
mov rdi, qword [rsp + 0x128]
mov rcx, rdi
call fcn.1400afa20
nop
mov rdx, rax
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2f2f
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x14f8]
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x14f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a0949
mov edx, 0x28
xor r8d, r8d
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1500]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1500]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1508]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1508]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdi, qword [rsp + 0x128]
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
je 0x1400a0a1c
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x1510]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x1518]
call fcn.1400fae10
nop
mov rdx, rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1518]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2f
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1520]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1520]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x5c8]
call fcn.1400f97c0
nop
lea rdx, [rsp + 0x5c8]
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e0ad0
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, [rsp + 0x348]
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0xe0]
call fcn.140006190
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x1528]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a0b2c
lea rax, [rsp + 0x1530]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1530]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.Start_of_utils::downloadSoftwares_deleting_old_.zip_files
lea rcx, [rsp + 0x1538]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
nop
mov ecx, 0x280
call sub.mfc140u.dll_CMFCRibbonInfo::XElementButtonLinkCtrl::XElementButtonLinkCtrl
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1400a0b6a
xor edx, edx
mov rcx, rax
call fcn.14003edb0
mov r13, rax
xor r14d, r14d
jmp 0x1400a0b70
xor r14d, r14d
mov r13d, r14d
lea rax, [rsp + 0x1540]
mov qword [rsp + 0x58], rax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x1540]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Started_the_thread_for_running_Download_Progress_Dialog
lea rcx, [rsp + 0x1548]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
lea rcx, [0x1400b3990]
call sub.mfc140u.dll_AFX_WM_ON_MOVETABCOMPLETE
mov rsi, rax
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3c0
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
test al, al
jne 0x1400a0e49
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3c8
lea rcx, [rsp + 0x9f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x14014da28]
lea rcx, [rsp + 0x9d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x9d0]
lea rdx, [rsp + 0x5c0]
lea rcx, [rsp + 0x1550]
call fcn.140006190
nop
lea r8, [rsp + 0x9f8]
mov rdx, rax
lea rcx, [rsp + 0x9f0]
call fcn.140006190
nop
lea rcx, [rsp + 0x1550]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x9f0]
lea rcx, [rsp + 0x1558]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov r8, rax
lea rdx, [rsp + 0x9e8]
mov rcx, rdi
call fcn.1400af8f0
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x378
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x140166a88]
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rdx, [0x14015838c]
lea rcx, [rsp + 0x9d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x9d8]
lea rdx, [rsp + 0x9e8]
lea rcx, [rsp + 0x1560]
call fcn.140006190
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
lea edx, [rbx + 2]
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_CDaoRecordset::GetValidationText]
nop
lea rcx, [rsp + 0x1560]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._api_download_software_name
lea rcx, [rsp + 0x9e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x9e0]
lea rdx, [rsp + 0x468]
lea rcx, [rsp + 0x1570]
call fcn.140006190
nop
lea r8, [rsp + 0x5d0]
mov rdx, rax
lea rcx, [rsp + 0x1568]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1568]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1570]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x468]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x9f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a0ecd
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::HitTest]
lea rcx, [rsp + 0x340]
test al, al
jne 0x1400a0e73
lea rdx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
jmp 0x1400a0ecd
lea rdx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rax, [rsp + 0x1578]
mov qword [rsp + 0x58], rax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x1578]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Started_the_download
lea rcx, [rsp + 0x1580]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_Ordinal_6717]
mov rbx, rax
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, rbx
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileW
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [r13 + 0x278], 1
mov edx, 1
mov rcx, r13
call fcn.14003f130
mov dword [rsp + 0x240], r14d
test rsi, rsi
je 0x1400a0fb7
lea rdx, [rsp + 0x240]
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [rsp + 0x240], 0x103
jne 0x1400a0fb3
xor edx, edx
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
lea rax, [rsp + 0x1588]
mov qword [rsp + 0x58], rax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x1588]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.DownloadSoftware_condition__:_Killed_the_thread
lea rcx, [rsp + reloc.mfc140u.dll_COleControlSite::GetEventIID]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
mov rcx, qword [rsi + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi + 0x58], r14
lea rcx, [rsp + 0x5c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x340]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov r14, qword [rsp + 0x60]
jmp 0x1400a1004
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x15b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a1125
xor r8d, r8d
lea rdx, str..xlsx
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a10bc
lea rdx, str.sTemp.csv
lea rcx, [rsp + 0xa00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa00]
lea rdx, [rsp + 0x5c8]
lea rcx, [rsp + 0x15c0]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrename]
lea rcx, [rsp + 0x15c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
xor r8d, r8d
lea rdx, str..zip
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a113e
lea rax, [rsp + 0x15c8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x15c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x15d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov rdx, rbx
mov rcx, rax
call fcn.140105d70
jmp 0x1400a113e
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e0ad0
xor sil, sil
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x238]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x348]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x160]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x15d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r13, qword [rsp + 0x5d8]
jmp 0x1400a9f2e
xor r8d, r8d
lea rdx, str.DownloadSoftwareProgressBar
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a1338
lea edx, [r8 + 0x28]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov edx, 0x29
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x15e0]
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x15e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor edx, edx
lea rcx, [rsp + 0x2940]
call fcn.14003edb0
nop
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x15e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rdx, rax
lea rcx, [rsp + 0x2bb0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
lea rcx, [rsp + 0x2940]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov r8, rax
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor edx, edx
lea rcx, [rsp + 0x2940]
call fcn.14003ef80
mov r8d, eax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
lea rcx, [rsp + 0x2940]
call fcn.14003ee40
nop
lea rcx, [rsp + 0x1b8]
jmp 0x14009a9b4
lea rdx, str.CheckComputerNameAndLoggedInUserName
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a15f1
mov dword [rsp + 0x50c], 0x101
lea rdx, [rsp + 0x50c]
lea rcx, [rsp + 0xfde0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rdx, [rsp + 0xfde0]
lea rcx, [rsp + 0x470]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rcx, [rsp + 0x350]
call fcn.1400fba40
nop
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_CHtmlView::LoadFromResource]
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x470]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
je 0x1400a14ce
lea rdx, str.__are_different._Do_you_want_to_change_Computer_Name_same_as_User_Name_to_resolve_this_error_
lea rcx, [rsp + 0xa10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.__and_User_Name__
lea rcx, [rsp + 0xa08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x470]
lea rdx, str.Your_Computer_Name__
lea rcx, [rsp + 0x1608]
call fcn.140099f10
nop
lea r8, [rsp + 0xa08]
mov rdx, rax
lea rcx, [rsp + 0x1600]
call fcn.140006190
nop
lea r8, [rsp + 0x350]
mov rdx, rax
lea rcx, [rsp + 0x15f8]
call fcn.140006190
nop
lea r8, [rsp + 0xa10]
mov rdx, rax
lea rcx, [rsp + 0x15f0]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x15f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x15f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1600]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1608]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
jmp 0x1400a15cf
lea rdx, str.__are_same._Click_on_NEXT_STEP
lea rcx, [rsp + 0xa20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.__and_User_Name__
lea rcx, [rsp + 0xa18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x470]
lea rdx, str.Your_Computer_Name__
lea rcx, [rsp + reloc.mfc140u.dll_CMFCMenuBar::GetHelpCombobox]
call fcn.140099f10
nop
lea r8, [rsp + 0xa18]
mov rdx, rax
lea rcx, [rsp + 0x1620]
call fcn.140006190
nop
lea r8, [rsp + 0x350]
mov rdx, rax
lea rcx, [rsp + 0x1618]
call fcn.140006190
nop
lea r8, [rsp + 0xa20]
mov rdx, rax
lea rcx, [rsp + 0x1610]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1610]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1618]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1620]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCMenuBar::GetHelpCombobox]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
lea rcx, [rsp + 0x350]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x470]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.addSSL2ToJava
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a18a5
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1630]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1630]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1638]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1638]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14018a378]
lea rcx, [rsp + 0x358]
call fcn.1400fb9d0
nop
lea rdx, str.SunJavaDeploymentdeployment.properties
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator_]
lea rcx, [rsp + 0x22c0]
call sub.mfc140u.dll_CEnumFormatEtc::CEnumFormatEtc
nop
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x22c0]
call sub.mfc140u.dll_CResetPropExchange::ExchangePersistentProp
test eax, eax
je 0x1400a1872
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x1401506cc]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a17c7
mov r8, rax
mov edx, 0x3e8
lea rcx, [rsp + 0x10410]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
test rax, rax
je 0x1400a17c7
lea rdx, [rsp + 0x10410]
lea rcx, [rsp + 0x1640]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov rdx, rax
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_Ordinal_1667]
nop
lea rcx, [rsp + 0x1640]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140158868]
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
mov r8, rbx
mov edx, 0x3e8
lea rcx, [rsp + 0x10410]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgetws]
test rax, rax
jne 0x1400a1760
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jns 0x1400a186d
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [0x1401587d4]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
mov rbx, rax
test rax, rax
je 0x1400a1859
lea r8, [0x140150708]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1648]
call fcn.140079660
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputws]
lea rcx, [rsp + 0x1648]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov sil, 1
jmp 0x1400a1875
xor sil, sil
lea rcx, [rsp + 0x410]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x22c0]
call sub.mfc140u.dll_CDockSite::CDockSite
nop
lea rcx, [rsp + 0x358]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.runScriptFileDownloaded
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a1beb
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1650]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1650]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x5e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, r14
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.runScriptFileDownloaded
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a1989
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1658]
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1658]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
xor r8d, r8d
lea rdx, str.true
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, [rsp + 0x5e8]
test eax, eax
js 0x1400a1a73
lea rax, [rsp + 0x1660]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1660]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rcx, [rsp + 0x1668]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140104430
test al, al
je 0x1400a1ab8
jmp 0x1400a1ab5
lea rax, [rsp + 0x1670]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1670]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [0x140166da8]
lea rcx, [rsp + 0x1678]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140104430
mov sil, 1
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0xa28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xa28]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000cf00
movzx ebx, al
lea rcx, [rsp + 0xa28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a1bba
lea rax, [rsp + 0x1680]
mov qword [rsp + 0x58], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x1680]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
call fcn.140105860
test eax, eax
jne 0x1400a1bba
xor sil, sil
lea rdx, str.Taskkill__IM_IAssistHelper.exe__F
lea rcx, [rsp + 0x1688]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x16a0]
call fcn.1400f8750
nop
lea rdx, str.Taskkill__IM_IAssistHelper64.exe__F
lea rcx, [rsp + 0x1690]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1698]
call fcn.1400f8750
lea rcx, [rsp + 0x1698]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x16a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x158]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.RunTroubleshooter
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a20ba
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x16a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x16b0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x50]
call fcn.140041a90
test al, al
je 0x1400a1cde
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2d0
lea rcx, [rsp + 0x16b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rcx, [rsp + 0x16b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.test
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Audio_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a1d58
lea rdx, str.Audio_Troubleshooter
lea rcx, [rsp + 0x16c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x3080]
call fcn.14003a420
nop
lea rcx, [rsp + 0x3080]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov qword [rsp + 0x128], rax
lea rcx, [rsp + 0x3080]
call fcn.14003a4d0
jmp 0x1400a207c
lea rdx, str.Maintenance_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a1da2
lea rdx, str.msdt.exe__id_MaintenanceDiagnostic
lea rcx, [rsp + 0x16c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x16d0]
call fcn.1400f8750
lea rcx, [rsp + 0x16d0]
jmp 0x1400a2076
lea rdx, str.Disk_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a1dec
lea rdx, str.cleanmgr
lea rcx, [rsp + 0x16d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x16e0]
call fcn.1400f8750
lea rcx, [rsp + 0x16e0]
jmp 0x1400a2076
lea rdx, str.Networking_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a1e50
lea rdx, str.Networking_Troubleshooter
lea rcx, [rsp + 0x16e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x3300]
call fcn.14003a420
nop
lea rcx, [rsp + 0x3300]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov qword [rsp + 0x128], rax
lea rcx, [rsp + 0x3300]
call fcn.14003a4d0
jmp 0x1400a207c
lea rdx, str.IE_Security_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a1ead
lea rdx, str.msdt.exe__id_IESecurityDiagnostic
lea rcx, [rsp + 0x16f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x16f8]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x16f8]
jmp 0x1400a2076
lea rdx, str.Printer_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a1f0a
lea rdx, str.msdt.exe__id_PrinterDiagnostic
lea rcx, [rsp + 0x1700]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1708]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1708]
jmp 0x1400a2076
lea rdx, str.Power_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a1f67
lea rdx, str.msdt.exe__id_PowerDiagnostic
lea rcx, [rsp + 0x1710]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1718]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1718]
jmp 0x1400a2076
lea rdx, str.Search_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a1fc4
lea rdx, str.msdt.exe__id_SearchDiagnostic
lea rcx, [rsp + 0x1720]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1728]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1728]
jmp 0x1400a2076
lea rdx, str.Hardware_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a201e
lea rdx, str.msdt.exe__id_DeviceDiagnostic
lea rcx, [rsp + 0x1730]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1738]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1738]
jmp 0x1400a2076
lea rdx, str.Bluetooth_Troubleshooter
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a207c
lea rdx, str.msdt.exe__id_BluetoothDiagnostic
lea rcx, [rsp + 0x1740]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1748]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1748]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x150]
call fcn.140041a90
test al, al
jne 0x1400a20a4
cmp qword [rsp + 0x128], 0
jne 0x1400a20a4
mov sil, 1
jmp 0x1400a20a7
xor sil, sil
lea rcx, [rsp + 0x150]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.isExeAlreadyRunning
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a2197
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1750]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1750]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1758]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1758]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1760]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov edx, 0xffffffff
mov rcx, rax
call fcn.1400efad0
cmp al, 1
sete sil
jmp 0x1400a9f29
lea rdx, str.SilentSolutionExecution
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a26dd
mov sil, 1
lea rcx, [rsp + 0xa60]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xa58]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xa50]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1768]
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1768]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ebx, eax
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xbf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x17d8]
call fcn.1400fd5c0
nop
mov r8d, 0x80
lea rdx, [rsp + 0xf5e0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xf5e0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xf5e0]
lea rcx, [rsp + 0x360]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
call qword [sym.imp.WINMM.dll_timeGetTime]
lea eax, [rbx - 0x80]
cmp eax, 0x80
ja 0x1400a2356
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov byte [rcx + 0x309], 0
lea rdx, [rsp + 0xbf8]
lea rcx, [rsp + 0x360]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x510]
call fcn.1400ff5a0
test eax, eax
je 0x1400a2335
mov ecx, ebx
call fcn.1400f4b20
jmp 0x1400a23e5
mov edx, dword [rsp + 0x510]
lea rcx, [rsp + reloc.mfc140u.dll_Ordinal_6000]
call fcn.1400eff80
lea rcx, [rsp + reloc.mfc140u.dll_Ordinal_6000]
jmp 0x1400a23df
lea rdx, str.IAssistHelper.exe
lea rcx, [rsp + 0xa30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa30]
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x1778]
call fcn.140006190
mov rbx, rax
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9, rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1778]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0xa38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xa38]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000cf00
movzx ebx, al
lea rcx, [rsp + 0xa38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a25a8
lea rax, [rsp + 0x1780]
mov qword [rsp + 0x58], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x1780]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
call fcn.140105860
test eax, eax
jne 0x1400a25a8
xor sil, sil
lea rdx, str.Taskkill__IM_IAssistHelper.exe__F
lea rcx, [rsp + 0x1788]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x480]
call fcn.1400f8750
nop
lea rax, [rsp + 0x1790]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x1790]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, str.user_action_result
lea rcx, [rsp + 0x1798]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rdi
mov rcx, rbx
call fcn.140105fe0
lea rdx, str.Taskkill__IM_IAssistHelper64.exe__F
lea rcx, [rsp + 0x17a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x17a8]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x17b0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x17b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdi, rax
lea rdx, str.user_action_result
lea rcx, [rsp + 0x17b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rdi
mov rcx, rbx
call fcn.140105fe0
nop
lea rcx, [rsp + 0x480]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call qword [sym.imp.WINMM.dll_timeGetTime]
lea rdx, [0x1401642f0]
lea rcx, [rsp + 0xa40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa40]
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x17c0]
call fcn.140006190
lea rcx, [0x1401e05d8]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0xa50]
lea r8, [rsp + 0xa58]
lea rdx, [rsp + 0xa60]
mov rcx, rax
call fcn.140102ae0
nop
lea rcx, [rsp + 0xa40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x17c8]
mov qword [rsp + 0x58], rax
lea r8, [0x14015f8e0]
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x17c8]
call fcn.140079660
mov rbx, rax
lea rdx, str.AT_the_end_of_SilentSolutionExecution..._check_helper_status_at
lea rcx, [rsp + 0x17d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x360]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x17d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.isbitlockerenabled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a28a0
lea rcx, [rsp + 0xa80]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xa78]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xa70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x17e8]
call fcn.1400fd5c0
nop
mov r8d, 0x80
lea rdx, [rsp + 0xf7e0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xf7e0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xf7e0]
lea rcx, [rsp + 0x5f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [rsp + 0xa70]
lea rcx, [rsp + 0x5f0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x1401642f0]
lea rcx, [rsp + 0xa68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xa68]
lea rdx, [rsp + 0x5f0]
lea rcx, [rsp + 0x17e0]
call fcn.140006190
lea rcx, [0x1401e05d8]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0xa78]
lea r8, [rsp + 0x488]
lea rdx, [rsp + 0xa80]
mov rcx, rax
call fcn.140102ae0
nop
lea rcx, [rsp + 0xa68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x488]
call fcn.14000cf00
test al, al
jne 0x1400a283f
lea rdx, [0x14015fa30]
lea rcx, [rsp + 0x488]
call fcn.14000cf00
test al, al
jne 0x1400a283f
xor sil, sil
jmp 0x1400a2842
mov sil, 1
lea rcx, [rsp + 0x5f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x17e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x488]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.runcustomsolution
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a2e62
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x17f0]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x17f8]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x17f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1800]
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1800]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1808]
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1808]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1810]
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1810]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.AnakageFilesSelfHealSolutions
lea rcx, [rsp + 0xa90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3a0
lea rcx, [rsp + 0xa88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x1820]
call fcn.1400fa610
nop
lea r8, [rsp + 0xa90]
mov rdx, rax
lea rcx, [rsp + 0x1818]
call fcn.140006190
nop
lea r8, [rsp + 0xa88]
mov rdx, rax
lea rcx, [rsp + 0x498]
call fcn.140006190
nop
lea rcx, [rsp + 0x1818]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1820]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14014e588]
lea rcx, [rsp + 0xa98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov r8, qword [rax + 8]
mov r8, qword [r8 + 0x90]
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x1838]
call fcn.140079660
nop
lea r8, [rsp + 0xa98]
mov rdx, rax
lea rcx, [rsp + 0x1830]
call fcn.140006190
nop
lea r8, [rsp + 0x368]
mov rdx, rax
lea rcx, [rsp + 0x1828]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1828]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1830]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1838]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x490]
call fcn.1400fd5c0
nop
lea rdx, str.information.txt
lea rcx, [rsp + 0xaa0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xaa0]
lea rdx, [rsp + 0x490]
lea rcx, [rsp + 0x1840]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1840]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov edi, 1
mov dword [rsp + 0x20], edi
lea r9d, [rdi + 0x3f]
lea r8d, [rdi + 1]
lea rcx, [rsp + 0x2320]
call fcn.1400141d0
nop
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rdx, str.ScriptPath
lea rcx, [rsp + 0x2320]
call fcn.140099aa0
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140158868]
call fcn.140099aa0
mov rcx, rax
lea rdx, str.Is64Required
call fcn.140099aa0
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rcx, [rsp + 0x2320]
call fcn.1400ad4b0
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
mov rcx, rax
lea rdx, [0x140157e6c]
call fcn.14000cf00
lea rdx, [0x1401497d8]
test al, al
je 0x1400a2dba
lea rax, [rsp + 0x1848]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1848]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [0x140167168]
lea rcx, [rsp + 0x1850]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov dl, 1
jmp 0x1400a2df0
lea rax, [rsp + 0x1858]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1858]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [0x14016716c]
lea rcx, [rsp + 0x1860]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140104150
nop
lea rcx, [rsp + 0x2320]
call fcn.140014400
nop
lea rcx, [rsp + 0x490]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x498]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x368]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x108]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x5f8]
jmp 0x14009b48c
xor r8d, r8d
lea rdx, [0x140167170]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a2f49
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1868]
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1868]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x370]
lea rcx, [rsp + reloc.mfc140u.dll_CMDIChildWndEx::GetPane]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov edx, 0xffffffff
mov rcx, rax
call fcn.1400efad0
test al, al
setne sil
lea rcx, [rsp + 0x370]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.RunCommand
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a3185
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1878]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1878]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1880]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
mov rdx, qword [rdx + 0x90]
lea rcx, [rsp + 0xab8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rax, [rsp + 0x1888]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xab8]
lea rcx, [rsp + 0x1888]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.RunCommand_Condition_Solution_number
lea rcx, [rsp + 0x1890]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rdx, [0x140165ad8]
lea rcx, [rsp + 0xaa8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0xaa8]
lea rcx, [rsp + 0x1898]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdi, rax
lea rcx, [rsp + 0x1898]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [r15 + 0x248]
lea rcx, [rsp + 0xab0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0xab0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rcx, rax
lea rdx, str.showProgressDlg
call fcn.14000cf00
movzx ebx, al
lea rcx, [rsp + 0xab0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a316b
lea rax, [rsp + 0x18a0]
mov qword [rsp + 0x58], rax
lea rdx, str.showProgressDlg
lea rcx, [rsp + 0x18a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
call fcn.140105860
nop
lea rcx, [rsp + 0xab8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
cmp edi, 0x20
setge sil
jmp 0x1400a9f29
lea rdx, str.doesfilepathexists
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a3257
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x18a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + reloc.mfc140u.dll_CD2DBitmap::GetPixelFormat]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CD2DBitmap::GetPixelFormat]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x18b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
jmp 0x1400a9f26
lea rdx, str.skypeDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a32b1
xor edx, edx
lea rcx, [rsp + 0x7290]
call fcn.1400cba30
nop
lea rcx, [rsp + 0x7290]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
cmp rax, 1
jne 0x1400a3290
movzx esi, al
jmp 0x1400a329f
movzx esi, sil
xor r14d, r14d
cmp rax, 2
cmove esi, r14d
lea rcx, [rsp + 0x7290]
call fcn.1400cbb30
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.ProxyDialogForClient
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a3521
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x18c0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x18c8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3a0
lea rcx, [rsp + 0x18f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x14014a9e0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
je 0x1400a33da
lea rax, [rsp + 0x18d0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x18d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0xac0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x18d8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x18d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x2430]
call fcn.14000e7f0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x18e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rdx, rax
lea rcx, [rsp + 0x2690]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xac0]
lea rcx, [rsp + 0x18e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rdx, rax
lea rcx, [rsp + 0x2698]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
mov rcx, rbx
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x2430]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x2430]
call fcn.14000eb20
nop
lea rcx, [rsp + 0xac0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x18f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.MakeAdobeRederDefault
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
test eax, eax
js 0x1400a3649
lea rax, [rsp + 0x600]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts.pdfUserChoice
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
lea rdx, str.02AIRV7bRz8
lea rcx, [rsp + 0x610]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, str.AcroExch.Document.DC
lea rcx, [rsp + 0x6e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
test ebx, ebx
jne 0x1400a362d
cmp qword [rsp + 0x600], 0
je 0x1400a362d
lea rcx, [rsp + 0x610]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x610]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov edi, 1
mov r9d, edi
xor r8d, r8d
lea rdx, str.Hash
mov rcx, qword [rsp + 0x600]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x6e0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x6e0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.Progid
mov rcx, qword [rsp + 0x600]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rcx, [rsp + 0x6e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x610]
jmp 0x14009a9b4
lea rdx, str.getdllfolderlocation
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3742
lea rdx, str._appdataLocalMicrosoftTeamsMeetingAddinmeeting_addin_install_logs.txt
lea rcx, [rsp + 0xac8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1900]
call fcn.1400fba40
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rsp + 0x18f8]
call fcn.140099f10
nop
lea r8, [rsp + 0xac8]
mov rdx, rax
lea rcx, [rsp + 0xad0]
call fcn.140006190
nop
lea rcx, [rsp + 0x18f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1900]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xac8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xad0]
lea rcx, [rsp + 0x1908]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
lea rcx, [0x1401e0610]
test al, al
jne 0x1400a371f
lea rdx, str.Microsoft_Teams_is_not_installed._Please_install_it_so_that_you_can_enable_its_add_in_in_Outlook._Click_on_NEXT_STEP.
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
xor sil, sil
jmp 0x1400a372f
lea rdx, str.Microsoft_Teams_Meeting_Add_in_is_already_in_outlook._Click_on_NEXT_STEP.
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
mov sil, 1
lea rcx, [rsp + 0xad0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.forcecloseexe
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a38d3
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1910]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1910]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0xaf0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
lea rcx, [rsp + 0xae8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x1401675c4]
lea rcx, [rsp + 0xae0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.taskkill__F__IM
lea rcx, [rsp + 0xad8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xaf0]
lea rdx, [rsp + 0xad8]
lea rcx, [rsp + 0x1928]
call fcn.140006190
nop
lea r8, [rsp + 0xae0]
mov rdx, rax
lea rcx, [rsp + 0x1918]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1920]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0xae8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1920]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1928]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xad8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xae0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xae8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xaf0]
jmp 0x14009b48c
lea rdx, str.isDriveLocked
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3b15
lea rcx, [rsp + 0xb08]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xb00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1938]
call fcn.1400fd5c0
nop
mov r8d, 0x80
lea rdx, [rsp + 0xf9e0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xf9e0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xf9e0]
lea rcx, [rsp + 0x618]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [rsp + 0xb00]
lea rcx, [rsp + 0x618]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x1401642f0]
lea rcx, [rsp + 0xaf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xaf8]
lea rdx, [rsp + 0x618]
lea rcx, [rsp + 0x1930]
call fcn.140006190
lea rcx, [0x1401e05d8]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
lea r8, [rsp + 0x4a8]
lea rdx, [rsp + 0xb08]
mov rcx, rax
call fcn.140102ae0
nop
lea rcx, [rsp + 0xaf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x4a8]
call fcn.14000cf00
test al, al
je 0x1400a3a59
lea rdx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, [0x14014a9e0]
lea r8, [0x140167600]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, dil
jmp 0x1400a3ab7
lea rdx, [0x14015fa30]
lea rcx, [rsp + 0x4a8]
call fcn.14000cf00
test al, al
je 0x1400a3ab7
lea rdx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, str.C:WinBDERecoveryKey
lea r8, [0x140167600]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
xor sil, sil
lea rcx, [rsp + 0x618]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1938]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMapStringToOb::CMapStringToOb]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.isDriveEncryptedLocked
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a3d04
lea rcx, [rsp + 0xb20]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x630]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x628]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.c:WindowsIAssist
lea rcx, [rsp + 0xb18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1948]
call fcn.1400fd5c0
nop
mov r8d, 0x80
lea rdx, [rsp + 0xfbe0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xfbe0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rdx, [rsp + 0xfbe0]
lea rcx, [rsp + 0x620]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [rsp + 0xb18]
lea rcx, [rsp + 0x620]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x1401642f0]
lea rcx, [rsp + 0xb10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xb10]
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x1940]
call fcn.140006190
lea rcx, [0x1401e05d8]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x628]
lea r8, [rsp + 0x630]
lea rdx, [rsp + 0xb20]
mov rcx, rax
call fcn.140102ae0
nop
lea rcx, [rsp + 0xb10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.DLocked
lea rcx, [rsp + 0x630]
call fcn.14000cf00
test al, al
je 0x1400a3ca3
lea rdx, [rsp + 0x628]
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
mov edi, 1
mov dword [rsp + 0x28], edi
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9, [0x14014a9e0]
lea r8, [0x140167600]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movzx esi, dil
jmp 0x1400a3ca6
xor sil, sil
lea rcx, [rsp + 0x620]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1948]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x628]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x630]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.pstfilecreated
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a40ff
lea rcx, [rsp + 0xb50]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1950]
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1950]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.pstFileclientspecific.vbs
lea rcx, [rsp + 0x188]
call fcn.14000cf00
test al, al
je 0x1400a3ea1
lea rdx, [0x14014e588]
lea rcx, [rsp + 0xb30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0xb28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea r8, [rsp + 0xb30]
lea rdx, [rsp + 0xb28]
lea rcx, [rsp + 0x1960]
call fcn.140006190
nop
lea r8, [rsp + 0x188]
mov rdx, rax
lea rcx, [rsp + 0x1958]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1958]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1960]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb30]
jmp 0x1400a3f3e
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0xb38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1978]
call fcn.1400fa610
nop
lea r8, [rsp + 0xb38]
mov rdx, rax
lea rcx, [rsp + 0x1970]
call fcn.140006190
nop
lea r8, [rsp + 0x188]
mov rdx, rax
lea rcx, [rsp + 0x1968]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1968]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1970]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1978]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x140149c08]
lea rcx, [rsp + 0xb48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.CScript
lea rcx, [rsp + 0xb40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x4b0]
lea rdx, [rsp + 0xb40]
lea rcx, [rsp + 0x1990]
call fcn.140006190
nop
lea r8, [rsp + 0xb48]
mov rdx, rax
lea rcx, [rsp + 0x1988]
call fcn.140006190
nop
lea r8, [rsp + 0xb50]
mov rdx, rax
lea rcx, [rsp + 0x1980]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.1400f8750
nop
lea rcx, [rsp + 0x1988]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1990]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
xor r8d, r8d
lea rdx, str.All_rights_reserved.
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
sub ebx, eax
lea r8d, [rbx - 0x14]
lea rdx, [rsp + 0x1998]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1998]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov rdx, rax
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x19a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
movzx esi, al
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x148]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x188]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.doesfileexists
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a457d
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x19a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x19b0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.selectfileforuse
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4503
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x19e8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
lea rdx, str.PST_File_.pst_.pstOST_File_.ost_.ostAll_files__._.
lea rcx, [rsp + 0xb78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.MicrosoftOutlook_
lea rcx, [rsp + 0xb58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14018b1a8]
lea rcx, [rsp + 0x19b8]
call fcn.1400fb9d0
nop
lea r8, [rsp + 0xb58]
mov rdx, rax
lea rcx, [rsp + 0xb70]
call fcn.140006190
nop
lea rcx, [rsp + 0x19b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x22f8]
call sub.mfc140u.dll_CEnumArray::CEnumArray
nop
lea rcx, [rsp + 0xb78]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rbx, rax
lea rcx, [rsp + 0xb70]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
mov edi, 1
mov dword [rsp + 0x40], edi
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x1000
lea r8, str.Outlook.pst
mov edx, edi
lea rcx, [rsp + 0xf000]
call sub.mfc140u.dll_CEnumConnections::CEnumConnections
nop
lea rcx, [rsp + 0xf000]
call sub.mfc140u.dll_CD2DRadialGradientBrush::Detach
cmp rax, rdi
je 0x1400a4367
lea rax, [rsp + 0x19c0]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014da28]
lea rcx, [rsp + 0x19c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rdi, rax
lea rdx, str.selectfileforuse_error_code
lea rcx, [rsp + 0x19c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rdi
mov rcx, rbx
call fcn.140105fe0
jmp 0x1400a439d
lea rdx, [rsp + 0x19d0]
lea rcx, [rsp + 0xf000]
call sub.mfc140u.dll_Ordinal_6090
nop
mov rdx, rax
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x638]
call fcn.1400ffa60
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x638]
call fcn.140041a90
test al, al
je 0x1400a4489
lea rdx, [0x1401677e4]
lea rcx, [rsp + 0xb68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Size_of_the_selected_file_is___
lea rcx, [rsp + 0xb60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x638]
lea rdx, [rsp + 0xb60]
lea rcx, [rsp + 0x19e0]
call fcn.140006190
nop
lea r8, [rsp + 0xb68]
mov rdx, rax
lea rcx, [rsp + 0x19d8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x19d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x19e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a449e
lea rdx, str.Not_able_to_find_the_size_of_file_please_provide_valid_input_and_click_on__NEXT_STEP_
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
nop
lea rcx, [rsp + 0x638]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf000]
call sub.mfc140u.dll_CDockingPanesRow::CDockingPanesRow
nop
lea rcx, [rsp + 0x22f8]
call sub.mfc140u.dll_CDockingManager::CDockingManager
nop
lea rcx, [rsp + 0xb70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x640]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x19e8]
jmp 0x14009b48c
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x19f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
movzx ebx, al
test al, al
jne 0x1400a4575
xor r8d, r8d
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4575
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x19f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
movzx ebx, al
movzx esi, bl
jmp 0x1400a9f29
lea rdx, str.antivirusCheckAndDelete
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a488d
xor sil, sil
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + 0xb80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0xb80]
lea rcx, [rsp + 0x1a00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x648]
call fcn.1400f8750
nop
xor r8d, r8d
lea rdx, str.Avast_Antivirus
lea rcx, [rsp + 0x648]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4723
lea rdx, str.C:Program_Files__x86_AVAST_SoftwareAvastAvastUI.exe
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x1a08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a468b
lea rdx, str.del_C:_Program_Files__x86___AVAST_Software_AvastAvastUI.exe__s__q
lea rcx, [rsp + 0x1a10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a18]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a18]
jmp 0x1400a470c
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4b8]
lea rcx, [rsp + 0x1a20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a4715
lea rdx, str.del_C:_Program_Files__AVAST_Software_AvastAvastUI.exe__s__q
lea rcx, [rsp + 0x1a28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a30]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x4b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0x648]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a485c
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x4c0]
lea rcx, [rsp + 0x1a38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a47c3
lea rdx, str.del_C:_Program_Files__x86___AVG_AntivirusAVGUI.exe__s__q
lea rcx, [rsp + 0x1a40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a48]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a48]
jmp 0x1400a4844
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4c0]
lea rcx, [rsp + 0x1a50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a484d
lea rdx, str.del_C:_Program_Files__AVG_AntivirusAVGUI.exe__s__q
lea rcx, [rsp + 0x1a58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a60]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x4c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x648]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x378]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.CheckWiFiSignalStrength
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4ab8
lea rdx, str.netsh_interface_show_interface_findstr_WiFi
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x4c8]
lea rcx, [rsp + 0x1a68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb8]
call fcn.1400f8750
nop
xor r8d, r8d
lea rdx, str.Connected
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
jle 0x1400a4a93
lea rdx, str.netsh_wlan_show_interface_findstr_Signal
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x4c8]
lea rcx, [rsp + 0x1a70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a78]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
xor r8d, r8d
lea rdx, [0x140167b5c]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1a80]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140165958]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1a88]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1a88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
cmp eax, 0x32
jl 0x1400a4a93
mov sil, 1
lea rdx, str.IPCONFIG__FLUSHDNS
lea rcx, [rsp + 0x1a90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1a98]
call fcn.1400f8750
lea rcx, [rsp + 0x1a98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a4a96
xor sil, sil
lea rcx, [rsp + 0xb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.avgcheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4c14
xor sil, sil
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x1ab8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + 0xb90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0xb90]
lea rcx, [rsp + 0x1aa0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb88]
call fcn.1400f8750
nop
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0xb88]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4be3
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x4d0]
lea rcx, [rsp + 0x1aa8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a4b8b
movzx esi, al
jmp 0x1400a4bd4
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4d0]
lea rcx, [rsp + 0x1ab0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
movzx esi, sil
mov edi, 1
cmp al, dil
cmove esi, edi
lea rcx, [rsp + 0x4d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ab8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.antivirusCheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4f2c
xor sil, sil
lea rdx, [0x1401497d8]
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea rcx, [rsp + 0xb98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0xb98]
lea rcx, [rsp + reloc.mfc140u.dll_Ordinal_6848]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x650]
call fcn.1400f8750
nop
xor r8d, r8d
lea rdx, str.Avast_Antivirus
lea rcx, [rsp + 0x650]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4dc2
lea rdx, str.C:Program_Files__x86_AVAST_SoftwareAvastAvastUI.exe
lea rcx, [rsp + 0x4d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x4d8]
lea rcx, [rsp + 0x1ac8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a4d2a
lea rdx, str.C:_Program_Files__x86___AVAST_Software_AvastAvastUI.exe
lea rcx, [rsp + 0x1ad0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1ad8]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ad8]
jmp 0x1400a4dab
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4d8]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4d8]
lea rcx, [rsp + 0x1ae0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a4db4
lea rdx, str.C:_Program_Files__AVAST_Software_AvastAvastUI.exe
lea rcx, [rsp + 0x1ae8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1af0]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1af0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x4d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, str.AVG_Antivirus
lea rcx, [rsp + 0x650]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a4efb
lea rdx, str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x1af8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a4e62
lea rdx, str.C:_Program_Files__x86___AVG_AntivirusAVGUI.exe
lea rcx, [rsp + 0x1b00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1b08]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b08]
jmp 0x1400a4ee3
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x1b10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
cmp al, 1
jne 0x1400a4eec
lea rdx, str.C:_Program_Files__AVG_AntivirusAVGUI.exe
lea rcx, [rsp + 0x1b18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1b20]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x650]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xb98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CPaneDivider::CPaneDivider]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.CheckVirtualMemorySize
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5460
lea rcx, [rsp + 0x658]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
call fcn.1400fd440
mov edi, eax
lea rax, [rsp + 0x1b28]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014a9e0]
lea rcx, [rsp + 0x1b28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
mov rbx, rax
lea rdx, str.computerLowMemory_system_RAM_SIZE
lea rcx, [rsp + 0x1b30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
shl edi, 0xa
movd xmm0, edi
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x14016a760]
cvttsd2si ebx, xmm0
lea rcx, [rsp + 0x390]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
mov r8d, ebx
lea rdx, [0x140157e50]
lea rcx, [rsp + 0x390]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
mov r8d, edi
lea rdx, [0x140157e50]
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
lea rdx, [0x140149c08]
lea rcx, [rsp + 0xba0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x388]
lea rdx, str.c:pagefile.sys
lea rcx, [rsp + 0x1b40]
call fcn.140099f10
nop
lea r8, [rsp + 0xba0]
mov rdx, rax
lea rcx, [rsp + 0x1b38]
call fcn.140006190
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0xbd0]
call fcn.140006190
nop
lea rcx, [rsp + 0x1b38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xba0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
lea rcx, [rsp + 0x658]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rdx, str.PagingFiles
lea rcx, [rsp + 0xbc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rax, [rsp + 0x1b48]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xbc8]
lea rcx, [rsp + 0x1b48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, [rsp + 0x658]
lea rcx, [rsp + 0x1b50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r9, 0xffffffff80000002
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.1400fcb10
nop
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0xbd0]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
jne 0x1400a524e
lea rdx, str._MB._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0xbb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._MB__maximum_size__
lea rcx, [rsp + 0xba8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x388]
lea rdx, str.System_virtual_memory_is_already_at_optimum_initial_size__
lea rcx, [rsp + 0x1b70]
call fcn.140099f10
nop
lea r8, [rsp + 0xba8]
mov rdx, rax
lea rcx, [rsp + 0x1b68]
call fcn.140006190
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x1b60]
call fcn.140006190
nop
lea r8, [rsp + 0xbb0]
mov rdx, rax
lea rcx, [rsp + 0x1b58]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xba8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
jmp 0x1400a5402
mov edx, 0x20
xor r8d, r8d
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1b78]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x20
xor r8d, r8d
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov r8d, eax
lea rdx, [rsp + 0x1b80]
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str._MB._Click_on__NEXT_STEP_.
lea rcx, [rsp + 0xbc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._MB___maximum_size__
lea rcx, [rsp + 0xbb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x388]
lea rdx, str.System_virtual_memory_has_been_set_to_optimum_initial_size__
lea rcx, [rsp + 0x1ba0]
call fcn.140099f10
nop
lea r8, [rsp + 0xbb8]
mov rdx, rax
lea rcx, [rsp + 0x1b98]
call fcn.140006190
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x1b90]
call fcn.140006190
nop
lea r8, [rsp + 0xbc0]
mov rdx, rax
lea rcx, [rsp + 0x1b88]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1b88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1b98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ba0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor sil, sil
lea rcx, [rsp + 0x110]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x388]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x390]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x658]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.IsLaptop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a54e1
lea rdx, str.hostname
lea rcx, [rsp + 0x1ba8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x660]
call fcn.1400f8750
nop
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_CPngImage::LoadFromBuffer]
xor r8d, r8d
lea rdx, str.syglap
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0x660]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.IsAdminRequiredForSolution
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5857
lea rcx, [rsp + 0x398]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1bb0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1bb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1bb8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1bb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.InstallService.bat
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a570d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x398]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x514]
call fcn.1400ff5a0
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0xbd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1bc8]
call fcn.1400fa610
nop
lea r8, [rsp + 0xbd8]
mov rdx, rax
lea rcx, [rsp + 0x1bc0]
call fcn.140006190
nop
lea r8, [rsp + 0x398]
mov rdx, rax
lea rcx, [rsp + 0xbe8]
call fcn.140006190
nop
lea rcx, [rsp + 0x1bc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1bc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.cmd.exe__k
lea rcx, [rsp + 0xbe0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xbe8]
lea rdx, [rsp + 0xbe0]
lea rcx, [rsp + 0x1bd0]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1bd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xbe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x514]
call fcn.1400ff5a0
test eax, eax
je 0x1400a56e4
lea rcx, [rsp + 0xbe8]
jmp 0x1400a5843
lea rdx, str.DeleteService.bat
lea rcx, [rsp + 0x50]
call fcn.14000cf00
test al, al
je 0x1400a584a
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x398]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1be0]
call fcn.1400fa610
nop
lea r8, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
mov rdx, rax
lea rcx, [rsp + 0x1bd8]
call fcn.140006190
nop
lea r8, [rsp + 0x398]
mov rdx, rax
lea rcx, [rsp + 0xc00]
call fcn.140006190
nop
lea rcx, [rsp + 0x1bd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1be0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_ControlBarCleanUp]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.cmd.exe__k
lea rcx, [rsp + 0xda8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xc00]
lea rdx, [rsp + 0xda8]
lea rcx, [rsp + 0x1be8]
call fcn.140006190
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r9, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0x1be8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xda8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x398]
jmp 0x14009b48c
xor r8d, r8d
lea rdx, str.RunBatchFileInAdminMode
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a59cd
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1bf0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1bf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x29
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov r8d, eax
lea rdx, [rsp + 0x1bf8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1bf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0xc08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1c08]
call fcn.1400fa610
nop
lea r8, [rsp + 0xc08]
mov rdx, rax
lea rcx, [rsp + 0x1c00]
call fcn.140006190
nop
lea r8, [rsp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0xc10]
call fcn.140006190
nop
lea rcx, [rsp + 0x1c00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xc10]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rsp + 0xc10]
jmp 0x14009b48c
lea rdx, str.renameSipProfileDeleteFiles
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5aeb
lea rax, [rsp + 0x1c10]
mov qword [rsp + 0x58], rax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x1c10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x1c18]
mov rcx, r15
call fcn.1400ac100
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x4e8]
call fcn.1400ee3d0
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x4e8]
call fcn.140041a90
test al, al
je 0x1400a5a62
lea rdx, [rsp + 0x4e8]
lea rcx, [rsp + 0x1c20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.140102f00
lea rdx, [r15 + 0x208]
lea rcx, [rsp + 0x668]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x668]
call fcn.140041a90
test al, al
je 0x1400a5acf
lea r8, [rsp + 0x668]
lea rdx, [rsp + 0x4e8]
lea rcx, [rsp + 0x1c28]
call fcn.140006190
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e07f0
nop
lea rcx, [rsp + 0x1c28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x668]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4e8]
jmp 0x14009b48c
xor r8d, r8d
lea rdx, str.lyncVersionDetection
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a5c49
xor sil, sil
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1c30]
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x4f0]
call fcn.1400fbab0
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5bcc
lea rdx, str.lync2016
jmp 0x1400a5c14
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5bf1
lea rdx, str.lync2013
jmp 0x1400a5c14
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a5c27
lea rdx, str.lync2010
lea rcx, [rsp + 0x190]
call fcn.14000cf00
test al, al
setne sil
lea rcx, [rsp + 0x4f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x190]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, [0x1401680e0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a60ae
lea rcx, [rsp + 0xc30]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xc28]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x500]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea r8, [rsp + 0x3b0]
lea rdx, [rsp + 0xc28]
lea rcx, [rsp + 0xc30]
call fcn.1400edf70
call fcn.1400eb9e0
mov rdx, rax
lea rcx, [rsp + 0x500]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
mov dword [rsp + 0x518], 0x208
lea r8, [rsp + 0x518]
lea rdx, [rsp + 0x10200]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
lea rdx, [rsp + 0x10200]
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x248]
call fcn.14000cf00
test al, al
je 0x1400a5d37
lea rdx, str.WORK_GROUP
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [0x14014a868]
lea rcx, [rsp + 0xc20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014a868]
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x3b0]
lea rdx, str.Your_Host_Name___Ip_Address___Domain_Name_respectively_is
lea rcx, [rsp + 0x1c58]
call fcn.140099f10
nop
lea r8, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
mov rdx, rax
lea rcx, [rsp + 0x1c50]
call fcn.140006190
nop
lea r8, [rsp + 0x500]
mov rdx, rax
lea rcx, [rsp + 0x1c48]
call fcn.140006190
nop
lea r8, [rsp + 0xc20]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CMFCPropertySheet::GetRuntimeClass]
call fcn.140006190
nop
lea r8, [rsp + 0x248]
mov rdx, rax
lea rcx, [rsp + 0x1c38]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCPropertySheet::GetRuntimeClass]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CMFCRibbonDefaultPanelButton::CopyFrom]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.WMIC_BIOS_GET_SERIALNUMBER
lea rcx, [rsp + 0x1c60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x4f8]
call fcn.1400f8750
nop
xor r8d, r8d
lea rdx, [0x140150708]
lea rcx, [rsp + 0x4f8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x4f8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x3a0]
lea rcx, [rsp + 0x4f8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140158124]
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1c68]
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea r8, [rsp + 0x3b0]
lea rdx, str.Your_Hostname___Ip_Address___Domain_Name_respectively_is
lea rcx, [rsp + 0x1ca0]
call fcn.140099f10
nop
lea r8, [0x1401681e8]
mov rdx, rax
lea rcx, [rsp + 0x1c98]
call fcn.140079660
nop
lea r8, [rsp + 0x500]
mov rdx, rax
lea rcx, [rsp + 0x1c90]
call fcn.140006190
nop
lea r8, [0x1401681e8]
mov rdx, rax
lea rcx, [rsp + 0x1c88]
call fcn.140079660
nop
lea r8, [rsp + 0x248]
mov rdx, rax
lea rcx, [rsp + 0x1c80]
call fcn.140006190
nop
lea r8, str._and_Serial_Number_is
mov rdx, rax
lea rcx, [rsp + 0x1c78]
call fcn.140079660
nop
lea r8, [rsp + 0x3a0]
mov rdx, rax
lea rcx, [rsp + 0x1c70]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1c70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1c98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ca0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x4f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x248]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x500]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc30]
jmp 0x14009a9b4
xor r8d, r8d
lea rdx, str.officeVersionDetection
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a6310
xor sil, sil
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1ca8]
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ca8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1d0]
call fcn.1400fd7d0
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a61a5
lea rdx, str.2016
lea rcx, [rsp + 0x118]
call fcn.14000cf00
test al, al
setne sil
jmp 0x1400a624c
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a61dd
lea rdx, str.2013
lea rcx, [rsp + 0x118]
call fcn.14000cf00
test al, al
setne sil
jmp 0x1400a624c
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6215
lea rdx, str.2010
lea rcx, [rsp + 0x118]
call fcn.14000cf00
test al, al
setne sil
jmp 0x1400a624c
xor r8d, r8d
lea rdx, str.12.0
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a624c
lea rdx, str.2007
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rax, [rsp + 0x1cb0]
mov qword [rsp + 0x58], rax
lea rdx, str._:_Detected_version
lea rcx, [rsp + 0xc38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xc38]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x1cc0]
call fcn.140006190
nop
lea r8, [rsp + 0x1d0]
mov rdx, rax
lea rcx, [rsp + 0x1cb0]
call fcn.140006190
mov rbx, rax
lea rdx, str.officeVersionDetection_condition:
lea rcx, [rsp + 0x1cb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x1cc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x118]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.verifyFromPrinterList
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a692b
lea rax, [rsp + 0x1cc8]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1cc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.At_start_of_verifyFromPrinterList
lea rcx, [rsp + 0x1cd0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
mov byte [rsp + 0x70], 0
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, ebx
lea rdx, [rsp + 0x1cd8]
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1cd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.PrinterScript
lea rcx, [rsp + 0x250]
call fcn.14000cf00
lea rdx, [0x14014d85c]
test al, al
je 0x1400a652a
lea rax, [rsp + 0x1ce0]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1ce0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.In_verifyFromPrinterList_PrinterScript
lea rcx, [rsp + 0x1ce8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rcx, [rsp + 0x1cf0]
call fcn.1400fc000
nop
mov rdx, rax
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1cf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1cf8]
mov qword [rsp + 0x58], rax
lea rdx, str.In_verifyFromPrinterList_After_PrinterScript_getting_printername:
lea rcx, [rsp + 0xc40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1cf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xc40]
lea rcx, [rsp + 0x1d00]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0xc40]
jmp 0x1400a6639
lea rax, [rsp + 0x1d08]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1d08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.In_Else_blocknot_a_printerscript_verifyFromPrinterList_before_PrinterScript
lea rcx, [rsp + 0x1d10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2c8
lea rcx, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CAsyncSocket::Create]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x22
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_COleSafeArray::PutElement]
lea rax, [rsp + 0x1d18]
mov qword [rsp + 0x58], rax
lea rdx, str.In_Else_blocknot_a_printerscript_verifyFromPrinterList_After_PrinterScript_getting_printername:
lea rcx, [rsp + 0xc50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1d18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xc50]
lea rcx, [rsp + 0x1d20]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0xc50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rax, [rsp + 0x1d28]
mov qword [rsp + 0x58], rax
lea rdx, str.verifyFromPrinterList_condition__Checking_installed_printers:
lea rcx, [rsp + 0xc58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1d28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xc58]
lea rcx, [rsp + 0x1d30]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0xc58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.wmic_printer_get_name
lea rcx, [rsp + 0x1d38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1d40]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1d40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1d48]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1d48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.verifyFromPrinterList_condition__after_checking_printers
lea rcx, [rsp + 0x1d50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
mov r14, qword [rsp + 0x60]
jmp 0x1400a678b
lea rax, [rsp + 0x1d78]
mov qword [rsp + 0x58], rax
lea rdx, str.verifyFromPrinterList_condition__printerName:
lea rcx, [rsp + 0xc60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1d78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xc60]
lea rcx, [rsp + 0x1d80]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0xc60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1d88]
mov qword [rsp + 0x58], rax
lea rdx, str.verifyFromPrinterList_condition__Added_printer_list:
lea rcx, [rsp + 0xc68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014d85c]
lea rcx, [rsp + 0x1d88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea r8, [rsp + 0x3b8]
lea rdx, [rsp + 0xc68]
lea rcx, [rsp + 0x1d90]
call fcn.140006190
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0xc68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
movzx ecx, byte [rsp + 0x70]
mov edi, 1
test eax, eax
cmovns ecx, edi
movzx esi, cl
lea rax, [rsp + 0x1d98]
mov qword [rsp + 0x58], rax
lea rdx, str.contionsatisfied
lea rcx, [rsp + 0x1d98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, str.At_end_of_verifyFromPrinterList_condition__:
lea rcx, [rsp + 0x1da0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov r8d, esi
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x3b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x120]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x250]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f2e
xor r8d, r8d
lea rdx, str.matchreg
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a6c65
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1da8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1da8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1db0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1db0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140165958]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1db8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1db8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1dc0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1dc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x260]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140165958]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
mov r8d, eax
lea rdx, [rsp + 0x1dc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x260]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1dc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1dd0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1dd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xc70]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x260]
call fcn.14000cf00
test al, al
jne 0x1400a6b60
call fcn.1400ef3b0
test al, al
lea rdx, [rsp + 0x260]
je 0x1400a6b68
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0xc70]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x1dd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x258]
mov rcx, rax
call fcn.1400ed8d0
test eax, eax
jne 0x1400a6c25
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
test eax, eax
je 0x1400a6c25
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x1de0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x258]
mov rcx, rax
call fcn.1400ed8d0
test eax, eax
jne 0x1400a6c25
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rcx, [rsp + 0x258]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x260]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.RunScriptForMozilla
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a6f71
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsProxyServer
lea rcx, [rsp + 0xc80]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0xc80]
lea rcx, [rsp + 0x1de8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
mov rcx, rax
call fcn.1400ed8d0
lea r8, [0x14014a9e0]
lea rdx, str.:4145
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1df0]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
lea rcx, [rsp + 0x1df0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Proxy_address_read_from_registry_to_be_set_in_Mozilla_Proxy
lea rcx, [rsp + 0x1df8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1e00]
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x14015f6f8]
lea rcx, [rsp + 0xc78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1e10]
call fcn.1400fa610
nop
lea r8, [rsp + 0xc78]
mov rdx, rax
lea rcx, [rsp + 0x1e08]
call fcn.140006190
nop
lea r8, [rsp + 0x268]
mov rdx, rax
lea rcx, [rsp + 0x670]
call fcn.140006190
nop
lea rcx, [rsp + 0x1e08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1e10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea r8d, [rdx + 0x58]
lea rcx, [rsp + 0x2268]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x2250], 0x70
mov dword [rsp + 0x2254], 0x40
xor r14d, r14d
mov qword [rsp + 0x2258], r14
mov qword [rsp + 0x2260], r14
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov qword [rsp + 0x2268], rax
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov qword [rsp + CWnd::MoveWindow], rax
mov qword [rsp + CHtmlView::NavigateError], r14
mov dword [rsp + 0x2280], r14d
mov qword [rsp + 0x2288], r14
lea rcx, [rsp + 0x2250]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x22b8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rax, [rsp + 0x1e18]
mov qword [rsp + 0x58], rax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x1e18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x1e20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rbx
mov dl, 1
mov rcx, rax
call fcn.1400f1e70
nop
lea rcx, [rsp + 0x670]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x268]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CEnumArray::CEnumArray]
jmp 0x14009b48c
xor r8d, r8d
lea rdx, str.symantecUpdatePolicy
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a72fd
mov sil, 1
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e28]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1e30]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.HKEY_LOCAL_MACHINESOFTWARESymantecSymantec_Endpoint_ProtectionCurrentVersionpublic_opstateLatestVirusDefsDate
lea rcx, [rsp + 0xc90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [rsp + 0xc90]
lea rcx, [rsp + 0x1e38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x88]
mov rcx, rax
call fcn.1400ed8d0
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1e40]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x1e40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.last_updated_date_read_from_registry
lea rcx, [rsp + 0x1e48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rax, [rsp + 0x1e50]
mov qword [rsp + 0x58], rax
lea rdx, str.Symantec_is_up_to_date.Current_Virus_Definition_is
lea rcx, [rsp + 0xc88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0xc88]
lea rcx, [rsp + 0x1e50]
call fcn.140006190
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400acdc0
nop
lea rcx, [rsp + 0xc88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2d
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e58]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov r14d, eax
lea rcx, [rsp + 0x1e58]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r8d, ebx
lea rdx, [rsp + 0x1e60]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edx, 0x2d
xor r8d, r8d
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
mov ebx, eax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1e68]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov edi, eax
lea rcx, [rsp + 0x1e68]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r8d, ebx
lea rdx, [rsp + 0x1e70]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1e70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ebx, eax
lea rcx, [rsp + 0x1e78]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rsp + 0x1e78]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov r8d, dword [rax + 0xc]
mov edx, dword [rax + 0x10]
inc edx
mov ecx, dword [rax + 0x14]
add ecx, 0x76c
cmp ebx, ecx
jne 0x1400a72db
sub edx, edi
cmp edx, 1
jg 0x1400a72db
sub r8d, r14d
movzx esi, sil
xor r14d, r14d
cmp r8d, 7
cmovg esi, r14d
lea rcx, [rsp + 0x88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, [0x140168848]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a79b6
xor sil, sil
mov byte [rsp + 0x70], sil
lea rdx, str.AnakageFilesVBScriptsSymantecManualUpdate.bat
lea rcx, [rsp + 0xc98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x1e80]
call fcn.1400fa610
nop
lea r8, [rsp + 0xc98]
mov rdx, rax
lea rcx, [rsp + 0xcd0]
call fcn.140006190
nop
lea rcx, [rsp + 0x1e80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xc98]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1e88]
mov qword [rsp + 0x58], rax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x1e88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0xcd0]
lea rcx, [rsp + 0x1e90]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140104750
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x1e98]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rsp + 0x1e98]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov r9, rax
lea r8, [0x1401587c0]
mov edx, 0x50
lea rcx, [rsp + 0xf590]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
lea rdx, [rsp + 0xf590]
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str..Log
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rcx, [rsp + 0x688]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_LOCAL_MACHINESOFTWARESymantecSymantec_Endpoint_ProtectionCurrentVersionPRODUCTVERSION
lea rcx, [rsp + 0x688]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rdx, [rsp + 0x688]
lea rcx, [rsp + 0x1ea0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x1e0]
mov rcx, rax
call fcn.1400ed8d0
lea rdx, str..105
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1ea8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x1ea8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Symantec_Version_from_registry
lea rcx, [rsp + 0x1eb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rdx, [0x14014a740]
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.DataLogsAV_
lea rcx, [rsp + 0xca8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str._C:ProgramDataSymantecSymantec_Endpoint_Protection_
lea rcx, [rsp + 0xca0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1e0]
lea rdx, [rsp + 0xca0]
lea rcx, [rsp + 0x1ec8]
call fcn.140006190
nop
lea r8, [rsp + 0xca8]
mov rdx, rax
lea rcx, [rsp + 0x1ec0]
call fcn.140006190
nop
lea r8, [rsp + 0x3c8]
mov rdx, rax
lea rcx, [rsp + 0x1eb8]
call fcn.140006190
nop
lea r8, [rsp + 0xcb0]
mov rdx, rax
lea rcx, [rsp + 0x680]
call fcn.140006190
nop
lea rcx, [rsp + 0x1eb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ec0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1ec8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xca0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xca8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + reloc.mfc140u.dll_CDC::HIMETRICtoDP]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x680]
lea rcx, [rsp + reloc.mfc140u.dll_CDC::HIMETRICtoDP]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Symantec_log_file_name
lea rcx, [rsp + 0x1ed8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rdx, [0x14014a9e0]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, str.more
lea rcx, [rsp + 0xcb8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x680]
lea rdx, [rsp + 0xcb8]
lea rcx, [rsp + 0x1ee0]
call fcn.140006190
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1ee8]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1ee8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + reloc.mfc140u.dll_CMDIFrameWndEx::HtmlHelpW]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x100]
lea rcx, [rsp + reloc.mfc140u.dll_CMDIFrameWndEx::HtmlHelpW]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Symantec_log_content
lea rcx, [rsp + 0x1ef8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rdx, str.Risks:_0
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r14d, r14d
nop word [rax + rax]
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
xor r8d, r8d
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov edi, eax
cmp eax, 0xffffffff
jne 0x1400a7928
test r14d, r14d
jle 0x1400a78ab
mov sil, 1
mov byte [rsp + 0x70], sil
xor r8d, r8d
lea rdx, str.Files
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1f00]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x1f08]
mov qword [rsp + 0x58], rax
lea rdx, str._files_etc...
lea rcx, [rsp + 0xcc8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Symantec_scan_completed__Risks:_0_and
lea rcx, [rsp + 0xcc0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
mov r8, rax
lea rdx, [rsp + 0xcc0]
lea rcx, [rsp + 0x1f10]
call fcn.140006190
nop
lea r8, [rsp + 0xcc8]
mov rdx, rax
lea rcx, [rsp + 0x1f08]
call fcn.140006190
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400acdc0
nop
lea rcx, [rsp + 0x1f10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x678]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x680]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x688]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3c8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
jmp 0x1400a9f29
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
sub ebx, edi
lea rcx, [rsp + 0x690]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub ebx, eax
mov r8d, ebx
lea rdx, [rsp + 0x1f18]
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x100]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
inc r14d
jmp 0x1400a7760
xor r8d, r8d
lea rdx, str.showProxyDialog
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a7af4
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1f40]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1f48]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x50]
call fcn.140041a90
test al, al
je 0x1400a7abf
lea rax, [rsp + 0x1f50]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1f50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
xor edx, edx
lea rcx, [rsp + 0x3c00]
call fcn.140033990
nop
lea rcx, [rsp + 0x3c00]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x3c00]
call fcn.140033a80
jmp 0x1400a9f29
lea rdx, str.checkforDomain
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7c48
lea rdx, str.systeminfo_find__Domain_
lea rcx, [rsp + 0x1f58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x270]
call fcn.1400f8750
nop
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3a0
lea rcx, [rsp + 0xcd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.sony
lea rcx, [rsp + 0xcd8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
lea rdx, [rsp + 0x270]
test eax, eax
js 0x1400a7bc3
lea rax, [rsp + 0x1f60]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1f60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.check_for_user_domain_in_sony
lea rcx, [rsp + 0x1f68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rdx, str.ap.sony.com
jmp 0x1400a7c0f
lea rax, [rsp + 0x1f70]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1f70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.check_for_user_domain_in_syngene
lea rcx, [rsp + 0x1f78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rdx, str.BIOCON.COM
xor r8d, r8d
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
setns sil
lea rcx, [rsp + 0xcd8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x270]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.Groupdatecheck
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a7f2c
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1f80]
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x1fb8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x698]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140158b68]
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a7eec
lea rdx, str.gpresult__Scope_User__v_findstr__Last_time_Group_Policy_was_applied_
lea rcx, [rsp + 0x698]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rdx, [rsp + 0x698]
lea rcx, [rsp + 0x1f88]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x1f90]
call fcn.1400f8750
nop
mov rdx, rax
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1f90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea rax, [rsp + 0x1f98]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x1f98]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.Check_for_group_policy_updation
lea rcx, [rsp + 0x1fa0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
xor r8d, r8d
lea rdx, str.Last_time_Group_Policy_was_applied:
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
mov r8d, eax
lea rdx, [rsp + 0x1f8]
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
xor r8d, r8d
lea rdx, str.Group_Policy_was_applied_from:
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1fa8]
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1fa8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_CFileDialog::SetTemplate]
lea r8, str.._Do_you_want_to_force_update_it_
lea rdx, [rsp + 0x1f8]
lea rcx, [rsp + 0x1fb0]
call fcn.140079660
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1fb0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov sil, 1
lea rcx, [rsp + 0x1f8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x698]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1fb8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x278]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.switchoffproxy
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a8527
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1fc0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1fc0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1fc8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1fc8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov edi, 1
mov dword [rsp + 0x1a0], edi
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
xor r8d, r8d
lea rdx, str.ongc
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a80ff
test ebx, ebx
jne 0x1400a80ff
cmp qword [rsp + 0x90], 0
je 0x1400a80ff
lea rdx, str.10.205.48.228:8080
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
mov dword [rsp + 0x51c], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x51c]
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 3]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140168d90]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8267
test ebx, ebx
jne 0x1400a8267
cmp qword [rsp + 0x90], 0
je 0x1400a8267
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1fd0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1fd0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.:8080
lea rcx, [rsp + 0xce0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xce0]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x3d8]
call fcn.140006190
nop
lea rcx, [rsp + 0xce0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov dword [rsp + 0x520], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x520]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
lea rcx, [rsp + 0x3d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140168da0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a838b
test ebx, ebx
jne 0x1400a845a
cmp qword [rsp + 0x90], 0
je 0x1400a845a
lea rdx, str.Proxy.HDBFS.com:9444
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov dword [rsp + 0x524], edi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x524]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, edi
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_Ordinal_4946]
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.ProxyServer
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r14d, r14d
mov dword [rsp + 0x1a0], r14d
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
nop
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a845a
xor r8d, r8d
lea rdx, str.Bagic
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r14d, r14d
mov dword [rsp + 0x28], 4
lea r9d, [r14 + 4]
xor r8d, r8d
lea rdx, str.ProxyEnable
mov rcx, qword [rsp + 0x90]
test eax, eax
js 0x1400a83f7
mov dword [rsp + 0x528], r14d
lea rax, [rsp + 0x528]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
jmp 0x1400a845a
mov dword [rsp + CMFCRibbonTab::accLocation], r14d
lea rax, [rsp + 0x6d8]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rdx, str.AutoConfigURL
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.AutoDetect
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
lea rdx, str.DisableFirefoxProxy
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8514
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3b8
lea rcx, [rsp + 0xcf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, str.disableProxyInMozilla.bat
lea rcx, [rsp + 0xce8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xce8]
lea rdx, [rsp + 0xcf8]
lea rcx, [rsp + 0xcf0]
call fcn.140006190
nop
lea rcx, [rsp + 0xce8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xcf0]
lea rcx, [rsp + 0x1fd8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400e21a0
nop
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xcf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14009a9ba
lea rdx, str.checkpopstatus
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a876f
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x1fe0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1fe0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x1fe8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x1fe8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, str.Internet_Explorer
call fcn.140099e00
test al, al
je 0x1400a8682
lea rdx, [0x14014a9e0]
lea rcx, [rsp + 0x6a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [0x140168e20]
lea rcx, [rsp + 0xd00]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
nop
lea rdx, [rsp + 0xd00]
lea rcx, [rsp + 0x1ff0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
lea rdx, [rsp + 0x6a0]
mov rcx, rax
call fcn.1400ead50
mov dx, 1
lea rcx, [rsp + 0x6a0]
call fcn.140099db0
test al, al
sete sil
lea rcx, [rsp + 0xd00]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, [rsp + 0x50]
lea rcx, str.chrome
call fcn.140099e00
test al, al
je 0x14009a9ba
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREPoliciesGoogleChrome
lea rcx, [rsp + 0x2000]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
lea rax, [rsp + 0x1ff8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREPoliciesGoogleChrome
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor r14d, r14d
mov dword [rsp + 0x244], r14d
mov dword [rsp + 0x530], 4
mov dword [rsp + CMFCBaseAccessibleObject::accHitTest], 0x3ff
lea rax, [rsp + 0x6c0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x244]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x530]
xor r8d, r8d
lea rdx, str.DefaultPopupsSetting
mov rcx, qword [rsp + 0x1ff8]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400a8759
cmp dword [rsp + 0x244], 1
jne 0x1400a8759
mov sil, 1
lea rcx, [rsp + 0x2000]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor sil, sil
lea rcx, [rsp + 0x2000]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.telnetDialog
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a87f8
lea rax, [rsp + 0x2008]
mov qword [rsp + 0x58], rax
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x2008]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [0x140168fbc]
lea rcx, [rsp + 0x2010]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8, rbx
mov dl, 1
mov rcx, rax
call fcn.140104150
xor edx, edx
lea rcx, [rsp + 0x3f50]
call fcn.1400d0350
nop
lea rcx, [rsp + 0x3f50]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
nop
lea rcx, [rsp + 0x3f50]
call fcn.1400d03f0
jmp 0x14009a9ba
xor r8d, r8d
lea rdx, [0x140168fc0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a8921
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2018]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2018]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2020]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2020]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rax, [rsp + 0x2028]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2028]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
xor edx, edx
lea rcx, [rsp + 0x42a0]
call fcn.140005ff0
nop
lea rcx, [rsp + 0x42a0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x42a0]
call fcn.1400060d0
jmp 0x1400a9f29
lea rdx, str.showPrinterdialogbox
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a8ef4
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2030]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2030]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2038]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2038]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8a4e
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2040]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2040]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x50]
call fcn.140041a90
test al, al
je 0x1400a8a98
lea rax, [rsp + 0x2048]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2048]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
xor r8d, r8d
lea rdx, str.servercsvfile
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8b19
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2050]
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2050]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0xa580]
call fcn.1400bb0d0
nop
lea rdx, [0x140169038]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
movzx ecx, byte [rsp + 0xe598]
mov edi, 1
test eax, eax
cmove ecx, edi
mov byte [rsp + 0xe598], cl
xor r8d, r8d
lea rdx, str.servercsvfile
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8bde
lea rax, [rsp + 0x2058]
mov qword [rsp + 0x58], rax
lea rdx, str..csv
lea rcx, [rsp + 0xd08]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xd08]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x2058]
call fcn.140006190
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
nop
lea rcx, [rsp + 0xd08]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov word [rsp + 0xe598], 0x101
lea rcx, [rsp + 0xa580]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
mov rdi, rax
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x3a0
lea rcx, [rsp + 0xd30]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.BInternal
lea rcx, [rsp + 0xd30]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8e28
call sub.mfc140u.dll_AfxFieldText
mov rdx, qword [rax + 8]
add rdx, 0x2c8
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov edx, 0x5c
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_COleControl::ReleaseCaches]
mov ebx, eax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2060]
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2060]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2068]
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2068]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.__printer_here_
lea rcx, [rsp + 0xd20]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.__is_listed_here_or_you_get_any_error_message._Can_you_see__
lea rcx, [rsp + 0xd18]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, str.Please_wait_till__
lea rcx, [rsp + 0xd10]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0xe8]
lea rdx, [rsp + 0xd10]
lea rcx, [rsp + 0x2088]
call fcn.140006190
nop
lea r8, [rsp + 0xd18]
mov rdx, rax
lea rcx, [rsp + 0x2080]
call fcn.140006190
nop
lea r8, [rsp + 0xe8]
mov rdx, rax
lea rcx, [rsp + 0x2078]
call fcn.140006190
nop
lea r8, [rsp + 0xd20]
mov rdx, rax
lea rcx, [rsp + 0x2070]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [0x1401e0610]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2070]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2078]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2080]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2088]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd10]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd18]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd20]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, str.sTemp.csv
lea rcx, [rsp + 0xd28]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rcx, [rsp + 0x2098]
call fcn.1400f97c0
nop
lea r8, [rsp + 0xd28]
mov rdx, rax
lea rcx, [rsp + 0x2090]
call fcn.140006190
mov rcx, rax
call fcn.1400f7cf0
movzx ebx, al
lea rcx, [rsp + 0x2098]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd28]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test bl, bl
je 0x1400a8ebe
lea rcx, [rsp + 0x20a0]
call fcn.1400f97c0
nop
mov rcx, rax
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e0ad0
nop
lea rcx, [rsp + 0x20a0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
test edi, edi
sete sil
lea rcx, [rsp + 0xd30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa580]
call fcn.1400bb350
nop
lea rcx, [rsp + 0x140]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
lea rdx, str.IsWizardPrinter
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8f59
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov rdx, qword [rcx + 0x2e8]
add rdx, 0x90
lea rcx, [rsp + 0xd38]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rdx, [0x1401690d0]
lea rcx, [rsp + 0xd38]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
sete sil
lea rcx, [rsp + 0xd38]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.printerdetrmination
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9070
call sub.mfc140u.dll_AfxFieldText
mov rcx, qword [rax + 8]
mov rdx, qword [rcx + 0x2e8]
add rdx, 0x38
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x280]
call fcn.1400fa610
nop
xor r8d, r8d
lea rdx, str.Canon_imageRUNNER_IR_3225
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8fcc
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Canon_imageRUNNER_IR_3225.pdf
jmp 0x1400a9012
xor r8d, r8d
lea rdx, str.Cannon_Imagerunner_2525
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a8ff1
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Cannon_Imagerunner_2525.pdf
jmp 0x1400a9012
mov edx, 1
xor r8d, r8d
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.mfc140u.dll_CPaneFrameWnd::EnterDragMode]
test eax, eax
je 0x1400a9020
lea rdx, str.AnakageFilesSelfHealSolutionsiassistZee137Leaser_jet_Pro_MFP_M128fn.pdf
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov r8, rax
mov dword [rsp + 0x28], 5
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rsp + 0x280]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x3e8]
jmp 0x14009b48c
xor r8d, r8d
lea rdx, str.ShowPrinterDialogBoxforsony
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
xor r8d, r8d
lea rcx, [rsp + 0x50]
test eax, eax
js 0x1400a91ae
lea rdx, [0x140158128]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x20a8]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x20b0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [0x1401497d8]
lea rcx, [rsp + 0x50]
call fcn.140041a90
test al, al
je 0x1400a9179
lea rax, [rsp + 0x20b8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x20b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
call sub.mfc140u.dll_AfxFieldText
nop
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.1400ace00
xor edx, edx
lea rcx, [rsp + 0x4ae0]
call fcn.140086420
nop
lea rcx, [rsp + 0x4ae0]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test eax, eax
sete sil
lea rcx, [rsp + 0x4ae0]
call fcn.1400864f0
jmp 0x1400a9f29
lea rdx, str.isCitrixInstalled
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9253
lea rdx, str.C:Program_Files__x86_CitrixICA_ClientSelfServicePluginSelfService.exe
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0x20c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
jne 0x1400a923d
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0x20c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
test al, al
setne sil
jmp 0x1400a9240
mov sil, 1
lea rcx, [rsp + 0x3f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.deleteofficecachefolder
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a96aa
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xd90]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xd88]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0xd80]
call fcn.1400fd7d0
nop
lea r8, [rsp + 0xd88]
lea rdx, [rsp + 0xd90]
lea rcx, [rsp + 0x1f0]
call fcn.1400edf70
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x20d0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x2118]
call fcn.1400f97e0
nop
xor r8d, r8d
lea rdx, str.16.0
lea rcx, [rsp + 0xd80]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a93cd
lea rdx, str.AppDataLocalMicrosoftOffice16.0OfficeFileCache
lea rcx, [rsp + 0xd48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0xd40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1f0]
lea rdx, [rsp + 0xd40]
lea rcx, [rsp + reloc.mfc140u.dll_CHtmlView::LoadFromResource]
call fcn.140006190
nop
lea r8, [rsp + 0xd48]
mov rdx, rax
lea rcx, [rsp + 0x20d8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20d8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CHtmlView::LoadFromResource]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd48]
jmp 0x1400a9635
xor r8d, r8d
lea rdx, str.15.0
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a949c
lea rdx, str.AppDataLocalMicrosoftOffice15.0OfficeFileCache
lea rcx, [rsp + 0xd58]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0xd50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1f0]
lea rdx, [rsp + 0xd50]
lea rcx, [rsp + 0x20f0]
call fcn.140006190
nop
lea r8, [rsp + 0xd58]
mov rdx, rax
lea rcx, [rsp + 0x20e8]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x20e8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x20f0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd50]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd58]
jmp 0x1400a9635
xor r8d, r8d
lea rdx, str.14.0
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a956b
lea rdx, str.AppDataLocalMicrosoftOffice14.0OfficeFileCache
lea rcx, [rsp + 0xd68]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0xd60]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1f0]
lea rdx, [rsp + 0xd60]
lea rcx, [rsp + 0x2100]
call fcn.140006190
nop
lea r8, [rsp + 0xd68]
mov rdx, rax
lea rcx, [rsp + reloc.mfc140u.dll_CDockablePaneAdapter::LoadState]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + reloc.mfc140u.dll_CDockablePaneAdapter::LoadState]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2100]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd60]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd68]
jmp 0x1400a9635
xor r8d, r8d
lea rdx, str.12.0
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a963b
lea rdx, str.AppDataLocalMicrosoftOffice12.0OfficeFileCache
lea rcx, [rsp + 0xd78]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [0x14014b478]
lea rcx, [rsp + 0xd70]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea r8, [rsp + 0x1f0]
lea rdx, [rsp + 0xd70]
lea rcx, [rsp + 0x2110]
call fcn.140006190
nop
lea r8, [rsp + 0xd78]
mov rdx, rax
lea rcx, [rsp + 0x2108]
call fcn.140006190
nop
mov rdx, rax
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2108]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x2110]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd70]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd78]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
call fcn.1400e0ad0
nop
lea rcx, [rsp + 0x2118]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd80]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xf0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd88]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xd90]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x1f0]
jmp 0x14009b48c
xor r8d, r8d
lea rdx, str.IsCiscoJabberInstalled
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9755
lea rdx, str.C:Program_Files__x86_Cisco_SystemsCisco_JabberCiscoJabber.exe
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
lea rdx, [rsp + 0x478]
lea rcx, [rsp + 0x2120]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
movzx ebx, al
test al, al
jne 0x1400a973f
lea r8, str.Program_Files
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_CMFCToolBar::RebuildAccelerationKeys]
lea rdx, [rsp + 0x478]
lea rcx, [rsp + 0x2128]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.1400f7cf0
movzx ebx, al
lea rcx, [rsp + 0x478]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
movzx esi, bl
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.advancedcleanup
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9b8e
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
lea rcx, [rsp + 0x6a8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor r8d, r8d
lea rdx, [0x140158128]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2130]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2130]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2138]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2138]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov rdx, r14
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
xor r8d, r8d
lea rdx, str.advancedcleanup
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9936
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2140]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2140]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2148]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2148]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x6a8]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
xor r8d, r8d
lea rdx, [0x1401695a8]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9a72
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2150]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2150]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x14015831c]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov ebx, eax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
sub eax, ebx
lea r8d, [rax - 1]
lea rdx, [rsp + 0x2158]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_12600]
nop
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2158]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor r8d, r8d
lea rdx, [0x140157e68]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
mov r8d, eax
lea rdx, [rsp + 0x2160]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CStringList::InsertBefore]
nop
mov rdx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_Ordinal_1501]
nop
lea rcx, [rsp + 0x2160]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor edx, edx
lea rcx, [rsp + 0x8a00]
call fcn.140007f70
nop
lea rdx, str.ShowMessage
lea rcx, [rsp + 0xa0]
call fcn.14000cf00
test al, al
je 0x1400a9ac9
lea rax, [rsp + 0x2168]
mov qword [rsp + 0x58], rax
lea rdx, str.MsgParameter
lea rcx, [rsp + 0x2168]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
mov rbx, rax
lea rcx, [rsp + 0x2170]
jmp 0x1400a9af6
lea rax, [rsp + 0x2178]
mov qword [rsp + 0x58], rax
lea rdx, [0x14014a9e0]
lea rcx, [rsp + 0x2178]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
mov rbx, rax
lea rcx, [rsp + 0x2180]
lea rdx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x8a00]
call fcn.1400b3a10
lea rdx, [rsp + 0x6a8]
lea rcx, [rsp + 0x2188]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
lea rcx, [rsp + 0x8a00]
call fcn.1400b3bf0
lea rcx, [rsp + 0x8a00]
call sub.mfc140u.dll_CD2DPathGeometry::Detach
test rax, rax
sete sil
lea rcx, [rsp + 0x8a00]
call fcn.1400083b0
nop
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6a8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0xa0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
jmp 0x1400a9f29
xor r8d, r8d
lea rdx, str.changeIESettings
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9dc2
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
xor edx, edx
lea ecx, [rdx + 1]
call fcn.1400e1810
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsSecureProtocols
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x2190]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x2198]
mov qword [rsp + 0x68], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x2190]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rdi, rax
lea rdx, str.2688
lea rcx, [rsp + 0x2198]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x21a0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400daf10
mov edi, eax
test eax, eax
je 0x1400a9cbc
lea rdx, str.Failed_to_update_the_registry_SecureProtocols
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x21a8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x21a8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x21b0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftInternet_ExplorerNew_WindowsPopupMgr
lea rcx, [rsp + 0x290]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x21b8]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x21c0]
mov qword [rsp + 0x68], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x21b8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rdi, rax
lea rdx, [0x1401506a0]
lea rcx, [rsp + 0x21c0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x21c8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400daf10
mov edi, eax
test eax, eax
je 0x1400a9da6
lea rdx, str._Failed_to_update_the_registry_PopupMgr
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_COleCurrency::operator]
lea rax, [rsp + reloc.mfc140u.dll_CSmartDockingStandaloneGuide::m_nLeftOffsetX]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x288]
lea rcx, [rsp + reloc.mfc140u.dll_CSmartDockingStandaloneGuide::m_nLeftOffsetX]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x21d8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x288]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x290]
jmp 0x14009b48c
xor r8d, r8d
lea rdx, str.changeTLSSetting
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140u.dll_CDocObjectServer::XOleObject::EnumAdvise]
test eax, eax
js 0x1400a9f03
lea rcx, [rsp + 0x6b8]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rcx, [rsp + 0x6b0]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsSecureProtocols
lea rcx, [rsp + 0x6b8]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x21e0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x21e8]
mov qword [rsp + 0x68], rax
lea rdx, str.DWORD
lea rcx, [rsp + 0x21e0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rdi, rax
lea rdx, str.2688
lea rcx, [rsp + 0x21e8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
mov rbx, rax
lea rdx, [rsp + 0x6b8]
lea rcx, [rsp + 0x21f0]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400daf10
mov edi, eax
test eax, eax
je 0x1400a9ee7
lea rdx, str.Failed_to_update_the_registry_SecureProtocols
lea rcx, [rsp + 0x6b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XPanel::XPanel]
lea rax, [rsp + 0x21f8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x6b0]
lea rcx, [rsp + 0x21f8]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rbx, rax
lea rdx, str.setInternetExplorerAsRecommanded_KB_11517
lea rcx, [rsp + 0x2200]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov r8d, edi
mov rdx, rbx
mov rcx, rax
call fcn.140105fe0
nop
lea rcx, [rsp + 0x6b0]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x6b8]
jmp 0x14009b48c
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2208]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rdx, rax
mov rcx, qword [rsp + 0x128]
call fcn.1400ad4f0
movzx esi, al
mov r14, qword [rsp + 0x60]
test sil, sil
je 0x14009a9bf
jmp 0x14009b497