Function at 0x140060f50
Capabilities:
Move file

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x310]
sub rsp, 0x410
mov qword [rbp + 0xa8], 0xfffffffffffffffe
mov qword [rsp + 0x460], rbx
mov rax, qword [0x1401a1e90]
xor rax, rsp
mov qword [rbp + 0x300], rax
mov rdi, rdx
mov r13, rcx
mov qword [rbp + 0x50], rcx
xor r14d, r14d
mov ebx, r14d
mov dword [rsp + 0x60], ebx
mov rax, qword [rcx + 0xb8]
cmp dword [rax + 0x1d8], ebx
je 0x140061eaf
mov qword [rbp - 0x40], r14
mov qword [rbp - 8], r14
mov qword [rbp - 0x58], r14
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 8]
lea r8, [rbp - 0x40]
mov rdx, rdi
call fcn.14000dec0
test al, al
jne 0x1400611c7
lea rcx, [r13 + 0xc8]
lea r8d, [r14 + 7]
lea rdx, [rsp + 0x48]
call fcn.140024ac0
nop
mov rcx, qword [rsp + 0x48]
mov edi, 1
mov edx, edi
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x140061044
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.140002330
mov rcx, qword [rsp + 0x48]
mov rbx, rcx
sub edi, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edi
jge 0x140061062
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.140002330
mov rcx, qword [rsp + 0x48]
mov rdx, rbx
call fcn.1400c8734
test eax, eax
je 0x1400610ce
mov edx, 0x5c
lea rcx, [rsp + 0x48]
call fcn.140062120
mov edx, 0x2f2f
lea rcx, [rsp + 0x48]
call fcn.140062120
lea r8, [rsp + 0x48]
lea rdx, str.missing
lea rcx, [rbp + 0x68]
call fcn.1400196f0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.14000f920
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400610e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400610e5
mov r8d, 5
lea rdx, str.exist
lea rcx, [rsp + 0x58]
call fcn.14000f920
lea r8, [0x140133894]
lea rdx, [0x140133898]
lea rcx, [rsp + 0x58]
call fcn.14000e9b0
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.QueryInterfacesForSandBox_
test rdx, 0xffffffffffff0000
jne 0x140061146
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140061150
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140002530
jmp 0x140061150
lea rcx, [rbp - 0x78]
call fcn.140003150
nop
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x40]
call fcn.14000ee60
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.140053e90
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006118c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400611a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061e66
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140061e66
lea rcx, [r13 + 0xa0]
mov rdx, qword [rbp - 0x40]
call fcn.14000e510
test al, al
je 0x140061e66
mov word [rbp + 0x90], r14w
xor eax, eax
mov qword [rbp + 0x92], rax
mov qword [rbp + 0x9a], rax
mov dword [rbp + 0xa2], eax
mov word [rbp + 0xa6], ax
mov qword [rsp + 0x68], r14
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
lea r8, [rsp + 0x68]
lea rdx, [0x1401340d0]
call qword [rax]
mov edi, eax
cmp qword [rsp + 0x68], 0
jne 0x14006133b
lea rcx, [0x1401a19a8]
mov rdx, qword [0x1401a19a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, str.QueryInterfacesForWinEx
test rdx, 0xffffffffffff0000
jne 0x140061277
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140061282
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140002530
jmp 0x140061282
lea rcx, [rsp + 0x70]
call fcn.140003150
nop
mov edx, edi
lea rcx, [rbp + 0xd0]
call fcn.140049f40
nop
cmp qword [rax + 0x18], 0x10
jb 0x14006129b
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140002f70
nop
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14000ee60
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.140053e90
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400612e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061302
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0xe8], 0x10
jb 0x140061318
mov rcx, qword [rbp + 0xd0]
call fcn.1400c3950
mov qword [rbp + 0xe8], 0xf
mov qword [rbp + 0xe0], r14
mov byte [rbp + 0xd0], 0
mov rdx, qword [rsp + 0x70]
jmp 0x140061e40
lea rdx, str.CPPInternal
lea rcx, [rbp + 8]
call fcn.140002090
nop
mov rdi, qword [rsp + 0x68]
mov rcx, qword [rbp + 8]
mov edx, dword [rcx - 0x10]
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov rdx, rax
test rax, rax
jne 0x14006136c
call fcn.140002420
int3
mov rax, qword [rdi]
lea r9, [rbp - 0x10]
mov r8d, 2
mov rcx, rdi
call qword [rax + 0x38]
mov edi, eax
test eax, eax
jns 0x14006148d
lea rcx, [0x1401a19a8]
mov rdx, qword [0x1401a19a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.QueryInterfacesForWinEx_
test rdx, 0xffffffffffff0000
jne 0x1400613d2
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x1400613dc
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.140002530
jmp 0x1400613dc
lea rcx, [rbp - 0x68]
call fcn.140003150
nop
mov edx, edi
lea rcx, [rbp + 0xf0]
call fcn.140049f40
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400613f5
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140002f70
nop
mov r8, rax
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x48]
call fcn.14000ee60
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.140053e90
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006143c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061455
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0x108], 0x10
jb 0x14006146b
mov rcx, qword [rbp + 0xf0]
call fcn.1400c3950
mov qword [rbp + 0x108], 0xf
mov qword [rbp + 0x100], r14
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp - 0x68]
jmp 0x140061e27
mov ecx, 0x58
call fcn.1400c4130
mov r15, rax
mov qword [rbp], rax
mov edi, 1
test rax, rax
je 0x14006152d
lea r12, [r13 + 0x80]
lea rcx, [0x1401a19a8]
mov rdx, qword [0x1401a19a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rdx, str.JNovaSObject
test rdx, 0xffffffffffff0000
jne 0x1400614fc
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140061506
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140002530
jmp 0x140061506
lea rcx, [rbp - 0x50]
call fcn.140003150
nop
mov ebx, edi
mov dword [rsp + 0x60], ebx
mov qword [rsp + 0x20], r12
mov r9, qword [r13 + 0xd0]
mov r8, qword [r13 + 0xb8]
lea rdx, [rbp - 0x50]
mov rcx, r15
call fcn.1400589e0
jmp 0x140061530
mov rax, r14
mov qword [r13 + 0xa8], rax
test bl, 1
je 0x14006155b
and ebx, 0xfffffffe
mov dword [rsp + 0x60], ebx
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006155b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rbp - 0x48], 0xfffffffd
mov ecx, 0x18
call fcn.1400c2fb8
mov qword [rbp + 0x20], rax
mov rcx, qword [r13 + 0xa8]
mov qword [rax + 8], rcx
mov ecx, 9
mov rax, qword [rbp + 0x20]
mov word [rax], cx
lea rax, [rbp - 0x48]
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x30], edi
mov dword [rbp + 0x34], edi
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
mov r9d, 4
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x20], rdx
mov r8d, 0x400
mov edx, dword [rbp - 0x10]
call qword [rax + 0x40]
mov edi, eax
mov rcx, qword [rbp + 0x20]
call fcn.1400c4098
lea rcx, [0x1401a19a8]
test edi, edi
jns 0x1400616e9
mov rdx, qword [0x1401a19a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.addCustomeObject_
test rdx, 0xffffffffffff0000
jne 0x140061625
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140061630
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140002530
jmp 0x140061630
lea rcx, [rsp + 0x78]
call fcn.140003150
nop
mov edx, edi
lea rcx, [rbp + 0xb0]
call fcn.140049f40
nop
cmp qword [rax + 0x18], 0x10
jb 0x140061649
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.140002f70
nop
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x88]
call fcn.14000ee60
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.140053e90
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061697
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400616b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0xc8], 0x10
jb 0x1400616c6
mov rcx, qword [rbp + 0xb0]
call fcn.1400c3950
mov qword [rbp + 0xc8], 0xf
mov qword [rbp + 0xc0], r14
mov byte [rbp + 0xb0], 0
mov rdx, qword [rsp + 0x78]
jmp 0x140061e27
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x50], rbx
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], r14
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
mov byte [rbp - 0x18], 0
mov rax, qword [r13 + 0xc0]
cmp dword [rax - 0x10], 0
je 0x140061857
mov r8d, 6
lea rdx, [rbp + 0x18]
lea rcx, [r13 + 0xc0]
call fcn.140019570
nop
lea r15, str.debug:
nop dword [rax]
mov rdx, qword [rax]
mov rcx, r14
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r15 + rcx*2 - 2]
jne 0x14006178a
cmp rcx, 7
jne 0x140061770
mov eax, r14d
jmp 0x14006178f
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400617ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
je 0x1400617d4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 6
lea rdx, [rbp + 0x18]
lea rcx, [r13 + 0xc0]
call fcn.140019570
nop
jmp 0x140061760
mov rdx, qword [r13 + 0xc0]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x50]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140061830
cmp dword [rbx + 0x10], 0
jl 0x140061822
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140061822
call fcn.140002390
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140061817
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x140061830
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140002240
call fcn.140060ab0
test al, al
jne 0x140061b60
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
jmp 0x140061b60
lea rcx, [rbp + 0x110]
call fcn.140061f70
nop
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.14003f160
mov rdi, rax
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140040a00
lea rdx, [rdi + 0x18]
lea rcx, [rbp - 0x20]
call fcn.1400021b0
movzx eax, byte [rdi + 0x20]
mov byte [rbp - 0x18], al
test al, al
jne 0x140061a32
mov r8d, dword [0x1401a9d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 2
jne 0x140061943
test r8d, r8d
je 0x140061943
mov eax, r8d
and eax, 0x80000001
jge 0x1400618e2
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1400618f9
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401a9d80], eax
jmp 0x140061908
lea r8d, [r8*2 + 1]
mov dword [0x1401a9d80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x14006192c
sub ecx, 2
je 0x140061930
dec ecx
je 0x140061933
jmp 0x14006193e
add r8d, 2
inc r8d
add r8d, 2
mov dword [0x1401a9d80], r8d
test r8d, r8d
jne 0x1400618d1
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, str.failed_to_get_js_code
test rdx, 0xffffffffffff0000
jne 0x14006198c
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140061996
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140002530
jmp 0x140061996
lea rcx, [rbp - 0x80]
call fcn.140003150
nop
lea rdx, [rbp - 0x80]
mov rcx, qword [r13 + 0xb8]
call fcn.140053e90
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400619c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea r9, [fcn.140061ee0]
mov edx, 0x28
lea r8d, [rdx - 0x21]
lea rcx, [rbp + 0x1e0]
call fcn.1400c3e84
nop
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x10], rax
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061a04
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea r9, [fcn.140019870]
mov edx, 0x18
lea r8d, [rdx - 0x11]
lea rcx, [rbp + 0x130]
call fcn.1400c3e84
nop
lea rcx, [rbp + 0x118]
call fcn.140001b50
jmp 0x140061e18
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.1400404c0
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.14003f160
mov rdi, rax
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.140040a00
lea rdx, [rdi + 0x18]
lea rcx, [rbp - 0x20]
call fcn.1400021b0
movzx eax, byte [rdi + 0x20]
mov byte [rbp - 0x18], al
lea r8, [rbp - 0x20]
lea rdx, str.tryalertfunction_str__tryCPPInternal.invokeAPI__action_:_debugMessage___param_:_message_:___str_____catch_e_catch_e__
lea rcx, [rbp + 0x78]
call fcn.1400196f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140061ada
cmp dword [rbx + 0x10], 0
jl 0x140061acb
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140061acb
call fcn.140002390
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140061ac0
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x140061ada
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140002240
nop
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061af3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea r9, [fcn.140061ee0]
mov edx, 0x28
lea r8d, [rdx - 0x21]
lea rcx, [rbp + 0x1e0]
call fcn.1400c3e84
nop
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x10], rax
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061b37
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea r9, [fcn.140019870]
mov edx, 0x18
lea r8d, [rdx - 0x11]
lea rcx, [rbp + 0x130]
call fcn.1400c3e84
nop
lea rcx, [rbp + 0x118]
call fcn.140001b50
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
lea rcx, str.JScript
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, qword [rbp - 0x58]
mov r10, qword [rcx]
lea r9, [rbp + 0x90]
mov r8, rax
mov rdx, rbx
call qword [r10 + 0x220]
mov edi, eax
test eax, eax
je 0x140061e18
lea rcx, [0x1401a19a8]
mov rdx, qword [0x1401a19a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.exec_script_failed_
test rdx, 0xffffffffffff0000
jne 0x140061be9
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140061bf3
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140002530
jmp 0x140061bf3
lea rcx, [rbp - 0x70]
call fcn.140003150
nop
mov r8d, edi
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x40]
call fcn.14001e860
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061c1d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.plugins
lea rcx, [rsp + 0x40]
call fcn.14003efb0
mov rcx, qword [rbp - 0x30]
sub rcx, qword [rbp - 0x38]
movabs rax, 0x4924924924924925
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140061dec
lea r13, [0x1401353a8]
mov r12, r13
shr r12, 0x10
mov rdi, r14
mov r15, r14
nop dword [rax + rax]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
test r12, r12
jne 0x140061caf
movzx ebx, r13w
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140061cbc
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140002530
jmp 0x140061cbc
mov rdx, r13
lea rcx, [rbp - 0x60]
call fcn.140003150
nop
imul rdi, rdi, 0x38
add rdi, qword [rbp - 0x38]
lea r8, [rbp - 0x60]
mov rdx, rdi
lea rcx, [rbp + 0x38]
call fcn.14000ee60
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.14000f920
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061d00
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061d18
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x38]
mov r8d, dword [r15 + rax + 8]
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.14001e860
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x40]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140061d89
cmp dword [rbx + 0x10], 0
jl 0x140061d7a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140061d7a
call fcn.140002390
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140061d6f
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x140061d89
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140002240
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061da1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [0x140139e84]
lea rcx, [rsp + 0x40]
call fcn.14003efb0
inc r14d
add r15, 0x38
movsxd rdi, r14d
mov rcx, qword [rbp - 0x30]
sub rcx, qword [rbp - 0x38]
movabs rax, 0x4924924924924925
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdi, rdx
jb 0x140061c70
mov r13, qword [rbp + 0x50]
lea rdx, [rsp + 0x40]
mov rcx, qword [r13 + 0xb8]
call fcn.140053e90
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061e18
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp - 0x38]
call fcn.140061ee0
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061e3c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061e55
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140061e66
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140061e80
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x140061e90
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140061ea0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140061eaf
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.1400c3970
mov rbx, qword [rsp + 0x460]
add rsp, 0x410
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret