Function at 0x140070b50
Capabilities:
Move file

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x358]
sub rsp, 0x420
mov qword [rbp + 0xa8], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
movaps xmmword [rax - 0x48], xmm6
mov rax, qword [0x1401cde90]
xor rax, rsp
mov qword [rbp + 0x300], rax
mov rbx, rdx
mov r13, rcx
mov qword [rbp + 0x20], rcx
xor r14d, r14d
mov r15d, r14d
mov dword [rsp + 0x78], r14d
mov rax, qword [rcx + 0xb8]
cmp dword [rax + 0x1d8], r14d
je 0x140071d1a
mov qword [rsp + 0x68], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
lea rcx, str.__r_
mov rax, qword [str.__r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov rax, qword [rbx]
lea r8, [rsp + 0x68]
lea rdx, [0x140161430]
mov rcx, rbx
call qword [rax]
test eax, eax
jne 0x140071b04
cmp qword [rsp + 0x68], 0
je 0x140071b04
mov qword [rsp + 0x60], r14
mov ecx, dword [0x1401d5d60]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub r8d, edx
cmp r8d, 0xd
jne 0x140070c49
inc dword [0x1401d5f38]
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
call qword [rax + VariantChangeTypeEx]
test eax, eax
jne 0x140071aed
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140071aed
mov rax, qword [rcx]
lea r8, [rbp - 0x40]
lea rdx, str._D_3
call qword [rax]
test eax, eax
jne 0x140071ad6
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140071ad6
mov rax, qword [rcx]
lea rdx, [rbp - 0x38]
call qword [rax + 0x360]
test eax, eax
jne 0x140071aaf
cmp qword [rbp - 0x40], 0
je 0x140071aaf
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140070cc7
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rcx, [r13 + 0xa0]
mov rdx, qword [rsp + 0x68]
call fcn.14000f5b0
test al, al
je 0x140071cd0
mov word [rbp + 0x68], r14w
xor eax, eax
mov qword [rbp + 0x6a], rax
mov qword [rbp + 0x72], rax
mov dword [rbp + 0x7a], eax
mov word [rbp + 0x7e], ax
mov qword [rbp - 0x80], r14
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
lea r8, [rbp - 0x80]
lea rdx, [0x140161a40]
call qword [rax]
mov edi, eax
lea rcx, str.__r_
cmp qword [rbp - 0x80], 0
jne 0x140070e7f
mov rdx, qword [str.__r_]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdx, str.QueryInterfacesForWinEx
test rdx, 0xffffffffffff0000
jne 0x140070d64
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140070d6e
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140002760
jmp 0x140070d6e
lea rcx, [rbp - 0x60]
call fcn.1400034f0
nop
mov edx, edi
lea rcx, [rbp + 0xb0]
call fcn.1400550b0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140070d87
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.140003310
nop
mov r8, rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x80]
call fcn.14000ff10
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.140061a30
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140070dd7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140070df3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0xc8], 0x10
jb 0x140070e09
mov rcx, qword [rbp + 0xb0]
call fcn.1400d37c0
mov qword [rbp + 0xc8], 0xf
mov qword [rbp + 0xc0], r14
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140070e3a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.140070590
test al, al
jne 0x140071a8c
mov ecx, dword [0x1401d5d60]
mov edx, ecx
test ecx, ecx
je 0x140070e70
dec edx
je 0x140070e64
inc ecx
mov dword [0x1401d5d60], ecx
jmp 0x140071a8c
mov dword [0x1401d5d60], r14d
jmp 0x140071a8c
mov dword [0x1401d5d60], 2
jmp 0x140071a8c
mov rax, qword [str.__r_]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x70], rbx
lea r8, str.CPPInternal
mov edi, 1
test r8, 0xffffffffffff0000
jne 0x140070ed3
movzx r12d, r8w
mov ecx, r12d
call fcn.1400019e0
test rax, rax
je 0x140070f49
mov r8d, r12d
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140002760
mov rbx, qword [rsp + 0x70]
jmp 0x140070f49
mov r13d, dword [rbx - 0x10]
mov r12, r8
sub r12, rbx
sar r12, 1
mov ecx, edi
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0xb
or eax, ecx
jge 0x140070f0a
mov edx, 0xb
lea rcx, [rsp + 0x70]
call fcn.140002560
mov rbx, qword [rsp + 0x70]
lea r8, str.CPPInternal
movsxd rdx, dword [rbx - 0xc]
mov r9d, 0x16
mov rcx, rbx
add rdx, rdx
cmp r12, r13
ja 0x140070f2a
lea r8, [rbx + r12*2]
call fcn.1400d400c
jmp 0x140070f2f
call fcn.1400d41cc
cmp dword [rbx - 0xc], 0xb
jl 0x140071aa4
mov dword [rbx - 0x10], 0xb
mov word [rbx + 0x16], r14w
mov r13, qword [rbp + 0x20]
mov r12, qword [rbp - 0x80]
mov edx, dword [rbx - 0x10]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov rdx, rax
test rax, rax
jne 0x140070f67
call fcn.140002650
int3
mov rax, qword [r12]
lea r9, [rbp]
mov r8d, 2
mov rcx, r12
call qword [rax + 0x38]
mov r12d, eax
test eax, eax
jns 0x1400710b2
mov edx, dword [0x1401d5d60]
mov ecx, edx
imul ecx, edx
and ecx, 0x8000000f
jge 0x140070fa0
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 5
jne 0x140070fad
dec edx
mov dword [0x1401d5d60], edx
lea rcx, str.__r_
mov rax, qword [str.__r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rdx, str.QueryInterfacesForWinEx_
test rdx, 0xffffffffffff0000
jne 0x140070ff6
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140071000
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140002760
jmp 0x140071000
lea rcx, [rbp - 0x50]
call fcn.1400034f0
nop
mov edx, r12d
lea rcx, [rbp + 0xd0]
call fcn.1400550b0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14007101a
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.140003310
nop
mov r8, rax
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x48]
call fcn.14000ff10
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.140061a30
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071061
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14007107a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0xe8], 0x10
jb 0x140071090
mov rcx, qword [rbp + 0xd0]
call fcn.1400d37c0
mov qword [rbp + 0xe8], 0xf
mov qword [rbp + 0xe0], r14
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp - 0x50]
jmp 0x140071a5d
mov ecx, 0x58
call fcn.1400d3fa0
mov rbx, rax
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140071150
lea r12, [r13 + 0x80]
lea rcx, str.__r_
mov rdx, qword [str.__r_]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.JNovaSObject
test rdx, 0xffffffffffff0000
jne 0x14007111e
movzx r15d, dx
mov ecx, r15d
call fcn.1400019e0
test rax, rax
je 0x140071128
mov r8d, r15d
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140002760
jmp 0x140071128
lea rcx, [rbp - 0x78]
call fcn.1400034f0
nop
mov r15d, edi
mov dword [rsp + 0x78], edi
mov qword [rsp + 0x20], r12
mov r9, qword [r13 + 0xd0]
mov r8, qword [r13 + 0xb8]
lea rdx, [rbp - 0x78]
mov rcx, rbx
call fcn.140067320
jmp 0x140071153
mov rax, r14
mov qword [r13 + 0xa8], rax
test r15b, 1
je 0x140071181
and r15d, 0xfffffffe
mov dword [rsp + 0x78], r15d
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071181
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rbp + 4], 0xfffffffd
mov ecx, 0x18
call fcn.1400d2e28
mov qword [rbp + 0x28], rax
mov rcx, qword [r13 + 0xa8]
mov qword [rax + 8], rcx
mov ecx, 9
mov rax, qword [rbp + 0x28]
mov word [rax], cx
lea rax, [rbp + 4]
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x38], edi
mov dword [rbp + 0x3c], edi
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
mov r9d, 4
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
lea rdx, [rbp + 0x28]
mov qword [rsp + 0x20], rdx
mov r8d, 0x400
mov edx, dword [rbp]
call qword [rax + 0x40]
mov edi, eax
mov rcx, qword [rbp + 0x28]
call fcn.1400d3f08
lea rcx, str.__r_
test edi, edi
jns 0x140071309
mov rdx, qword [str.__r_]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rdx, str.addCustomeObject_
test rdx, 0xffffffffffff0000
jne 0x140071248
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140071252
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.140002760
jmp 0x140071252
lea rcx, [rbp - 0x48]
call fcn.1400034f0
nop
mov edx, edi
lea rcx, [rbp + 0xf0]
call fcn.1400550b0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14007126b
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140003310
nop
mov r8, rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x90]
call fcn.14000ff10
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.140061a30
nop
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400712b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400712d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0x108], 0x10
jb 0x1400712e7
mov rcx, qword [rbp + 0xf0]
call fcn.1400d37c0
mov qword [rbp + 0x108], 0xf
mov qword [rbp + 0x100], r14
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp - 0x48]
jmp 0x140071a5d
mov rax, qword [str.__r_]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], r14
lea rax, [rbp - 0x10]
mov qword [rbp + 0x18], rax
lea rcx, str.__r_
mov rax, qword [str.__r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
mov rax, qword [r13 + 0xc0]
cmp dword [rax - 0x10], 0
je 0x14007145c
mov r8d, 6
lea rdx, [rbp + 8]
lea rcx, [r13 + 0xc0]
call fcn.14001b280
nop
lea r15, str.debug:
nop dword [rax]
mov rdx, qword [rax]
mov rcx, r14
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r15 + rcx*2 - 2]
jne 0x1400713aa
cmp rcx, 7
jne 0x140071390
mov eax, r14d
jmp 0x1400713af
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400713cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
je 0x1400713f4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 6
lea rdx, [rbp + 8]
lea rcx, [r13 + 0xc0]
call fcn.14001b280
nop
jmp 0x140071380
mov rdx, qword [r13 + 0xc0]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x58]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140071793
cmp dword [rbx + 0x10], 0
jl 0x140071449
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140071449
call fcn.1400025c0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14007143b
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x58], rax
jmp 0x140071793
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.140002470
jmp 0x140071793
lea rcx, [rbp + 0x110]
call fcn.140071de0
nop
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.140048430
mov rdi, rax
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.14004a200
lea rdx, [rdi + 0x18]
lea rcx, [rbp - 0x10]
call fcn.1400023d0
movzx r9d, byte [rdi + 0x20]
mov byte [rbp - 8], r9b
mov r8d, dword [0x1401d5d60]
imul r8d, r8d
mov eax, 0x6bca1af3
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub r8d, edx
cmp r8d, 3
jne 0x1400714eb
lea ecx, [r8 + 1]
call fcn.1400d3fa0
mov rdi, rax
call fcn.1400d41a0
mov dword [rdi], eax
mov dword [0x1401d5d60], eax
mov rcx, rdi
call fcn.1400d37c0
movzx r9d, byte [rbp - 8]
test r9b, r9b
jne 0x14007165f
lea rcx, str.__r_
mov rax, qword [str.__r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.failed_to_get_js_code
test rdx, 0xffffffffffff0000
jne 0x14007153d
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140071547
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140002760
jmp 0x140071547
lea rcx, [rbp - 0x70]
call fcn.1400034f0
nop
lea rdx, [rbp - 0x70]
mov rcx, qword [r13 + 0xb8]
call fcn.140061a30
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071570
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edx, dword [0x1401d5d60]
lea ecx, [rdx + 2]
lea eax, [rdx + 1]
imul ecx, eax
imul ecx, edx
and ecx, 0x8000000f
jge 0x140071591
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 0xd
jne 0x1400715ed
movsd xmm3, qword [0x140162fc8]
xorps xmm2, xmm2
movd xmm4, edx
cvtdq2pd xmm4, xmm4
movsd xmm5, qword [0x140162ff0]
movsd xmm6, qword [0x140162fc0]
nop dword [rax]
addsd xmm2, xmm3
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x1400715d9
subsd xmm2, xmm3
divsd xmm3, xmm5
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm6
ja 0x1400715c0
lea r9, [fcn.140071d50]
mov edx, 0x28
lea r8d, [rdx - 0x21]
lea rcx, [rbp + 0x1e0]
call fcn.1400d3cf4
nop
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x18], rax
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071631
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea r9, [fcn.14001b580]
mov edx, 0x18
lea r8d, [rdx - 0x11]
lea rcx, [rbp + 0x130]
call fcn.1400d3cf4
nop
lea rcx, [rbp + 0x118]
call fcn.140001b40
jmp 0x140071a4e
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.140049c80
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.140048430
mov rdi, rax
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.14004a200
lea rdx, [rdi + 0x18]
lea rcx, [rbp - 0x10]
call fcn.1400023d0
movzx eax, byte [rdi + 0x20]
mov byte [rbp - 8], al
lea r8, [rbp - 0x10]
lea rdx, str.tryalertfunction_str__tryCPPInternal.invokeAPI__action_:_debugMessage___param_:_message_:___str_____catch_e_catch_e__
lea rcx, [rbp + 0xa0]
call fcn.14001b400
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14007170a
cmp dword [rbx + 0x10], 0
jl 0x1400716fb
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400716fb
call fcn.1400025c0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x1400716f0
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x58], rax
jmp 0x14007170a
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.140002470
nop
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071726
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea r9, [fcn.140071d50]
mov edx, 0x28
lea r8d, [rdx - 0x21]
lea rcx, [rbp + 0x1e0]
call fcn.1400d3cf4
nop
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x18], rax
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14007176a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea r9, [fcn.14001b580]
mov edx, 0x18
lea r8d, [rdx - 0x11]
lea rcx, [rbp + 0x130]
call fcn.1400d3cf4
nop
lea rcx, [rbp + 0x118]
call fcn.140001b40
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
lea rcx, str.JScript
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, qword [rbp - 0x38]
mov r10, qword [rcx]
lea r9, [rbp + 0x68]
mov r8, rax
mov rdx, rbx
call qword [r10 + 0x220]
mov edi, eax
test eax, eax
je 0x140071a4e
lea rcx, str.__r_
mov rdx, qword [str.__r_]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.exec_script_failed_
test rdx, 0xffffffffffff0000
jne 0x140071819
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140071823
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.140002760
jmp 0x140071823
lea rcx, [rbp - 0x68]
call fcn.1400034f0
nop
mov r8d, edi
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x48]
call fcn.140022da0
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14007184d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.plugins
lea rcx, [rsp + 0x48]
call fcn.140048280
mov rcx, qword [rbp - 0x20]
sub rcx, qword [rbp - 0x28]
movabs rax, 0x4924924924924925
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140071a22
lea r13, [0x14015e4d4]
mov r12, r13
shr r12, 0x10
mov rdi, r14
mov r15, r14
nop dword [rax + rax]
lea rcx, str.__r_
mov rax, qword [str.__r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
test r12, r12
jne 0x1400718df
movzx ebx, r13w
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x1400718ec
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140002760
jmp 0x1400718ec
mov rdx, r13
lea rcx, [rbp - 0x58]
call fcn.1400034f0
nop
imul rdi, rdi, 0x38
add rdi, qword [rbp - 0x28]
lea r8, [rbp - 0x58]
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.14000ff10
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x48]
call fcn.1400109d0
nop
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071930
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071948
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x28]
mov r8d, dword [rax + r15 + 8]
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x88]
call fcn.140022da0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x48]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400719bc
cmp dword [rbx + 0x10], 0
jl 0x1400719ad
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400719ad
call fcn.1400025c0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x1400719a2
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x48], rax
jmp 0x1400719bc
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x48]
call fcn.140002470
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400719d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [0x14015e4e4]
lea rcx, [rsp + 0x48]
call fcn.140048280
inc r14d
add r15, 0x38
movsxd rdi, r14d
mov rcx, qword [rbp - 0x20]
sub rcx, qword [rbp - 0x28]
movabs rax, 0x4924924924924925
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdi, rdx
jb 0x1400718a0
mov r13, qword [rbp + 0x20]
lea rdx, [rsp + 0x48]
mov rcx, qword [r13 + 0xb8]
call fcn.140061a30
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071a4e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp - 0x28]
call fcn.140071d50
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071a72
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071a8c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x140071cd0
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x140071cd0
mov ecx, 0x80070057
call fcn.140001920
nop
mov r8d, eax
lea rdx, str.querying_pWindow2_code__d
lea rcx, [rsp + 0x50]
call fcn.140012260
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140071b18
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x140071b18
mov r8d, eax
lea rdx, str.querying_document2_code__d
lea rcx, [rsp + 0x50]
call fcn.140012260
nop
jmp 0x140071ac4
mov r8d, eax
lea rdx, str.querying_document_code__d
lea rcx, [rsp + 0x50]
call fcn.140012260
nop
jmp 0x140071ac4
mov r8d, eax
lea rdx, str.querying_pWebBrowser2_code__d
lea rcx, [rsp + 0x50]
call fcn.140012260
lea rcx, [r13 + 0xc8]
mov r8d, 7
lea rdx, [rsp + 0x40]
call fcn.14002bb50
nop
mov rcx, qword [rsp + 0x40]
mov edi, 1
mov eax, edi
sub eax, dword [rcx - 8]
or eax, dword [rcx - 0xc]
jge 0x140071b55
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140002560
mov rcx, qword [rsp + 0x40]
mov rbx, rcx
sub edi, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edi
jge 0x140071b73
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140002560
mov rcx, qword [rsp + 0x40]
mov rdx, rbx
call fcn.1400d85a4
test eax, eax
je 0x140071bdf
mov edx, 0x5c
lea rcx, [rsp + 0x40]
call fcn.140071f90
mov edx, 0x2f2f
lea rcx, [rsp + 0x40]
call fcn.140071f90
lea r8, [rsp + 0x40]
lea rdx, str.missing
lea rcx, [rbp + 0x40]
call fcn.14001b400
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.1400109d0
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071bf6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140071bf6
mov r8d, 5
lea rdx, str.exist
lea rcx, [rsp + 0x50]
call fcn.1400109d0
lea r8, [0x14015e4ac]
lea rdx, [0x14015e4bc]
lea rcx, [rsp + 0x50]
call fcn.14000fa60
lea rcx, str.__r_
mov rax, qword [str.__r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x30], rax
lea rdx, str.QueryInterfacesForSandBox_
test rdx, 0xffffffffffff0000
jne 0x140071c57
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140071c61
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140002760
jmp 0x140071c61
lea rcx, [rbp - 0x30]
call fcn.1400034f0
nop
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.14000ff10
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.140061a30
nop
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071c9d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071cb6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071cd0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140071cea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x140071cfa
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140071d0a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140071d1a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.1400d37e0
mov rbx, qword [rsp + 0x470]
movaps xmm6, xmmword [rsp + 0x410]
add rsp, 0x420
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret