Function at 0x14000d4a0
Capabilities:
Check for software breakpoints
Get disk size

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xde0]
sub rsp, 0xee0
mov qword [rbp + 0x38], 0xfffffffffffffffe
mov qword [rsp + 0xf38], rbx
mov rax, qword [0x1401d5e90]
xor rax, rsp
mov qword [rbp + 0xdd0], rax
mov r13, r8
mov rsi, rdx
mov rdi, rcx
mov qword [rbp + 0x30], r8
xor r12b, r12b
xor r14d, r14d
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
mov eax, dword [0x1401ddd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
and ecx, 0x8000000f
jge 0x14000d516
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 4
jne 0x14000d530
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov rcx, qword [rdi + 0xa0]
or r15, 0xffffffffffffffff
test rcx, rcx
jne 0x14000d56a
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000d551
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000de42
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000de42
mov rax, qword [rcx]
lea rdx, [rsp + 0x58]
call qword [rax + VariantChangeTypeEx]
mov r12d, eax
mov ecx, dword [0x1401ddd80]
imul ecx, ecx
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xc
jne 0x14000d5c1
mov ecx, 4
call fcn.1400d7a58
mov rbx, rax
call fcn.1400d7b94
mov dword [rbx], eax
mov dword [0x1401ddd80], eax
mov rcx, rbx
call fcn.1400d7280
mov rcx, qword [rsp + 0x58]
test rcx, rcx
jne 0x14000d64f
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
mov r8d, r12d
lea rdx, [0x14015af80]
lea rcx, [rbp - 0x50]
call fcn.140012d30
mov rax, qword [rdi]
lea rdx, [rbp - 0x50]
mov rcx, rdi
call qword [rax + RegisterTypeLib]
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000d625
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000d636
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000de3f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000de3f
mov rax, qword [rcx]
lea r8, [rsp + 0x50]
lea rdx, str._D_3
call qword [rax]
mov ebx, eax
cmp qword [rsp + 0x50], 0
jne 0x14000d6d6
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
mov r8d, ebx
lea rdx, str.runJSFunction_QueryInterface__d
lea rcx, [rbp - 0x70]
call fcn.140012d30
mov rax, qword [rdi]
lea rdx, [rbp - 0x70]
mov rcx, rdi
call qword [rax + RegisterTypeLib]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000d6c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000d6d1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000d636
mov qword [rsp + 0x60], r14
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
call qword [rax + 0x38]
mov ebx, eax
cmp qword [rsp + 0x60], 0
jne 0x14000d772
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
mov r8d, ebx
lea rdx, str.runJSFunction_get_Script__d
lea rcx, [rbp - 0x58]
call fcn.140012d30
mov rax, qword [rdi]
lea rdx, [rbp - 0x58]
mov rcx, rdi
call qword [rax + RegisterTypeLib]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000d74b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14000d75c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000d76d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000d636
mov rcx, qword [rsi]
test rcx, rcx
jne 0x14000d781
mov qword [rsp + 0x68], r14
jmp 0x14000d79c
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x14000d79c
mov ecx, 0x8007000e
call fcn.140001920
nop
mov dword [rsp + 0x78], r14d
mov r11d, dword [0x1401ddd80]
lea ecx, [r11 + 2]
lea eax, [r11 + 1]
imul ecx, eax
imul ecx, r11d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 8
jne 0x14000d802
mov r8d, r14d
lea r9, [rbp + 0x260]
mov r10d, r11d
nop
lea ecx, [r11 + r8]
mov eax, r10d
cdq
idiv ecx
mov dword [r9], edx
inc r8d
dec r10d
lea r9, [r9 + 4]
movsxd rax, r8d
cmp rax, 0xcc
jb 0x14000d7e0
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x800
mov ebx, 1
mov r9d, ebx
lea r8, [rsp + 0x68]
lea rdx, [0x140151718]
call qword [rax + 0x28]
mov esi, eax
test eax, eax
jns 0x14000dbc6
mov r8d, dword [0x1401ddd80]
lea r9d, [r8 + 1]
mov ecx, r9d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 5
jne 0x14000d892
test r8d, r8d
je 0x14000d888
dec r8d
je 0x14000d87f
mov dword [0x1401ddd80], r9d
jmp 0x14000d892
mov dword [0x1401ddd80], r14d
jmp 0x14000d892
mov dword [0x1401ddd80], 2
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
mov r8d, esi
lea rdx, str.runJSFunction_GetIDsOfNames__d
lea rcx, [rbp - 0x78]
call fcn.140012d30
mov eax, dword [0x1401ddd80]
mov r8d, eax
imul r8d, eax
imul r8d, eax
mov eax, 0x30c30c31
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub r8d, edx
cmp r8d, 5
jne 0x14000d90e
lea ecx, [r8 - 1]
call fcn.1400d7a58
mov rbx, rax
call fcn.1400d7b94
mov dword [rbx], eax
mov dword [0x1401ddd80], eax
mov rcx, rbx
call fcn.1400d7280
cmp esi, 0x80020006
jne 0x14000dacb
mov rbx, qword [rsp + 0x68]
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
test rbx, rbx
je 0x14000d97c
test rbx, 0xffffffffffff0000
jne 0x14000d966
movzx ebx, bx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14000d98f
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140002a60
jmp 0x14000d98f
mov rax, r15
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x14000d970
jmp 0x14000d97f
mov eax, r14d
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140002770
nop
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x70], rbx
lea r8, [0x14015ad44]
test r8, 0xffffffffffff0000
jne 0x14000d9df
movzx ebx, r8w
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14000da4f
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140002a60
jmp 0x14000da4f
mov r12d, dword [rbx - 0x10]
mov rsi, r8
sub rsi, rbx
sar rsi, 1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
dec eax
or eax, ecx
jge 0x14000da18
mov edx, 1
lea rcx, [rsp + 0x70]
call fcn.140002860
mov rbx, qword [rsp + 0x70]
lea r8, [0x14015ad44]
movsxd rdx, dword [rbx - 0xc]
mov r9d, 2
mov rcx, rbx
add rdx, rdx
cmp rsi, r12
ja 0x14000da38
lea r8, [rbx + rsi*2]
call fcn.1400d7ac4
jmp 0x14000da3d
call fcn.1400d7bc0
cmp dword [rbx - 0xc], 1
jl 0x14000dac0
mov dword [rbx - 0x10], 1
mov word [rbx + 2], r14w
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x18]
call fcn.1400109e0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.1400114a0
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000da8c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000daa6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000dacb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14000dacb
mov ecx, 0x80070057
call fcn.140001920
nop
mov rax, qword [rdi]
lea rdx, [rbp - 0x78]
mov rcx, rdi
call qword [rax + RegisterTypeLib]
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 5
jne 0x14000db7a
mov esi, r14d
lea rdi, [rbp + 0x590]
nop dword [rax + rax]
mov r9d, r14d
lea ebx, [r9 + 1]
lea ecx, [rsi + 1]
mov eax, r8d
cdq
idiv ecx
mov ecx, edx
mov eax, r8d
sub eax, esi
imul ecx, eax
mov eax, r8d
cdq
idiv ebx
add ecx, eax
sub ecx, r9d
mov dword [rdi], ecx
mov edx, ecx
lea rcx, [0x14015ad54]
call fcn.1400d7c60
mov r9d, ebx
add rdi, 4
cmp ebx, 0x19
jge 0x14000db6a
mov r8d, dword [0x1401ddd80]
jmp 0x14000db23
inc esi
cmp esi, 0x15
jge 0x14000db7a
mov r8d, dword [0x1401ddd80]
jmp 0x14000db20
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000db93
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14000dbb0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000dbc1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000d636
xor eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x38], ebx
mov eax, 0x18
mul rbx
cmovo rax, r15
mov rcx, rax
call fcn.1400d68e8
mov qword [rbp - 0x48], rax
mov dword [rbp - 0x34], r14d
mov rcx, qword [r13]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, rax
mov rax, qword [rbp - 0x48]
mov qword [rax + 8], rcx
mov ecx, 8
mov rax, qword [rbp - 0x48]
mov word [rax], cx
xor eax, eax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x30]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
mov dword [rbp - 0x60], 0xffffffff
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x38], rdx
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x30], rdx
lea rdx, [rbp - 0x48]
mov qword [rsp + 0x28], rdx
mov word [rsp + 0x20], bx
xor r9d, r9d
lea r8, [0x140151718]
mov edx, dword [rsp + 0x78]
call qword [rax + 0x30]
mov ebx, eax
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
sub ecx, eax
cmp ecx, 1
jne 0x14000dd04
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x141
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1400d68e8
mov rcx, rax
call fcn.1400d834c
mov rcx, qword [rbp - 0x48]
call fcn.1400d834c
test ebx, ebx
jns 0x14000dda9
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
mov r8d, ebx
lea rdx, str.runJSFunction_Invoke__d
lea rcx, [rbp - 0x68]
call fcn.140012d30
mov rax, qword [rdi]
lea rdx, [rbp - 0x68]
mov rcx, rdi
call qword [rax + RegisterTypeLib]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000dd6b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp - 0x30]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14000dd93
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000dda4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000d636
mov r12b, 1
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0xd
jne 0x14000de01
lea rcx, [rbp + 0x40]
nop dword [rax]
mov eax, dword [rcx]
imul eax, eax, 0x65
add r8d, eax
inc r14d
lea rcx, [rcx + 4]
movsxd rax, r14d
cmp rax, 0x218
jb 0x14000dde0
mov dword [0x1401ddd80], r8d
lea rcx, [rbp - 0x30]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14000de29
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000de3a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14000d551
xor r12b, r12b
mov rdx, qword [r13]
sub rdx, 0x18
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000de5b
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
movzx eax, r12b
mov rcx, qword [rbp + 0xdd0]
xor rcx, rsp
call fcn.1400d72a0
mov rbx, qword [rsp + 0xf38]
add rsp, 0xee0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret